last executing test programs: 1m50.284178711s ago: executing program 2 (id=3255): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@remote, 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffb00, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000001}, 0x48080) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000380)=""/131, 0x83) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$kcm(0x10, 0x2, 0x0) flistxattr(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x30, 0x86, 0x1}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000180)=0xb0000) syz_usb_disconnect(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x6a040000) 1m46.875589175s ago: executing program 2 (id=3272): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) tkill(r1, 0x7) tkill(r1, 0x27) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x0, 0x0, 0x6, 0x0, 0x2, 0xbf, 0x16a1}, 0x0) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r1, r1) (async) tkill(r1, 0x7) (async) tkill(r1, 0x27) (async) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) (async) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x0, 0x0, 0x6, 0x0, 0x2, 0xbf, 0x16a1}, 0x0) (async) 1m45.516812677s ago: executing program 2 (id=3283): syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}}, 0x4c000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m45.343891141s ago: executing program 2 (id=3286): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)="b7346949da8cc80d95652d7276b721f431f8cc3435c2b6e7a34fb265f4caa2e92e6348df18f6f2ed60b561afb310f31a2cbfb1eaaa96e72037d381f3aaa90c608526f1bbed547b879248bb32287b5e4b4af5856a12ff48fa4db0272a16f14cfc84e6854b6898c55bfa65d6968b773ea6b9057dad4e58e665795c", 0x7a}], 0x2, &(0x7f0000000300)=[{0x30, 0x111, 0x400, "07ab41af45075dc862133c4d557b9843b36c87f7e3953346b3"}, {0x48, 0x103, 0x2, "5c89a5fdf062aa2a4aa713d94665de3cd8ec7c976c621ed0e7671828246be05ac4ef0c4cb3bae9d1160ce3de263c9acbf88945dddf"}, {0x50, 0x10a, 0x80000000, "d38f4c0137c03774f55b1e16d1b8119e0a42152e38fe776c44e2942fdc53577f50fe4ee74a0fc8c81eb35a227643ff83480401653237808539c6153147749c0c"}, {0x78, 0x1c, 0x0, "51f8137b4b1d9581cc05e51f4349310b84e0bee58ac2d8b7420a1caba97f1e78b22343b3e6e21a2d35605747152f969151fbf3540df6da4f1bf9680a91660fe3b4617d5649424c2c0898d89a7bc61badec18d47f9fa7e69db42782894f69003cdd623a7ade2f"}, {0x98, 0x112, 0x93, "21584fb3add4bad278094b73785a5b9d360ead8657fc032e30ca6896532a1c913c7e611b84cf5664607f0755026d9378d127138225d276064bba2fc505e019449d964b21682b10913d47ab30cf9185fc62a3109231e567caddee5a38bdca3cf55d7472480242c493334cb241402de7c2fdf4691d4f0ca9ea4a8d3382abb04744791809f8"}, {0x20, 0x111, 0x6d, "1bb6734ad1242f9a452a91fd6e7a1d3c"}, {0xe8, 0x114, 0x9, "9c65804f9f81d81cf6d699a7543b7f1a17dde41c03a6fa7b2360343b29579ded0ed142dbc92c547d8ce6536899bd96d6df02a908591e6c401a20d6ce8d3d0733ede31429cfab1c6f70c4b94d9dfb715b943b193cb9cb4482927b9a29ac2fff494273e11ad01a6f8630bdf36947e619550e34b96837875ab7e4c6f1538dbf4f26ac950e2982925f29fb047e2ade0cd62e045b52e743233d7d2da723e21758192926252ee08afca8e87dd3f2d4c7651b723b67915344a8d7eada9e7cfd0fc851c9e9add6c150e6efa7d6b73962544ff57e7d0562bf241e"}], 0x2e0}, 0x4020) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m45.152575163s ago: executing program 2 (id=3289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9c010000100001022cbc7000009718ef000000ff0200000000000000000000001d0001ac9c7b71fa00000040000000000000000000ecdf000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) 1m45.054028622s ago: executing program 2 (id=3291): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m44.476676136s ago: executing program 32 (id=3291): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.424779522s ago: executing program 3 (id=3812): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0xfffff000, 0x2dcd, 0x1, 0x4, 0xd0, 0xa2b5, 0x7fff, 0x40000005, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x100, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x6, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x148a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x40, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x80c, 0x4, 0xa7, 0x1000, 0x1, 0x200b398, 0x400080, 0x1, 0x100, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x1ff, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xb, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x201ff, 0xfffffffd, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x0, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x2, 0xee4b, 0x2000004, 0x1, 0xc, 0x2, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x5, 0x1, 0x100000d3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x5, 0xdd81, 0x4, 0xd143, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x4, 0x9, 0xd500, 0x5, 0x77, 0x9, 0x8006, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x9, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xffffffff, 0x32d, 0x3, 0x1ff, 0x2, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x300000000000000) 7.072305884s ago: executing program 1 (id=3816): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000012140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6.930837283s ago: executing program 3 (id=3818): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) close(0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 6.803735498s ago: executing program 3 (id=3820): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0xfffffa7d, 0xce, 0xfffffe00, 0x3, 0x7, 0xf5c8}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r6, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) 6.692405099s ago: executing program 1 (id=3821): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000280)={0xa4, 0x0, 0x1}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x440d1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4028081) socket$packet(0x11, 0x0, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280), 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000c0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000100000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01030000000000000000070000090900020073797a3100000000090001"], 0x12c}}, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000400)) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 5.742651349s ago: executing program 5 (id=3826): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002600090122bd7008f9ffffff0200000005003d80fd000000080003004700000008004000", @ANYRES32, @ANYBLOB="19bc250be14a02000000297542ae50aa1dc03ca386"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) lseek(r0, 0x1000000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='source', 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000300200600000000000000000109022472510000000009040000120701030009050900000000f9ff0905820200"], 0x0) 4.154349267s ago: executing program 1 (id=3829): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth1_to_bond\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x857a, 0x4) 3.806019589s ago: executing program 1 (id=3832): syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd6004180000283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090788c560000ff020000000000000000000000000001fc010000000000000000000077000000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000740)={0x0, r6, 0x8001, 0xd, 0x3, 0x5, 0xfff, 0x4, 0x5}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000180)={"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"}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe80, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x41, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000540)="6237ea76a99f1cb66ebd252b7b95139a94ebaf9c9d887302c9056f019edc758989770610205b52a3ecf567d8950f2f726f2e02720c214208051ceefb1c5b94a0570e433db8eb9e59a3fdfdda5e611e51941acde5c4c42d413e0610052faf0badb97669a60e8b9d47c6051c8b30208e6c28e5547e08049b499378594ce8b56e3c8286b5482947abd880cbe18fef47a013da68534cb2286a768c3e88f13fc7c72cc947a465f21c84a807aab2f497", 0x0, 0x0, 0x10}, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0xfe8a, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000012001f0029bd7000fddbdf2507000000", @ANYRES32=r10, @ANYBLOB="3043120080000400"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x40080c0) 3.74933071s ago: executing program 0 (id=3833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) close_range(0xffffffffffffffff, r1, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) kcmp(0x0, 0x0, 0x0, r2, r1) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x400000000000000, 0x0, 0xc010}, 0x4044040) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000b80)="01e4dc00c2cb9d482a2af50686d6da1e53172500f1c9b846a6e15212466322f36e9aa65f8453be127fad5e3136e81feec8b9d21392a50a1d99c5e0a47db80c2d14cecde7fe3a8c3dc20c260190fb914313c2f6eb9a0530af6f5efcc697242f4ad036f4ca1f3225ac919dd4184e429b3a9ed141b7cb6b82132ad318e8c02a36af7f53017ef8c63ea1b6ac76e468d3864b3df714acd0988617f91534132997eb26d510a97e750d3a5d21c371481dfc17bbf809ae9441535da53bdd931bf69933b678d387009d6e2ffb7506ce73bae456530694d03ed3deef76ae75343da202cea8503f75f6d8ae68134c4937ca359536549834", 0xf2}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)='!', 0x1}], 0x1}}], 0x2, 0x20040055) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 3.609791628s ago: executing program 3 (id=3834): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x80045200, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3.337232146s ago: executing program 1 (id=3836): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x8000000000, 0xcf, 0x1, 0x1000, 0x8001, 0x1001002, 0x5, 0x63, 0x4, 0x3, 0x8001063, 0x5, 0x4, 0x401, 0x20100000000022], 0x54000, 0x216146}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x1000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x100000001, r1, 'id0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x20, 0xc0, 0x3, 0x4, {{0x1c, 0x4, 0x2, 0x4, 0x70, 0x68, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x24, 0x90, 0x1, 0x4, [{@multicast1, 0x5}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x12b}, {@broadcast, 0x50}]}, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0xa, [{@empty, 0xb}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4aa}, {@remote, 0x5}, {@remote, 0x8}, {@rand_addr=0x64010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @end]}}}}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x100, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300020004000000040000000a00000000000100f7", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="03000000020000000400"/28], 0x50) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/192, 0xc0}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/55, 0x37}], 0x5) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd00011100000000800000000000be00442ffffe8080000000000000000000080000aaff020000008000000000000000000001042088be120000030c000800050086dd88a888be000000021609660501000000000088a808002244b600e8ec34c950901d4f7cf5b2eb000240002009f0000200000000000002000494030800655800000002"], 0xfdef) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.101090708s ago: executing program 4 (id=3838): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYRES32=r1, @ANYBLOB="14000700ff6da9000000000021000000000000011400060020"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 2.772401912s ago: executing program 4 (id=3839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) 2.757951404s ago: executing program 1 (id=3840): r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf0000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80060) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x496}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0xffffffff, 0x4, 0x1, 0x5}}]}) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000140)={0x0, 0x3}) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) 2.53926785s ago: executing program 4 (id=3841): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000040010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 2.413086161s ago: executing program 4 (id=3842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x53b, 0x8000, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010026bd7000fedbdf25e00000020000000000000000000000006401010000000000000000000000000000000006000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) 2.330137469s ago: executing program 4 (id=3843): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000540)) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 2.245039168s ago: executing program 4 (id=3844): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0xfffffa7d, 0xce, 0xfffffe00, 0x3, 0x7, 0xf5c8}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r6, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffefffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) 2.161078174s ago: executing program 0 (id=3845): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) 2.078147649s ago: executing program 3 (id=3846): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xd2143da2da374b4e, @time={0x1, 0x7ff}, 0x7, {0x1, 0xf9}, 0x6, 0x0, 0x81}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1b0, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0x28, {0x28, 0x5, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479ca31a1413491fef7c7b08fc0a59"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet6(0xa, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f88906b370ab", 0x6}, {&(0x7f0000000140)="64b0bd85", 0x4}], 0x2, 0x0, 0x0, 0x41000}}], 0x1, 0x1) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async) listen(r3, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000004}, 0x1c) (async) listen(r6, 0x50) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67ffeaff8dffffa02c236fe6800ffff9", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="b000000000000000f9ffffffffba9eddcec0ba3332d85365f0ccffffff040000000000000000000000000000000008000000000000030000000020000000000000960000000600000000000080fdffffffffffffff050000000000000008000000000010000080000000000000030000000000000007000000090000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0500000001000000000000000400000000000000000000000000000002000000090000006664000000000000"], 0x0, 0x0, 0x0}) (async) getdents64(r8, 0x0, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000800000000000000000000000000060000080d568e00686173683a6d52630000000014000300686173683a69702c706f72742c697000050001000700000079f76fb597a9"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4012000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2a, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x800000d}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}, @qdisc_kind_options=@q_red={{0x8}, {0x1c, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8}, @TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_MARK_BLOCK={0x0, 0x6, 0x6}]}}]}, 0x6c}}, 0x20000040) 1.983443934s ago: executing program 0 (id=3847): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0xfffff000, 0x2dcd, 0x1, 0x4, 0xd0, 0xa2b5, 0x7fff, 0x40000005, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x100, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x6, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x1, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x148a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x40, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x80c, 0x4, 0xa7, 0x1000, 0x1, 0x200b398, 0x400080, 0x1, 0x100, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x1ff, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xb, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x201ff, 