last executing test programs: 7m43.647811289s ago: executing program 1 (id=3214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, 0x0, &(0x7f0000000400), &(0x7f0000000140)) 7m42.370838245s ago: executing program 1 (id=3218): r0 = socket$inet6(0xa, 0x3, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) unshare(0x2c020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$key(r2, 0x0, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'veth1_macvtap\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0xffffffe5, 0x3, 0x9]}}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf7, 0x14, @mcast1, 0x9}, 0x1c) r7 = dup2(r0, r0) write$tun(r7, &(0x7f00000000c0)=ANY=[], 0x46) 7m38.214280689s ago: executing program 1 (id=3226): r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @dev={0xac, 0x14, 0x14, 0x39}}, @echo_reply={0xe0, 0x0, 0x0, 0x66}}}}}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, 0x0}, 0x20040010) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2000000000007cb2) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 7m34.102575289s ago: executing program 1 (id=3234): syz_open_dev$loop(0x0, 0x7, 0x10c062) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$loop(0x0, 0x2, 0x525040) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x6) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="8d", 0x1, 0x4008004, 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000002340)=""/212, 0xd4}], 0x1) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000180)={0xfffffff9, 0xc, 0x80, "c6c479f211dc6d37a91da1e5bfa743b1f2772fb72a69e05a2f54847639a2aff3", 0x64737664}) recvfrom(r2, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 7m33.46559256s ago: executing program 1 (id=3236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000700)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m32.439538069s ago: executing program 1 (id=3241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'dummy0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x8) r5 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90d, 0x60, '\x00', @p_u32=&(0x7f0000000340)=0x8}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000906010800000000fcffffff060000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) 7m17.144724237s ago: executing program 32 (id=3241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'dummy0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x8) r5 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x98f90d, 0x60, '\x00', @p_u32=&(0x7f0000000340)=0x8}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000906010800000000fcffffff060000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) 11.150213101s ago: executing program 4 (id=4402): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000340)={'syz0\x00', {0xd, 0x8, 0x5, 0x2}, 0x3b, [0x4, 0x6, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10000, 0x726, 0x4, 0x8, 0x5, 0x8d, 0x6, 0x8000, 0x200, 0x7ff, 0x9, 0x5, 0x7, 0xab47, 0x81, 0x2e, 0x3, 0x7, 0x6, 0x4, 0x1000, 0x9, 0x5, 0x83, 0xde, 0x5, 0x74, 0x3ff, 0x1, 0xd, 0x0, 0x1741, 0x800, 0x0, 0x80000000, 0x3ff, 0x5, 0x3932, 0x63, 0x2, 0x5, 0x1, 0x24, 0xfff, 0x8, 0xffff, 0x2, 0x9, 0x5, 0x0, 0x5, 0x4, 0x5b1, 0xffffffff, 0x2, 0x2, 0x10], [0xcd, 0xffffffff, 0x0, 0x8ed, 0xffffff70, 0x401, 0x3, 0x0, 0xa, 0x9, 0xe08d, 0x743, 0x5, 0x5, 0x3, 0x2, 0xf5, 0x3, 0x7, 0x2, 0x0, 0x4, 0x1, 0x4, 0x6, 0x2, 0x16, 0x546b433e, 0x9, 0x6, 0xe, 0x8, 0xe, 0x6, 0x2, 0x9, 0x1, 0x5, 0x5, 0x3, 0x6, 0x2, 0x40, 0x0, 0x3b50, 0xc89b, 0xd, 0xfffffff7, 0x8, 0x1, 0x5, 0x2, 0x7, 0x89, 0x2, 0xfffffffd, 0x0, 0xfbf, 0x5, 0xfffffffd, 0x2, 0x7fffffff, 0x8add, 0x8], [0xd8a, 0x8, 0x1000, 0x2, 0xf06, 0x5, 0x1, 0xfffffffd, 0xe, 0xdbc5, 0x4, 0x3, 0xb, 0xffff, 0x6, 0x3, 0xffffbeef, 0x2, 0x5, 0x7, 0x7f, 0x6, 0x3, 0x3, 0x8, 0xc2c, 0x3, 0xb, 0x0, 0x6, 0x80, 0x800, 0x3c80, 0x68, 0x8, 0x6, 0x1, 0x9, 0x10, 0xc, 0x3, 0x1, 0x3, 0x400, 0x7, 0x20, 0x1, 0x8, 0x3, 0x8000, 0x9, 0x7, 0x2, 0x3, 0x80000000, 0x2, 0x40000, 0x4, 0xfff, 0x5, 0x10, 0x0, 0x7, 0x9], [0x6, 0x7, 0x1, 0x5, 0x0, 0x0, 0x29b, 0x4, 0x7f, 0x6, 0x704e, 0x3, 0x9, 0x5, 0xffffffff, 0x9, 0x77, 0x8001, 0x5, 0xcb0, 0x9, 0x0, 0x6, 0x5, 0x81, 0x8, 0x2, 0x5, 0xbcb, 0xfffeffff, 0xffff0001, 0xffff, 0x5, 0x9, 0x741, 0x6, 0xe4c5, 0xfffffff7, 0x9, 0x4, 0x0, 0x1000, 0x1ba3, 0x4, 0x0, 0x0, 0x7, 0x7fff, 0x7f, 0x4, 0x80, 0x8, 0xffff, 0x7, 0x8, 0x0, 0x4e, 0x7fffffff, 0xffff3c69, 0x7fffffff, 0x19, 0x6, 0x5, 0x8]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}]}, 0xb8}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) setpgid(r3, r3) setpgid(0x0, r3) syz_emit_ethernet(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_clone3(&(0x7f0000000c00)={0x240000500, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) 8.493363456s ago: executing program 4 (id=4406): getpid() socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r3, &(0x7f0000000380)=""/55, 0x37) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0xd, 0x3, 0x4, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x5, 0x0, 0x100000000]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './cgroup/pids.max\x00'}) close(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8}) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd}) fcntl$lock(r5, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400}) socket$inet(0x2, 0x1, 0x0) 8.223425896s ago: executing program 2 (id=4408): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = dup(0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x40000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000030601080000000000000000050000070900020073797a32000000000900020073797a300000000005000100070000000900020073797a3000000000e1"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r6, 0x1100}], 0x1, 0x20002081) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}}) close_range(r4, 0xffffffffffffffff, 0x0) 6.003380076s ago: executing program 5 (id=4413): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/128, 0x80}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x3, "eb794aeae6910a523c50191be82d39d9"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x5, 0x0) r4 = fsopen(&(0x7f0000000800)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000840)='addr\x00', &(0x7f0000000880)='::1\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x107040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @NDA_NH_ID={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) 5.559193266s ago: executing program 4 (id=4415): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000240)=[{&(0x7f0000000280)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r1, 0xfc, 0x2, 0x5}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x82, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0xb96}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-+'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '$]'}}, {@dont_measure}]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xc4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0xfffffffffffffff9, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000640)={'veth0_to_team\x00', &(0x7f0000000680)=@ethtool_cmd={0x51, 0x6, 0x40004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x6, 0xfc, 0x8}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000005c0), &(0x7f0000000800)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000006c0)={'veth0_to_team\x00', &(0x7f0000000700)=@ethtool_coalesce={0xe, 0xe0c, 0x9, 0x3, 0x5, 0xc, 0x80000001, 0x5, 0x9, 0x3, 0x0, 0x7, 0x6, 0xbd43, 0x5, 0xb3400000, 0xfffffffe, 0x7, 0x4, 0xff000000, 0x2000, 0xfffff1b5, 0x3}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x28b}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 4.996111303s ago: executing program 5 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000900)={0xc, &(0x7f0000000680)={0x40, 0x21, 0xb6, {0xb6, 0x30, "b87a9f2c17e8d0359716e2bffe08da20c3088bbe54cb148170d37fced374bb3bc7e4ba2ec29275fe65fe3917f42b5211cdf2ed9135510c585fa207dfda47878c9a5ca77df4266eca6c252c76e19b55908f96d40a4aff4f1146e90f52d88b94e8ab79f4c507e9080f8b731c500390a46bb4b6e27ba924f94503eb57428607d9820062c8a665e7155e220b5f58f83d40a507dce292aa6ab5f230586838a86c126e08f264bd7728263d84ccf757477b0b09837864b5"}}, &(0x7f0000000800)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "c9d2b3c25078d8da363c151c2d465921a79d137c83216649ee655530680a1e5280ec711ff15acc2dafaa6d599cb395352b1d411469b312a5599360f18c79482b3d4b4b366da2a8787fe4221695f2abd204cc9cd0d825169a55b2ddccbf03931eda540269456459eba2907d3f738677bdda30229af26199c95feccd706fb374df7cc5aed5cda0ba7c837ce858fa74c75117023f36abdee7a249deae7fa045248edaba87be0920a42c451e4178e0372359a88778d8ed1f5a9de8ab607d65693e1be4135759821bf3c63a8c8b33b5a61898"}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x20, 0x13, 0xc4, "e8e75e067d8291aee78fb7809ec5ace37d1517f7c74e74d3d77621b1daac1d11f690f775e34470a283b6ed5fd24a28e9cc8911bbb870bcbe2510bc38050ad6601030e4040f901b4878f14c881247017072fe60b5f6875d3e46926c0af6f9c771f0ae6c760d769f7f088e121002523fda89941bdff52ae15130e510a76f46038251aa38c5bc28a4bcf81fe1d8d16bd8af293535242f853f75365389df74310f502929c8f87e9261c3f522fcc94f5efc683eb94dda3eddec8fa21f9c232484a7ba57895ceb"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "992a"}, &(0x7f0000000b00)}) 4.995697433s ago: executing program 2 (id=4417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7}) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) exit(0x2616) fchdir(r10) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r11, 0x0, r11, 0x0, 0x65) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x401}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r13, {0xb, 0xfff1}, {0xffff, 0xfff3}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0xfff3}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4.590791787s ago: executing program 3 (id=4419): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f00000015c0)=""/4059, 0xfdb, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x82316000) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0x62c}], 0x5) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000002480)={0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x408c4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48890}, 0x20058804) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='-@\x00', &(0x7f00000025c0)="c23bfcb6f290fde0d163656406a887354106815a1a9993d1709aa5d757370718d612eaa624899552a1be68dd0e35021081b2714986f1ad08c2204f98eca5660b8a733a5a1d3c327cf19fc9936ba71c6cf0dec8e23a029b3bed4e8102ed8a961191846e251d3cd96d6626efc33903e1a505997ec6c966eabeb5a60a6bb504d8a8b062ff0642fc41a8d753ab7ac5e5988b2abf3fff38dbce562e0226f5eecdd5e2da804c6f006a8ef09a50596eb301c48e37dcebeb4ca5e033ebe4ca397f3b94821c644541d3506fcf28aa7bc8d0493fb8d50581897c401ef4c25b253b6d83270d0b41b31c5beebee1314b10dd3b6535ad94769bf2f9e0aaafbc4cfeec26a47eeb9a2a9809af92a17883c1740debc56814e7e1d2668d1a186e9f7cbd6566ab2fbb208b36d878cd35dcdcd8c3b89b31dfa46e2a29a43ddc8f2121f822001659ec489c7e7e5016d0e0eafb92bf1ba714b6d60d23e6a7ff7ba11d0ec8aa125ffebeb6c5d6c2fb50d397c16fde8ed05efe74dea2f92b8aa9ce31846d8392f8fa74eba0cb4470f462fba85df4d8e3c81491c8e0795917fb00be094d0f37a748d9d0c6b3bba95b2183d32a11a87154d615dd0ede645f53d9a9808336b9745a1e41df1fbc36edfe177e4320e8bfd4a567579c7013464abb0530a9ca80e114cb1cc8698ef42a8e1090bc95c4f9699ea13b01531b63b4c9ebb155879e98cf4460fe0f5f07789846070f7a0be209e6885bcd6616080b44f841988a1fba5c532b03e1d45f09c094eb20b313c0fa19b1edbfabfca1d5229aa6f133f7c68afe8efd9e0b746df75df1c5546077c5e654375ef510408e7ff4c7d89552e6e786922899b6218d9c0379110adad837fc5c7281742db0bbe63300bd4630dd94e3a5085c14b6e60765174bf08d9f50133f20d242d660a02efd856c533c8df6e510036b7d4470d06d7a9d5354b4b33437323afaecd8ca13f0f53cb691838c95241f0f17602a744261acefa062d285711682ede95da837932222842556b4b3c87e6902d58fca405a6c2f4521764650fd027251a2d48d8e910260f4b8b36a8d496c8becf2fc90939008d636f6e40138ec1be47738e828b31400d3ed3f55843153b55a3fcdeeb1c1db09fa982570893a15e8f9efe307cef4d32a1418dec516759df332b5bd74d6282d2f23aee0634ec34d21b6a8bb4a9fdbd970aa1a8bd48db84e402174a3a1354a1bb5be7a191f5fe145e5876009549da7a2e7f6b0ea5ae47068f34f6bfbef3eda935ceba2548cf31fa8aac9bf81e01fcd5118e70985751a31dc2da36142cb64d677fa1b4521ebd28da4c7c6fafefe3d6018e52451aa773a5bb3b0d95049c397eb2911afac028c547fdc69bbe17ef6effad340d68a91998e5d2f4047065b6df0a132080dc34f6ac6a816c326c6f6ad739254ec3510bf7b8d4151bc0bbf60d97bd56861c813af620f8c111c969d94645066a96e17b59a5538dae26c9e1b30ac4347f4f3208f242c549bb097d543fea2931919777a0edf6f2c8e6bbeb37ad0f7d2ebbc3cb808436cd5a73233b72b1e5b16122a804a8763a94fff18d4c04f7700aa9eea387822b3d2db9c3359222a5b2bfd03b132becabe1261f86b64a0e4b335577f7b01f0b645d67a978428ed681ce9afead635310d3dfa7d27176f35c84e7f7e2b42bf0f45fb4bc97aa8a114f898a0c0751705790f0dfa8024738c4d592398b55fedb4e89d63b5511393af0c4cd1bef148a61044af6949bc3113c00fc33e93add5023857217b1f39de716e61194932ce91cf2f8e7a168cf8bd8e26c792443b1e4300cf898864732fc27984f606ac39a48ec55d9d7ea533efa5b0312baefdbfd992c8565db7186ddba9f1645a8878d9e4d76a177746e6d9e01c191a99abd2c8e3ee8649bd9b8525c02990dd0f564e5e8663ed1c3071bcadfa1e14bd1faa27aeefa61a01b7406b64e23b1bfc4cf838a0b3be9ebe26b77737032f528d98f0190cedd80dabcbe33a474c76e1655383eb81292ba98f1acf7b5c4b188bb6ddaaddf312dc19fae312708bbdcb49ce17f012ed5a589cecd99b19880317baca16b79aceebdc2bd580932e6cdbc50afaec57aec0405747e465d3f84826b906e21a073c109884a591b2983b5d6865dcdd8090a45e61ffede942dc969650160b14cfa3e4ad09458ceb75af65e8199c845521c691829b3728252034ff9fcfe27252d440ca4324cd9f74099f0bf9b2cc0f6c12aaa4ecb9acd29ee0ef51a6cb0ae9386bb5f6687b17df78dac7b0ac82f7e040e08f59455b38dabb597c16136711e69c9d702fc933eec4b62fe0d4cc3a0c3baa5ab40e7815981431b75296a33fc4a7ba177da57be8a8b2be4e4be4cbd3b4c627d19792ad26075087baaa5266d6b83594df247bbe6ce56762985d3c51037d4b42e2fc06f3053d5d648146bbbf8bd6a0091d8ff0bd8b4591140e8d6df4253771dcf471e397d29c0ee9a03ea59065472aaade9f8c063fbb59389aaaaa73e0aae2f34a37f1ebfa6fb9d69fef93b98480d511a5ce0f2389a3befd2f3d286010f9b8200c6844a523204b05fa82a9e60d8c28d1ae445e46e189ec11c384e951b262927e9fa6febb8ccbdee32473e9c82bc68c1e30503e52c2bce52ac05c0e8a853c784b51b4e7c4f94a476df3f053a869101ea7d325cb78895c076443beef46d5e095dda34aa9d358f94b6235d414c371eb3d67595773e70bdeef71e9cfbf724d3029014390578a5253bf29043424c4e8edce5fd3a360769bac500d2340d01290679645ea2e820122590298d3540b3670173b6aed09abf599203f14a5ecab9efaa7d3ed02552fa47c2a03b8cc86c4712377c50acc0e7ed16fdf48d9ccda86f20746ad7e2dca20b631e94b73071607f68b6b61c09e272b03c714699de90f7b5185cd4eec02b8bc6a7c268f989848c52b78cbc3ced7a63630814ef5cb9929ef85ac178715285c059e9d286d51e5bbcc100ab844ac86dbb6973f315d907c60d0512d08a30cafd5af9f51b0a6280657f25fa1915148ee3661f0098536bc1d58d96c45ed653f6e64a767afb1812898435dbf2847336a1d6d8ecea1f86e550240cec68f81575012fd442d94dd7dcf603a768a7c376894b739f9d2a232cb99f0b4e0a7bbc92dafef2de9bcae7668aa893a533724760333b61af8b6efe7103278a7214543acc2951ffc82c18ead51f6663c90ea62a261eb6aa7d0184c2ee85103b0529725ea9f96a25fbba5d8bf6703841e415daa3cda8da2a8888c9c994be3d043680a74d7ae43bca41b30402479eae4a4cf062725d66c7cf27548b00d3a9e25053dea63eaa7b840bb3e09cd9037960a3fb954cdd7c265b4b562455af66008fc8f2eacbaedac8fe477c6b106f908fc800f1955d2031949dbbff838430fadd5652fb7025859b15db033db8410558b313fc73fe7f96ebf1484cdab88f09cc344ac82941021bac6d2101c281a997fdc92c9eb09f98d1c9f88a1505007e979083d2c6fc5fcc7f582ba489ffdf31de9a0be8a445d4ab7d97101d4baa57218b5daab6879802917b953a77e5fee50b03b4945078c6b933080131bed92e38d9f7d1f3ac626aedd1b8ba4a57bc232236b0c58ed8628743b84f349723a02d6565229cc8a435531d1c44082c5bb25aaaae69e311e38db7ad822af429b4d689ab4507f381fd78f43caadfa12d9c1ac97f172b4c50625ea77616228f474c6be8cade9166a03709031c09a7a55f030d56c942ea569681f0386ba171cad4ab70f7a8ec66f97f10cfb609e2320f01c029729745ed2a7451d2b5b30ce1c278904e7635cd30620255a2f4decfe8083e771896b48b15eeda80079929fc866674daec6b3684bf71058f2993d370230284f5d50f0a1b78fa10f941ece668d183d71f0aa8f077953a5bd1763b1a2381d19df657c2155249ade73eec639a8714b2371140c2e8f481e914c86d553fb1488d1251932c0786b1c4d7f753cb12b1583205bde7594d45536a649a266cf3004b2a3389f23bf84ccbad456c4978c5548c87438dfb4dc9991f7d1aac65920bd84e4456197cf292962a2769f5b677aa56d0fe57d8192c4e4205b05c9b777829c4b01be96d48263656c5019ee22b2eddbfd7507f798b862082d7a883aac870efa91c55f6aefd340bbb23f597b96dc0188c4f98c6c0f77e0da829971cc4b5b16be1a75d4684443f131ed0a9c2a6414831ac3c1e6389dd4cfc63f1267ea382f254d8c74f64cc47478b96254f390680cef0f3a1c7a030e568933b06565073e4c2127c03f76eea4cb2fa05c0584e585574baa10f7329dac100512f1e7df8bf583d65b63381d338d3c26c70f25b05a388fcfe017b41072766939a9f1735a79ee3b387821973e68fbdb68b1bdf5f5308dffb1870975b377f34596d73aa7663cd044c1a40f9c6ff298ce048cd5db3cd83732ec513e98ff32f47b5dc9a681dd3cc50a45953111b5613fb3b52ff078498bf22bb207909473f899aad8b58f39db5d435383b21c803bc31d436349a75f99c015266030aad360acd28a87913beb5e310bd9a6af82d6d34e18a669538e47a096b7c2bc78e60fea9b26d1f0da47570d0dbb95d51e9518b1160d0968fe6ba97b86edbee93d6939bfae5b3f033e29f945008bc9ab12302a387c9b37cae80657aa8333997cef43e7c87bd5082802a77c2adf14d2434a2b93dea3271859b671df90df0488229fc1cb85ccfa41a572bf1f7da3f475c6d1113f036ec3660af1399282ee98bca1c6915f082e128ae3e20563b30d943ea2e9a5225419f3149abb72181a550309ed33ef330d83fec65d4daa6628c2ad8a2d01d90fbd1964b4f3c8e5f400537876365a19516d93d6d4880b6696c1ebf2c25bb6b933cd131c582ea57063909ff5d0a9cc7a90b81a77f9dcf540780a601a36e4e514ef35f87cfbb3e933b18aba98857f14bf675454e0dd8a89af9311570e395f0779a5a5bf1d8a375d2b61462fbfa971d3949d104acf70119678f4e4270efcb97a02c9a3af819cfab57d8274dbdc8d516f0cbd9647f47b124c817724f6de4a579765184f0dbec639150c43a78ff498ec060b11cc7b77f6de99c9d8c9c80e29d6ae14b818494072fa07c6b3b0e6b0e38500ed8b4311c44c9aba569e9ac03ab9e46205074dadfa412b3fe78a493864dfe8b2e0d7c00129f9278ba351a310d8da64516b0d679bc0258e6d725bc160517d6b44b5ea8233829e5ee53b406eef8eb1ee57f257ba686f3e8646015cc74eeba449652c6dabc158b330684cd6a060e4b775b868ea8251e87c85b2d07c5041920788227d14222973d9c45a6a11ed50c4de1bb12574c89407960d7b02f81f0483c040ef9ced9e3f69f640c79706be8983435b8d53cf602d8d32b9b9f612b5f94e6e2c634e63767639092d36a1dcb37fb5833cd446df0cafed5ecea094220edbb89ac23da650b476dfaea1806d1a506225cab7821fbc28d985e0f44943445fb787f86640e8d367738944b023000cb33bb05bf5b62a2508de498e35a0120122cd59b6a92849ce8223b52243d2bb12695d0aa7291446bf7ae71983af986a3330a799fa79261df1d961dc65974d8df0feb5d6184e7c84b958469a8d8f9877be2e06ac307780b7fb86cdf352208baab4695c8d8e8def8881869fd6f26fa281672ba46ad2ea64eb766e801746ca3018f93ffecbbf0862323b2d87de67a2aa4e6b6465c6fb39350393089f6890a27311c4e412c6df77f9236a00bb98989cb02b27a6b45a2c0fd61d0cead8276a27f9310072cf3032544153835cf271edf261e72c974c053497fc3c9a33ed8c78e77d34a67a1c1417a2", 