last executing test programs: 2m3.492115314s ago: executing program 3 (id=400): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x80000) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(0x0, 0x0, 0x0) fcntl$lock(r4, 0x410, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0, 0x3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000040}, 0x4004) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x4000000, 0x4008800}, 0x8000) 2m2.978396427s ago: executing program 0 (id=402): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000202030000000000000000000a0000173c0002"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) socket(0x2c, 0x3, 0x100) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=&(0x7f0000000340)}}) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) unshare(0x100000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getdents64(r4, 0x0, 0x0) (async) pwrite64(r2, 0x0, 0x0, 0xc17) 2m2.638252023s ago: executing program 4 (id=405): socket(0x10, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000021000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m2.638007783s ago: executing program 3 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="940000001000030400ff00000003000000000000", @ANYRES32=0x0, @ANYBLOB="0040000040000000140012800a000100767863616e000000", @ANYRES32=0x0, @ANYBLOB="050011007200000040003480140035006361696630000000001000000000000014003500766c616e30000000000000000000000014003500766c616e310000000000000000000000050010"], 0x94}}, 0x0) 2m2.526522797s ago: executing program 0 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000008c0)={{}, 'port1\x00', 0x10, 0x401, 0x0, 0x5, 0x4, 0xa, 0x101, 0x0, 0x2, 0x2a}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b37ae835f7bb904b8194489a49d4ec6b27434c59d432b232922faf3ce0f49f6a974bedbe3c64d8492b262f7625405c64f488431dc2686367b051485b41b7338f28a39c81107f423856ccfc232f20b571c8440ef8889a344e64fca4c6019a2ad18ebf50f2171e64864822df607627c06d6826e329fcbcc2e979b1717cb0961ad299994a48d8257a7b1b01cae345026b22607aa4755a310f987a4c4f5600c4d4d42eaa722df1455a731a", @ANYRES8=r3], 0x4c}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000240)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '{.'}}, 0x23) 2m1.984202421s ago: executing program 0 (id=409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000000000000000000012000104206558"], 0xfdef) 2m1.717772209s ago: executing program 1 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffffff7f}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m1.68267543s ago: executing program 3 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)=""/228, &(0x7f0000000040)=0xe4) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x1a, '\x00', @buffer={"5757577095287f4cea7575980d0a10352180d68cf337ecf338c59363fdc85986", 0x20}, 0xffff}, {0x42, '\x00', @data=0x8, 0xffff}, {0x37, '\x00', @st={0x4, [{0x2}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0x400}, {0x3, @uvalue=0xfffffffffffffffc}]}, 0x80000}, {0x11, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x80000001}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x7a}, {0x1, @uvalue=0x9}]}, 0x4}]}) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/233, 0xffffffffffffff25}], 0x2, 0x5, 0xffffffff) 2m1.071551573s ago: executing program 1 (id=412): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098885, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0xfffffffffffffea6) sendto$inet6(r0, &(0x7f0000000000), 0x3000, 0x0, 0x0, 0x47bb) 2m0.910660815s ago: executing program 1 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000500000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 2m0.799439742s ago: executing program 2 (id=414): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x83, 0x71) openat(r0, &(0x7f0000000080)='./file0\x00', 0x140, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="000a06", @ANYBLOB="d71f7c28c3816cb8cfba9148548aaf1741b76999a8d4fa36e0a15e0dbc26f7adf8b2df3b3bb5c9f55d610345cbc15bbf76db82e84c5e837938f220cbdcc88bef9bac82f7cbad6050146a686602c4edcea71b6324df5e465d05c0ade06c5d752ceb68453f447196363fc0d00adff8286ed7465c20f0ddbe060715ea909f9ae4c076eecc6c72f7ce56f3858a29c637e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000e1f0000004d5e"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000d00)={0x14, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0xa0363159}}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x17, 0x3d, "3ce55b0aaf74692fdb7fb1ef5210ef3582a56b28070f8f32d1c0ce5f139ce1e0b0e6e1f715043ccf5f76db970b175334936efe259ae8e0441bc5f54b2a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x1, '6'}, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x1, '\x00'}, 0x0, 0x0}) 2m0.790221924s ago: executing program 4 (id=415): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x1, {0x110a}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x500}], 0x1) (fail_nth: 1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x428}}, 0x40088) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) 2m0.647530308s ago: executing program 3 (id=416): io_setup(0x1, &(0x7f0000000200)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101}}}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0046ab740000ea33ca5af3f51d4212baf7e64ad41bb5217fe05717251a7364c551a6801eb8ae0abfaa610b4ad6177b56e2d4b442d599c9b696b34a7f8b4875719695e4f1c5d9bc36ae8557e9619b5c4bbe7b66a44ddfb82fe4a5bd768f340769df990d80649e3e1b36c396539230ede3b004c0cc14140de421b59c1c118f05decd4ceae3de80815f07460fefb344d456e414f20eef6308001dd4bf1ed27393d77e8f84704c0bef", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000090000000038b3692bb1812ea65242edf908660783cd286de489f15500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2m0.614809842s ago: executing program 0 (id=417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x40, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x816d, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x880}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000700000000000000000000000a0030"], 0xb8}}, 0x0) 2m0.22095695s ago: executing program 1 (id=418): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r0 = syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000019340)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000000)={{r1, r2, 0x0, [0x1414b6b9, 0x10000]}, {r3, r4, 0x4, [0xff, 0xfc000000]}, 0x2, [0x4, 0x8]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r6, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) fsopen(&(0x7f0000000180)='proc\x00', 0x1) 2m0.115944938s ago: executing program 4 (id=419): socket(0x10, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000022000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m0.03521444s ago: executing program 0 (id=420): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000739000/0x4000)=nil, 0x4000}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/59, 0x318000, 0x1000, 0x1, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$TCXONC(r2, 0x540a, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r6, 0x0, 0xfffa83) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x1083, 0x20000a2e, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf30000001400010069"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) move_pages(0x0, 0x2, &(0x7f0000000400)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1], &(0x7f0000001680), 0x0) 1m59.779646561s ago: executing program 1 (id=421): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000100)='\x00', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="55000000ef000000bf"]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0xec5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00dbdf251c1420030002c80b001500"/28], 0x1c}}, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000000000)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x600) 1m59.680154417s ago: executing program 2 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000fcff00000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 1m59.455817219s ago: executing program 2 (id=423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000050000000090a010400000000000000000700006008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0c00098008000140ffffffff0800034000000110"], 0x98}}, 0x20050800) 1m58.954309258s ago: executing program 4 (id=424): syz_open_dev$vim2m(0x0, 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @dev={0xac, 0x14, 0x14, 0x39}}, @echo_reply={0xe0, 0x0, 0x0, 0x66}}}}}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x30, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xf28a, 0x400, 0x3, 0x2da}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x20, 0x0, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46a1, 0x20, 0x1, 0x2a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}, 0xffffffffffffffff}], 0x4, &(0x7f0000001880)={0x2e, 0x8fc87e2c80dc2f21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0xfea, 0x0, &(0x7f0000000880)=@buf_max_buf="4feee5e107546de8479ec1116172bcebb5bac4321645c8c6dd01f86f32fa68f10ec2d6914191d8c3ef8ace84376b770364f1e720a21b0349fc71279686640bfd9cdd03b72dfcc4f1b959ef9c32a3c6094f8e2394dcb1be9f4ac4dac3ba6fcfe6171b1f3282ab800c12f1aebdb149f4f8f6f877af101b6f4110889002b9960ed7fe38c6957464d851979aef59c59e588e539c9dfecc835b2236907b5f38eac7e44d06e08643ce0de172b2fbbea91e187f827197889d2f60262990a58f1c1710734ab75eda7aca7b5d19aefe50ceaddf6678e3472649ddf5a60edbc215be30485c8281e56f7d7e8f053281097c7e9c314d8b05c16195a34d0e45b4ff171ade70ffea1b094445799f295b4a66fd3787aea7a2e2282eceaca85627f63ec4d798d26656f171830cdfebf8f9e9667239299efcbe09379bbda4e22e7fb07cae21f9c73aee1c3b25b146ba948691401f547767ef40afdc806609bedce384ddbae71ae5c48d5fdba90f103088bda7171aee83b658292dca422593171c7e7b7c50605bb8b7bfc9386a85d553a698dbdb6ee0b6899c241a4ea8dfb13600dd7dbb5ff912dfec2224ffb5e48e0411d37bd269583427de0e5f2883eff6e1315ec6f15e75a44cddc749993baefd73dd978c83b963f9288574cf81a9da1f0ba7e2870f1006543e0a6fdc0b3cde0d21d7b32420681a73d0a80a4030c12881c5be6e02ce12deb0447ee5111af6b597098bfae218fc18a5d1133842242000aa685caa05f56bfa5bd0289f77178190cf34a45ad21e579fb091ff59205e1a25453a6299ad8dcdc0e9daf2a160f137f97c304d751e2ce7d3e1e99ed074408a1c53bbeb9c42f4c89bf06bb7de2690e4d4d3f2067ba4963f2ca4059b7f5192f2eed7d60e89b51649155774c41a00be0bd3fe5707a74cffb4bbd75e1da8a7e9da86891e4f18c07162d3ecb4267a27d27ca4a4a3f05acd1aee02c01c2f7a46b9db66a22e4ed5ad3f8cd9281b3ef92d92aa2f7003f3230d83a2a76a9c43d53ef9a9561d3f8465288e3c4f72d026bd3b64f60eb371a341d1e0d5ae5ee392a70ddad7bf392f57672e835852e1581eafeac77490356338716ac17730f62fc7f07d9ab82515bd331ca071341428181bcb961c9fea7c08820aa855c418dac2490ce79e615e857543801ce7dc88e70c14803f90db99b54a6ce3a3290c69f13665f863c287da468a7501743647c644e1d3bad9b88503bc7c173502402b4f4a970d9906545e917d2a1afcb9686dd8ff0b5c8cf1d49ed1dad0d0f7f0285073b35432ce519b7cafb62cd6b723fb21ad83124c39e3cc9b20401da4e158e0c6d93adcf5d557a838856380867438870208e785a98e56f0c8ec972aecf5ecc82e108f80456cc370b83d468c816fa05de3fe60215c0c0da87e7faac3d75f41976ff3d90ef4400be444a844b44e20fd30d9e88d4b06b7a7c3be66c34b03d33a98dc8d7ac0677ed76eb66b7267c2fe62c8371c7cd3f71089b948b599f255c09f5ad52d3cad8deb4d3ff6bff623ea091ab85c1857e5322517247d6e7f5d2867a184025059901755b101b95d5f73b96fb2b507bcae701c761359771ee4d1855819714eec98571915dff9b9306c18261c2a6d3b8720723785b088e42dc52284ec1b10081e6afe647deb0cf9e30c3c697d85bde8394da6f693c08894f9e004a1f5e40bce039621e2c1796de9eedc2cbae7d5217bb645f2ba1b653b7d0c786afc2b0a78b3a60e8204fa2048dea0c2a5b4a10b36dd8684549b452bce44b6944d33ce6f5419bb5c7dc903f5e82e089ef9db97d1a36a5ba7ff891c128889e84b340e1b3bec339a04bcc64c71832a61951120b112c77204a9b9b99410819d266e658bcf82056fa1b8c0a83509330f66f51d587d4fdba947fe636bc850444eaa309965bbeaf066bafce98c4000efe4b79ed7c557eaf9d7e3a9773f021c2591efc197e523312ae5feec75619910cb7e8cdb18ee26ca4e857605b323b0327ee43538ef23ce72ee86154a6a7e1f2412e76aa309a3a1d3f799ef2b7e7ea40ec6a5af2e79200ca79126da70b29f59554763db845606162b2bd212e46adbbb7aff71a66af361bc270171c54e528bc16fc4cdfa379267b5947850b3b26b0ff5cebe1ab870939ca4ca5baa91dab623ede1a87efbe26b0557c990029ccda9b7add090086f2542da3478977da5379cd5e0c44b0dec69d2a946a33df41a1fae4b1c3c396fc18c81070d7941d70285ee257d05c8bfe4b3efd52b2d6503d0c215ccb6de88b3ba2acc7d9915bece8356f3a377ac95ec925e7eb962ecc4d9f40502a13304bf56a802a1aafff0c68651a410f51670d2900357839648ec684662d2e385eb535981187f31d88d809f7cc224929f70f0293edb5922f83e87ce07ddfa7c8f9643a18166c7cc704425d648f27f42d32fa5c7240423e7e8d3c2af4ed54a8c29b2b3cd6548ad09ae208779186a6afd80bab53330debf90108c2a6388923886d83c4953f1921dbb7e82c69c96bab116e8fa01c8a227f5d9112261b295f737d04ae37576a15eff8461e963989399beb06a311bba7ee59bdf2ab056f34ec297f2b73b1c4257865766feb4be57e4039d23a86c651bd932664023124457c75b562034514b497e5431e7be448047215f4d8c19c29e0d9051b306644e3d7f1a7683df10b6ff357d38c66c9af54e205eddb1cc4f12b72e20ebb92353bdc662cb300a5da505980ef9fe69e253184d5c09ff227b198f1e63bf7635d7af27682ae67a25905af0b43ed36e74bedee32fee8904c687bd908528581f3e8d235b3efdb9f169bf44ef5536b6e59c080b19fda7ae3b4aac263a7e315941619b30796e0cf01d1e8daeb2399a6968cde35f837ab078d2fcb7a6fd4f30be959cc15d52795f8cc13930bbf6c1a777d0a015e6b8b4888c05aad62aa02ad95125b4059a8c1435ab7703996ce4308d61e8d9fd9c52b1c7b99c1523b326ffe93c8e19be1c922c0f0a966eac19772b80d44ac503e5ed6eeee8a1127a0d15f9ca4461bf363e87d482e4ee09043aea52a77db6948e3adce6bb25511258bfd4020d22e70a6fb33d33433b7d8bfce88c4c26efac6dc131ccfe9e65501e30daaace57f3adee3f0d817e502ccc15ef31f817d11de943b370c4e637ae3c6dc9070785a1d032ed2e21cba708e28f0668bbc14fdcd05ac1e88c1422c44e5e015fd5b4c2e63a0e683350f781440a801ed0977994004ad8723928b118eacf15afbdfe9edb7775c38bc621e651828e734f8c4dea9ed09786610d058228c2520c030c6060bee5ab9ab888e8a868035ed792d489dd6d8f22ff2f632521062c9f157584542118616b2079ea89c7b53959f122ee60fc7af17c5a4a9740e22fc2c9bcad56a71a3fcda7c924d62647a004e620725c5d838b9b2944e6201fa220671ba29f733555a4d18c1996be3e91d0347dbc43ca93db175993794d092371941746d8a134694ea7265956ed90d37524c6f9bb70538226f34dac2494ac838dc89fb079582eb1cf06a823d0efa802ae4400ad311c7d80073c03d9979f882370eb05e5945b567a72ef6fc78a7e14a55377edf559bba7656dc3bbe4a4f0bc4c9d538b442dfb385fb6dc537780af226191dcff65f5a50aadb3dcafe5e9826aa951d5db8654fa0d1cd312f7efd51385684480e2b3bbcb47fcb59675cb48a3c4a2e650163ea884b80f080fc7d1839a60dc942ef749bea323378ebb82c93903d96d04782e0c56a8c8ebaf2d3986181ca7eaba42bc8403ec684d68c1b79e48de0a8fdad02c0a91f79dfd885cddc1de4980ad34d7cbdf1f3c0b5866e205ba66163311f05889d193e0f7f192c454e8ad38699c50809faeb585bbab94cf7b701e5ad27e42640c680c357e687cf138ae6c5bd2345710ad8eb97e92180477835eb75f2a85e9696951c08adb5282145feae40752c556b32683719044e2c699df1c344bafe1a4f1dc3e148a965133c5b668d3e3fd3dcaee7f57591d2c317788f93dba3320e647c98a3cd3bfad113254ade2d218a3355059b76a8dbdb5ce6bafe252b1bea09a8b09ce40b51aa1fcbe9bd183347bf3bc242b5b965d791b32a308599f44bcc311f57ffe0cf97ba2c11306314655ff25c0bf8606a15ce2f5b28a7fc4bfe825222a137c94c9870f4cc80c4e6d5257d0c7b3f7de2e049c65807b6a187edcf0416fa2b46077e055a4912c71c84e2634509ffbc62ab27af48240f36c8340ae3245784ccc134a5b5c0b2cd6eb61764594f5801a1e464b2ddb699301f3171a7c948d7b7554bf2b4f2d2db4e8bdd6049cf5759ebb551ee726958a1db669dca8d938ee2bc35a6efafe25a6f9928aecf23609c51e24056aeb98ae670cbd458072dbfd80668b066a9ff9b088cefc371fabca2d6235cf2b4777bb58503fb44e352e44815b3b1320563f4bc6e33727bedb766cd0c664f41179fe28fc5c7f0fbf7a807573f0c8910faf6f899295d8d10ef67fd94f661e54edf4e4f3b10329559ec3ec1bc8bfa977959a0d5b9b69fec9c4826f9ad36e8e66aaf6305094ce0b025f8119b5f51b73ae040e1cd7885575888b31e90276501e04d1abaa358478db1fe8f392872a0dbea473f5360923bc6def20a50a59cada2f338f88974d47c5599597a300be239f845bea4a50dc2478661b5ed0d8f8c6153ab04c1f9f4b8c38861bcac3906ab328878e14deef7b068c7cb07bbdc45511a28a7c44fa1caf84e0528e61065d1090dc43618912d3f7ce2ccf88ae7d2fde37cfb5be9bb3f8597843a1d374ba7e622a57e71e389499374633a3c2c9ad20134cd32092c746dab1dc0ac6fec09ef7abb77fa808e5eeb712b292adb3d576e25459712e92808f06c9a6bfc74f5908343a0d704d651e7830b7b35e145baa4ba5bf336bf4fad04d059b1851376a78a7d421587308196f7936e66a36caca9e31044d31e9d897d95fa57950a4871891e4d12dbe39621383d0b7a3b1263aef261939e78750cd7d2a7a9692eb196ff86fe564f27eec0443af24511e5d948e65e305f5588feb527c39194fed42a5f4d033ddacc93a35b8ee10c400f4ef1e65f7e319e9c4bb53234db8c759e3fd4680e834bc6cf79a8aef568f8e5579bbb1b63ef0d84bf10511f661a7d43fae60612ec3a0c8f9c36bb245097ec70326872c2b5ea9785773d8c8133d3c1fba2fc263ea0d9e7187590178977b00c2450057d69c51ebb2d40170d6a4ad73d1866679be4ff2334751dfd4c0fd34fc1f89b75175bbfe6f05d3619d433f78ad95348808f2136391d890261a6f7f15500f99cb7e5078f646ef13a5e7bc671a926da13342ea458a441ea7783ef97be74648e9370f2976960f10be2194dc8e4f0768c369a7da7cd8b2123502a730c7631838d532fbeae2347adf7f37600c53af39e074e6ed6896ede7fdbbeb730299568a55f0d842b72d7f011cdf231a583a899abbfa856ccb3e4eeb75a013d279f79742efd07ca06b36a18d3e1537d1cabd7fdf26db9d3e15464ee1f0976f908a6de1acf8b16427c77d8c9479c0bfd9a66392291d128f5f0d47f62139e20a9b5f57271c2c9bc0bc3f1465cb63c798fc8bf4db761d72cae1aa64fe5748c365ddb3372dc046c954934947fd70622588af897e98e7f57801faf2482fb9ed67fdb88561780c46cd7abcacb5dc11b2ebdcfa3b01475c2bc075d5454e39943e9bcb248fc44d08497f53c5f09d1a00267300ea6c8cfb774d128ff6d679d09f434bcc91e142adc8382077c7bc36262357d1686e9c2a97b01dd3ee8333555bdb4f00d7ab6926c2286fc6df1cb832341fec4becd44c9a73b62fcf417ccacfbf"}}, &(0x7f0000001900)) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = openat$sysfs(0xffffff9c, &(0x7f00000005c0)='/sys/power/freeze_filesystems', 0x42242, 0x73) write$FUSE_DIRENT(r2, &(0x7f0000003080)={0xf8, 0x0, 0x0, [{0x3, 0x5, 0x12, 0x88, '/dev/input/event#\x00'}, {0x4, 0xe, 0x0, 0x8}, {0x1, 0x3, 0xa, 0xe, '/dev/dsp1\x00'}, {0x5, 0x2, 0x1, 0x8, '['}, {0x4, 0x7, 0x12, 0xd, '/dev/input/event#\x00'}, {0x6, 0xfffffffffffff001, 0xa, 0x100, '/dev/dsp1\x00'}]}, 0xf8) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2000000000007cb2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x55}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) sendmsg$NFT_MSG_GETFLOWTABLE(r3, 0x0, 0x800) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40090) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) 1m58.792417128s ago: executing program 2 (id=425): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff0000080000000009000000000000000700000800000000090000"], 0x178) socket$inet6_sctp(0xa, 0x1, 0x84) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) r7 = socket(0x10, 0x3, 0x81c) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r7, 0x0, 0xc080) (async) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) (async) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x6, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) (async) r9 = socket$kcm(0x10, 0x2, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x1c}}, 0x40) (async) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) 1m58.697221905s ago: executing program 1 (id=426): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2500) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3f, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0xc, "df32d6a743bfaf1fb7af"}, {0x5, 0x9, "7fd356cec23675"}, {0x6, 0x2}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000d40)=0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2c, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0x2c}}, 0x0) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000000c0)) r5 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$MRT6_PIM(r7, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0x4) r8 = dup(r6) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x2022cc280, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) io_uring_enter(r4, 0x4f50, 0x1377, 0x82, &(0x7f0000000240)={[0x101]}, 0x8) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f00000000c0)={0x40000039}) 1m57.537681392s ago: executing program 4 (id=427): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003"]}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="646d9f92896a045490170039e224a82684c6f4b720394010b7cc2cc1f80d230a8694ac503ab19d02635f37e3740a385cfb146085b25e45211c92a0240fa8b4cf628b121dc2c0c977f2d9de46e668e80279a1aa63eed84bb5e9266447900cb01148bd4dffe926e62254ef3d76928508665e4aaab9da877e58d48b13a67ec8b3ba793f7df1a3c9297495c81d0e762cd9f97b3563344443e7c24937f913ba6095902847e8c2c7be7ffe9d6f00f98e20e842465cc276851d83d2cb9fd4c3d47f82a18925e07082661dd92a69d168eba59605bda6518b542153fce485", @ANYRESHEX=r0, @ANYBLOB="733c40def2b34b733909c6f7b2a826866f610ddce54a0067d6adbb4d", @ANYRES8=0x0, @ANYBLOB="5e068802d4d5da824c2807df9c50f3eb9fe8fdd4ce8cbf731e0a72da2b20910edcdebf92368d749a96ae6547c06a196bb6725d940ad32c64d8392b719b590d99d4f8e134eaa859d8397a944d012d6b7a6261803b84580cad2d22a7be591b80e7471abdb59eb87f043afbb993768d2036e8dbed6f0bbb3d3e8072d5dbdc375de29ac3cc77ba3ce4d503deadc4cd77feee6b250b14699367de9f7ad7", @ANYBLOB="c79b947ac06729c66e1b28ac7ba943e331f82b49772383547a011f9a5f02c2a85f13b5e96c824591dce84f01e80add69d44cc73ba4e5389e8443c526ea43583986cab4fd0709b831020a527ee96d4dd84d04cf203ad49b57d3aa032104080ead3f05edfc74cead5d8d8d84f2d97fc696ecf2b7631af1683c2a7fa3176bf0cdbccbd67827cc62a8ef422819ec26", @ANYRES64=r1, @ANYRES8=r0, @ANYRES64=r1], 0x48}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m57.259997527s ago: executing program 2 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}, 0x1, 0xf000000}, 0x0) 1m56.848038016s ago: executing program 2 (id=429): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32], 0x1c}}, 0x200040c4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x2) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x5, 0x0, 0x0, 0x10002, 0x0, 0x7fffffffffffffff, 0x1000000a, 0x9}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) getpid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/183, 0xb7}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000700)=""/217, 0xf4}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/62, 0xfe7d}], 0x6, &(0x7f0000000480)}, 0x2160) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) ftruncate(r0, 0xc17a) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x40000}, &(0x7f00000000c0)=0x3, &(0x7f0000000100), 0x7, 0x3, 0x5, 0x3, 0xb, 0x74a0}}], 0x58}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="8e464729100d7ab50add820100010059b492010000002b50"], 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1ff, 0x0, 0x6, 0x802, 0x5, 0x80000000, 0x8, 0xfb}, 0x20) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) 1m56.819496343s ago: executing program 0 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="940000001000030400ff00000003000000000000", @ANYRES32=0x0, @ANYBLOB="0040000040000000140012800a000100767863616e000000", @ANYRES32=0x0, @ANYBLOB="050011007200000040003480140035006361696630000000000001000000000014003500766c616e30000000000000000000000014003500766c616e310000000000000000000000050010"], 0x94}}, 0x0) 1m56.640068716s ago: executing program 4 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0x3, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x8, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0xfffffffd, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x8, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0x20000c9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5cd, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0x1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9d6, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x7, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700a1ffffff0000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m56.628662858s ago: executing program 3 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffffffef}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m56.212261272s ago: executing program 3 (id=433): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c004}, 0x40804) fsopen(&(0x7f00000000c0)='9p\x00', 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x27, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 32 (id=426): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2500) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3f, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0xc, "df32d6a743bfaf1fb7af"}, {0x5, 0x9, "7fd356cec23675"}, {0x6, 0x2}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000d40)=0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2c, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0x2c}}, 0x0) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000000c0)) r5 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$MRT6_PIM(r7, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0x4) r8 = dup(r6) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x2022cc280, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) io_uring_enter(r4, 0x4f50, 0x1377, 0x82, &(0x7f0000000240)={[0x101]}, 0x8) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f00000000c0)={0x40000039}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 72.306609][ T5606] cgroup: Unknown subsys name 'net' [ 72.403999][ T5606] cgroup: Unknown subsys name 'cpuset' [ 72.407217][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.075706][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.292855][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.294298][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.297692][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.298325][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.298722][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.299747][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.307758][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.310787][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.315918][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.325844][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.328861][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.330366][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.330825][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.331763][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.334548][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.469880][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.474595][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.476240][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.478854][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.479330][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.479714][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.482833][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.486028][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.505812][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.516488][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.560409][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.560513][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.560882][ T5629] bridge_slave_0: entered allmulticast mode [ 77.562794][ T5629] bridge_slave_0: entered promiscuous mode [ 77.607395][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.607493][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.607875][ T5630] bridge_slave_0: entered allmulticast mode [ 77.609488][ T5630] bridge_slave_0: entered promiscuous mode [ 77.636530][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.636848][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.636968][ T5629] bridge_slave_1: entered allmulticast mode [ 77.639339][ T5629] bridge_slave_1: entered promiscuous mode [ 77.684479][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.684622][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.684750][ T5630] bridge_slave_1: entered allmulticast mode [ 77.686849][ T5630] bridge_slave_1: entered promiscuous mode [ 77.728441][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.728537][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.728895][ T5628] bridge_slave_0: entered allmulticast mode [ 77.730536][ T5628] bridge_slave_0: entered promiscuous mode [ 77.734003][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.734135][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.734562][ T5628] bridge_slave_1: entered allmulticast mode [ 77.736407][ T5628] bridge_slave_1: entered promiscuous mode [ 77.782022][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.785465][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.844024][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.844123][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.844231][ T5635] bridge_slave_0: entered allmulticast mode [ 77.845775][ T5635] bridge_slave_0: entered promiscuous mode [ 77.851370][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.855678][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.871586][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.871692][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.872146][ T5636] bridge_slave_0: entered allmulticast mode [ 77.875486][ T5636] bridge_slave_0: entered promiscuous mode [ 77.896274][ T5629] team0: Port device team_slave_0 added [ 77.899532][ T5629] team0: Port device team_slave_1 added [ 77.935116][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.935133][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.935156][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.938318][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.938332][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.938353][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.027616][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.027734][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.028203][ T5635] bridge_slave_1: entered allmulticast mode [ 78.029403][ T5635] bridge_slave_1: entered promiscuous mode [ 78.034544][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.037648][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.037839][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.037940][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.038086][ T5636] bridge_slave_1: entered allmulticast mode [ 78.040922][ T5636] bridge_slave_1: entered promiscuous mode [ 78.069003][ T5629] hsr_slave_0: entered promiscuous mode [ 78.070688][ T5629] hsr_slave_1: entered promiscuous mode [ 78.189207][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.192615][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.196006][ T5628] team0: Port device team_slave_0 added [ 78.214357][ T5630] team0: Port device team_slave_0 added [ 78.218062][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.221006][ T5628] team0: Port device team_slave_1 added [ 78.232994][ T5630] team0: Port device team_slave_1 added [ 78.275711][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.323587][ T5635] team0: Port device team_slave_0 added [ 78.324407][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.324421][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.324454][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.327413][ T5635] team0: Port device team_slave_1 added [ 78.334921][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.334942][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.334962][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.362117][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.362133][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.362154][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.390194][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.390211][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.390238][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.397339][ T5620] Bluetooth: hci1: command tx timeout [ 78.417829][ T5636] team0: Port device team_slave_0 added [ 78.422416][ T5636] team0: Port device team_slave_1 added [ 78.423598][ T5620] Bluetooth: hci0: command tx timeout [ 78.423831][ T5620] Bluetooth: hci2: command tx timeout [ 78.450366][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.450383][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.450404][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.518761][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.518778][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.518799][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.552378][ T5628] hsr_slave_0: entered promiscuous mode [ 78.553516][ T5628] hsr_slave_1: entered promiscuous mode [ 78.554330][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 78.554410][ T5628] Cannot create hsr debugfs directory [ 78.555119][ T5623] Bluetooth: hci4: command tx timeout [ 78.558984][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.558998][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.559027][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.641053][ T5623] Bluetooth: hci3: command tx timeout [ 78.658533][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.658549][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.658570][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.733551][ T5630] hsr_slave_0: entered promiscuous mode [ 78.734882][ T5630] hsr_slave_1: entered promiscuous mode [ 78.735623][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 78.735641][ T5630] Cannot create hsr debugfs directory [ 78.847836][ T5636] hsr_slave_0: entered promiscuous mode [ 78.848522][ T5636] hsr_slave_1: entered promiscuous mode [ 78.849012][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 78.849026][ T5636] Cannot create hsr debugfs directory [ 78.874511][ T5635] hsr_slave_0: entered promiscuous mode [ 78.875239][ T5635] hsr_slave_1: entered promiscuous mode [ 78.875723][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 78.875736][ T5635] Cannot create hsr debugfs directory [ 79.215822][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.223317][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.224625][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.232671][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.276617][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.279513][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.322611][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.325885][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.402243][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.408491][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.409373][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.417377][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.426230][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.438027][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.438854][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.444272][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.556283][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.562626][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.574166][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.584877][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.586371][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.589206][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.614861][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.618619][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.627802][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.723572][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.744809][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.744900][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.746588][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.749141][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.749850][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.771153][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.801720][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.807089][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.809333][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.809403][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.849143][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.857877][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.955900][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.959706][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.982859][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.986144][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.011387][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.011612][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.015126][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.045333][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.048360][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.103759][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.112889][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.112994][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.158309][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.162896][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.162998][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.202808][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.234723][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.272768][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.289791][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.318884][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.318946][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.345036][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.345100][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.346386][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.346442][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.389053][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.389116][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.471101][ T5623] Bluetooth: hci2: command tx timeout [ 80.471139][ T5623] Bluetooth: hci0: command tx timeout [ 80.471162][ T5623] Bluetooth: hci1: command tx timeout [ 80.506874][ T5629] veth0_vlan: entered promiscuous mode [ 80.538464][ T5629] veth1_vlan: entered promiscuous mode [ 80.557238][ T5630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.582024][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.584144][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.630659][ T5619] Bluetooth: hci4: command tx timeout [ 80.658749][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.678237][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.678332][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.697327][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.710832][ T5619] Bluetooth: hci3: command tx timeout [ 80.726926][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.727046][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.755334][ T5629] veth0_macvtap: entered promiscuous mode [ 80.766156][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.792035][ T5629] veth1_macvtap: entered promiscuous mode [ 80.857595][ T5628] veth0_vlan: entered promiscuous mode [ 80.898087][ T5628] veth1_vlan: entered promiscuous mode [ 80.913110][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.916004][ T5630] veth0_vlan: entered promiscuous mode [ 80.942393][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.967820][ T5630] veth1_vlan: entered promiscuous mode [ 80.977389][ T5636] veth0_vlan: entered promiscuous mode [ 81.039587][ T5636] veth1_vlan: entered promiscuous mode [ 81.114203][ T5628] veth0_macvtap: entered promiscuous mode [ 81.118745][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.121512][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.177124][ T5628] veth1_macvtap: entered promiscuous mode [ 81.207629][ T5630] veth0_macvtap: entered promiscuous mode [ 81.217183][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.219296][ T5636] veth0_macvtap: entered promiscuous mode [ 81.221766][ T3318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.221785][ T3318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.229866][ T5636] veth1_macvtap: entered promiscuous mode [ 81.250943][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.255097][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.312045][ T5630] veth1_macvtap: entered promiscuous mode [ 81.342485][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.371600][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.371623][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.384338][ T1024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384400][ T1024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384446][ T1024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384477][ T1024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384508][ T1024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384538][ T1024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.386879][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.395079][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.406069][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.512490][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561524][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.581005][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.581024][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.701233][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701286][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701323][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701360][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701396][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701432][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701468][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701649][ T5635] veth0_vlan: entered promiscuous mode [ 81.711077][ T5710] ip_tables: iptables: counters copy to user failed while replacing table [ 81.824723][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.824745][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.861671][ T5714] Zero length message leads to an empty skb [ 81.895583][ T5635] veth1_vlan: entered promiscuous mode [ 82.030717][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.030741][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.103505][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.103528][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.301873][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.301896][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.333421][ T5635] veth0_macvtap: entered promiscuous mode [ 82.384787][ T5635] veth1_macvtap: entered promiscuous mode [ 82.446839][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 82.461829][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.461850][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.550603][ T5620] Bluetooth: hci1: command tx timeout [ 82.550615][ T5623] Bluetooth: hci2: command tx timeout [ 82.550792][ T5619] Bluetooth: hci0: command tx timeout [ 82.619473][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.662149][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.710766][ T5619] Bluetooth: hci4: command tx timeout [ 82.790837][ T5619] Bluetooth: hci3: command tx timeout [ 82.810570][ T1010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.810864][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.840104][ T160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.915845][ T5730] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.983729][ T1024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.189501][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.189526][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.362796][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.362813][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.441829][ T5730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.608747][ T5744] Cannot find del_set index 0 as target [ 83.631739][ T2243] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.649825][ T5744] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11'. [ 83.661007][ T5744] 0: renamed from hsr0 (while UP) [ 83.723618][ T5744] 0: entered allmulticast mode [ 83.723644][ T5744] hsr_slave_0: entered allmulticast mode [ 83.723661][ T5744] hsr_slave_1: entered allmulticast mode [ 83.727073][ T5744] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 83.838298][ T2243] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.854546][ T2243] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.854569][ T2243] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.854582][ T2243] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 0 [ 83.854595][ T2243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.862876][ T2243] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.862901][ T2243] usb 3-1: Product: syz [ 83.862913][ T2243] usb 3-1: Manufacturer: syz [ 83.862934][ T2243] usb 3-1: SerialNumber: syz [ 83.896174][ T2243] usb 3-1: config 0 descriptor?? [ 83.972480][ T2243] usb 3-1: selecting invalid altsetting 0 [ 84.005075][ T5744] bond1: Unable to set down delay as MII monitoring is disabled [ 84.108074][ T5744] bond1 (unregistering): Released all slaves [ 84.384462][ T5735] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 84.446355][ T2243] usb 3-1: USB disconnect, device number 2 [ 84.630503][ T5620] Bluetooth: hci1: command tx timeout [ 84.630514][ T5623] Bluetooth: hci2: command tx timeout [ 84.630573][ T5619] Bluetooth: hci0: command tx timeout [ 84.800411][ T5619] Bluetooth: hci4: command tx timeout [ 84.817099][ T5756] mmap: syz.2.13 (5756) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.880988][ T5619] Bluetooth: hci3: command tx timeout [ 84.900198][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.065841][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.093532][ T25] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 85.136280][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.136309][ T25] usb 4-1: Product: syz [ 85.136323][ T25] usb 4-1: Manufacturer: syz [ 85.136337][ T25] usb 4-1: SerialNumber: syz [ 85.169111][ T25] usb 4-1: config 0 descriptor?? [ 85.187629][ T25] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 85.300859][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.429001][ T5754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.442712][ T5754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.471270][ T50] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.472781][ T50] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.472813][ T50] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 85.472833][ T50] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 0 [ 85.472855][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.476769][ T50] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 85.476787][ T50] usb 5-1: Product: syz [ 85.476795][ T50] usb 5-1: Manufacturer: syz [ 85.476803][ T50] usb 5-1: SerialNumber: syz [ 85.561645][ T50] usb 5-1: config 0 descriptor?? [ 85.641231][ T50] usb 5-1: selecting invalid altsetting 0 [ 85.661468][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 85.661520][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 85.693899][ T25] gspca_sunplus: reg_r err -110 [ 86.246594][ T5758] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 86.283883][ T5708] usb 5-1: USB disconnect, device number 2 [ 86.766108][ T5774] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 86.914598][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 86.955837][ T44] cfg80211: failed to load regulatory.db [ 87.239833][ T2243] usb 4-1: USB disconnect, device number 2 [ 87.400143][ T5708] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.551812][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 87.552532][ T5708] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 87.555528][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 87.555560][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 87.565706][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.565733][ T5708] usb 1-1: Product: syz [ 87.565746][ T5708] usb 1-1: Manufacturer: syz [ 87.565760][ T5708] usb 1-1: SerialNumber: syz [ 87.631799][ T5708] usb 1-1: config 0 descriptor?? [ 87.646287][ T5708] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 87.790109][ T2243] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.949546][ T2243] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.949594][ T2243] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 87.976687][ T2243] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 87.976708][ T2243] usb 3-1: config 12 has no interface number 0 [ 87.976734][ T2243] usb 3-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 87.976749][ T2243] usb 3-1: config 12 interface 99 has no altsetting 0 [ 88.019441][ T2243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.019470][ T2243] usb 3-1: Product: syz [ 88.019484][ T2243] usb 3-1: Manufacturer: syz [ 88.019498][ T2243] usb 3-1: SerialNumber: syz [ 88.051605][ T5779] netlink: 144 bytes leftover after parsing attributes in process `syz.0.19'. [ 88.279063][ T5782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.279130][ T5782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.279635][ T5782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.326913][ T5678] usb 1-1: USB disconnect, device number 2 [ 88.886937][ T5798] x_tables: unsorted underflow at hook 1 [ 89.552295][ T5810] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 89.975697][ T2243] usb 3-1: no audio or video endpoints found [ 90.017467][ T2243] usb 3-1: USB disconnect, device number 3 [ 90.611068][ T2243] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 90.666872][ T5828] batman_adv: batadv0: Adding interface: gretap1 [ 90.666891][ T5828] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.666921][ T5828] batman_adv: batadv0: Interface activated: gretap1 [ 90.762241][ T2243] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 90.763639][ T2243] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 90.763670][ T2243] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 90.767401][ T2243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.767428][ T2243] usb 3-1: Product: syz [ 90.767442][ T2243] usb 3-1: Manufacturer: syz [ 90.767457][ T2243] usb 3-1: SerialNumber: syz [ 90.805523][ T5818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.805673][ T5818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.070609][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.071105][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.165636][ T2243] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.165699][ T2243] usb 3-1: MIDIStreaming interface descriptor not found [ 91.165715][ T2243] usb 3-1: too many endpoints [ 91.462007][ T2243] usb 3-1: USB disconnect, device number 4 [ 91.544302][ T5846] fuse: Bad value for 'fd' [ 91.836360][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 91.872419][ T5851] syzkaller0: entered promiscuous mode [ 91.872444][ T5851] syzkaller0: entered allmulticast mode [ 91.892429][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.936595][ T5851] tipc: Started in network mode [ 91.936629][ T5851] tipc: Node identity 46785f9f04b1, cluster identity 4711 [ 91.936828][ T5851] tipc: Enabled bearer , priority 10 [ 91.963885][ T5850] tipc: Resetting bearer [ 92.012437][ T5850] tipc: Disabling bearer [ 93.394515][ T5887] tipc: Failed to obtain node identity [ 93.394540][ T5887] tipc: Enabling of bearer rejected, failed to enable media [ 93.443555][ T5878] syzkaller0: entered promiscuous mode [ 93.443580][ T5878] syzkaller0: entered allmulticast mode [ 93.507662][ T5878] tipc: Enabled bearer , priority 10 [ 93.521679][ T5877] tipc: Resetting bearer [ 93.605014][ T5877] tipc: Disabling bearer [ 94.133184][ T5898] x_tables: unsorted underflow at hook 1 [ 94.290169][ T5707] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.442598][ T5707] usb 4-1: New USB device found, idVendor=4136, idProduct=b8fa, bcdDevice=16.4a [ 94.442627][ T5707] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 94.444487][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 94.444510][ T5707] usb 4-1: can't read configurations, error -61 [ 94.580123][ T5707] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 94.839027][ T5707] usb 4-1: New USB device found, idVendor=4136, idProduct=b8fa, bcdDevice=16.4a [ 94.839075][ T5707] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 94.869617][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 94.869658][ T5707] usb 4-1: can't read configurations, error -61 [ 94.886144][ T5707] usb usb4-port1: attempt power cycle [ 95.250083][ T5707] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 95.279625][ T5707] usb 4-1: New USB device found, idVendor=4136, idProduct=b8fa, bcdDevice=16.4a [ 95.279668][ T5707] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 95.302631][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 95.302672][ T5707] usb 4-1: can't read configurations, error -61 [ 95.320478][ T5918] netlink: 'syz.4.66': attribute type 11 has an invalid length. [ 95.383315][ T5920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.472983][ T5707] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 95.504846][ T5707] usb 4-1: New USB device found, idVendor=4136, idProduct=b8fa, bcdDevice=16.4a [ 95.504875][ T5707] usb 4-1: too many configurations: 35, using maximum allowed: 8 [ 95.507527][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 95.507559][ T5707] usb 4-1: can't read configurations, error -61 [ 95.507864][ T5707] usb usb4-port1: unable to enumerate USB device [ 95.803895][ T5929] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 96.066108][ T5932] use of bytesused == 0 is deprecated and will be removed in the future, [ 96.066125][ T5932] use the actual size instead. [ 96.338572][ T5939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.503085][ T5942] netlink: 'syz.2.76': attribute type 11 has an invalid length. [ 97.184507][ T5953] x_tables: unsorted underflow at hook 1 [ 97.260343][ T50] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.409927][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.78'. [ 97.422434][ T50] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.424652][ T50] usb 2-1: not running at top speed; connect to a high speed hub [ 97.424687][ T50] usb 2-1: New USB device found, idVendor=0ccd, idProduct=008e, bcdDevice=a9.00 [ 97.425786][ T50] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 97.425809][ T50] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 97.428363][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.428388][ T50] usb 2-1: Product: 劰烒ⵥӅ⣍ꕖ瘼䢢ꟊ୰ [ 97.428403][ T50] usb 2-1: Manufacturer: 㐊 [ 97.428417][ T50] usb 2-1: SerialNumber: ࠠ [ 97.780884][ T50] usb 2-1: USB disconnect, device number 2 [ 97.847428][ T5963] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 98.193776][ T5974] syzkaller0: entered promiscuous mode [ 98.193794][ T5974] syzkaller0: entered allmulticast mode [ 99.174405][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 99.796969][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 100.940242][ T5707] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.094304][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 101.112927][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.112983][ T5707] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 101.115231][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.115281][ T5707] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.164017][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.164045][ T5707] usb 1-1: Product: syz [ 101.164054][ T5707] usb 1-1: Manufacturer: syz [ 101.164062][ T5707] usb 1-1: SerialNumber: syz [ 101.507504][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.507848][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.869339][ T6039] netlink: 'syz.2.104': attribute type 11 has an invalid length. [ 102.083384][ T5707] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 102.083840][ T5707] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.261997][ T5707] usb 1-1: USB disconnect, device number 3 [ 102.390751][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.696173][ T6060] syzkaller0: entered promiscuous mode [ 103.696190][ T6060] syzkaller0: entered allmulticast mode [ 103.720967][ T6060] tipc: Started in network mode [ 103.720988][ T6060] tipc: Node identity b6737b163d29, cluster identity 4711 [ 103.729666][ T6060] tipc: Enabled bearer , priority 10 [ 103.806550][ T6059] tipc: Resetting bearer [ 103.890082][ T5707] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.001116][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 104.063497][ T6059] tipc: Disabling bearer [ 104.083093][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.083126][ T5707] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 104.086304][ T5707] usb 1-1: language id specifier not provided by device, defaulting to English [ 104.124689][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.124726][ T5707] usb 1-1: Product: @ [ 104.124740][ T5707] usb 1-1: SerialNumber: syz [ 104.385789][ T6058] sctp: [Deprecated]: syz.0.110 (pid 6058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.385789][ T6058] Use struct sctp_sack_info instead [ 104.459440][ T30] audit: type=1326 audit(1790131389.