last executing test programs: 2m26.102186773s ago: executing program 1 (id=3117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100aee2, 0x0, 0xfffffffe, 0x24e, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40400420}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xc0, 0x1, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x804) write$tun(r0, 0x0, 0x0) 2m24.849530312s ago: executing program 1 (id=3119): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x40, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x7, '\x00', [@generic={0x31, 0x36, "b04faa6f243a113a3fbf8e044fb9f8335c53a9f67412bf5970cb6ec8ce2900ffba087c7de1a271084cad038ef0720635b93832241def"}]}]}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) io_setup(0x7ff, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x300, 0x2000}, 0x4) io_submit(r6, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400950000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x3, 0x8) syz_usb_control_io$uac1(r9, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0xce7ed956892faa36, 0xe, 0xd, {0xd, 0x22, "d9b21577d8dfcf3d9c5710"}}, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x2, "1b69"}, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)="ec", 0x1}], 0x2) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x720, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b", @ANYRES32=0x0, @ANYBLOB="67a9fde50000"], 0x3}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r11, 0xc0096616, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) splice(r0, 0x0, r11, 0x0, 0x4ffe6, 0x0) 2m21.110009562s ago: executing program 1 (id=3133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0xe, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba8983b4a8d4c62f67d5becb53869dc8dd9b8a1d738866895205b82b4475f294961a0570ddec94310739a703276011c31635de2915a189f9d24d72bc74046c78c8a26a8cde0ec428758fa95acb71a9d1181a65f6ae52f5b69fabc3453b5a20976c04e96bf2d2662be38807cc8dda8bac28cd613e5e990e10a0e47e3df3c1aff4b957aa3ceb26bcd353ee7d9a34ba18825d3b329200740c53900fbc8c2eba76d82eca669116c67784b8ac3cbd3d85bc4f8ba73bce342f5e853731e5b1914250167013f", 0xe3}], 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) r5 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001080)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, 0x10) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff9202"]) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x120, 0x11, 0x148, 0x120, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0x9, 0x2], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 2m16.82007887s ago: executing program 1 (id=3145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 2m16.468052188s ago: executing program 1 (id=3147): r0 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x801c581f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x200d, 0xfff, 0x7, {0x4, 0x640}}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000140)='uid_map\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000fd09000084000000050100005f88fb141cdb8d3ae6a8fdab69ea2406aea20d6cc9474eff8423636172a5c63414008447b79a4a7cadda10cdf83c4118ebccfb1279367b3c90e178fd09a7ef2047c3a88e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) r8 = add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0xffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 2m16.031697925s ago: executing program 1 (id=3151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa3", 0x29}, {0x0}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260b", 0x85, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x403, 0x5}}) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) read$FUSE(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') 2m15.090012555s ago: executing program 32 (id=3151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa3", 0x29}, {0x0}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260b", 0x85, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x403, 0x5}}) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) read$FUSE(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') 1m30.243554111s ago: executing program 4 (id=3323): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x40, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x7, '\x00', [@generic={0x31, 