0x1000) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x2}]}}}}}}}}, 0x0) 4.016804582s ago: executing program 3 (id=4420): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x483, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffff7b85}, [@IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ace8}]}, 0x48}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000500)=0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000580), 0x6, 0x101000) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000b40)=0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000c00)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4cb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r7, 0x32b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000600)={0x9, 0x1, {0x16, 0x11, 0x1, 0x1, 0x3, 0x3, 0x1, 0x5a, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000480)={&(0x7f0000000340)=[{0x2, 0x0, 0x7fffffff, 0x893e, 0x100000000, 0x7fffffffffffffff, 0x880a, 0xe8a3}, {0x0, 0x0, 0x0, 0x7fff, 0x1e9, 0x3, 0x80000001, 0x7}, {0x1, 0x0, 0xfff, 0xfffffffffffff000, 0xfff, 0x4, 0x0, 0xc435}, {0x2, 0x0, 0x514, 0x4, 0xf2f, 0x7, 0x80000001, 0x10000}, {0x0, 0x0, 0x8, 0x394, 0x4, 0x4, 0x2, 0x342c}], 0x5, 0x38, 0x1, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000b80)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@multicast2}]}, @ssrr={0x89, 0xf, 0xce, [@empty, @rand_addr=0x64010100, @loopback]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000540)={0x43, 0x1}, 0x10) 3.995972088s ago: executing program 2 (id=4421): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000640)={'veth0_to_team\x00', &(0x7f0000000680)=@ethtool_cmd={0x51, 0x6, 0x40004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x6, 0xfc, 0x8}}) 3.873044921s ago: executing program 2 (id=4422): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.867497088s ago: executing program 4 (id=4423): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x0, 0x7fff, 0x3, 0xffffffffffffffff, 0x0, 0x0}) madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x16) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000004500)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x2, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000002340)='./file0\x00', 0x1000000, &(0x7f0000004640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64655b61756c745f7065726d691de0cd914aa057eef2fdc37373696f6e732c00"], 0x1, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000004580)='./file1\x00', &(0x7f00000045c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x4, 0x1], 0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.792756979s ago: executing program 2 (id=4424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x1, {0x1, @vbi={0xf5, 0x1, 0xb, 0x56595559, [0xffffffff, 0x400401], [0x10000006, 0x3730], 0x1}}, 0xfffffe01}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@local, 0x1, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x2, @in6=@private2, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @empty, 0x80000000}, 0x1c) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x1}, 0x10) bind$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r8 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000540)='minorversion\x00', &(0x7f0000000280)='5\x00', 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x80) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0) syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0xfffffffe, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.788982935s ago: executing program 0 (id=4425): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0xb382, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000480)='n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x14) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000003c0)={0x0, 0x0, 0x5}, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0085666, &(0x7f0000000000)={0x2, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2b}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x6, @local, 0x4e20, 0x0, 'lblc\x00', 0x1, 0x12c, 0xffffffff}, 0x2c) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RLINK(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000004c0)={{0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0xffffffff}, {@remote, 0x4ea0, 0x3, 0x1}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0001800600925542c10000"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', r6, 0x10, 0x1, 0x3, 0x9, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x66, 0x0, 0xa9, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f00000005c0)={0x2, 0x4e20, @local}, 0x10) 3.351776996s ago: executing program 3 (id=4426): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000005c0), &(0x7f0000000800)=0x4) 2.57687252s ago: executing program 0 (id=4427): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2000000, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000002c0)={0x0, 0x4, 0x5, &(0x7f0000000300)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x181) ioctl$HDIO_GETGEO(r4, 0x301, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000080)) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @private0, 0x6}, 0x1c) syz_open_dev$loop(0x0, 0x75f, 0xa382) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r5, 0x0, 0xff) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r7, &(0x7f0000000180)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e21, @loopback}}) 2.527177326s ago: executing program 3 (id=4428): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x2, 0x87, 0xd, 0x3}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000340)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) write$binfmt_elf32(r5, &(0x7f0000000540)=ANY=[], 0x58) write$P9_RGETATTR(r5, &(0x7f0000000600)={0xa0, 0x19, 0x2, {0x10a8, {0x80, 0x3, 0x5}, 0x1ec, 0x0, 0x0, 0x5b, 0x5, 0x3, 0x6, 0x6, 0x2e7, 0x62746f85, 0x7, 0x29, 0xb700, 0x2, 0x40, 0x1, 0x9, 0x6}}, 0xa0) execveat(r5, &(0x7f00000006c0)='\x00', 0x0, 0x0, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80000) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x2) 2.435538692s ago: executing program 5 (id=4429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x17e, {"b6b1449af50700000000f904008000", "00000026021006000000840200000e8b", "00000900ff7f000400"}, 0x0, 0x2}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xaa, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1e, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x5, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x7, 0x7, "cfa11cab1a"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r5 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc0b45545, &(0x7f0000000040)=0x1000) recvmmsg(r0, &(0x7f0000008580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x4e}], 0x2, 0x1100, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r7, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x3, 0x2, 0xffff, 0xfffffffffffffffb, 0x80, 0x5, 0xfffff370}, 0x0) 2.36639821s ago: executing program 2 (id=4430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) semget$private(0x0, 0x4000000009, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x439, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0xb}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 2.147763028s ago: executing program 5 (id=4431): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x406, r2) write$binfmt_script(r6, &(0x7f0000001b00), 0xfffffd9d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078dadf"], 0x0) 1.954629869s ago: executing program 0 (id=4432): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x75, 0x109301) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b00)={0x90, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x90}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xa0, &(0x7f0000000140)={0x80, 0x6, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x108001, 0xdffffff9, 0x0}) r4 = syz_open_dev$loop(&(0x7f00000004c0), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000017c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0x7]}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000580)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x77, 0x101301) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="48000000100001040000000000dde40000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001cc0)={'bridge_slave_0\x00'}) sendmsg$kcm(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001e40)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a", 0x23}], 0x1}, 0x0) 1.59420685s ago: executing program 0 (id=4433): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x80803, 0x84) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.106157745s ago: executing program 5 (id=4434): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x23) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x0, 0x4}}], 0x58, 0x4044004}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x88}}, 0x0) r6 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) read(r6, &(0x7f0000001e80)=""/96, 0x60) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000980)="010001000000000000000f00015b86f74f9da8fa9c4d0386db2cbf", 0x1b, 0xfffffffffffffffd) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x70bd28, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_SRC={0x8, 0x2, @broadcast}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "484c3ee8d736a8aff6a18bb418403f6b078a36c19497890c47a269190cefd36b27ad2b35411ae1ffe4d988134cb6033e0800e9115faae5c671628c70dbf6a91c7c97db4f88f927e9736eed7bda56e9d881d4caeb7c745451abe6a9a96080c29c897b6bd16ebafd1c375e40a88b4b00d79ab5b02fa9d8603697bb319d0b8368fc"}}}}]}, 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg0\x00', 0x0}) r11 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x4b0, 0x190, 0x0, 0x258, 0xc8, 0x258, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x62, 0x7}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xff], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff], [], 'veth0_to_team\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2, @private0, [0xffffff00, 0xffffff00, 0xff, 0xff], [0x0, 0xff, 0xff, 0xffffff00], 'virt_wifi0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x87, 0x8, 0x0, 0x8}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x2}}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'geneve0\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) connect$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0xf5, r10, 0x1, 0x2}, 0x14) 711.561099ms ago: executing program 3 (id=4435): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) 642.802995ms ago: executing program 5 (id=4436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x10106, 0x2, 0x0) 638.135519ms ago: executing program 4 (id=4437): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000a80)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000b00)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000b40)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000b80)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000bc0)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000c00)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000c40)={0xa, 0x6e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000c80)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000d00)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r9, &(0x7f0000000d40)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000d80)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 584.502889ms ago: executing program 0 (id=4438): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x8e000) read$FUSE(r3, &(0x7f0000002d80)={0x2020}, 0x2020) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f00000012c0)={0x2, 0x4e20}, 0x22) recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) setsockopt$inet_mreq(r4, 0x0, 0x24, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) socket$kcm(0xa, 0x2, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x100, 0x6, 0xa40, 0x4}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/142, 0x8e, 0x7) 267.994296ms ago: executing program 4 (id=4439): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x76, 0x101301) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000100), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000140), 0x10106, 0x2, 0x0) fstatat64(0xffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0), 0x6000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x400) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x5) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r7, 0xc17a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x42, 0x7, 0x8, 0x10101, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000000000091a85baa000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x6, 0x0, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x4, 0x97, 0x200, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000500)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x5, 0x0, 0x0, 0x5, 0xb, 0x0, 0x8, 0xabaa, 0x0}) 265.829264ms ago: executing program 3 (id=4449): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0x1) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 0s ago: executing program 0 (id=4440): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000005c0), &(0x7f0000000800)=0x4) kernel console output (not intermixed with test programs): rocess `syz.5.3766'. [ 1319.262935][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3766'. [ 1319.455590][T19758] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1319.460379][T19758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1320.938083][T19773] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1321.949067][T19788] bond0: (slave ip6gretap0): making interface the new active one [ 1321.961529][T19788] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1322.272771][T19789] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 1322.323533][T19789] bond0 (unregistering): Released all slaves [ 1322.683404][T19797] syz.3.3777: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1322.683477][T19797] CPU: 0 UID: 0 PID: 19797 Comm: syz.3.