0xfffffffd, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x0, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x2, 0xee4b, 0x2000004, 0x1, 0xc, 0x2, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x5, 0x1, 0x100000d3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x5, 0xdd81, 0x4, 0xd143, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x4, 0x9, 0xd500, 0x5, 0x77, 0x9, 0x8006, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x9, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xffffffff, 0x32d, 0x3, 0x1ff, 0x2, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x800000000000000) 1.656435758s ago: executing program 0 (id=3848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2a, 0x21dfdbf9, {0xa, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfffffc00}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x44}}, 0x0) mknod(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf180, 0x10001) 1.359051937s ago: executing program 5 (id=3849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35098, 0x0, 0x0) r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) lseek(r3, 0x4, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4, 0x5, 0x8}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.211993602s ago: executing program 3 (id=3850): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000002c00005782565898ce00030a0102000000000000400002009080de83ffff72797a3000caac000b000300fd02b21edf8b72001400000011000100000000000000"], 0x74}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x70}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e00000010000000000001a0000000000fc00"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.196100891s ago: executing program 0 (id=3851): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x6911, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xc040480) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_timedsend(r2, &(0x7f0000002300)="a44a486ddbf87c", 0x7, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) mlock(&(0x7f00003c8000/0x1000)=nil, 0x1000) 1.053729228s ago: executing program 0 (id=3852): set_mempolicy(0x5, &(0x7f0000000340)=0x4000000ff9, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f000701feff01fffeffffff017c0000040042800c00018006000600800a00000800028004001480"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x10, 0x70fd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x2800c010}, 0x80) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_TID={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x42598f6d6b0febb8}, 0x4081) 924.093318ms ago: executing program 5 (id=3853): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000cc6000/0x4000)=nil], 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002340)=@o_path={&(0x7f0000002380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="b98c020000b854f50000ba000000000f302e40f466baf80cb824ce7981ef625a66bef81ef81eeec422d9bd40910f20e035000010000f22e03e0f458100100000b9800000c00f3235008000000f300f01c136410f0764260f01b200000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000140)={0x5, 0x3, 0x9, 0x1, 'syz1\x00', 0x2a}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a012400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000cdb000/0x4000)=nil, 0x4000}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6a6, 0xec000000, 0xcd}]}) unlinkat(0xffffffffffffffff, 0x0, 0x7a80a58f7c96d83b) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) 797.062176ms ago: executing program 5 (id=3854): socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000540)) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 720.456333ms ago: executing program 5 (id=3855): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) close_range(0xffffffffffffffff, r1, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) kcmp(0x0, 0x0, 0x0, r2, r1) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x400000000000000, 0x0, 0xc010}, 0x4044040) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000b80)="01e4dc00c2cb9d482a2af50686d6da1e53172500f1c9b846a6e15212466322f36e9aa65f8453be127fad5e3136e81feec8b9d21392a50a1d99c5e0a47db80c2d14cecde7fe3a8c3dc20c260190fb914313c2f6eb9a0530af6f5efcc697242f4ad036f4ca1f3225ac919dd4184e429b3a9ed141b7cb6b82132ad318e8c02a36af7f53017ef8c63ea1b6ac76e468d3864b3df714acd0988617f91534132997eb26d510a97e750d3a5d21c371481dfc17bbf809ae9441535da53bdd931bf69933b678d387009d6e2ffb7506ce73bae456530694d03ed3deef76ae75343da202cea8503f75f6d8ae68134c4937ca359536549834", 0xf2}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)='!', 0x1}], 0x1}}], 0x2, 0x20040055) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 5 (id=3856): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x4, 0x8000000000, 0xcf, 0x1, 0x1000, 0x8001, 0x1001002, 0x5, 0x63, 0x4, 0x3, 0x8001063, 0x5, 0x4, 0x401, 0x20100000000022], 0x54000, 0x216146}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r1 = open(0x0, 0x1491ff, 0x22) fcntl$setlease(r1, 0x400, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x2, 0x1ff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be120000030c000800050086dd88a888be000000021609660501000000000088a8080022eb000200002009f0080200000010000002000494030800655800000002"], 0xfdef) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000000)='Q') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000005d16000000000000020000000000000000020000000900010073797a30000000001800030091abc12404cf378042f26c43f91f68d8a90767c014000000020a0900000000000000000000000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r8 = syz_open_pts(r7, 0x40000) dup3(r8, r7, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): 8_MAX [ 735.531430][T16955] pimreg3: entered allmulticast mode [ 735.553914][ T7671] usb 6-1: Not enough endpoints found in device, aborting! [ 735.670712][T16958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3402'. [ 735.733762][T16949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.764274][ T5691] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 735.773235][T16949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.790553][T16949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.813547][ T5691] usb 4-1: device descriptor read/8, error -71 [ 735.827256][T16949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.839134][ T7671] usb 6-1: USB disconnect, device number 4 [ 735.923193][ T5691] usb usb4-port1: unable to enumerate USB device [ 736.244729][T16968] xt_hashlimit: size too large, truncated to 1048576 [ 736.279672][T16970] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3407'. [ 736.298690][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3407'. [ 736.314724][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.354038][T16971] bridge_slave_0 (unregistering): left allmulticast mode [ 736.362783][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.375568][T16971] bridge_slave_0 (unregistering): left promiscuous mode [ 736.387089][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.555400][T16978] Invalid logical block size (18) [ 736.783503][T15560] net_ratelimit: 8 callbacks suppressed [ 736.783528][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 736.796141][T16982] misc userio: Can't change port type on an already running userio instance [ 736.803725][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 736.844552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.314509][T16996] fuse: Unknown parameter '' [ 737.371077][T16995] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3414'. [ 737.393548][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 737.408238][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.419799][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 737.550728][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 737.550746][ T29] audit: type=1326 audit(1784711373.158:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 737.647040][ T29] audit: type=1326 audit(1784711373.218:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 737.733282][ T29] audit: type=1326 audit(1784711373.218:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 737.827852][ T29] audit: type=1326 audit(1784711373.228:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 737.934910][ T29] audit: type=1326 audit(1784711373.228:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 737.994393][ T29] audit: type=1326 audit(1784711373.228:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 738.022225][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 738.036640][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.081524][ T29] audit: type=1326 audit(1784711373.228:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 738.216379][ T29] audit: type=1326 audit(1784711373.228:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 738.271788][ T29] audit: type=1326 audit(1784711373.228:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 738.326867][ T29] audit: type=1326 audit(1784711373.228:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16980 comm="syz.5.3410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7fc00000 [ 738.442791][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.601058][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3421'. [ 738.613268][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 738.627640][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 739.206259][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 739.215538][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 739.399248][ T10] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 739.439473][ T10] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 739.460518][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 739.475959][T17029] tipc: Enabled bearer , priority 10 [ 739.483432][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.496938][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.506144][ T7298] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 739.519930][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.532565][ T10] usb 6-1: Product: ÑŠ [ 739.538828][ T10] usb 6-1: Manufacturer: à ¾ [ 739.551209][ T10] usb 6-1: SerialNumber: syz [ 739.582857][ T5691] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 739.593382][T17021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 739.601942][T17021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 739.672847][ T7298] usb 4-1: Using ep0 maxpacket: 8 [ 739.685488][ T7298] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 739.700468][ T7298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.711115][ T7298] usb 4-1: Product: syz [ 739.717110][ T7298] usb 4-1: Manufacturer: syz [ 739.725066][ T7298] usb 4-1: SerialNumber: syz [ 739.738324][ T7298] usb 4-1: config 0 descriptor?? [ 739.783399][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 739.954713][ T7298] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 740.036251][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 740.116796][ T10] usb 6-1: USB disconnect, device number 5 [ 740.449337][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 740.467835][ T5691] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 740.477243][ T5691] usb 2-1: can't read configurations, error -71 [ 740.522774][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 740.593017][ T7671] tipc: Node number set to 3803160172 [ 741.044227][T17026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3426'. [ 741.386854][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 741.443405][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 741.554156][ T7298] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 741.564381][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.612891][ T5691] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 741.634668][ T7298] usb 4-1: USB disconnect, device number 114 [ 741.784411][ T5691] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 741.803017][ T5691] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 741.817484][ T1017] net_ratelimit: 9 callbacks suppressed [ 741.817498][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 741.830875][ T5691] usb 2-1: config 171 has no interface number 0 [ 741.837559][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 741.899861][ T5691] usb 2-1: config 171 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 741.925045][ T5691] usb 2-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 741.968971][ T5691] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 741.978781][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.998894][ T5691] usb 2-1: Product: syz [ 742.004227][ T5691] usb 2-1: Manufacturer: syz [ 742.009112][ T5691] usb 2-1: SerialNumber: syz [ 742.235167][ T5691] ath6kl: Failed to submit usb control message: -71 [ 742.245625][ T5691] ath6kl: unable to send the bmi data to the device: -71 [ 742.253316][ T5691] ath6kl: Unable to send get target info: -71 [ 742.273030][ T5691] ath6kl: Failed to init ath6kl core: -71 [ 742.283396][ T5691] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 742.317220][ T5691] usb 2-1: USB disconnect, device number 120 [ 742.403927][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 742.418439][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 742.602975][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.780412][T17065] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3437'. [ 742.944380][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 742.958901][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 743.002173][T17069] loop6: detected capacity change from 0 to 2640 [ 743.020283][T17069] buffer_io_error: 11 callbacks suppressed [ 743.020299][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.053978][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.076286][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.109192][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.124093][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.135495][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.144664][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.152648][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.160976][T17069] ldm_validate_partition_table(): Disk read failed. [ 743.169024][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.177570][T17069] Buffer I/O error on dev loop6, logical block 0, async page read [ 743.186029][T17069] Dev loop6: unable to read RDB block 0 [ 743.191923][T17069] loop6: unable to read partition table [ 743.225245][T17069] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 743.266663][ T4992] ldm_validate_partition_table(): Disk read failed. [ 743.284932][ T4992] Dev loop6: unable to read RDB block 0 [ 743.297688][ T4992] loop6: unable to read partition table [ 743.525114][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 743.539511][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 743.643294][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.694277][T17078] bond1: Unable to set down delay as MII monitoring is disabled [ 743.722193][T17078] bond1 (unregistering): Released all slaves [ 743.809341][T17082] tipc: Enabling of bearer rejected, already enabled [ 743.852983][ T5691] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 743.958724][T17078] bond1: Unable to set down delay as MII monitoring is disabled [ 743.985922][T17078] bond1 (unregistering): Released all slaves [ 744.053289][ T5691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.076041][ T5691] usb 4-1: config 0 has no interfaces? [ 744.105814][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 744.120162][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.146883][ T5691] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 