0x36, "b04faa6f243a113a3fbf8e044fb9f8335c53a9f67412bf5970cb6ec8ce2900ffba087c7de1a271084cad038ef0720635b93832241def"}]}]}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) io_setup(0x7ff, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x300, 0x2000}, 0x4) io_submit(r6, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400950000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x3, 0x8) syz_usb_control_io$uac1(r9, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0xce7ed956892faa36, 0xe, 0xd, {0xd, 0x22, "d9b21577d8dfcf3d9c5710"}}, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x2, "1b69"}, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000080)="ec", 0x1}], 0x2) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x720, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r11, 0xc0096616, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) splice(r0, 0x0, r11, 0x0, 0x4ffe6, 0x0) 1m26.961374492s ago: executing program 4 (id=3338): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x10001, 0x0) syz_open_pts(r0, 0x513200) 1m26.483563071s ago: executing program 4 (id=3340): r0 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x80201) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x69}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=' ', 0x1}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) 1m25.376279131s ago: executing program 4 (id=3341): socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000000)={0x2, 0x1, 0x7ff}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="000800000a9a0500200012800b0001006272696467650000000180c2000001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_cmd={0x9, 0x7, 0x7, 0x0, 0x14, 0x3, 0x2, 0x3, 0xfc, 0x5, 0x7ff, 0x59c, 0x401, 0xee, 0x1c, 0x7, [0x4, 0x1]}}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500002800000c00"], 0x0) 1m22.637815215s ago: executing program 4 (id=3351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104007ffffffe00000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1m22.27071797s ago: executing program 4 (id=3353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @broadcast, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}]}]}, 0x64}}, 0x0) (fail_nth: 2) 1m21.629443459s ago: executing program 33 (id=3353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @broadcast, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}]}]}, 0x64}}, 0x0) (fail_nth: 2) 1m11.707637252s ago: executing program 3 (id=3389): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000000)={0x0, 0x0, 0x6}) (async) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xa8df, 0x10100, 0x0, 0x3e1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2deb, 0x4000, 0x0, 0x0, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) gettid() (async) timer_create(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x103200) syz_open_dev$sndpcmp(0x0, 0x0, 0x900) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xc6b, &(0x7f00000000c0)=0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r7, 0x1, &(0x7f00000006c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000100)='9', 0x1}]) r9 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x40000002}) connect$can_bcm(r6, &(0x7f0000000000), 0x10) (async) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000800)=""/153, 0x99}], 0x1) (async) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES16=r3, @ANYRESOCT=r5], 0x80}}, 0x0) 1m10.498050817s ago: executing program 3 (id=3392): r0 = socket$pppoe(0x18, 0x1, 0x0) mkdir(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002340)=@newchain={0x17b4, 0x64, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x7, 0x9}, {0x8}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x55}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @filter_kind_options=@f_cgroup={{0xb}, {0x644, 0x2, [@TCA_CGROUP_ACT={0x640, 0x1, [@m_ife={0xc8, 0x8, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @random="2642f7c271ce"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x10000000, 0xfffffff7, 0x9}}}]}, {0x6a, 0x6, "ed3c3f01beeb3a44366b25749ac006593bd2936071f390788c8c44bef6c7fbacdebe2cd93e6ce3e1885719b907da66a3e05063cfdddbed71af80e1f218fd75ddf2479068f2f1b55ff4540e5bac8deaed1c31c147cc9fbf63599857c4fe1243023f6a493b8ba2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x154, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x2, 