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.683494][T19797] Tainted: [L]=SOFTLOCKUP [ 1322.683499][T19797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1322.683506][T19797] Call Trace: [ 1322.683511][T19797] [ 1322.683517][T19797] dump_stack_lvl+0xe8/0x150 [ 1322.683549][T19797] warn_alloc+0x24d/0x270 [ 1322.683570][T19797] ? __pfx_warn_alloc+0x10/0x10 [ 1322.683584][T19797] ? policy_nodemask+0x31b/0x980 [ 1322.683599][T19797] ? alloc_pages_mpol+0x256/0x390 [ 1322.683617][T19797] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 1322.683655][T19797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1322.683668][T19797] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1322.683710][T19797] ? rcu_is_watching+0x16/0xb0 [ 1322.683729][T19797] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1322.683741][T19797] ? rcu_is_watching+0x16/0xb0 [ 1322.683758][T19797] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1322.683770][T19797] __kvmalloc_node_noprof+0x59c/0x820 [ 1322.683786][T19797] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1322.683798][T19797] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1322.683813][T19797] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1322.683829][T19797] io_ring_ctx_alloc+0x1ad/0xb80 [ 1322.683842][T19797] ? io_prepare_config+0x8c8/0xc70 [ 1322.683905][T19797] io_uring_create+0x50/0x980 [ 1322.683920][T19797] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1322.683933][T19797] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1322.683958][T19797] ? __might_fault+0xaf/0x130 [ 1322.683973][T19797] __do_fast_syscall_32+0x28b/0x6c0 [ 1322.683994][T19797] ? do_fast_syscall_32+0x33/0x70 [ 1322.684009][T19797] ? irqentry_exit+0x10f/0x9b0 [ 1322.684025][T19797] do_fast_syscall_32+0x33/0x70 [ 1322.684040][T19797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1322.684055][T19797] RIP: 0023:0xf7f83f1c [ 1322.684068][T19797] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1322.684078][T19797] RSP: 002b:00000000f543643c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1322.684092][T19797] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000898 [ 1322.684101][T19797] RDX: 00000000f71a9112 RSI: 0000000080000340 RDI: 00000000f5436484 [ 1322.684108][T19797] RBP: 00000000f54364fc R08: 0000000000000000 R09: 0000000000000000 [ 1322.684116][T19797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1322.684142][T19797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1322.684160][T19797] [ 1322.688742][T19797] Mem-Info: [ 1322.688755][T19797] active_anon:31014 inactive_anon:1595 isolated_anon:0 [ 1322.688755][T19797] active_file:9274 inactive_file:59021 isolated_file:0 [ 1322.688755][T19797] unevictable:0 dirty:584 writeback:0 [ 1322.688755][T19797] slab_reclaimable:8271 slab_unreclaimable:104725 [ 1322.688755][T19797] mapped:40821 shmem:26587 pagetables:2985 [ 1322.688755][T19797] sec_pagetables:0 bounce:0 [ 1322.688755][T19797] kernel_misc_reclaimable:0 [ 1322.688755][T19797] free:1219234 free_pcp:17159 free_cma:0 [ 1322.688788][T19797] Node 0 active_anon:124056kB inactive_anon:6296kB active_file:37096kB inactive_file:235848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163252kB dirty:2336kB writeback:0kB shmem:106348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15376kB pagetables:11752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1322.688820][T19797] Node 1 active_anon:0kB inactive_anon:84kB active_file:0kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1322.688849][T19797] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1322.688885][T19797] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1322.688908][T19797] Node 0 DMA32 free:947832kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:124056kB inactive_anon:6296kB active_file:37096kB inactive_file:235848kB unevictable:0kB writepending:2336kB zspages:1900kB present:3129332kB managed:2522812kB mlocked:0kB bounce:0kB free_pcp:68440kB local_pcp:28804kB free_cma:0kB [ 1322.688944][T19797] lowmem_reserve[]: 0 0 1 1 1 [ 1322.688964][T19797] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1322.688995][T19797] lowmem_reserve[]: 0 0 0 0 0 [ 1322.689015][T19797] Node 1 Normal free:3913744kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:84kB active_file:0kB inactive_file:236kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 1322.689059][T19797] lowmem_reserve[]: 0 0 0 0 0 [ 1322.689079][T19797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1322.726353][T19797] Node 0 DMA32: 3781*4kB (UME) 2715*8kB (UME) 3273*16kB (UME) 2192*32kB (UME) 587*64kB (UME) 180*128kB (UME) 101*256kB (UME) 43*512kB (UME) 28*1024kB (UME) 12*2048kB (U) 153*4096kB (UM) = 947772kB [ 1322.726487][T19797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1322.726550][T19797] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 13*16kB (UM) 1*32kB (U) 2*64kB (UM) 1*128kB (U) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (M) 954*4096kB (UM) = 3913744kB [ 1322.726639][T19797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.726649][T19797] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1322.726659][T19797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.726669][T19797] Node 1 hugepages_total=7 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 1322.726677][T19797] 94968 total pagecache pages [ 1322.726682][T19797] 65 pages in swap cache [ 1322.726687][T19797] Free swap = 117932kB [ 1322.726692][T19797] Total swap = 124996kB [ 1322.726696][T19797] 2097051 pages RAM [ 1322.726701][T19797] 0 pages HighMem/MovableOnly [ 1322.726705][T19797] 434384 pages reserved [ 1322.726710][T19797] 0 pages cma reserved [ 1323.470511][T19802] ip6gre1: entered allmulticast mode [ 1323.965001][T19808] net_ratelimit: 12 callbacks suppressed [ 1323.965017][T19808] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:5) [ 1324.168821][T19815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.169136][T19815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.398781][T19815] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1324.603680][T19823] libceph: resolve 'c' (ret=-3): failed [ 1325.448686][T19826] netlink: 'syz.3.3783': attribute type 10 has an invalid length. [ 1325.784449][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.495679][T19834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.499666][T19834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.991693][T19842] sock: sock_set_timeout: `syz.0.3790' (pid 19842) tries to set negative timeout [ 1327.323831][T19847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3793'. [ 1327.345621][T19847] netlink: 'syz.5.3793': attribute type 10 has an invalid length. [ 1328.369509][T19860] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1328.379129][T19864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.402434][T19864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.619366][T19866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1329.862846][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 1329.944224][T19882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.944556][T19882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.739434][T19893] libceph: resolve 'c' (ret=-3): failed [ 1331.412021][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.852732][ T31] kauditd_printk_skb: 129 callbacks suppressed [ 1333.852748][ T31] audit: type=1326 audit(1794145268.203:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1333.857963][ T31] audit: type=1326 audit(1794145268.203:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1333.906353][ T31] audit: type=1326 audit(1794145268.213:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1333.906931][ T31] audit: type=1326 audit(1794145268.253:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1333.975830][ T31] audit: type=1326 audit(1794145268.323:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1333.975865][ T31] audit: type=1326 audit(1794145268.323:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1333.975888][ T31] audit: type=1326 audit(1794145268.323:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1334.034585][ T31] audit: type=1326 audit(1794145268.363:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1334.034667][ T31] audit: type=1326 audit(1794145268.363:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1334.034706][ T31] audit: type=1326 audit(1794145268.363:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19908 comm="syz.0.3807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1335.408534][T19931] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1335.858840][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3812'. [ 1335.940569][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3813'. [ 1335.998488][T19944] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 1336.901215][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 1338.103911][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1338.124175][ T11] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1338.271866][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 1338.272653][ T11] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1338.275188][ T11] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1338.275214][ T11] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1338.275239][ T11] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1338.275254][ T11] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1338.275270][ T11] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1338.280362][ T11] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1338.280401][ T11] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1338.280438][ T11] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1338.280464][ T11] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1338.280499][ T11] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1338.410866][ T11] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1338.410909][ T11] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1338.434340][ T11] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1338.434363][ T11] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1338.434379][ T11] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1338.490911][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.490931][ T11] usb 3-1: Product: syz [ 1338.490940][ T11] usb 3-1: Manufacturer: syz [ 1338.497234][ T11] usb 3-1: SerialNumber: syz [ 1338.808953][T19958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1338.849621][T19958] lo: Caught tx_queue_len zero misconfig [ 1338.917613][ T11] adutux 3-1:168.0: interrupt endpoints not found [ 1338.957197][ T11] usb 3-1: USB disconnect, device number 106 [ 1338.984787][T19549] udevd[19549]: setting owner of /dev/bus/usb/003/106 to uid=0, gid=0 failed: No such file or directory [ 1340.441147][T10677] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1340.602101][T10677] usb 3-1: New USB device found: idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1340.603230][T10677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.662473][T10677] usb 3-1: selecting invalid altsetting 3 [ 1340.662500][T10677] comedi comedi5: could not set alternate setting 3 in high speed [ 1340.662517][T10677] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1340.712095][T10677] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1340.946730][T19975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.963063][T19975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.574348][ T6319] usb 3-1: USB disconnect, device number 107 [ 1342.865795][T19996] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1343.861435][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 1343.886803][T20020] libceph: resolve 'c' (ret=-3): failed [ 1344.825986][T20023] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 1345.166972][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1345.167008][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1345.258596][T20017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.621431][T14507] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1347.761495][T20054] netlink: 'syz.3.3844': attribute type 10 has an invalid length. [ 1347.773483][T14507] usb 3-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1347.773512][T14507] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1347.778268][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.778303][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.778319][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.780493][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.780525][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.780541][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.837944][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.837985][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.838000][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.876754][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.876792][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.876808][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.913809][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.913867][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.913893][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.918191][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.918247][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.918273][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.920140][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.920186][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.920202][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1347.957792][T14507] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1347.957829][T14507] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1347.957844][T14507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1348.032912][T14507] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1348.032933][T14507] usb 3-1: Product: syz [ 1348.032943][T14507] usb 3-1: Manufacturer: syz [ 1348.032951][T14507] usb 3-1: SerialNumber: syz [ 1348.038161][T14507] usb 3-1: config 0 descriptor?? [ 1348.080370][T14507] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1348.484248][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1348.567168][T17564] usb 3-1: USB disconnect, device number 108 [ 1348.624295][T17564] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1349.675189][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3846'. [ 1350.286176][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.286492][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.554300][T20097] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1353.608222][T20119] sock: sock_set_timeout: `syz.4.3859' (pid 20119) tries to set negative timeout [ 1354.021220][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 1354.890629][T20123] use of bytesused == 0 is deprecated and will be removed in the future, [ 1354.890642][T20123] use the actual size instead. [ 1355.271052][T17564] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1356.704306][T20135] loop5: detected capacity change from 0 to 7 [ 1356.718108][T20135] Dev loop5: unable to read RDB block 7 [ 1356.719475][T20135] loop5: unable to read partition table [ 1356.728846][T20135] loop5: partition table beyond EOD, truncated [ 1356.731135][T20135] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1356.885783][T20145] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3867'. [ 1357.438068][T20152] bond2: entered allmulticast mode [ 1357.438384][T20152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1357.508132][T20152] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1357.522531][T20152] macvlan4: entered allmulticast mode [ 1357.522548][T20152] bond0: entered allmulticast mode [ 1357.543036][T20152] bond2: (slave macvlan4): Enslaving as a backup interface with a down link [ 1357.584917][T20155] kAFS: unable to lookup cell '(G' [ 1357.599165][T20155] kAFS: unable to lookup cell '(G' [ 1361.886424][ T5642] Bluetooth: hci5: ISO packet for unknown connection handle 201 [ 1361.946441][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.946485][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.386447][T20210] bond1: option mode: unable to set because the bond device has slaves [ 1363.440442][T20210] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 1363.643153][T20213] kAFS: unable to lookup cell '(G' [ 1363.645363][T20213] kAFS: unable to lookup cell '(G' [ 1363.983451][T20222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1363.983555][T20222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.983570][T20222] batadv0: mtu less than device minimum [ 1363.984396][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.985225][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.986046][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.986873][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.987665][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.988476][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.989247][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.990046][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1363.990847][T20222] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1364.148398][T20224] netlink: 'syz.5.3890': attribute type 1 has an invalid length. [ 1364.243973][T20222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.485400][T20215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.485991][T20215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.757367][T20242] fuse: Unknown parameter 'fd0x0000000000000006' [ 1367.133499][T20261] bond1: option mode: unable to set because the bond device has slaves [ 1367.232682][T20261] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 1367.932673][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1367.932688][ T31] audit: type=1326 audit(1794145302.283:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1367.933364][ T31] audit: type=1326 audit(1794145302.283:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.003586][ T31] audit: type=1326 audit(1794145302.353:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.004116][ T31] audit: type=1326 audit(1794145302.353:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.005132][ T31] audit: type=1326 audit(1794145302.353:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.007889][ T31] audit: type=1326 audit(1794145302.353:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.196746][ T31] audit: type=1326 audit(1794145302.543:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.196804][ T31] audit: type=1326 audit(1794145302.543:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.197715][T20275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.198016][T20275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.225510][ T31] audit: type=1326 audit(1794145302.563:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.225548][ T31] audit: type=1326 audit(1794145302.563:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.3.3902" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83f1c code=0x7ffc0000 [ 1368.379723][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1369.314975][T20301] bond1: option mode: unable to set because the bond device has slaves [ 1369.413706][T20301] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 1369.983163][T20305] tipc: Enabled bearer , priority 0 [ 1369.985423][T20305] syzkaller0: entered promiscuous mode [ 1369.985442][T20305] syzkaller0: entered allmulticast mode [ 1370.047570][T20305] tipc: Resetting bearer [ 1370.078614][T20303] tipc: Resetting bearer [ 1370.211786][T20303] tipc: Disabling bearer [ 1370.758889][T20310] lo: Caught tx_queue_len zero misconfig [ 1370.801102][T10677] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1370.951815][T10677] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1370.953033][T10677] usb 3-1: config index 0 descriptor too short (expected 13165, got 72) [ 1370.953051][T10677] usb 3-1: config 14 has too many interfaces: 151, using maximum allowed: 32 [ 1370.953062][T10677] usb 3-1: config 14 has an invalid descriptor of length 85, skipping remainder of the config [ 1370.953073][T10677] usb 3-1: config 14 has 0 interfaces, different from the descriptor's value: 151 [ 1370.955647][T10677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.955673][T10677] usb 3-1: Product: syz [ 1370.955689][T10677] usb 3-1: Manufacturer: syz [ 1370.955703][T10677] usb 3-1: SerialNumber: syz [ 1372.308076][T10677] usb 3-1: USB disconnect, device number 109 [ 1372.668127][T20337] overlayfs: missing 'lowerdir' [ 1373.200095][T20339] net_ratelimit: 10 callbacks suppressed [ 1373.200137][T20339] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1377.308639][T20389] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3935'. [ 1377.679172][T20393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.693607][T20393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.175479][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.176983][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.235494][T20407] tipc: Resetting bearer [ 1380.271973][T20407] batman_adv: batadv0: Interface deactivated: dummy0 [ 1380.665206][T20407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.435786][T10411] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.435839][T10411] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.435873][T10411] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.435916][T10411] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.752144][T20429] netlink: 'syz.5.3943': attribute type 39 has an invalid length. [ 1381.831872][T20429] syz_tun (unregistering): left allmulticast mode [ 1381.832331][T20429] tipc: Disabling bearer [ 1382.925111][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3947'. [ 1382.983352][T14160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.983425][T14160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.983447][T14160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.983467][T14160] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.229471][T20451] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1384.138064][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 1385.705685][T20468] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:5) [ 1385.734933][T20470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.738288][T20470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.364135][T20491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3959'. [ 1387.741262][ T11] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1387.891184][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 1387.914715][ T11] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1387.996418][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.996466][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1387.996494][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.000483][ T11] usb 6-1: config 0 descriptor?? [ 1388.111944][ T11] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1391.141993][ T6318] usb 6-1: USB disconnect, device number 15 [ 1392.869179][T20543] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1392.869211][T20543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1392.886228][T20543] vhci_hcd vhci_hcd.0: Device attached [ 1393.131384][T17564] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1393.282569][T17564] usb 6-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1393.283933][T17564] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1393.283962][T17564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1393.287030][T17564] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.287056][T17564] usb 6-1: Product: syz [ 1393.287088][T17564] usb 6-1: Manufacturer: syz [ 1393.287182][T17564] usb 6-1: SerialNumber: syz [ 1393.343860][T17564] usb 6-1: config 0 descriptor?? [ 1393.357690][T20542] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1393.573160][T17564] powermate: unknown product id 0240 [ 1393.573177][T17564] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1393.578395][T20544] vhci_hcd: connection closed [ 1393.578861][ T154] vhci_hcd vhci_hcd.5: stop threads [ 1393.578882][ T154] vhci_hcd vhci_hcd.5: release socket [ 1393.625140][T17564] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input81 [ 1393.625305][ T154] vhci_hcd vhci_hcd.5: disconnect device [ 1393.650716][ C0] powermate: config urb returned -71 [ 1393.650961][ C0] powermate: config urb returned -71 [ 1393.651251][ C0] powermate: config urb returned -71 [ 1393.651461][ C0] powermate: config urb returned -71 [ 1393.702238][T17564] usb 6-1: USB disconnect, device number 16 [ 1393.702348][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1394.069942][T20561] bridge0: port 1(syz_tun) entered blocking state [ 1394.070087][T20561] bridge0: port 1(syz_tun) entered forwarding state [ 1394.190890][T20561] wireguard: wg1: Could not create IPv4 socket [ 1394.190916][T20561] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1394.446340][T20568] netlink: 4 bytes leftover after parsing attributes in process ` [ 1394.446340][T20568] ¡&ò [ 1394.446340][T20568] lÓ35¤¹>LÖ'. [ 1394.972882][ T6307] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1395.121565][ T6307] usb 6-1: Using ep0 maxpacket: 8 [ 1395.144199][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.148750][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.183142][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.187022][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.212694][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.213377][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.241119][T20575] i2c i2c-0: dtv_property_process_set: SET cmd 0x746e6576 undefined [ 1395.262899][ T6307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1395.262954][ T6307] usb 6-1: New USB device found: idVendor=413c, idProduct=8137, bcdDevice=e3.82 [ 1395.264957][ T6307] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1395.264996][ T6307] usb 6-1: can't read configurations, error -71 [ 1395.879645][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 1395.879668][ T31] audit: type=1326 audit(1794145330.223:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.879925][ T31] audit: type=1326 audit(1794145330.223:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.941995][ T31] audit: type=1326 audit(1794145330.293:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.942051][ T31] audit: type=1326 audit(1794145330.293:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.942095][ T31] audit: type=1326 audit(1794145330.293:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.943149][ T31] audit: type=1326 audit(1794145330.293:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.944309][ T31] audit: type=1326 audit(1794145330.293:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.945545][ T31] audit: type=1326 audit(1794145330.293:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.948124][ T31] audit: type=1326 audit(1794145330.293:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1395.949079][ T31] audit: type=1326 audit(1794145330.293:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20592 comm="syz.5.3991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1396.561086][ T6307] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1396.666917][T20606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.667514][T20606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.711035][ T6307] usb 6-1: Using ep0 maxpacket: 32 [ 1396.712058][ T6307] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1396.713851][ T6307] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1396.713876][ T6307] usb 6-1: config 0 has no interface number 0 [ 1396.718363][ T6307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.718390][ T6307] usb 6-1: Product: syz [ 1396.718404][ T6307] usb 6-1: Manufacturer: syz [ 1396.718441][ T6307] usb 6-1: SerialNumber: syz [ 1396.745651][ T6307] usb 6-1: config 0 descriptor?? [ 1396.781580][ T6307] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1398.535729][T20624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.560669][T20624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.663971][T20624] wireguard: wg1: Could not create IPv4 socket [ 1398.666273][T20624] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1398.745312][T17071] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1399.145267][T10411] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1399.320094][ T6307] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1399.320423][ T6307] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1399.348770][ T6307] usb 6-1: USB disconnect, device number 19 [ 1399.541801][T17071] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1400.183033][T14160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1400.183209][T14160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1400.550312][T20656] bond2: option mode: unable to set because the bond device has slaves [ 1400.586470][T20656] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 1400.901347][T17071] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1401.778810][T20669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4013'. [ 1401.794526][T20669] netlink: 'syz.0.4013': attribute type 10 has an invalid length. [ 1401.796773][T20669] bridge0: port 1(syz_tun) entered disabled state [ 1402.429285][T20675] batman_adv: batadv0: Interface activated: dummy0 [ 1402.429312][T20675] batadv0: mtu less than device minimum [ 1402.430338][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.431655][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.432594][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.433421][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.434261][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.435128][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.435951][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.436779][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.437630][T20675] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 1402.542482][T20679] netlink: 'syz.4.4006': attribute type 3 has an invalid length. [ 1402.550109][T20675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.713715][T20675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.798266][T20675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1402.798287][T20675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.843248][T20678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1402.866991][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.867057][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.889502][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.889569][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.383668][T20688] netlink: 4 bytes leftover after parsing attributes in process ` [ 1403.383668][T20688] ¡&ò [ 1403.383668][T20688] lÓ35¤¹>LÖ'. [ 1404.101356][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1407.481733][T14165] net_ratelimit: 48 callbacks suppressed [ 1407.481751][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1407.481767][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1407.702677][T20750] netlink: 'syz.3.4037': attribute type 10 has an invalid length. [ 1407.992631][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1407.992667][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1408.501888][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1408.501913][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1409.011438][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1409.011463][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1409.500642][T14161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1409.521613][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1409.521638][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1409.625556][T20781] veth0_to_team: left promiscuous mode [ 1410.185375][T20794] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5646] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[20794] [ 1411.551156][T17071] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1411.703282][T17071] usb 6-1: Using ep0 maxpacket: 32 [ 1411.704032][T17071] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1411.705137][T17071] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1411.705155][T17071] usb 6-1: config 0 has no interface number 0 [ 1411.706986][T17071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.707003][T17071] usb 6-1: Product: syz [ 1411.707016][T17071] usb 6-1: Manufacturer: syz [ 1411.707024][T17071] usb 6-1: SerialNumber: syz [ 1411.710310][T17071] usb 6-1: config 0 descriptor?? [ 1411.775886][T17071] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1411.861196][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1411.966538][T17071] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1411.990391][T17071] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1412.582686][ T154] net_ratelimit: 11 callbacks suppressed [ 1412.582710][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1412.582777][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1412.724042][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1412.724582][T17564] usb 6-1: USB disconnect, device number 20 [ 1412.761946][T17564] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1412.768087][T17564] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1412.769199][T17564] quatech2 6-1:0.51: device disconnected [ 1413.091974][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1413.091998][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1413.600246][T20815] loop4: detected capacity change from 0 to 7 [ 1413.601677][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1413.601709][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1413.631742][T20810] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1413.691676][T20815] Dev loop4: unable to read RDB block 7 [ 1413.691710][T20815] loop4: AHDI p1 [ 1413.691734][T20815] loop4: partition table partially beyond EOD, truncated [ 1413.963472][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1413.963493][ T31] audit: type=1326 audit(1794145348.313:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.0.4063" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7fc00000 [ 1413.963537][ T31] audit: type=1326 audit(1794145348.313:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20813 comm="syz.0.4063" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f06f1c code=0x7fc00000 [ 1413.964093][T20828] netlink: 'syz.0.4063': attribute type 1 has an invalid length. [ 1414.114879][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1414.114921][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1414.593001][T14165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.624926][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1414.624948][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1415.567689][T20850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.567976][T20850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.589963][T20870] vlan3: entered allmulticast mode [ 1417.589989][T20870] bond0: entered allmulticast mode [ 1417.681232][ T154] net_ratelimit: 10 callbacks suppressed [ 1417.681255][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1417.681281][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1417.959141][T20875] bond1: (slave ip6gretap2): Releasing backup interface [ 1417.959171][T20875] bond1: (slave ip6gretap2): the permanent HWaddr of slave - 0e:ef:75:96:82:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1418.002609][T20875] bond1: (slave macvlan4): Releasing backup interface [ 1418.047553][T20875] bond4: (slave veth3): Removing an active aggregator [ 1418.061547][T20875] bond4: (slave veth3): Releasing backup interface [ 1418.110080][T20875] bond5: (slave veth5): Removing an active aggregator [ 1418.120861][T20875] bond5: (slave veth5): Releasing backup interface [ 1418.142482][T20875] bond6: (slave gretap1): Releasing active interface [ 1418.175220][T20875] bond1: (slave macvlan5): Releasing backup interface [ 1418.195403][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1418.195445][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1418.572245][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 1418.702450][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1418.702488][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1419.211433][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1419.211471][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1419.731278][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1419.731316][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1420.186737][T14161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.597694][ T6309] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1422.619221][ T6309] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1422.805087][T10411] net_ratelimit: 11 callbacks suppressed [ 1422.805104][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1422.805120][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1423.311501][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1423.311538][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1423.383514][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.383554][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.832025][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1423.832060][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1424.342597][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1424.342635][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1424.542903][T20937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1424.834686][ T31] audit: type=1326 audit(1794145359.183:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20939 comm="syz.3.4083" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83f1c code=0x0 [ 1424.865140][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1424.865165][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1425.371168][T17564] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1425.542693][T17564] usb 6-1: Using ep0 maxpacket: 8 [ 1425.583137][T20953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.583528][T20953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.623486][T20953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.623838][T20953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.646635][T20953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.646977][T20953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.706726][T20953] i2c i2c-0: dtv_property_process_set: SET cmd 0x746e6576 undefined [ 1425.730189][T17564] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1425.730237][T17564] usb 6-1: New USB device found: idVendor=413c, idProduct=8137, bcdDevice=e3.82 [ 1425.732037][T17564] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1425.732064][T17564] usb 6-1: can't read configurations, error -71 [ 1425.942694][T14165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1426.762960][T20972] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1426.763087][T20972] PKCS7: Only support pkcs7_signedData type [ 1427.861242][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1427.931189][T14165] net_ratelimit: 10 callbacks suppressed [ 1427.931213][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1427.931228][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1428.334971][T20978] netlink: 'syz.0.4092': attribute type 1 has an invalid length. [ 1428.462882][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1428.462919][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1428.545429][T20978] bond0: entered promiscuous mode [ 1428.545658][T20978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.982335][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1428.982381][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1429.064177][T20986] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1429.244149][T20984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.260391][T20984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.491401][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1429.491426][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1430.005116][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1430.395865][T21007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.399341][T21007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.450017][T21007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.450529][T21007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.702884][T14160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.107673][T21021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4104'. [ 1433.045555][T21035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4108'. [ 1433.062025][T14165] net_ratelimit: 11 callbacks suppressed [ 1433.062041][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1433.062057][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1433.113937][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4108'. [ 1433.425405][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1433.571226][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1433.571265][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1434.081226][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1434.081250][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1434.591178][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1434.591230][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1435.101744][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1435.101770][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1435.801102][T17564] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1435.962064][T17564] usb 3-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1435.968891][T17564] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1435.968910][T17564] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.968922][T17564] usb 3-1: config 0 has no interface number 0 [ 1435.968939][T17564] usb 3-1: config 0 interface 106 has no altsetting 0 [ 1435.968959][T17564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.032380][T17564] usb 3-1: config 0 descriptor?? [ 1436.073106][T17564] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1436.822867][ T190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1437.142327][T10411] usb 3-1: Failed to submit usb control message: -110 [ 1437.142370][T10411] usb 3-1: unable to send the bmi data to the device: -110 [ 1437.142388][T10411] usb 3-1: unable to get target info from device [ 1437.142403][T10411] usb 3-1: could not get target info (-110) [ 1437.142482][T10411] usb 3-1: could not probe fw (-110) [ 1438.161313][T14165] net_ratelimit: 10 callbacks suppressed [ 1438.161333][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1438.161350][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1438.482693][ T6318] usb 3-1: USB disconnect, device number 110 [ 1438.682759][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1438.682783][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1438.815879][ T31] audit: type=1800 audit(1794145373.163:3774): pid=21085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4127" name="nullb0" dev="devtmpfs" ino=4095 res=0 errno=-22 [ 1439.191741][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1439.191772][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1439.711228][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1439.711255][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1440.221134][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1440.221160][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1441.911260][ T6318] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1441.944941][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1442.041096][T17071] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1442.061500][ T6318] usb 3-1: Using ep0 maxpacket: 16 [ 1442.067703][ T6318] usb 3-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1442.079447][ T6318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.092277][ T6318] usb 3-1: config 0 descriptor?? [ 1442.107678][ T6318] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1442.191080][T17071] usb 6-1: Using ep0 maxpacket: 16 [ 1442.191923][T17071] usb 6-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1442.196955][T17071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.196993][T17071] usb 6-1: Product: syz [ 1442.197003][T17071] usb 6-1: Manufacturer: syz [ 1442.197011][T17071] usb 6-1: SerialNumber: syz [ 1442.239440][T17071] usb 6-1: config 0 descriptor?? [ 1442.255808][T17071] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1442.478622][T17071] gspca_spca508: reg_read err -32 [ 1442.603271][T17071] gspca_spca508: reg_read err -32 [ 1442.821461][T17071] gspca_spca508: reg_read err -71 [ 1442.822611][T17071] gspca_spca508: reg_read err -71 [ 1442.827064][T17071] gspca_spca508: reg write: error -71 [ 1442.827141][T17071] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1442.858309][T17071] usb 6-1: USB disconnect, device number 23 [ 1442.876479][T20961] udevd[20961]: setting mode of /dev/bus/usb/006/023 to 020664 failed: No such file or directory [ 1442.876619][T20961] udevd[20961]: setting owner of /dev/bus/usb/006/023 to uid=0, gid=0 failed: No such file or directory [ 1443.281119][ T190] net_ratelimit: 10 callbacks suppressed [ 1443.281138][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1443.281154][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1443.474797][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4130'. [ 1443.479861][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1443.799584][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1443.799617][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1444.180777][ T31] audit: type=1800 audit(1794145378.523:3775): pid=21133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4133" name="nullb0" dev="devtmpfs" ino=4095 res=0 errno=-22 [ 1444.301347][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1444.301425][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1444.694014][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'. [ 1444.695330][T21135] atomic_op ffff8880799641e0 conn xmit_atomic 0000000000000000 [ 1444.698939][T21135] vivid-002: ================= START STATUS ================= [ 1444.698961][T21135] vivid-002: Radio HW Seek Mode: Bounded [ 1444.698987][T21135] vivid-002: Radio Programmable HW Seek: false [ 1444.699007][T21135] vivid-002: RDS Rx I/O Mode: Block I/O [ 1444.699026][T21135] vivid-002: Generate RBDS Instead of RDS: false [ 1444.699045][T21135] vivid-002: RDS Reception: true [ 1444.699136][T21135] vivid-002: RDS Program Type: 0 inactive [ 1444.699163][T21135] vivid-002: RDS PS Name: inactive [ 1444.699187][T21135] vivid-002: RDS Radio Text: inactive [ 1444.699212][T21135] vivid-002: RDS Traffic Announcement: false inactive [ 1444.699237][T21135] vivid-002: RDS Traffic Program: false inactive [ 1444.699262][T21135] vivid-002: RDS Music: false inactive [ 1444.699288][T21135] vivid-002: ================== END STATUS ================== [ 1444.812396][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1444.812433][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1445.006366][T17071] usb 3-1: USB disconnect, device number 111 [ 1445.175233][T21148] lo: Caught tx_queue_len zero misconfig [ 1445.277709][T21147] tipc: Enabling of bearer rejected, already enabled [ 1445.321242][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1445.321280][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1445.415187][T21147] tipc: Enabling of bearer rejected, failed to enable media [ 