last executing test programs: 40.104909063s ago: executing program 4 (id=2934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000080)={0x18}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000755f3220dd1700555ef3010203010902240001000000000904000002f042a4007daf6063000000000009050d030000000000"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) 36.064198329s ago: executing program 4 (id=2942): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x4000854) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000002140)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/75, 0x4b}, {&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/184, 0xb8}, {&(0x7f00000008c0)=""/117, 0x75}, {&(0x7f0000000940)=""/250, 0xfa}], 0x6, &(0x7f0000000ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000c40)=""/238, 0xee}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/232, 0xe8}, {&(0x7f0000001f00)=""/162, 0xa2}, {&(0x7f0000001fc0)=""/109, 0x6d}, {&(0x7f0000000340)=""/49, 0x31}], 0x7, &(0x7f00000020c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x2, 0x10000, &(0x7f00000021c0)={0x0, 0x3938700}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 34.205358518s ago: executing program 4 (id=2945): r0 = socket(0x80000000000000a, 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000002, 0x113020) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x6, 0x8, 0x0, 0x0, 0x3, 0x196d, 0x7fff, 0x81, 0x7, 0x9, 0x0, 0x0, 0x7ff, 0x9, 0x0, 0x8, {0x7c, 0x4}, 0xfd, 0x1}}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'lo\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r9}}, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x20, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast, {[@end, @generic={0x82, 0x6, "ae2fd8e4"}, @cipso={0x86, 0x65, 0x0, [{0x1, 0xb, "c46a4e1613bd619942"}, {0x1, 0xe, "b9283c3999bc0f61a899c897"}, {0x6, 0xf, "cb5d09057d5ea12e3e92bf8692"}, {0x5, 0xb, "fee648b27cc9b0d973"}, {0x5, 0x3, "a7"}, {0x0, 0x11, "cf09fca7f9e4a154effc4b383031b2"}, {0x0, 0xa, "9c2f37ce25964a01"}, {0x0, 0xe, "12e5c30e839bf4acf7cc3601"}]}]}}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) (async) sendmmsg$inet(r10, &(0x7f0000000380)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001440)="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", 0xbc1}, {0x0}], 0x2}}], 0x2, 0x40480c8) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}}, {{0xa, 0x0, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x7fff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0x2000}}}, 0x108) 32.836291002s ago: executing program 4 (id=2950): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 29.65768076s ago: executing program 4 (id=2959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000840)={0x38}, 0xffffffffffffff1a, 0x0) membarrier(0x10, 0x0) poll(0x0, 0x0, 0x1) prctl$PR_MCE_KILL_GET(0x22) r2 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af0000000109021200010000000009"], 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000080)={0x2, 0xffffffff, 0x8673}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.929093112s ago: executing program 0 (id=3027): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f00000004c0)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4fe49848}}], 0x30, 0x1000000}, 0x4040) 6.65178415s ago: executing program 0 (id=3029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046140, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x9d5e236cac7a57c6}}, 0x50) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x560b, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'fo\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002000)={{0x14, 0x12, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) 6.325306123s ago: executing program 0 (id=3031): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x8}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x7fffffffffffffff, 0xc}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001a00990025bd7000ffdbdf250a801401ff02c805000800000800100043000000080019004a7a0136ff2fb948f35162a75467bebae8a9ea9f71c440a9d9172f550d9bc8acffcc281b2ab639837cd830567557e9fe75cab2ab16aaf07c9a32292d89fc190fad6763bbb0500d5d4dcf99f88fb953adcc378b5fd86c75", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) 5.345759703s ago: executing program 1 (id=3036): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4880, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x211) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00003ec000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7, 0x0, 0x0, 0x200000000201, 0x3, 0x2, 0x6}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0xe, 0x3}, {0x0, 0xa}}}, 0x24}}, 0x4000) sendmmsg$inet(r0, &(0x7f0000006300)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}}], 0x1, 0x0) 4.777546943s ago: executing program 1 (id=3039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x5f9, 0x8b, &(0x7f0000000280)="3ce7fe7b9e1e84907dfebeaf016a77b44ffba311d098474110bd50ff3bd5f26208fbc6d07f0a72b36d06f438ba35e1b5139672b750c09a48287cd9b8c7fb6dec0d90e0307eeff40e78fc0c477b8e9035c0b8dbc047b5229d00e681b598e9c53601ca0697dd8863ec16659121635b01fc8560b55aba6f5369a4de9faf9d1ed220b1f8b2fe3d94826fd0bf87", 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x38}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000200)=0x210) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000200)=0x210) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)='batadv_slave_0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 4.113362681s ago: executing program 1 (id=3044): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0xe, 0x7fff0000}]}) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x20000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002b00)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f000000ef40)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/11, 0xb}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/246, 0xf6}], 0x4, &(0x7f0000000780)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/91, 0x5b}], 0x2}, 0xb}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/49, 0x31}, {&(0x7f0000002980)=""/108, 0x6c}, {&(0x7f0000002a00)=""/52, 0x34}], 0x3}, 0x7}, {{&(0x7f0000002a80)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002c00)=[{&(0x7f000000ad80)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/29, 0x1d}], 0x2, &(0x7f0000002c40)=""/168, 0xa8}}, {{&(0x7f0000002d00)=@l2tp6, 0x80, &(0x7f0000004100)=[{&(0x7f0000002d80)=""/93, 0x5d}, {&(0x7f0000002e00)=""/93, 0x5d}, {&(0x7f0000002e80)=""/187, 0xbb}, {&(0x7f0000002f40)=""/117, 0x75}, {&(0x7f0000002fc0)=""/41, 0x29}, {&(0x7f0000003000)=""/206, 0xce}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x7}, 0xfffffff7}, {{&(0x7f0000004180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004200)=""/117, 0x75}, {&(0x7f00000094c0)=""/252, 0xfc}, {&(0x7f0000004380)=""/100, 0x64}, {&(0x7f0000004400)=""/236, 0xec}, {&(0x7f0000004500)=""/10, 0xa}, {&(0x7f0000004540)=""/133, 0x85}, {&(0x7f0000004600)=""/39, 0x27}], 0x7}, 0x7fff}, {{&(0x7f00000046c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005780)=[{&(0x7f0000004740)=""/18, 0x12}, {&(0x7f0000004780)=""/4096, 0x1000}], 0x2, &(0x7f00000057c0)=""/36, 0x24}, 0x2}, {{&(0x7f0000004280)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005a40)=""/90, 0x5a}, {&(0x7f0000005ac0)=""/97, 0x61}, {&(0x7f0000005b40)=""/142, 0x8e}], 0x3}, 0x6}, {{&(0x7f0000005c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/17, 0x11}, {&(0x7f0000006d00)=""/167, 0xa7}, {&(0x7f0000006dc0)=""/122, 0x7a}, {&(0x7f0000006e40)=""/83, 0x53}], 0x5, &(0x7f0000006f40)=""/74, 0x4a}, 0x1}, {{&(0x7f0000006fc0)=@l2, 0x80, &(0x7f0000008180)=[{&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000008040)=""/52, 0x34}, {&(0x7f0000008080)=""/97, 0x61}, {&(0x7f0000008100)=""/86, 0x56}], 0x4}, 0x6}, {{&(0x7f00000081c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000008240)=""/4096, 0x1000}, {&(0x7f0000009240)=""/111, 0x6f}, {&(0x7f00000092c0)=""/255, 0xff}], 0x3, &(0x7f0000009400)=""/178, 0xb2}}, {{0x0, 0x0, &(0x7f000000a700)=[{&(0x7f000000f3c0)=""/230, 0xe6}, {&(0x7f00000095c0)=""/218, 0xda}, {&(0x7f00000096c0)=""/30, 0x1e}, {&(0x7f0000009700)=""/4096, 0x1000}], 0x4, &(0x7f000000a740)=""/228, 0xe4}, 0x13}, {{&(0x7f000000a840)=@caif=@dgm, 0x80, &(0x7f000000abc0)=[{&(0x7f000000a8c0)=""/1, 0x1}, {&(0x7f000000a900)=""/50, 0x32}, {&(0x7f000000a940)=""/68, 0x44}, {&(0x7f0000005800)=""/50, 0x32}, {&(0x7f000000aa00)=""/161, 0xa1}, {&(0x7f000000aac0)=""/63, 0x3f}, {&(0x7f000000ab00)=""/192, 0xc0}], 0x7, &(0x7f000000ac40)=""/160, 0xa0}, 0x9}, {{&(0x7f000000ad00)=@rc={0x1f, @none}, 0x80, &(0x7f000000c2c0)=[{&(0x7f0000005840)=""/234, 0xea}, {&(0x7f000000ae80)=""/107, 0x6b}, {&(0x7f000000af00)=""/129, 0x81}, {&(0x7f000000afc0)=""/197, 0xc5}, {&(0x7f000000b0c0)=""/4096, 0x1000}, {&(0x7f000000c0c0)=""/67, 0x43}, {&(0x7f000000c140)=""/240, 0xf0}, {&(0x7f000000c240)=""/44, 0x2c}, {&(0x7f000000c280)}], 0x9}, 0x9}, {{&(0x7f000000c380)=@ieee802154, 0x80, &(0x7f000000c640)=[{&(0x7f000000c400)=""/238, 0xee}, {&(0x7f000000c500)=""/203, 0xcb}, {&(0x7f000000c600)}], 0x3, &(0x7f000000c680)=""/117, 0x75}, 0x9}, {{&(0x7f000000c700)=@hci, 0x80, &(0x7f000000c9c0)=[{&(0x7f000000c780)=""/221, 0xdd}, {&(0x7f000000c880)=""/164, 0xa4}, {&(0x7f000000c940)=""/125, 0x7d}], 0x3, &(0x7f000000ca00)=""/41, 0x29}, 0x7fffffff}, {{&(0x7f000000ca40)=@caif=@dbg, 0x80, &(0x7f000000dac0)=[{&(0x7f000000f4c0)=""/4096, 0x1000}], 0x1, &(0x7f000000db00)=""/124, 0x7c}, 0xab1}, {{&(0x7f000000db80)=@ieee802154={0x24, @short}, 0x80, &(0x7f000000ee80)=[{&(0x7f000000dc00)=""/101, 0x65}, {&(0x7f000000dc80)=""/201, 0xc9}, {&(0x7f000000dd80)}, {&(0x7f000000ddc0)=""/37, 0x25}, {&(0x7f000000de00)=""/4096, 0x1000}, {&(0x7f000000ee00)=""/121, 0x79}], 0x6, &(0x7f000000ef00)=""/30, 0x1e}, 0x5f}], 0x12, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="00000000d30000001023bc4d62ddd126f1990c00000000000000001b000000005e0800dfb7fca84108cce8627f79c9165f8e4ec2eec8d863cf0b4323a0a6cd168bea173d33adac251615c88933d364ea8d66620817951a11cb37d90bade3505605d26245fdc800e41e2ee3a8ed33ac20ab91af67d27465f226d7f429423df3a7989f91199dcf85d7685535aa023000"/160], 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) 4.085798203s ago: executing program 0 (id=3045): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000006087"], 0x50) close(0x3) close(r2) r3 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r5, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) 3.913878751s ago: executing program 3 (id=3046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x74}, 0x1, 0x0, 0x900000000000000, 0x24000855}, 0x0) 3.789763307s ago: executing program 3 (id=3048): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000380)="b0be1d9bb3c6152d6fc7b874971c754a830df932cc79545195b017b4ecc92898d913a2535caa56f9ef751f0c6f9d8ee4a6e2f3cc724589e2c6ecf5c82e5301500954763c18615487897f14a17374", 0x4e}, {&(0x7f0000000500)="2a9966ca39e8e96688b40e78022415ec738f1270568c5e0eac0d07766555b4836d", 0x21}, {&(0x7f0000002c40)="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", 0x100e}, {&(0x7f0000000280)="b64801eeb2e8601ebf19329308fe896d2e9a250f993fe23156068f602b6488785ec026cd2c4505000000000000007d760ad6750b75fb7c0f305f26253bd7bd28723607774c75c390e866925c3097d917778bbcd79f6002e3cdf39088394b75c68c93b232d83cd59a866be27a45627816facc81d06341f6d02343cc144616210de9ff62ca45647458303ac25cf0c01b3b86271b399c5f4719fdbd06d2ea1fbae26791786f97c1a46963f09504b6deb35cbed6528a8aad7fe5f12f7cb56851c98e98e107c58606f7029cfede783a1e5c09d98b6fd7d612dc5277add1f4b1b1aa99675571529a7bf2188f5c9d3ee2eea532", 0xf0}, {&(0x7f0000000540)="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", 0x1f9}, {&(0x7f0000001c40)="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", 0x1000}], 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10240, 0x0) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x0, 0xf0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400000000ffffffffffffffff80003dffe773fad6115491b166d7d7d77586ac7c6e7dd182c8ae9633f18bb82708d0ce8ee2986772c08c31e61e0f6ca3bd10970ed393d6f7eb8f940a0abf07921cdb27f583593a95539efa8860fa62182e688f06f1cc7c8b0cae3cf1209ba96eee9fa31017b8abb2365281cd35ffbbab944ed572034d68d1cc0be15454ea0be45c879434f1fd3c4c29f2e4f87984beb258", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080005000100000008000100fcffffff"], 0x44}}, 0x0) 3.654798259s ago: executing program 3 (id=3049): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.533684275s ago: executing program 1 (id=3050): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000500)=@urb_type_iso={0x0, {0x5}, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x38, 0x7, 0x1, 0x0, [{0xb5, 0x3, 0x4}, {0x2, 0x8, 0x2}, {0x60000000, 0xc31, 0x3}, {0x7f, 0x800, 0x5}, {0x4, 0x6, 0x80000001}, {0x5, 0x2, 0xb}, {0x400, 0x4, 0x1}, {0x4, 0x5000, 0xfffd}, {0x4, 0x1, 0x2}, {0x3, 0x8001, 0x2}, {0x4, 0xe71, 0x62}, {0x9, 0x4, 0x1}, {0x9ae, 0xfffffffe}, {0xffffffff, 0x9, 0x1000}, {0xe5, 0x7, 0x3}, {0x4, 0x6, 0x3}, {0x8001, 0x11a, 0x9}, {0x8ae, 0x0, 0x4}, {0x2, 0x0, 0x6}, {0x9, 0x5, 0x7}, {0xfffffffe, 0x101, 0x4}, {0xb5, 0xb4, 0x4}, {0x9, 0x7, 0x4}, {0x2d, 0x8001, 0x9}, {0x8, 0x7, 0x6}, {0x9, 0x10}, {0x9539, 0x1, 0x80000001}, {0xb, 0x2, 0x8}, {0xe2, 0x7ff, 0x3}, {0x8000, 0x0, 0x2}, {0x1ff, 0xb1, 0x7f}, {0xf76b604d, 0x57da919, 0xc}, {0x2, 0x8, 0x9}, {0x8, 0x4, 0xfff}, {0x1, 0x8001, 0x1}, {0x80000000, 0x6e, 0x7}, {0x5, 0x8000, 0x7}, {0x1, 0x0, 0x6}, {0x7, 0x9, 0x7}, {0x6, 0x47e531f}, {0x0, 0x100, 0x100}, {0x7, 0x9, 0x101}, {0x6, 0x8001, 0x80}, {0x40, 0x401, 0xfff}, {0x8, 0x3, 0x101}, {0xffff, 0x830, 0x1}, {0x8, 0x1800000}, {0x9, 0xb, 0x40}, {0x0, 0x1000, 0x1a}, {0x104e170f, 0xffffffff, 0x7}, {0x3, 0x3, 0x6}, {0x200, 0x7, 0x8bb0}, {0x800, 0x1000, 0xf}, {0xfffeffff, 0x25, 0x4}, {0x4, 0x1, 0x522}, {0x7, 0x7, 0x6}]}) 3.283527512s ago: executing program 1 (id=3051): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0xfffffffffffffff5, 0x1000000000000, {{0x3, 0x0, 0x7caef2bd5608ec51, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x53564d41, 0x2, r6, 0x1, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000000100)=0x3, 0x0, 0x4) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\a'], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.577663977s ago: executing program 4 (id=2978): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x4c}}, 0x20008004) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x8, 0xa0, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8f}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7d, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x24}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0xe, 0x5, 0xca, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x28, 0x10, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0xd, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0x9, 0x7f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x3, 0x2, 0x20, 0x8}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xd0, 0x8b, 0x5dab}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x6, 0xf0f, 0xfff, [0xff, 0xc0, 0x0, 0x3f, 0xc0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x84e0fd2d7c65fec8, 0x44, 0x69, 0x6, 0x4, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x0, 0xb5}]}, 0x2, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "8a38f56ecdc0e5ffc61dfbbca2f619c8a8778a3f8604e0f4132f7327797a54dbae9d4f295a273c662441aceda48e97d8c7838edb4fa2509f16cd8fe97dec34e24ff469e2ed11bc7adac0e5952494b692d2a929cdfdad989db2ea2c276f086750726c4d3ef6072fe69b1d13"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1001}}]}) (async) syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x8, 0xa0, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8f}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7d, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x24}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0xe, 0x5, 0xca, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x28, 0x10, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0xd, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0x9, 0x7f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x3, 0x2, 0x20, 0x8}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xd0, 0x8b, 0x5dab}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x6, 0xf0f, 0xfff, [0xff, 0xc0, 0x0, 0x3f, 0xc0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x84e0fd2d7c65fec8, 0x44, 0x69, 0x6, 0x4, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x0, 0xb5}]}, 0x2, [{0x6d, &(0x7f0000000180)=@string={0x6d, 0x3, "8a38f56ecdc0e5ffc61dfbbca2f619c8a8778a3f8604e0f4132f7327797a54dbae9d4f295a273c662441aceda48e97d8c7838edb4fa2509f16cd8fe97dec34e24ff469e2ed11bc7adac0e5952494b692d2a929cdfdad989db2ea2c276f086750726c4d3ef6072fe69b1d13"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.445612709s ago: executing program 2 (id=3053): pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x119880, 0xc3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES64=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x8f82cdc586d2fef3, 0x70bd2a, 0x1, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}, {0x1, 0xfffffffffffffffd}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, [@sec_ctx={0x44, 0x8, {0xffffffffffffff87, 0x8, 0x0, 0x0, 0x38, "4f85cc0ca0edba5cd6246d17eaa031d9cd9a0db9d8b01d4710a6e991b475b8490d757edf286f38935a50abbd26c5001acc662a7360bca5eb"}}]}, 0xfc}}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.39664274s ago: executing program 3 (id=3054): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x8}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x7fffffffffffffff, 0xc}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001a00990025bd7000ffdbdf250a801401ff02c805000800000800100043000000080019004a7a0136ff2fb948f35162a75467bebae8a9ea9f71c440a9d9172f550d9bc8acffcc281b2ab639837cd830567557e9fe75cab2ab16aaf07c9a32292d89fc190fad6763bbb0500d5d4dcf99f88fb953adcc378b5fd86c75", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) 2.305703351s ago: executing program 2 (id=3055): bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1a, 0x5, 0x200}, &(0x7f0000000480)=0x10) (fail_nth: 1) 1.850064871s ago: executing program 2 (id=3056): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 1.714377316s ago: executing program 2 (id=3057): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000c06010200000000000000000300000a050001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000600)="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", 0xfd1, 0x9, 0x0) unshare(0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000200)={0xfffffffffffffc39, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x37, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x8000, 0x400) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) 933.009397ms ago: executing program 0 (id=3058): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) pipe2$watch_queue(0x0, 0x80) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x730) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc9", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacd", 0x31}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}, {&(0x7f0000000940)="c28cbc11b3b6845850476dc55cc2d4bee68c7e", 0x13}, {&(0x7f00000007c0)="d7f0c87b9c16ebce229c316d29e100250a98069fc5ae230095e24fcbfaacff36fd4ae2f47ef80c0282c8cb7b5d4f0b2328ce20cd402ac061011a72e0f78a7bf154ac5a9cd20ad0f13dab6df59af67d3e681182bb734ba0381037620d0e783c18a83d5c2829630bb5aa79e21b0c6f31be5293622882a07f539ae295069528d4ba225e12e3151dc9ed509ae6dec58df5f651a3be", 0x93}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290b8ea22af63b5e42d3c548043b6aad2b85a18a853cfe5c0699a25f1d9fe71b4165504c43dbed4b9c5c2881197f1b385578aeb7c9e4766440192efba210730005f2f04c53d003b7f284691fec94044f0eb95deacb0d8751c47f2dc56f8339fff38a2fcdf2e17c75d1df832dce55851549eb665e6047eebd45e1b8a96d16d1f089ffec032500d5e4e29e5dae7c7e8d9b2f9a3584630d7ba795726f09718bbae7d839902b2c67309792df9d04e97491fc44f16653723b9279d1999165000a145020413a699e737d609763f0a42428d5e17ddd8f462962bc9b0c05f3d4beba1aad4766630ad210fc2aa7aa0a0206dbc2d238bdbe67c7301c6950e0927aa3cac744779a1d65d3db585add31e0c03bcc34128f07ceec2b35a30104c3b411beabb37673ab5a90b413355a6de2f15295cfbbda7c37c2266088095ef7bdee7810e1bca5e1b48938d78d89f2b1f92962887b87062af3934f118345aa8b868b140dacbbe81aa04af7b6e694571bd162e3167c4b63ac6c82ff63e648d8b9953e14263124d9a16abd055afa3550215a3856678dac16d8958f86b9c28cf51d0bf972f5120119a52344ff58d43a9542c67985b10ac37a631fdbbe9b2224c8259a2451d8334c38bb84093266fb57c9064a2b59e50793524ade1e1068f2f71ca6607538a569a67c1c0411b9d358f528f27076c489be681a1e7cbef9e88fe7c97fbe3cae1498601ffed7c8796664cce4668ff2fc8f1c5e9bc8ed8d320bfbde1f3d91688afe7af14d34491595640c89dcaaa44faf87334a270edcdec70302ddd5036569a2975bac5c045a5e4227bd17af846737c9acbd571b55cd2b94f9645670f1ea80ec20c54bb001b995ce354ce1988e50de9f5f7849d76dcc3ac034a532aaf0ce3070730d979cd8fcb8c6db4131d524d216578", 