0x0, 0xcfde, 0xdd16}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xfffffffb, 0x3, 0xd9, 0xe82}}]}, {0xd6, 0x6, "0e355703292a02e009cb573f72b0ea2f82025afa9f2f3e5b6594b943922fa48ade5fd64bd5f2835c679bd840b9c94cf6cb3a54c0b600aa971c3b0dbf12aacf7ec2fa1f0b11a4b3e283174c3b4188659cca210921eaf3264e695eb6bcc1cb72ea068a5c201089a9899ea939e28bca2e226fcc6c9ec64e70399ad732e897c14d74df6c9d36e507bf1e60623e6999625d968a5b98640df0d5bb848876d791711e4818ba11f9f6623dd3c899003e4612982712bb3b506fc7d8d2117667300a1ab7f9a581af6fa7a50332c4684eb2a9ac5d595dc0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1b8, 0x1f, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xffffffffefffffff, 0x8001, 0x200}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x31e, 0x10000000, 0x5, 0xfff}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7fffffff, 0x10000000, 0xfffffff7, 0x5}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0xffffffffffffffff, 0x9, 0xc}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x3, 0x4, 0x7}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x6, 0x54d94639275621fc, 0x1, 0x3}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xd, 0xffffffffffffffff, 0x9, 0x1f5}, 0xc}}]}, {0xc6, 0x6, "4e5315c6023cdbb248b16c2dc26111f85dc912ca1f2f68c6564022b082e301f514a8644b835a1e9165340a87341ad1ecd99b93f1d5074215b91207077b94caf3aee554fe7e5f299b95936eea882f03aaf616c6ad07f608d60d0ba1d9bbc76cc0fabb39b237aa4f1aa203ec6ed0adae9ba9e1e31e7105822c7d3d290814bf2076c200e08f8783495ad0a10da20f6128035f459236c0d75391ac122756661a54b8ad8dbb7d76c4fef2b4335f5a38c4880690e56d364d9d222ad0704a1eb987f074be7c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x94, 0x18, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfff, 0x4, 0x4, 0x5}, @local, @private=0xa010101, 0xffffffff, 0x1}}]}, {0x42, 0x6, "5fc567e8f54548847067b1670680e6c75c5159e4c7af9e76b87d35cfaeec7788596e5f47bebcdf95e49691df4ab075de2386e05979895edea9c8dbb166e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x88, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4f, 0x6, "bfb80f8ab2e7f58554512e8efcef8fecda3f1e6e035dcaf450ad38932c38d2b314b7683e183a37abb908b5845ac20f1f25384ca16c7f99d568f8c9415032da00a537600066772ffcda6200"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x14c, 0x3, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffb}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x1, 0x328e, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x450}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x1, 0xffffffffffffffff, 0xbb7, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xfffffffd, 0x8, 0xffffffff, 0x80}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xd, 0x1, 0x10, 0x7fff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7fff}]}, {0x9e, 0x6, "3ad9a7b59575446b503c809a088061af60492237ac3d2ee585f3ae63d7cf409cfa4d82fc071d1fc3c86b4ef3413c29a997a5939d38074f6b0f12e41709f554c1ffad589ec4d615dc573bc972c79bba2f590ae32297e2d64f6ad3b98a4ed178c127802b4685ccf210dc4dfc82282773f874e4a94f4f752c0e02e0af312b4d17e955d8becc2ab8019b616f6b4df4b34652d36ca69f7ba9520c5d20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0xc}}, @filter_kind_options=@f_u32={{0x8}, {0x10f8, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc4}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xc4742c79bdd5b3ea}}, @TCA_U32_POLICE={0x828, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4e}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x4, 0x6, 0x2, 0xf, 0x8, 0xd443, 0xfffffbff, 0x9, 0x1, 0x3, 0xffffffa6, 0x2, 0x6, 0x5, 0x5, 0x2, 0x1124, 0x4, 0x1, 0x100, 0x8, 0x5, 0x3ff, 0x7fffffff, 0x6, 0x2, 0xe, 0xffffff7c, 0xd877, 0x0, 0x6, 0x6, 0x6ac, 0x3, 0xf460, 0x8001, 0x136c, 0x5, 0xe56, 0x7, 0x4, 0xfffffffd, 0x0, 0x80000001, 0x9, 0x3, 0x200, 0x1, 0x5, 0x1, 0x80000000, 0x4, 0x3, 0x8, 0x3, 0x800, 0x12, 0x7, 0x4, 0x6, 0x6, 0x1, 0x4, 0x6, 0x5, 0x9, 0x1, 0x0, 0x7f, 0x4, 0x9, 0x1, 0xf, 0x9, 0x8, 0x8, 0x507, 0x5, 0xffffffff, 0x80000001, 0x8, 0xc, 0x10000, 0x6, 0xff, 0x4, 0x7c28fa63, 0x4, 0x5, 0x5, 0x40, 0x0, 0x7, 0x6, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0xd, 0x1, 0x7, 0x8, 0x9, 