1445.603666][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1446.211227][T17071] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1446.361006][T17071] usb 3-1: Using ep0 maxpacket: 8 [ 1446.363192][T17071] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1446.376729][T17071] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.376765][T17071] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1446.376778][T17071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1446.376792][T17071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1446.376805][T17071] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.376831][T17071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.546571][T21167] fuse: Bad value for 'fd' [ 1446.682439][T21172] netlink: 79 bytes leftover after parsing attributes in process `syz.5.4145'. [ 1446.688707][T17071] usb 3-1: usb_control_msg returned -32 [ 1446.688760][T17071] usbtmc 3-1:16.0: can't read capabilities [ 1447.605967][T21182] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned b6 [ 1447.705445][ T190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1447.816145][ T6309] usb 3-1: USB disconnect, device number 112 [ 1448.016680][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4146'. [ 1448.382514][ T154] net_ratelimit: 10 callbacks suppressed [ 1448.382532][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1448.382548][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1448.903152][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1448.903176][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1449.425299][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1449.425335][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1449.931247][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1449.931273][ T154] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1450.422841][T21219] usb usb8: usbfs: process 21219 (syz.3.4156) did not claim interface 0 before use [ 1450.441426][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1450.441455][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1452.510568][T21244] ucma_write: process 2863 (syz.2.4162) changed security contexts after opening file descriptor, this is not allowed. [ 1453.474125][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1453.504681][T14160] net_ratelimit: 10 callbacks suppressed [ 1453.504704][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1453.504728][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1453.689384][ T31] audit: type=1326 audit(1794145388.033:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.690344][ T31] audit: type=1326 audit(1794145388.033:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.696806][ T31] audit: type=1326 audit(1794145388.033:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=197 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.696854][ T31] audit: type=1326 audit(1794145388.033:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.696891][ T31] audit: type=1326 audit(1794145388.033:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.703474][ T31] audit: type=1326 audit(1794145388.033:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.703521][ T31] audit: type=1326 audit(1794145388.033:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.703558][ T31] audit: type=1326 audit(1794145388.033:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.751321][ T31] audit: type=1326 audit(1794145388.093:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70f7f6b code=0x7ffc0000 [ 1453.751370][ T31] audit: type=1326 audit(1794145388.093:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4165" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1453.969214][T21246] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1453.969245][T21246] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1454.011218][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1454.011251][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1454.540045][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1454.540071][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1454.584537][T17071] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1454.731076][T17071] usb 3-1: Using ep0 maxpacket: 16 [ 1454.734386][T17071] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1454.734439][T17071] usb 3-1: New USB device found: idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1454.735621][T17071] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 1454.735646][T17071] usb 3-1: config 4 has no interface number 0 [ 1454.735676][T17071] usb 3-1: config 4 interface 55 has no altsetting 0 [ 1454.738498][T17071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.738520][T17071] usb 3-1: Product: syz [ 1454.738535][T17071] usb 3-1: Manufacturer: syz [ 1454.738548][T17071] usb 3-1: SerialNumber: syz [ 1455.042962][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1455.043012][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1455.046303][T21267] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1455.390528][T17071] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1455.390585][T17071] gspca_mr97310a: reg write [21] error -22 [ 1455.390634][T17071] mr97310a 3-1:4.55: probe with driver mr97310a failed with error -22 [ 1455.436052][T17071] usb 3-1: USB disconnect, device number 113 [ 1455.551661][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1455.551699][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1458.581627][T10411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1458.623984][T10411] net_ratelimit: 10 callbacks suppressed [ 1458.624002][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1458.624018][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1459.131218][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1459.131245][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1459.641644][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1459.641681][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1460.151188][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1460.151218][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1460.663761][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1460.663798][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1460.831428][T17564] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1460.984775][T17564] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1461.003930][T17564] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1461.003967][T17564] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1461.004008][T17564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.049565][T21325] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1461.072314][T17564] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1461.266144][T21325] fuse: Bad value for 'user_id' [ 1461.266166][T21325] fuse: Bad value for 'user_id' [ 1461.433954][T17564] usb 6-1: USB disconnect, device number 24 [ 1461.503926][T21325] netlink: 'syz.5.4184': attribute type 2 has an invalid length. [ 1461.503955][T21325] netlink: 'syz.5.4184': attribute type 2 has an invalid length. [ 1462.003693][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1462.003714][ T31] audit: type=1800 audit(1794145396.353:3795): pid=21335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4186" name="nullb0" dev="devtmpfs" ino=4095 res=0 errno=-22 [ 1462.969971][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4190'. [ 1463.259111][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1463.403850][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1463.425117][T21361] netlink: 'syz.5.4193': attribute type 10 has an invalid length. [ 1463.425500][T21361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.425977][T21361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.622152][T10404] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.721100][ T190] net_ratelimit: 10 callbacks suppressed [ 1463.721122][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1463.721146][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1463.801257][T21367] lo: entered allmulticast mode [ 1464.231328][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1464.231374][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1464.351356][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.351671][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.752938][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1464.752963][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1465.141339][ T31] audit: type=1326 audit(1794145399.483:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.0.4192" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x0 [ 1465.262784][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1465.262831][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1465.304450][T21344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1465.532174][T21364] lo: left allmulticast mode [ 1465.771138][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1465.771163][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1466.638584][T21407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1466.772851][T21409] pim6reg: entered allmulticast mode [ 1466.945555][T21413] pim6reg: left allmulticast mode [ 1467.249395][T21415] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1467.406898][ T31] audit: type=1326 audit(1794145401.753:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.5.4207" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x0 [ 1467.801055][ T6318] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1467.962324][ T6318] usb 6-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1467.967015][ T6318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.967034][ T6318] usb 6-1: Product: syz [ 1467.967042][ T6318] usb 6-1: Manufacturer: syz [ 1467.967050][ T6318] usb 6-1: SerialNumber: syz [ 1467.996403][ T6318] usb 6-1: config 0 descriptor?? [ 1468.841671][ T190] net_ratelimit: 10 callbacks suppressed [ 1468.841696][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1468.841722][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1469.351303][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1469.351341][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1469.462523][ T190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.861235][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1469.861271][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1470.308235][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1470.371461][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1470.371499][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1470.471092][T17564] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1470.511524][ T6318] usb 6-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 1470.511601][ T6318] f81604 6-1:0.0: Setting termination of CH#1 failed: -ETIMEDOUT [ 1470.511618][ T6318] f81604 6-1:0.0: probe with driver f81604 failed with error -110 [ 1470.621088][T17564] usb 3-1: Using ep0 maxpacket: 8 [ 1470.622105][T17564] usb 3-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1470.645230][T17564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.645260][T17564] usb 3-1: Product: syz [ 1470.645275][T17564] usb 3-1: Manufacturer: syz [ 1470.645290][T17564] usb 3-1: SerialNumber: syz [ 1470.675277][T17564] usb 3-1: config 0 descriptor?? [ 1470.688802][T17564] gspca_main: se401-2.14.0 probing 047d:5003 [ 1470.848891][ T6318] usb 6-1: USB disconnect, device number 25 [ 1470.887718][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1470.887753][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1471.082927][T21459] syzkaller0: entered promiscuous mode [ 1471.082945][T21459] syzkaller0: entered allmulticast mode [ 1471.231331][T21463] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1471.369482][T17564] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input82 [ 1471.861182][ T6318] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1471.925661][T17564] usb 3-1: USB disconnect, device number 114 [ 1472.032507][ T6318] usb 6-1: Using ep0 maxpacket: 8 [ 1472.033364][ T6318] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1472.039697][ T6318] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1472.039717][ T6318] usb 6-1: config 0 has no interface number 0 [ 1472.039742][ T6318] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1472.039756][ T6318] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1472.039771][ T6318] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1472.039785][ T6318] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1472.039827][ T6318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.119075][ T6318] usb 6-1: config 0 descriptor?? [ 1472.174443][ T6318] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1472.272204][T21462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4217'. [ 1473.243987][ T6318] usb 6-1: USB disconnect, device number 26 [ 1473.244146][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1473.348264][ T6318] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1473.348460][T21469] ldusb: No device or device unplugged -19 [ 1473.953494][ T190] net_ratelimit: 10 callbacks suppressed [ 1473.953513][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1473.953528][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1474.261136][ T6318] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1474.424693][ T6318] usb 3-1: Using ep0 maxpacket: 16 [ 1474.437213][ T6318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1474.437250][ T6318] usb 3-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=28.0e [ 1474.439239][ T6318] usb 3-1: config 6 has an invalid interface number: 149 but max is 0 [ 1474.439257][ T6318] usb 3-1: config 6 has no interface number 0 [ 1474.439281][ T6318] usb 3-1: config 6 interface 149 altsetting 0 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 1474.446228][ T6318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.446254][ T6318] usb 3-1: Product: syz [ 1474.446267][ T6318] usb 3-1: Manufacturer: syz [ 1474.446280][ T6318] usb 3-1: SerialNumber: syz [ 1474.468086][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1474.468110][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1474.946507][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1474.973825][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1474.973850][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1475.035534][ T6318] usb 3-1: USB disconnect, device number 115 [ 1475.304386][T21516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4228'. [ 1475.481215][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1475.481251][T14165] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1475.993053][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1475.993080][ T190] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1477.078701][T21520] netlink: 'syz.2.4240': attribute type 11 has an invalid length. [ 1477.126418][T21520] wireguard: wg1: Could not create IPv4 socket [ 1477.615221][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4233'. [ 1479.064369][T14161] net_ratelimit: 11 callbacks suppressed [ 1479.064387][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1479.064402][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1479.571985][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1479.572010][T14160] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1480.094840][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1480.094879][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1480.601169][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1480.601195][T14161] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1481.112891][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1481.112927][T10411] batman_adv: batadv0: Local translation table size (72) exceeds maximum table response size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1481.281020][ T6318] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1481.431039][ T6318] usb 3-1: Using ep0 maxpacket: 16 [ 1481.436597][ T6318] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1481.440736][ T6318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.440759][ T6318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.440773][ T6318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1481.440801][ T6318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.504152][ T6318] usb 3-1: config 0 descriptor?? [ 1482.414447][T21590] batman_adv: batadv0: Interface deactivated: dummy0 [ 1482.753596][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.867116][T21590] bond1: left allmulticast mode [ 1482.867139][T21590] ip6gretap1: left allmulticast mode [ 1482.927510][ T6318] usbhid 3-1:0.0: can't add hid device: -71 [ 1482.927582][ T6318] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1482.947994][ T6318] usb 3-1: USB disconnect, device number 116 [ 1483.258420][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4249'. [ 1483.280445][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'. [ 1483.351244][T14165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1483.351279][T14165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1483.351300][T14165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1483.370527][T14165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1483.629568][T21600] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4251'. [ 1483.681591][T21600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.682996][T21600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.337043][ T31] audit: type=1326 audit(1794145418.683:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.338407][ T31] audit: type=1326 audit(1794145418.683:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.338440][ T31] audit: type=1326 audit(1794145418.683:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.340347][ T31] audit: type=1326 audit(1794145418.683:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.391739][ T31] audit: type=1326 audit(1794145418.723:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.391785][ T31] audit: type=1326 audit(1794145418.723:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.401149][ T31] audit: type=1326 audit(1794145418.743:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.401201][ T31] audit: type=1326 audit(1794145418.743:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.419173][ T31] audit: type=1326 audit(1794145418.773:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.419913][ T31] audit: type=1326 audit(1794145418.773:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21611 comm="syz.5.4255" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749ef1c code=0x7ffc0000 [ 1484.621268][T21612] hsr0: entered promiscuous mode [ 1484.669444][T21610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.673449][T21610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.822840][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.822908][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.380424][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4258'. [ 1485.762192][T21611] hsr0: left promiscuous mode [ 1489.565003][T21661] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1490.402845][T21669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1490.434915][T21669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.441100][T21669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.175944][T21674] syzkaller1: entered promiscuous mode [ 1491.175962][T21674] syzkaller1: entered allmulticast mode [ 1491.528977][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4271'. [ 1491.698187][T21684] libceph: resolve 'c' (ret=-3): failed [ 1491.705038][T21684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.105911][T21690] key id 00000000 not found [ 1492.250218][T21696] net_ratelimit: 5 callbacks suppressed [ 1492.250542][T21696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1492.659631][T21702] netlink: zone id is out of range [ 1492.821721][ T31] kauditd_printk_skb: 132 callbacks suppressed [ 1492.821744][ T31] audit: type=1326 audit(1794145427.173:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.822254][ T31] audit: type=1326 audit(1794145427.173:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.822513][ T31] audit: type=1326 audit(1794145427.173:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.823915][ T31] audit: type=1326 audit(1794145427.173:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.823960][ T31] audit: type=1326 audit(1794145427.173:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.824366][ T31] audit: type=1326 audit(1794145427.173:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.824509][ T31] audit: type=1326 audit(1794145427.173:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.826258][ T31] audit: type=1326 audit(1794145427.173:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.827127][ T31] audit: type=1326 audit(1794145427.173:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1492.828431][ T31] audit: type=1326 audit(1794145427.173:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.4.4279" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fe2f1c code=0x7ffc0000 [ 1493.494923][T21719] blktrace: Concurrent blktraces are not allowed on loop5 [ 1494.530573][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1495.177599][T21742] syzkaller1: entered promiscuous mode [ 1495.177617][T21742] syzkaller1: entered allmulticast mode [ 1495.180642][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4285'. [ 1496.880056][T21757] key id 00000000 not found [ 1496.940659][T21769] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4293'. [ 1497.291188][T17069] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1497.458434][T17069] usb 3-1: Using ep0 maxpacket: 32 [ 1497.459022][T17069] usb 3-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1497.482227][T17069] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1497.482256][T17069] usb 3-1: config 0 has no interface number 0 [ 1497.484881][T17069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.484906][T17069] usb 3-1: Product: syz [ 1497.484915][T17069] usb 3-1: Manufacturer: syz [ 1497.484923][T17069] usb 3-1: SerialNumber: syz [ 1497.505468][T17069] usb 3-1: config 0 descriptor?? [ 1497.540190][T17069] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1497.658389][T21781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1497.741263][T17069] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1497.761403][T17069] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1498.298977][ T31] kauditd_printk_skb: 482 callbacks suppressed [ 1498.299000][ T31] audit: type=1326 audit(1794145432.643:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.299763][ T31] audit: type=1326 audit(1794145432.643:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.335692][ T31] audit: type=1326 audit(1794145432.673:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.335765][ T31] audit: type=1326 audit(1794145432.673:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.335807][ T31] audit: type=1326 audit(1794145432.683:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.335830][ T31] audit: type=1326 audit(1794145432.683:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.335854][ T31] audit: type=1326 audit(1794145432.683:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.364185][ T31] audit: type=1326 audit(1794145432.703:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.364230][ T31] audit: type=1326 audit(1794145432.703:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.415558][ T31] audit: type=1326 audit(1794145432.743:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06f1c code=0x7ffc0000 [ 1498.703223][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1498.703602][T17069] usb 3-1: USB disconnect, device number 117 [ 1498.775561][T17069] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1498.818725][T17069] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1498.819278][T17069] quatech2 3-1:0.51: device disconnected [ 1503.555709][T21825] syzkaller0: entered promiscuous mode [ 1503.555728][T21825] syzkaller0: entered allmulticast mode [ 1503.597051][T21825] tipc: Enabled bearer , priority 0 [ 1503.616163][T21825] tipc: Resetting bearer [ 1503.724011][T21823] tipc: Resetting bearer [ 1503.755804][T21823] tipc: Disabling bearer [ 1503.884646][T21824] netlink: 'syz.4.4302': attribute type 4 has an invalid length. [ 1503.884665][T21824] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4302'. [ 1503.907793][T21824] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1503.993532][T21831] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1504.054139][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4304'. [ 1504.088462][T21831] ip6gre1: entered allmulticast mode [ 1504.121235][T21826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1504.579810][T21845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.598682][T21845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.390155][T21859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.390672][T21859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.786204][T21875] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1506.972489][T21877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1507.560560][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'. [ 1507.888654][T21887] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1508.601291][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 1509.151649][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1509.171137][T17069] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1509.320998][T17069] usb 6-1: Using ep0 maxpacket: 32 [ 1509.321960][T17069] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1509.324575][T17069] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1509.324602][T17069] usb 6-1: config 0 has no interface number 0 [ 1509.328754][T17069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.328780][T17069] usb 6-1: Product: syz [ 1509.328795][T17069] usb 6-1: Manufacturer: syz [ 1509.328809][T17069] usb 6-1: SerialNumber: syz [ 1509.392786][T17069] usb 6-1: config 0 descriptor?? [ 1509.412192][T17069] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1509.613211][T17069] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1509.635023][T17069] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1510.213559][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1510.219734][T17069] usb 6-1: USB disconnect, device number 27 [ 1510.253108][T17069] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1510.259467][T17069] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1510.284982][T17069] quatech2 6-1:0.51: device disconnected [ 1510.336923][T21913] loop4: detected capacity change from 0 to 7 [ 1510.339845][T21913] Dev loop4: unable to read RDB block 7 [ 1510.339866][T21913] loop4: AHDI p1 [ 1510.339881][T21913] loop4: partition table partially beyond EOD, truncated [ 1511.069150][ T5003] Dev loop4: unable to read RDB block 7 [ 1511.069186][ T5003] loop4: AHDI p1 [ 1511.069211][ T5003] loop4: partition table partially beyond EOD, truncated [ 1512.221288][T21938] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1512.343856][ T3299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1515.183069][T17069] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1515.330963][T17069] usb 6-1: Using ep0 maxpacket: 32 [ 1515.331742][T17069] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1515.332946][T17069] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1515.332971][T17069] usb 6-1: config 0 has no interface number 0 [ 1515.339549][T17069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.339570][T17069] usb 6-1: Product: syz [ 1515.339579][T17069] usb 6-1: Manufacturer: syz [ 1515.339588][T17069] usb 6-1: SerialNumber: syz [ 1515.397982][T17069] usb 6-1: config 0 descriptor?? [ 1515.420557][T17069] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1515.642913][T17069] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1515.668668][T17069] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1516.509487][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1516.510038][T17564] usb 6-1: USB disconnect, device number 28 [ 1516.535797][T17564] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1516.555822][T17564] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1516.556307][T17564] quatech2 6-1:0.51: device disconnected [ 1516.929169][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1516.997369][ T31] kauditd_printk_skb: 160 callbacks suppressed [ 1516.997392][ T31] audit: type=1326 audit(1794145451.343:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.2.4346" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf749ef1c code=0x0 [ 1517.289600][T21992] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1517.462906][T14161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.164508][T22007] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1518.282001][T22005] batman_adv: batadv0: Removing interface: dummy0 [ 1518.283671][T22005] bridge_slave_0: left allmulticast mode [ 1518.283696][T22005] bridge_slave_0: left promiscuous mode [ 1518.285276][T22005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.337471][T22005] bridge_slave_1: left allmulticast mode [ 1518.337492][T22005] bridge_slave_1: left promiscuous mode [ 1518.340941][T22005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.373015][T22005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.379188][T22005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1518.619563][T22013] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1520.657227][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4360'. [ 1520.793782][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'. [ 1521.531899][T22040] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4365'. [ 1521.538621][T22041] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1521.627020][T22043] loop4: detected capacity change from 0 to 7 [ 1521.630734][T22043] Dev loop4: unable to read RDB block 7 [ 1521.630763][T22043] loop4: AHDI p1 [ 1521.630786][T22043] loop4: partition table partially beyond EOD, truncated [ 1521.795957][T22037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.812847][T22037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.820663][T22046] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4367'. [ 1523.221714][T14165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1523.425913][T22051] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1524.122887][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4370'. [ 1525.746500][T22079] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1528.919683][T22111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1528.992924][ T3299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.578116][T22118] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4381'. [ 1531.129166][T22124] vlan3: entered allmulticast mode [ 1531.189163][T22127] netlink: 'syz.5.4384': attribute type 1 has an invalid length. [ 1531.347670][T22127] bond0: entered promiscuous mode [ 1531.349787][T22127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.408176][T22128] team0: Port device xfrm0 removed [ 1531.430501][T22128] bond2: (slave macvlan4): Releasing backup interface [ 1531.447362][T22128] macvlan4: left allmulticast mode [ 1531.511572][T22129] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1531.511592][T22129] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1531.511607][T22129] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1531.688182][T22127] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1531.688202][T22127] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1532.401129][ T6318] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1532.571392][ T6318] usb 6-1: Using ep0 maxpacket: 32 [ 1532.572556][ T6318] usb 6-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 1532.576060][ T6318] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1532.607424][ T6318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.607444][ T6318] usb 6-1: Product: syz [ 1532.607453][ T6318] usb 6-1: Manufacturer: syz [ 1532.607462][ T6318] usb 6-1: SerialNumber: syz [ 1532.645594][ T6318] usb 6-1: config 0 descriptor?? [ 1532.648588][T22143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1532.670698][ T6318] hub 6-1:0.0: bad descriptor, ignoring hub [ 1532.670718][ T6318] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1532.705565][ T6318] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 1533.680273][T22143] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1533.680294][T22143] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1533.718144][T22143] vhci_hcd vhci_hcd.0: Device attached [ 1533.836898][T22163] vhci_hcd: connection closed [ 1533.838841][ T3299] vhci_hcd vhci_hcd.5: stop threads [ 1533.838863][ T3299] vhci_hcd vhci_hcd.5: release socket [ 1533.839104][ T3299] vhci_hcd vhci_hcd.5: disconnect device [ 1533.915246][ T6307] usb 6-1: USB disconnect, device number 29 [ 1533.915359][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1534.239673][T22162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.251405][T22162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.741972][T10411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1536.647147][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'. [ 1537.081212][ T6307] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1537.237250][ T6307] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1537.238483][ T6307] usb 6-1: config index 0 descriptor too short (expected 13165, got 72) [ 1537.238502][ T6307] usb 6-1: config 14 has too many interfaces: 151, using maximum allowed: 32 [ 1537.238514][ T6307] usb 6-1: config 14 has an invalid descriptor of length 85, skipping remainder of the config [ 1537.238525][ T6307] usb 6-1: config 14 has 0 interfaces, different from the descriptor's value: 151 [ 1537.292045][ T6307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.292065][ T6307] usb 6-1: Product: syz [ 1537.292074][ T6307] usb 6-1: Manufacturer: syz [ 1537.292082][ T6307] usb 6-1: SerialNumber: syz [ 1538.518633][ T6318] usb 6-1: USB disconnect, device number 30 [ 1538.661490][T20425] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1538.811677][T20425] usb 3-1: New USB device found: idVendor=1d34, idProduct=000a, bcdDevice=0.00 [ 1538.813308][T20425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.813341][T20425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.813380][T20425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.816184][T20425] usb 3-1: config 0 descriptor?? [ 1539.792526][ T190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1540.262929][T20425] usbhid 3-1:0.0: can't add hid device: -71 [ 1540.263007][T20425] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1540.268193][T20425] usb 3-1: USB disconnect, device number 118 [ 1541.057717][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'. [ 1542.775380][ T31] audit: type=1800 audit(1794145477.123:4603): pid=22251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4411" name="nullb0" dev="devtmpfs" ino=4095 res=0 errno=-22 [ 1543.333685][T22255] tap0: tun_chr_ioctl cmd 1074025677 [ 1543.333764][T22255] tap0: linktype set to 774 [ 1543.391953][T22255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.395494][T22255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.696613][T22264] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1544.481336][T17071] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1544.577060][T22275] lo: Caught tx_queue_len zero misconfig [ 1544.661381][T17071] usb 6-1: Using ep0 maxpacket: 8 [ 1544.662146][T17071] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1544.663372][T17071] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1544.663422][T17071] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1544.663445][T17071] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1544.663468][T17071] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1544.663490][T17071] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1544.663533][T17071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.752356][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1544.828914][T22283] atomic_op ffff8880792c61e0 conn xmit_atomic 0000000000000000 [ 1544.856740][T22280] syz_tun (unregistering): left allmulticast mode [ 1544.856800][T22280] syz_tun (unregistering): left promiscuous mode [ 1544.856905][T22280] bridge0: port 1(syz_tun) entered disabled state [ 1544.889134][T22283] vivid-001: ================= START STATUS ================= [ 1544.889157][T22283] vivid-001: Radio HW Seek Mode: Bounded [ 1544.889180][T22283] vivid-001: Radio Programmable HW Seek: false [ 1544.889198][T22283] vivid-001: RDS Rx I/O Mode: Block I/O [ 1544.889218][T22283] vivid-001: Generate RBDS Instead of RDS: false [ 1544.889237][T22283] vivid-001: RDS Reception: true [ 1544.889257][T22283] vivid-001: RDS Program Type: 0 inactive [ 1544.889283][T22283] vivid-001: RDS PS Name: inactive [ 1544.889306][T22283] vivid-001: RDS Radio Text: inactive [ 1544.889330][T22283] vivid-001: RDS Traffic Announcement: false inactive [ 1544.889364][T22283] vivid-001: RDS Traffic Program: false inactive [ 1544.889405][T22283] vivid-001: RDS Music: false inactive [ 1544.889430][T22283] vivid-001: ================== END STATUS ================== [ 1545.005726][T17071] usb 6-1: usb_control_msg returned -32 [ 1545.005784][T17071] usbtmc 6-1:16.0: can't read capabilities [ 1545.384093][T22290] wireguard1: entered promiscuous mode [ 1545.384112][T22290] wireguard1: entered allmulticast mode [ 1545.622421][T14160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.679197][T22303] fuse: Bad value for 'fd' [ 1545.865363][T22304] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned b6 [ 1546.072828][T20425] usb 6-1: USB disconnect, device number 31 [ 1546.262667][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.262731][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.694420][T22312] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1547.380083][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4432'. [ 1548.195682][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4434'. [ 1548.197558][T22332] tipc: Enabling of bearer rejected, already enabled [ 1548.245639][T22339] atomic_op ffff88807cb111e0 conn xmit_atomic 0000000000000000 [ 1548.266082][T22339] vivid-001: ================= START STATUS ================= [ 1548.266098][T22339] vivid-001: Radio HW Seek Mode: Bounded [ 1548.266114][T22339] vivid-001: Radio Programmable HW Seek: false [ 1548.266126][T22339] vivid-001: RDS Rx I/O Mode: Block I/O [ 1548.266138][T22339] vivid-001: Generate RBDS Instead of RDS: false [ 1548.266150][T22339] vivid-001: RDS Reception: true [ 1548.266165][T22339] vivid-001: RDS Program Type: 0 inactive [ 1548.266179][T22339] vivid-001: RDS PS Name: inactive [ 1548.266193][T22339] vivid-001: RDS Radio Text: inactive [ 1548.266206][T22339] vivid-001: RDS Traffic Announcement: false inactive [ 1548.266220][T22339] vivid-001: RDS Traffic Program: false inactive [ 1548.266233][T22339] vivid-001: RDS Music: false inactive [ 1548.266247][T22339] vivid-001: ================== END STATUS ================== [ 1549.285639][T22354] tun0: tun_chr_ioctl cmd 2147767521 [ 1549.393904][T22354] usb usb8: usbfs: process 22354 (syz.4.4439) did not claim interface 0 before use [ 1549.460987][ T33] INFO: task kworker/0:1:11 blocked for more than 143 seconds. [ 1549.461009][ T33] Tainted: G L syzkaller #0 [ 1549.461017][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1549.461023][ T33] task:kworker/0:1 state:D stack:20744 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1549.461055][ T33] Workqueue: usb_hub_wq hub_event [ 1549.461155][ T33] Call Trace: [ 1549.461161][ T33] [ 1549.461171][ T33] __schedule+0x17dd/0x5830 [ 1549.461202][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 1549.461224][ T33] ? __pfx___schedule+0x10/0x10 [ 1549.461243][ T33] ? schedule+0x90/0x2b0 [ 1549.461259][ T33] schedule+0x164/0x2b0 [ 1549.461273][ T33] schedule_preempt_disabled+0x13/0x30 [ 1549.461287][ T33] __mutex_lock+0x7c4/0x15a0 [ 1549.461310][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1549.461341][ T33] ? hub_event+0x20c9/0x4d30 [ 1549.461363][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1549.461393][ T33] hub_event+0x20c9/0x4d30 [ 1549.461405][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 1549.461457][ T33] ? register_lock_class+0x31/0x2e0 [ 1549.461492][ T33] ? __pfx_hub_event+0x10/0x10 [ 1549.461508][ T33] ? rcu_is_watching+0x16/0xb0 [ 1549.461528][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1549.461545][ T33] process_scheduled_works+0xc3d/0x1630 [ 1549.461580][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1549.461601][ T33] ? assign_work+0x3cf/0x5d0 [ 1549.461620][ T33] worker_thread+0xa47/0xfb0 [ 1549.461656][ T33] kthread+0x38b/0x480 [ 1549.461672][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1549.461697][ T33] ? __pfx_kthread+0x10/0x10 [ 1549.461734][ T33] ret_from_fork+0x514/0xb70 [ 1549.461756][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1549.461775][ T33] ? __switch_to+0xc78/0x1410 [ 1549.461795][ T33] ? __pfx_kthread+0x10/0x10 [ 1549.461809][ T33] ret_from_fork_asm+0x1a/0x30 [ 1549.461833][ T33] [ 1549.461952][ T33] [ 1549.461952][ T33] Showing all locks held in the system: [ 1549.461985][ T33] locks held by kworker/0:1/11: 5, on CPU#0: [ 1549.462067][ T33] #0: ffff888021ac3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1549.462175][ T33] #1: ffffc90000107c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1549.462209][ T33] #2: ffff88802be5b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1549.462235][ T33] #3: ffff88802be5f568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1549.462262][ T33] #4: ffff88802be0b260 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1549.462291][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 1549.462302][ T33] #0: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1549.462371][ T33] locks held by getty/5391: 2, on CPU#1: [ 1549.462380][ T33] #0: ffff8880373490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1549.462414][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1549.462570][ T33] locks held by kworker/1:9/6317: 5, on CPU#1: [ 1549.462579][ T33] #0: ffff888021ac3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1549.462611][ T33] #1: ffffc90006767c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1549.462646][ T33] #2: ffff88802beaa1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1549.462673][ T33] #3: ffff88802bead568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1549.462699][ T33] #4: ffff88802be0b260 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1549.462742][ T33] locks held by syz.3.4410/22244: 1, last CPU#0: [ 1549.462750][ T33] #0: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1549.462792][ T33] locks held by syz.2.4424/22302: 2, last CPU#1: [ 1549.462800][ T33] #0: ffff8880223ae478 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0 [ 1549.462863][ T33] #1: ffff888050f77038 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1549.462902][ T33] locks held by syz.2.4430/22321: 1, last CPU#0: [ 1549.462911][ T33] #0: ffff88807f06f180 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 1549.462941][ T33] locks held by syz.5.4436/22348: 1, last CPU#0: [ 1549.462950][ T33] #0: ffff88807f069bc0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 1549.462980][ T33] locks held by syz.0.4440/22356: 2, last CPU#0: [ 1549.462989][ T33] #0: ffff88807b46b0a0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_getsockopt+0x12f/0xb90 [ 1549.463068][ T33] #1: ffffffff9015a260 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1549.463099][ T33] locks held by syz.0.4440/22357: 1, on CPU#0: [ 1549.463108][ T33] #0: ffff88807b46b0a0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_getsockopt+0x12f/0xb90 [ 1549.463147][ T33] [ 1549.463150][ T33] ============================================= [ 1549.463150][ T33] [ 1549.463157][ T33] NMI backtrace for cpu 0 [ 1549.463168][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.463184][ T33] Tainted: [L]=SOFTLOCKUP [ 1549.463188][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1549.463195][ T33] Call Trace: [ 1549.463200][ T33] [ 1549.463206][ T33] dump_stack_lvl+0xe8/0x150 [ 1549.463224][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1549.463258][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1549.463279][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1549.463293][ T33] sys_info+0x135/0x170 [ 1549.463317][ T33] watchdog+0x1073/0x10f0 [ 1549.463354][ T33] ? watchdog+0x209/0x10f0 [ 1549.463373][ T33] kthread+0x38b/0x480 [ 1549.463387][ T33] ? __pfx_watchdog+0x10/0x10 [ 1549.463400][ T33] ? __pfx_kthread+0x10/0x10 [ 1549.463414][ T33] ret_from_fork+0x514/0xb70 [ 1549.463428][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1549.463441][ T33] ? __switch_to+0xc78/0x1410 [ 1549.463459][ T33] ? __pfx_kthread+0x10/0x10 [ 1549.463473][ T33] ret_from_fork_asm+0x1a/0x30 [ 1549.463493][ T33] [ 1549.463498][ T33] Sending NMI from CPU 0 to CPUs 1: [ 1549.463528][ C1] NMI backtrace for cpu 1 [ 1549.463545][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.463569][ C1] Tainted: [L]=SOFTLOCKUP [ 1549.463576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1549.463588][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1549.463613][ C1] Code: 5b 92 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 ea 23 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1549.463636][ C1] RSP: 0000:ffffc900001a7e40 EFLAGS: 00000242 [ 1549.463651][ C1] RAX: 00000000018b3ac1 RBX: ffffffff819c9950 RCX: 8000000000000001 [ 1549.463664][ C1] RDX: 0000000000000001 RSI: ffffffff8e6a8877 RDI: ffffffff8c8ea380 [ 1549.463677][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 1549.463689][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 1549.463702][ C1] R13: 1ffff11003ed0bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 1549.463715][ C1] FS: 0000000000000000(0000) GS:ffff888123509000(0000) knlGS:0000000000000000 [ 1549.463730][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1549.463743][ C1] CR2: 0000000034d20ff8 CR3: 0000000052ea4000 CR4: 00000000003526f0 [ 1549.463760][ C1] Call Trace: [ 1549.463767][ C1] [ 1549.463773][ C1] default_idle+0x9/0x20 [ 1549.463795][ C1] default_idle_call+0x72/0xb0 [ 1549.463818][ C1] do_idle+0x2e0/0x540 [ 1549.463851][ C1] ? __pfx_do_idle+0x10/0x10 [ 1549.463872][ C1] ? do_idle+0x4d8/0x540 [ 1549.463891][ C1] cpu_startup_entry+0x43/0x60 [ 1549.463911][ C1] start_secondary+0x101/0x110 [ 1549.463929][ C1] common_startup_64+0x13e/0x157 [ 1549.463959][ C1] [ 1549.475556][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1550.234569][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1550.245238][ T33] Tainted: [L]=SOFTLOCKUP [ 1550.249550][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1550.259594][ T33] Call Trace: [ 1550.262873][ T33] [ 1550.265820][ T33] vpanic+0x26f/0x710 [ 1550.269825][ T33] panic+0xc5/0xd0 [ 1550.273550][ T33] ? __pfx_panic+0x10/0x10 [ 1550.277964][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 1550.283417][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 1550.288963][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1550.295110][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1550.301264][ T33] watchdog+0x10e7/0x10f0 [ 1550.305600][ T33] ? watchdog+0x209/0x10f0 [ 1550.310016][ T33] kthread+0x38b/0x480 [ 1550.314102][ T33] ? __pfx_watchdog+0x10/0x10 [ 1550.318772][ T33] ? __pfx_kthread+0x10/0x10 [ 1550.323362][ T33] ret_from_fork+0x514/0xb70 [ 1550.327951][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1550.333055][ T33] ? __switch_to+0xc78/0x1410 [ 1550.337728][ T33] ? __pfx_kthread+0x10/0x10 [ 1550.342319][ T33] ret_from_fork_asm+0x1a/0x30 [ 1550.347095][ T33] [ 1550.350468][ T33] Kernel Offset: disabled [ 1550.354786][ T33] Rebooting in 86400 seconds..