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.110" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f533cb9e159 code=0x0 [ 104.899454][ T6077] binder: 6076:6077 ioctl 40046205 0 returned -22 [ 104.920756][ T6082] binder: 6076:6082 ioctl 40046205 0 returned -22 [ 104.923559][ T6077] libceph: secret too big 289 [ 105.004062][ T6086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.301225][ T2243] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.433867][ T2243] usb 4-1: device descriptor read/64, error -71 [ 105.690291][ T2243] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.824270][ T2243] usb 4-1: device descriptor read/64, error -71 [ 105.931927][ T2243] usb usb4-port1: attempt power cycle [ 106.291957][ T2243] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 106.323449][ T2243] usb 4-1: device descriptor read/8, error -71 [ 106.395786][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.553472][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.560324][ T2243] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.565274][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 106.565299][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.565315][ T10] usb 5-1: config 0 has no interface number 0 [ 106.565340][ T10] usb 5-1: too many endpoints for config 0 interface 255 altsetting 178: 61, using maximum allowed: 30 [ 106.567027][ T10] usb 5-1: config 0 interface 255 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 106.567053][ T10] usb 5-1: config 0 interface 255 has no altsetting 0 [ 106.580542][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.580569][ T10] usb 5-1: Product: syz [ 106.580583][ T10] usb 5-1: Manufacturer: syz [ 106.580595][ T10] usb 5-1: SerialNumber: syz [ 106.584218][ T2243] usb 4-1: device descriptor read/8, error -71 [ 106.591846][ T10] usb 5-1: config 0 descriptor?? [ 106.692257][ T2243] usb usb4-port1: unable to enumerate USB device [ 106.936082][ T5707] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.936120][ T5707] usb 1-1: MIDIStreaming interface descriptor not found [ 106.978573][ T10] usb 5-1: USB disconnect, device number 3 [ 107.079680][ T5707] usb 1-1: USB disconnect, device number 4 [ 107.195181][ T6121] netlink: 220 bytes leftover after parsing attributes in process `syz.0.133'. [ 107.730434][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 107.885958][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 107.886093][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.948953][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.176073][ T6146] x_tables: unsorted underflow at hook 1 [ 108.474472][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.144'. [ 108.496828][ T6153] syzkaller0: entered promiscuous mode [ 108.496853][ T6153] syzkaller0: entered allmulticast mode [ 108.525931][ T6153] tipc: Started in network mode [ 108.525951][ T6153] tipc: Node identity 8a63c72608ef, cluster identity 4711 [ 108.546028][ T6153] tipc: Enabled bearer , priority 10 [ 108.569317][ T6149] tipc: Resetting bearer [ 108.619105][ T6149] tipc: Disabling bearer [ 108.646867][ T6157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.730070][ T5707] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.778486][ T6159] fuse: Bad value for 'group_id' [ 108.778506][ T6159] fuse: Bad value for 'group_id' [ 108.891210][ T5707] usb 4-1: New USB device found, idVendor=03e8, idProduct=8408, bcdDevice=ca.b5 [ 108.891256][ T5707] usb 4-1: too many configurations: 96, using maximum allowed: 8 [ 108.894218][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 108.894253][ T5707] usb 4-1: can't read configurations, error -61 [ 109.020181][ T5707] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.126762][ T6170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.176229][ T5707] usb 4-1: New USB device found, idVendor=03e8, idProduct=8408, bcdDevice=ca.b5 [ 109.176276][ T5707] usb 4-1: too many configurations: 96, using maximum allowed: 8 [ 109.211827][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.211858][ T5707] usb 4-1: can't read configurations, error -61 [ 109.212054][ T5707] usb usb4-port1: attempt power cycle [ 109.250314][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.401095][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.402245][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 109.402449][ T25] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 109.402471][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.402489][ T25] usb 1-1: config 0 has no interface number 0 [ 109.402518][ T25] usb 1-1: too many endpoints for config 0 interface 255 altsetting 178: 61, using maximum allowed: 30 [ 109.402553][ T25] usb 1-1: config 0 interface 255 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 109.402578][ T25] usb 1-1: config 0 interface 255 has no altsetting 0 [ 109.406516][ T25] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.406542][ T25] usb 1-1: Product: syz [ 109.406556][ T25] usb 1-1: Manufacturer: syz [ 109.406570][ T25] usb 1-1: SerialNumber: syz [ 109.528519][ T25] usb 1-1: config 0 descriptor?? [ 109.582251][ T5707] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 109.611750][ T5707] usb 4-1: New USB device found, idVendor=03e8, idProduct=8408, bcdDevice=ca.b5 [ 109.611793][ T5707] usb 4-1: too many configurations: 96, using maximum allowed: 8 [ 109.615972][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.616012][ T5707] usb 4-1: can't read configurations, error -61 [ 109.791098][ T5707] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 109.825414][ T5707] usb 4-1: New USB device found, idVendor=03e8, idProduct=8408, bcdDevice=ca.b5 [ 109.825458][ T5707] usb 4-1: too many configurations: 96, using maximum allowed: 8 [ 109.850196][ T5707] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.850237][ T5707] usb 4-1: can't read configurations, error -61 [ 109.850521][ T5707] usb usb4-port1: unable to enumerate USB device [ 109.912616][ T5707] usb 1-1: USB disconnect, device number 5 [ 111.649352][ T6206] syzkaller0: entered promiscuous mode [ 111.649378][ T6206] syzkaller0: entered allmulticast mode [ 111.701954][ T6206] tipc: Enabled bearer , priority 10 [ 111.731228][ T6205] tipc: Resetting bearer [ 111.827223][ T6205] tipc: Disabling bearer [ 112.692994][ T6232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.695783][ T6228] loop7: detected capacity change from 0 to 7 [ 112.820183][ T5708] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.991755][ T5708] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 112.993559][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.993603][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.020096][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.036689][ T5708] as10x_usb: device has been detected [ 113.037794][ T5708] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 113.059729][ T5708] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 113.107836][ T6228] Dev loop7: unable to read RDB block 7 [ 113.107865][ T6228] loop7: unable to read partition table [ 113.107999][ T6228] loop7: partition table beyond EOD, truncated [ 113.108022][ T6228] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 113.200902][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.202214][ T10] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 113.202256][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.202274][ T10] usb 1-1: config 0 has no interface number 0 [ 113.202302][ T10] usb 1-1: too many endpoints for config 0 interface 255 altsetting 178: 61, using maximum allowed: 30 [ 113.202337][ T10] usb 1-1: config 0 interface 255 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 113.202361][ T10] usb 1-1: config 0 interface 255 has no altsetting 0 [ 113.283470][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.283500][ T10] usb 1-1: Product: syz [ 113.283514][ T10] usb 1-1: Manufacturer: syz [ 113.283529][ T10] usb 1-1: SerialNumber: syz [ 113.322549][ T10] usb 1-1: config 0 descriptor?? [ 113.378599][ T5708] as10x_usb: error during firmware upload part1 [ 113.379308][ T5708] Registered device Abilis Systems DVB-Titan [ 113.434217][ T6237] syzkaller0: entered promiscuous mode [ 113.434233][ T6237] syzkaller0: entered allmulticast mode [ 113.466825][ T6237] tipc: Enabled bearer , priority 10 [ 113.476200][ T6236] tipc: Resetting bearer [ 113.557104][ T5707] usb 3-1: USB disconnect, device number 5 [ 113.586540][ T6236] tipc: Disabling bearer [ 113.634794][ T5707] Unregistered device Abilis Systems DVB-Titan [ 113.669663][ T5707] as10x_usb: device has been disconnected [ 113.761832][ T10] usb 1-1: USB disconnect, device number 6 [ 113.794719][ T6248] usb usb8: usbfs: process 6248 (syz.3.174) did not claim interface 0 before use [ 113.848041][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.938316][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.105340][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 114.719143][ T6264] capability: warning: `syz.0.180' uses 32-bit capabilities (legacy support in use) [ 114.768471][ T6264] program syz.0.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.700150][ T5678] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.888261][ T5678] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 115.889643][ T5678] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 115.889685][ T5678] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 115.889703][ T5678] usb 3-1: config 171 has no interface number 0 [ 115.889760][ T5678] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 115.889785][ T5678] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 115.889808][ T5678] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 115.962868][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.962899][ T5678] usb 3-1: Product: syz [ 115.962907][ T5678] usb 3-1: Manufacturer: syz [ 115.962916][ T5678] usb 3-1: SerialNumber: syz [ 116.007044][ T6269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.050108][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.198701][ T25] usb 5-1: device descriptor read/64, error -71 [ 116.297871][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 116.451487][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.570806][ T5678] ath6kl: Failed to submit usb control message: -71 [ 116.570864][ T5678] ath6kl: unable to send the bmi data to the device: -71 [ 116.570878][ T5678] ath6kl: Unable to send get target info: -71 [ 116.578525][ T5678] ath6kl: Failed to init ath6kl core: -71 [ 116.613838][ T25] usb 5-1: device descriptor read/64, error -71 [ 116.641333][ T5678] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 116.661002][ T5678] usb 3-1: USB disconnect, device number 6 [ 116.723023][ T25] usb usb5-port1: attempt power cycle [ 117.065266][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.083737][ T25] usb 5-1: device descriptor read/8, error -71 [ 117.320444][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.342562][ T25] usb 5-1: device descriptor read/8, error -71 [ 117.451904][ T25] usb usb5-port1: unable to enumerate USB device [ 117.919907][ T6305] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 118.080766][ T6305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.084178][ T6308] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 118.155238][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 118.205466][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.209118][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.310224][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.440233][ T25] usb 1-1: device descriptor read/64, error -71 [ 118.443752][ T5678] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 118.588434][ T6316] batman_adv: batadv0: Adding interface: gretap1 [ 118.588454][ T6316] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.588482][ T6316] batman_adv: batadv0: Interface activated: gretap1 [ 118.632245][ T5678] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 118.648081][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.670831][ T5678] usb 4-1: config 0 descriptor?? [ 118.690148][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.759326][ T6318] syzkaller0: entered promiscuous mode [ 118.759350][ T6318] syzkaller0: entered allmulticast mode [ 118.780695][ T6318] tipc: Enabled bearer , priority 10 [ 118.786428][ T6317] tipc: Resetting bearer [ 118.830073][ T25] usb 1-1: device descriptor read/64, error -71 [ 118.940973][ T25] usb usb1-port1: attempt power cycle [ 118.957297][ T5678] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 118.957782][ T5678] [drm:udl_init] *ERROR* Selecting channel failed [ 119.027728][ T6317] tipc: Disabling bearer [ 119.187947][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 119.204294][ T6323] netlink: 'syz.2.198': attribute type 11 has an invalid length. [ 119.237406][ T5678] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 119.237444][ T5678] [drm] Initialized udl on minor 1 [ 119.280273][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.300955][ T25] usb 1-1: device descriptor read/8, error -71 [ 119.329015][ T5678] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 119.354315][ T5678] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 119.419305][ T5678] usb 4-1: USB disconnect, device number 15 [ 119.547297][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.563019][ T25] usb 1-1: device descriptor read/8, error -71 [ 119.672206][ T25] usb usb1-port1: unable to enumerate USB device [ 120.325933][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 120.375587][ T30] audit: type=1326 audit(1790131405.085:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4f39e159 code=0x7ffc0000 [ 120.375777][ T30] audit: type=1326 audit(1790131405.085:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4f39e159 code=0x7ffc0000 [ 120.389305][ T30] audit: type=1326 audit(1790131405.095:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad4f39e159 code=0x7ffc0000 [ 120.389354][ T30] audit: type=1326 audit(1790131405.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4f39e159 code=0x7ffc0000 [ 120.389390][ T30] audit: type=1326 audit(1790131405.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4f39e159 code=0x7ffc0000 [ 120.391228][ T30] audit: type=1326 audit(1790131405.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad4f35e98e code=0x7ffc0000 [ 120.391271][ T30] audit: type=1326 audit(1790131405.