last executing test programs: 5.39397075s ago: executing program 4 (id=1264): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000007c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xbc0b0000}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) 4.895588951s ago: executing program 3 (id=1268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec749000000000018450000010000000000000000000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000007c0)={0x0, 0x3, 0x7a}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000959f010000000000dab8"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 3.989609828s ago: executing program 0 (id=1270): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 3.754015927s ago: executing program 0 (id=1271): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 3.554140045s ago: executing program 4 (id=1272): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 3.518221507s ago: executing program 0 (id=1274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x0, 0x7fff, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x7, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f0001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_destroy(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3.383488133s ago: executing program 3 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.044013376s ago: executing program 4 (id=1277): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.885290553s ago: executing program 3 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.847474375s ago: executing program 2 (id=1279): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50", @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 2.825027185s ago: executing program 4 (id=1280): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000340)={@mcast2, 0x32}) r5 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x5, "e89082db530c1b9070950faeacb6ae11067653331d34a0dd16be012d1460b974"}) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffe83, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e00210000000000000000200700000005000000000000000a00020077a9e20000000000a4869521c0b1530e9a77f7076faf071b4d348827493fbf43f27991d3d9f4e1453770ef8db1d271168db6f03c8999eae6958d9c4b7ba07469e4d9d7efa7f7020f46357e0f91168a3c85605f248030c44ca53c577ab71f7a64843a041367c9fe857df6dd5a0c893a69bdbc8d7935e86a2297a5de5c8e1f6f0347c37893bb89e9ac1ef958d8dce0edb1398f8694d0551e"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.616666204s ago: executing program 3 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff1, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.603298495s ago: executing program 1 (id=1282): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 2.288736647s ago: executing program 3 (id=1283): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000007c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xbc0b0000}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) 2.251085059s ago: executing program 1 (id=1284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 2.150268833s ago: executing program 1 (id=1285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec749000000000018450000010000000000000000000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000007c0)={0x0, 0x3, 0x7a}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000959f010000000000dab8"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 1.810451567s ago: executing program 2 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.555340767s ago: executing program 0 (id=1287): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 1.519717729s ago: executing program 2 (id=1288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.138882544s ago: executing program 0 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x2006361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x26b6900d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, 0x0}, 0x4) 1.112615745s ago: executing program 2 (id=1290): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 953.999811ms ago: executing program 1 (id=1291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 573.451317ms ago: executing program 0 (id=1292): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000c77392aace8d64f21577fc8294aba14a6f5e298a007d6df6c2e27c63c50092fc7840ea9baa602b40dbc48925ff68db39a69a216c855e721f3f396b090000000000005d160a024834b4da05d01ce91be2b6cded56f7e3391abed1df586991e2b7787a05d3c4b2263ce5d16e64216e189e", @ANYRES16=r4, @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) dup2(r3, r3) 573.109327ms ago: executing program 3 (id=1293): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000c77392aace8d64f21577fc8294aba14a6f5e298a007d6df6c2e27c63c50092fc7840ea9baa602b40dbc48925ff68db39a69a216c855e721f3f396b090000000000005d160a024834b4da05d01ce91be2b6cded56f7e3391abed1df586991e2b7787a05d3c4b2263ce5d16e64216e189e", @ANYRES16=r4, @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) dup2(r3, r3) 497.07951ms ago: executing program 1 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 438.487382ms ago: executing program 2 (id=1295): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 261.83718ms ago: executing program 4 (id=1296): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 105.150726ms ago: executing program 2 (id=1297): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50", @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 42.146039ms ago: executing program 4 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 1 (id=1299): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) kernel console output (not intermixed with test programs): d, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.008515][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.084803][ T4232] hub 5-1:1.0: bad descriptor, ignoring hub [ 84.091075][ T4232] hub: probe of 5-1:1.0 failed with error -5 [ 84.111099][ T4349] gre0 speed is unknown, defaulting to 1000 [ 84.149534][ T4232] cdc_wdm 5-1:1.0: skipping garbage [ 84.172832][ T4232] cdc_wdm 5-1:1.0: skipping garbage [ 84.210573][ T4382] device syzkaller0 entered promiscuous mode [ 84.213347][ T4232] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 84.242645][ T4232] cdc_wdm 5-1:1.0: Unknown control protocol [ 84.264496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.273870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 84.288919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #283!!! [ 84.348759][ T4232] usb 5-1: USB disconnect, device number 3 [ 84.528954][ T4385] tipc: Enabling of bearer rejected, failed to enable media [ 84.620047][ T4389] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 84.703553][ T4349] gre0 speed is unknown, defaulting to 1000 [ 84.922765][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.098586][ T4349] gre0 speed is unknown, defaulting to 1000 [ 85.162562][ T1347] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.172824][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 85.229789][ T4349] gre0 speed is unknown, defaulting to 1000 [ 85.292747][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.318568][ T4232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.347594][ T4232] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 85.385517][ T4232] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 85.422065][ T4232] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 85.452206][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.528984][ T4232] hub 5-1:1.0: bad descriptor, ignoring hub [ 85.543869][ T4232] hub: probe of 5-1:1.0 failed with error -5 [ 85.581400][ T4232] cdc_wdm 5-1:1.0: skipping garbage [ 85.590153][ T4349] gre0 speed is unknown, defaulting to 1000 [ 85.593187][ T1347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.602843][ T4232] cdc_wdm 5-1:1.0: skipping garbage [ 85.647860][ T4232] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 85.680643][ T4232] cdc_wdm 5-1:1.0: Unknown control protocol [ 85.692665][ T1347] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 85.702871][ T1347] usb 2-1: can't read configurations, error -71 [ 85.754037][ T4232] usb 5-1: USB disconnect, device number 4 [ 85.804108][ T4413] device syzkaller0 entered promiscuous mode [ 86.202491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.211682][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.231292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 86.242591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 86.700100][ T4427] loop0: detected capacity change from 0 to 4096 [ 86.818729][ T4427] NILFS (loop0): invalid segment: Checksum error in segment payload [ 86.820469][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 86.852556][ T4427] NILFS (loop0): trying rollback from an earlier position [ 86.967804][ T21] cfg80211: failed to load regulatory.db [ 86.979324][ T4427] NILFS (loop0): recovery complete [ 87.137022][ T4436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.245639][ T4438] tipc: Enabling of bearer rejected, failed to enable media [ 87.746151][ T26] audit: type=1800 audit(1774883006.897:3): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file1" dev="loop0" ino=16 res=0 errno=0 [ 87.890688][ T4430] ODEBUG: Out of memory. ODEBUG disabled [ 87.900922][ T4439] ======================================================= [ 87.900922][ T4439] WARNING: The mand mount option has been deprecated and [ 87.900922][ T4439] and is ignored by this kernel. Remove the mand [ 87.900922][ T4439] option from the mount to silence this warning. [ 87.900922][ T4439] ======================================================= [ 88.016627][ T4450] device syzkaller0 entered promiscuous mode [ 89.345811][ T4478] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.615073][ T4488] tipc: Enabling of bearer rejected, failed to enable media [ 89.976957][ T4504] device syzkaller0 entered promiscuous mode [ 90.014366][ T4502] loop0: detected capacity change from 0 to 4096 [ 90.216281][ T4502] NILFS (loop0): invalid segment: Checksum error in segment payload [ 90.286294][ T4502] NILFS (loop0): trying rollback from an earlier position [ 90.430898][ T4502] NILFS (loop0): recovery complete [ 90.542297][ T4520] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.106456][ T26] audit: type=1800 audit(1774883010.257:4): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.60" name="file1" dev="loop0" ino=16 res=0 errno=0 [ 91.820953][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 92.371718][ T4552] tipc: Enabling of bearer rejected, failed to enable media [ 92.724342][ T4557] device syzkaller0 entered promiscuous mode [ 93.592652][ T4273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.842692][ T4273] usb 4-1: Using ep0 maxpacket: 32 [ 93.962836][ T1347] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.983017][ T4273] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.064613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 94.074262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 94.173190][ T4273] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.192823][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.201464][ T4273] usb 4-1: Product: syz [ 94.222637][ T4273] usb 4-1: Manufacturer: syz [ 94.238115][ T4273] usb 4-1: SerialNumber: syz [ 94.267365][ T4273] usb 4-1: config 0 descriptor?? [ 94.302885][ T4583] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.412685][ T1347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.445827][ T1347] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 94.486751][ T1347] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.511608][ T1347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.572377][ T1347] usb 1-1: config 0 descriptor?? [ 94.588478][ T4603] tipc: Enabling of bearer rejected, failed to enable media [ 94.626215][ T1347] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.653210][ T1347] dvb-usb: bulk message failed: -22 (3/0) [ 94.713285][ T1347] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 94.793287][ T1347] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 94.827038][ T4596] dibusb: i2c wr: len=61 is too big! [ 94.827038][ T4596] [ 94.845521][ T1347] usb 1-1: media controller created [ 94.920875][ T1347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.035206][ T21] usb 4-1: USB disconnect, device number 2 [ 95.053385][ T1347] dvb-usb: bulk message failed: -22 (6/0) [ 95.093834][ T1347] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.164497][ T1347] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 95.198078][ T4614] device syzkaller0 entered promiscuous mode [ 95.295306][ T1347] dvb-usb: schedule remote query interval to 150 msecs. [ 95.339652][ T1347] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.403609][ T1347] usb 1-1: USB disconnect, device number 3 [ 95.576914][ T1347] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.684356][ T4617] device syzkaller0 entered promiscuous mode [ 95.955063][ T4631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 97.000221][ T4648] device syzkaller0 entered promiscuous mode [ 97.316535][ T4657] device syzkaller0 entered promiscuous mode [ 97.732545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 98.033896][ T4682] device syzkaller0 entered promiscuous mode [ 98.255058][ T4690] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 98.500107][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 99.367713][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.582532][ T1347] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.682528][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 99.812739][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.833876][ T1347] usb 5-1: Using ep0 maxpacket: 32 [ 99.896281][ T4719] device syzkaller0 entered promiscuous mode [ 99.953521][ T1347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.092859][ T4232] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 100.117562][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.123447][ T1347] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 100.162887][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.170959][ T1347] usb 5-1: Product: syz [ 100.177273][ T4232] usb 2-1: Product: syz [ 100.181587][ T4232] usb 2-1: Manufacturer: syz [ 100.201794][ T4232] usb 2-1: SerialNumber: syz [ 100.211063][ T1347] usb 5-1: Manufacturer: syz [ 100.248287][ T1347] usb 5-1: SerialNumber: syz [ 100.273681][ T4232] usb 2-1: config 0 descriptor?? [ 100.273849][ T1347] usb 5-1: config 0 descriptor?? [ 100.657179][ T4742] device syzkaller0 entered promiscuous mode [ 101.314366][ T4754] device syzkaller0 entered promiscuous mode [ 101.566462][ T4230] usb 5-1: USB disconnect, device number 5 [ 101.973306][ T4775] device syzkaller0 entered promiscuous mode [ 102.051135][ T4232] usb 2-1: USB disconnect, device number 4 [ 102.189701][ T4788] device syzkaller0 entered promiscuous mode [ 102.332611][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 102.445379][ T4794] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.242630][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.502715][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 103.580240][ T4843] device syzkaller0 entered promiscuous mode [ 103.633475][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.701633][ T4845] gre0 speed is unknown, defaulting to 1000 [ 103.844773][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 