0x2fc}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 824.971611ms ago: executing program 3 (id=3059): mbind(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xc, 0x1000a, 0x5) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="ed", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000faff00840000000800000001440c00030000000000000000004000"], 0x20}}], 0x2, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xde, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x80, 0x1, 0x3, 0x8, {{0x24, 0x4, 0x1, 0x12, 0x90, 0x65, 0x0, 0x7, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x1a, 0x1, [{0x5, 0x2}, {0x1, 0x12, "f602000000400000000000eeff000000"}]}, @cipso={0x86, 0x2f, 0x2, [{0x2, 0x3, "c0"}, {0x5, 0x2}, {0x7, 0x9, "c8a7915d749425"}, {0x7, 0xc, "31f242924808d02dd369"}, {0x0, 0xf, "0fb5586118ec8b67f6601f6d6c"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0xb, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@multicast1, 0xb0}, {@local, 0x1}, {@local, 0x8000}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) r6 = socket$inet6(0xa, 0x80000, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r8, 0x153ff25051509283, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x10000000) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000007140)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007100)={&(0x7f0000005080)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="080026bd7000fddbdf255e000000050019010500000008009f000700000005001801040000000800a000ff7f0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async, rerun: 64) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000004f40242e58e3dc6f010000008000000008306e9b7ad34ab18a26fd5c9649abb9f59c2f5ae4310e666ef1be72a5f7af7bd8dbd28b97038d90cfe1a6e2081534e27b7d797df995186c6d1b4b74882ca00e7bef8d1f8300e899cc5c5a81058c81a5a033b98ae30d6d206f61f7e9e83e66fb9b796534c5f316f99e614302d955e00b0f0f4bd076beecff53a8fbb9960b7d0f53382bc7fba1d9c0f40006e24fef663ea469d7a2d10b5382cab8d13b3752e97c70ff35f264c0ee6a49d0ea93fe0ed1876a7d3e861f32bf8133675369cdf1545474f86bd8467a23", @ANYRESOCT=r4, @ANYBLOB="f60000000000abfe1cbd9218b86eae216700e2ffffff0000ab57153344b357d06b58b3f97a87f7632bbb64200318cf9dac60cab59c296d7bb165114e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080000000000000000000b7080000ffffff807baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400000080ffffb70200001700000018230000", @ANYRES32=r10, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, 0x2b, 0x107, 0x0, 0x7, {0x3, 0x7c}, [@nested={0x4, 0x31}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xc9}]}]}, 0x20}}, 0x4010) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r12, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) (async, rerun: 64) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) (async, rerun: 64) munlock(&(0x7f000047a000/0x2000)=nil, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 496.741908ms ago: executing program 2 (id=3060): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000500)=@urb_type_iso={0x0, {0x5}, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x37, 0x7, 0x1, 0x0, [{0xb5, 0x3, 0x4}, {0x2, 0x8, 0x2}, {0x60000000, 0xc31, 0x3}, {0x7f, 0x800, 0x5}, {0x4, 0x6, 0x80000001}, {0x5, 0x2, 0xb}, {0x400, 0x4, 0x1}, {0x4, 0x5000, 0xfffd}, {0x4, 0x1, 0x2}, {0x3, 0x8001, 0x2}, {0x4, 0xe71, 0x62}, {0x9, 0x4, 0x1}, {0x9ae, 0xfffffffe}, {0xffffffff, 0x9, 0x1000}, {0xe5, 0x7, 0x3}, {0x4, 0x6, 0x3}, {0x8001, 0x11a, 0x9}, {0x8ae, 0x0, 0x4}, {0x2, 0x0, 0x6}, {0x9, 0x5, 0x7}, {0xfffffffe, 0x101, 0x4}, {0xb5, 0xb4, 0x4}, {0x9, 0x7, 0x4}, {0x2d, 0x8001, 0x9}, {0x8, 0x7, 0x6}, {0x9, 0x10}, {0x9539, 0x1, 0x80000001}, {0xb, 0x2, 0x8}, {0xe2, 0x7ff, 0x3}, {0x8000, 0x0, 0x2}, {0x1ff, 0xb1, 0x7f}, {0xf76b604d, 0x57da919, 0xc}, {0x2, 0x8, 0x9}, {0x8, 0x4, 0xfff}, {0x1, 0x8001, 0x1}, {0x80000000, 0x6e, 0x7}, {0x5, 0x8000, 0x7}, {0x1, 0x0, 0x6}, {0x7, 0x9, 0x7}, {0x6, 0x47e531f}, {0x0, 0x100, 0x100}, {0x7, 0x9, 0x101}, {0x6, 0x8001, 0x80}, {0x40, 0x401, 0xfff}, {0x8, 0x3, 0x101}, {0xffff, 0x830, 0x1}, {0x8, 0x1800000}, {0x9, 0xb, 0x40}, {0x0, 0x1000, 0x1a}, {0x104e170f, 0xffffffff, 0x7}, {0x3, 0x3, 0x6}, {0x200, 0x7, 0x8bb0}, {0x800, 0x1000, 0xf}, {0xfffeffff, 0x25, 0x4}, {0x4, 0x1, 0x522}]}) 445.731159ms ago: executing program 3 (id=3061): syz_open_dev$vim2m(&(0x7f0000000000), 0xc, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000480)={0x6, 0x1, "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"}) syz_io_uring_setup(0x76e7, &(0x7f0000000380)={0x0, 0x5ef8, 0x10100, 0x2, 0x80000, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000000040)) 381.869601ms ago: executing program 2 (id=3062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5004d564b"]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRESDEC, @ANYRES32, @ANYRES8], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbf) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7b0201000000000071113c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1d, &(0x7f0000000100)=""/195, 0x0, 0x31, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x3, 0x69, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x0, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "32c10604"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x4, 0x0, 0x80}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xbf4, 0x1, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0xd, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x4a, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x3, 0x6c}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x4, 0x4, 0x10, 0x10}, 0xf6, &(0x7f0000000100)={0x5, 0xf, 0xf6, 0x5, [@generic={0xa0, 0x10, 0xb, "d71a9d73d44ba344b7b283227f704fa6bb436bbd11b58259e5d0453297445f71c27f0247e4489bb8f3ee5ffee413882d7cd72740b660b8f72527a0e902fe03effcfd219cd98ef43b85b9132f03f9b0419ac6a81f0fefadd8bc82909577fb22eb396b6a0636c93f0803eb535ae453a4095957e8e101871d8190fba2dc18fbb2fa5bf8c5c6a6d322c7ff36e631841e3df44fe13ec4664204e0cbc3f5c110"}, @generic={0x18, 0x10, 0x492d29705036b8e4, "7bca14279ebfc9abd7fbf2b1dd22d10edf75e4e9f3"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d22baab90dfb5dfc534e76e42add142a"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x5, 0x4}, @generic={0x1e, 0x10, 0x3, "204d45d59878f0523365e82bb8695c438ec48e734f9f4ca1b30438"}]}, 0x6, [{0x4c, &(0x7f0000000200)=@string={0x4c, 0x3, "79290c1194c96269d91676ee5f0ce0c21b864c418c26d5ca576f130267d1417e126b0d2baa824aa14b1035ca9f8cc6f9740288ea84704bbba1f2263236066aeefb3bd38e43df5b8493e5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x2b, &(0x7f0000000340)=@string={0x2b, 0x3, "b3fb2bae972ef98761f1637468e0255e7741f112f1df93fe785503e4c1f80a77c821a8e068f720bf40"}}, {0xef, &(0x7f0000000380)=@string={0xef, 0x3, "ec81b679aa814d953d42b75774e78bc8dd523f70b7e34382ea36ced3a85be96eb98efbdaf570879cbf3c4c248f4821f53392f68602babbdb268768de55f714529cd9c4f0cd0d5ec407ceffe03d4652bf03f838b915a882490d777340b43c0910226a4e94a2fcb0a5584635db822c58e1b1a508d34adb7476bacd0cc0356506d432696f6af2531736a544a1553491c33579ef471347f0258f6f957d636b370ec91fd144a10cd2b8b030bb453e6e7bb5c9338553e32466c42792d9e4ca40d0a9dab69140f38512655fccd43aa1ba7f944ad02cbcbd788648a716a0ad48e6513638b208efa6e98aad7c4282b5ddc9"}}]}) syz_usb_connect$cdc_ecm(0x2, 0x89, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x1, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xf0, {{0x7, 0x24, 0x6, 0x0, 0x0, '\\\v'}, {0x5, 0x24, 0x0, 0x926b}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xe, 0xd, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0xc0, 0x6, 0x9, 0x9}, @acm={0x4, 0x24, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x401}, @dmm={0x7, 0x24, 0x14, 0x3, 0x3d}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3, 0xf0, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x0, 0x2, 0x8, 0x8, 0xf3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x60, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x8, 0xc}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0x8, 0x9, 0x6, 0x20, 0x8c}, 0x6f, &(0x7f0000000600)={0x5, 0xf, 0x6f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0x7, 0xfffb}, @generic={0x17, 0x10, 0x4, "15495af9451786f1f33a37af3681a39c93716249"}, @generic={0x1d, 0x10, 0x1, "8cde4d1940917702d725e10cff398c514e216fa7fb4b1a651002"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x24, 0x0, 0x3, 0x80, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x5, 0xff0f, 0x7, [0x0, 0x30, 0x3f00, 0x14f, 0x3f0f, 0x3fff]}]}, 0x6, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x6c52}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43f}}, {0xf7, &(0x7f0000000700)=@string={0xf7, 0x3, "8aa7e5016e90799afcf054344501d6b65854f61ae4693b7802954673698c9061ba21d0b223f8af60aece164dfc63e8eb00109f707cb964134a2e50b2b1409e09829299ba54768b861a5e0d79d418f3de52bee791d2dd00157cce04913b4155be16a028c7e96cde637192015bc0f27c0ce5e3f8e236cdd03bfe62ea36e9dc870cb6e0ffea7d0a75fd492136c023886f78ad9fab2c1cb8c70d3ee29d634722c3aaab8d575896cfbb7ec2f1da5c17bd3fbe5a417b8d2eebfa2da3a62cecb3caeda7bc91b4ccab85702acbce298437db9d9ac78aacbad4623d2360d3556728698440d6a7144dd8ee6176754b5ce9ac02922c1b60cdc897"}}, {0x51, &(0x7f0000000800)=@string={0x51, 0x3, "88ed98182e6bd81e12f5311ef10c3aefba76ac472b89a9fbaf5d2e3ace85cbfa207289249f273ea8c9c453c7b36479c9f59cd9bf068eac597de3b1a9ac5f116661cc971a79023c6ce5ef38d071e390"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x400a}}]}) 161.546028ms ago: executing program 0 (id=3063): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYRES8=r0], 0xf8}, 0x1, 0x0, 0x0, 0x20008821}, 0x0) socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000500)="9000000018001f2fb9409b52ffff65580200be04020cfe0560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602646dcaaf6c4f7e4cbfd78a2dfd1f8304f966041526c2912145", 0x4f, 0x4000040, 0x0, 0x0) io_uring_setup(0x6e6c, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x2d, 0x0, 0x4, 0x0, 0x0, 0x101], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x101, 0x0, 0xff], [0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x800]], '\x00', [{0x0, 0x1c, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {}, {}, {}, {0xd4, 0x1000}, {0x0, 0xff}], '\x00', 0xff}) openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = gettid() r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000840)=""/245, 0xf5}], 0x2) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x17, r6, 0x1, 0x32, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x4000000002c0, 0x0, 0x0, 0x400000000534, 0x40000000064a], 0x700, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000020000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000078893535a2de01f700000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000"]}, 0x108) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x9, 0x3ff, 0x4, 0xfff, 0x5, "ca3fb06550d0a9ead2e50f63b09662e4cf9bd2"}) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r4, 0x20, &(0x7f00000007c0)={&(0x7f0000000a40)=""/220, 0xdc, 0x0, &(0x7f00000005c0)=""/15, 0xf}}, 0x10) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x5a6e, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x2b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @ldst={0x3, 0x2, 0x3, 0x8, 0xa, 0x84, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xc}, @alu={0x7, 0x0, 0xd, 0xb, 0xa, 0x8, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x10000, 0xdc, &(0x7f0000000940)=""/220, 0x41100, 0x1, '\x00', r6, @fallback=0x32, r8, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xf, 0x10, 0x8}, 0x10, r10, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)=[r0, r4, r0, r11, r0, r8], &(0x7f0000000c00)=[{0x1, 0x5, 0x3, 0xa}, {0x1, 0x4, 0x10, 0x8}, {0x1, 0x1, 0x0, 0xb}, {0x5, 0x3, 0xd, 0x6}, {0x5, 0x3, 0xb, 0x6}, {0x0, 0x1, 0xe, 0x5}, {0x4, 0x5, 0x10, 0x8}, {0x3, 0x2, 0x10, 0x4}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=3064): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 729.069108][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 729.081220][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 729.120615][ T24] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 729.154476][ T24] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 729.170819][ T24] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 729.185161][ T24] usb 2-1: config 128 has no interface number 0 [ 729.191815][ T24] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 729.205000][ T24] usb 2-1: config 128 interface 127 has no altsetting 0 [ 729.215043][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 729.225459][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.233732][ T24] usb 2-1: Product: syz [ 729.238011][ T24] usb 2-1: Manufacturer: syz [ 729.243424][ T24] usb 2-1: SerialNumber: syz [ 729.256279][T14821] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 729.306086][ T5840] usb 4-1: USB disconnect, device number 15 [ 729.399229][ T5931] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 729.558830][ T24] usb 2-1: USB disconnect, device number 35 [ 729.561407][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.579955][ T5931] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 729.613405][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.613839][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.669628][ T5931] usb 5-1: config 0 descriptor?? [ 730.107428][ T5931] razer 0003:1532:010E.0023: unknown main item tag 0x0 [ 730.130879][ T5931] razer 0003:1532:010E.0023: unknown main item tag 0x0 [ 730.144199][ T5931] razer 0003:1532:010E.0023: unknown main item tag 0x0 [ 730.151739][ T5931] razer 0003:1532:010E.0023: unknown main item tag 0x0 [ 730.158659][ T5931] razer 0003:1532:010E.0023: unknown main item tag 0x0 [ 730.308543][ T5931] razer 0003:1532:010E.0023: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 730.379331][T14845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2763'. [ 730.499261][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 730.729106][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 730.738305][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 730.747440][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.782688][ T24] usb 4-1: config 0 descriptor?? [ 731.429346][ T5840] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 731.589142][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 731.602667][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.649251][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.687518][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 731.706559][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.793768][ T5840] usb 2-1: config 0 descriptor?? [ 732.113959][ T5848] Bluetooth: hci4: Unknown advertising packet type: 0x75 [ 732.114001][ T5848] Bluetooth: hci4: adv larger than maximum supported [ 732.122100][ T5848] Bluetooth: hci4: Malformed LE Event: 0x0d [ 732.172294][ T5931] usb 5-1: USB disconnect, device number 25 [ 732.573651][T14872] FAULT_INJECTION: forcing a failure. [ 732.573651][T14872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.622385][T14872] CPU: 0 UID: 0 PID: 14872 Comm: syz.4.2770 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 732.622420][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.622433][T14872] Call Trace: [ 732.622442][T14872] [ 732.622452][T14872] dump_stack_lvl+0x189/0x250 [ 732.622487][T14872] ? __pfx____ratelimit+0x10/0x10 [ 732.622523][T14872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.622553][T14872] ? __pfx__printk+0x10/0x10 [ 732.622577][T14872] ? __might_fault+0xb0/0x130 [ 732.622608][T14872] should_fail_ex+0x414/0x560 [ 732.622639][T14872] _copy_from_user+0x2d/0xb0 [ 732.622662][T14872] snd_seq_oss_write+0x382/0x930 [ 732.622701][T14872] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 732.622734][T14872] ? common_file_perm+0x199/0x200 [ 732.622763][T14872] ? security_file_permission+0x75/0x290 [ 732.622790][T14872] odev_write+0x5a/0x80 [ 732.622814][T14872] ? __pfx_odev_write+0x10/0x10 [ 732.622841][T14872] vfs_write+0x27e/0xa90 [ 732.622881][T14872] ? __pfx_vfs_write+0x10/0x10 [ 732.622912][T14872] ? __fget_files+0x2a/0x420 [ 732.622937][T14872] ? __fget_files+0x2a/0x420 [ 732.622958][T14872] ? __fget_files+0x3a0/0x420 [ 732.622979][T14872] ? __fget_files+0x2a/0x420 [ 732.623011][T14872] ksys_write+0x145/0x250 [ 732.623033][T14872] ? __pfx_ksys_write+0x10/0x10 [ 732.623057][T14872] ? do_syscall_64+0xbe/0x3b0 [ 732.623081][T14872] do_syscall_64+0xfa/0x3b0 [ 732.623099][T14872] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.623137][T14872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.623157][T14872] ? clear_bhb_loop+0x60/0xb0 [ 732.623181][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.623201][T14872] RIP: 0033:0x7f63d1f8e929 [ 732.623220][T14872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.623239][T14872] RSP: 002b:00007f63cfdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.623261][T14872] RAX: ffffffffffffffda RBX: 00007f63d21b6080 RCX: 00007f63d1f8e929 [ 732.623277][T14872] RDX: 0000000000000458 RSI: 0000200000000c00 RDI: 0000000000000003 [ 732.623290][T14872] RBP: 00007f63cfdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 732.623303][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.623315][T14872] R13: 0000000000000001 R14: 00007f63d21b6080 R15: 00007f63d22dfa28 [ 732.623346][T14872] [ 732.863959][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.151856][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 733.536320][ T9] usb 4-1: USB disconnect, device number 16 [ 733.834306][T14883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2775'. [ 733.851095][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 734.080660][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 734.087161][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 734.103388][ T5840] usb 2-1: USB disconnect, device number 36 [ 734.424091][T14894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2776'. [ 734.617259][T14894] lo: entered allmulticast mode [ 734.631045][T14892] lo: left allmulticast mode [ 734.891740][T14900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 734.955609][T14900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.076202][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 735.324355][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 735.628944][T14911] netlink: 'syz.4.2784': attribute type 1 has an invalid length. [ 735.779379][T14913] ip6t_srh: unknown srh match flags B153 [ 735.795287][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2784'. [ 736.109091][ T5840] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 736.269249][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 736.292438][ T5840] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 736.309904][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.327530][ T5840] usb 2-1: Product: syz [ 736.336765][ T5840] usb 2-1: Manufacturer: syz [ 736.346295][ T5840] usb 2-1: SerialNumber: syz [ 736.429140][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 736.446454][ T24] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 736.471642][ T24] usb 4-1: config 0 has no interface number 0 [ 736.517590][ T24] usb 4-1: config 0 interface 106 has no altsetting 0 [ 736.553299][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 736.578639][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.596617][ T5840] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 736.615551][ T24] usb 4-1: Product: syz [ 736.628767][ T5841] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 736.648427][ T24] usb 4-1: Manufacturer: syz [ 736.669757][ T24] usb 4-1: SerialNumber: syz [ 736.717522][ T24] usb 4-1: config 0 descriptor?? [ 736.754294][ T24] cdc_phonet 4-1:0.106: probe with driver cdc_phonet failed with error -22 [ 736.814832][T14917] 8021q: adding VLAN 0 to HW filter on device bond18 [ 736.841386][T14917] bond17: (slave bond18): making interface the new active one [ 736.866447][T14917] bond17: (slave bond18): Enslaving as an active interface with an up link [ 736.902686][T14918] 8021q: adding VLAN 0 to HW filter on device bond17 [ 737.104961][ T24] usb 2-1: USB disconnect, device number 37 [ 738.322980][ T5841] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 738.359281][ T5841] ath9k_htc: Failed to initialize the device [ 738.393543][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 738.993643][ T5841] usb 4-1: USB disconnect, device number 17 [ 739.174351][T13255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.185573][T13255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.199882][T13255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.208290][T13255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.216423][T13255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.379718][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 739.398074][T14942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.467737][T14942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.589596][ T5902] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 739.612084][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.633935][ T9] usb 5-1: config 0 has no interface number 0 [ 739.659401][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 230, changing to 11 [ 739.892102][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8924, setting to 1024 [ 739.904362][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.919028][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 739.919527][ T5902] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 739.941156][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.954563][ T5902] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 739.980741][ T5902] usb 2-1: config 220 descriptor has 1 excess byte, ignoring [ 740.001381][ T5902] usb 2-1: config 220 has no interface number 2 [ 740.010485][ T9] usb 5-1: config 0 descriptor?? [ 740.020232][ T5902] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 740.036417][ T5902] usb 2-1: config 220 interface 0 has no altsetting 0 [ 740.043743][ T5902] usb 2-1: config 220 interface 76 has no altsetting 0 [ 740.050810][ T5902] usb 2-1: config 220 interface 1 has no altsetting 0 [ 740.060964][ T5902] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 740.070614][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.079520][ T5902] usb 2-1: Product: syz [ 740.083885][ T5902] usb 2-1: Manufacturer: syz [ 740.088572][ T5902] usb 2-1: SerialNumber: syz [ 740.360730][ T5902] usb 2-1: selecting invalid altsetting 0 [ 740.384900][T14953] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 740.388534][ T5902] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 740.409764][T10711] bond5: (slave vlan3): Releasing active interface [ 740.428602][ T5902] usb 2-1: No valid video chain found. [ 740.457387][ T5902] usb 2-1: selecting invalid altsetting 0 [ 740.465806][ T5902] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 740.492159][ T5902] usb 2-1: USB disconnect, device number 38 [ 740.517634][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2796'. [ 740.775300][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 740.783157][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 740.860650][ T9] usb 5-1: USB disconnect, device number 26 [ 740.936740][T14955] 8021q: adding VLAN 0 to HW filter on device bond26 [ 740.945198][T14955] bond25: (slave bond26): making interface the new active one [ 740.953913][T14955] bond25: (slave bond26): Enslaving as an active interface with an up link [ 741.105330][T14957] 8021q: adding VLAN 0 to HW filter on device bond25 [ 741.279322][ T5848] Bluetooth: hci5: command tx timeout [ 741.362223][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.565457][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.586896][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 741.683153][T14969] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 741.705750][T14969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2797'. [ 741.814537][T14939] chnl_net:caif_netlink_parms(): no params data found [ 741.819534][ T5841] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 741.928143][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.996334][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 742.019307][ T5841] usb 4-1: not running at top speed; connect to a high speed hub [ 742.036351][ T5841] usb 4-1: config 19 has an invalid interface number: 15 but max is 0 [ 742.078691][ T5841] usb 4-1: config 19 has no interface number 0 [ 742.105822][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.135633][ T5841] usb 4-1: config 19 interface 15 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 742.172286][ T5841] usb 4-1: config 19 interface 15 altsetting 3 endpoint 0x7 has invalid wMaxPacketSize 0 [ 742.223032][ T5841] usb 4-1: config 19 interface 15 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 742.236717][ T5841] usb 4-1: config 19 interface 15 has no altsetting 0 [ 742.257658][ T5841] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=c9.e6 [ 742.267433][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.280412][ T5841] usb 4-1: Product: syz [ 742.287684][ T5841] usb 4-1: Manufacturer: syz [ 742.303184][ T5841] usb 4-1: SerialNumber: syz [ 742.512910][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.547641][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.568228][T14939] bridge_slave_0: entered allmulticast mode [ 742.598563][T14939] bridge_slave_0: entered promiscuous mode [ 742.671631][T14993] vivid-004: disconnect [ 742.677213][T14993] vivid-004: reconnect [ 742.757467][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.789367][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.807671][T14939] bridge_slave_1: entered allmulticast mode [ 742.842712][T14939] bridge_slave_1: entered promiscuous mode [ 743.264266][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.359276][ T5848] Bluetooth: hci5: command tx timeout [ 743.391730][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.567818][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 743.647619][T14939] team0: Port device team_slave_0 added [ 743.696076][T14939] team0: Port device team_slave_1 added [ 743.975945][T14995] 8021q: adding VLAN 0 to HW filter on device bond11 [ 744.097279][ T13] dummy0: left allmulticast mode [ 744.112556][ T13] dummy0: left promiscuous mode [ 744.130587][ T13] bridge0: port 3(dummy0) entered disabled state [ 744.166134][ T13] bridge_slave_1: left allmulticast mode [ 744.179299][ T13] bridge_slave_1: left promiscuous mode [ 744.188619][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.219951][ T13] bridge_slave_0: left allmulticast mode [ 744.237122][ T13] bridge_slave_0: left promiscuous mode [ 744.248294][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.270244][T15001] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 744.413376][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2807'. [ 744.462674][ T5841] usbtest 4-1:19.15: couldn't get endpoints, -22 [ 744.487517][ T5841] usbtest 4-1:19.15: probe with driver usbtest failed with error -22 [ 744.551465][ T5841] usb 4-1: USB disconnect, device number 18 [ 745.439442][ T5848] Bluetooth: hci5: command tx timeout [ 745.579860][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.610810][ T13] bond_slave_0: left promiscuous mode [ 745.626505][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.650821][ T13] bond_slave_1: left promiscuous mode [ 745.660710][ T13] bond0 (unregistering): (slave bond4): Releasing backup interface [ 745.676904][ T13] bond4 (unregistering): left promiscuous mode [ 745.685678][ T13] bond0 (unregistering): Released all slaves [ 745.939482][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 746.099159][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 746.121210][ T24] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 746.165189][ T24] usb 5-1: config 5 has no interface number 0 [ 746.179253][ T24] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 746.228553][ T24] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 746.239399][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 746.266674][ T24] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 746.279846][ T13] bond1 (unregistering): Released all slaves [ 746.299319][ T24] usb 5-1: config 5 interface 168 has no altsetting 0 [ 746.348956][ T24] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 746.361149][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.378578][ T24] usb 5-1: Product: syz [ 746.398827][ T24] usb 5-1: Manufacturer: syz [ 746.413004][ T24] usb 5-1: SerialNumber: syz [ 746.468263][T15021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 746.489243][T15021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 746.678966][ T13] bond2 (unregistering): Released all slaves [ 746.724066][ T13] bond3 (unregistering): Released all slaves [ 746.806329][ C1] usb 5-1: NFC: Urb failure (status -71) [ 746.813964][ C1] usb 5-1: NFC: Urb failure (status -71) [ 746.821697][ T24] usb 5-1: NFC: Unable to get FW version [ 746.827902][ T24] pn533_usb 5-1:5.168: probe with driver pn533_usb failed with error -71 [ 746.865021][ T24] usb 5-1: USB disconnect, device number 27 [ 747.295213][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.301766][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.385018][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.426638][ T13] bond4 (unregistering): Released all slaves [ 747.519233][ T5848] Bluetooth: hci5: command tx timeout [ 747.658505][ T13] bond5 (unregistering): Released all slaves [ 747.792363][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 747.802426][ T13] bond6 (unregistering): Released all slaves [ 747.827841][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.835116][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.861523][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.882852][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.906120][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.932990][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.969184][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 747.977118][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 747.989912][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 748.002231][T15002] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 748.004339][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.004877][T15004] 8021q: adding VLAN 0 to HW filter on device bond12 [ 748.012896][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.012925][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.020906][ T24] usbtmc 5-1:16.0: bulk endpoints not found [ 748.096170][T15032] bridge4: entered promiscuous mode [ 748.118326][T15032] bridge4: entered allmulticast mode [ 748.147080][T15032] team0: Port device bridge4 added [ 748.172517][ T13] tipc: Left network mode [ 748.255932][ T13] IPVS: stopping backup sync thread 9748 ... [ 748.305063][T14939] hsr_slave_0: entered promiscuous mode [ 748.332702][T14939] hsr_slave_1: entered promiscuous mode [ 748.357755][T14939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.375391][T14939] Cannot create hsr debugfs directory [ 749.215016][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 749.234961][T15065] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 749.270937][T15065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2823'. [ 749.378322][T15065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.391773][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 749.403495][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 749.404765][T15065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.435153][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.456805][T15065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.484183][T15065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.562157][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.585399][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.614940][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.635885][T15065] geneve0: entered promiscuous mode [ 749.643376][T15065] team0: Port device geneve0 added [ 749.697377][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 749.726168][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.049608][ T9] usb 2-1: usb_control_msg returned -32 [ 750.057866][ T9] usbtmc 2-1:16.0: can't read capabilities [ 750.593138][ T5841] usb 5-1: USB disconnect, device number 28 [ 750.759174][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 750.989869][ T24] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 751.029408][ T24] usb 4-1: config 0 has no interface number 0 [ 751.070088][ T24] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 751.123885][T15091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2829'. [ 751.134035][ T24] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 751.223650][ T24] usb 4-1: config 0 interface 113 has no altsetting 0 [ 751.299830][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 751.308935][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.442722][ T24] usb 4-1: Product: syz [ 751.446961][ T24] usb 4-1: Manufacturer: syz [ 751.516453][T15096] bridge4: entered promiscuous mode [ 751.521920][ T24] usb 4-1: SerialNumber: syz [ 751.540790][ T24] usb 4-1: config 0 descriptor?? [ 751.602824][ C1] usb 4-1: NFC: Urb failure (status -71) [ 751.617337][ T24] usb 4-1: NFC: Unable to get FW version [ 751.654207][ T24] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 751.686052][T14939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 751.807522][ T13] hsr_slave_0: left promiscuous mode [ 751.821004][ T13] hsr_slave_1: left promiscuous mode [ 751.830360][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.838301][ T24] usb 4-1: USB disconnect, device number 19 [ 751.844511][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.489700][ T24] usb 2-1: USB disconnect, device number 39 [ 753.069155][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 753.269488][ T24] usb 2-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 753.299197][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 753.332831][ T24] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 753.342054][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.357654][ T24] usb 2-1: config 0 descriptor?? [ 753.381932][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 753.777617][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2838'. [ 753.935173][T15132] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[15132] [ 753.951423][T15132] FAULT_INJECTION: forcing a failure. [ 753.951423][T15132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.965074][T15132] CPU: 1 UID: 0 PID: 15132 Comm: syz.3.2837 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 753.965111][T15132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.965124][T15132] Call Trace: [ 753.965133][T15132] [ 753.965143][T15132] dump_stack_lvl+0x189/0x250 [ 753.965179][T15132] ? __pfx____ratelimit+0x10/0x10 [ 753.965210][T15132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.965241][T15132] ? __pfx__printk+0x10/0x10 [ 753.965263][T15132] ? __might_fault+0xb0/0x130 [ 753.965296][T15132] should_fail_ex+0x414/0x560 [ 753.965328][T15132] _copy_from_user+0x2d/0xb0 [ 753.965351][T15132] do_ipv6_setsockopt+0x32d/0x2fb0 [ 753.965391][T15132] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 753.965428][T15132] ? preempt_schedule_irq+0xb5/0x150 [ 753.965456][T15132] ? aa_label_sk_perm+0x413/0x560 [ 753.965483][T15132] ? __pfx___schedule+0x10/0x10 [ 753.965512][T15132] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 753.965557][T15132] ? __pfx___might_resched+0x10/0x10 [ 753.965585][T15132] ? preempt_schedule_irq+0xde/0x150 [ 753.965613][T15132] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 753.965639][T15132] ? rcu_read_lock_any_held+0xb3/0x120 [ 753.965668][T15132] ? irqentry_exit+0x74/0x90 [ 753.965706][T15132] ipv6_setsockopt+0x59/0x170 [ 753.965738][T15132] rawv6_setsockopt+0x23b/0x5b0 [ 753.965771][T15132] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 753.965801][T15132] ? aa_sock_opt_perm+0x74/0x110 [ 753.965826][T15132] ? sock_common_setsockopt+0x36/0xc0 [ 753.965847][T15132] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 753.965871][T15132] do_sock_setsockopt+0x257/0x3e0 [ 753.965900][T15132] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 753.965931][T15132] ? __fget_files+0x2a/0x420 [ 753.965964][T15132] __x64_sys_setsockopt+0x18b/0x220 [ 753.965995][T15132] do_syscall_64+0xfa/0x3b0 [ 753.966017][T15132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.966037][T15132] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 753.966056][T15132] ? clear_bhb_loop+0x60/0xb0 [ 753.966088][T15132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.966108][T15132] RIP: 0033:0x7f468638e929 [ 753.966127][T15132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.966145][T15132] RSP: 002b:00007f46841b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 753.966168][T15132] RAX: ffffffffffffffda RBX: 00007f46865b6160 RCX: 00007f468638e929 [ 753.966183][T15132] RDX: 00000000000000cc RSI: 0000000000000029 RDI: 0000000000000007 [ 753.966196][T15132] RBP: 00007f46841b4090 R08: 000000000000005c R09: 0000000000000000 [ 753.966209][T15132] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 753.966223][T15132] R13: 0000000000000000 R14: 00007f46865b6160 R15: 00007f46866dfa28 [ 753.966256][T15132] [ 755.022339][T14939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 755.085570][T14939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 755.148791][T14939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 755.417002][ T13] IPVS: stop unused estimator thread 0... [ 755.468577][T15142] input: syz0 as /devices/virtual/input/input56 [ 755.578198][T14939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.655096][T14939] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.705128][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.712307][ T9408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.724638][T15151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2841'. [ 755.799781][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.807058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.822888][T15156] FAULT_INJECTION: forcing a failure. [ 755.822888][T15156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.849595][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.4.2842 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 755.849626][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.849638][T15156] Call Trace: [ 755.849647][T15156] [ 755.849656][T15156] dump_stack_lvl+0x189/0x250 [ 755.849691][T15156] ? __pfx____ratelimit+0x10/0x10 [ 755.849723][T15156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.849753][T15156] ? __pfx__printk+0x10/0x10 [ 755.849799][T15156] should_fail_ex+0x414/0x560 [ 755.849832][T15156] _copy_to_user+0x31/0xb0 [ 755.849856][T15156] simple_read_from_buffer+0xe1/0x170 [ 755.849884][T15156] proc_fail_nth_read+0x1df/0x250 [ 755.849914][T15156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.849942][T15156] ? rw_verify_area+0x258/0x650 [ 755.849971][T15156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.849997][T15156] vfs_read+0x200/0x980 [ 755.850032][T15156] ? __pfx___mutex_lock+0x10/0x10 [ 755.850054][T15156] ? __pfx_vfs_read+0x10/0x10 [ 755.850086][T15156] ? __fget_files+0x2a/0x420 [ 755.850113][T15156] ? __fget_files+0x3a0/0x420 [ 755.850134][T15156] ? __fget_files+0x2a/0x420 [ 755.850167][T15156] ksys_read+0x145/0x250 [ 755.850189][T15156] ? __pfx_ksys_read+0x10/0x10 [ 755.850216][T15156] ? rcu_is_watching+0x15/0xb0 [ 755.850253][T15156] ? do_syscall_64+0xbe/0x3b0 [ 755.850278][T15156] do_syscall_64+0xfa/0x3b0 [ 755.850296][T15156] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.850324][T15156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.850344][T15156] ? clear_bhb_loop+0x60/0xb0 [ 755.850370][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.850389][T15156] RIP: 0033:0x7f63d1f8d33c [ 755.850408][T15156] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 755.850426][T15156] RSP: 002b:00007f63cfdd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.850448][T15156] RAX: ffffffffffffffda RBX: 00007f63d21b6080 RCX: 00007f63d1f8d33c [ 755.850463][T15156] RDX: 000000000000000f RSI: 00007f63cfdd50a0 RDI: 0000000000000005 [ 755.850476][T15156] RBP: 00007f63cfdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 755.850489][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.850501][T15156] R13: 0000000000000000 R14: 00007f63d21b6080 R15: 00007f63d22dfa28 [ 755.850534][T15156] [ 756.090131][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.119836][T14939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.130272][T14939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.156555][T14939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.186595][T14939] veth0_vlan: entered promiscuous mode [ 756.196581][T14939] veth1_vlan: entered promiscuous mode [ 756.217205][T14939] veth0_macvtap: entered promiscuous mode [ 756.226204][T14939] veth1_macvtap: entered promiscuous mode [ 756.243870][T14939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.253903][T14939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.263334][T14939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.272215][T14939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.280930][T14939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.289668][T14939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.414431][ T5922] usb 2-1: USB disconnect, device number 40 [ 756.901972][ T9398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.932404][ T9398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.045412][ T9398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.063842][ T9398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.142353][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2849'. [ 757.597448][T15196] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 757.619368][ T5841] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 757.729890][T15196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2852'. [ 757.811634][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 757.811935][T15199] 8021q: adding VLAN 0 to HW filter on device bond7 [ 757.832728][T15199] bond6: (slave bond7): making interface the new active one [ 757.844801][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2852'. [ 757.864393][ T5841] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 757.883021][ T5841] usb 3-1: config 0 has no interface number 0 [ 757.884638][T15199] bond6: (slave bond7): Enslaving as an active interface with an up link [ 757.906080][ T5841] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 757.927518][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.971818][ T5841] usb 3-1: Product: syz [ 757.976057][ T5841] usb 3-1: Manufacturer: syz [ 757.984646][T15203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 758.024338][ T5841] usb 3-1: SerialNumber: syz [ 758.055955][ T5841] usb 3-1: config 0 descriptor?? [ 758.101392][ T5841] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 758.483064][ T5922] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 758.658033][ T5841] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 758.678001][ T5922] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 758.716632][ T5922] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 758.741592][ T5841] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 758.756909][T13255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.766594][T13255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.779361][T13255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.791219][T13255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.817899][ T5922] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 758.828010][T13255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.856428][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.890556][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 758.901368][ T5841] usb 3-1: USB disconnect, device number 31 [ 758.940366][T15208] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 758.965809][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 758.997101][ T5922] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.042198][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 759.055967][ T9408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.077659][ T5841] quatech2 3-1:0.51: device disconnected [ 759.179463][ T5930] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 759.248812][T15208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.325670][T15208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.367986][ T5930] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 759.405196][ T5930] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 759.426085][ T5930] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 759.435597][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.486257][ T9408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.519566][T15217] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 759.671357][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.682838][ T9408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.733086][ T5902] usb 2-1: USB disconnect, device number 41 [ 759.845255][T15227] dvmrp1: entered allmulticast mode [ 760.008311][ T9408] bond0: (slave netdevsim0): Releasing backup interface [ 760.030603][T15217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.053038][ T9408] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 760.093821][ T9408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.147747][T15217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.599082][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 760.726718][T15219] chnl_net:caif_netlink_parms(): no params data found [ 760.755166][ T5930] usb 5-1: USB disconnect, device number 29 [ 760.769467][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 760.907352][ T24] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 760.932688][ T24] usb 2-1: config 5 has no interface number 0 [ 760.959317][T13255] Bluetooth: hci2: command tx timeout [ 760.965041][ T24] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 761.083685][ T24] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 761.130143][T15262] i2c i2c-0: Invalid block write size 34 [ 761.266231][ T24] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 761.298305][ T24] usb 2-1: config 5 interface 168 has no altsetting 0 [ 761.349281][ T24] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 761.377550][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.423825][ T24] usb 2-1: Product: syz [ 761.457407][ T24] usb 2-1: Manufacturer: syz [ 761.479688][ T24] usb 2-1: SerialNumber: syz [ 761.570086][T15247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.592670][T15247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.862704][ T9408] bond19 (unregistering): (slave erspan0): Releasing active interface [ 762.025432][ C1] usb 2-1: NFC: Urb failure (status -71) [ 762.032090][ C1] usb 2-1: NFC: Urb failure (status -71) [ 762.039861][ T24] usb 2-1: NFC: Unable to get FW version [ 762.046161][ T24] pn533_usb 2-1:5.168: probe with driver pn533_usb failed with error -71 [ 762.067305][ T9408] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 762.076753][ T24] usb 2-1: USB disconnect, device number 42 [ 762.214283][ T9408] bond20 (unregistering): (slave gretap2): Releasing active interface [ 762.335347][ T9408] geneve0 (unregistering): left promiscuous mode [ 762.367604][ T9408] team0: Port device geneve0 removed [ 762.438512][T13255] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 762.717250][ T9408] team0: Port device bridge3 removed [ 762.828459][ T9408] team0: Port device bridge4 removed [ 762.889121][ T5902] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 762.937738][ T9408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.039642][T13255] Bluetooth: hci2: command tx timeout [ 763.039935][ T9408] bond_slave_0: left promiscuous mode [ 763.129387][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 763.168134][ T9408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.173318][ T5902] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 763.200076][ T9408] bond_slave_1: left promiscuous mode [ 763.217490][ T5902] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 763.244442][ T9408] bond0 (unregistering): Released all slaves [ 763.283542][ T5902] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 763.302705][ T5902] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 763.335107][ T5902] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 763.413734][ T5902] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 763.429560][ T5931] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 763.449348][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.488518][ T5902] usbtmc 5-1:16.0: bulk endpoints not found [ 763.614176][ T5931] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.629426][ T5931] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 763.642730][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.678827][ T5931] usb 2-1: config 0 descriptor?? [ 763.963994][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 764.290337][ T9408] bond1 (unregistering): Released all slaves [ 764.430318][T15291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 764.437919][T15291] IPv6: NLM_F_CREATE should be set when creating new route [ 764.445265][T15291] IPv6: NLM_F_CREATE should be set when creating new route [ 764.452499][T15291] IPv6: NLM_F_CREATE should be set when creating new route [ 764.526420][ T9408] bond2 (unregistering): (slave bond3): Releasing backup interface [ 764.539652][ T9408] bond2 (unregistering): Released all slaves [ 764.744167][ T9408] bond3 (unregistering): Released all slaves [ 764.859183][ T5931] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 764.896640][ T9408] bond4 (unregistering): Released all slaves [ 765.011271][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 765.028084][ T5931] usb 3-1: config 0 has no interfaces? [ 765.035536][ T9408] bond5 (unregistering): (slave bond6): Releasing backup interface [ 765.045022][ T9408] bond5 (unregistering): Released all slaves [ 765.047666][ T5931] usb 3-1: New USB device found, idVendor=19d2, idProduct=0396, bcdDevice=12.87 [ 765.068436][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.078692][ T5931] usb 3-1: Product: syz [ 765.088873][ T5931] usb 3-1: Manufacturer: syz [ 765.094678][ T5931] usb 3-1: SerialNumber: syz [ 765.118059][ T5931] usb 3-1: config 0 descriptor?? [ 765.123918][T13255] Bluetooth: hci2: command tx timeout [ 765.236856][ T9408] bond6 (unregistering): Released all slaves [ 765.377248][ T9408] bond7 (unregistering): (slave bond8): Releasing backup interface [ 765.388648][ T9408] bond7 (unregistering): Released all slaves [ 765.541543][ T9408] bond8 (unregistering): Released all slaves [ 765.616317][ T24] usb 5-1: USB disconnect, device number 30 [ 765.738530][ T9408] bond9 (unregistering): Released all slaves [ 765.906422][ T9408] bond10 (unregistering): (slave bond11): Releasing backup interface [ 765.917710][ T9408] bond10 (unregistering): Released all slaves [ 766.054898][ T9408] bond11 (unregistering): Released all slaves [ 766.069273][ T9408] bond12 (unregistering): Released all slaves [ 766.086534][ T9408] bond13 (unregistering): Released all slaves [ 766.225469][ T9408] bond14 (unregistering): Released all slaves [ 766.240951][ T9408] bond15 (unregistering): Released all slaves [ 766.255161][ T9408] bond16 (unregistering): Released all slaves [ 766.390801][ T9408] bond17 (unregistering): Released all slaves [ 766.405905][ T9408] bond18 (unregistering): Released all slaves [ 766.544296][ T9408] bond19 (unregistering): Released all slaves [ 766.677892][ T9408] bond20 (unregistering): Released all slaves [ 766.812227][ T9408] bond21 (unregistering): (slave bond22): Releasing backup interface [ 766.821276][ T9408] bond21 (unregistering): Released all slaves [ 766.955516][ T9408] bond22 (unregistering): Released all slaves [ 767.108476][ T9408] bond23 (unregistering): (slave bond24): Releasing backup interface [ 767.118059][ T9408] bond23 (unregistering): Released all slaves [ 767.203114][T13255] Bluetooth: hci2: command tx timeout [ 767.306644][ T9408] bond24 (unregistering): Released all slaves [ 767.429727][ T5931] usb 3-1: USB disconnect, device number 32 [ 767.601775][ T9408] bond25 (unregistering): (slave bond26): Releasing backup interface [ 767.634040][ T9408] bond25 (unregistering): Released all slaves [ 767.871484][ T9408] bond26 (unregistering): Released all slaves [ 768.246143][T15284] usb 2-1: USB disconnect, device number 43 [ 768.351368][T15219] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.358610][T15219] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.370772][T15219] bridge_slave_0: entered allmulticast mode [ 768.380297][ T5931] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 768.398681][T15219] bridge_slave_0: entered promiscuous mode [ 768.412185][T15219] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.431340][T15219] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.447912][T15219] bridge_slave_1: entered allmulticast mode [ 768.467505][T15219] bridge_slave_1: entered promiscuous mode [ 768.500609][ T5922] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 768.583850][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.599573][ T5931] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.634849][ T5931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.647649][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.662081][T15219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.679956][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 768.684139][ T5931] usb 5-1: config 0 descriptor?? [ 768.707415][T15219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.709318][ T5922] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 768.758422][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.788794][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.809112][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.829985][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.857997][ T5922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.867812][ T24] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 768.889024][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.914595][T15219] team0: Port device team_slave_0 added [ 768.927454][ T5922] usbtmc 3-1:16.0: bulk endpoints not found [ 768.944393][ T5841] usb 5-1: USB disconnect, device number 31 [ 768.995441][T15219] team0: Port device team_slave_1 added [ 769.052896][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 769.078450][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 769.112479][ T24] usb 2-1: config 19 has an invalid interface number: 15 but max is 0 [ 769.146882][ T24] usb 2-1: config 19 has no interface number 0 [ 769.159259][ T24] usb 2-1: config 19 interface 15 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 769.177088][ T24] usb 2-1: config 19 interface 15 altsetting 3 endpoint 0x7 has invalid wMaxPacketSize 0 [ 769.187191][ T24] usb 2-1: config 19 interface 15 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.195280][T15219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.202785][ T24] usb 2-1: config 19 interface 15 has no altsetting 0 [ 769.221369][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.254562][T15219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.266186][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=c9.e6 [ 769.275671][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.287575][ T24] usb 2-1: Product: syz [ 769.292111][ T24] usb 2-1: Manufacturer: syz [ 769.301924][T15219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.309239][ T24] usb 2-1: SerialNumber: syz [ 769.330094][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.363319][T15219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.571569][T15219] hsr_slave_0: entered promiscuous mode [ 769.593636][T15219] hsr_slave_1: entered promiscuous mode [ 769.620319][T15342] netlink: 'syz.4.2888': attribute type 1 has an invalid length. [ 769.750931][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2888'. [ 769.801086][ T9408] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 769.829666][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2888'. [ 769.909811][T15346] 8021q: adding VLAN 0 to HW filter on device bond20 [ 769.920639][T15346] bond19: (slave bond20): making interface the new active one [ 769.928938][T15346] bond19: (slave bond20): Enslaving as an active interface with an up link [ 770.055980][T15342] 8021q: adding VLAN 0 to HW filter on device bond19 [ 770.084638][ T9408] tipc: Disabling bearer [ 770.115768][ T9408] tipc: Left network mode [ 771.317659][ T5931] usb 3-1: USB disconnect, device number 33 [ 771.678760][ T24] usbtest 2-1:19.15: couldn't get endpoints, -22 [ 771.686781][ T24] usbtest 2-1:19.15: probe with driver usbtest failed with error -22 [ 771.739644][ T24] usb 2-1: USB disconnect, device number 44 [ 771.979228][ T5840] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 772.172085][ T5840] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 772.199394][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.260786][ T5840] usb 3-1: config 0 descriptor?? [ 772.296995][ T5840] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 772.324381][T15219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 772.471348][ T5840] gp8psk: usb in 128 operation failed. [ 772.500277][ T5840] gp8psk: usb in 137 operation failed. [ 772.609152][ T5840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 772.626908][T15219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.635935][ T5840] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 772.680724][T15219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.754675][ T5840] usb 3-1: USB disconnect, device number 34 [ 772.845897][T15219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 773.029384][ T5902] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 773.224409][ T5902] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 773.271353][ T5902] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 773.321011][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.558944][ T5902] usb 2-1: config 0 descriptor?? [ 773.669532][ T5840] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 773.815173][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 773.849613][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 773.860740][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 773.875535][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.937577][ T5840] usb 3-1: Product: syz [ 773.950319][ T5840] usb 3-1: Manufacturer: syz [ 773.954980][ T5840] usb 3-1: SerialNumber: syz [ 773.990356][ T5840] usb 3-1: config 0 descriptor?? [ 774.224273][ T5840] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 774.484606][ T9408] hsr_slave_0: left promiscuous mode [ 774.506932][ T9408] hsr_slave_1: left promiscuous mode [ 774.528747][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.563515][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.685458][ T9408] pim6reg (unregistering): left allmulticast mode [ 775.406046][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 776.009671][ T5922] usb 2-1: USB disconnect, device number 45 [ 776.391797][ T9408] team_slave_1 (unregistering): left promiscuous mode [ 776.410605][ T5922] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 776.424786][ T9408] team0 (unregistering): Port device team_slave_1 removed [ 776.480593][ T5840] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 776.541634][ T9408] team_slave_0 (unregistering): left promiscuous mode [ 776.556536][ T9408] team0 (unregistering): Port device team_slave_0 removed [ 776.569481][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 776.585476][ T5922] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 776.607601][ T5922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.630843][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 776.659687][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.684072][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.699624][ T5922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 776.708840][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.745564][ T5922] usbtmc 2-1:16.0: bulk endpoints not found [ 777.238297][T15397] geneve1: entered promiscuous mode [ 777.295740][T15428] geneve1: left promiscuous mode [ 777.364961][ T5922] usb 3-1: USB disconnect, device number 35 [ 777.371890][T15219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.446448][T15219] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.528610][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.535902][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.572909][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.580186][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.933221][ T9408] IPVS: stop unused estimator thread 0... [ 777.977434][T15219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.100124][ T5922] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 778.170221][T15219] veth0_vlan: entered promiscuous mode [ 778.195661][T15219] veth1_vlan: entered promiscuous mode [ 778.277734][T15219] veth0_macvtap: entered promiscuous mode [ 778.287997][ T5922] usb 3-1: config 0 has no interfaces? [ 778.298921][T15219] veth1_macvtap: entered promiscuous mode [ 778.316463][ T5922] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 778.332383][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.367585][ T5922] usb 3-1: Product: syz [ 778.382164][ T5922] usb 3-1: Manufacturer: syz [ 778.393584][ T5922] usb 3-1: SerialNumber: syz [ 778.403796][T15219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.433699][T15219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.462571][ T5922] usb 3-1: config 0 descriptor?? [ 778.464984][T15219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.502687][T15219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.513138][T15219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.527743][T15219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.718392][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.799976][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.083046][ T5931] usb 2-1: USB disconnect, device number 46 [ 779.170733][ T9392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.178655][ T9392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.236664][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 779.879804][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2908'. [ 779.959088][ T5931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 780.030381][T15477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.043175][ T5922] usb 3-1: USB disconnect, device number 36 [ 781.149335][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 781.309772][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 781.326626][ T24] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 781.338100][ T24] usb 5-1: config 0 has no interface number 0 [ 781.356334][ T24] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 781.373835][ T24] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 781.395054][ T24] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 781.398935][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2908'. [ 781.406217][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.451094][ T24] usb 5-1: Product: syz [ 781.455493][ T24] usb 5-1: Manufacturer: syz [ 781.464732][ T24] usb 5-1: SerialNumber: syz [ 781.476349][ T24] usb 5-1: config 0 descriptor?? [ 781.500686][T15481] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 781.508630][T15481] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 781.812985][ T24] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 62:d6:1a:ed:73:99 [ 782.000712][ T5922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 782.159457][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 782.176431][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'. [ 782.193957][ T5922] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 782.208926][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.257651][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.288203][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 782.347344][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.393511][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 782.434441][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.478031][ T5922] usbtmc 4-1:16.0: bulk endpoints not found [ 782.842739][T15515] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 782.965368][T15523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2920'. [ 783.012470][T15525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2920'. [ 783.045625][T15519] bond1 (unregistering): Released all slaves [ 783.223974][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.240029][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.250237][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.274922][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.291657][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 783.959466][ T5902] usb 5-1: USB disconnect, device number 32 [ 783.968042][ T5902] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 784.478102][T15532] chnl_net:caif_netlink_parms(): no params data found [ 784.790053][T15284] usb 4-1: USB disconnect, device number 21 [ 784.859814][ T5902] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 785.005992][T15562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2928'. [ 785.026956][T15532] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.037454][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 785.048889][T15532] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.067773][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 785.092487][T15532] bridge_slave_0: entered allmulticast mode [ 785.098726][ T5902] usb 5-1: can't read configurations, error -71 [ 785.121683][T15532] bridge_slave_0: entered promiscuous mode [ 785.211247][T15568] FAULT_INJECTION: forcing a failure. [ 785.211247][T15568] name failslab, interval 1, probability 0, space 0, times 0 [ 785.241851][T15568] CPU: 0 UID: 0 PID: 15568 Comm: syz.2.2927 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 785.241881][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.241894][T15568] Call Trace: [ 785.241902][T15568] [ 785.241911][T15568] dump_stack_lvl+0x189/0x250 [ 785.241948][T15568] ? __pfx____ratelimit+0x10/0x10 [ 785.241979][T15568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.242009][T15568] ? __pfx__printk+0x10/0x10 [ 785.242037][T15568] ? __pfx___might_resched+0x10/0x10 [ 785.242065][T15568] ? fs_reclaim_acquire+0x7d/0x100 [ 785.242096][T15568] should_fail_ex+0x414/0x560 [ 785.242127][T15568] should_failslab+0xa8/0x100 [ 785.242151][T15568] __kmalloc_node_noprof+0xd1/0x4e0 [ 785.242171][T15568] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 785.242199][T15568] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 785.242236][T15568] ? percpu_ref_get_many+0x19/0x140 [ 785.242272][T15568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 785.242296][T15568] ? memcpy_and_pad+0x48/0x80 [ 785.242325][T15568] __vmalloc_node_noprof+0xc2/0x110 [ 785.242342][T15568] ? copy_process+0x54b/0x3c00 [ 785.242356][T15568] ? copy_process+0x54b/0x3c00 [ 785.242375][T15568] dup_task_struct+0x3e7/0x860 [ 785.242398][T15568] copy_process+0x54b/0x3c00 [ 785.242447][T15568] ? __pfx_copy_process+0x10/0x10 [ 785.242478][T15568] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 785.242506][T15568] vhost_task_create+0x1c4/0x290 [ 785.242541][T15568] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 785.242567][T15568] ? __pfx_vhost_task_create+0x10/0x10 [ 785.242596][T15568] ? __pfx_vhost_task_fn+0x10/0x10 [ 785.242628][T15568] ? kasan_save_track+0x4f/0x80 [ 785.242654][T15568] ? kasan_save_track+0x3e/0x80 [ 785.242686][T15568] kvm_mmu_post_init_vm+0x147/0x2b0 [ 785.242717][T15568] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 785.242746][T15568] ? __mutex_trylock_common+0x153/0x260 [ 785.242771][T15568] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 785.242804][T15568] ? rcu_is_watching+0x15/0xb0 [ 785.242834][T15568] ? look_up_lock_class+0x74/0x170 [ 785.242867][T15568] ? register_lock_class+0x51/0x320 [ 785.242902][T15568] ? __lock_acquire+0xab9/0xd20 [ 785.242964][T15568] kvm_vcpu_ioctl+0x95c/0xe90 [ 785.242993][T15568] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 785.243012][T15568] ? __lock_acquire+0xab9/0xd20 [ 785.243064][T15568] ? __fget_files+0x2a/0x420 [ 785.243090][T15568] ? __fget_files+0x2a/0x420 [ 785.243111][T15568] ? __fget_files+0x3a0/0x420 [ 785.243131][T15568] ? __fget_files+0x2a/0x420 [ 785.243154][T15568] ? bpf_lsm_file_ioctl+0x9/0x20 [ 785.243179][T15568] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 785.243198][T15568] __se_sys_ioctl+0xf9/0x170 [ 785.243229][T15568] do_syscall_64+0xfa/0x3b0 [ 785.243247][T15568] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.243275][T15568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.243295][T15568] ? clear_bhb_loop+0x60/0xb0 [ 785.243320][T15568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.243338][T15568] RIP: 0033:0x7f93eb58e929 [ 785.243355][T15568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.243371][T15568] RSP: 002b:00007f93e93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.243391][T15568] RAX: ffffffffffffffda RBX: 00007f93eb7b5fa0 RCX: 00007f93eb58e929 [ 785.243406][T15568] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 785.243419][T15568] RBP: 00007f93e93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 785.243431][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.243443][T15568] R13: 0000000000000000 R14: 00007f93eb7b5fa0 R15: 00007f93eb8dfa28 [ 785.243473][T15568] [ 785.243607][T15568] warn_alloc: 1 callbacks suppressed [ 785.243621][T15568] syz.2.2927: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 785.244311][ T9396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.257789][T15568] ,cpuset= [ 785.379169][ T5848] Bluetooth: hci3: command tx timeout [ 785.412401][T15568] / [ 785.651798][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.674710][T15568] ,mems_allowed=0-1 [ 785.708115][T15562] team0: entered promiscuous mode [ 785.714350][T15562] team_slave_0: entered promiscuous mode [ 785.727145][T15568] CPU: 0 UID: 0 PID: 15568 Comm: syz.2.2927 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 785.727174][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.727188][T15568] Call Trace: [ 785.727197][T15568] [ 785.727207][T15568] dump_stack_lvl+0x189/0x250 [ 785.727252][T15568] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 785.727280][T15568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.727311][T15568] ? __pfx__printk+0x10/0x10 [ 785.727335][T15568] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 785.727358][T15568] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 785.727390][T15568] warn_alloc+0x214/0x310 [ 785.727415][T15568] ? __pfx___might_resched+0x10/0x10 [ 785.727444][T15568] ? fs_reclaim_acquire+0x7d/0x100 [ 785.727472][T15568] ? __pfx_warn_alloc+0x10/0x10 [ 785.727502][T15568] ? rcu_is_watching+0x15/0xb0 [ 785.727534][T15568] ? trace_kmalloc+0x1f/0xd0 [ 785.727550][T15568] ? __kmalloc_node_noprof+0x293/0x4e0 [ 785.727569][T15568] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 785.727599][T15568] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 785.727658][T15568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 785.727685][T15568] ? memcpy_and_pad+0x48/0x80 [ 785.727717][T15568] __vmalloc_node_noprof+0xc2/0x110 [ 785.727739][T15568] ? copy_process+0x54b/0x3c00 [ 785.727757][T15568] ? copy_process+0x54b/0x3c00 [ 785.727779][T15568] dup_task_struct+0x3e7/0x860 [ 785.727806][T15568] copy_process+0x54b/0x3c00 [ 785.727861][T15568] ? __pfx_copy_process+0x10/0x10 [ 785.727897][T15568] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 785.727926][T15568] vhost_task_create+0x1c4/0x290 [ 785.727950][T15568] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 785.727979][T15568] ? __pfx_vhost_task_create+0x10/0x10 [ 785.728012][T15568] ? __pfx_vhost_task_fn+0x10/0x10 [ 785.728049][T15568] ? kasan_save_track+0x4f/0x80 [ 785.728076][T15568] ? kasan_save_track+0x3e/0x80 [ 785.728111][T15568] kvm_mmu_post_init_vm+0x147/0x2b0 [ 785.728146][T15568] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 785.728178][T15568] ? __mutex_trylock_common+0x153/0x260 [ 785.728205][T15568] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 785.728242][T15568] ? rcu_is_watching+0x15/0xb0 [ 785.728272][T15568] ? look_up_lock_class+0x74/0x170 [ 785.728305][T15568] ? register_lock_class+0x51/0x320 [ 785.728340][T15568] ? __lock_acquire+0xab9/0xd20 [ 785.728403][T15568] kvm_vcpu_ioctl+0x95c/0xe90 [ 785.728433][T15568] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 785.728451][T15568] ? __lock_acquire+0xab9/0xd20 [ 785.728501][T15568] ? __fget_files+0x2a/0x420 [ 785.728527][T15568] ? __fget_files+0x2a/0x420 [ 785.728548][T15568] ? __fget_files+0x3a0/0x420 [ 785.728577][T15568] ? __fget_files+0x2a/0x420 [ 785.728604][T15568] ? bpf_lsm_file_ioctl+0x9/0x20 [ 785.728633][T15568] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 785.728665][T15568] __se_sys_ioctl+0xf9/0x170 [ 785.728699][T15568] do_syscall_64+0xfa/0x3b0 [ 785.728718][T15568] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.728747][T15568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.728768][T15568] ? clear_bhb_loop+0x60/0xb0 [ 785.728794][T15568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.728814][T15568] RIP: 0033:0x7f93eb58e929 [ 785.728833][T15568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.728850][T15568] RSP: 002b:00007f93e93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.728874][T15568] RAX: ffffffffffffffda RBX: 00007f93eb7b5fa0 RCX: 00007f93eb58e929 [ 785.728890][T15568] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 785.728903][T15568] RBP: 00007f93e93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 785.728916][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.728929][T15568] R13: 0000000000000000 R14: 00007f93eb7b5fa0 R15: 00007f93eb8dfa28 [ 785.728968][T15568] [ 785.749565][T15562] team_slave_1: entered promiscuous mode [ 785.846300][T15568] Mem-Info: [ 785.853866][T15562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 785.923628][T15568] active_anon:6257 inactive_anon:1 isolated_anon:0 [ 785.923628][T15568] active_file:21842 inactive_file:40173 isolated_file:0 [ 785.923628][T15568] unevictable:768 dirty:247 writeback:0 [ 785.923628][T15568] slab_reclaimable:11768 slab_unreclaimable:106504 [ 785.923628][T15568] mapped:31705 shmem:1363 pagetables:1527 [ 785.923628][T15568] sec_pagetables:0 bounce:0 [ 785.923628][T15568] kernel_misc_reclaimable:0 [ 785.923628][T15568] free:1275354 free_pcp:30580 free_cma:0 [ 785.923690][T15568] Node 0 active_anon:25028kB inactive_anon:4kB active_file:87368kB inactive_file:160488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126820kB dirty:988kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13148kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 785.923746][T15568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 785.923798][T15568] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.923858][T15568] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 785.923913][T15568] Node 0 DMA32 free:1178804kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24980kB inactive_anon:4kB active_file:87368kB inactive_file:158648kB unevictable:1536kB writepending:984kB present:3129332kB managed:2561048kB mlocked:0kB bounce:0kB free_pcp:102380kB local_pcp:36288kB free_cma:0kB [ 785.923976][T15568] lowmem_reserve[]: 0 0 1 1 1 [ 785.924027][T15568] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 785.924086][T15568] lowmem_reserve[]: 0 0 0 [ 786.044008][T15562] team0: left promiscuous mode [ 786.061760][T15568] 0 [ 786.111379][T15562] team_slave_0: left promiscuous mode [ 786.111667][T15562] team_slave_1: left promiscuous mode [ 786.363336][T15568] 0 [ 786.388738][T15568] Node 1 Normal free:3907248kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19932kB local_pcp:8628kB free_cma:0kB [ 786.419936][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.428377][T15568] lowmem_reserve[]: 0 0 0 0 0 [ 786.438028][T15532] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.438877][T15568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 786.458219][T15532] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.458468][T15532] bridge_slave_1: entered allmulticast mode [ 786.460805][T15532] bridge_slave_1: entered promiscuous mode [ 786.471010][T15568] Node 0 DMA32: 1188*4kB (UME) 1254*8kB (UME) 1041*16kB (UME) 276*32kB (UME) 113*64kB (UME) 71*128kB (UME) 36*256kB (UME) 108*512kB (UM) 68*1024kB (UME) 6*2048kB (M) 240*4096kB (UM) = 1186064kB [ 786.509005][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.517124][T15568] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 786.532430][T15568] Node 1 Normal: 184*4kB (UE) 42*8kB (UME) 36*16kB (UME) 158*32kB (UME) 40*64kB (UME) 11*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3907248kB [ 786.533324][ T9396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.566390][T15568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.576355][T15568] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 786.586591][T15568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.596720][T15568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.607812][T15568] 63366 total pagecache pages [ 786.613368][T15568] 1 pages in swap cache [ 786.617751][T15568] Free swap = 124992kB [ 786.622060][T15568] Total swap = 124996kB [ 786.626274][T15568] 2097051 pages RAM [ 786.630395][T15568] 0 pages HighMem/MovableOnly [ 786.635370][T15568] 424683 pages reserved [ 786.684139][T15532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.696615][T15568] 0 pages cma reserved [ 786.786439][ T9396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.871476][T15532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.998112][T15596] FAULT_INJECTION: forcing a failure. [ 786.998112][T15596] name failslab, interval 1, probability 0, space 0, times 0 [ 787.024231][T15596] CPU: 1 UID: 0 PID: 15596 Comm: syz.2.2936 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 787.024278][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 787.024292][T15596] Call Trace: [ 787.024302][T15596] [ 787.024312][T15596] dump_stack_lvl+0x189/0x250 [ 787.024351][T15596] ? __pfx____ratelimit+0x10/0x10 [ 787.024382][T15596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 787.024420][T15596] ? __pfx__printk+0x10/0x10 [ 787.024460][T15596] should_fail_ex+0x414/0x560 [ 787.024495][T15596] should_failslab+0xa8/0x100 [ 787.024519][T15596] kmem_cache_alloc_noprof+0x73/0x3c0 [ 787.024550][T15596] ? skb_clone+0x212/0x3a0 [ 787.024584][T15596] skb_clone+0x212/0x3a0 [ 787.024616][T15596] __netlink_deliver_tap+0x404/0x850 [ 787.024657][T15596] ? netlink_deliver_tap+0x2e/0x1b0 [ 787.024684][T15596] netlink_deliver_tap+0x19c/0x1b0 [ 787.024711][T15596] netlink_sendskb+0x68/0x140 [ 787.024736][T15596] netlink_rcv_skb+0x28c/0x470 [ 787.024762][T15596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.024787][T15596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.024827][T15596] ? netlink_deliver_tap+0x2e/0x1b0 [ 787.024851][T15596] ? netlink_deliver_tap+0x2e/0x1b0 [ 787.024882][T15596] netlink_unicast+0x75b/0x8d0 [ 787.024917][T15596] netlink_sendmsg+0x805/0xb30 [ 787.024954][T15596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.024983][T15596] ? aa_sock_msg_perm+0x94/0x160 [ 787.025012][T15596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 787.025038][T15596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.025065][T15596] __sock_sendmsg+0x219/0x270 [ 787.025100][T15596] ____sys_sendmsg+0x505/0x830 [ 787.025132][T15596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.025170][T15596] ? import_iovec+0x74/0xa0 [ 787.025197][T15596] ___sys_sendmsg+0x21f/0x2a0 [ 787.025226][T15596] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.025303][T15596] ? __fget_files+0x2a/0x420 [ 787.025326][T15596] ? __fget_files+0x3a0/0x420 [ 787.025362][T15596] __x64_sys_sendmsg+0x19b/0x260 [ 787.025392][T15596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.025430][T15596] ? __pfx_ksys_write+0x10/0x10 [ 787.025447][T15596] ? rcu_is_watching+0x15/0xb0 [ 787.025484][T15596] ? do_syscall_64+0xbe/0x3b0 [ 787.025508][T15596] do_syscall_64+0xfa/0x3b0 [ 787.025527][T15596] ? lockdep_hardirqs_on+0x9c/0x150 [ 787.025556][T15596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.025577][T15596] ? clear_bhb_loop+0x60/0xb0 [ 787.025603][T15596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.025623][T15596] RIP: 0033:0x7f93eb58e929 [ 787.025642][T15596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.025660][T15596] RSP: 002b:00007f93e93f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.025685][T15596] RAX: ffffffffffffffda RBX: 00007f93eb7b5fa0 RCX: 00007f93eb58e929 [ 787.025700][T15596] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 787.025713][T15596] RBP: 00007f93e93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 787.025726][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.025738][T15596] R13: 0000000000000000 R14: 00007f93eb7b5fa0 R15: 00007f93eb8dfa28 [ 787.025772][T15596] [ 787.187394][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 787.410315][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 787.439290][ T5848] Bluetooth: hci3: command tx timeout [ 787.474427][T15604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.531122][T15532] team0: Port device team_slave_0 added [ 787.726336][ T9396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.809529][ T5902] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 787.823572][T15532] team0: Port device team_slave_1 added [ 787.963632][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 787.971828][ T5902] usb 5-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 787.996045][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.009636][T15284] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 788.148589][ T5902] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 788.158183][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.166557][ T5902] usb 5-1: Product: syz [ 788.171148][ T5902] usb 5-1: Manufacturer: syz [ 788.175766][ T5902] usb 5-1: SerialNumber: syz [ 788.190227][ T5902] usb 5-1: config 0 descriptor?? [ 788.202483][ T5902] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 788.213572][ T5902] cyphidcom ttyUSB0: required endpoint is missing [ 788.220115][T15284] usb 3-1: Using ep0 maxpacket: 8 [ 788.226867][T15284] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 788.235657][T15284] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.261852][T15284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.290413][T15532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.322941][T15284] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 788.334939][T15532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.360877][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.369484][T15284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 788.448386][T15284] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.462038][T15532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.473035][T15284] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 788.486487][T15284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.534108][T15532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.555165][T15532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.581129][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.596672][T15284] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 788.623734][T15532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.042346][T15532] hsr_slave_0: entered promiscuous mode [ 789.174846][T15532] hsr_slave_1: entered promiscuous mode [ 789.215024][T15532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.249435][T15532] Cannot create hsr debugfs directory [ 789.554643][ T5848] Bluetooth: hci3: command tx timeout [ 790.048251][ T9396] dummy0: left allmulticast mode [ 790.064659][ T9396] bridge0: port 1(dummy0) entered disabled state [ 790.835443][ T24] usb 5-1: USB disconnect, device number 35 [ 790.861990][ T24] cypress_m8 5-1:0.0: device disconnected [ 790.874228][T15635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.907331][ T5840] usb 3-1: USB disconnect, device number 37 [ 791.001706][T15639] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 791.118801][ T9396] bond2 (unregistering): (slave erspan0): Releasing backup interface [ 791.247577][ T9396] dvmrp1 (unregistering): left allmulticast mode [ 791.599574][ T5848] Bluetooth: hci3: command tx timeout [ 791.656652][ T9396] bond0 (unregistering): (slave lo): Releasing backup interface [ 791.667044][ T9396] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 791.678497][ T9396] lo: left promiscuous mode [ 791.713462][ T9396] bond0 (unregistering): Released all slaves [ 791.853992][ T9396] bond1 (unregistering): Released all slaves [ 791.984122][ T9396] bond2 (unregistering): Released all slaves [ 792.129708][ T9396] bond3 (unregistering): Released all slaves [ 792.262329][ T9396] bond4 (unregistering): (slave bond5): Releasing backup interface [ 792.271492][ T9396] bond4 (unregistering): Released all slaves [ 792.402750][ T9396] bond5 (unregistering): Released all slaves [ 792.526419][ T9396] bond6 (unregistering): (slave bond7): Releasing backup interface [ 792.535038][ T9396] bond6 (unregistering): Released all slaves [ 792.664433][ T9396] bond7 (unregistering): Released all slaves [ 792.689612][T15642] erspan0: entered allmulticast mode [ 792.899416][ T9396] : left promiscuous mode [ 792.937182][T15663] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2946'. [ 793.100808][ T9396] IPVS: stopping backup sync thread 9059 ... [ 793.669416][ T5840] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 793.856114][ T5840] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 793.885886][ T5840] usb 4-1: config 0 has no interface number 0 [ 793.900468][ T5840] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 793.942759][ T5840] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25082, setting to 1024 [ 793.991653][ T5840] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.017830][ T5840] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 794.044053][T15681] tipc: New replicast peer: 255.255.255.255 [ 794.051269][T15681] tipc: Enabled bearer , priority 10 [ 794.071522][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.110157][ T5840] usb 4-1: config 0 descriptor?? [ 794.449347][T15284] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 794.525186][T15694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2952'. [ 794.536575][T15532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.584480][T15532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.639822][T15284] usb 5-1: Using ep0 maxpacket: 8 [ 794.652808][T15284] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 794.664349][T15284] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.683827][T15532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.695312][T15284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.725630][T15284] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 794.740919][T15532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.756735][T15284] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 794.771184][ T5840] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0024/input/input57 [ 794.793595][T15284] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.818222][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2953'. [ 794.843400][T15284] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 794.867621][T15284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.922035][T15284] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 794.973502][ T5840] uclogic 0003:28BD:0042.0024: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 795.011783][ T5840] usb 4-1: USB disconnect, device number 22 [ 795.034002][ T9396] hsr_slave_0: left promiscuous mode [ 795.078728][ T9396] hsr_slave_1: left promiscuous mode [ 795.113978][T15706] fido_id[15706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 795.204056][ T9396] pim6reg (unregistering): left allmulticast mode [ 796.613058][T15728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2957'. [ 796.643473][T15532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.694687][T15532] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.717026][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.724312][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.753803][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.761054][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.817119][ T9396] IPVS: stop unused estimator thread 0... [ 796.869540][ T5902] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 797.038501][T15532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.067668][T15727] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2958'. [ 797.103156][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 797.138513][ T5902] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 797.157315][ T5902] usb 4-1: can't read configurations, error -71 [ 797.248483][T15532] veth0_vlan: entered promiscuous mode [ 797.257108][ T24] usb 5-1: USB disconnect, device number 36 [ 797.304231][T15532] veth1_vlan: entered promiscuous mode [ 797.394824][T15532] veth0_macvtap: entered promiscuous mode [ 797.424010][T15532] veth1_macvtap: entered promiscuous mode [ 797.527729][T15532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.542182][T15532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.557550][T15532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.631904][T15532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.710890][T15532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.720201][T15532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.909568][ T5930] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 797.979483][ T30] audit: type=1326 audit(1749691310.599:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15749 comm="syz.3.2961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64d9d8e929 code=0x0 [ 798.104779][ T5930] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.135591][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.166130][ T5930] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 798.189322][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.250618][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.293642][ T5930] usb 5-1: config 0 descriptor?? [ 798.313400][ T9392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.375901][ T9392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.577706][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2959'. [ 798.661902][T15744] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.671156][T15744] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.680013][T15744] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.689720][T15744] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.793522][T15744] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.802940][T15744] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.812033][T15744] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.821777][T15744] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.073944][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2964'. [ 799.669126][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 799.939591][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 799.950345][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 799.959950][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.014452][ T24] usb 4-1: Product: syz [ 800.049346][ T5902] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 800.089156][ T24] usb 4-1: Manufacturer: syz [ 800.094047][ T24] usb 4-1: SerialNumber: syz [ 800.127954][ T24] usb 4-1: config 0 descriptor?? [ 800.186338][ T24] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 800.300217][T15791] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2970'. [ 800.318319][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 800.720102][ T24] gspca_sn9c2028: read1 error -110 [ 800.792194][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 800.807342][ T5902] usb 3-1: can't read configurations, error -71 [ 800.916154][ T24] gspca_sn9c2028: read1 error -32 [ 801.062655][ T24] gspca_sn9c2028: read1 error -32 [ 801.108424][ T24] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 802.379751][T15284] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 802.506759][T11344] usb 5-1: USB disconnect, device number 37 [ 802.587980][T15284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.667937][T15284] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 802.705159][T15284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.769832][T15284] usb 3-1: config 0 descriptor?? [ 802.990284][T15284] usbhid 3-1:0.0: can't add hid device: -71 [ 803.009283][T15284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 803.105040][T15284] usb 3-1: USB disconnect, device number 40 [ 803.295501][ T5930] usb 4-1: USB disconnect, device number 25 [ 803.529252][T15284] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 803.781948][T15284] usb 3-1: Using ep0 maxpacket: 16 [ 803.800170][T15284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 154, changing to 11 [ 803.818399][T15853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2983'. [ 803.832915][T15284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1344, setting to 1024 [ 803.844627][T15284] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 803.853970][T15284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.877904][T15284] usb 3-1: config 0 descriptor?? [ 804.125729][ T9392] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.330331][ T9392] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.388430][T13255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.405103][T13255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.413901][T13255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.423487][T13255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.446075][T13255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 804.453211][ T5922] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 804.463988][ T9392] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.612742][ T5922] usb 4-1: device descriptor read/64, error -71 [ 804.755518][ T9392] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.909092][ T5922] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 805.069291][ T5922] usb 4-1: device descriptor read/64, error -71 [ 805.179635][ T5922] usb usb4-port1: attempt power cycle [ 805.246106][T15865] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 805.266599][T15865] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 805.539898][ T5922] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 805.571166][ T5922] usb 4-1: device descriptor read/8, error -71 [ 805.748867][ T9392] bridge_slave_1: left allmulticast mode [ 805.839121][ T5922] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 805.867165][ T9392] bridge_slave_1: left promiscuous mode [ 805.896346][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.935033][ T5922] usb 4-1: device descriptor read/8, error -71 [ 805.966957][ T9392] bridge_slave_0: left allmulticast mode [ 806.000166][ T9392] bridge_slave_0: left promiscuous mode [ 806.036681][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.066950][ T5922] usb usb4-port1: unable to enumerate USB device [ 806.137094][T15879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2987'. [ 806.464382][T15888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2989'. [ 806.560698][ T5848] Bluetooth: hci0: command tx timeout [ 807.124477][T15893] netlink: 'syz.3.2990': attribute type 10 has an invalid length. [ 807.132520][T15893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2990'. [ 807.463875][ T9392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.473787][ T9392] bond_slave_0: left promiscuous mode [ 807.482290][ T9392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.496092][ T9392] bond_slave_1: left promiscuous mode [ 807.502680][ T9392] bond0 (unregistering): Released all slaves [ 807.658304][ T9392] bond1 (unregistering): Released all slaves [ 807.807712][ T9392] bond2 (unregistering): (slave bond3): Releasing backup interface [ 807.816523][ T9392] bond2 (unregistering): Released all slaves [ 807.963996][ T9392] bond3 (unregistering): Released all slaves [ 808.106994][ T9392] bond4 (unregistering): (slave bond5): Releasing backup interface [ 808.115816][ T9392] bond4 (unregistering): Released all slaves [ 808.263227][ T9392] bond5 (unregistering): Released all slaves [ 808.398508][ T9392] bond6 (unregistering): Released all slaves [ 808.536884][ T9392] bond7 (unregistering): Released all slaves [ 808.640677][ T5848] Bluetooth: hci0: command tx timeout [ 808.685995][ T9392] bond8 (unregistering): Released all slaves [ 808.725577][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.732718][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.837292][ T9392] bond9 (unregistering): Released all slaves [ 808.976206][ T9392] bond10 (unregistering): Released all slaves [ 808.993788][ T9392] bond11 (unregistering): Released all slaves [ 809.010570][ T9392] bond12 (unregistering): Released all slaves [ 809.029811][ T9392] bond13 (unregistering): Released all slaves [ 809.059245][ T9392] bond14 (unregistering): Released all slaves [ 809.197973][ T9392] bond15 (unregistering): (slave bond16): Releasing backup interface [ 809.208375][ T9392] bond15 (unregistering): Released all slaves [ 809.352065][ T9392] bond16 (unregistering): Released all slaves [ 809.515085][ T9392] bond17 (unregistering): (slave bond18): Releasing backup interface [ 809.524482][ T9392] bond17 (unregistering): Released all slaves [ 809.601323][T15284] usbhid 3-1:0.0: can't add hid device: -32 [ 809.608182][T15284] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 809.671828][ T9392] bond18 (unregistering): Released all slaves [ 809.807613][ T9392] bond19 (unregistering): (slave bond20): Releasing backup interface [ 809.816695][ T9392] bond19 (unregistering): Released all slaves [ 809.941472][ T9392] bond20 (unregistering): Released all slaves [ 809.964957][T15887] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 809.966882][T15284] usb 3-1: USB disconnect, device number 41 [ 810.131729][T15893] dummy0: entered promiscuous mode [ 810.141007][T15893] FAULT_INJECTION: forcing a failure. [ 810.141007][T15893] name failslab, interval 1, probability 0, space 0, times 0 [ 810.154092][T15893] CPU: 0 UID: 0 PID: 15893 Comm: syz.3.2990 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 810.154120][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.154133][T15893] Call Trace: [ 810.154141][T15893] [ 810.154150][T15893] dump_stack_lvl+0x189/0x250 [ 810.154185][T15893] ? __pfx____ratelimit+0x10/0x10 [ 810.154217][T15893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.154244][T15893] ? __pfx__printk+0x10/0x10 [ 810.154282][T15893] should_fail_ex+0x414/0x560 [ 810.154313][T15893] should_failslab+0xa8/0x100 [ 810.154336][T15893] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 810.154358][T15893] ? __alloc_skb+0x112/0x2d0 [ 810.154385][T15893] __alloc_skb+0x112/0x2d0 [ 810.154407][T15893] ? __neigh_notify+0x29/0x310 [ 810.154433][T15893] __neigh_notify+0x15c/0x310 [ 810.154461][T15893] neigh_cleanup_and_release+0xb0/0x290 [ 810.154494][T15893] neigh_flush_dev+0x823/0x950 [ 810.154527][T15893] ? neigh_changeaddr+0x23/0x40 [ 810.154560][T15893] neigh_changeaddr+0x30/0x40 [ 810.154589][T15893] ndisc_netdev_event+0x391/0x4d0 [ 810.154616][T15893] notifier_call_chain+0x1b3/0x3e0 [ 810.154656][T15893] __dev_notify_flags+0x21b/0x2e0 [ 810.154685][T15893] ? __pfx___dev_notify_flags+0x10/0x10 [ 810.154707][T15893] ? __dev_change_flags+0x4cc/0x6d0 [ 810.154749][T15893] ? __pfx_task_dead_fair+0x10/0x10 [ 810.154778][T15893] netif_change_flags+0xe8/0x1a0 [ 810.154810][T15893] do_setlink+0xc55/0x41c0 [ 810.154839][T15893] ? trace_sched_exit_tp+0x38/0x120 [ 810.154959][T15893] ? __pfx_do_setlink+0x10/0x10 [ 810.154987][T15893] ? __lock_acquire+0xab9/0xd20 [ 810.155026][T15893] ? do_raw_spin_lock+0x121/0x290 [ 810.155061][T15893] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 810.155090][T15893] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.155119][T15893] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 