744.159144][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.174748][ T5691] usb 4-1: Product: syz [ 744.184460][ T5691] usb 4-1: Manufacturer: syz [ 744.199169][ T5691] usb 4-1: SerialNumber: syz [ 744.227828][ T5691] usb 4-1: config 0 descriptor?? [ 744.288623][T17078] bond1: Unable to set down delay as MII monitoring is disabled [ 744.311937][T17078] bond1 (unregistering): Released all slaves [ 744.462530][T17076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3442'. [ 744.498211][T17078] bond1: Unable to set down delay as MII monitoring is disabled [ 744.509511][ T10] usb 4-1: USB disconnect, device number 115 [ 744.510998][T17078] bond1 (unregistering): Released all slaves [ 744.580170][T17093] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3447'. [ 744.597348][T17093] netlink: 'syz.0.3447': attribute type 30 has an invalid length. [ 744.605319][T17093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 744.621092][T17093] netlink: 'syz.0.3447': attribute type 30 has an invalid length. [ 744.621115][T15569] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.630141][T17093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 744.656718][T15569] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.672321][T15569] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.682786][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.691529][T15569] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.812888][ T5691] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 744.972984][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 744.986843][ T5691] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 744.997435][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.007096][ T5715] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 745.015485][ T5691] usb 2-1: Product: syz [ 745.019864][ T5691] usb 2-1: Manufacturer: syz [ 745.025407][ T5691] usb 2-1: SerialNumber: syz [ 745.038052][ T5691] usb 2-1: config 0 descriptor?? [ 745.184417][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 745.198088][ T5715] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.220132][ T5715] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 745.243072][ T5715] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 745.261672][ T5691] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 745.270300][ T5715] usb 6-1: config 0 interface 0 has no altsetting 0 [ 745.278034][ T5715] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 745.287622][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.301500][ T5715] usb 6-1: config 0 descriptor?? [ 745.516286][ T5715] hid_parser_main: 5 callbacks suppressed [ 745.516333][ T5715] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 745.553683][ T5715] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 745.557204][T17122] tipc: Enabling of bearer rejected, already enabled [ 745.572120][ T5715] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 745.588952][ T5715] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 745.600114][ T5715] hid-thrustmaster 0003:044F:B65D.0018: unknown main item tag 0x0 [ 745.612523][ T5715] hid-thrustmaster 0003:044F:B65D.0018: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 745.625926][ T5715] hid-thrustmaster 0003:044F:B65D.0018: Unexpected non-int endpoint [ 745.710984][ C1] hid-thrustmaster 0003:044F:B65D.0018: URB to get model id failed with error -71 [ 745.716320][ T7669] usb 6-1: USB disconnect, device number 6 [ 745.726832][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.944952][T17128] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3457'. [ 745.996178][T17128] pimreg3: entered allmulticast mode [ 746.119814][T17133] netlink: 'syz.3.3459': attribute type 8 has an invalid length. [ 746.128184][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'. [ 746.278277][T17095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3448'. [ 746.522273][T17095] __nla_validate_parse: 2 callbacks suppressed [ 746.522291][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3448'. [ 746.623934][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3448'. [ 746.667647][ T5691] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 746.709945][ T5691] usb 2-1: USB disconnect, device number 121 [ 746.718564][T17144] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 746.745024][T17144] syzkaller0: entered promiscuous mode [ 746.760313][T17144] syzkaller0: entered allmulticast mode [ 746.766069][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.797509][T17144] tipc: Started in network mode [ 746.804293][T17144] tipc: Node identity 52651670824a, cluster identity 4711 [ 746.816014][T17144] tipc: Enabled bearer , priority 10 [ 746.828148][T17143] tipc: Resetting bearer [ 746.883295][T17143] tipc: Disabling bearer [ 747.090063][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.098625][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.263383][ T9410] net_ratelimit: 11 callbacks suppressed [ 747.263397][ T9410] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 747.284075][ T9410] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 747.423786][ T7669] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 747.472832][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 747.582829][ T7669] usb 4-1: Using ep0 maxpacket: 16 [ 747.598089][ T7669] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 747.614395][ T7669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.633867][ T7669] usb 4-1: Product: syz [ 747.640853][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 747.656735][ T7669] usb 4-1: Manufacturer: syz [ 747.661387][ T7669] usb 4-1: SerialNumber: syz [ 747.666609][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.682042][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.695908][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 747.709450][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 747.718886][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.735547][ T10] usb 6-1: config 0 descriptor?? [ 747.803307][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 747.817142][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 747.831569][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.042318][T17166] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.055292][T17166] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.062548][T17166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.178145][ T10] magicmouse 0003:05AC:0323.0019: ignoring exceeding usage max [ 748.195678][ T10] magicmouse 0003:05AC:0323.0019: unknown main item tag 0x2 [ 748.233809][ T10] magicmouse 0003:05AC:0323.0019: hidraw0: USB HID v0.06 Device [HID 05ac:0323] on usb-dummy_hcd.5-1/input0 [ 748.282627][T17172] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3472'. [ 748.310876][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3472'. [ 748.389687][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 748.404361][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.842782][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.858037][T17189] Invalid logical block size (18) [ 748.931687][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 748.946110][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.986738][T17151] syzkaller0: entered promiscuous mode [ 748.988175][ T5714] usb 6-1: USB disconnect, device number 7 [ 749.032167][T17191] input: syz0 as /devices/virtual/input/input73 [ 749.057776][T17151] syzkaller0: entered allmulticast mode [ 749.221012][T17151] tc action pedit offset -498 out of bounds [ 749.235511][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 749.235529][ T29] audit: type=1326 audit(1784711384.848:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.270382][ T29] audit: type=1326 audit(1784711384.848:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.326096][ T29] audit: type=1326 audit(1784711384.848:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.356041][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 749.411192][ T29] audit: type=1326 audit(1784711384.908:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.465377][ T7669] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 749.507083][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.517207][ T29] audit: type=1326 audit(1784711384.908:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.557640][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 749.572236][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 749.597375][ T7669] usb 4-1: USB disconnect, device number 116 [ 749.603813][ T29] audit: type=1326 audit(1784711384.908:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.675766][ T29] audit: type=1326 audit(1784711384.908:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.746089][ T29] audit: type=1326 audit(1784711384.908:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.800577][T17195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.802844][ T29] audit: type=1326 audit(1784711384.908:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.832825][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 749.879641][ T29] audit: type=1326 audit(1784711384.908:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.1.3480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 749.884274][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 749.937232][T17195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.994777][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 750.014247][ T10] usb 6-1: config 8 has an invalid interface number: 59 but max is 3 [ 750.027234][ T10] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 750.050275][ T10] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 750.060654][ T10] usb 6-1: config 8 has no interface number 0 [ 750.069204][ T10] usb 6-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 750.082363][ T10] usb 6-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 750.093702][ T10] usb 6-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 750.109394][ T10] usb 6-1: config 8 interface 59 has no altsetting 0 [ 750.121346][ T10] usb 6-1: string descriptor 0 read error: -22 [ 750.139860][ T10] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 750.157255][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.206666][ T10] ttusbir 6-1:8.59: cannot find expected altsetting [ 750.277732][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.300875][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.336610][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.396296][ T8820] usb 6-1: USB disconnect, device number 8 [ 750.410809][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.417980][T17196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.474270][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.496306][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.547016][T17196] veth1_vlan: left promiscuous mode [ 750.564309][T17196] veth0_vlan: left promiscuous mode [ 750.581578][T17196] veth0_vlan: entered promiscuous mode [ 750.605350][T17196] veth1_vlan: entered promiscuous mode [ 750.631219][T17196] veth1_macvtap: left promiscuous mode [ 750.646646][T17196] veth0_macvtap: left promiscuous mode [ 750.663578][T17196] veth0_macvtap: entered promiscuous mode [ 750.709031][T17196] veth1_macvtap: entered promiscuous mode [ 750.810126][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.861019][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.905640][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.923135][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.954551][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.139630][T17209] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3485'. [ 751.451313][T17215] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.480013][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.487243][T17215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.586493][T17220] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3490'. [ 751.826820][T17234] input: syz0 as /devices/virtual/input/input75 [ 751.834566][T17235] fuse: Bad value for 'user_id' [ 751.858338][T17235] fuse: Bad value for 'user_id' [ 751.963478][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.110456][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 752.373401][T17247] Invalid logical block size (18) [ 752.705406][ T1017] net_ratelimit: 10 callbacks suppressed [ 752.705426][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 752.725547][ T1017] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 752.813024][ T8820] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 752.982146][ T8820] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 753.002015][ T8820] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 753.003230][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.026048][ T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 753.041779][ T8820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.070396][ T8820] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 753.182835][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 753.191817][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 753.207762][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 753.220903][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.230594][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.241725][ T9] usb 4-1: Product: à € [ 753.249086][ T9] usb 4-1: Manufacturer: æ¬êƒ¤é‡±ÈˆçŽ«ã²²å©„ã™‹â‘ˆçŸ¬å¸‘ï†”á™¸î¼¯ã¤ê—•é½²é¹”ê˜»å¿›î¤¸ãŸ²äƒ›â°æ‚”拿ᢰ墎栫뀬ìƒá¯Žé–…ì¾¼èˆå ¨í‚§î»¿Í©ä„¨á›‘먵갎䧻篕밟ꭢꎺé…硇ëƒÍ¤â’Œé–¾ã‚㘃嬸㚳餌꣢䌺왬醅⊻䬱状턟螯촀㶆㖗헴釨忭æ‘í„–ä½¹ç§î¥Žîž‚è©æ®£æˆŒç£†äŽ¢ë¤¡â•‰ [ 753.285418][ T9] usb 4-1: SerialNumber: é†¢î–¯ì‚æ½‚텢胀劺仔ᡵ쮈ﭬ簦 [ 753.303578][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 753.318161][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 753.629552][T17257] loop6: detected capacity change from 0 to 2640 [ 753.637280][T17257] buffer_io_error: 27 callbacks suppressed [ 753.637295][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.662357][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.670982][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.679898][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.699752][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.713147][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.729008][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.740909][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.784257][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.811932][ T9] cdc_ncm 4-1:1.0: bind() failure [ 753.828195][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.841101][T17257] ldm_validate_partition_table(): Disk read failed. [ 753.850430][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.862035][T17257] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.871844][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 753.886390][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 753.910944][T17257] Dev loop6: unable to read RDB block 0 [ 753.923027][T17257] loop6: unable to read partition table [ 753.953104][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 753.962143][T17257] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜J) failed (rc=-5) [ 753.988834][ T4992] ldm_validate_partition_table(): Disk read failed. [ 753.997669][ T4992] Dev loop6: unable to read RDB block 0 [ 753.998062][ T9] cdc_ncm 4-1:1.1: bind() failure [ 754.006569][ T4992] loop6: unable to read partition table [ 754.038281][ T9] usb 4-1: USB disconnect, device number 117 [ 754.045015][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.128553][ T8820] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 754.137271][ T8820] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 754.229667][T17265] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 754.244001][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 754.244018][ T29] audit: type=1326 audit(1784711389.858:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.277807][ T29] audit: type=1326 audit(1784711389.888:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.309634][ T29] audit: type=1326 audit(1784711389.888:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.359549][ T29] audit: type=1326 audit(1784711389.918:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.408424][ T29] audit: type=1326 audit(1784711389.918:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.436405][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 754.450787][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.479884][ T29] audit: type=1326 audit(1784711389.918:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.572815][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 754.579711][ T29] audit: type=1326 audit(1784711389.918:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.670289][ T29] audit: type=1326 audit(1784711389.948:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.696170][ T8820] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 754.713098][ T8820] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 754.745275][ T29] audit: type=1326 audit(1784711389.948:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.773824][ T29] audit: type=1326 audit(1784711389.958:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17251 comm="syz.1.