0x3, 0x4, 0x8, 0x98, 0x5, 0x4, 0x38, 0x9, 0x5, 0x7fff, 0x1, 0x8, 0x5, 0x5, 0x5, 0x1, 0x3ff, 0x6, 0x1, 0xfffff2cc, 0x8000, 0x40, 0x79e6, 0x9, 0x3, 0x8, 0x9, 0x10000, 0x3, 0x39, 0x9, 0x42b4, 0x3, 0x4, 0x8001, 0x3, 0x3, 0xc, 0x9ff6, 0xe, 0x253, 0xe65, 0x101, 0xfffffffa, 0x1, 0x6, 0x3, 0x2e, 0xffffffff, 0x8, 0x1000, 0x3ff, 0x9, 0x4, 0x7, 0xcdf04d3, 0xd29e, 0x800, 0x81, 0x3ff, 0x8968, 0xa4, 0x6, 0x8, 0x6, 0x3, 0x100, 0x400, 0x6e35, 0x7015, 0xfffffff9, 0x1, 0x0, 0x8, 0x5c8, 0xffffffff, 0x81, 0x1151, 0x1, 0xfffffffc, 0x2, 0xb, 0x5, 0x80000000, 0x4, 0x6, 0x9, 0xbd22, 0x4, 0xe80, 0x1, 0x7fffffff, 0x10001, 0xa3dd, 0x7, 0x8, 0x1, 0x5, 0x5, 0x80, 0x8, 0xf4, 0xa820, 0xd07, 0x6, 0x400, 0x4, 0xb9, 0x8, 0x8, 0x7, 0x3d3, 0x6, 0x5, 0x141d, 0x23c, 0x8001, 0x7, 0x42c6, 0x3, 0x7, 0xf, 0x2ffba12f, 0x2, 0xfffff470, 0x2, 0x7, 0x22, 0x7f, 0x6, 0x8, 0x7, 0xfffffffe, 0xfffffffb, 0x9, 0x9, 0x8, 0x8000, 0xff, 0x9, 0x7, 0x7, 0x2, 0x5, 0xc9ea, 0x6, 0x6740, 0x8, 0x7, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xe5bf, 0x101, 0x2, 0xf, 0x1, 0x1, 0x5, 0x4, 0x9, 0x1, 0x2, 0x8494, 0xe5, 0x87b00000, 0xfffffffe, 0x4, 0x13d6, 0x4, 0xbc, 0x84e, 0xff, 0x9, 0x3, 0x1, 0xc86, 0xffffffc6, 0x80000001, 0x7, 0xf, 0x5, 0x71a4, 0x2750, 0x1, 0xfffff9fa, 0x7f, 0x8000, 0x10001, 0x8, 0xa, 0x6, 0x9, 0x5, 0x1, 0x6, 0xb0, 0x35e, 0x3ff, 0x6, 0xfffffe00, 0x5, 0x3, 0x8, 0xfffffff8, 0xffffffff, 0xd6, 0x200, 0x1, 0x4, 0x5, 0x3d, 0x0, 0x2, 0x7fffffff, 0xf5bb, 0x7, 0x9, 0x3, 0x0, 0x5, 0x573, 0x8, 0x8d, 0x8, 0x5, 0x8, 0x9, 0x4, 0x1, 0x2, 0x1ff, 0x2, 0x3, 0xbca, 0xc92, 0x10000, 0x6, 0x7, 0xff, 0x3, 0x7, 0x10001, 0x3aa, 0x5, 0x0, 0x10, 0x6, 0x6, 0x3ff, 0x7ff, 0x2, 0xffffff0d, 0x8, 0x0, 0x8, 0x66, 0x1000, 0x3, 0x8, 0x100, 0xffffffff, 0x2, 0x4, 0xb, 0x7, 0x7, 0x74317e67, 0x8000, 0xfffffffc, 0x33a, 0x7, 0x2, 0x2, 0x7fffffff, 0x7, 0xf09, 0x9, 0x95b7, 0xfffffffc, 0x8, 0xed, 0x9, 0x6, 0x5, 0xffff, 0x8000, 0x10000, 0x5, 0x1, 0x5, 0xc, 0x58, 0x0, 0x7ac, 0x7, 0x2, 0x4, 0xe6, 0x0, 0x80000001, 0x2, 0x2, 0x5d, 0xfffffffd, 0x3, 0x2526, 0x1, 0x8, 0x100, 0x0, 0xa, 0x8, 0x1, 0x4, 0xb28, 0x4, 0xed5b, 0x3, 0xffffffff, 0x50c30ecf, 0xffffff03, 0x6, 0x2, 0x10001, 0x4, 0x0, 0x8, 0x2d6, 0xffffffff, 0xe15e, 0x92, 0x7, 0x3, 0x6, 0x3, 0x401, 0x0, 0x7f, 0x591, 0xc8c1, 0x5e, 0x3, 0x57e, 0x7, 0x101, 0x5, 0x1, 0xa33, 0x8, 0xb34000, 0x8001, 0x40000000, 0x3, 0xffff, 0x8, 0x7fff, 0xfffffeff, 0x1, 0xe, 0xfff, 0xfffffffd, 0x1000, 0xde51, 0x7fffffff, 0x1, 0x0, 0x181c, 0xbf3, 0xf6, 0xa3a, 0x4de0d91d, 0x6, 0x0, 0x1, 0x6, 0x4, 0xd25, 0xc, 0x10001, 0x9, 0xe93b, 0x5, 0x1, 0x3, 0x2, 0x7, 0x0, 0xea, 0x8, 0x2, 0xef49, 0x7, 0x7, 0x800, 0x3, 0x2, 0x1, 0x9, 0x2, 0x36, 0x44, 0x3ff, 0x5, 0x0, 0x0, 0x7fff, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_U32_POLICE={0x8ac, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3, 0x7, 0x7, 0x2, 0x101, 0x4b, 0x3, 0xab0, 0x8, 0x6, 0x3, 0x5, 0x8, 0x895, 0x80, 0x8, 0x8, 0x3, 0x4, 0x6f2, 0xc4a, 0x0, 0xffffffff, 0xf, 0x3ff, 0x40, 0x9, 0x3fc0000, 0x8, 0xffff, 0xfffffbff, 0x5, 0x0, 0x51c1, 0x2, 0x4, 0x8, 0xf78, 0x1ff, 0x5b6, 0xdf, 0x9, 0x7ff80, 0x80, 0x6, 0x8992, 0x8, 0x5, 0x9, 0x81, 0x5, 0x1, 0x3a3f, 0x9, 0x100, 0xd, 0xe348, 0xfffffffa, 0x4, 0xff, 0x7fffffff, 0x100, 0xfffc0000, 0x7, 0x1, 0x2d, 0xa, 0x7, 0x67430776, 0x800, 0x1, 0x5, 0x10, 0x5, 0x5, 0x81, 0x2, 0xce, 0x43, 0xf, 0x36a, 0x7, 0x4, 0x10001, 0x96f, 0xe00, 0x4, 0x4d6, 0xc, 0x80000001, 0x3, 0x1000, 0xd, 0x0, 0x9, 0x4, 0x8000, 0x0, 0x289, 0x7, 0x7f, 0x80, 0xffff8d74, 0x4, 0x101, 0xfffffff6, 0x6, 0x7f, 0xb, 0x0, 0x0, 0x9, 0x3, 0x6, 0x2, 0x8, 0x1, 0x3, 0xff, 0xdbb2, 0x0, 0x1, 0x7f, 0xffffffff, 0x8, 0x5e2, 0xc, 0x4, 0x8001, 0x66, 0x4, 0xee, 0x2, 0x7, 0x8, 0x7, 0xffffffff, 0xc6, 0x4, 0x80000000, 0xffffffff, 0x1, 0xffffffff, 0x1, 0x8000, 0x40, 0x9, 0x4, 0x7fffffff, 0x173, 0x1, 0x6, 0x8, 0x2, 0x2, 0x5, 0x800, 0x8549, 0x1000, 0x7f, 0x80000000, 0x6, 0x7, 0x80000000, 0x81, 0x3b000000, 0x9, 0x80, 0x3, 0x0, 0xfffff800, 0xe8fa, 0x7a, 0x1ea, 0x2, 0x0, 0x0, 0x9, 0x300, 0xfffffc01, 0x8, 0x3, 0x3ff, 0x9, 0x7, 0xfd6, 0x6d63, 0x9, 0x1, 0x80000001, 0xfffffffe, 0x8, 0x9, 0x2, 0x4, 0x5, 0xffffffff, 0x3, 0x0, 0xb, 0x2, 0x3ade000, 0x7, 0x8, 0x1, 0x1, 0x28, 0x9, 0x1, 0x640583c9, 0x3, 0x9, 0x8001, 0xf2b6, 0x4, 0x80, 0x3, 0x96a, 0x81, 0x0, 0x58, 0xfd, 0xa, 0x3d4, 0x6b, 0x2, 0x400, 0xc, 