810.155147][T15893] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 810.155180][T15893] ? rcu_is_watching+0x15/0xb0 [ 810.155213][T15893] ? __mutex_lock+0xa6d/0xe80 [ 810.155234][T15893] ? __mutex_lock+0x51b/0xe80 [ 810.155258][T15893] ? rtnl_setlink+0x4ea/0x900 [ 810.155290][T15893] ? __pfx___mutex_lock+0x10/0x10 [ 810.155320][T15893] ? ns_capable+0x8a/0xf0 [ 810.155359][T15893] rtnl_setlink+0x604/0x900 [ 810.155387][T15893] ? __pfx_rtnl_setlink+0x10/0x10 [ 810.155426][T15893] ? kasan_quarantine_put+0xdd/0x220 [ 810.155547][T15893] ? __pfx_rtnl_setlink+0x10/0x10 [ 810.155569][T15893] rtnetlink_rcv_msg+0x7cc/0xb70 [ 810.155596][T15893] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 810.155617][T15893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 810.155636][T15893] ? ref_tracker_free+0x63a/0x7d0 [ 810.155662][T15893] ? __copy_skb_header+0xa7/0x550 [ 810.155689][T15893] ? __pfx_ref_tracker_free+0x10/0x10 [ 810.155717][T15893] ? __skb_clone+0x63/0x7a0 [ 810.155752][T15893] netlink_rcv_skb+0x208/0x470 [ 810.155777][T15893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 810.155800][T15893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.155838][T15893] ? netlink_deliver_tap+0x2e/0x1b0 [ 810.155873][T15893] ? netlink_deliver_tap+0x2e/0x1b0 [ 810.155902][T15893] netlink_unicast+0x75b/0x8d0 [ 810.155937][T15893] netlink_sendmsg+0x805/0xb30 [ 810.155974][T15893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.156002][T15893] ? aa_sock_msg_perm+0x94/0x160 [ 810.156031][T15893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.156055][T15893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.156081][T15893] __sock_sendmsg+0x219/0x270 [ 810.156115][T15893] ____sys_sendmsg+0x505/0x830 [ 810.156148][T15893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.156186][T15893] ? import_iovec+0x74/0xa0 [ 810.156213][T15893] ___sys_sendmsg+0x21f/0x2a0 [ 810.156241][T15893] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.156310][T15893] ? __fget_files+0x2a/0x420 [ 810.156332][T15893] ? __fget_files+0x3a0/0x420 [ 810.156367][T15893] __x64_sys_sendmsg+0x19b/0x260 [ 810.156396][T15893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.156434][T15893] ? __pfx_ksys_write+0x10/0x10 [ 810.156451][T15893] ? rcu_is_watching+0x15/0xb0 [ 810.156486][T15893] ? do_syscall_64+0xbe/0x3b0 [ 810.156511][T15893] do_syscall_64+0xfa/0x3b0 [ 810.156529][T15893] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.156557][T15893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.156577][T15893] ? clear_bhb_loop+0x60/0xb0 [ 810.156602][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.156620][T15893] RIP: 0033:0x7f64d9d8e929 [ 810.156640][T15893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.156659][T15893] RSP: 002b:00007f64dac4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.156692][T15893] RAX: ffffffffffffffda RBX: 00007f64d9fb6080 RCX: 00007f64d9d8e929 [ 810.156706][T15893] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 810.156719][T15893] RBP: 00007f64dac4d090 R08: 0000000000000000 R09: 0000000000000000 [ 810.156732][T15893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.156744][T15893] R13: 0000000000000000 R14: 00007f64d9fb6080 R15: 00007f64da0dfa28 [ 810.156776][T15893] [ 810.655901][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.681067][T15893] bridge0: port 3(dummy0) entered blocking state [ 810.703926][T15893] bridge0: port 3(dummy0) entered disabled state [ 810.720606][T15893] dummy0: entered allmulticast mode [ 810.729530][ T5848] Bluetooth: hci0: command tx timeout [ 810.765758][T15893] bridge0: port 3(dummy0) entered blocking state [ 810.772344][T15893] bridge0: port 3(dummy0) entered forwarding state [ 810.838552][T15860] chnl_net:caif_netlink_parms(): no params data found [ 810.854786][T15904] vivid-000: disconnect [ 810.872559][T15904] vivid-000: reconnect [ 811.373409][T15912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'. [ 812.240842][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.290492][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.307394][T15860] bridge_slave_0: entered allmulticast mode [ 812.331900][T15860] bridge_slave_0: entered promiscuous mode [ 812.407307][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.440053][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.447373][T15860] bridge_slave_1: entered allmulticast mode [ 812.530929][T15860] bridge_slave_1: entered promiscuous mode [ 812.793431][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.809586][ T5848] Bluetooth: hci0: command tx timeout [ 812.847751][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.907658][T15952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3003'. [ 813.306947][T15860] team0: Port device team_slave_0 added [ 813.374243][T15967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3008'. [ 813.426828][T15860] team0: Port device team_slave_1 added [ 813.539117][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 813.797040][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.814664][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.840627][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.859983][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.877040][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.888865][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 813.904543][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.919835][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.938077][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.963971][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.972378][ T24] usb 4-1: config 0 descriptor?? [ 814.007496][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.232419][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 814.285273][T15975] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 814.295659][T15975] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 814.383457][T15964] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.392432][T15964] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.401223][T15964] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.409942][T15964] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.478091][T15964] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.487467][T15964] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.496543][T15964] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.505447][T15964] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.738524][T15860] hsr_slave_0: entered promiscuous mode [ 814.788154][T15860] hsr_slave_1: entered promiscuous mode [ 814.836168][T15860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.936099][T15860] Cannot create hsr debugfs directory [ 815.097551][T15993] FAULT_INJECTION: forcing a failure. [ 815.097551][T15993] name failslab, interval 1, probability 0, space 0, times 0 [ 815.126366][T15993] CPU: 1 UID: 0 PID: 15993 Comm: syz.1.3013 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 815.126398][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 815.126410][T15993] Call Trace: [ 815.126419][T15993] [ 815.126429][T15993] dump_stack_lvl+0x189/0x250 [ 815.126466][T15993] ? __pfx____ratelimit+0x10/0x10 [ 815.126497][T15993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.126529][T15993] ? __pfx__printk+0x10/0x10 [ 815.126569][T15993] should_fail_ex+0x414/0x560 [ 815.126602][T15993] should_failslab+0xa8/0x100 [ 815.126627][T15993] __kmalloc_cache_noprof+0x70/0x3d0 [ 815.126647][T15993] ? sctp_add_bind_addr+0x8c/0x370 [ 815.126674][T15993] sctp_add_bind_addr+0x8c/0x370 [ 815.126701][T15993] sctp_copy_local_addr_list+0x30b/0x4e0 [ 815.126727][T15993] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 815.126748][T15993] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 815.126776][T15993] ? sctp_v4_is_any+0x35/0x60 [ 815.126798][T15993] ? sctp_copy_one_addr+0x93/0x360 [ 815.126824][T15993] sctp_bind_addr_copy+0xb3/0x3c0 [ 815.126847][T15993] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 815.126880][T15993] sctp_connect_new_asoc+0x2e0/0x690 [ 815.126911][T15993] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 815.126935][T15993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 815.126973][T15993] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 815.127000][T15993] ? security_sctp_bind_connect+0x7e/0x2e0 [ 815.127026][T15993] sctp_sendmsg+0x155c/0x2810 [ 815.127066][T15993] ? __pfx_sctp_sendmsg+0x10/0x10 [ 815.127097][T15993] ? aa_sk_perm+0x81e/0x950 [ 815.127136][T15993] ? __pfx_aa_sk_perm+0x10/0x10 [ 815.127164][T15993] ? sock_rps_record_flow+0x19/0x410 [ 815.127190][T15993] ? inet_sendmsg+0x2f4/0x370 [ 815.127215][T15993] __sock_sendmsg+0x19c/0x270 [ 815.127257][T15993] ____sys_sendmsg+0x505/0x830 [ 815.127290][T15993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.127328][T15993] ? import_iovec+0x74/0xa0 [ 815.127354][T15993] ___sys_sendmsg+0x21f/0x2a0 [ 815.127384][T15993] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.127454][T15993] ? __fget_files+0x2a/0x420 [ 815.127476][T15993] ? __fget_files+0x3a0/0x420 [ 815.127512][T15993] __x64_sys_sendmsg+0x19b/0x260 [ 815.127542][T15993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.127580][T15993] ? __pfx_ksys_write+0x10/0x10 [ 815.127597][T15993] ? rcu_is_watching+0x15/0xb0 [ 815.127633][T15993] ? do_syscall_64+0xbe/0x3b0 [ 815.127658][T15993] do_syscall_64+0xfa/0x3b0 [ 815.127676][T15993] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.127705][T15993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.127726][T15993] ? clear_bhb_loop+0x60/0xb0 [ 815.127751][T15993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.127771][T15993] RIP: 0033:0x7f36cd78e929 [ 815.127791][T15993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.127810][T15993] RSP: 002b:00007f36ce55f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.127833][T15993] RAX: ffffffffffffffda RBX: 00007f36cd9b5fa0 RCX: 00007f36cd78e929 [ 815.127849][T15993] RDX: a97e0bf456fe27b8 RSI: 0000200000001200 RDI: 0000000000000003 [ 815.127863][T15993] RBP: 00007f36ce55f090 R08: 0000000000000000 R09: 0000000000000000 [ 815.127875][T15993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.127888][T15993] R13: 0000000000000000 R14: 00007f36cd9b5fa0 R15: 00007f36cdadfa28 [ 815.127922][T15993] [ 816.289491][ T5902] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 816.465286][T15998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3015'. [ 816.566088][ T9392] hsr_slave_0: left promiscuous mode [ 816.573923][ T9392] hsr_slave_1: left promiscuous mode [ 816.582164][ T9392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.590076][ T9392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.600236][ T9392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.608597][ T9392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.632599][ T9392] veth1_macvtap: left promiscuous mode [ 816.638590][ T9392] veth0_macvtap: left promiscuous mode [ 816.644659][ T9392] veth1_vlan: left promiscuous mode [ 816.650254][ T9392] veth0_vlan: left promiscuous mode [ 816.750756][ T5840] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 816.941138][ T5840] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.969280][ T1226] usb 4-1: USB disconnect, device number 30 [ 816.989044][ T5840] usb 3-1: config 0 has no interface number 0 [ 817.004045][ T5840] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.055086][ T5840] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.065341][ T5840] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 817.112005][ T5840] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 817.142090][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.177837][ T5840] usb 3-1: config 0 descriptor?? [ 817.395387][T16016] vivid-001: disconnect [ 817.482104][T16016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.630863][ T1226] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 817.799099][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 817.825613][ T1226] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 817.825645][ T5840] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0025/input/input58 [ 817.848292][ T1226] usb 4-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config [ 817.866093][ T1226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.889549][ T1226] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.899302][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.927427][ T1226] usb 4-1: Product: syz [ 818.005868][T16008] vivid-001: reconnect [ 818.060209][ T1226] usb 4-1: Manufacturer: syz [ 818.071414][ T5840] uclogic 0003:28BD:0042.0025: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 818.079451][ T1226] usb 4-1: SerialNumber: syz [ 818.193662][ T5840] usb 3-1: USB disconnect, device number 42 [ 818.346717][T16015] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 819.596383][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 819.612556][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 819.636865][ T5902] usb 2-1: can't read configurations, error -71 [ 819.996537][ T1226] usb 4-1: 0:2 : does not exist [ 820.139971][ T1226] usb 4-1: USB disconnect, device number 31 [ 820.547802][ T24] IPVS: starting estimator thread 0... [ 820.679368][T16048] IPVS: using max 23 ests per chain, 55200 per kthread [ 820.930497][ T9392] IPVS: stop unused estimator thread 0... [ 821.234968][T15860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 821.284422][T15860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 821.312790][T15860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 821.343461][T15860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 821.449471][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 821.623371][T16062] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3034'. [ 821.649415][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 821.669491][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 821.687868][ T24] usb 4-1: can't read configurations, error -71 [ 822.201245][T15860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.260808][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.361760][T16096] netlink: 'syz.1.3039': attribute type 6 has an invalid length. [ 822.371194][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.378408][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.387270][T16095] netlink: 'syz.1.3039': attribute type 6 has an invalid length. [ 822.444725][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.451998][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.608332][ T30] audit: type=1800 audit(1749691335.219:1097): pid=16107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3042" name="dmabuf" dev="dmabuf" ino=105 res=0 errno=0 [ 822.868198][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.021362][T15860] veth0_vlan: entered promiscuous mode [ 823.078138][T15860] veth1_vlan: entered promiscuous mode [ 823.096677][T16113] syzkaller1: entered promiscuous mode [ 823.108919][T16113] syzkaller1: entered allmulticast mode [ 823.247804][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3048'. [ 823.346345][T15860] veth0_macvtap: entered promiscuous mode [ 823.435443][T15860] veth1_macvtap: entered promiscuous mode [ 823.516545][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.574344][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.628764][T15860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.677491][T15860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.707811][T15860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.729128][T15860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.731431][ T5902] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 823.942696][T16128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3049'. [ 823.969391][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 823.990060][ T5902] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 824.013770][ T5902] usb 4-1: can't read configurations, error -71 [ 824.063055][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.109112][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.228747][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.249350][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.251211][T16137] netlink: 'syz.1.3051': attribute type 32 has an invalid length. [ 824.734780][T16161] FAULT_INJECTION: forcing a failure. [ 824.734780][T16161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.749098][ T5930] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 824.758363][T16161] CPU: 1 UID: 0 PID: 16161 Comm: syz.2.3055 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 824.758392][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 824.758405][T16161] Call Trace: [ 824.758414][T16161] [ 824.758423][T16161] dump_stack_lvl+0x189/0x250 [ 824.758459][T16161] ? __pfx____ratelimit+0x10/0x10 [ 824.758490][T16161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.758520][T16161] ? __pfx__printk+0x10/0x10 [ 824.758543][T16161] ? __might_fault+0xb0/0x130 [ 824.758576][T16161] should_fail_ex+0x414/0x560 [ 824.758608][T16161] _copy_from_user+0x2d/0xb0 [ 824.758631][T16161] do_sock_getsockopt+0x1cd/0x650 [ 824.758659][T16161] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 824.758685][T16161] ? __pfx_do_syscall_64+0x10/0x10 [ 824.758704][T16161] ? __fget_files+0x3a0/0x420 [ 824.758725][T16161] ? __fget_files+0x2a/0x420 [ 824.758756][T16161] __x64_sys_getsockopt+0x1a5/0x250 [ 824.758781][T16161] ? __pfx_do_syscall_64+0x10/0x10 [ 824.758802][T16161] ? __pfx_do_syscall_64+0x10/0x10 [ 824.758826][T16161] do_syscall_64+0xfa/0x3b0 [ 824.758844][T16161] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.758873][T16161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.758893][T16161] ? clear_bhb_loop+0x60/0xb0 [ 824.758928][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.758954][T16161] RIP: 0033:0x7f93eb58e929 [ 824.758974][T16161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.758991][T16161] RSP: 002b:00007f93e93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 824.759014][T16161] RAX: ffffffffffffffda RBX: 00007f93eb7b5fa0 RCX: 00007f93eb58e929 [ 824.759030][T16161] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 824.759043][T16161] RBP: 00007f93e93f6090 R08: 0000200000000480 R09: 0000000000000000 [ 824.759056][T16161] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.759068][T16161] R13: 0000000000000000 R14: 00007f93eb7b5fa0 R15: 00007f93eb8dfa28 [ 824.759101][T16161] [ 825.122669][ T5930] usb 5-1: device descriptor read/64, error -71 [ 825.396040][ T5930] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 825.407225][T16174] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3057'. [ 825.541857][ T5930] usb 5-1: device descriptor read/64, error -71 [ 825.649513][ T5930] usb usb5-port1: attempt power cycle [ 826.009995][ T5930] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 826.035492][ T5930] usb 5-1: device descriptor read/8, error -71 [ 826.289778][ T5930] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 826.336694][ T5930] usb 5-1: device descriptor read/8, error -71 [ 826.460072][ T5930] usb usb5-port1: unable to enumerate USB device [ 826.911663][ T5930] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 826.937257][T16214] netlink: 'syz.0.3063': attribute type 10 has an invalid length. [ 827.021813][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.065694][T16214] team0: entered promiscuous mode [ 827.089140][ T5930] usb 3-1: device descriptor read/64, error -71 [ 827.103015][T16214] team_slave_0: entered promiscuous mode [ 827.109693][T16214] team_slave_1: entered promiscuous mode [ 827.115674][T16214] vlan2: entered promiscuous mode [ 827.121755][T16214] [ 827.124123][T16214] ====================================================== [ 827.131239][T16214] WARNING: possible circular locking dependency detected [ 827.138261][T16214] 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 Not tainted [ 827.145382][T16214] ------------------------------------------------------ [ 827.152405][T16214] syz.0.3063/16214 is trying to acquire lock: [ 827.158474][T16214] ffff888055d68d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 827.168955][T16214] [ 827.168955][T16214] but task is already holding lock: [ 827.176327][T16214] ffff88807a8f8e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 827.186460][T16214] [ 827.186460][T16214] which lock already depends on the new lock. [ 827.186460][T16214] [ 827.196874][T16214] [ 827.196874][T16214] the existing dependency chain (in reverse order) is: [ 827.205904][T16214] [ 827.205904][T16214] -> #1 (team->team_lock_key#4){+.