103.860711][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.892974][ T21] usb 2-1: Product: syz [ 103.897891][ T21] usb 2-1: Manufacturer: syz [ 103.902755][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.939282][ T21] usb 2-1: SerialNumber: syz [ 103.974033][ T21] usb 2-1: config 0 descriptor?? [ 104.102699][ T13] usb 1-1: device descriptor read/64, error -71 [ 104.372609][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.582563][ T13] usb 1-1: device descriptor read/64, error -71 [ 104.702748][ T13] usb usb1-port1: attempt power cycle [ 105.115102][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.212727][ T13] usb 1-1: device descriptor read/8, error -71 [ 105.482590][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.582711][ T13] usb 1-1: device descriptor read/8, error -71 [ 105.703666][ T13] usb usb1-port1: unable to enumerate USB device [ 105.858791][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 105.900945][ T13] usb 2-1: USB disconnect, device number 5 [ 106.404576][ T4898] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.717303][ T4946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 108.045415][ T4962] fuse: Unknown parameter 'fd0x00000000000000040000000000000000000000000000000000000000' [ 108.211306][ T4971] tipc: Started in network mode [ 108.249985][ T4971] tipc: Node identity 1eb9704acb12, cluster identity 4711 [ 108.270888][ T4971] tipc: Enabled bearer , priority 0 [ 108.329201][ T4971] tipc: Resetting bearer [ 108.443575][ T4969] tipc: Disabling bearer [ 108.594357][ T4976] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 108.638985][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.672756][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.681464][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.871579][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 109.962674][ T4231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.222588][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 110.342684][ T4231] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 110.522664][ T4231] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.548612][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.582495][ T4231] usb 1-1: Product: syz [ 110.588238][ T4231] usb 1-1: Manufacturer: syz [ 110.612539][ T4231] usb 1-1: SerialNumber: syz [ 110.645490][ T4231] usb 1-1: config 0 descriptor?? [ 110.694799][ T4231] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 110.725292][ T4231] usb 1-1: setting power ON [ 110.752931][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 110.788273][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.807497][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.875458][ T4231] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.894952][ T5021] dvb-usb: bulk message failed: -22 (3/0) [ 110.923179][ T4231] usb 1-1: media controller created [ 111.006281][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.143401][ T4231] usb 1-1: selecting invalid altsetting 6 [ 111.192922][ T4231] usb 1-1: digital interface selection failed (-22) [ 111.210716][ T4231] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.283121][ T4231] usb 1-1: setting power OFF [ 111.288184][ T4231] dvb-usb: bulk message failed: -22 (2/0) [ 111.367350][ T4231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.435498][ T4231] (NULL device *): no alternate interface [ 111.611631][ T4231] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.641205][ T5059] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 111.694606][ T4231] usb 1-1: USB disconnect, device number 8 [ 111.851971][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.889071][ T5075] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.031437][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 112.223095][ T5087] device syzkaller0 entered promiscuous mode [ 112.714011][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.872890][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.901613][ T5107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.756998][ T5135] device syzkaller0 entered promiscuous mode [ 113.797215][ T5138] net_ratelimit: 2 callbacks suppressed [ 113.797232][ T5138] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.832750][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.842955][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.935615][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.224646][ T5143] device syzkaller0 entered promiscuous mode [ 114.779940][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 114.953015][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.991699][ T5165] device syzkaller0 entered promiscuous mode [ 115.255333][ T5170] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.383938][ T5173] device syzkaller0 entered promiscuous mode [ 115.679188][ T5181] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 115.717753][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 115.825158][ T5181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.252'. [ 116.003263][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.412048][ T5192] device syzkaller0 entered promiscuous mode [ 116.632606][ T1347] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.872690][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.902576][ T1347] usb 1-1: Using ep0 maxpacket: 32 [ 117.023163][ T1347] usb 1-1: config 0 has no interfaces? [ 117.037463][ T1347] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.081716][ T1347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.122735][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.140034][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.150335][ T5210] device syzkaller0 entered promiscuous mode [ 117.175334][ T1347] usb 1-1: config 0 descriptor?? [ 117.365923][ T5216] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.386362][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 117.410449][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.264'. [ 117.424843][ T5212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.264'. [ 117.439332][ T5212] device gretap1 entered promiscuous mode [ 117.450899][ T4231] usb 1-1: USB disconnect, device number 9 [ 117.504037][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.563857][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 117.702927][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 117.717188][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.728665][ T13] usb 3-1: Product: syz [ 117.738076][ T13] usb 3-1: Manufacturer: syz [ 117.744050][ T13] usb 3-1: SerialNumber: syz [ 117.771170][ T13] usb 3-1: config 0 descriptor?? [ 118.187303][ T13] usb 3-1: USB disconnect, device number 2 [ 118.563530][ T5244] device syzkaller0 entered promiscuous mode [ 118.741248][ T5250] binder: 5247:5250 ioctl c0306201 0 returned -14 [ 118.815724][ T5254] device syzkaller0 entered promiscuous mode [ 118.851348][ T5255] binder: 5247:5255 ioctl c0306201 0 returned -14 [ 118.883458][ T5249] net_ratelimit: 1 callbacks suppressed [ 118.883475][ T5249] IPVS: fo: FWM 3 0x00000003 - no destination available [ 118.921273][ T5258] device syzkaller0 entered promiscuous mode [ 118.928384][ T5259] binder: 5247:5259 ioctl 40189206 0 returned -22 [ 119.203112][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.455423][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 119.746325][ T5298] device syzkaller0 entered promiscuous mode [ 119.929742][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.055450][ T5303] device syzkaller0 entered promiscuous mode [ 120.082725][ T4263] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.164563][ T5304] IPVS: fo: FWM 3 0x00000003 - no destination available [ 120.233630][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.332714][ T4263] usb 2-1: Using ep0 maxpacket: 16 [ 120.406600][ T5309] capability: warning: `syz.3.290' uses deprecated v2 capabilities in a way that may be insecure [ 120.462927][ T4263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.490111][ T5307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.652695][ T4263] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 120.685443][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.718234][ T4263] usb 2-1: Product: syz [ 120.738568][ T4263] usb 2-1: Manufacturer: syz [ 120.785574][ T5312] device syzkaller0 entered promiscuous mode [ 120.792157][ T4263] usb 2-1: SerialNumber: syz [ 120.808514][ T4263] usb 2-1: config 0 descriptor?? [ 121.144480][ T4231] usb 2-1: USB disconnect, device number 6 [ 121.164480][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.202869][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.229172][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.265099][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.283092][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.343906][ T5342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 121.380906][ T5342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.297'. [ 121.416132][ T5342] device gretap1 entered promiscuous mode [ 121.550671][ T5347] device syzkaller0 entered promiscuous mode [ 122.072038][ T5366] device syzkaller0 entered promiscuous mode [ 122.155844][ T5370] device syzkaller0 entered promiscuous mode [ 122.515661][ T5380] device syzkaller0 entered promiscuous mode [ 123.163617][ T5399] device syzkaller0 entered promiscuous mode [ 123.277385][ T5401] device syzkaller0 entered promiscuous mode [ 123.506436][ T5408] device syzkaller0 entered promiscuous mode [ 123.629454][ T5410] device syzkaller0 entered promiscuous mode [ 124.103451][ T5437] device syzkaller0 entered promiscuous mode [ 124.398586][ T1347] net_ratelimit: 747 callbacks suppressed [ 124.398606][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.436273][ T5452] device syzkaller0 entered promiscuous mode [ 124.607015][ T5460] device syzkaller0 entered promiscuous mode [ 124.830473][ T5464] device syzkaller0 entered promiscuous mode [ 125.479739][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.548138][ T5492] device syzkaller0 entered promiscuous mode [ 125.856548][ T5499] device syzkaller0 entered promiscuous mode [ 126.014548][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.306938][ T5510] device syzkaller0 entered promiscuous mode [ 126.552845][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.794165][ T5523] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.904085][ T5519] device syzkaller0 entered promiscuous mode [ 126.921106][ T5524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.517803][ T5539] device syzkaller0 entered promiscuous mode [ 127.593937][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.884488][ T5554] device syzkaller0 entered promiscuous mode [ 128.214936][ T5575] IPVS: length: 255 != 24 [ 128.297713][ T26] audit: type=1326 audit(1774883047.447:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f39350819 code=0x7ffc0000 [ 128.411893][ T5578] device syzkaller0 entered promiscuous mode [ 128.418089][ T26] audit: type=1326 audit(1774883047.477:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f39350819 code=0x7ffc0000 [ 128.632922][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.842380][ T5592] device syzkaller0 entered promiscuous mode [ 128.899137][ T5597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.036748][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.280126][ T5607] device syzkaller0 entered promiscuous mode [ 129.673054][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.222650][ T4273] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.345828][ T5645] device syzkaller0 entered promiscuous mode [ 130.522565][ T4273] usb 2-1: Using ep0 maxpacket: 16 [ 130.672821][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.723017][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.902786][ T4273] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 130.936554][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.985474][ T4273] usb 2-1: Product: syz [ 130.997698][ T4273] usb 2-1: Manufacturer: syz [ 131.029095][ T4273] usb 2-1: SerialNumber: syz [ 131.036393][ T5669] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 131.108210][ T4273] usb 2-1: config 0 descriptor?? [ 131.387082][ T4228] usb 2-1: USB disconnect, device number 7 [ 131.716161][ T5685] device syzkaller0 entered promiscuous mode [ 131.763930][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.827135][ T5691] device syzkaller0 entered promiscuous mode [ 132.072727][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.212247][ T5707] device syzkaller0 entered promiscuous mode [ 132.802925][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.914003][ T5746] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 133.035246][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042346][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.062672][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.217060][ T5752] device syzkaller0 entered promiscuous mode [ 133.421291][ T5756] device syzkaller0 entered promiscuous mode [ 133.832990][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.980968][ T5768] device syzkaller0 entered promiscuous mode [ 134.051460][ T5776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.314423][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.353831][ T5786] binder_alloc: 5785: binder_alloc_buf, no vma [ 134.594120][ T5792] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 134.633362][ T5792] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 134.759395][ T5805] device syzkaller0 entered promiscuous mode [ 134.872809][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.951077][ T5807] device syzkaller0 entered promiscuous mode [ 135.168043][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.197466][ T5811] device syzkaller0 entered promiscuous mode [ 135.274092][ T5817] device syzkaller0 entered promiscuous mode [ 135.623855][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.632477][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.752553][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.878368][ T5858] device syzkaller0 entered promiscuous mode [ 135.934984][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.970991][ T5866] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 135.994516][ T5864] device syzkaller0 entered promiscuous mode [ 136.002631][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 136.080060][ T5870] binder_alloc: 5869: binder_alloc_buf, no vma [ 136.122717][ T13] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 136.140711][ T13] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.177846][ T13] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.196399][ T13] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 136.207955][ T13] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 136.238237][ T13] usb 4-1: config 168 interface 0 has no altsetting 0 [ 136.291488][ T5875] netlink: 'syz.4.439': attribute type 5 has an invalid length. [ 136.323392][ T13] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 136.332402][ T13] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.354944][ T13] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.367729][ T13] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 136.379304][ T13] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 136.397841][ T13] usb 4-1: config 168 interface 0 has no altsetting 0 [ 136.502743][ T13] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 136.514736][ T13] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.527847][ T13] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.543168][ T13] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 136.624914][ T13] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 136.661211][ T13] usb 4-1: config 168 interface 0 has no altsetting 0 [ 136.741476][ T5885] fuse: root generation should be zero [ 136.827380][ T5881] device syzkaller0 entered promiscuous mode [ 136.922696][ T13] usb 4-1: string descriptor 0 read error: -22 [ 136.939408][ T13] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.952776][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.961038][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.024985][ T13] adutux 4-1:168.0: interrupt endpoints not found [ 137.232685][ T4228] usb 4-1: USB disconnect, device number 3 [ 137.529549][ T5909] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 137.622663][ T4263] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.715002][ T5911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.765674][ T5913] device syzkaller0 entered promiscuous mode [ 137.872694][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 137.993004][ T4263] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.014041][ T5921] binder_alloc: 5919: binder_alloc_buf, no vma [ 138.021907][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.050430][ T4263] usb 5-1: config 0 descriptor?? [ 138.068534][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.134839][ T5926] device syzkaller0 entered promiscuous mode [ 138.153076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.164451][ T5930] tipc: Started in network mode [ 138.169372][ T5930] tipc: Node identity ba04f7997da5, cluster identity 4711 [ 138.195740][ T5930] tipc: Enabled bearer , priority 0 [ 138.228719][ T5927] device ip6gretap0 entered promiscuous mode [ 138.299158][ T5930] device syzkaller0 entered promiscuous mode [ 138.324073][ T4263] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 138.388639][ T4263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.391212][ T5932] tipc: Resetting bearer [ 138.417290][ T4263] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 138.447962][ T5929] tipc: Resetting bearer [ 138.477452][ T4263] usb 5-1: media controller created [ 138.490124][ T5929] tipc: Disabling bearer [ 138.526266][ T5904] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 138.548194][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.592921][ T4263] az6027: usb out operation failed. (-71) [ 138.622614][ T4263] az6027: usb out operation failed. (-71) [ 138.628406][ T4263] stb0899_attach: Driver disabled by Kconfig [ 138.635590][ T4263] az6027: no front-end attached [ 138.635590][ T4263] [ 138.662591][ T4263] az6027: usb out operation failed. (-71) [ 138.669090][ T4263] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.683577][ T4263] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 138.698336][ T4263] dvb-usb: schedule remote query interval to 400 msecs. [ 138.707005][ T4263] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.782963][ T4263] usb 5-1: USB disconnect, device number 6 [ 138.803048][ T4273] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.894861][ T4263] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 139.203885][ T4273] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.223265][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.243829][ T4273] usb 3-1: config 0 descriptor?? [ 139.284693][ T5945] device syzkaller0 entered promiscuous mode [ 139.304087][ T4273] cp210x 3-1:0.0: cp210x converter detected [ 139.420256][ T5952] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.572534][ T5962] device syzkaller0 entered promiscuous mode [ 139.757658][ T4273] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 139.785849][ T4273] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 139.855026][ T4273] usb 3-1: cp210x converter now attached to ttyUSB0 [ 140.118248][ T5987] device syzkaller0 entered promiscuous mode [ 140.207737][ T1347] net_ratelimit: 2 callbacks suppressed [ 140.207757][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.277748][ T5993] device syzkaller0 entered promiscuous mode [ 140.374246][ T5999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.586785][ T6008] device syzkaller0 entered promiscuous mode [ 140.768012][ T6019] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.784640][ T6014] IPVS: fo: FWM 3 0x00000003 - no destination available [ 140.946614][ T6026] device syzkaller0 entered promiscuous mode [ 141.672933][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.788435][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.809805][ T13] usb 3-1: USB disconnect, device number 3 [ 141.873750][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.930737][ T13] cp210x 3-1:0.0: device disconnected [ 142.219599][ T6055] device syzkaller0 entered promiscuous mode [ 142.347298][ T6060] binder: BINDER_SET_CONTEXT_MGR already set [ 142.382530][ T6060] binder: 6058:6060 ioctl 4018620d 200000000040 returned -16 [ 142.570969][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 142.600111][ T6069] netlink: 184 bytes leftover after parsing attributes in process `syz.2.508'. [ 142.712666][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.871915][ T6078] device syzkaller0 entered promiscuous mode [ 143.195961][ T6086] device syzkaller0 entered promiscuous mode [ 143.362619][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.511848][ T6095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.602539][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 143.691520][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 143.727982][ T6099] netlink: 184 bytes leftover after parsing attributes in process `syz.1.523'. [ 143.754306][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.839526][ T6105] device syzkaller0 entered promiscuous mode [ 143.882997][ T4230] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 143.913232][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.921447][ T4230] usb 4-1: Product: syz [ 143.932258][ T4230] usb 4-1: Manufacturer: syz [ 143.968298][ T4230] usb 4-1: SerialNumber: syz [ 144.258981][ T6116] netlink: 48 bytes leftover after parsing attributes in process `syz.2.531'. [ 144.284077][ T4230] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 144.320088][ T4230] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 144.352511][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 144.394327][ T4230] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 144.399564][ T6118] device team_slave_0 entered promiscuous mode [ 144.407215][ T6118] device team_slave_1 entered promiscuous mode [ 144.416854][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.426054][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.435307][ T6118] device macvtap1 entered promiscuous mode [ 144.442345][ T6120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.453065][ T6118] device team0 entered promiscuous mode [ 144.461934][ T6118] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 144.473030][ T4230] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 144.491768][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 144.521628][ T6121] device team0 left promiscuous mode [ 144.532730][ T4230] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 144.559117][ T6121] device team_slave_0 left promiscuous mode [ 144.565442][ T6121] device team_slave_1 left promiscuous mode [ 144.589162][ T6121] device macvtap1 left promiscuous mode [ 144.698698][ T4230] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 144.724179][ T6126] device syzkaller0 entered promiscuous mode [ 144.758141][ T4230] usb 4-1: USB disconnect, device number 4 [ 144.778755][ T6128] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.034693][ T4627] udevd[4627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.122911][ T6142] device syzkaller0 entered promiscuous mode [ 145.249108][ T6140] fuse: Bad value for 'fd' [ 145.329660][ T6156] net_ratelimit: 10 callbacks suppressed [ 145.329691][ T6156] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 145.433182][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.458928][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.487555][ T6150] device gretap1 entered promiscuous mode [ 145.783342][ T6167] binder: BINDER_SET_CONTEXT_MGR already set [ 145.792590][ T6167] binder: 6166:6167 ioctl 4018620d 200000000040 returned -16 [ 145.832960][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.841247][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.850833][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.882622][ T4230] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.262760][ T4230] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 146.278568][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 146.335624][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.374630][ T4230] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.387593][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.414407][ T4230] usb 5-1: config 0 descriptor?? [ 146.485552][ T4230] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 146.633899][ T6172] IPVS: fo: FWM 3 0x00000003 - no destination available [ 146.672311][ T6175] device syzkaller0 entered promiscuous mode [ 146.872815][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.013085][ T6182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.119191][ T6183] device syzkaller0 entered promiscuous mode [ 147.361177][ T6189] device syzkaller0 entered promiscuous mode [ 147.913361][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.651082][ T4273] usb 5-1: USB disconnect, device number 7 [ 148.891276][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.928574][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 148.971749][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.996948][ T6209] device syzkaller0 entered promiscuous mode [ 150.007240][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.252294][ T6221] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 150.553112][ T6232] tipc: Enabling of bearer rejected, failed to enable media [ 150.566838][ T6232] device syzkaller0 entered promiscuous mode [ 150.651581][ T6233] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 151.043520][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.068228][ T6244] device syzkaller0 entered promiscuous mode [ 151.127188][ T6245] device syzkaller0 entered promiscuous mode [ 151.383074][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 151.451355][ T6253] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 151.484836][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 151.523327][ T6253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'. [ 151.556760][ T6253] device gretap1 entered promiscuous mode [ 151.914173][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.971387][ T6266] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.084076][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.162825][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.272713][ T4273] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.422745][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 152.552819][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.564458][ T6271] device syzkaller0 entered promiscuous mode [ 152.591755][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.602688][ T4273] usb 2-1: Using ep0 maxpacket: 32 [ 152.627738][ T6275] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 152.651232][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 152.680569][ T6275] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 152.700380][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.722619][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.762374][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.794301][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.818184][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.997637][ T6282] device syzkaller0 entered promiscuous mode [ 153.012817][ T4273] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 153.030242][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.052610][ T4273] usb 2-1: Product: syz [ 153.056854][ T4273] usb 2-1: Manufacturer: syz [ 153.090856][ T4273] usb 2-1: SerialNumber: syz [ 153.102751][ T13] usb 1-1: GET_CAPABILITIES returned 0 [ 153.111128][ T13] usbtmc 1-1:16.0: can't read capabilities [ 153.164544][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.182164][ T4273] usb 2-1: config 0 descriptor?? [ 153.452181][ T6288] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.464872][ T13] usb 1-1: USB disconnect, device number 10 [ 153.499888][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'. [ 153.534687][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.589'. [ 153.768527][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 154.232692][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.953623][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.989952][ T4228] usb 2-1: USB disconnect, device number 8 [ 155.136129][ T6312] device syzkaller0 entered promiscuous mode [ 155.162672][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.272837][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.357331][ T6315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.452553][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 155.615193][ T6320] device syzkaller0 entered promiscuous mode [ 155.776663][ T6327] net_ratelimit: 1 callbacks suppressed [ 155.776675][ T6327] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.799638][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 155.809267][ T13] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 155.865228][ T6327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 155.872608][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.892800][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 155.902690][ T13] usb 3-1: Product: syz [ 155.907432][ T13] usb 3-1: Manufacturer: syz [ 155.912102][ T13] usb 3-1: SerialNumber: syz [ 155.928728][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 155.951297][ T13] usb 3-1: config 0 descriptor?? [ 156.018749][ T13] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 156.156295][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 156.315418][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.215561][ T6359] device syzkaller0 entered promiscuous mode [ 157.352972][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.448339][ T6362] binder: BINDER_SET_CONTEXT_MGR already set [ 157.469570][ T6362] binder: 6361:6362 ioctl 4018620d 200000000040 returned -16 [ 157.993408][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.083629][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 158.151206][ T6365] device erspan0 entered promiscuous mode [ 158.183112][ T6365] device macvtap2 entered promiscuous mode [ 158.208407][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 158.223170][ T6366] device erspan0 left promiscuous mode [ 158.242790][ T6366] device macvtap2 left promiscuous mode [ 158.402654][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.413299][ T6368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.572530][ T6370] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.647192][ T6370] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.653339][ T13] gspca_ov534_9: reg_w failed -71 [ 158.942604][ T13] gspca_ov534_9: Unknown sensor 0000 [ 158.942675][ T13] ov534_9: probe of 3-1:0.0 failed with error -22 [ 158.986900][ T13] usb 3-1: USB disconnect, device number 4 [ 159.251151][ T6393] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 159.263133][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.614'. [ 159.298385][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.614'. [ 159.398911][ T6396] device syzkaller0 entered promiscuous mode [ 159.432992][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.520721][ T6412] binder: BINDER_SET_CONTEXT_MGR already set [ 159.530012][ T6412] binder: 6409:6412 ioctl 4018620d 200000000040 returned -16 [ 159.723894][ T6421] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 159.731986][ T6421] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 159.735543][ T6417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.743469][ T6423] device syzkaller0 entered promiscuous mode [ 159.817056][ T6417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.846125][ T6417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.935977][ T6432] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 159.977268][ T6433] bond0: (slave bond_slave_1): Releasing backup interface [ 159.994828][ T6432] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 160.068261][ T6435] device syzkaller0 entered promiscuous mode [ 160.291845][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 160.435580][ T6448] device syzkaller0 entered promiscuous mode [ 160.789853][ T6459] tipc: Enabling of bearer rejected, failed to enable media [ 160.873151][ T6460] device syzkaller0 entered promiscuous mode [ 161.034989][ T4230] net_ratelimit: 4 callbacks suppressed [ 161.035008][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.421029][ T6474] device syzkaller0 entered promiscuous mode [ 161.452042][ T6478] binder: BINDER_SET_CONTEXT_MGR already set [ 161.468691][ T6478] binder: 6477:6478 ioctl 4018620d 200000000040 returned -16 [ 161.492542][ T4230] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.610425][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.732520][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 161.763442][ T6483] device syzkaller0 entered promiscuous mode [ 161.855688][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.881867][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.899622][ T4230] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 161.930600][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.971034][ T4230] usb 1-1: config 0 descriptor?? [ 162.190440][ T6491] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.413038][ T6495] tipc: Enabling of bearer rejected, failed to enable media [ 162.447095][ T6495] device syzkaller0 entered promiscuous mode [ 162.558003][ T6502] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.578645][ T6503] udc-core: couldn't find an available UDC or it's busy [ 162.595928][ T6503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.612707][ T6502] __nla_validate_parse: 2 callbacks suppressed [ 162.612720][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'. [ 162.632897][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.675074][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.650'. [ 163.255417][ T4230] usb 1-1: USB disconnect, device number 11 [ 163.360647][ T6525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.382846][ T6525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.391730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.503116][ T6530] device syzkaller0 entered promiscuous mode [ 163.612560][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.673046][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.922553][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 164.066479][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.098525][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.130445][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 164.313272][ T4231] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 164.336940][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.367312][ T4231] usb 4-1: Product: syz [ 164.402248][ T4231] usb 4-1: Manufacturer: syz [ 164.426800][ T4231] usb 4-1: SerialNumber: syz [ 164.466370][ T4231] usb 4-1: config 0 descriptor?? [ 164.599615][ T6563] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 164.627539][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.667'. [ 164.702796][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.667'. [ 166.017953][ T6578] device syzkaller0 entered promiscuous mode [ 166.191570][ T4231] usb 4-1: USB disconnect, device number 5 [ 166.320707][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 166.793023][ T4228] net_ratelimit: 3 callbacks suppressed [ 166.793039][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.113634][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.413936][ T4228] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 167.433845][ T6603] device syzkaller0 entered promiscuous mode [ 167.546994][ T6612] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.595789][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.679'. [ 167.611708][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.679'. [ 167.803049][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.848135][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.863609][ T4228] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 167.876751][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.887542][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.915303][ T4228] usb 3-1: config 0 descriptor?? [ 168.437429][ T4228] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 168.459923][ T4228] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 168.508707][ T4228] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 168.654417][ T4228] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 168.739732][ T4228] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 168.753019][ T4230] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.803209][ T4228] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 168.878644][ T4228] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 168.927828][ T4228] usb 3-1: USB disconnect, device number 5 [ 168.971053][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.012572][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 169.142783][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.346244][ T6647] fido_id[6647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 169.363037][ T4230] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 169.365424][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 169.372156][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.372192][ T4230] usb 1-1: Product: syz [ 169.372209][ T4230] usb 1-1: Manufacturer: syz [ 169.372225][ T4230] usb 1-1: SerialNumber: syz [ 169.438120][ T6657] device syzkaller0 entered promiscuous mode [ 169.556946][ T4230] usb 1-1: config 0 descriptor?? [ 169.750658][ T6665] device syzkaller0 entered promiscuous mode [ 169.959660][ T13] usb 1-1: USB disconnect, device number 12 [ 170.042806][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.164086][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.295926][ T6681] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 170.321759][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 170.362561][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.695'. [ 171.012095][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 171.112875][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.199134][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 171.481842][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 171.644332][ T6720] device syzkaller0 entered promiscuous mode [ 171.840344][ T6722] IPVS: fo: FWM 3 0x00000003 - no destination available [ 172.140499][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 172.152857][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.500404][ T6734] device syzkaller0 entered promiscuous mode [ 172.597948][ T6740] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.009743][ T6744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.192715][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.237311][ T6755] mmap: syz.3.713 (6755): VmData 41656320 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 173.252258][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.532292][ T26] audit: type=1326 audit(1774883092.677:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f39350819 code=0x7fc00000 [ 173.561254][ T6765] xt_hashlimit: max too large, truncated to 1048576 [ 174.119238][ T6787] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.155930][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 174.174587][ T26] audit: type=1326 audit(1774883093.327:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f3934a597 code=0x7fc00000 [ 174.242900][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.282929][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'. [ 174.417164][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 174.632796][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.224327][ T6804] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.282753][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.769659][ T6808] device syzkaller0 entered promiscuous mode [ 176.252765][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.303900][ T6832] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 176.329131][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.734'. [ 176.369922][ T6832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.734'. [ 176.523299][ T6838] mmap: syz.4.737 (6838) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 176.532699][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 176.627665][ T6842] device syzkaller0 entered promiscuous mode [ 176.665668][ T13] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 176.682956][ T13] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 176.719673][ T13] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 176.740696][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.819981][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.838299][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.942790][ T13] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 176.962612][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.985624][ T13] usb 3-1: Product: syz [ 177.017872][ T13] usb 3-1: Manufacturer: syz [ 177.046437][ T13] usb 3-1: SerialNumber: syz [ 177.125016][ T13] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 177.152253][ T13] imon 3-1:155.0: unable to initialize intf0, err -19 [ 177.173984][ T6853] net_ratelimit: 2 callbacks suppressed [ 177.174001][ T6853] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.190327][ T13] imon:imon_probe: failed to initialize context! [ 177.217646][ T13] imon 3-1:155.0: unable to register, err -19 [ 177.353585][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.657268][ T6860] netlink: 'syz.0.742': attribute type 4 has an invalid length. [ 177.746628][ T6860] netlink: 17 bytes leftover after parsing attributes in process `syz.0.742'. [ 178.392686][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.612643][ T13] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 178.713610][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 178.872596][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 178.940634][ T6886] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.955476][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.748'. [ 178.981962][ T6886] netlink: 32 bytes leftover after parsing attributes in process `syz.3.748'. [ 179.048310][ T4230] usb 3-1: USB disconnect, device number 6 [ 179.092898][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.279650][ T6890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.323244][ T13] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 179.338599][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.350600][ T13] usb 1-1: Product: syz [ 179.360332][ T13] usb 1-1: Manufacturer: syz [ 179.367867][ T13] usb 1-1: SerialNumber: syz [ 179.403320][ T13] usb 1-1: config 0 descriptor?? [ 179.444469][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.527982][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.815175][ T6904] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.030156][ T6908] netlink: 'syz.2.753': attribute type 4 has an invalid length. [ 180.099956][ T6908] netlink: 17 bytes leftover after parsing attributes in process `syz.2.753'. [ 180.132536][ T4273] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.334146][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.353986][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.372893][ T6915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.412499][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 180.557324][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.763310][ T4273] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 180.789939][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.827130][ T4273] usb 4-1: Product: syz [ 180.847382][ T4273] usb 4-1: Manufacturer: syz [ 180.875833][ T4273] usb 4-1: SerialNumber: syz [ 180.883611][ T1347] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.922855][ T4273] usb 4-1: config 0 descriptor?? [ 181.252851][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.302097][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.333271][ T1347] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.365858][ T1347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.390785][ T4231] usb 4-1: USB disconnect, device number 6 [ 181.413070][ T1347] usb 3-1: config 0 descriptor?? [ 181.786678][ T6919] udc-core: couldn't find an available UDC or it's busy [ 181.808203][ T6919] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.822524][ T4230] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 181.932688][ T1347] usbhid 3-1:0.0: can't add hid device: -71 [ 181.938851][ T1347] usbhid: probe of 3-1:0.0 failed with error -71 [ 181.984773][ T6931] device macvlan0 entered promiscuous mode [ 182.001384][ T1347] usb 3-1: USB disconnect, device number 7 [ 182.108503][ T6931] device ipvlan1 entered promiscuous mode [ 182.183092][ T6931] device ipvlan1 left promiscuous mode [ 182.193711][ T6931] device macvlan0 left promiscuous mode [ 182.202675][ T4231] usb 1-1: USB disconnect, device number 13 [ 182.229214][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'. [ 182.247747][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.760'. [ 182.260643][ T4230] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 182.297956][ T4230] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 182.315425][ T4230] usb 2-1: config 8 has no interface number 0 [ 182.321909][ T4230] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.344477][ T4230] usb 2-1: config 8 interface 177 has no altsetting 0 [ 182.352076][ T4230] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 182.402640][ T1347] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.432317][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.499663][ T4263] net_ratelimit: 7 callbacks suppressed [ 182.499675][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.531543][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 