0xffff7fff, 0x0, 0xffff595e, 0x4e, 0xffffffff, 0x6, 0x0, 0xfffffff9, 0xc2f, 0x0, 0x6, 0x401, 0xffffffff, 0x5, 0x10000, 0x1, 0x1, 0x5, 0xc, 0xc, 0x2, 0xfd, 0x3, 0x81, 0x10001, 0x80000001, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x5, 0x2, 0x7, {0x2, 0x0, 0xfff5, 0x5, 0x9, 0x1}, {0x4, 0x2, 0x1, 0x77, 0x2, 0x2143d577}, 0x0, 0x6, 0xfff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1, 0x95, 0x9, 0x9, 0xf5, 0x4, 0x2, 0x1, 0x382, 0x4dd, 0x1, 0x40, 0x5, 0x8, 0x78000000, 0x4, 0x8, 0x401, 0x5, 0x80000000, 0x6, 0x8, 0x8080, 0x0, 0x5, 0x1, 0x9, 0x5, 0xa2, 0x81, 0x9, 0x10000, 0x2, 0xf8, 0x3, 0x5, 0x4, 0x9b0c, 0x7ff, 0x6, 0x0, 0x0, 0x101, 0x1, 0x401, 0x1, 0x8, 0x6, 0x8ecf, 0x3190, 0xfff, 0xfe4, 0xc37c, 0x5, 0x1, 0x81, 0x1, 0x0, 0x8000, 0x2, 0x7000, 0x3, 0x8, 0x9, 0x8000, 0xffffffff, 0x6, 0x9, 0x1, 0x81, 0xa86f, 0x5, 0x22cd, 0x5, 0xafd, 0x4, 0x7, 0x800, 0x8, 0x7d83, 0xdb9, 0x74, 0xa400000, 0x8000, 0x8, 0x400, 0x2, 0x2, 0x6, 0x9, 0x7, 0x1, 0x1, 0x6, 0x3, 0xbbd2, 0xf2, 0x3, 0x3, 0x5, 0xffffff63, 0xff, 0xfffff9b5, 0x81, 0x10001, 0x0, 0x5, 0x8001, 0xa, 0xfffffffd, 0x4, 0x4, 0x1, 0x7, 0x6, 0x2, 0x5, 0xa12b, 0x80, 0x6, 0x3, 0xb0, 0x4, 0x5, 0x80f, 0x7fff0, 0x39c, 0x9, 0x6, 0x8, 0x6c44, 0x1ff, 0x5, 0x56, 0x5, 0x3ff, 0x4, 0x6, 0x4, 0x8, 0xffff, 0x5, 0x4, 0x9, 0x1, 0xfff, 0xdf, 0x8, 0xb, 0x5, 0x5, 0x3, 0x1, 0x2, 0x5, 0xfffff396, 0x1, 0xf5c7, 0xebfc, 0xfffffff1, 0x7fffffff, 0x9, 0x6e, 0x6377, 0x8001, 0x9, 0xfffff801, 0x4e544003, 0x4, 0x6, 0x400, 0x4, 0x3, 0x7, 0x3, 0x4, 0x3, 0xf33e, 0x75, 0x1720, 0x2, 0x0, 0x3, 0xc, 0x7ff, 0x0, 0xffff8000, 0x8, 0x5, 0xffffffff, 0x0, 0x9, 0xe00000, 0xb76c05, 0x9eee, 0x3, 0x2, 0x11c, 0x0, 0x7, 0xf21, 0x101, 0x101, 0x4, 0x1, 0xd, 0x3, 0xfff, 0x0, 0xf, 0xfffffffa, 0x3, 0x8, 0x2, 0x1, 0x5, 0xfffffffa, 0x5, 0x4, 0x40, 0x3, 0x636317ba, 0x5, 0x2, 0x1ff, 0xc8, 0x7, 0xe, 0x7ffd, 0x73e1, 0x1, 0x7, 0x6, 0x1, 0x5ae0, 0xe9e3, 0x8, 0x2, 0x7f, 0x3, 0x6, 0x8, 0x40, 0x5, 0x6, 0x0, 0x9, 0x8, 0x9, 0x5, 0x5, 0x5, 0x2, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0xcd4, 0x765, 0x7e67, {0x2, 0x0, 0x2c, 0x0, 0x7, 0x40}, {0x7, 0x1, 0x1, 0x5c3f, 0x4, 0x6}, 0x3ff, 0x9, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xed}]}, @TCA_U32_MARK={0x10, 0xa, {0x101, 0xe3e}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x34}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xbb}]}}]}, 0x17b4}}, 0x4) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = open(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0xd) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r6, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f0000000a80)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'lo\x00'}}, 0x1e) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a293000) r10 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWNAME(r10, 0x80404804, &(0x7f0000000080)) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xda8, 0x0, 0x5, 0xa4a}, {0x7, 0xf1, 0x18, 0x1}, {0xbb, 0x9, 0xaa, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) 1m10.480390846s ago: executing program 2 (id=3393): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x15, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) 1m10.008885229s ago: executing program 2 (id=3394): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, 0x0, 0x4000000) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9905}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1m8.493268513s ago: executing program 0 (id=3396): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba8983b4a8d4c62f67d5becb53869dc8dd9b8a1d738866895205b82b4475f294961a0570ddec94310739a703276011c31635de2915a189f9d24d72bc74046c78c8a26a8cde0ec428758fa95acb71a9d1181a65f6ae52f5b69fabc3453b5a20976c04e96bf2d2662be38807cc8dda8bac28cd613e5e990e10a0e47e3df3c1aff4b957aa3ceb26bcd353ee7d9a34ba18825d3b329200740c53900fbc8c2eba76d82eca669116c67784b8ac3cbd3d85bc4f8ba73bce342f5e853731e5b1914250167013f", 0xe3}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) r4 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001080)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff9202"]) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x120, 0x11, 0x148, 0x120, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0x9, 