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbf5f5e6ce code=0x7ffc0000 [ 754.875748][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 754.934327][ T9] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 754.959883][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.979766][ T9] usb 6-1: Product: syz [ 754.997446][ T9] usb 6-1: Manufacturer: syz [ 755.008615][ T9] usb 6-1: SerialNumber: syz [ 755.024668][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 755.038784][ T9] usb 6-1: config 0 descriptor?? [ 755.039291][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 755.079825][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 755.086528][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.150954][T17274] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.159054][T17274] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.166294][T17274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.520220][T17287] input: syz0 as /devices/virtual/input/input76 [ 755.612247][ T7669] usb 2-1: USB disconnect, device number 122 [ 755.668411][T17290] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3514'. [ 755.714027][T17292] qrtr: Invalid version 0 [ 755.878755][ T9] gspca_topro: reg_r err -32 [ 755.889834][ T9] gspca_topro: Sensor soi763a [ 756.102875][ T5714] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 756.123324][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.193243][ T5715] usb 6-1: USB disconnect, device number 9 [ 756.253911][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 756.274079][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.298006][ T5714] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 756.314243][ T5714] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 756.326107][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.335460][ T5714] usb 4-1: Product: syz [ 756.339861][ T5714] usb 4-1: Manufacturer: syz [ 756.345100][ T5714] usb 4-1: SerialNumber: syz [ 756.371571][ T5714] usb 4-1: config 0 descriptor?? [ 757.022923][ T5715] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 757.162766][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.164497][ T5715] usb 2-1: device descriptor read/64, error -71 [ 757.485131][ T5715] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 757.643221][ T5715] usb 2-1: device descriptor read/64, error -71 [ 757.753608][ T5715] usb usb2-port1: attempt power cycle [ 757.932912][T17323] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 757.944830][T17323] syzkaller1: linktype set to 823 [ 758.112890][ T5715] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 758.156060][ T5715] usb 2-1: device descriptor read/8, error -71 [ 758.172965][T15560] net_ratelimit: 10 callbacks suppressed [ 758.172979][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 758.193325][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 758.208181][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.502991][ T5715] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 758.545468][ T5715] usb 2-1: device descriptor read/8, error -71 [ 758.673298][ T5715] usb usb2-port1: unable to enumerate USB device [ 758.914446][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 758.928891][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 759.017530][T17334] tipc: Started in network mode [ 759.028922][T17334] tipc: Node identity ac141441, cluster identity 4711 [ 759.052864][T17334] tipc: Enabled bearer , priority 10 [ 759.243725][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.385027][ T5715] usb 4-1: USB disconnect, device number 118 [ 759.463461][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 759.478043][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 759.499417][T17343] xt_hashlimit: size too large, truncated to 1048576 [ 759.567646][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.580253][T17344] bridge_slave_0 (unregistering): left allmulticast mode [ 759.589011][T17344] bridge_slave_0 (unregistering): left promiscuous mode [ 759.599195][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.846598][T17351] xt_hashlimit: size too large, truncated to 1048576 [ 759.908059][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.965517][T17352] bridge_slave_0 (unregistering): left allmulticast mode [ 759.983063][T17352] bridge_slave_0 (unregistering): left promiscuous mode [ 759.998122][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.006090][T15569] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 760.020449][T15569] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.088587][ T5691] tipc: Node number set to 2886997057 [ 760.283424][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.445469][T17359] syzkaller0: entered promiscuous mode [ 760.451196][T17359] syzkaller0: entered allmulticast mode [ 760.553165][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 760.567590][T15560] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 761.322763][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 762.363284][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.400281][T17387] loop5: detected capacity change from 0 to 7 [ 763.402961][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.444298][T17387] Dev loop5: unable to read RDB block 7 [ 763.460775][T17387] loop5: AHDI p1 [ 763.496513][T17387] loop5: partition table partially beyond EOD, truncated [ 763.652603][T15605] net_ratelimit: 10 callbacks suppressed [ 763.652622][T15605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 763.673207][T15605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.217075][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 764.231491][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.443229][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.944807][T17432] syzkaller0: entered promiscuous mode [ 764.961300][T17432] syzkaller0: entered allmulticast mode [ 765.103934][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 765.118305][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.181330][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 765.363576][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 765.400045][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.425693][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.458752][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.474356][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.483428][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.483839][T17446] netlink: 'syz.4.3550': attribute type 1 has an invalid length. [ 765.559216][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.567350][T17446] bond1: entered promiscuous mode [ 765.575932][T17446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.605866][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.639879][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.675148][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.711097][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.713972][T15559] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 765.732297][T15559] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.787715][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.811817][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.846303][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.858612][T17448] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 765.883030][T17448] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 765.898343][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.923297][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.936053][T17448] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 765.965018][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 765.992946][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.002078][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.029634][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 766.067652][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.101209][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.134075][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 766.147221][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.159133][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.170644][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 766.182138][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 766.192360][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 766.215590][ T9] usb 6-1: Product: syz [ 766.225387][ T9] usb 6-1: Manufacturer: syz [ 766.236819][ T9] usb 6-1: SerialNumber: syz [ 766.263218][ T9] usb 6-1: config 0 descriptor?? [ 766.288864][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 766.305918][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 766.320403][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 766.357581][T17455] tipc: Enabling of bearer rejected, already enabled [ 766.466697][T17460] netlink: 'syz.4.3555': attribute type 11 has an invalid length. [ 766.523281][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.612057][T17461] netlink: 'syz.1.3554': attribute type 8 has an invalid length. [ 766.641947][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 766.657674][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 766.658941][ T5714] usb 6-1: USB disconnect, device number 10 [ 766.695375][ T5714] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 767.300430][T17491] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3562'. [ 767.560399][T17493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3563'. [ 767.568033][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.002805][ T5714] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 768.180756][ T5714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 768.198587][ T5714] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 768.212022][ T5714] usb 6-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 768.237463][ T5714] usb 6-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 768.258746][ T5714] usb 6-1: config 66 interface 0 has no altsetting 0 [ 768.281959][ T5714] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 768.299511][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.319033][ T5714] usb 6-1: Product: syz [ 768.324471][ T5714] usb 6-1: Manufacturer: syz [ 768.330312][ T5714] usb 6-1: SerialNumber: syz [ 768.345296][T17502] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 768.565376][T17511] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3568'. [ 768.590711][ T5714] ati_remote2 6-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 768.603247][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.635017][ T5714] usb 6-1: USB disconnect, device number 11 [ 768.796606][T17517] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 768.866356][T17518] bond2 (unregistering): Released all slaves [ 768.891202][T17517] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 768.935618][T15570] net_ratelimit: 8 callbacks suppressed [ 768.935645][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 768.964149][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 769.326223][T17535] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 769.355977][T17535] syzkaller0: entered promiscuous mode [ 769.363972][T17535] syzkaller0: entered allmulticast mode [ 769.393970][T17535] tipc: Enabled bearer , priority 0 [ 769.406481][T17534] tipc: Resetting bearer [ 769.481628][T17534] tipc: Disabling bearer [ 769.506997][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 769.521436][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 769.537160][T17545] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3579'. [ 769.642748][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 769.659399][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 769.989077][T17556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3580'. [ 770.047618][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 770.061971][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 770.347241][T17559] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3582'. [ 770.513284][T17565] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3584'. [ 770.583333][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 770.597773][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 770.683335][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.164264][ T5715] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 771.184105][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 771.198601][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 771.325824][ T5715] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.341093][ T5715] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 771.359309][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.372089][ T5715] usb 6-1: config 0 descriptor?? [ 771.390811][ T5715] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 771.570849][T17592] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3594'. [ 771.607381][ T9] usb 6-1: USB disconnect, device number 12 [ 771.722818][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.197681][T17608] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 772.218736][T17608] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0QVÆ,†¹${\d+" [ 772.235152][T17608] CUSE: unknown device info "Ýÿÿÿ" [ 772.240336][T17608] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 772.264605][T17608] CUSE: DEVNAME unspecified [ 772.368731][T17612] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3602'. [ 772.668193][T17617] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3603'. [ 772.763259][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.087730][T17627] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3607'. [ 773.612937][ T5753] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 773.738127][ T7669] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 773.775538][ T5753] usb 2-1: device descriptor