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad4f39ddeb code=0x7ffc0000 [ 120.391307][ T30] audit: type=1326 audit(1790131405.095:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad4f39ddeb code=0x7ffc0000 [ 120.397947][ T30] audit: type=1326 audit(1790131405.095:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad4f39ddeb code=0x7ffc0000 [ 120.405280][ T30] audit: type=1326 audit(1790131405.095:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.208" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad4f39ddeb code=0x7ffc0000 [ 120.430524][ T6327] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 120.430546][ T6327] netlink: 'syz.4.201': attribute type 7 has an invalid length. [ 120.640802][ T5678] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.654926][ T6327] U: entered promiscuous mode [ 120.813287][ T5678] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 120.821637][ T5678] usb 3-1: config index 0 descriptor too short (expected 1158, got 134) [ 120.821664][ T5678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.821679][ T5678] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.835609][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.835633][ T5678] usb 3-1: Product: syz [ 120.835646][ T5678] usb 3-1: Manufacturer: syz [ 120.835659][ T5678] usb 3-1: SerialNumber: syz [ 120.860475][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 120.982023][ T10] usb 4-1: device descriptor read/64, error -71 [ 121.012736][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 121.012761][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 121.235542][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 121.258147][ T6361] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 121.290175][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.351862][ T6361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.355937][ T6365] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 121.380386][ T10] usb 4-1: device descriptor read/64, error -71 [ 121.527954][ T10] usb usb4-port1: attempt power cycle [ 121.550821][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 121.571650][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.571704][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.576103][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.584268][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.584291][ T25] usb 1-1: Product: syz [ 121.584303][ T25] usb 1-1: Manufacturer: syz [ 121.584315][ T25] usb 1-1: SerialNumber: syz [ 121.708019][ T6369] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 121.871105][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 121.900794][ T10] usb 4-1: device descriptor read/8, error -71 [ 122.141329][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 122.161478][ T10] usb 4-1: device descriptor read/8, error -71 [ 122.272976][ T5678] usb 3-1: USB disconnect, device number 7 [ 122.289530][ T10] usb usb4-port1: unable to enumerate USB device [ 122.448382][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.543156][ T6379] x_tables: unsorted underflow at hook 1 [ 122.604609][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 122.622172][ T6373] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 123.206188][ T6387] syzkaller0: entered promiscuous mode [ 123.206248][ T6387] syzkaller0: entered allmulticast mode [ 123.233977][ T6387] tipc: Started in network mode [ 123.234045][ T6387] tipc: Node identity aa858d724dd8, cluster identity 4711 [ 123.234897][ T6387] tipc: Enabled bearer , priority 10 [ 123.238723][ T6386] tipc: Resetting bearer [ 123.358213][ T6386] tipc: Disabling bearer [ 123.751881][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 123.941039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 123.983902][ T6395] netlink: 'syz.4.226': attribute type 11 has an invalid length. [ 124.142197][ T25] usb 1-1: selecting invalid altsetting 1 [ 124.165923][ T25] cdc_ncm 1-1:1.0: bind() failure [ 124.209281][ T25] cdc_ncm 1-1:1.1: skipping garbage [ 124.209297][ T25] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 124.209320][ T25] cdc_ncm 1-1:1.1: bind() failure [ 124.281937][ T25] usb 1-1: USB disconnect, device number 11 [ 125.082025][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 125.400387][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 125.562372][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 125.564460][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.564496][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.567895][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.567919][ T10] usb 4-1: Product: syz [ 125.567930][ T10] usb 4-1: Manufacturer: syz [ 125.567938][ T10] usb 4-1: SerialNumber: syz [ 125.659634][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.730408][ T6424] syzkaller0: entered promiscuous mode [ 125.730436][ T6424] syzkaller0: entered allmulticast mode [ 125.843109][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 125.843129][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 125.919795][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 125.919816][ T30] audit: type=1326 audit(1790131410.625:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.3.235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f861ef9e159 code=0x0 [ 125.940122][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.101078][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 126.106533][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 126.129753][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.129785][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.129824][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.161889][ T25] usb 5-1: config 0 descriptor?? [ 126.383673][ T6439] loop7: detected capacity change from 0 to 7 [ 126.449897][ T6434] process 'syz.2.243' launched '/dev/fd/4' with NULL argv: empty string added [ 126.678961][ T6439] Dev loop7: unable to read RDB block 7 [ 126.679006][ T6439] loop7: unable to read partition table [ 126.679143][ T6439] loop7: partition table beyond EOD, truncated [ 126.709282][ T6439] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 126.918252][ T6434] fuse: Bad value for 'fd' [ 126.974363][ T25] savu 0003:1E7D:2D5A.0001: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 127.118581][ T25] usb 5-1: USB disconnect, device number 8 [ 127.228949][ T4985] Dev loop7: unable to read RDB block 7 [ 127.228980][ T4985] loop7: unable to read partition table [ 127.229122][ T4985] loop7: partition table beyond EOD, truncated [ 127.717887][ T6450] fido_id[6450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 128.091784][ T6456] fuse: Invalid rootmode [ 128.201041][ T5708] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.281590][ T6459] x_tables: unsorted underflow at hook 1 [ 128.286112][ T6460] netlink: 'syz.0.250': attribute type 6 has an invalid length. [ 128.360953][ T5708] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.363804][ T5708] usb 5-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 128.363836][ T5708] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.363870][ T5708] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.437595][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.437626][ T5708] usb 5-1: Product: syz [ 128.437640][ T5708] usb 5-1: Manufacturer: syz [ 128.437654][ T5708] usb 5-1: SerialNumber: syz [ 128.461419][ T5707] usb 4-1: USB disconnect, device number 20 [ 128.501750][ T5708] usb 5-1: config 0 descriptor?? [ 128.580146][ T5678] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.748784][ T5678] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 128.748874][ T6464] syzkaller0: entered promiscuous mode [ 128.748893][ T6464] syzkaller0: entered allmulticast mode [ 128.784352][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.800859][ T6464] tipc: Enabled bearer , priority 1 [ 128.825676][ T6463] tipc: Resetting bearer [ 128.862674][ T5678] usb 1-1: config 0 descriptor?? [ 128.881940][ T5678] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 128.886506][ T6466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.120888][ T6463] tipc: Disabling bearer [ 129.231290][ T5708] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 129.256254][ T5708] usb 5-1: USB disconnect, device number 9 [ 129.361927][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 129.409464][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.563519][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.564786][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.807862][ T5678] gspca_stv06xx: vv6410 sensor detected [ 129.918684][ T6478] binder: BINDER_SET_CONTEXT_MGR already set [ 129.918703][ T6478] binder: 6477:6478 ioctl 4018620d 200000000100 returned -16 [ 129.939003][ T6478] binder: BINDER_SET_CONTEXT_MGR already set [ 129.939029][ T6478] binder: 6477:6478 ioctl 4018620d 2000000002c0 returned -16 [ 130.166533][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 130.740122][ T5708] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.786243][ T6490] vxcan1: tx address claim with different name [ 130.890396][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 130.891121][ T5708] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.892633][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.892968][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.892992][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.893035][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.929560][ T5708] usb 5-1: config 0 descriptor?? [ 131.351685][ T5678] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 131.383508][ T5678] usb 1-1: USB disconnect, device number 12 [ 131.472728][ T30] audit: type=1326 audit(1790131416.185:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 131.473043][ T30] audit: type=1326 audit(1790131416.185:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 131.474212][ T30] audit: type=1326 audit(1790131416.185:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 131.474260][ T30] audit: type=1326 audit(1790131416.185:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 131.474721][ T30] audit: type=1326 audit(1790131416.185:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 131.475410][ T30] audit: type=1326 audit(1790131416.185:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f533cb5e98e code=0x7ffc0000 [ 131.476808][ T30] audit: type=1326 audit(1790131416.185:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 131.476865][ T30] audit: type=1326 audit(1790131416.185:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 131.611208][ T30] audit: type=1326 audit(1790131416.295:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 131.719105][ T5708] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input5 [ 131.728739][ T30] audit: type=1326 audit(1790131416.435:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 131.893137][ T5678] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 131.908040][ T5708] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 132.074323][ T6500] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 132.082396][ T5678] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 132.104526][ T5678] usb 1-1: config index 0 descriptor too short (expected 1158, got 134) [ 132.104555][ T5678] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.104572][ T5678] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.165734][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.165895][ T5678] usb 1-1: Product: syz [ 132.165911][ T5678] usb 1-1: Manufacturer: syz [ 132.166017][ T5678] usb 1-1: SerialNumber: syz [ 132.402966][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.403627][ T6504] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 132.525351][ T5707] usb 5-1: USB disconnect, device number 10 [ 133.182374][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.182457][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.734581][ T5678] usb 1-1: USB disconnect, device number 13 [ 134.894861][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.325963][ T6540] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.621544][ T6541] syzkaller0: entered promiscuous mode [ 135.621561][ T6541] syzkaller0: entered allmulticast mode [ 135.857762][ T6541] tipc: Enabled bearer , priority 2 [ 135.951348][ T6539] tipc: Resetting bearer [ 136.092143][ T6539] tipc: Disabling bearer [ 136.342947][ T6549] syzkaller0: entered promiscuous mode [ 136.342964][ T6549] syzkaller0: entered allmulticast mode [ 136.389693][ T6549] tipc: Enabled bearer , priority 0 [ 136.413701][ T6548] tipc: Resetting bearer [ 136.672452][ T6548] tipc: Disabling bearer [ 136.788413][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 137.173240][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 137.645654][ T6571] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 137.645682][ T6571] bond2: option packets_per_slave: allowed values 0 - 65535 [ 137.707978][ T6571] bond2 (unregistering): Released all slaves [ 138.866163][ T5678] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.048433][ T5678] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.068331][ T5678] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.068357][ T5678] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.068380][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.107324][ T6584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.134832][ T5678] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.828965][ T6596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.888568][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 139.948085][ T6603] xfrm1: entered promiscuous mode [ 139.948108][ T6603] xfrm1: entered allmulticast mode [ 139.957467][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 140.633970][ T5686] usb 1-1: USB disconnect, device number 14 [ 140.721563][ T6607] binder: 6606:6607 ioctl c0306201 200000000440 returned -14 [ 140.787083][ T6607] bridge_slave_0: left allmulticast mode [ 140.787112][ T6607] bridge_slave_0: left promiscuous mode [ 140.788384][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.867551][ T6607] bridge_slave_1: left allmulticast mode [ 140.867573][ T6607] bridge_slave_1: left promiscuous mode [ 140.867728][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.051317][ T6607] bond0: (slave bond_slave_0): Releasing backup interface [ 141.183958][ T6607] bond0: (slave bond_slave_1): Releasing backup interface [ 141.297281][ T6607] team0: Port device team_slave_0 removed [ 141.341878][ T6607] team0: Port device team_slave_1 removed [ 141.395844][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.395870][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.435087][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.435113][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.494911][ T6607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.707049][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 142.062767][ T6627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.306'. [ 142.714108][ T5693] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 142.813126][ T6643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.312'. [ 142.813150][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 142.924049][ T5693] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 142.925240][ T5693] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 142.925265][ T5693] usb 4-1: config 0 has no interface number 0 [ 142.925298][ T5693] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 142.964466][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.964484][ T5693] usb 4-1: Product: syz [ 142.964492][ T5693] usb 4-1: Manufacturer: syz [ 142.964500][ T5693] usb 4-1: SerialNumber: syz [ 142.972527][ T5693] usb 4-1: config 0 descriptor?? [ 143.016772][ T5693] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 143.016823][ T5693] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 143.245595][ T6635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.250302][ T5693] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 143.472184][ T5693] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 143.558808][ T5693] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 143.641734][ T5693] usb 4-1: USB disconnect, device number 21 [ 143.650531][ T5693] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 144.534087][ T6671] binder: BINDER_SET_CONTEXT_MGR already set [ 144.534099][ T6671] binder: 6669:6671 ioctl 4018620d 200000000100 returned -16 [ 144.574392][ T6671] binder: BINDER_SET_CONTEXT_MGR already set [ 144.574410][ T6671] binder: 6669:6671 ioctl 4018620d 2000000002c0 returned -16 [ 144.665693][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 144.665723][ T30] audit: type=1326 audit(1790131429.375:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.1.319" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86ab9e159 code=0x0 [ 145.391856][ T5707] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.590294][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 145.602604][ T5707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.602656][ T5707] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 145.627582][ T5707] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 245, changing to 7 [ 145.641073][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.641102][ T5707] usb 5-1: Product: syz [ 145.641115][ T5707] usb 5-1: Manufacturer: syz [ 145.641130][ T5707] usb 5-1: SerialNumber: syz [ 145.682376][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 145.776768][ T6693] netlink: 96 bytes leftover after parsing attributes in process `syz.0.324'. [ 145.992033][ T5707] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 146.030201][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 146.035504][ T5707] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 146.062162][ T5707] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 146.066107][ T5707] usb 5-1: USB disconnect, device number 11 [ 146.181339][ T44] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.182301][ T44] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.182322][ T44] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.182344][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.257379][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 146.302321][ T6695] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.326372][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.666412][ T44] usb 1-1: USB disconnect, device number 15 [ 146.938006][ T6705] FAULT_INJECTION: forcing a failure. [ 146.938006][ T6705] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.938042][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.3.327 Not tainted syzkaller #0 PREEMPT(full) [ 146.938065][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.938077][ T6705] Call Trace: [ 146.938085][ T6705] [ 146.938093][ T6705] dump_stack_lvl+0xe8/0x150 [ 146.938132][ T6705] should_fail_ex+0x410/0x560 [ 146.938167][ T6705] _copy_from_iter+0x1d3/0x1660 [ 146.938189][ T6705] ? __alloc_skb+0x27a/0x7a0 [ 146.938205][ T6705] ? __alloc_skb+0x27a/0x7a0 [ 146.938219][ T6705] ? __alloc_skb+0x27a/0x7a0 [ 146.938232][ T6705] ? __pfx__copy_from_iter+0x10/0x10 [ 146.938244][ T6705] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 146.938261][ T6705] ? __alloc_skb+0x27a/0x7a0 [ 146.938272][ T6705] ? __alloc_skb+0x27a/0x7a0 [ 146.938288][ T6705] ? netlink_sendmsg+0x650/0xb40 [ 146.938299][ T6705] ? skb_put+0x112/0x210 [ 146.938315][ T6705] netlink_sendmsg+0x6c0/0xb40 [ 146.938331][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.938347][ T6705] ? apparmor_socket_sendmsg+0x18b/0x360 [ 146.938362][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.938372][ T6705] sock_sendmsg_nosec+0x13a/0x180 [ 146.938386][ T6705] ____sys_sendmsg+0x54e/0x850 [ 146.938405][ T6705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.938425][ T6705] ? import_iovec+0x73/0xa0 [ 146.938441][ T6705] ___sys_sendmsg+0x2a5/0x360 [ 146.938455][ T6705] ? __lock_acquire+0x747/0x2de0 [ 146.938470][ T6705] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.938505][ T6705] ? __fget_files+0x2a/0x420 [ 146.938519][ T6705] ? __fget_files+0x3a2/0x420 [ 146.938540][ T6705] __x64_sys_sendmsg+0x1b1/0x290 [ 146.938556][ T6705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.938583][ T6705] do_syscall_64+0x166/0x520 [ 146.938597][ T6705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.938609][ T6705] ? clear_bhb_loop+0x70/0xc0 [ 146.938623][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.938634][ T6705] RIP: 0033:0x7f861ef9e159 [ 146.938647][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.938659][ T6705] RSP: 002b:00007f861fdaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.938673][ T6705] RAX: ffffffffffffffda RBX: 00007f861f225fa0 RCX: 00007f861ef9e159 [ 146.938683][ T6705] RDX: 0000000020000880 RSI: 0000200000000600 RDI: 0000000000000005 [ 146.938695][ T6705] RBP: 00007f861fdaa090 R08: 0000000000000000 R09: 0000000000000000 [ 146.938706][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.938717][ T6705] R13: 00007f861f226038 R14: 00007f861f225fa0 R15: 00007f861f34fa48 [ 146.938746][ T6705] [ 147.602206][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 148.050896][ T6723] binder: BINDER_SET_CONTEXT_MGR already set [ 148.050909][ T6723] binder: 6721:6723 ioctl 4018620d 200000000100 returned -16 [ 148.088390][ T6723] binder: BINDER_SET_CONTEXT_MGR already set [ 148.088408][ T6723] binder: 6721:6723 ioctl 4018620d 2000000002c0 returned -16 [ 149.136583][ T6736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.600105][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 149.600122][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 151.106897][ T6774] syzkaller0: entered promiscuous mode [ 151.106923][ T6774] syzkaller0: entered allmulticast mode [ 151.174226][ T160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.174261][ T160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.174282][ T160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.174303][ T160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.680926][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 152.920226][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.991889][ T30] audit: type=1326 audit(1790131437.705:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 152.993741][ T30] audit: type=1326 audit(1790131437.705:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 153.051335][ T30] audit: type=1326 audit(1790131437.765:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 153.051381][ T30] audit: type=1326 audit(1790131437.765:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 153.051404][ T30] audit: type=1326 audit(1790131437.765:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533cb9e159 code=0x7ffc0000 [ 153.116137][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 153.120122][ T10] usb 5-1: config 0 has no interfaces? [ 153.136996][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.137021][ T10] usb 5-1: Product: syz [ 153.137033][ T10] usb 5-1: Manufacturer: syz [ 153.137046][ T10] usb 5-1: SerialNumber: syz [ 153.140152][ T30] audit: type=1326 audit(1790131437.845:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f533cb5e98e code=0x7ffc0000 [ 153.142890][ T10] usb 5-1: config 0 descriptor?? [ 153.152161][ T30] audit: type=1326 audit(1790131437.865:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 153.152207][ T30] audit: type=1326 audit(1790131437.865:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 153.164107][ T30] audit: type=1326 audit(1790131437.875:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 153.219987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 153.271115][ T30] audit: type=1326 audit(1790131437.985:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f533cb9ddeb code=0x7ffc0000 [ 153.451040][ T5693] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 153.481984][ T6825] syzkaller0: entered promiscuous mode [ 153.482009][ T6825] syzkaller0: entered allmulticast mode [ 153.539376][ T6825] tipc: Enabled bearer , priority 10 [ 153.584429][ T6821] tipc: Resetting bearer [ 153.622904][ T5693] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 153.625583][ T5693] usb 1-1: config index 0 descriptor too short (expected 1158, got 134) [ 153.625643][ T5693] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.625661][ T5693] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.733905][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.733957][ T5693] usb 1-1: Product: syz [ 153.733966][ T5693] usb 1-1: Manufacturer: syz [ 153.733974][ T5693] usb 1-1: SerialNumber: syz [ 153.897218][ T6821] tipc: Disabling bearer [ 155.730786][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 155.791914][ T6856] syzkaller0: entered promiscuous mode [ 155.791937][ T6856] syzkaller0: entered allmulticast mode [ 155.867719][ T10] usb 5-1: USB disconnect, device number 12 [ 156.284667][ T5693] usb 1-1: USB disconnect, device number 16 [ 156.542113][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.693357][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 157.319275][ T6882] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 157.460737][ T6882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.463288][ T6887] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 157.561079][ T5693] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 157.833172][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 157.840594][ T5693] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 157.847573][ T5693] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 157.847599][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.857714][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.857739][ T5693] usb 1-1: Product: syz [ 157.857752][ T5693] usb 1-1: Manufacturer: syz [ 157.857763][ T5693] usb 1-1: SerialNumber: syz [ 157.929874][ T5693] usb 1-1: config 0 descriptor?? [ 157.963958][ T5693] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 158.967801][ T5693] gspca_sunplus: reg_r err -32 [ 159.381113][ T6918] netlink: 124 bytes leftover after parsing attributes in process `syz.1.394'. [ 159.858944][ T6926] tipc: Enabled bearer , priority 0 [ 159.942607][ T5693] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 160.162550][ T6932] xt_TCPMSS: Only works on TCP SYN packets [ 160.454337][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 160.535627][ T5693] usb 1-1: USB disconnect, device number 17 [ 160.653252][ T6939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.402'. [ 160.716898][ T6943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.972640][ T5707] tipc: Node number set to 2190264102 [ 161.140874][ T6949] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 161.237081][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.406'. [ 161.237098][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 161.323836][ T6949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.456112][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 161.521580][ T6960] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 161.584888][ T6953] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 161.699729][ T6961] syzkaller0: entered promiscuous mode [ 161.699748][ T6961] syzkaller0: entered allmulticast mode [ 161.714335][ T6966] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 161.714350][ T6966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.408'. [ 161.714451][ T6966] dummy0: entered promiscuous mode [ 161.774116][ T6962] tipc: Enabled bearer , priority 10 [ 162.074498][ T6948] tipc: Resetting bearer [ 162.331418][ T6948] tipc: Disabling bearer [ 162.361910][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.020626][ T6983] FAULT_INJECTION: forcing a failure. [ 163.020626][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.020654][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.4.415 Not tainted syzkaller #0 PREEMPT(full) [ 163.020668][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.020675][ T6983] Call Trace: [ 163.020680][ T6983] [ 163.020685][ T6983] dump_stack_lvl+0xe8/0x150 [ 163.020721][ T6983] should_fail_ex+0x410/0x560 [ 163.020739][ T6983] copy_fpstate_to_sigframe+0xa83/0xd20 [ 163.020757][ T6983] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 163.020776][ T6983] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 163.020794][ T6983] ? ktime_get+0x45/0x220 [ 163.020806][ T6983] ? ktime_get+0x45/0x220 [ 163.020817][ T6983] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 163.020829][ T6983] ? ktime_get+0x1f5/0x220 [ 163.020843][ T6983] ? fpu__alloc_mathframe+0xac/0x130 [ 163.020860][ T6983] get_sigframe+0x603/0x830 [ 163.020881][ T6983] ? __pfx_get_sigframe+0x10/0x10 [ 163.020903][ T6983] x64_setup_rt_frame+0x163/0xc50 [ 163.020924][ T6983] ? _raw_spin_unlock_irq+0x2e/0x50 [ 163.020936][ T6983] ? get_signal+0x10dd/0x12c0 [ 163.020956][ T6983] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 163.020977][ T6983] arch_do_signal_or_restart+0x456/0x860 [ 163.020995][ T6983] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.021022][ T6983] ? ksys_write+0x242/0x270 [ 163.021044][ T6983] exit_to_user_mode_loop+0x10e/0x770 [ 163.021056][ T6983] ? rcu_is_watching+0x16/0xb0 [ 163.021072][ T6983] do_syscall_64+0x328/0x520 [ 163.021086][ T6983] ? trace_irq_disable+0x3b/0x140 [ 163.021097][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.021108][ T6983] ? clear_bhb_loop+0x70/0xc0 [ 163.021122][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.021133][ T6983] RIP: 0033:0x7f9f4b75e98e [ 163.021146][ T6983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.021155][ T6983] RSP: 002b:00007f9f4c70ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.021170][ T6983] RAX: 0000000000000001 RBX: 00007f9f4c7106c0 RCX: 00007f9f4b75e98e [ 163.021178][ T6983] RDX: 0000000000000001 RSI: 00007f9f4c710090 RDI: 0000000000000006 [ 163.021185][ T6983] RBP: 00007f9f4c710090 R08: 0000000000000000 R09: 0000000000000000 [ 163.021192][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.021199][ T6983] R13: 00007f9f4ba26038 R14: 00007f9f4ba25fa0 R15: 00007f9f4bb4fa48 [ 163.021217][ T6983] [ 163.569458][ T6990] syzkaller0: entered promiscuous mode [ 163.569482][ T6990] syzkaller0: entered allmulticast mode [ 163.594667][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 163.594689][ T30] audit: type=1326 audit(1790131448.305:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ab9e159 code=0x7ffc0000 [ 163.594735][ T30] audit: type=1326 audit(1790131448.305:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ab9e159 code=0x7ffc0000 [ 163.596951][ T30] audit: type=1326 audit(1790131448.305:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa86ab9e159 code=0x7ffc0000 [ 163.597011][ T30] audit: type=1326 audit(1790131448.305:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ab9e159 code=0x7ffc0000 [ 163.597054][ T30] audit: type=1326 audit(1790131448.305:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86ab9e159 code=0x7ffc0000 [ 163.765237][ T6990] tipc: Enabled bearer , priority 10 [ 163.782010][ T5708] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 163.783916][ T6989] tipc: Resetting bearer [ 163.972058][ T5708] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 163.975875][ T6989] tipc: Disabling bearer [ 163.977688][ T5708] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 163.977715][ T5708] usb 4-1: config 0 has no interface number 0 [ 163.977761][ T5708] usb 4-1: config 0 interface 41 has no altsetting 0 [ 164.008763][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.008788][ T5708] usb 4-1: Product: syz [ 164.008801][ T5708] usb 4-1: Manufacturer: syz [ 164.008813][ T5708] usb 4-1: SerialNumber: syz [ 164.048566][ T5708] usb 4-1: config 0 descriptor?? [ 164.383780][ T7000] program syz.1.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.666848][ T7002] netdevsim netdevsim0: Direct firmware load for . [ 164.666848][ T7002] failed with error -2 [ 164.666883][ T7002] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 164.666883][ T7002] [ 164.743638][ T5708] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 164.768801][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.420'. [ 165.153633][ T7016] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 165.478774][ T7016] team0 (unregistering): Port device team_slave_0 removed [ 165.544346][ T7005] binder: BINDER_SET_CONTEXT_MGR already set [ 165.544365][ T7005] binder: 7004:7005 ioctl 4018620d 200000004a80 returned -16 [ 165.608776][ T7016] team0 (unregistering): Port device team_slave_1 removed [ 166.079003][ T7013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.198949][ T6993] [U]  [ 166.277978][ T7024] Cannot find set identified by id 1 to match [ 166.500523][ T7026] netlink: 'syz.2.428': attribute type 11 has an invalid length. [ 166.751326][ T10] usb 4-1: USB disconnect, device number 22 [ 167.050426][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.430'. [ 167.050443][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 167.254358][ T7038] syzkaller0: entered promiscuous mode [ 167.254377][ T7038] syzkaller0: entered allmulticast mode [ 168.100072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 169.430586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 169.741139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 169.840134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 170.250391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 171.990599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 172.400716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 172.710156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.858502][ T7032] tipc: Enabled bearer , priority 10 [ 180.416414][ T5693] tipc: Node number set to 3881667954 [ 185.949382][ C1] sched: DL replenish lagged too much [ 194.643334][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659446][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.168891][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.999878][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.249897][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 289.256892][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7040/1:b..l P6901/1:b..l [ 289.265986][ C1] rcu: (detected by 1, t=10503 jiffies, g=26613, q=921138 ncpus=2) [ 289.273997][ C1] task:syz.1.388 state:R running task stack:21072 pid:6901 tgid:6901 ppid:5630 task_flags:0x40064c flags:0x00080001 [ 289.287535][ C1] Call Trace: [ 289.290824][ C1] [ 289.293747][ C1] __schedule+0x17db/0x58f0 [ 289.298259][ C1] ? __pfx___schedule+0x10/0x10 [ 289.303100][ C1] ? __lock_acquire+0x747/0x2de0 [ 289.308029][ C1] preempt_schedule_irq+0x4b/0x90 [ 289.313042][ C1] irqentry_exit+0x14f/0x910 [ 289.317630][ C1] ? trace_irq_disable+0x3b/0x140 [ 289.322659][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.328636][ C1] RIP: 0010:__read_once_word_nocheck+0x0/0x10 [ 289.334694][ C1] Code: 89 e7 e8 e3 c3 bf 00 e9 1e fd ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 c3 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 [ 289.354285][ C1] RSP: 0018:ffffc900043e6d78 EFLAGS: 00000202 [ 289.360342][ C1] RAX: ffffc900043e6f01 RBX: 1ffff9200087cdd9 RCX: 0000000000000001 [ 289.368299][ C1] RDX: ffffc900043e6f08 RSI: dffffc0000000000 RDI: ffffc900043e6f50 [ 289.376275][ C1] RBP: ffffc900043e0000 R08: ffffc900043e6f50 R09: 0000000000000000 [ 289.384675][ C1] R10: ffffc900043e6f18 R11: fffff5200087cde5 R12: 1ffff9200087cdda [ 289.392655][ C1] R13: 1ffff9200087cddb R14: ffffc900043e8000 R15: dffffc0000000000 [ 289.400638][ C1] deref_stack_reg+0x18e/0x220 [ 289.405406][ C1] unwind_next_frame+0x19bd/0x2550 [ 289.410513][ C1] ? arch_stack_walk+0xe3/0x150 [ 289.415350][ C1] ? unwind_next_frame+0x8f/0x2550 [ 289.420467][ C1] __unwind_start+0x514/0x660 [ 289.425134][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.431276][ C1] arch_stack_walk+0xe3/0x150 [ 289.435944][ C1] ? stack_trace_save+0xa9/0x100 [ 289.440871][ C1] stack_trace_save+0xa9/0x100 [ 289.445620][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 289.450983][ C1] save_stack+0x122/0x230 [ 289.455303][ C1] ? __pfx_save_stack+0x10/0x10 [ 289.460143][ C1] ? page_ext_put+0x97/0xc0 [ 289.464632][ C1] __reset_page_owner+0x71/0x1f0 [ 289.469555][ C1] free_unref_folios+0xdc2/0x14e0 [ 289.474573][ C1] ? folios_put_refs+0x991/0xb30 [ 289.479502][ C1] folios_put_refs+0x9e9/0xb30 [ 289.484267][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 289.489542][ C1] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 289.495860][ C1] shmem_undo_range+0x4e6/0x15d0 [ 289.500786][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 289.506143][ C1] ? __lock_acquire+0x747/0x2de0 [ 289.511095][ C1] ? __lock_acquire+0x747/0x2de0 [ 289.516023][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 289.521471][ C1] shmem_evict_inode+0x247/0xae0 [ 289.526494][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 289.532216][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 289.537668][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 289.543721][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.548741][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 289.553864][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 289.559319][ C1] evict+0x624/0xb50 [ 289.563206][ C1] ? __pfx_evict+0x10/0x10 [ 289.567609][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 289.572729][ C1] ? _raw_spin_unlock+0x28/0x50 [ 289.577582][ C1] ? iput+0xb84/0xf00 [ 289.581556][ C1] dentry_kill+0x1b9/0x880 [ 289.585961][ C1] finish_dput+0x1a/0x260 [ 289.590279][ C1] __fput+0x675/0xa50 [ 289.594260][ C1] task_work_run+0x1d9/0x270 [ 289.598842][ C1] ? __pfx_task_work_run+0x10/0x10 [ 289.603942][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 289.609047][ C1] do_exit+0x73a/0x2360 [ 289.613193][ C1] ? __pfx_do_exit+0x10/0x10 [ 289.617767][ C1] ? proc_coredump_connector+0x187/0x4e0 [ 289.623395][ C1] do_group_exit+0x22d/0x2f0 [ 289.627972][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.633158][ C1] get_signal+0x121b/0x12c0 [ 289.637659][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 289.643215][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.649395][ C1] irqentry_exit+0x2ba/0x910 [ 289.653991][ C1] ? trace_irq_disable+0x3b/0x140 [ 289.659026][ C1] asm_exc_page_fault+0x26/0x30 [ 289.663868][ C1] RIP: 0033:0x0 [ 289.667320][ C1] RSP: 002b:00002000000002c8 EFLAGS: 00010217 [ 289.673375][ C1] RAX: 0000000000000000 RBX: 00007fa86ae25fa0 RCX: 00007fa86ab9e159 [ 289.681334][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 289.689477][ C1] RBP: 00007fa86ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 289.697463][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.705445][ C1] R13: 00007fa86ae26038 R14: 00007fa86ae25fa0 R15: 00007fa86af4fa48 [ 289.713441][ C1] [ 289.716456][ C1] task:syz.4.431 state:X running task stack:26600 pid:7040 tgid:7030 ppid:0 task_flags:0x40044c flags:0x00080002 [ 289.729939][ C1] Call Trace: [ 289.733210][ C1] [ 289.736133][ C1] __schedule+0x17db/0x58f0 [ 289.740644][ C1] ? __lock_acquire+0x747/0x2de0 [ 289.745574][ C1] ? __pfx___schedule+0x10/0x10 [ 289.750434][ C1] ? __lock_acquire+0x747/0x2de0 [ 289.755363][ C1] preempt_schedule_irq+0x4b/0x90 [ 289.760375][ C1] irqentry_exit+0x14f/0x910 [ 289.764956][ C1] ? trace_irq_disable+0x3b/0x140 [ 289.769999][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.775968][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 289.781247][ C1] Code: ff ff ff e8 40 ac 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 62 f7 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f b0 45 0a cc 48 8d 3d 87 51 da [ 289.801629][ C1] RSP: 0018:ffffc9000d867480 EFLAGS: 00000292 [ 289.807724][ C1] RAX: a8735bc443897600 RBX: 0000000000000000 RCX: 0000000000000046 [ 289.815698][ C1] RDX: 00000000105209fd RSI: ffffffff8e69d794 RDI: ffffffff8c6da780 [ 289.823931][ C1] RBP: ffff88802f25ddc0 R08: ffffffff8177f1df R09: 0000000000000000 [ 289.831898][ C1] R10: ffffc9000d8675b8 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 289.839870][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 289.847882][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.854039][ C1] ? unwind_next_frame+0x8f/0x2550 [ 289.859162][ C1] ? release_task+0x124d/0x1740 [ 289.864001][ C1] ? unwind_next_frame+0x8f/0x2550 [ 289.869100][ C1] unwind_next_frame+0xac/0x2550 [ 289.874024][ C1] ? unwind_next_frame+0x8f/0x2550 [ 289.879160][ C1] ? call_rcu+0xee/0x8b0 [ 289.883420][ C1] ? unwind_next_frame+0x8f/0x2550 [ 289.888550][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.894730][ C1] arch_stack_walk+0x11b/0x150 [ 289.899505][ C1] ? release_task+0x124d/0x1740 [ 289.904346][ C1] stack_trace_save+0xa9/0x100 [ 289.909097][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 289.914469][ C1] kasan_save_stack+0x3e/0x60 [ 289.919137][ C1] ? kasan_save_stack+0x3e/0x60 [ 289.923973][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 289.929337][ C1] ? call_rcu+0xee/0x8b0 [ 289.933568][ C1] ? release_task+0x124d/0x1740 [ 289.938428][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 289.943616][ C1] ? __pfx_delayed_put_pid+0x10/0x10 [ 289.948891][ C1] call_rcu+0xee/0x8b0 [ 289.952949][ C1] ? free_pid+0x2c1/0x340 [ 289.957273][ C1] release_task+0x124d/0x1740 [ 289.961950][ C1] ? do_exit+0x168c/0x2360 [ 289.966355][ C1] ? __pfx_release_task+0x10/0x10 [ 289.971370][ C1] ? _raw_write_unlock_irq+0x23/0x50 [ 289.976644][ C1] do_exit+0x168c/0x2360 [ 289.980894][ C1] ? __pfx_do_exit+0x10/0x10 [ 289.985480][ C1] do_group_exit+0x22d/0x2f0 [ 289.990055][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.995418][ C1] get_signal+0x121b/0x12c0 [ 289.999924][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 290.005480][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.011737][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 290.017106][ C1] ? rcu_is_watching+0x16/0xb0 [ 290.021875][ C1] do_syscall_64+0x328/0x520 [ 290.026541][ C1] ? trace_irq_disable+0x3b/0x140 [ 290.031553][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.037607][ C1] ? clear_bhb_loop+0x70/0xc0 [ 290.042274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.048154][ C1] RIP: 0033:0x7f9f4b79e159 [ 290.052554][ C1] RSP: 002b:00007f9f4c6ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 290.061222][ C1] RAX: fffffffffffffe00 RBX: 00007f9f4ba26278 RCX: 00007f9f4b79e159 [ 290.069222][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f4ba26278 [ 290.077193][ C1] RBP: 00007f9f4ba26270 R08: 0000000000000000 R09: 0000000000000000 [ 290.085153][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.093109][ C1] R13: 00007f9f4ba26308 R14: 00007f9f4bb4f960 R15: 00007f9f4bb4fa48 [ 290.101079][ C1]