0x2], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1m8.320429788s ago: executing program 3 (id=3398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0003110004"], 0x10da) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'drbg_pr_sha1\x00'}}}, 0xe0}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = getpgid(0xffffffffffffffff) getpgid(r8) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1m7.664161428s ago: executing program 6 (id=3354): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), 0x43) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x348a, &(0x7f0000000200)={0x0, 0x79b1, 0x3180, 0x3, 0x40024d}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x6440}}) io_uring_enter(r1, 0x627, 0x40004c1, 0x43, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x3) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x1fe2, &(0x7f0000000140)={0x0, 0xf0e3, 0x0, 0x1, 0x1f2, 0x0, r1}, &(0x7f00000000c0), &(0x7f00000001c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m5.490356391s ago: executing program 2 (id=3399): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r0, 0xc0481273, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x0, 0xb0, @scatter={0x0, 0x40000000, 0x0}, 0x0, 0x0, 0x3, 0x10000, 0x22, 0x0}) r1 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) 1m5.018245084s ago: executing program 2 (id=3400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xfff2, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xfff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m4.872180433s ago: executing program 3 (id=3401): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) timer_gettime(r0, &(0x7f0000000180)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}}, 0x0) setpriority(0x0, 0x0, 0xf) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) 1m4.621544922s ago: executing program 2 (id=3402): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/unix\x00') socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, 0x0, {0x403, 0x0, 0x80003ff, 0xfff}}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x9, 0x0, 0x0, 0x4000, 0xbca4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006c00)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000002180)=0xe4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002200)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0xffffffffa14b4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e96775fb661190a}}, 0x50) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3000000, 0x100, 0x4000, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004940)="9630161a5b9d0224ffbfe13a02b1879f4692e3f2901af098850ccf9f773fa990aba220517cb287d8ceaf90bf40236c14ced6b8233429c5dad591e6cf05ed584bd6f8db7cc97731b88de58959d6022d59a2d3ab8e121e53f165367bf7d340e4485e35fc3a5757447b2820df0417f4f45944f65f2e2a24538638b33fe0ff47b70eee991b11006a8fa9f8067436f65c73e51fd2c94d26e6a2c2a4ede58baa3c65ded1547fe674e81ed6bc515d41a5ddf531d59f6b81f9accd2892fa693ee5caf7c9f849571d59784e17a23b97cdbb01f9b370f70ddda76387e9151f1822bd0c07232ec4fbb5636c857235d8bedb71c86538801e27c6989814c70ce6a29b08520804ea95895bd393485db7c934b842f2f5bd8bae10c51ee3f880265e161cf154b282a258486dcea810741ff1ad101a59ebfc56d246c45fd6e72bab63eaf900820b197d219bb41b25dea1a128afa6852d81b83b03239e4fff21bff672775be83bfd63fad9bd5a821c7154a3a83014e94e5828e7b07dada1e2ef6cbd80bff8a9f13fd10589046349eb4a7d0365c6a48359e3bdd349ad370e06054862f3d8a26fb423fde46a774a4b452f40a83db2e194d0d3d2bad9b3beea5356f78264ba84ac450bfa626bdabc822babe47aac5d78cbde47d72c531c02c6ed5c2ac1f5674ddebe2600727ea9c76c1d9019e7b2a2c59f69629fb92a2b8cd27b2f7c49a25515f582044d0678f48b7c0f5f5b118b76fc4ca9932b6adbd0c0dd3abc13ea96b9b6f578879bd543c6c47783e7caf8ddfc8a3ead0dee12684b8b762f954362e36f699bab2448001519677df4393d23b10866a1c0d9d2a10940cdb4d5bf969f157fe4ad39c217e8521e7f3b5224207fd8ad790c6fda43f6decb4d7472b4f6617248a85493de04ca0701f95f28bbbd1b4e40001c16050ea7bead398d0ec5200ee935cc92dca5b9b6aec676ae40be922eec4caea59d0dc6d190f88a689f3694772435852178183108b6140a162fcf7e186168d179a09e50f0c29a05e0d6b2e498b98d5dbf83ec367147641c6c56965530352c5ea952a345d33bcbd0ae0fe03507cc3d4c01054734f439109f74f151ebcea6e4fbf3eab3daed71faee384a38f2557ac95cc644738b74c1f92a392b525e4e826474b7ee2cf793e2216d27fe6cfde911ffb99745d03cb30d1daef7fba2ca1b21bee13100e4a46628dcb1ff91bc4523c54d10b9aac5c4682b651360fc337760d4cec1d6a2f74dc6f9183d6334d24a7f95f49ecebef17d9b3e4b99f684e7d4e70e836202408f35d611cb61d04754672106474182272f832f4373c85e6bb06749be90bbfa1395e0bcda4c1576cfffb405a54734e9a201089f8eea7aa7d9f3d93da8391ed47aa1ffe28564b6ed069b8cffd75911c3b872a4d9f426e3f02b54b5495f5e11b6a241bf7f1e7e7223729ef94809d79c12cd4f88af4a851716dd508873b9add21cd4d7020ea8f8fbf3cae8d34f882a9040ffe41645c72e7c19e32eb29fb2f3953b0e1c9fdf91c4bf1795561354b5cf4332ddee9f753daa8e8bb81853af8bd69e23fae58966de9af0292777eb6c7136b463364deb1d5bb359c15feccdd09ac19aba4dd530a038ec424e1d0f1e0d198ac33a5e3ecc918cbd8fc04bfecb277b20334bdbad03e6e6cac1c98bc74ab857781e0e2688904bf0784855098477182a6de9015cfad18d7010279e1e02507cc9a33df5bc2b7d32da5987689af07f8cb21f53a3c4e5f7e66bdb5eed5cd0554c85508eb1b27e6b07e47fc3dea8c4b7da3fd77528c9c71962862eb3f1b64c639e7f2bf0ee5c5cf76d46952db3e104cde595b77d3920932018a8d5eeb64d72c7ada83ecf4b3506dfb922b30e2ac2490034b85aa431df4fd5d8dfcc0e53cbc7c76c2d0fb21828448de644ad3115aeea874980147895d623c1db410e589d6bed1f1fedd8d7a36a2ed9c3777e0fe17a134591506c2a9e17113b5d1749eba3fa5241489af787de2dd84af19962256ea17b5ea0718e41b16756d2aeb3fae48e2c48e8dd2635b8791c1760110495c1bc6c56e26b7739aa1ef2caefb828a178da124fa83c663a2793c72062fdf3847123d19563244b8b7ae0ec0af1764a17bdbb3be470148150ee12954280363105d1e2d530b764cfe852ce41e7557dd2454f0a330fe5be22805a9d574df75cd64f8c1fa21d95212e3a2603833d18d2ba5c0bfdb29609722ccaa11f3a2933af02237cc7aa27af6fe6c71249ec34e9641dd9a014c64f49d88eca1d5ca38328caffc2bd3aa7811126cb3ec65559e8c4ac65b7d1a3b4a73390211c2645e45fd20c61592435edf460d8cdc0f4ac7a6d3c82bb7272daca4e63cebce1ad29832e57028b9463ced2adf1f43b2f3396faccb8dbb6597abac5b5cf136fb4c11fa006cc0f5841859da680f874b3c558b25ea57e3fabf4bfe93457c354a22b9de16cdde84a6c8163d8c6df2042fe00f57469f7c19be936d28e33efa37dae0ec5d81eb89c7d33dad808ba070ceb34b59ccabf99286700f2cf5daa1fe90fdceef67856d23345f51b9b598eaa280f2b0c82b69729da676dfdedaa22f29a5ec56c30e22f0070f32c41c4a5ed3123bc92806d6604320f9e8a6010d897007335c07479c5c8583ccde3e0b849d97d2a88b004f2e724bde6aff8b3b473860a209052bb2d22b151560a41926ab2a7818cc8489e5647d905777ae14f0f71a7b5a109179c0b2ab35a265f35ca9d3423cb831b2860138c79580636cf9ae72f96991a1f04ee485bda88b3fc89e76f28a54cff5027e74a984261e10d1db1dff08ac5a0e64c8b68c3e03869f5bdbad639fc7ae913c1cccab4f2a83a009357255d2a0828ba3a86de224db4e95afe0ea4740a9190150bf0c02c2ff0674f7818680450a2e43321ec2eb8e21faa2cfdc2af3bb38d8a6048870de943458b5be76ef5ada936e78f4a529f49d7fa26cdebde21bf408516e5e93f4c1ced2077ba0be9fd008a5d46a50d819303a9856941a35c43e5094f65431e1343bbad1dd50e1333ebeb59bf3b4d090aa24a341b19bcfe85d356901c2c4fcb78bfb060ca2310664c8f1d49b1f4b992eabd91710cb5799d5e17ba98572587d02ae5f85f9cbf4438d5de63846ca412e645bdb710a22206f98cd48fb0a7c0e55dca44a1439e3418b35a8a23cfd8dd206c4e2d2ef7146e426741e6cde4eb9e6da64137e3311dba24682f94a1885f48a6f56ef64de249abc695f626f70a1cfc64ea6d1cd9ef05909fb378c96a2adaa5ffcacd0f6032fb00c091fdb50e85491697f87a9f8d5e605f5521bcabe49276e12c8ce5687ac72c90f7dd4b46bc8dc979e58f40c7094198950f04be6d54afe303c5f4af176bd48a9eaa95e3f1b80797497b5aa94b529cd1ed693472b9ed05f25e4131148c9a8de063ca2aae8d7a9582cf67598cc139730e8387b9ec2ff5492a7bf1bbfb5beeb1d0be4f522bf27d4f6c6e873a0050c2c380aa3fdaae36afba0c8de6fc49efad509b6aa324f01fb8e1aff55416d82ce174f6511bb9ae005b9ad03812a18bedf5f29aa875ab1d0d32a55ca025bec39606346e8f4f9276b38e8286f4b609b26bea3d577defee0664b86c0b7b700708fb6fa6e9807a607c25bc91243b005232c8f661a202198622a06eb6292acde7146551c214091d7170ee3fd4252f6322603e80c6c7551c10f7f6a85e7c8aa2f9569a5a22022d234f02a870c4b584b36c6e6214bd2af3931ea93377e63ff80eb5b4dc465b3cd917c3fde8425aecca6b6888622d7247feea2ce3ad6c7a9053a7c93ffdd0df193b4b39205c36b17c1119baf9d599349adc6e66dbab707b5f1065300817490f298bca38502b7cdb95117b08cd03f9472dc24d9c1e9440fe1f50abf940049dcb25a97dd610db78771dfcff5eb82360fd8eb34fa08c049077c61f038b603b4dc016aa0fc23b3a56e49a16330f7c540712e9e82dada9304ce6a80ec5e0efaaca87fc9bb5c5cd6ae925111d61b6c5c00b11c9f07907350cd664510a99cb97d40c9596bbb574104670469449971b15435c663057705f583ed32b7292d5a45a446f9d80ecbe4ca4987e07a6237f10efa47ca4cdc8c21a76fab38dc1196f218848521a4dc9a60ce7135d518b3fc2dbc4150f425cfc6b14780b6d8b7183c2e60716c08dd19c1fa6d7c840e35cbddf8c31b9c4fc6f1019967fdce9002b62a05a81021632caaae02dd32f5b537e2