+.}-{4:4}: [ 827.214107][T16214] lock_acquire+0x120/0x360 [ 827.219161][T16214] __mutex_lock+0x182/0xe80 [ 827.224196][T16214] team_device_event+0x182/0xa20 [ 827.229672][T16214] notifier_call_chain+0x1b3/0x3e0 [ 827.235324][T16214] dev_close_many+0x29c/0x410 [ 827.240532][T16214] vlan_device_event+0x1748/0x1d00 [ 827.246180][T16214] notifier_call_chain+0x1b3/0x3e0 [ 827.251838][T16214] __dev_notify_flags+0x18d/0x2e0 [ 827.257396][T16214] netif_change_flags+0xe8/0x1a0 [ 827.262867][T16214] do_setlink+0xc55/0x41c0 [ 827.267812][T16214] rtnl_newlink+0x160b/0x1c70 [ 827.273025][T16214] rtnetlink_rcv_msg+0x7cc/0xb70 [ 827.278491][T16214] netlink_rcv_skb+0x208/0x470 [ 827.283789][T16214] netlink_unicast+0x75b/0x8d0 [ 827.289094][T16214] netlink_sendmsg+0x805/0xb30 [ 827.294390][T16214] __sock_sendmsg+0x219/0x270 [ 827.299605][T16214] ____sys_sendmsg+0x505/0x830 [ 827.304902][T16214] ___sys_sendmsg+0x21f/0x2a0 [ 827.310111][T16214] __x64_sys_sendmsg+0x19b/0x260 [ 827.315582][T16214] do_syscall_64+0xfa/0x3b0 [ 827.320613][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.327033][T16214] [ 827.327033][T16214] -> #0 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 827.335571][T16214] validate_chain+0xb9b/0x2140 [ 827.340865][T16214] __lock_acquire+0xab9/0xd20 [ 827.346076][T16214] lock_acquire+0x120/0x360 [ 827.351111][T16214] __mutex_lock+0x182/0xe80 [ 827.356140][T16214] dev_set_promiscuity+0x10e/0x260 [ 827.361787][T16214] __dev_set_promiscuity+0x534/0x740 [ 827.367610][T16214] netif_set_promiscuity+0x50/0xe0 [ 827.373253][T16214] dev_set_promiscuity+0x126/0x260 [ 827.378899][T16214] team_change_rx_flags+0x123/0x220 [ 827.384634][T16214] __dev_set_promiscuity+0x534/0x740 [ 827.390459][T16214] netif_set_promiscuity+0x50/0xe0 [ 827.396100][T16214] dev_set_promiscuity+0x126/0x260 [ 827.401741][T16214] bond_enslave+0x2ad2/0x3a20 [ 827.406950][T16214] do_set_master+0x530/0x6d0 [ 827.412071][T16214] do_setlink+0xcf0/0x41c0 [ 827.417015][T16214] rtnl_newlink+0x160b/0x1c70 [ 827.422222][T16214] rtnetlink_rcv_msg+0x7cc/0xb70 [ 827.427686][T16214] netlink_rcv_skb+0x208/0x470 [ 827.432986][T16214] netlink_unicast+0x75b/0x8d0 [ 827.438276][T16214] netlink_sendmsg+0x805/0xb30 [ 827.443573][T16214] __sock_sendmsg+0x219/0x270 [ 827.448793][T16214] ____sys_sendmsg+0x505/0x830 [ 827.454093][T16214] ___sys_sendmsg+0x21f/0x2a0 [ 827.459300][T16214] __x64_sys_sendmsg+0x19b/0x260 [ 827.464769][T16214] do_syscall_64+0xfa/0x3b0 [ 827.469803][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.476238][T16214] [ 827.476238][T16214] other info that might help us debug this: [ 827.476238][T16214] [ 827.486470][T16214] Possible unsafe locking scenario: [ 827.486470][T16214] [ 827.494020][T16214] CPU0 CPU1 [ 827.499398][T16214] ---- ---- [ 827.504781][T16214] lock(team->team_lock_key#4); [ 827.509755][T16214] lock(&dev_instance_lock_key#20); [ 827.517586][T16214] lock(team->team_lock_key#4); [ 827.525070][T16214] lock(&dev_instance_lock_key#20); [ 827.530415][T16214] [ 827.530415][T16214] *** DEADLOCK *** [ 827.530415][T16214] [ 827.538571][T16214] 2 locks held by syz.0.3063/16214: [ 827.543803][T16214] #0: ffffffff8f510048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 827.552891][T16214] #1: ffff88807a8f8e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 827.563458][T16214] [ 827.563458][T16214] stack backtrace: [ 827.569360][T16214] CPU: 0 UID: 0 PID: 16214 Comm: syz.0.3063 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 827.569382][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.569392][T16214] Call Trace: [ 827.569399][T16214] [ 827.569406][T16214] dump_stack_lvl+0x189/0x250 [ 827.569435][T16214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.569460][T16214] ? __pfx__printk+0x10/0x10 [ 827.569478][T16214] ? print_lock_name+0xde/0x100 [ 827.569494][T16214] print_circular_bug+0x2ee/0x310 [ 827.569512][T16214] check_noncircular+0x134/0x160 [ 827.569530][T16214] validate_chain+0xb9b/0x2140 [ 827.569545][T16214] ? console_unlock+0x21b/0x270 [ 827.569561][T16214] ? __pfx_console_unlock+0x10/0x10 [ 827.569577][T16214] ? irq_work_queue+0xbc/0x140 [ 827.569602][T16214] __lock_acquire+0xab9/0xd20 [ 827.569626][T16214] ? dev_set_promiscuity+0x10e/0x260 [ 827.569646][T16214] lock_acquire+0x120/0x360 [ 827.569667][T16214] ? dev_set_promiscuity+0x10e/0x260 [ 827.569690][T16214] __mutex_lock+0x182/0xe80 [ 827.569705][T16214] ? dev_set_promiscuity+0x10e/0x260 [ 827.569727][T16214] ? dev_set_promiscuity+0x10e/0x260 [ 827.569746][T16214] ? __pfx___mutex_lock+0x10/0x10 [ 827.569760][T16214] ? netdev_info+0x10a/0x160 [ 827.569781][T16214] ? __pfx_netdev_info+0x10/0x10 [ 827.569803][T16214] dev_set_promiscuity+0x10e/0x260 [ 827.569824][T16214] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 827.569853][T16214] __dev_set_promiscuity+0x534/0x740 [ 827.569872][T16214] ? do_raw_spin_unlock+0x122/0x240 [ 827.569891][T16214] netif_set_promiscuity+0x50/0xe0 [ 827.569911][T16214] dev_set_promiscuity+0x126/0x260 [ 827.569931][T16214] team_change_rx_flags+0x123/0x220 [ 827.569958][T16214] ? __pfx_team_change_rx_flags+0x10/0x10 [ 827.569983][T16214] __dev_set_promiscuity+0x534/0x740 [ 827.570004][T16214] netif_set_promiscuity+0x50/0xe0 [ 827.570024][T16214] dev_set_promiscuity+0x126/0x260 [ 827.570044][T16214] bond_enslave+0x2ad2/0x3a20 [ 827.570073][T16214] ? __pfx_bond_enslave+0x10/0x10 [ 827.570097][T16214] ? __pfx___dev_change_flags+0x10/0x10 [ 827.570117][T16214] ? mutex_is_locked+0x17/0x50 [ 827.570133][T16214] do_set_master+0x530/0x6d0 [ 827.570154][T16214] do_setlink+0xcf0/0x41c0 [ 827.570177][T16214] ? __pfx_do_setlink+0x10/0x10 [ 827.570196][T16214] ? _printk+0xcf/0x120 [ 827.570211][T16214] ? __pfx____ratelimit+0x10/0x10 [ 827.570237][T16214] ? __lock_acquire+0xab9/0xd20 [ 827.570261][T16214] ? __mutex_trylock_common+0x153/0x260 [ 827.570278][T16214] ? __pfx___mutex_trylock_common+0x10/0x10 [ 827.570295][T16214] ? rcu_is_watching+0x15/0xb0 [ 827.570320][T16214] ? trace_contention_end+0x39/0x120 [ 827.570336][T16214] ? __mutex_lock+0x330/0xe80 [ 827.570351][T16214] ? __pfx_aa_get_newest_label+0x10/0x10 [ 827.570373][T16214] ? rtnl_newlink+0x8db/0x1c70 [ 827.570390][T16214] ? rcu_is_watching+0x15/0xb0 [ 827.570413][T16214] ? __pfx___mutex_lock+0x10/0x10 [ 827.570431][T16214] ? ns_capable+0x8a/0xf0 [ 827.570454][T16214] ? rtnl_link_get_net_capable+0x16a/0x350 [ 827.570475][T16214] rtnl_newlink+0x160b/0x1c70 [ 827.570491][T16214] ? netlink_sendmsg+0x805/0xb30 [ 827.570513][T16214] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.570537][T16214] ? kasan_quarantine_put+0xdd/0x220 [ 827.570561][T16214] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.570586][T16214] ? nlmon_xmit+0xb0/0x100 [ 827.570609][T16214] ? kmem_cache_free+0x18f/0x400 [ 827.570628][T16214] ? __local_bh_enable_ip+0x12d/0x1c0 [ 827.570652][T16214] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.570675][T16214] ? __local_bh_enable_ip+0x12d/0x1c0 [ 827.570698][T16214] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 827.570723][T16214] ? __dev_queue_xmit+0x27e/0x3a70 [ 827.570749][T16214] ? __lock_acquire+0xab9/0xd20 [ 827.570778][T16214] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.570795][T16214] rtnetlink_rcv_msg+0x7cc/0xb70 [ 827.570813][T16214] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 827.570829][T16214] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.570852][T16214] ? ref_tracker_free+0x63a/0x7d0 [ 827.570874][T16214] ? __copy_skb_header+0xa7/0x550 [ 827.570896][T16214] ? __pfx_ref_tracker_free+0x10/0x10 [ 827.570917][T16214] ? __skb_clone+0x63/0x7a0 [ 827.570940][T16214] netlink_rcv_skb+0x208/0x470 [ 827.570959][T16214] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.570977][T16214] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 827.570998][T16214] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.571017][T16214] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.571036][T16214] netlink_unicast+0x75b/0x8d0 [ 827.571057][T16214] netlink_sendmsg+0x805/0xb30 [ 827.571078][T16214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.571099][T16214] ? aa_sock_msg_perm+0x94/0x160 [ 827.571119][T16214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 827.571140][T16214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.571159][T16214] __sock_sendmsg+0x219/0x270 [ 827.571185][T16214] ____sys_sendmsg+0x505/0x830 [ 827.571207][T16214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 827.571229][T16214] ? import_iovec+0x74/0xa0 [ 827.571246][T16214] ___sys_sendmsg+0x21f/0x2a0 [ 827.571266][T16214] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.571296][T16214] ? __fget_files+0x2a/0x420 [ 827.571313][T16214] ? __fget_files+0x3a0/0x420 [ 827.571333][T16214] __x64_sys_sendmsg+0x19b/0x260 [ 827.571354][T16214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 827.571380][T16214] ? do_syscall_64+0xbe/0x3b0 [ 827.571396][T16214] do_syscall_64+0xfa/0x3b0 [ 827.571410][T16214] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.571433][T16214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.571449][T16214] ? clear_bhb_loop+0x60/0xb0 [ 827.571467][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.571483][T16214] RIP: 0033:0x7f7b73b8e929 [ 827.571499][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.571513][T16214] RSP: 002b:00007f7b74a82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.571531][T16214] RAX: ffffffffffffffda RBX: 00007f7b73db5fa0 RCX: 00007f7b73b8e929 [ 827.571543][T16214] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 827.571554][T16214] RBP: 00007f7b73c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 827.571565][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.571575][T16214] R13: 0000000000000000 R14: 00007f7b73db5fa0 R15: 00007f7b73edfa28 [ 827.571592][T16214] [ 828.177580][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 828.270063][T16214] bond0: (slave team0): Enslaving as an active interface with an up link [ 828.412863][ T5930] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 828.420553][ T5902] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 829.063423][ T3535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.159883][ T7461] bond7: (slave vlan3): Releasing active interface [ 829.180770][ T3535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.273101][ T3535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.338627][ T3535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.461029][ T3535] dummy0: left allmulticast mode [ 829.472120][ T3535] bridge0: port 3(dummy0) entered disabled state [ 829.481012][ T3535] bridge_slave_1: left allmulticast mode [ 829.486690][ T3535] bridge_slave_1: left promiscuous mode [ 829.498233][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.508309][ T3535] bridge_slave_0: left allmulticast mode [ 829.514791][ T3535] bridge_slave_0: left promiscuous mode [ 829.520850][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.634711][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.645734][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.655391][ T3535] bond0 (unregistering): Released all slaves [ 829.664389][ T3535] bond1 (unregistering): Released all slaves [ 829.894990][ T3535] hsr_slave_0: left promiscuous mode [ 829.903318][ T3535] hsr_slave_1: left promiscuous mode [ 829.912878][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.922038][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.931948][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.939739][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.953060][ T3535] veth1_macvtap: left promiscuous mode [ 829.958610][ T3535] veth0_macvtap: left promiscuous mode [ 829.964540][ T3535] veth1_vlan: left promiscuous mode [ 829.970391][ T3535] veth0_vlan: left promiscuous mode [ 830.128493][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 830.155875][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 830.528231][ T3535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.597402][ T3535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.671684][ T3535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.751098][ T3535] vlan2 (unregistering): left promiscuous mode [ 830.758279][ T3535] team0: Port device vlan2 removed [ 830.767675][ T3535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.876964][ T3535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.951748][ T3535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.994225][ T3535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.077255][ T3535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.211408][ T3535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.264480][ T3535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.304617][ T3535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.364930][ T3535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.458331][ T3535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.504441][ T3535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.548492][ T3535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.622262][ T3535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.696090][ T3535] bridge_slave_1: left allmulticast mode [ 831.702013][ T3535] bridge_slave_1: left promiscuous mode [ 831.708506][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.722032][ T3535] bridge_slave_0: left allmulticast mode [ 831.727684][ T3535] bridge_slave_0: left promiscuous mode [ 831.733730][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.745486][ T3535] bridge_slave_1: left allmulticast mode [ 831.751480][ T3535] bridge_slave_1: left promiscuous mode [ 831.757181][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.769801][ T3535] bridge_slave_0: left allmulticast mode [ 831.775494][ T3535] bridge_slave_0: left promiscuous mode [ 831.784111][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.794117][ T3535] bridge_slave_1: left allmulticast mode [ 831.801847][ T3535] bridge_slave_1: left promiscuous mode [ 831.807580][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.816823][ T3535] bridge_slave_0: left allmulticast mode [ 831.824508][ T3535] bridge_slave_0: left promiscuous mode [ 831.832368][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.844237][ T3535] bridge_slave_1: left allmulticast mode [ 831.850044][ T3535] bridge_slave_1: left promiscuous mode [ 831.855820][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.867020][ T3535] bridge_slave_0: left allmulticast mode [ 831.873027][ T3535] bridge_slave_0: left promiscuous mode [ 831.878736][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.013700][ T3535] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 832.123994][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.132801][ T3535] bond_slave_0: left promiscuous mode [ 832.142537][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.151382][ T3535] bond_slave_1: left promiscuous mode [ 832.157835][ T3535] bond0 (unregistering): (slave team0): Releasing backup interface [ 832.167686][ T3535] team0: left promiscuous mode [ 832.173967][ T3535] team_slave_0: left promiscuous mode [ 832.179671][ T3535] team_slave_1: left promiscuous mode [ 832.186290][ T3535] bond0 (unregistering): Released all slaves [ 832.299215][ T3535] bond1 (unregistering): Released all slaves [ 832.311404][ T3535] bond2 (unregistering): (slave bond3): Releasing backup interface [ 832.321309][ T3535] bond2 (unregistering): Released all slaves [ 832.435435][ T3535] bond3 (unregistering): Released all slaves [ 832.448140][ T3535] bond4 (unregistering): (slave bond5): Releasing backup interface [ 832.456575][ T3535] bond4 (unregistering): Released all slaves [ 832.568560][ T3535] bond5 (unregistering): Released all slaves [ 832.680033][ T3535] bond6 (unregistering): Released all slaves [ 832.692644][ T3535] bond7 (unregistering): Released all slaves [ 832.804064][ T3535] bond8 (unregistering): Released all slaves [ 832.815422][ T3535] bond9 (unregistering): (slave bond10): Releasing backup interface [ 832.824506][ T3535] bond9 (unregistering): Released all slaves [ 832.935857][ T3535] bond10 (unregistering): Released all slaves [ 833.043893][ T3535] bond11 (unregistering): Released all slaves [ 833.151809][ T3535] bond12 (unregistering): Released all slaves [ 833.186232][ T3535] dvmrp1 (unregistering): left allmulticast mode [ 833.265152][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.274939][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.284644][ T3535] bond0 (unregistering): Released all slaves [ 833.360841][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.373542][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.383528][ T3535] bond0 (unregistering): Released all slaves [ 833.475300][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.485357][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.495589][ T3535] bond0 (unregistering): Released all slaves [ 833.632042][ T3535] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 833.687051][ T3535] tipc: Disabling bearer [ 833.700949][ T3535] tipc: Disabling bearer [ 833.706807][ T3535] tipc: Left network mode [ 834.367117][ T3535] hsr_slave_0: left promiscuous mode [ 834.373329][ T3535] hsr_slave_1: left promiscuous mode [ 834.381332][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.388817][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.397733][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.408132][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.421875][ T3535] hsr_slave_0: left promiscuous mode [ 834.427735][ T3535] hsr_slave_1: left promiscuous mode [ 834.433864][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.443094][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.451079][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.458529][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.473741][ T3535] hsr_slave_0: left promiscuous mode [ 834.481329][ T3535] hsr_slave_1: left promiscuous mode [ 834.487099][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.494620][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.502859][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.511697][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.527577][ T3535] hsr_slave_0: left promiscuous mode [ 834.537096][ T3535] hsr_slave_1: left promiscuous mode [ 834.543271][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.552225][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.560101][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.567527][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.583601][ T3535] veth1_macvtap: left promiscuous mode [ 834.592998][ T3535] veth0_macvtap: left promiscuous mode [ 834.598580][ T3535] veth1_vlan: left promiscuous mode [ 834.604488][ T3535] veth0_vlan: left promiscuous mode [ 834.610650][ T3535] veth1_macvtap: left promiscuous mode [ 834.616154][ T3535] veth0_macvtap: left promiscuous mode [ 834.621815][ T3535] veth1_vlan: left promiscuous mode [ 834.627087][ T3535] veth0_vlan: left promiscuous mode [ 834.633215][ T3535] veth1_macvtap: left promiscuous mode [ 834.638716][ T3535] veth0_macvtap: left promiscuous mode [ 834.644424][ T3535] veth1_vlan: left promiscuous mode [ 834.649819][ T3535] veth0_vlan: left promiscuous mode [ 834.655691][ T3535] veth1_macvtap: left promiscuous mode [ 834.661423][ T3535] veth0_macvtap: left promiscuous mode [ 834.666963][ T3535] veth1_vlan: left promiscuous mode [ 834.672273][ T3535] veth0_vlan: left promiscuous mode [ 834.943729][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 834.969015][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 835.256582][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 835.282836][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 835.427577][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 835.454856][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 835.597462][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 835.625508][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 836.592021][ T3535] IPVS: stop unused estimator thread 0...