read/64, error -71 [ 773.802788][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.945829][ T7669] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 773.976645][ T7669] usb 4-1: config 0 has no interface number 0 [ 774.007316][ T7669] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 774.036484][ T7669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.064410][ T5753] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 774.092214][ T7669] usb 4-1: Product: syz [ 774.109818][ T7669] usb 4-1: Manufacturer: syz [ 774.133263][ T7669] usb 4-1: SerialNumber: syz [ 774.150221][ T7669] usb 4-1: config 0 descriptor?? [ 774.171778][ T7669] usb 4-1: selecting invalid altsetting 1 [ 774.205863][ T7669] dvb_ttusb_budget: ttusb_init_controller: error [ 774.223641][ T7669] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 774.252775][ T5753] usb 2-1: device descriptor read/64, error -71 [ 774.333710][ T9389] net_ratelimit: 10 callbacks suppressed [ 774.333728][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 774.353886][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 774.374270][ T5753] usb usb2-port1: attempt power cycle [ 774.446289][ T7669] DVB: Unable to find symbol stv0299_attach() [ 774.535388][ T7669] DVB: Unable to find symbol tda8083_attach() [ 774.545167][ T7669] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 774.639285][ T7669] usb 4-1: USB disconnect, device number 119 [ 774.752845][ T5753] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 774.808083][ T5753] usb 2-1: device descriptor read/8, error -71 [ 774.843246][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 775.004205][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 775.018811][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 775.053262][ T5753] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 775.078240][ T5753] usb 2-1: device descriptor read/8, error -71 [ 775.193922][ T5753] usb usb2-port1: unable to enumerate USB device [ 775.421742][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3617'. [ 775.563977][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 775.578317][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 775.849731][T17679] Invalid logical block size (18) [ 775.882820][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 776.134537][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 776.141240][T17686] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3622'. [ 776.150460][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 776.250338][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.739063][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 776.753440][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 776.923246][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 776.982865][ T5715] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 777.174031][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 777.191137][ T5715] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 777.207689][ T5715] usb 6-1: config 0 has no interface number 0 [ 777.226823][ T5715] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 777.261832][ T5715] usb 6-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 777.304716][ T5715] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 777.331586][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.358765][ T5715] usb 6-1: Product: syz [ 777.374394][ T5715] usb 6-1: Manufacturer: syz [ 777.392827][ T5715] usb 6-1: SerialNumber: syz [ 777.431911][ T5715] usb 6-1: config 0 descriptor?? [ 777.467818][ T5715] redrat3 6-1:0.83: Couldn't find all endpoints [ 777.726801][T17697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.754164][T17713] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3632'. [ 777.770791][T17697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.823061][T15570] bridge_slave_1: left allmulticast mode [ 777.837300][T15570] bridge_slave_1: left promiscuous mode [ 777.854829][T15570] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.871541][T15570] bridge_slave_0: left allmulticast mode [ 777.881235][T15570] bridge_slave_0: left promiscuous mode [ 777.902158][T15570] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.936794][T15570] pimreg3: left allmulticast mode [ 777.962799][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 778.064009][T15570] bond9 (unregistering): (slave ip6gre2): Releasing backup interface [ 778.072477][T15570] ip6gre2 (unregistering): left promiscuous mode [ 778.160775][T17722] netlink: 'syz.1.3635': attribute type 29 has an invalid length. [ 778.384233][T15570] team0: Port device geneve1 removed [ 778.401932][T17732] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 778.438244][T15570] .` (unregistering): left promiscuous mode [ 778.468465][T15570] bond_slave_0: left promiscuous mode [ 778.477374][T15570] bond_slave_1: left promiscuous mode [ 778.499507][T15570] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.528059][T15570] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.550819][T15570] .` (unregistering): Released all slaves [ 778.579387][T15570] bond1 (unregistering): Released all slaves [ 778.619122][T15570] bond2 (unregistering): Released all slaves [ 778.652374][T15570] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 778.665078][T15570] bond3 (unregistering): Released all slaves [ 778.714773][T15570] bond4 (unregistering): Released all slaves [ 778.733103][T15570] bond5 (unregistering): Released all slaves [ 778.753031][T15570] bond0 (unregistering): Released all slaves [ 778.771925][T15570] bond6 (unregistering): Released all slaves [ 778.798676][T15570] bond7 (unregistering): Released all slaves [ 778.819559][T15570] bond8 (unregistering): Released all slaves [ 778.836613][T15570] bond9 (unregistering): Released all slaves [ 778.863512][T15570] bond10 (unregistering): Released all slaves [ 778.880793][T15570] bond11 (unregistering): Released all slaves [ 778.901370][T17723] netlink: 'syz.1.3635': attribute type 29 has an invalid length. [ 778.927664][T17726] netlink: 'syz.1.3635': attribute type 29 has an invalid length. [ 779.003216][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.091216][T15570] : left promiscuous mode [ 779.364750][T15566] net_ratelimit: 8 callbacks suppressed [ 779.364767][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 779.384981][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 779.419558][T15570] tipc: Disabling bearer [ 779.436463][T15570] tipc: Left network mode [ 779.547955][ T5715] usb 6-1: USB disconnect, device number 13 [ 779.559274][T15570] IPVS: stopping backup sync thread 11085 ... [ 779.883997][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 780.003995][T15559] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 780.018394][T15559] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 780.042787][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.181778][T17787] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3665'. [ 780.246863][T17787] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3665'. [ 780.462194][T17799] netlink: 'syz.5.3671': attribute type 10 has an invalid length. [ 780.497084][T17799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.525050][T17799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.562294][T17799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.577275][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 780.591671][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 780.615100][T17799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.023469][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 781.049660][T17823] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3679'. [ 781.077296][T17824] netlink: 'syz.4.3682': attribute type 1 has an invalid length. [ 781.084459][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 781.119476][T17824] netlink: 'syz.4.3682': attribute type 2 has an invalid length. [ 781.169773][T17821] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 781.183666][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 781.197976][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 781.224583][T17821] syzkaller1: linktype set to 823 [ 781.320045][T15570] hsr_slave_0: left promiscuous mode [ 781.347771][T15570] hsr_slave_1: left promiscuous mode [ 781.374372][T15570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.389647][T15570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.824182][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 781.838696][ T9396] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 781.973568][T17840] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 781.979749][T17840] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0QVÆ,†¹${\d+" [ 782.062822][T17840] CUSE: unknown device info "Ýÿÿÿ" [ 782.122816][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 782.146707][T17840] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 782.203560][T17840] CUSE: DEVNAME unspecified [ 782.572543][T15570] team0 (unregistering): Port device team_slave_1 removed [ 782.664798][T15570] team0 (unregistering): Port device team_slave_0 removed [ 783.163204][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.782709][T17855] tipc: Enabled bearer , priority 10 [ 784.203887][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.401316][T17866] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3695'. [ 784.453320][ T9391] net_ratelimit: 8 callbacks suppressed [ 784.453343][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 784.473458][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 784.554679][T17868] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3696'. [ 784.612577][T17870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3697'. [ 784.783136][ T5691] tipc: Node number set to 3492746864 [ 784.895583][T17881] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 784.915783][T17881] syzkaller1: linktype set to 823 [ 784.992800][ T7669] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 785.086641][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 785.101089][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 785.188101][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 785.243521][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 785.287888][T17887] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.319921][T17887] batman_adv: batadv0: Interface deactivated: dummy0 [ 785.479454][T17887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.538070][T17887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.663065][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 785.677694][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 785.790365][T17888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.800619][T17888] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.817662][T17888] batman_adv: batadv0: Interface activated: dummy0 [ 785.844969][T17888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.876236][T17888] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.883498][T17888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.911132][T17888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.921287][T17888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.939668][T17888] veth1_vlan: left promiscuous mode [ 785.945909][T17888] veth0_vlan: left promiscuous mode [ 785.953473][T17888] veth0_vlan: entered promiscuous mode [ 785.961957][T17888] veth1_vlan: entered promiscuous mode [ 785.973891][T17888] veth1_macvtap: left promiscuous mode [ 785.980829][T17888] veth0_macvtap: left promiscuous mode [ 785.988232][T17888] veth0_macvtap: entered promiscuous mode [ 785.995543][T17888] veth1_macvtap: entered promiscuous mode [ 786.007085][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.015402][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.024037][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.032123][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.045652][T17888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 786.203824][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 786.218218][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 786.261356][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 786.271459][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3705'. [ 786.282742][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.755182][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 786.770805][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 786.812604][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'. [ 786.825060][ T7669] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 786.841549][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'. [ 786.866684][T17906] 8021q: VLANs not supported on gre0 [ 786.982767][ T7669] usb 6-1: Using ep0 maxpacket: 16 [ 787.000178][ T7669] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 787.019718][ T7669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.031060][ T7669] usb 6-1: Product: syz [ 787.035690][ T7669] usb 6-1: Manufacturer: syz [ 787.040495][ T7669] usb 6-1: SerialNumber: syz [ 787.323986][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.522902][ T7670] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 787.692983][ T7670] usb 2-1: Using ep0 maxpacket: 32 [ 787.711858][ T7670] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 787.740237][ T7670] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 787.766579][ T7670] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 787.788453][ T7670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 787.820406][ T7670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.846530][ T7670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 787.875562][ T7670] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 787.928401][ T7670] usb 2-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00 [ 787.980160][ T7670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.059776][ T7670] usb 2-1: config 0 descriptor?? [ 788.145650][T17917] xt_hashlimit: size too large, truncated to 1048576 [ 788.192631][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.250096][T17918] bridge_slave_0 (unregistering): left allmulticast mode [ 788.281267][T17918] bridge_slave_0 (unregistering): left promiscuous mode [ 788.302028][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.362834][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 788.432440][T17921] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 788.465358][T17921] syzkaller1: linktype set to 823 [ 788.602148][T17922] syzkaller1: tun_chr_ioctl cmd 21731 [ 788.675685][T17925] syzkaller0: entered promiscuous mode [ 788.767734][T17925] syzkaller0: entered allmulticast mode [ 788.954686][ T7669] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 789.001862][ T7669] usb 6-1: USB disconnect, device number 15 [ 789.403216][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 789.912618][ T9391] net_ratelimit: 10 callbacks suppressed [ 789.912636][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 789.933626][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 790.013508][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3719'. [ 790.108010][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.296062][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.350831][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.442758][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 790.555423][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 790.569773][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 790.614155][T17944] hsr1: left promiscuous mode [ 