182.544646][ T4230] ir_toy 2-1:8.177: required endpoints not found [ 182.597685][ T6947] netlink: 'syz.3.765': attribute type 4 has an invalid length. [ 182.656622][ T6947] netlink: 17 bytes leftover after parsing attributes in process `syz.3.765'. [ 182.666051][ T1347] usb 3-1: Using ep0 maxpacket: 16 [ 182.712715][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.802705][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.849127][ T1347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.859738][ T1347] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 182.873834][ T1347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.911952][ T1347] usb 3-1: config 0 descriptor?? [ 183.405574][ T1347] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 183.422231][ T1347] mcp2221 0003:04D8:00DD.0002: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 183.616350][ T6919] i2c i2c-1: unsupported multi-msg i2c transaction [ 183.677935][ T1347] usb 3-1: USB disconnect, device number 8 [ 183.762982][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.132831][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 184.153848][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 184.236325][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.303118][ T6985] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.333899][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 184.359067][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.773'. [ 184.562537][ T4230] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 184.789406][ T4232] usb 2-1: USB disconnect, device number 9 [ 184.802845][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.815370][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 184.888648][ T6995] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 184.902181][ T6995] netlink: 17 bytes leftover after parsing attributes in process `syz.1.778'. [ 184.956886][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.007565][ T6992] device bond_slave_0 entered promiscuous mode [ 185.014283][ T6992] device bond_slave_1 entered promiscuous mode [ 185.021698][ T6992] device vlan2 entered promiscuous mode [ 185.028280][ T6992] device bond0 entered promiscuous mode [ 185.104716][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 185.162849][ T4230] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 185.201146][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.221084][ T4230] usb 3-1: Product: syz [ 185.225707][ T4230] usb 3-1: Manufacturer: syz [ 185.230481][ T4230] usb 3-1: SerialNumber: syz [ 185.242864][ T4230] usb 3-1: config 0 descriptor?? [ 185.425406][ T7005] device syzkaller0 entered promiscuous mode [ 185.512748][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.531748][ T4228] usb 3-1: USB disconnect, device number 9 [ 185.741261][ T7011] device syzkaller0 entered promiscuous mode [ 185.764295][ T7013] device syzkaller0 entered promiscuous mode [ 185.845661][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.081914][ T7020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.206540][ T7025] netlink: 'syz.4.789': attribute type 4 has an invalid length. [ 186.223785][ T7025] netlink: 17 bytes leftover after parsing attributes in process `syz.4.789'. [ 186.355247][ T7029] binder: 7028:7029 ioctl 4018620d 0 returned -22 [ 186.754786][ T7042] device syzkaller0 entered promiscuous mode [ 186.873154][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.409998][ T7049] device syzkaller0 entered promiscuous mode [ 187.695768][ T7052] device syzkaller0 entered promiscuous mode [ 187.783105][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 187.912811][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.921210][ T4232] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.203143][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 188.362576][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.552709][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.592602][ T4232] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 188.601714][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.711925][ T4232] usb 2-1: Product: syz [ 188.734496][ T4232] usb 2-1: Manufacturer: syz [ 188.739337][ T4232] usb 2-1: SerialNumber: syz [ 188.776401][ T4232] usb 2-1: config 0 descriptor?? [ 188.794326][ T7070] netlink: 'syz.0.802': attribute type 4 has an invalid length. [ 188.832514][ T7070] netlink: 17 bytes leftover after parsing attributes in process `syz.0.802'. [ 188.878441][ T7069] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 188.953453][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.057903][ T4228] usb 2-1: USB disconnect, device number 10 [ 189.299081][ T7082] device syzkaller0 entered promiscuous mode [ 189.308318][ T7083] binder: 7080:7083 ioctl 4018620d 0 returned -22 [ 189.428208][ T7085] device syzkaller0 entered promiscuous mode [ 189.653496][ T7091] tipc: Started in network mode [ 189.670596][ T7091] tipc: Node identity dee903389818, cluster identity 4711 [ 189.691549][ T7091] tipc: Enabled bearer , priority 0 [ 189.761151][ T7091] device syzkaller0 entered promiscuous mode [ 189.786275][ T7093] device syzkaller0 entered promiscuous mode [ 189.822005][ T7091] tipc: Resetting bearer [ 189.892030][ T7090] tipc: Resetting bearer [ 189.942287][ T7090] tipc: Disabling bearer [ 190.001501][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.079244][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 190.150127][ T7104] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 190.202604][ T7104] netlink: 17 bytes leftover after parsing attributes in process `syz.1.814'. [ 190.405731][ T7116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.801177][ T7124] device syzkaller0 entered promiscuous mode [ 191.043234][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.168588][ T7130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.177114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.301570][ T7132] device syzkaller0 entered promiscuous mode [ 191.342700][ T4228] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.432804][ T1347] Bluetooth: hci0: command 0x0406 tx timeout [ 191.443909][ T1347] Bluetooth: hci4: command 0x0406 tx timeout [ 191.462528][ T1347] Bluetooth: hci2: command 0x0406 tx timeout [ 191.493032][ T1347] Bluetooth: hci3: command 0x0406 tx timeout [ 191.502654][ T1347] Bluetooth: hci1: command 0x0406 tx timeout [ 191.524316][ T7137] IPVS: fo: FWM 3 0x00000003 - no destination available [ 191.592898][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.622655][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 191.685982][ T7139] device syzkaller0 entered promiscuous mode [ 191.759448][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.993518][ T4228] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 192.001775][ T7143] binder: BINDER_SET_CONTEXT_MGR already set [ 192.029261][ T7143] binder: 7142:7143 ioctl 4018620d 200000000040 returned -16 [ 192.039141][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.080507][ T4228] usb 2-1: Product: syz [ 192.088374][ T7146] netlink: 'syz.3.827': attribute type 4 has an invalid length. [ 192.112544][ T4228] usb 2-1: Manufacturer: syz [ 192.112744][ T7146] netlink: 17 bytes leftover after parsing attributes in process `syz.3.827'. [ 192.117238][ T4228] usb 2-1: SerialNumber: syz [ 192.155753][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.168906][ T4228] usb 2-1: config 0 descriptor?? [ 192.426394][ T4228] usb 2-1: USB disconnect, device number 11 [ 192.514736][ T7152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.553118][ T7153] tipc: Enabled bearer , priority 0 [ 192.563951][ T7153] device syzkaller0 entered promiscuous mode [ 192.594716][ T7153] tipc: Resetting bearer [ 192.602053][ T7150] tipc: Resetting bearer [ 192.623855][ T7150] tipc: Disabling bearer [ 192.710604][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 192.899351][ T7164] device syzkaller0 entered promiscuous mode [ 193.192947][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.252943][ T7184] netlink: 'syz.4.838': attribute type 4 has an invalid length. [ 193.282522][ T7184] netlink: 17 bytes leftover after parsing attributes in process `syz.4.838'. [ 193.760724][ T7200] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.843582][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.018622][ T7205] binder: BINDER_SET_CONTEXT_MGR already set [ 194.065534][ T7205] binder: 7204:7205 ioctl 4018620d 200000000040 returned -16 [ 194.233044][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.486179][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.492691][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612545][ T4230] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.641751][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.872678][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 195.004290][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.015506][ T7212] tipc: Enabled bearer , priority 0 [ 195.064946][ T7212] device syzkaller0 entered promiscuous mode [ 195.107079][ T7212] tipc: Resetting bearer [ 195.153695][ T7211] tipc: Resetting bearer [ 195.222606][ T4230] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 195.273078][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.281773][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.322609][ T4230] usb 5-1: Product: syz [ 195.354934][ T4230] usb 5-1: Manufacturer: syz [ 195.381855][ T4230] usb 5-1: SerialNumber: syz [ 195.463652][ T4230] usb 5-1: config 0 descriptor?? [ 195.503505][ T7211] tipc: Disabling bearer [ 196.092081][ T7230] netlink: 'syz.1.851': attribute type 4 has an invalid length. [ 196.107653][ T7230] netlink: 17 bytes leftover after parsing attributes in process `syz.1.851'. [ 196.227486][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 196.258060][ T7233] device syzkaller0 entered promiscuous mode [ 196.316761][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.612574][ T7248] binder: BINDER_SET_CONTEXT_MGR already set [ 196.646960][ T7248] binder: 7246:7248 ioctl 4018620d 200000000040 returned -16 [ 196.780556][ T7258] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.804423][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.860'. [ 196.828106][ T7258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.860'. [ 197.052676][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.065009][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.113000][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.168649][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.332516][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 197.472618][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.549910][ T7272] device syzkaller0 entered promiscuous mode [ 197.702684][ T4232] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 197.720714][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.772529][ T4232] usb 2-1: Product: syz [ 197.787596][ T4232] usb 2-1: Manufacturer: syz [ 197.803273][ T4232] usb 2-1: SerialNumber: syz [ 197.830276][ T4232] usb 2-1: config 0 descriptor?? [ 197.959857][ T4232] usb 5-1: USB disconnect, device number 8 [ 198.095773][ T4273] usb 2-1: USB disconnect, device number 12 [ 198.157200][ T7284] infiniband syz1: set active [ 198.169510][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.228944][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.282018][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.353552][ T4228] net_ratelimit: 10 callbacks suppressed [ 198.353569][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.393708][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.531812][ T4266] gre0 speed is unknown, defaulting to 1000 [ 198.752748][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.391215][ T7312] device syzkaller0 entered promiscuous mode [ 199.436023][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 199.445122][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.594690][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.632443][ T4499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.634848][ T7317] device syzkaller0 entered promiscuous mode [ 199.648659][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.666099][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.039146][ T7333] netlink: 'syz.4.876': attribute type 4 has an invalid length. [ 200.069405][ T7333] netlink: 17 bytes leftover after parsing attributes in process `syz.4.876'. [ 200.157123][ T7343] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.166778][ T7344] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.723316][ T7366] device syzkaller0 entered promiscuous mode [ 201.027222][ T7380] device syzkaller0 entered promiscuous mode [ 201.171783][ T7386] device syzkaller0 entered promiscuous mode [ 201.304234][ T7388] device syzkaller0 entered promiscuous mode [ 201.411602][ T7396] netlink: 'syz.2.888': attribute type 4 has an invalid length. [ 201.426749][ T7396] netlink: 17 bytes leftover after parsing attributes in process `syz.2.888'. [ 201.532320][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'. [ 201.602734][ T7400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.889'. [ 201.658582][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 201.961686][ T7412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.970175][ T7412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.454683][ T7444] device syzkaller0 entered promiscuous mode [ 202.486491][ T7446] device syzkaller0 entered promiscuous mode [ 202.832114][ T7455] device syzkaller0 entered promiscuous mode [ 202.875589][ T7459] netlink: 'syz.4.902': attribute type 4 has an invalid length. [ 202.891146][ T7459] netlink: 17 bytes leftover after parsing attributes in process `syz.4.902'. [ 202.937824][ T7457] device syzkaller0 entered promiscuous mode [ 203.378100][ T7482] net_ratelimit: 7 callbacks suppressed [ 203.378119][ T7482] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.564683][ T7487] device syzkaller0 entered promiscuous mode [ 203.603060][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.752859][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.113993][ T7499] device syzkaller0 entered promiscuous mode [ 204.226773][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 204.296373][ T7511] netlink: 'syz.3.914': attribute type 4 has an invalid length. [ 204.316483][ T7511] netlink: 17 bytes leftover after parsing attributes in process `syz.3.914'. [ 204.509334][ T7518] device syzkaller0 entered promiscuous mode [ 204.570226][ T7522] device syzkaller0 entered promiscuous mode [ 204.711505][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.723594][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.733137][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.796781][ T7520] device syzkaller0 entered promiscuous mode [ 205.154793][ T7537] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 205.332297][ T7539] device syzkaller0 entered promiscuous mode [ 205.353085][ T4398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.413257][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.422157][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.732857][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.742239][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.013420][ T7576] netlink: 'syz.0.927': attribute type 4 has an invalid length. [ 206.069349][ T7576] netlink: 17 bytes leftover after parsing attributes in process `syz.0.927'. [ 206.289406][ T7581] device syzkaller0 entered promiscuous mode [ 206.321770][ T7583] device syzkaller0 entered promiscuous mode [ 206.387481][ T7585] device syzkaller0 entered promiscuous mode [ 206.616654][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 206.628565][ T7588] device syzkaller0 entered promiscuous mode [ 206.928654][ T7602] device syzkaller0 entered promiscuous mode [ 207.257980][ T7615] netlink: 'syz.0.939': attribute type 4 has an invalid length. [ 207.270699][ T7615] netlink: 17 bytes leftover after parsing attributes in process `syz.0.939'. [ 207.466685][ T7621] device syzkaller0 entered promiscuous mode [ 207.497914][ T7623] device syzkaller0 entered promiscuous mode [ 207.674272][ T7629] device syzkaller0 entered promiscuous mode [ 207.841821][ T7634] device syzkaller0 entered promiscuous mode [ 207.857431][ T7632] device syzkaller0 entered promiscuous mode [ 208.197334][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.947'. [ 208.232334][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.947'. [ 208.433596][ T7655] device syzkaller0 entered promiscuous mode [ 208.712868][ T4266] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.762354][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 208.872965][ T1347] net_ratelimit: 10 callbacks suppressed [ 208.872987][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.965205][ T4266] usb 5-1: Using ep0 maxpacket: 16 [ 209.132722][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.332696][ T4266] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 209.355791][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.390915][ T4266] usb 5-1: Product: syz [ 209.409587][ T4266] usb 5-1: Manufacturer: syz [ 209.428782][ T4266] usb 5-1: SerialNumber: syz [ 209.463592][ T4266] usb 5-1: config 0 descriptor?? [ 209.691389][ T7670] device syzkaller0 entered promiscuous mode [ 209.806657][ T1110] usb 5-1: USB disconnect, device number 9 [ 209.835019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.996340][ T7674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.005549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.033323][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.135360][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.143943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.154745][ T7672] device syzkaller0 entered promiscuous mode [ 210.328699][ T7678] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 210.362079][ T7678] device syzkaller0 entered promiscuous mode [ 210.484361][ T7681] device syzkaller0 entered promiscuous mode [ 210.610006][ T7690] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 210.807222][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.862174][ T7698] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 210.994795][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.961'. [ 211.009694][ T7698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.961'. [ 211.154041][ T7714] device syzkaller0 entered promiscuous mode [ 211.444974][ T7724] device syzkaller0 entered promiscuous mode [ 211.595667][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.617230][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 211.726262][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.302644][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.374607][ T7743] device syzkaller0 entered promiscuous mode [ 212.592501][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 212.712714][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.833859][ T7752] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 212.867963][ T7752] device syzkaller0 entered promiscuous mode [ 212.943212][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 212.962557][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.002612][ T4230] usb 3-1: Product: syz [ 213.022663][ T4230] usb 3-1: Manufacturer: syz [ 213.032818][ T4230] usb 3-1: SerialNumber: syz [ 213.062843][ T4230] usb 3-1: config 0 descriptor?? [ 213.180648][ T7754] device syzkaller0 entered promiscuous mode [ 213.407799][ T4263] usb 3-1: USB disconnect, device number 10 [ 213.443125][ T7773] device syzkaller0 entered promiscuous mode [ 213.564628][ T7777] device syzkaller0 entered promiscuous mode [ 213.717704][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.980'. [ 213.727199][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.980'. [ 213.809296][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 214.098579][ T7793] net_ratelimit: 7 callbacks suppressed [ 214.098597][ T7793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.112874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.185783][ T7797] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.320686][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.372192][ T7800] device syzkaller0 entered promiscuous mode [ 214.678403][ T7806] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 214.701193][ T7806] device syzkaller0 entered promiscuous mode [ 214.776512][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.816863][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.955388][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.990825][ T4499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.000636][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.013326][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.031709][ T7814] device syzkaller0 entered promiscuous mode [ 215.032142][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.352945][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.738649][ T7833] device syzkaller0 entered promiscuous mode [ 216.082209][ T7836] device syzkaller0 entered promiscuous mode [ 216.618275][ T7848] device syzkaller0 entered promiscuous mode [ 216.808534][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 216.871636][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.998'. [ 216.897007][ T7854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.998'. [ 216.930800][ T7865] device syzkaller0 entered promiscuous mode [ 217.072500][ T4230] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 217.230595][ T7876] device syzkaller0 entered promiscuous mode [ 217.348495][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 217.492722][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.510339][ T7889] device syzkaller0 entered promiscuous mode [ 217.692795][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 217.729052][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.753452][ T4230] usb 3-1: Product: syz [ 217.772667][ T4230] usb 3-1: Manufacturer: syz [ 217.795982][ T4230] usb 3-1: SerialNumber: syz [ 217.838800][ T4230] usb 3-1: config 0 descriptor?? [ 217.910638][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.945284][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.965396][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.082268][ T7906] device syzkaller0 entered promiscuous mode [ 218.179306][ T1110] usb 3-1: USB disconnect, device number 11 [ 218.191046][ T7911] tipc: Started in network mode [ 218.220098][ T7911] tipc: Node identity ae1ea4179865, cluster identity 4711 [ 218.253524][ T7911] tipc: Enabled bearer , priority 0 [ 218.266551][ T7912] tipc: Resetting bearer [ 218.283747][ T7910] tipc: Disabling bearer [ 218.550374][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 219.185593][ T7936] device syzkaller0 entered promiscuous mode [ 219.513949][ T1110] net_ratelimit: 9 callbacks suppressed [ 219.513965][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.661480][ T7941] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 219.689716][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 219.739802][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1019'. [ 220.196851][ T7955] device syzkaller0 entered promiscuous mode [ 220.220707][ T7959] tipc: Started in network mode [ 220.237262][ T7959] tipc: Node identity 96cfa354b0e5, cluster identity 4711 [ 220.277635][ T7959] tipc: Enabled bearer , priority 0 [ 220.395207][ T7959] tipc: Resetting bearer [ 220.441175][ T7957] tipc: Disabling bearer [ 220.557746][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.602819][ T7967] device syzkaller0 entered promiscuous mode [ 220.723405][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.744936][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.754715][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.784509][ T7973] device syzkaller0 entered promiscuous mode [ 220.951380][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 221.139913][ T7996] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.161364][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 221.188765][ T7996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1032'. [ 221.193517][ T4231] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.472516][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 221.594310][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.603095][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.690160][ T8008] IPVS: fo: FWM 3 0x00000003 - no destination available [ 221.832861][ T4231] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 221.848099][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.912676][ T4231] usb 2-1: Product: syz [ 221.924083][ T4231] usb 2-1: Manufacturer: syz [ 221.935774][ T4231] usb 2-1: SerialNumber: syz [ 221.970902][ T4231] usb 2-1: config 0 descriptor?? [ 221.974539][ T8020] tipc: Enabled bearer , priority 0 [ 222.201240][ T8018] device syzkaller0 entered promiscuous mode [ 222.279821][ T4231] usb 2-1: USB disconnect, device number 13 [ 222.429372][ T8023] tipc: Disabling bearer [ 222.631576][ T8027] device syzkaller0 entered promiscuous mode [ 222.638090][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.004809][ T8033] device syzkaller0 entered promiscuous mode [ 223.028109][ T8034] device syzkaller0 entered promiscuous mode [ 223.073696][ T8038] device syzkaller0 entered promiscuous mode [ 223.308014][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 223.525249][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 223.645369][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1049'. [ 223.915320][ T8063] tipc: Enabled bearer , priority 0 [ 223.951187][ T8063] device syzkaller0 entered promiscuous mode [ 223.998453][ T8062] tipc: Resetting bearer [ 224.071600][ T8062] tipc: Disabling bearer [ 224.246837][ T8066] device syzkaller0 entered promiscuous mode [ 224.487537][ T8075] device syzkaller0 entered promiscuous mode [ 224.553172][ T4230] net_ratelimit: 7 callbacks suppressed [ 224.553194][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.652522][ T4231] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 224.712701][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.845683][ T8085] device syzkaller0 entered promiscuous mode [ 224.865964][ T8086] device syzkaller0 entered promiscuous mode [ 224.884554][ T8087] device syzkaller0 entered promiscuous mode [ 224.922546][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 225.062759][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.231624][ T8102] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.269451][ T8104] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.278342][ T4231] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 225.301620][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.330563][ T4231] usb 3-1: Product: syz [ 225.337645][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 225.347742][ T4231] usb 3-1: Manufacturer: syz [ 225.361394][ T4231] usb 3-1: SerialNumber: syz [ 225.379651][ T4231] usb 3-1: config 0 descriptor?? [ 225.412992][ T8093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1062'. [ 225.497712][ T8109] tipc: Enabled bearer , priority 0 [ 225.518271][ T8109] device syzkaller0 entered promiscuous mode [ 225.562226][ T8108] tipc: Resetting bearer [ 225.581890][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'. [ 225.646472][ T8108] tipc: Disabling bearer [ 225.699042][ T4231] usb 3-1: USB disconnect, device number 12 [ 225.752639][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.056076][ T8116] device syzkaller0 entered promiscuous mode [ 226.555196][ T8121] device syzkaller0 entered promiscuous mode [ 226.657725][ T8131] device syzkaller0 entered promiscuous mode [ 226.671590][ T8130] device syzkaller0 entered promiscuous mode [ 226.689739][ T8134] device syzkaller0 entered promiscuous mode [ 226.808952][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.942186][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.960619][ T8136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.969264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.030014][ T8146] tipc: Enabled bearer , priority 0 [ 227.072191][ T8148] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.081087][ T8146] device syzkaller0 entered promiscuous mode [ 227.125039][ T8139] tipc: Resetting bearer [ 227.199184][ T8139] tipc: Disabling bearer [ 227.221846][ T8149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1078'. [ 227.244206][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1078'. [ 227.458775][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 227.494110][ T8157] device syzkaller0 entered promiscuous mode [ 227.567033][ T1110] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 227.863916][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 227.984233][ T8173] device syzkaller0 entered promiscuous mode [ 227.995386][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.183036][ T1110] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 228.192337][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.223772][ T1110] usb 3-1: Product: syz [ 228.231653][ T1110] usb 3-1: Manufacturer: syz [ 228.280177][ T1110] usb 3-1: SerialNumber: syz [ 228.332652][ T1110] usb 3-1: config 0 descriptor?? [ 228.372345][ T8176] device syzkaller0 entered promiscuous mode [ 228.424532][ T8179] device syzkaller0 entered promiscuous mode [ 228.583859][ T8182] device syzkaller0 entered promiscuous mode [ 228.643891][ T1110] usb 3-1: USB disconnect, device number 13 [ 228.714348][ T8186] tipc: Enabled bearer , priority 0 [ 228.728665][ T8186] device syzkaller0 entered promiscuous mode [ 228.758746][ T8186] tipc: Resetting bearer [ 228.790764][ T8185] tipc: Resetting bearer [ 228.861607][ T8185] tipc: Disabling bearer [ 229.182059][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1093'. [ 229.211855][ T8202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1093'. [ 229.708583][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 229.730683][ T8210] device syzkaller0 entered promiscuous mode [ 229.912765][ T1110] net_ratelimit: 4 callbacks suppressed [ 229.912783][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.992786][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.059847][ T8228] device syzkaller0 entered promiscuous mode [ 230.192149][ T8230] device syzkaller0 entered promiscuous mode [ 230.320272][ T8236] tipc: Enabled bearer , priority 0 [ 230.330008][ T8236] device syzkaller0 entered promiscuous mode [ 230.374028][ T8236] tipc: Resetting bearer [ 230.419091][ T8235] tipc: Resetting bearer [ 230.471173][ T8235] tipc: Disabling bearer [ 230.734497][ T8242] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.962752][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.115613][ T8250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'. [ 231.134322][ T8250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1107'. [ 231.477135][ T8260] device syzkaller0 entered promiscuous mode [ 231.857464][ T8267] device syzkaller0 entered promiscuous mode [ 232.012793][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.126694][ T8273] device syzkaller0 entered promiscuous mode [ 232.294171][ T8278] device syzkaller0 entered promiscuous mode [ 232.348962][ T8282] tipc: Enabled bearer , priority 0 [ 232.414911][ T8281] device syzkaller0 entered promiscuous mode [ 232.433164][ T8281] tipc: Resetting bearer [ 232.447831][ T8280] tipc: Resetting bearer [ 232.473011][ T8280] tipc: Disabling bearer [ 232.489905][ T8285] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 232.656119][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 232.712515][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.962468][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 233.032774][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.041208][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.063863][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1121'. [ 233.087766][ T8304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1121'. [ 233.097625][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.292626][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 233.305017][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.318050][ T4230] usb 3-1: Product: syz [ 233.322587][ T4230] usb 3-1: Manufacturer: syz [ 233.329468][ T4230] usb 3-1: SerialNumber: syz [ 233.338660][ T4230] usb 3-1: config 0 descriptor?? [ 233.401650][ T8309] device syzkaller0 entered promiscuous mode [ 233.657967][ T8313] device syzkaller0 entered promiscuous mode [ 233.812111][ T4230] usb 3-1: USB disconnect, device number 14 [ 233.954118][ T8321] device syzkaller0 entered promiscuous mode [ 234.071968][ T8325] device syzkaller0 entered promiscuous mode [ 234.080047][ T8327] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 234.087386][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.329688][ T8332] tipc: Enabled bearer , priority 0 [ 234.349441][ T8332] device syzkaller0 entered promiscuous mode [ 234.415312][ T8332] tipc: Resetting bearer [ 234.476515][ T8331] tipc: Resetting bearer [ 234.510389][ T8331] tipc: Disabling bearer [ 234.787004][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 235.123167][ T4231] net_ratelimit: 1 callbacks suppressed [ 235.123186][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.618641][ T8352] device syzkaller0 entered promiscuous mode [ 236.015355][ T8358] device syzkaller0 entered promiscuous mode [ 236.073382][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.152904][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.383545][ T8369] device syzkaller0 entered promiscuous mode [ 236.442505][ T4232] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.453328][ T8374] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.582873][ T8376] device syzkaller0 entered promiscuous mode [ 236.693059][ T8378] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.703272][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 236.822846][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.943251][ T8381] tipc: Enabled bearer , priority 0 [ 236.963423][ T8381] device syzkaller0 entered promiscuous mode [ 236.995753][ T4232] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 237.016501][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.026293][ T8381] tipc: Resetting bearer [ 237.045181][ T4232] usb 3-1: Product: syz [ 237.058417][ T4232] usb 3-1: Manufacturer: syz [ 237.063519][ T8379] tipc: Resetting bearer [ 237.076278][ T4232] usb 3-1: SerialNumber: syz [ 237.091467][ T8379] tipc: Disabling bearer [ 237.099192][ T8382] IPVS: fo: FWM 3 0x00000003 - no destination available [ 237.124368][ T4232] usb 3-1: config 0 descriptor?? [ 237.196848][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.278756][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1148'. [ 237.349411][ T8389] device syzkaller0 entered promiscuous mode [ 237.369170][ T8386] device syzkaller0 entered promiscuous mode [ 237.507834][ T4263] usb 3-1: USB disconnect, device number 15 [ 237.671759][ T8401] device syzkaller0 entered promiscuous mode [ 238.085398][ T8413] device syzkaller0 entered promiscuous mode [ 238.222978][ T8417] device syzkaller0 entered promiscuous mode [ 238.232680][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.307465][ T8419] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 238.834101][ T8425] tipc: Enabled bearer , priority 0 [ 238.882453][ T8425] device syzkaller0 entered promiscuous mode [ 238.971540][ T8425] tipc: Resetting bearer [ 238.998024][ T8432] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 239.027793][ T8421] tipc: Resetting bearer [ 239.073312][ T8421] tipc: Disabling bearer [ 239.804093][ T8447] device syzkaller0 entered promiscuous mode [ 239.895672][ T4263] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.182543][ T4263] usb 3-1: Using ep0 maxpacket: 16 [ 240.211315][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 240.312729][ T4228] net_ratelimit: 4 callbacks suppressed [ 240.312750][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.342761][ T4263] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.373072][ T8452] device syzkaller0 entered promiscuous mode [ 240.552912][ T4263] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 240.576488][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.631094][ T4263] usb 3-1: Product: syz [ 240.642349][ T4263] usb 3-1: Manufacturer: syz [ 240.647266][ T4263] usb 3-1: SerialNumber: syz [ 240.673726][ T4263] usb 3-1: config 0 descriptor?? [ 240.809495][ T8459] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.153249][ T8461] device syzkaller0 entered promiscuous mode [ 241.167777][ T4263] usb 3-1: USB disconnect, device number 16 [ 241.296521][ T8467] device syzkaller0 entered promiscuous mode [ 241.322882][ T8465] device syzkaller0 entered promiscuous mode [ 241.352639][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.595636][ T8474] tipc: Enabled bearer , priority 0 [ 241.640116][ T8474] device syzkaller0 entered promiscuous mode [ 241.720090][ T8474] tipc: Resetting bearer [ 241.770248][ T8473] tipc: Resetting bearer [ 241.798243][ T8481] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.831568][ T8473] tipc: Disabling bearer [ 241.944316][ T8483] device syzkaller0 entered promiscuous mode [ 242.062521][ T8490] device syzkaller0 entered promiscuous mode [ 242.162740][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.345199][ T8501] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.392757][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.695736][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 242.848819][ T8508] device syzkaller0 entered promiscuous mode [ 243.434039][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.511459][ T8516] device syzkaller0 entered promiscuous mode [ 243.784703][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.906393][ T8518] device syzkaller0 entered promiscuous mode [ 244.257565][ T8527] tipc: Enabled bearer , priority 0 [ 244.279281][ T8527] device syzkaller0 entered promiscuous mode [ 244.411422][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.420066][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.422983][ T1110] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 244.482732][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.648379][ T8531] tipc: Resetting bearer [ 244.674114][ T8526] tipc: Resetting bearer [ 244.702566][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 244.716719][ T8526] tipc: Disabling bearer [ 244.828415][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'. [ 244.837853][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.868409][ T8543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1188'. [ 245.000876][ T8550] device syzkaller0 entered promiscuous mode [ 245.015010][ T1110] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 245.041189][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.075951][ T1110] usb 3-1: Product: syz [ 245.090538][ T1110] usb 3-1: Manufacturer: syz [ 245.101320][ T1110] usb 3-1: SerialNumber: syz [ 245.128800][ T1110] usb 3-1: config 0 descriptor?? [ 245.219454][ T8552] device syzkaller0 entered promiscuous mode [ 245.303398][ T8554] device syzkaller0 entered promiscuous mode [ 245.513342][ T1110] net_ratelimit: 6 callbacks suppressed [ 245.513358][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.569899][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 245.637768][ T8564] device syzkaller0 entered promiscuous mode [ 246.315523][ T8578] device syzkaller0 entered promiscuous mode [ 246.567467][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.638251][ T8581] tipc: Enabled bearer , priority 0 [ 246.648460][ T8581] device syzkaller0 entered promiscuous mode [ 246.699414][ T8581] tipc: Resetting bearer [ 246.727781][ T8580] tipc: Resetting bearer [ 246.838953][ T8580] tipc: Disabling bearer [ 247.015570][ T4263] usb 3-1: USB disconnect, device number 17 [ 247.204880][ T8589] device syzkaller0 entered promiscuous mode [ 247.248185][ T8592] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.542116][ T8596] device syzkaller0 entered promiscuous mode [ 247.594435][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.734775][ T8600] device syzkaller0 entered promiscuous mode [ 247.900495][ T8602] device syzkaller0 entered promiscuous mode [ 248.064982][ T8604] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.103219][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 248.148081][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1206'. [ 248.203011][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'. [ 248.233472][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.643161][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.692349][ T8617] device syzkaller0 entered promiscuous mode [ 248.980275][ T8623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.006946][ T8623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.019266][ T8623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.069204][ T8625] tipc: Enabled bearer , priority 0 [ 249.120730][ T8627] device syzkaller0 entered promiscuous mode [ 249.206424][ T8626] device syzkaller0 entered promiscuous mode [ 249.282130][ T8625] tipc: Resetting bearer [ 249.318822][ T8622] tipc: Resetting bearer [ 249.349968][ T8622] tipc: Disabling bearer [ 249.411553][ T8639] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 249.562596][ T4231] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.611586][ T8643] device syzkaller0 entered promiscuous mode [ 249.675925][ T8646] device syzkaller0 entered promiscuous mode [ 249.682615][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.832612][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 249.946833][ T8651] device syzkaller0 entered promiscuous mode [ 249.953309][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.142723][ T4231] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 250.175837][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.201827][ T4231] usb 3-1: Product: syz [ 250.223779][ T4231] usb 3-1: Manufacturer: syz [ 250.242764][ T4231] usb 3-1: SerialNumber: syz [ 250.265016][ T4231] usb 3-1: config 0 descriptor?? [ 250.307618][ T8660] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.393188][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 250.411221][ T8660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1223'. [ 250.490794][ T8662] device syzkaller0 entered promiscuous mode [ 250.722686][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.763453][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 251.272616][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.585412][ T8680] tipc: Enabled bearer , priority 0 [ 251.594824][ T8680] device syzkaller0 entered promiscuous mode [ 251.646147][ T8680] tipc: Resetting bearer [ 251.684865][ T8679] tipc: Resetting bearer [ 251.723286][ T8679] tipc: Disabling bearer [ 251.752829][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.830009][ T8684] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 251.978914][ T8688] device syzkaller0 entered promiscuous mode [ 252.280937][ T4231] usb 3-1: USB disconnect, device number 18 [ 252.334173][ T8690] device syzkaller0 entered promiscuous mode [ 252.356425][ T8692] device syzkaller0 entered promiscuous mode [ 252.523456][ T8695] device syzkaller0 entered promiscuous mode [ 252.792783][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.839369][ T8703] device syzkaller0 entered promiscuous mode [ 252.847694][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 252.914030][ T8710] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.062145][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.079635][ T8708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.119079][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1237'. [ 253.149005][ T8710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1237'. [ 253.353269][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.832614][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.848238][ T8727] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.857158][ T8721] tipc: Enabled bearer , priority 0 [ 253.897509][ T8721] device syzkaller0 entered promiscuous mode [ 253.945651][ T8729] device syzkaller0 entered promiscuous mode [ 253.978047][ T8721] tipc: Resetting bearer [ 254.084965][ T8720] tipc: Resetting bearer [ 254.107506][ T8720] tipc: Disabling bearer [ 254.316420][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.350815][ T8736] device syzkaller0 entered promiscuous mode [ 254.702498][ T4266] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 254.824842][ T8752] device syzkaller0 entered promiscuous mode [ 254.928817][ T8757] device syzkaller0 entered promiscuous mode [ 254.962556][ T4266] usb 5-1: Using ep0 maxpacket: 16 [ 255.102876][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.151447][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 255.174784][ T8761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1251'. [ 255.352749][ T4266] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 255.373232][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.405458][ T4266] usb 5-1: Product: syz [ 255.414846][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 255.426384][ T4266] usb 5-1: Manufacturer: syz [ 255.439119][ T4266] usb 5-1: SerialNumber: syz [ 255.479014][ T4266] usb 5-1: config 0 descriptor?? [ 255.914388][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920780][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.928961][ T4231] net_ratelimit: 2 callbacks suppressed [ 255.928977][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.115601][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.124147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.185005][ T8772] device syzkaller0 entered promiscuous mode [ 256.483405][ T8777] tipc: Enabled bearer , priority 0 [ 256.498871][ T8777] device syzkaller0 entered promiscuous mode [ 256.530641][ T8779] device syzkaller0 entered promiscuous mode [ 256.558736][ T8777] tipc: Resetting bearer [ 256.566631][ T8775] tipc: Resetting bearer [ 256.591430][ T8775] tipc: Disabling bearer [ 256.905156][ T8789] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.951614][ T8788] device syzkaller0 entered promiscuous mode [ 256.953230][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.282324][ T8793] device syzkaller0 entered promiscuous mode [ 257.309485][ T8794] device syzkaller0 entered promiscuous mode [ 257.321418][ T4266] usb 5-1: USB disconnect, device number 10 [ 257.354159][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.525495][ T8801] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.563751][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'. [ 257.606883][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1263'. [ 257.630761][ T8805] device syzkaller0 entered promiscuous mode [ 257.697510][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.719062][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.727603][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.992715][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.004779][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 258.468674][ T8819] tipc: Enabled bearer , priority 0 [ 258.501094][ T8819] device syzkaller0 entered promiscuous mode [ 258.587653][ T8819] tipc: Resetting bearer [ 258.610591][ T8818] tipc: Resetting bearer [ 258.654484][ T8818] tipc: Disabling bearer [ 258.872726][ T8821] device syzkaller0 entered promiscuous mode [ 259.032653][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.351690][ T8827] device syzkaller0 entered promiscuous mode [ 259.419684][ T8831] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.612472][ T1110] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.635523][ T8833] device syzkaller0 entered promiscuous mode [ 259.779172][ T8842] device syzkaller0 entered promiscuous mode [ 259.875802][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 259.969100][ T8847] device syzkaller0 entered promiscuous mode [ 259.992819][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.090022][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1279'. [ 260.102637][ T8855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1279'. [ 260.172757][ T1110] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 260.181902][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.229598][ T1110] usb 1-1: Product: syz [ 260.234440][ T1110] usb 1-1: Manufacturer: syz [ 260.239296][ T1110] usb 1-1: SerialNumber: syz [ 260.269612][ T8859] tipc: Enabled bearer , priority 0 [ 260.279722][ T8859] device syzkaller0 entered promiscuous mode [ 260.315072][ T8859] tipc: Resetting bearer [ 260.327444][ T8858] tipc: Resetting bearer [ 260.344512][ T1110] usb 1-1: config 0 descriptor?? [ 260.358263][ T8858] tipc: Disabling bearer [ 260.384429][ T8861] device syzkaller0 entered promiscuous mode [ 260.670880][ T1347] usb 1-1: USB disconnect, device number 14 [ 260.736133][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.774971][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 260.788268][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.819060][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.044628][ T8874] device syzkaller0 entered promiscuous mode [ 261.112722][ T1110] net_ratelimit: 3 callbacks suppressed [ 261.112741][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.357891][ T8879] device syzkaller0 entered promiscuous mode [ 261.414400][ T8881] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 261.841447][ T8887] device syzkaller0 entered promiscuous mode [ 261.888164][ T8889] device syzkaller0 entered promiscuous mode [ 262.068327][ T8886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.077043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.153667][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.412021][ T8897] tipc: Enabled bearer , priority 0 [ 262.459469][ T8897] device syzkaller0 entered promiscuous mode [ 262.475371][ T8903] device syzkaller0 entered promiscuous mode [ 262.519369][ T8897] tipc: Resetting bearer [ 262.593887][ T8896] tipc: Resetting bearer [ 262.623209][ T8896] tipc: Disabling bearer [ 262.833528][ T8914] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.861870][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1297'. [ 262.885933][ T8914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1297'. [ 262.952828][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.994780][ T8913] device syzkaller0 entered promiscuous mode [ 263.015005][ T8918] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.138558][ T8911] ================================================================== [ 263.147132][ T8911] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 263.154976][ T8911] Read of size 1 at addr ffff8880232a5032 by task syz.2.1297/8911 [ 263.162877][ T8911] [ 263.165231][ T8911] CPU: 0 PID: 8911 Comm: syz.2.1297 Not tainted syzkaller #0 [ 263.172696][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.183037][ T8911] Call Trace: [ 263.186369][ T8911] [ 263.189318][ T8911] dump_stack_lvl+0x188/0x250 [ 263.193526][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.194009][ T8911] ? show_regs_print_info+0x20/0x20 [ 263.207339][ T8911] ? _printk+0xda/0x130 [ 263.211519][ T8911] ? rose_transmit_link+0x5b0/0x730 [ 263.216732][ T8911] ? load_image+0x400/0x400 [ 263.221249][ T8911] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 263.226723][ T8911] print_address_description+0x60/0x2d0 [ 263.232315][ T8911] ? rose_transmit_link+0x5b0/0x730 [ 263.237632][ T8911] kasan_report+0xdf/0x130 [ 263.242087][ T8911] ? rose_transmit_link+0x5b0/0x730 [ 263.247312][ T8911] rose_transmit_link+0x5b0/0x730 [ 263.252345][ T8911] ? skb_put+0x117/0x210 [ 263.256638][ T8911] rose_write_internal+0x680/0x1e90 [ 263.261852][ T8911] ? debug_object_assert_init+0x33/0x2e0 [ 263.267490][ T8911] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 263.273398][ T8911] ? rose_validate_nr+0x120/0x120 [ 263.278460][ T8911] ? __timer_delete+0x6c/0x220 [ 263.283340][ T8911] rose_release+0x22a/0x4e0 [ 263.287881][ T8911] sock_close+0xd5/0x240 [ 263.292430][ T8911] ? sock_mmap+0x90/0x90 [ 263.296808][ T8911] __fput+0x234/0x930 [ 263.300848][ T8911] task_work_run+0x125/0x1a0 [ 263.305574][ T8911] do_exit+0x626/0x20c0 [ 263.309791][ T8911] ? put_task_struct+0x80/0x80 [ 263.314574][ T8911] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 263.320689][ T8911] ? lock_chain_count+0x20/0x20 [ 263.325568][ T8911] ? _raw_spin_lock_irq+0xb7/0xf0 [ 263.331244][ T8911] do_group_exit+0x12e/0x300 [ 263.335884][ T8911] ? lockdep_hardirqs_on+0x94/0x140 [ 263.341253][ T8911] get_signal+0x6ca/0x12c0 [ 263.345714][ T8911] arch_do_signal_or_restart+0xe7/0x12c0 [ 263.351460][ T8911] ? rose_bind+0xa00/0xa00 [ 263.355989][ T8911] ? aa_af_perm+0x300/0x340 [ 263.360638][ T8911] ? init_wait_entry+0xd0/0xd0 [ 263.365429][ T8911] ? get_sigframe_size+0x10/0x10 [ 263.370516][ T8911] ? __sys_connect+0x278/0x450 [ 263.375561][ T8911] ? exit_to_user_mode_loop+0x3b/0x130 [ 263.381129][ T8911] exit_to_user_mode_loop+0x9e/0x130 [ 263.386431][ T8911] exit_to_user_mode_prepare+0xee/0x180 [ 263.391997][ T8911] syscall_exit_to_user_mode+0x16/0x40 [ 263.397700][ T8911] do_syscall_64+0x58/0xa0 [ 263.402458][ T8911] ? clear_bhb_loop+0x30/0x80 [ 263.407171][ T8911] ? clear_bhb_loop+0x30/0x80 [ 263.411885][ T8911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.417827][ T8911] RIP: 0033:0x7ff0122a5819 [ 263.422259][ T8911] Code: Unable to access opcode bytes at RIP 0x7ff0122a57ef. [ 263.430055][ T8911] RSP: 002b:00007ff0104de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 263.438533][ T8911] RAX: fffffffffffffe00 RBX: 00007ff01251f090 RCX: 00007ff0122a5819 [ 263.446664][ T8911] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 000000000000000b [ 263.454670][ T8911] RBP: 00007ff01233bc91 R08: 0000000000000000 R09: 0000000000000000 [ 263.462679][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.470767][ T8911] R13: 00007ff01251f128 R14: 00007ff01251f090 R15: 00007ffedab0bc38 [ 263.478867][ T8911] [ 263.481893][ T8911] [ 263.484215][ T8911] Allocated by task 4326: [ 263.488573][ T8911] __kasan_kmalloc+0xb5/0xf0 [ 263.493177][ T8911] rose_add_node+0x227/0xdb0 [ 263.497858][ T8911] rose_rt_ioctl+0xa2b/0xe70 [ 263.502464][ T8911] rose_ioctl+0x2a7/0x7d0 [ 263.506989][ T8911] sock_do_ioctl+0xfb/0x320 [ 263.511585][ T8911] sock_ioctl+0x4d2/0x710 [ 263.516458][ T8911] __se_sys_ioctl+0xfa/0x170 [ 263.521164][ T8911] do_syscall_64+0x4c/0xa0 [ 263.525698][ T8911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.531609][ T8911] [ 263.534028][ T8911] Freed by task 8918: [ 263.538142][ T8911] kasan_set_track+0x4b/0x70 [ 263.542894][ T8911] kasan_set_free_info+0x1f/0x40 [ 263.547850][ T8911] ____kasan_slab_free+0xd5/0x110 [ 263.552921][ T8911] slab_free_freelist_hook+0xea/0x170 [ 263.558300][ T8911] kfree+0xef/0x2a0 [ 263.562508][ T8911] rose_rt_device_down+0x4e2/0x530 [ 263.567656][ T8911] rose_device_event+0x606/0x6c0 [ 263.572600][ T8911] raw_notifier_call_chain+0xcb/0x160 [ 263.578002][ T8911] __dev_notify_flags+0x158/0x300 [ 263.583203][ T8911] dev_change_flags+0xe3/0x1a0 [ 263.587968][ T8911] dev_ifsioc+0x130/0xd50 [ 263.592556][ T8911] dev_ioctl+0x545/0xe30 [ 263.596915][ T8911] sock_do_ioctl+0x245/0x320 [ 263.601611][ T8911] sock_ioctl+0x4d2/0x710 [ 263.606083][ T8911] __se_sys_ioctl+0xfa/0x170 [ 263.610686][ T8911] do_syscall_64+0x4c/0xa0 [ 263.615263][ T8911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.621241][ T8911] [ 263.623623][ T8911] The buggy address belongs to the object at ffff8880232a5000 [ 263.623623][ T8911] which belongs to the cache kmalloc-512 of size 512 [ 263.638180][ T8911] The buggy address is located 50 bytes inside of [ 263.638180][ T8911] 512-byte region [ffff8880232a5000, ffff8880232a5200) [ 263.651721][ T8911] The buggy address belongs to the page: [ 263.657379][ T8911] page:ffffea00008ca900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880232a6400 pfn:0x232a4 [ 263.669152][ T8911] head:ffffea00008ca900 order:2 compound_mapcount:0 compound_pincount:0 [ 263.677841][ T8911] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 263.685870][ T8911] raw: 00fff00000010200 ffffea00017f3508 ffffea000182be08 ffff888016c41c80 [ 263.694489][ T8911] raw: ffff8880232a6400 000000000010000a 00000001ffffffff 0000000000000000 [ 263.703102][ T8911] page dumped because: kasan: bad access detected [ 263.709545][ T8911] page_owner tracks the page as allocated [ 263.715742][ T8911] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1528, ts 10794990286, free_ts 0 [ 263.734116][ T8911] get_page_from_freelist+0x1bbd/0x1ca0 [ 263.740251][ T8911] __alloc_pages+0x1ee/0x480 [ 263.744868][ T8911] new_slab+0xc0/0x4b0 [ 263.748994][ T8911] ___slab_alloc+0x80a/0xdd0 [ 263.753600][ T8911] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 263.759073][ T8911] alloc_bprm+0x56/0x6a0 [ 263.763565][ T8911] kernel_execve+0x49/0x900 [ 263.768092][ T8911] call_usermodehelper_exec_async+0x207/0x350 [ 263.774166][ T8911] ret_from_fork+0x1f/0x30 [ 263.778598][ T8911] page_owner free stack trace missing [ 263.784397][ T8911] [ 263.786762][ T8911] Memory state around the buggy address: [ 263.792454][ T8911] ffff8880232a4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.800687][ T8911] ffff8880232a4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.808768][ T8911] >ffff8880232a5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.816973][ T8911] ^ [ 263.822879][ T8911] ffff8880232a5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.831121][ T8911] ffff8880232a5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.839491][ T8911] ================================================================== [ 263.847762][ T8911] Disabling lock debugging due to kernel taint [ 263.864254][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.882775][ T8911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 263.890036][ T8911] CPU: 1 PID: 8911 Comm: syz.2.1297 Tainted: G B syzkaller #0 [ 263.899136][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.909320][ T8911] Call Trace: [ 263.912619][ T8911] [ 263.915569][ T8911] dump_stack_lvl+0x188/0x250 [ 263.920561][ T8911] ? show_regs_print_info+0x20/0x20 [ 263.925876][ T8911] ? load_image+0x400/0x400 [ 263.930578][ T8911] panic+0x2e5/0x810 [ 263.934490][ T8911] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 263.940665][ T8911] ? bpf_jit_dump+0xd0/0xd0 [ 263.945175][ T8911] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 263.951411][ T8911] ? _raw_spin_unlock+0x40/0x40 [ 263.956371][ T8911] ? rose_transmit_link+0x5b0/0x730 [ 263.961609][ T8911] check_panic_on_warn+0x80/0xa0 [ 263.967095][ T8911] ? rose_transmit_link+0x5b0/0x730 [ 263.972353][ T8911] end_report+0x6d/0xf0 [ 263.976706][ T8911] kasan_report+0x102/0x130 [ 263.981634][ T8911] ? rose_transmit_link+0x5b0/0x730 [ 263.986854][ T8911] rose_transmit_link+0x5b0/0x730 [ 263.992017][ T8911] ? skb_put+0x117/0x210 [ 263.996402][ T8911] rose_write_internal+0x680/0x1e90 [ 264.001797][ T8911] ? debug_object_assert_init+0x33/0x2e0 [ 264.007528][ T8911] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 264.013526][ T8911] ? rose_validate_nr+0x120/0x120 [ 264.018630][ T8911] ? __timer_delete+0x6c/0x220 [ 264.023455][ T8911] rose_release+0x22a/0x4e0 [ 264.028079][ T8911] sock_close+0xd5/0x240 [ 264.032359][ T8911] ? sock_mmap+0x90/0x90 [ 264.036788][ T8911] __fput+0x234/0x930 [ 264.041015][ T8911] task_work_run+0x125/0x1a0 [ 264.045842][ T8911] do_exit+0x626/0x20c0 [ 264.051145][ T8911] ? put_task_struct+0x80/0x80 [ 264.056045][ T8911] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.062448][ T8911] ? lock_chain_count+0x20/0x20 [ 264.067558][ T8911] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.072729][ T8911] do_group_exit+0x12e/0x300 [ 264.077580][ T8911] ? lockdep_hardirqs_on+0x94/0x140 [ 264.082795][ T8911] get_signal+0x6ca/0x12c0 [ 264.087387][ T8911] arch_do_signal_or_restart+0xe7/0x12c0 [ 264.093041][ T8911] ? rose_bind+0xa00/0xa00 [ 264.097495][ T8911] ? aa_af_perm+0x300/0x340 [ 264.102098][ T8911] ? init_wait_entry+0xd0/0xd0 [ 264.107094][ T8911] ? get_sigframe_size+0x10/0x10 [ 264.112044][ T8911] ? __sys_connect+0x278/0x450 [ 264.116820][ T8911] ? exit_to_user_mode_loop+0x3b/0x130 [ 264.122487][ T8911] exit_to_user_mode_loop+0x9e/0x130 [ 264.128039][ T8911] exit_to_user_mode_prepare+0xee/0x180 [ 264.133965][ T8911] syscall_exit_to_user_mode+0x16/0x40 [ 264.139568][ T8911] do_syscall_64+0x58/0xa0 [ 264.144235][ T8911] ? clear_bhb_loop+0x30/0x80 [ 264.148963][ T8911] ? clear_bhb_loop+0x30/0x80 [ 264.153907][ T8911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.159823][ T8911] RIP: 0033:0x7ff0122a5819 [ 264.164581][ T8911] Code: Unable to access opcode bytes at RIP 0x7ff0122a57ef. [ 264.172287][ T8911] RSP: 002b:00007ff0104de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 264.181180][ T8911] RAX: fffffffffffffe00 RBX: 00007ff01251f090 RCX: 00007ff0122a5819 [ 264.189377][ T8911] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 000000000000000b [ 264.197860][ T8911] RBP: 00007ff01233bc91 R08: 0000000000000000 R09: 0000000000000000 [ 264.205992][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.214502][ T8911] R13: 00007ff01251f128 R14: 00007ff01251f090 R15: 00007ffedab0bc38 [ 264.222744][ T8911] [ 264.226258][ T8911] Kernel Offset: disabled [ 264.231142][ T8911] Rebooting in 86400 seconds..