790.626405][T17944] bond1: left promiscuous mode [ 790.770442][T17945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.780743][T17945] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.810424][T17945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.875397][T17945] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.882713][T17945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.937925][ T43] usb 2-1: USB disconnect, device number 5 [ 790.984271][T17945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.030618][T17945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.092279][T17953] netlink: 'syz.5.3721': attribute type 8 has an invalid length. [ 791.116020][T17945] veth1_vlan: left promiscuous mode [ 791.122890][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3721'. [ 791.133654][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 791.148049][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 791.168784][T17945] veth0_vlan: left promiscuous mode [ 791.190196][T17945] veth0_vlan: entered promiscuous mode [ 791.205836][T17945] veth1_vlan: entered promiscuous mode [ 791.218310][T17945] veth1_macvtap: left promiscuous mode [ 791.225546][T17945] veth0_macvtap: left promiscuous mode [ 791.232464][T17945] veth0_macvtap: entered promiscuous mode [ 791.248897][T17945] veth1_macvtap: entered promiscuous mode [ 791.261331][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.276105][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.312999][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.337288][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 791.382180][T17945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.405355][T17960] xt_hashlimit: size too large, truncated to 1048576 [ 791.463073][T17953] bond0: entered promiscuous mode [ 791.480075][T17953] bond_slave_0: entered promiscuous mode [ 791.486360][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.521264][T17953] bond_slave_1: entered promiscuous mode [ 791.564899][T17953] gretap0: entered promiscuous mode [ 791.591080][T17953] team0: entered promiscuous mode [ 791.602383][T17953] team_slave_0: entered promiscuous mode [ 791.609537][T17953] team_slave_1: entered promiscuous mode [ 791.617875][T17953] debugfs: 'hsr1' already exists in 'hsr' [ 791.624280][T17953] Cannot create hsr debugfs directory [ 791.651956][T17970] Invalid logical block size (18) [ 791.786378][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 791.800842][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 792.022974][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 792.063797][T17978] FAULT_INJECTION: forcing a failure. [ 792.063797][T17978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.096113][T17978] CPU: 1 UID: 0 PID: 17978 Comm: syz.3.3730 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.096145][T17978] Tainted: [L]=SOFTLOCKUP [ 792.096153][T17978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 792.096165][T17978] Call Trace: [ 792.096174][T17978] [ 792.096183][T17978] dump_stack_lvl+0xe8/0x150 [ 792.096219][T17978] should_fail_ex+0x40c/0x560 [ 792.096248][T17978] _copy_from_user+0x2d/0xb0 [ 792.096280][T17978] ___sys_sendmsg+0x1c6/0x360 [ 792.096300][T17978] ? __lock_acquire+0x683/0x2cf0 [ 792.096332][T17978] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.096386][T17978] ? __fget_files+0x2a/0x420 [ 792.096422][T17978] ? __fget_files+0x3a2/0x420 [ 792.096462][T17978] __x64_sys_sendmsg+0x1b1/0x290 [ 792.096486][T17978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 792.096521][T17978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.096542][T17978] do_syscall_64+0x174/0x580 [ 792.096561][T17978] ? trace_irq_disable+0x3b/0x140 [ 792.096585][T17978] ? clear_bhb_loop+0x40/0x90 [ 792.096608][T17978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.096628][T17978] RIP: 0033:0x7fe624b9de99 [ 792.096646][T17978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.096663][T17978] RSP: 002b:00007fe6259b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.096683][T17978] RAX: ffffffffffffffda RBX: 00007fe624e25fa0 RCX: 00007fe624b9de99 [ 792.096697][T17978] RDX: 0000000004044040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 792.096710][T17978] RBP: 00007fe6259b4090 R08: 0000000000000000 R09: 0000000000000000 [ 792.096722][T17978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.096733][T17978] R13: 00007fe624e26038 R14: 00007fe624e25fa0 R15: 00007fe624f4fa48 [ 792.096762][T17978] [ 792.372885][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 792.387476][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 792.523564][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.543229][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 792.552036][ T43] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 792.561394][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.571913][ T43] usb 2-1: Product: syz [ 792.579499][ T43] usb 2-1: Manufacturer: syz [ 792.590148][ T43] usb 2-1: SerialNumber: syz [ 792.938964][T17991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3733'. [ 793.103458][ T5747] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 793.273017][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 793.291688][ T5747] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 793.334581][ T5747] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 793.388121][ T5747] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 793.445514][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 793.518864][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 793.563200][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 793.579672][ T5747] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 793.651125][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 793.685529][ T5747] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00 [ 793.708480][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.751437][ T5747] usb 4-1: config 0 descriptor?? [ 793.944340][T17972] syzkaller0: entered promiscuous mode [ 793.993805][T17972] syzkaller0: entered allmulticast mode [ 794.207056][ T43] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 794.237754][ T43] usb 2-1: USB disconnect, device number 6 [ 794.521321][T18015] loop6: detected capacity change from 0 to 2640 [ 794.554605][T18015] buffer_io_error: 27 callbacks suppressed [ 794.554618][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.602852][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.642891][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.694486][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.781265][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.851027][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.917232][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.934911][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.943275][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.951254][T18015] ldm_validate_partition_table(): Disk read failed. [ 794.958829][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.967067][T18015] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.975375][T18015] Dev loop6: unable to read RDB block 0 [ 794.981277][T18015] loop6: unable to read partition table [ 795.023482][T15566] net_ratelimit: 13 callbacks suppressed [ 795.023495][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 795.043607][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.132792][ T5747] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 795.140497][T18015] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜ýÿ) failed (rc=-5) [ 795.255648][T18021] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3740'. [ 795.314537][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 795.337143][ T5747] usb 2-1: unable to get BOS descriptor or descriptor too short [ 795.351827][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.375923][ T5747] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 795.420791][ T5747] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 795.442595][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.459570][ T5747] usb 2-1: Product: syz [ 795.464496][ T5747] usb 2-1: Manufacturer: syz [ 795.472572][ T5747] usb 2-1: SerialNumber: syz [ 795.530876][T18023] input: syz0 as /devices/virtual/input/input77 [ 795.603838][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 795.618273][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.643153][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 795.672839][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 795.672882][ T29] audit: type=1326 audit(1784711431.278:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 795.712947][ T29] audit: type=1326 audit(1784711431.278:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 795.745237][ T5747] usb 2-1: USB disconnect, device number 7 [ 795.760395][ T29] audit: type=1326 audit(1784711431.278:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 795.839104][T18029] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3742'. [ 795.851637][ T29] audit: type=1326 audit(1784711431.278:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 795.902564][ T29] audit: type=1326 audit(1784711431.278:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 795.928459][ T29] audit: type=1326 audit(1784711431.278:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 795.983712][ T29] audit: type=1326 audit(1784711431.278:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 796.057457][ T29] audit: type=1326 audit(1784711431.278:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 796.109236][ T29] audit: type=1326 audit(1784711431.278:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 796.164574][ T29] audit: type=1326 audit(1784711431.278:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.5.3741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ec79de99 code=0x7ffc0000 [ 796.223372][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 796.237745][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 796.410530][ T43] usb 4-1: USB disconnect, device number 120 [ 796.682744][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.744196][T18043] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3744'. [ 796.778079][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 796.792532][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 796.950369][T18052] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3750'. [ 797.066527][T18056] Invalid logical block size (18) [ 797.328235][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 797.343020][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 797.503747][T18068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3755'. [ 797.723194][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.106280][ T5753] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 798.268406][T18079] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3758'. [ 798.280580][ T5753] usb 2-1: Using ep0 maxpacket: 16 [ 798.318493][ T5753] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 798.329779][T15566] pim6reg: left allmulticast mode [ 798.337811][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.346288][T15566] pimreg3: left allmulticast mode [ 798.359085][ T5753] usb 2-1: Product: syz [ 798.381697][ T5753] usb 2-1: Manufacturer: syz [ 798.405418][ T5753] usb 2-1: SerialNumber: syz [ 798.435756][ T5753] usb 2-1: config 0 descriptor?? [ 798.494971][ T5753] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 798.708034][T18077] xt_policy: output policy not valid in PREROUTING and INPUT [ 798.762825][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.908827][T15566] gretap0 (unregistering): left promiscuous mode [ 799.105345][T15566] bond0 (unregistering): left promiscuous mode [ 799.118162][T15566] bond_slave_0: left promiscuous mode [ 799.142308][T15566] bond_slave_1: left promiscuous mode [ 799.159949][T15566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.195678][T15566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.212537][T15566] bond0 (unregistering): Released all slaves [ 799.240103][T15566] bond1 (unregistering): Released all slaves [ 799.323082][T15566] bond2 (unregistering): Released all slaves [ 799.390130][T15566] bond3 (unregistering): Released all slaves [ 799.437989][T15566] bond4 (unregistering): Released all slaves [ 799.478726][T15566] bond5 (unregistering): Released all slaves [ 799.536499][ T5753] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 799.569112][ T5753] visor 2-1:0.0: probe with driver visor failed with error -71 [ 799.620898][ T5753] usb 2-1: USB disconnect, device number 8 [ 799.648431][T15566] : left promiscuous mode [ 799.806953][T15566] tipc: Disabling bearer [ 799.826080][T15566] tipc: Left network mode [ 800.310752][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 800.320169][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3768'. [ 800.344530][T18104] vlan1: entered promiscuous mode [ 800.482947][ T9385] net_ratelimit: 14 callbacks suppressed [ 800.482967][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 800.503314][ T9385] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 800.522951][T15566] team0: left promiscuous mode [ 800.534929][ T5753] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 800.545978][T15566] team_slave_0: left promiscuous mode [ 800.578759][T15566] team_slave_1: left promiscuous mode [ 800.627357][T15566] hsr_slave_0: left promiscuous mode [ 800.650045][T15566] hsr_slave_1: left promiscuous mode [ 800.663700][T15566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.681554][T15566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.712400][T15566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.727847][ T5753] usb 4-1: Using ep0 maxpacket: 16 [ 800.735244][T15566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.749107][ T5753] usb 4-1: unable to get BOS descriptor or descriptor too short [ 800.762217][ T5753] usb 4-1: config index 0 descriptor too short (expected 220, got 44) [ 800.777649][ T5753] usb 4-1: config 42 has an invalid interface number: 178 but max is 0 [ 800.804016][ T5753] usb 4-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 800.831383][ T5753] usb 4-1: config 42 has no interface number 0 [ 800.852776][ T5753] usb 4-1: config 42 interface 178 has no altsetting 0 [ 800.881927][ T5753] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=c8.e5 [ 800.907942][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.939391][ T5753] usb 4-1: Product: syz [ 800.956511][ T5753] usb 4-1: Manufacturer: syz [ 800.971432][ T5753] usb 4-1: SerialNumber: syz [ 801.102949][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 801.117506][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 801.198556][T18127] xt_hashlimit: size too large, truncated to 1048576 [ 801.217534][T18107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.250394][T18107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.685337][T18136] FAULT_INJECTION: forcing a failure. [ 801.685337][T18136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.700223][ T5691] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 801.716866][T18136] CPU: 1 UID: 0 PID: 18136 Comm: syz.0.3775 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.716893][T18136] Tainted: [L]=SOFTLOCKUP [ 801.716901][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.716912][T18136] Call Trace: [ 801.716920][T18136] [ 801.716928][T18136] dump_stack_lvl+0xe8/0x150 [ 801.716971][T18136] should_fail_ex+0x40c/0x560 [ 801.716998][T18136] _copy_from_iter+0x1d3/0x1660 [ 801.717022][T18136] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 801.717047][T18136] ? rcu_is_watching+0x15/0xb0 [ 801.717075][T18136] ? trace_kmem_cache_alloc+0x29/0xe0 [ 801.717100][T18136] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 801.717123][T18136] ? __pfx__copy_from_iter+0x10/0x10 [ 801.717147][T18136] ? __alloc_skb+0x276/0x7a0 [ 801.717173][T18136] ? __alloc_skb+0x276/0x7a0 [ 801.717211][T18136] ? netlink_sendmsg+0x650/0xb40 [ 801.717232][T18136] ? skb_put+0x112/0x210 [ 801.717262][T18136] netlink_sendmsg+0x6c0/0xb40 [ 801.717290][T18136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.717314][T18136] ? aa_sock_msg_perm+0xf1/0x1b0 [ 801.717338][T18136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.717358][T18136] sock_sendmsg_nosec+0x13a/0x180 [ 801.717386][T18136] ____sys_sendmsg+0x54e/0x850 [ 801.717410][T18136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.717436][T18136] ? import_iovec+0x73/0xa0 [ 801.717466][T18136] ___sys_sendmsg+0x2a5/0x360 [ 801.717484][T18136] ? __lock_acquire+0x683/0x2cf0 [ 801.717514][T18136] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.717564][T18136] ? __fget_files+0x2a/0x420 [ 801.717591][T18136] ? __fget_files+0x3a2/0x420 [ 801.717624][T18136] __x64_sys_sendmsg+0x1b1/0x290 [ 801.717648][T18136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.717683][T18136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.717705][T18136] do_syscall_64+0x174/0x580 [ 801.717723][T18136] ? trace_irq_disable+0x3b/0x140 [ 801.717746][T18136] ? clear_bhb_loop+0x40/0x90 [ 801.717770][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.717790][T18136] RIP: 0033:0x7f5c3739de99 [ 801.717808][T18136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.717824][T18136] RSP: 002b:00007f5c38320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.717844][T18136] RAX: ffffffffffffffda RBX: 00007f5c37625fa0 RCX: 00007f5c3739de99 [ 801.717858][T18136] RDX: 0000000004044040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 801.717870][T18136] RBP: 00007f5c38320090 R08: 0000000000000000 R09: 0000000000000000 [ 801.717882][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.717893][T18136] R13: 00007f5c37626038 R14: 00007f5c37625fa0 R15: 00007f5c3774fa48 [ 801.717922][T18136] [ 801.735042][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 801.879446][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 801.881851][ T9391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 801.903725][ T5691] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 802.100857][T15566] team0 (unregistering): Port device team_slave_1 removed [ 802.165637][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.174122][ T5691] usb 2-1: Product: syz [ 802.178400][ T5691] usb 2-1: Manufacturer: syz [ 802.184042][T15566] team0 (unregistering): Port device team_slave_0 removed [ 802.195607][ T5691] usb 2-1: SerialNumber: syz [ 802.415969][ T5753] uvcvideo 4-1:42.178: probe with driver uvcvideo failed with error -22 [ 802.434236][ T5753] usb 4-1: USB disconnect, device number 121 [ 802.557118][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 802.572335][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 802.720677][T15566] IPVS: stop unused estimator thread 0... [ 803.093874][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 803.108305][T15566] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.177178][T18156] program syz.3.3780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.453992][T18134] syzkaller0: entered promiscuous mode [ 803.469133][T18134] syzkaller0: entered allmulticast mode [ 803.617731][ T5691] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 803.655396][ T5691] usb 2-1: USB disconnect, device number 9 [ 804.223013][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 804.223033][ T29] audit: type=1326 audit(1784711439.838:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.292224][ T29] audit: type=1326 audit(1784711439.838:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.376235][ T29] audit: type=1326 audit(1784711439.878:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.453015][ T29] audit: type=1326 audit(1784711439.878:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.483090][ T29] audit: type=1326 audit(1784711439.878:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.508013][ T29] audit: type=1326 audit(1784711439.938:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.535445][ T29] audit: type=1326 audit(1784711439.938:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.560243][ T29] audit: type=1326 audit(1784711440.018:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf5f9de99 code=0x7ffc0000 [ 804.620493][ T29] audit: type=1326 audit(1784711440.018:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbf5f9dc02 code=0x7ffc0000 [ 804.686215][ T29] audit: type=1326 audit(1784711440.018:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3786" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdbf5f9dc97 code=0x7ffc0000 [ 804.792054][T18182] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3787'. [ 804.927985][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3788'. [ 805.248689][T18194] netlink: 'syz.0.3791': attribute type 1 has an invalid length. [ 805.275253][ T43] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 805.329140][T18194] bond2: entered promiscuous mode [ 805.363827][T18194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 805.427312][T18196] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 805.471261][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.493876][T18196] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 805.512073][ T43] usb 6-1: config 0 has no interfaces? [ 805.523855][ T43] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 805.538053][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.550044][T18196] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 805.561005][ T43] usb 6-1: Product: syz [ 805.567918][ T43] usb 6-1: Manufacturer: syz [ 805.583950][ T43] usb 6-1: SerialNumber: syz [ 805.613413][ T43] usb 6-1: config 0 descriptor?? [ 805.702848][ T9388] net_ratelimit: 8 callbacks suppressed [ 805.702868][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 805.723104][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 805.742321][T18203] xt_cgroup: invalid path, errno=-2 [ 805.847120][T18188] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3789'. [ 805.883888][ T5714] usb 6-1: USB disconnect, device number 16 [ 805.992753][ T188] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 806.133283][ T188] usb 2-1: device descriptor read/64, error -71 [ 806.284694][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 806.299147][T15570] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 806.342874][ T43] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 806.392774][ T188] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 806.492923][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 806.504767][ T43] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 806.515032][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.523997][ T43] usb 4-1: Product: syz [ 806.528326][ T43] usb 4-1: Manufacturer: syz [ 806.533138][ T43] usb 4-1: SerialNumber: syz [ 806.542950][ T188] usb 2-1: device descriptor read/64, error -71 [ 806.607706][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3799'. [ 806.674034][ T188] usb usb2-port1: attempt power cycle [ 806.775589][T18217] kvm: apic: phys broadcast and lowest prio [ 806.801059][T18215] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3800'. [ 806.822905][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 806.837480][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.017376][T18220] netlink: 'syz.5.3801': attribute type 1 has an invalid length. [ 807.023690][ T188] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 807.054675][ T188] usb 2-1: device descriptor read/8, error -71 [ 807.116570][T18223] FAULT_INJECTION: forcing a failure. [ 807.116570][T18223] name failslab, interval 1, probability 0, space 0, times 0 [ 807.130785][T18223] CPU: 1 UID: 0 PID: 18223 Comm: syz.5.3802 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.130815][T18223] Tainted: [L]=SOFTLOCKUP [ 807.130822][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.130853][T18223] Call Trace: [ 807.130862][T18223] [ 807.130871][T18223] dump_stack_lvl+0xe8/0x150 [ 807.130911][T18223] should_fail_ex+0x40c/0x560 [ 807.130942][T18223] should_failslab+0xa8/0x100 [ 807.130976][T18223] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 807.131007][T18223] ? rxrpc_setsockopt+0x460/0x970 [ 807.131155][T18223] ? rxrpc_setsockopt+0x460/0x970 [ 807.131194][T18223] rxrpc_server_keyring+0xb2/0x200 [ 807.131252][T18223] rxrpc_setsockopt+0x460/0x970 [ 807.131286][T18223] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 807.131319][T18223] ? aa_sock_opt_perm+0xff/0x1a0 [ 807.131351][T18223] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 807.131374][T18223] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 807.131408][T18223] do_sock_setsockopt+0x17c/0x1b0 [ 807.131447][T18223] __x64_sys_setsockopt+0x13d/0x1b0 [ 807.131482][T18223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.131506][T18223] do_syscall_64+0x174/0x580 [ 807.131528][T18223] ? trace_irq_disable+0x3b/0x140 [ 807.131555][T18223] ? clear_bhb_loop+0x40/0x90 [ 807.131582][T18223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.131604][T18223] RIP: 0033:0x7ff8ec79de99 [ 807.131625][T18223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.131643][T18223] RSP: 002b:00007ff8ed640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 807.131666][T18223] RAX: ffffffffffffffda RBX: 00007ff8eca25fa0 RCX: 00007ff8ec79de99 [ 807.131682][T18223] RDX: 0000000000000002 RSI: 0000000000000110 RDI: 0000000000000003 [ 807.131695][T18223] RBP: 00007ff8ed640090 R08: 000000000000000a R09: 0000000000000000 [ 807.131709][T18223] R10: 00002000000038c0 R11: 0000000000000246 R12: 0000000000000001 [ 807.131723][T18223] R13: 00007ff8eca26038 R14: 00007ff8eca25fa0 R15: 00007ff8ecb4fa48 [ 807.131758][T18223] [ 807.350782][ T188] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 807.358584][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 807.373102][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.409792][ T188] usb 2-1: device descriptor read/8, error -71 [ 807.523059][ T188] usb usb2-port1: unable to enumerate USB device [ 807.898485][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 807.912925][ T9389] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.960305][T18207] syzkaller0: entered promiscuous mode [ 807.966457][T18207] syzkaller0: entered allmulticast mode [ 808.085367][ T43] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 808.096255][ T43] usb 4-1: USB disconnect, device number 122 [ 808.532593][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.539169][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.827078][T18245] xt_hashlimit: size too large, truncated to 1048576 [ 808.907465][T18248] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.999587][T18248] bridge_slave_0 (unregistering): left allmulticast mode [ 809.064419][T18248] bridge_slave_0 (unregistering): left promiscuous mode [ 809.102270][T18248] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.332245][T18263] netlink: 'syz.1.3816': attribute type 1 has an invalid length. [ 809.405581][T18263] bond2: entered promiscuous mode [ 809.411233][T18263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 809.425988][T18267] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 809.438688][T18267] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 809.450065][T18267] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 809.634210][T18275] input: syz0 as /devices/virtual/input/input79 [ 809.824496][ T5691] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 809.930555][T18279] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3821'. [ 809.992223][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3823'. [ 810.006482][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 810.026230][ T5691] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 810.042601][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.054498][T18286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3823'. [ 810.088152][ T5691] usb 4-1: Product: syz [ 810.104759][ T5691] usb 4-1: Manufacturer: syz [ 810.123946][ T5691] usb 4-1: SerialNumber: syz [ 810.141576][T18287] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3822'. [ 810.181248][T18290] input: syz0 as /devices/virtual/input/input80 [ 810.412488][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 810.412507][ T29] audit: type=1326 audit(1784711446.018:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 810.494340][ T29] audit: type=1326 audit(1784711446.078:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 810.602860][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 810.622201][ T29] audit: type=1326 audit(1784711446.078:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 810.756533][ T29] audit: type=1326 audit(1784711446.078:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 810.837296][ T29] audit: type=1326 audit(1784711446.078:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 810.877097][ T29] audit: type=1326 audit(1784711446.078:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 810.943141][ T29] audit: type=1326 audit(1784711446.078:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 811.017268][T15605] net_ratelimit: 10 callbacks suppressed [ 811.017284][T15605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 811.037691][T15605] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 811.091194][ T29] audit: type=1326 audit(1784711446.078:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 811.195215][ T29] audit: type=1326 audit(1784711446.078:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 811.249403][ T29] audit: type=1326 audit(1784711446.078:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18288 comm="syz.4.3824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd963f9de99 code=0x7ffc0000 [ 811.417637][ T5747] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 811.495227][T18273] syzkaller0: entered promiscuous mode [ 811.526287][T18273] syzkaller0: entered allmulticast mode [ 811.652846][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 811.667223][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 811.785531][ T5747] usb 6-1: Using ep0 maxpacket: 32 [ 811.802933][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 812.033143][ T188] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 812.094366][ T5747] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 812.114090][ T5691] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 812.181459][ T5691] usb 4-1: USB disconnect, device number 123 [ 812.209403][ T188] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 812.294200][T18309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3830'. [ 812.304620][ T5747] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 812.304665][T15607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 812.327756][T15607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 812.450522][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'. [ 812.511802][ T5747] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 812.575278][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 812.647051][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.694464][T18319] xt_hashlimit: size too large, truncated to 1048576 [ 812.750875][ T5747] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 812.836066][ T5747] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 812.901924][ T5747] usb 6-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00 [ 812.931588][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.954505][ T9395] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 812.968953][ T9395] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.036347][ T5747] usb 6-1: config 0 descriptor?? [ 813.183785][ T7299] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 813.382773][ T7299] usb 4-1: Using ep0 maxpacket: 32 [ 813.396458][ T7299] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 813.414840][ T7299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.438794][ T7299] usb 4-1: config 0 descriptor?? [ 813.460827][ T7299] gspca_main: sq930x-2.14.0 probing 041e:403c [ 813.662510][ T7299] gspca_sq930x: reg_r 001f failed -71 [ 813.671089][ T7299] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 813.725177][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3840'. [ 813.741317][ T7299] usb 4-1: USB disconnect, device number 124 [ 813.748291][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 813.762733][ T9388] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.041859][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3843'. [ 814.532802][ T5747] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 814.695032][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 814.714141][ T5747] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 814.736310][ T5747] usb 4-1: config 0 interface 0 has no altsetting 0 [ 814.751045][ T5747] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 814.773629][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.798694][ T5747] usb 4-1: config 0 descriptor?? [ 814.857853][T18360] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 814.888352][T18360] bond3 (unregistering): Released all slaves [ 814.936635][ T5691] usb 6-1: USB disconnect, device number 17 [ 815.068609][ T5747] usbhid 4-1:0.0: can't add hid device: -71 [ 815.082833][ T188] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 815.085059][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 815.090793][ T5747] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 815.111102][ T188] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 815.161119][ T5747] usb 4-1: USB disconnect, device number 125 [ 815.196554][T18371] »»»»»»: renamed from vlan0 (while UP) [ 815.328529][T18375] : entered promiscuous mode [ 815.565973][ T5747] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 815.574752][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 815.630117][T18384] xt_hashlimit: size too large, truncated to 1048576 [ 815.740974][ T5747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.754614][ T5747] usb 4-1: config 0 has no interfaces? [ 815.762527][ T5747] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 815.773695][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.781836][ T5747] usb 4-1: Product: syz [ 815.788466][ T5747] usb 4-1: Manufacturer: syz [ 815.793259][ T5747] usb 4-1: SerialNumber: syz [ 815.801241][ T5747] usb 4-1: config 0 descriptor?? [ 816.015505][T18373] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3850'. [ 816.026514][ T5747] usb 4-1: USB disconnect, device number 126 [ 816.360646][ C0] ------------[ cut here ]------------ [ 816.366233][ C0] len > ((int)(~0U >> 1)) [ 816.366259][ C0] WARNING: ./include/linux/skbuff.h:2864 at qdisc_pkt_len_segs_init+0x4b4/0xa30, CPU#0: syz.5.3856/18388 [ 816.381916][ C0] Modules linked in: [ 816.387775][ C0] CPU: 0 UID: 0 PID: 18388 Comm: syz.5.3856 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.398764][ C0] Tainted: [L]=SOFTLOCKUP [ 816.403138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.413248][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.419543][ C0] Code: 00 00 02 00 31 ff e8 9b 88 24 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 4a 84 24 f8 45 89 e7 e9 2c ff ff ff e8 3d 84 24 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 ea 85 24 f8 41 39 dc 0f [ 816.439232][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 816.445387][ C0] RAX: ffffffff89a1ed43 RBX: 0000000000000003 RCX: ffff88801db89f00 [ 816.453475][ C0] RDX: 0000000000000100 RSI: 00000000fffffffa RDI: 0000000000000000 [ 816.461476][ C0] RBP: ffff8880216ec3c0 R08: ffff8880547fe067 R09: 1ffff1100a8ffc0c [ 816.469646][ C0] R10: dffffc0000000000 R11: ffffed100a8ffc0d R12: 00000000fffffffa [ 816.477662][ C0] R13: dffffc0000000000 R14: 1ffff110042dd893 R15: ffff888079d3fc18 [ 816.485713][ C0] FS: 00007ff8ed6406c0(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 816.494747][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.501347][ C0] CR2: 0000200000010000 CR3: 0000000060ce0000 CR4: 00000000003526f0 [ 816.509390][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 816.517440][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 816.525470][ C0] Call Trace: [ 816.528801][ C0] [ 816.531691][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 816.537512][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 816.543874][ C0] ? lock_acquire+0x106/0x350 [ 816.548588][ C0] ? unwind_next_frame+0x8f/0x2550 [ 816.553817][ C0] ? unwind_next_frame+0x8f/0x2550 [ 816.558965][ C0] ? __lock_acquire+0x683/0x2cf0 [ 816.563978][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 816.570029][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 816.576623][ C0] ? sched_balance_rq+0x6511/0x7020 [ 816.581908][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 816.588148][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 816.594554][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 816.603059][ C0] ? dev_gro_receive+0x1097/0x2380 [ 816.608329][ C0] napi_complete_done+0x299/0x730 [ 816.613457][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 816.619061][ C0] ? gro_cell_poll+0x175/0x5d0 [ 816.623986][ C0] gro_cell_poll+0x5ab/0x5d0 [ 816.628638][ C0] ? gro_cell_poll+0x175/0x5d0 [ 816.633470][ C0] __napi_poll+0xaa/0x330 [ 816.637848][ C0] net_rx_action+0x61d/0xf50 [ 816.642528][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 816.647757][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 816.653055][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 816.658403][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 816.663672][ C0] ? sched_clock+0x3f/0x60 [ 816.664408][ T5691] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 816.668156][ C0] handle_softirqs+0x225/0x840 [ 816.668191][ C0] ? do_softirq+0x76/0xd0 [ 816.684915][ C0] ? tun_rx_batched+0x185/0x790 [ 816.689831][ C0] do_softirq+0x76/0xd0 [ 816.694140][ C0] [ 816.697106][ C0] [ 816.700071][ C0] __local_bh_enable_ip+0xf8/0x130 [ 816.705260][ C0] ? tun_rx_batched+0x185/0x790 [ 816.710171][ C0] tun_rx_batched+0x616/0x790 [ 816.714916][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 816.720254][ C0] ? tun_get_user+0x2717/0x4370 [ 816.725190][ C0] ? tun_get_user+0x2717/0x4370 [ 816.730127][ C0] ? tun_get_user+0x23cb/0x4370 [ 816.735058][ C0] ? tun_get_user+0x23cb/0x4370 [ 816.739949][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 816.745309][ C0] ? tun_get_user+0x2717/0x4370 [ 816.750211][ C0] ? tun_get_user+0x2717/0x4370 [ 816.755161][ C0] tun_get_user+0x2b44/0x4370 [ 816.759888][ C0] ? aa_file_perm+0x18b/0x15f0 [ 816.764727][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 816.769568][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 816.774656][ C0] ? __lock_acquire+0x683/0x2cf0 [ 816.779655][ C0] ? __pfx___futex_wait+0x10/0x10 [ 816.784782][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 816.789949][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 816.795505][ C0] ? tun_get+0x1c/0x2f0 [ 816.799714][ C0] ? tun_get+0x1c/0x2f0 [ 816.803975][ C0] ? tun_get+0x1c/0x2f0 [ 816.808175][ C0] ? tun_get+0x1c/0x2f0 [ 816.812344][ C0] tun_chr_write_iter+0x113/0x200 [ 816.817442][ C0] vfs_write+0x612/0xba0 [ 816.821754][ C0] ? __pfx_vfs_write+0x10/0x10 [ 816.826596][ C0] ? __fget_files+0x2a/0x420 [ 816.831243][ C0] ksys_write+0x150/0x270 [ 816.835654][ C0] ? __pfx_ksys_write+0x10/0x10 [ 816.840563][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.846680][ C0] do_syscall_64+0x174/0x580 [ 816.851302][ C0] ? trace_irq_disable+0x3b/0x140 [ 816.853100][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 816.856376][ C0] ? clear_bhb_loop+0x40/0x90 [ 816.866199][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.868670][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.872112][ C0] RIP: 0033:0x7ff8ec79de99 [ 816.884423][ T5691] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.887439][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.887464][ C0] RSP: 002b:00007ff8ed640028 EFLAGS: 00000246 [ 816.897081][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.916170][ C0] ORIG_RAX: 0000000000000001 [ 816.916187][ C0] RAX: ffffffffffffffda RBX: 00007ff8eca25fa0 RCX: 00007ff8ec79de99 [ 816.916207][ C0] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000004 [ 816.916224][ C0] RBP: 00007ff8ec833eaf R08: 0000000000000000 R09: 0000000000000000 [ 816.916241][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.916255][ C0] R13: 00007ff8eca26038 R14: 00007ff8eca25fa0 R15: 00007ff8ecb4fa48 [ 816.916291][ C0] [ 816.916331][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 816.916349][ C0] CPU: 0 UID: 0 PID: 18388 Comm: syz.5.3856 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.916412][ C0] Tainted: [L]=SOFTLOCKUP [ 816.916446][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.916501][ C0] Call Trace: [ 816.916535][ C0] [ 816.916574][ C0] vpanic+0x56c/0xa60 [ 816.916698][ C0] ? __pfx__printk+0x10/0x10 [ 816.916753][ C0] ? __pfx_vpanic+0x10/0x10 [ 816.916823][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 816.916894][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 816.917003][ C0] panic+0xc5/0xd0 [ 816.917057][ C0] ? __pfx_panic+0x10/0x10 [ 816.917164][ C0] __warn+0x315/0x4c0 [ 816.917216][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.917299][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.917349][ C0] __report_bug+0x276/0x570 [ 816.917506][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.917590][ C0] ? __pfx___report_bug+0x10/0x10 [ 816.917648][ C0] ? __lock_acquire+0x683/0x2cf0 [ 816.917756][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.917835][ C0] report_bug+0x16a/0x220 [ 816.917911][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.918003][ C0] ? qdisc_pkt_len_segs_init+0x4b6/0xa30 [ 816.918057][ C0] handle_bug+0x9c/0x200 [ 816.918120][ C0] exc_invalid_op+0x1a/0x50 [ 816.918180][ C0] asm_exc_invalid_op+0x1a/0x20 [ 816.918238][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 816.918314][ C0] Code: 00 00 02 00 31 ff e8 9b 88 24 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 4a 84 24 f8 45 89 e7 e9 2c ff ff ff e8 3d 84 24 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 ea 85 24 f8 41 39 dc 0f [ 816.918364][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 816.918418][ C0] RAX: ffffffff89a1ed43 RBX: 0000000000000003 RCX: ffff88801db89f00 [ 816.918458][ C0] RDX: 0000000000000100 RSI: 00000000fffffffa RDI: 0000000000000000 [ 816.918484][ C0] RBP: ffff8880216ec3c0 R08: ffff8880547fe067 R09: 1ffff1100a8ffc0c [ 816.918525][ C0] R10: dffffc0000000000 R11: ffffed100a8ffc0d R12: 00000000fffffffa [ 816.918559][ C0] R13: dffffc0000000000 R14: 1ffff110042dd893 R15: ffff888079d3fc18 [ 816.918614][ C0] ? qdisc_pkt_len_segs_init+0x4b3/0xa30 [ 816.918730][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 816.918873][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 816.918946][ C0] ? lock_acquire+0x106/0x350 [ 816.919032][ C0] ? unwind_next_frame+0x8f/0x2550 [ 816.919130][ C0] ? unwind_next_frame+0x8f/0x2550 [ 816.919203][ C0] ? __lock_acquire+0x683/0x2cf0 [ 816.919316][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 816.919442][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 816.919512][ C0] ? sched_balance_rq+0x6511/0x7020 [ 816.919594][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 816.919689][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 816.919760][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 816.919836][ C0] ? dev_gro_receive+0x1097/0x2380 [ 816.919946][ C0] napi_complete_done+0x299/0x730 [ 816.920027][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 816.920105][ C0] ? gro_cell_poll+0x175/0x5d0 [ 816.920188][ C0] gro_cell_poll+0x5ab/0x5d0 [ 816.920282][ C0] ? gro_cell_poll+0x175/0x5d0 [ 816.920362][ C0] __napi_poll+0xaa/0x330 [ 816.920435][ C0] net_rx_action+0x61d/0xf50 [ 816.920565][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 816.920663][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 816.920797][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 816.920867][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 816.920947][ C0] ? sched_clock+0x3f/0x60 [ 816.921041][ C0] handle_softirqs+0x225/0x840 [ 816.921112][ C0] ? do_softirq+0x76/0xd0 [ 816.921183][ C0] ? tun_rx_batched+0x185/0x790 [ 816.921261][ C0] do_softirq+0x76/0xd0 [ 816.921323][ C0] [ 816.921341][ C0] [ 816.921360][ C0] __local_bh_enable_ip+0xf8/0x130 [ 816.921415][ C0] ? tun_rx_batched+0x185/0x790 [ 816.921480][ C0] tun_rx_batched+0x616/0x790 [ 816.921573][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 816.921635][ C0] ? tun_get_user+0x2717/0x4370 [ 816.921704][ C0] ? tun_get_user+0x2717/0x4370 [ 816.921780][ C0] ? tun_get_user+0x23cb/0x4370 [ 816.921841][ C0] ? tun_get_user+0x23cb/0x4370 [ 816.921909][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 816.921967][ C0] ? tun_get_user+0x2717/0x4370 [ 816.922048][ C0] ? tun_get_user+0x2717/0x4370 [ 816.922116][ C0] tun_get_user+0x2b44/0x4370 [ 816.922229][ C0] ? aa_file_perm+0x18b/0x15f0 [ 816.922298][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 816.922356][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 816.922430][ C0] ? __lock_acquire+0x683/0x2cf0 [ 817.431166][ C0] ? __pfx___futex_wait+0x10/0x10 [ 817.436217][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 817.441374][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 817.446882][ C0] ? tun_get+0x1c/0x2f0 [ 817.451060][ C0] ? tun_get+0x1c/0x2f0 [ 817.455237][ C0] ? tun_get+0x1c/0x2f0 [ 817.459415][ C0] ? tun_get+0x1c/0x2f0 [ 817.463590][ C0] tun_chr_write_iter+0x113/0x200 [ 817.468650][ C0] vfs_write+0x612/0xba0 [ 817.472931][ C0] ? __pfx_vfs_write+0x10/0x10 [ 817.477728][ C0] ? __fget_files+0x2a/0x420 [ 817.482338][ C0] ksys_write+0x150/0x270 [ 817.486736][ C0] ? __pfx_ksys_write+0x10/0x10 [ 817.491620][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.497702][ C0] do_syscall_64+0x174/0x580 [ 817.502309][ C0] ? trace_irq_disable+0x3b/0x140 [ 817.507371][ C0] ? clear_bhb_loop+0x40/0x90 [ 817.512061][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.517961][ C0] RIP: 0033:0x7ff8ec79de99 [ 817.522395][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.542019][ C0] RSP: 002b:00007ff8ed640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 817.550474][ C0] RAX: ffffffffffffffda RBX: 00007ff8eca25fa0 RCX: 00007ff8ec79de99 [ 817.558644][ C0] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000004 [ 817.566662][ C0] RBP: 00007ff8ec833eaf R08: 0000000000000000 R09: 0000000000000000 [ 817.574670][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.582660][ C0] R13: 00007ff8eca26038 R14: 00007ff8eca25fa0 R15: 00007ff8ecb4fa48 [ 817.590671][ C0] [ 817.593869][ C0] Kernel Offset: disabled [ 817.598208][ C0] Rebooting in 86400 seconds..