404144873ecd3aed320ae2a08321325106c24531fa0cb3596f6c0560c9a325d6181c086da927d2ef0d42c648a71fa4684568b20f2976f80156d3bd0824ebbf2b8dbffe74fed1d7e65fc3ab4b889c352215033603e1888bc29c3dce458eb58738e0a0fd09dfa65f19fc0a6e4854b981a653439e2a7340263e4a9270890a6a69c64ab24b98dc6a63e0c66d38243ebcde7ba085ab21b77caf680e9e713e6c15a20299c87104582c71b70dac4b05d058a82172a880c5e4a662448283f40328cd7c8c26ca1e97faaf41c6750c9ac56ca877c5827d64016d8234b796edb03b8e092bad5a6232488dc88e3eead179d7f26bd6dfeb635268cdbc72993601b3ef0a19e85dece0fbc96c041255ec889604b169b4c8ddab9f08fcf28acc5971d966c631edd9179f5868192e7ca1fc2da6dc3872a86052ac0bd56b9abb97a29f4889b3cee0b603e4f61b926314cef7b48e740fdaecc57e9e317305f16a8489e4c6531941fd5cd2a1d365a86454a0ac6e17124570aa81e874a146d681f0f6f76d1825dfc69951ac4ed5d43a4c2b6b284362c99076dc69ff00c60064ddd504dcfa10ed82786e31aca85aeb92e61b3242e92185fcd6968e6098c31dbcc7f63d036a82e9a8217a8e3cdef48187013569e505e4b1697dde1618e0376f61440b0d2dc610f1d9c5ed013743c199d7d087bbcd9c61ad7e35325907a016794265d74a23a52b01b87cde0ed0fa5d9a330a88fecadd616f17d63b8f40056570fb00e0bcc6aaf9dbe9da1da0f699fce00d22b2518da0f2904f8d4a2a077810b470e6484e9c69aa2aea6e3e765915b7a825329bcd210a8d1719b6750acbac05278ebf0db2c1c4f7842947cd3d06c315603030deac8f6c8549845ba3041f27d3dd726bbdb40ca1cee0b57b46b2ade0d25a7eb970fe49bdb5bf35742eeeba5e4dff4b324d823ee54b97a55fa25a19ed75b4d24cc424d88835a989c79a7334d2ac3c641ea8a760013eb03b840f772f5d9292c40be1f24771a2d7a329c7cdc1db0967d1ad3f800c558eef1bd33428c8647903c9c534d16a65ea4fbea8318d96d26579167748964a3ecaddb31047cc1188a46ea5b41cd4e66ebafb6a609e40a761b03240a55f1b82bed09a2c945262496e9d60203cd755b951606674519fa02e6aab5a6231da493f4ddc70997b3aa49c39c09e7cff2523100631ac86b13e29d9bb8e855497cbd1cee4f98731020451ebc775612b9114ea4b67d9a8edee109ad895dc1252cb0d281e68d35b8b7234ba93679fecfbef0db9e1b38df7536deb996eb9c64df52a51138d9237697e163a32c3b069d0626ff13536cd595b62821510e85b607bb64cd15e19aeeb5efb87147d15184854a0b8cf550587237420d615f7fbd0a47924b502d96f5f9782ae4c8b640ca7bf33b40d0857c37f2f1f65e84d33299e64ede19eda11cb8b537cb81ce9ee25e1ce085f21b98b7f7bb4c7a4499ea854d49651369bf1204f6958531cd4eedb1fabf33743860f341167604a080aba7b4280ce0eb42b39f51bca533a2c5162c6f3e004733af9fda7e590eb5ab5dbd43244b2b302f4543948d83b17fa1964b01f143755c18fed9686af3054115d7c815467514860721c4ddb954543b3730b9f0724c585d935051c8ac910f922e8c5ac3c32a42c00d3342d9a139bde685581d434bf2661fb7080f7822e1aa9511fe32105ded8e7e89f7022c30a2e5182932fcf2bd40dbb90bc84f960caaef87fba9e8b2394f8e5bab05e7cdc06d467d8ff7798c3e8de2b133295b34c87150edcf6dd2b45c25a96fa66018f474d1f06d46f083257209f53473aa5c3a29a0124dd3452902eb0d22e322707d9199cbe2be04ba3c0cdf5f7776a6d289e3891e2410b8ce492b0b61913c4e473060b99a0567c1d4c2372efbb8497c3e90ca45b060a01e26deef9a959591afa738037d6a06e9e7afd97e5baf91158c701292fb78326725ab7a56770d4799666df0919458fda70a5bfdedab2f4b168ad4961f72cf5abb80502bbbd61c02fe81b1f5e4bc8a58192ae137a4875f34298f008673da05538652993bbbde04dabb6934c62c6771791ea5324450ccd443a1389a46a6e3ad3c74f70a3ca97b1a0201e5bb9bd07c9ae0a73f1ff592e9b24e5e199ce086e8f84cbcb36db10f78dbf1c104d93b930dece7e8cf3310fff062c2b095a5736b614a66a796674292aa2811b09940bf3ed518560105448cfb536f936ceeae66ceea0b0325cc661abbcaeaa709c1f7ff1fd883974ef480848af58655cc7c1fcdad97ab8bfbc645a7f5d1144a97636adfac82fae72b22ecc4c14eb6761b84ca40f0fa39b7812e80995fcca514a57f4b82168991fe643474992c513641bbd1c76031a80a5c9e27b503b115b71036593e74e8db1803fc81967d9af9d76335ae208b743eca400476e7245befb28f636ed39513f78c84f51c9e9b2cfe5360f2ba439d311f6cb28ff56e478ac6e05b4bc2fc77fffa37e874a4b0fbaef5d4779551378448618c2c0e3499e3b8bd2b725c925c7682bfa6dfd215d1b1fd02defba9ca13515e75b881f8e701436dec7ee14ca798d1a40e466290da925affd386e11c79e8d7cce8c49f51abeef7c54ae2cb3e71d67c263b3188921c45f25849ad9bdb321c2cc891287066bcc635e1af9ff5fc2c9414417e8818d2ec4a6b19ffc649bd41bfa4094c9548bb714ceeafcf7099988c025cd9bbddf7bb3b6a8d79bf431bbb77092e0c35ada2b6327e9fa48ee2738f0202271acbad721e72eaed31adce018c75e908b9983cb92223608618308f6912dde62309de45b427b35066800a81c81bd48166918b2af3aaa196f5123945edc760aad431891d13bdeaf35bf2ba11f6e51f591ceacf54f269c5d06bd2cbf7d3f947471b40d3baa657ef6b3e6a17f155025c18d05187132c326b508c9001dc9964dd903fb9cfeed7262b2c521042301f19e6ee3eb4514bba5a9a163bd51ad587c7d814b85366c86bde70a080e0789840e5db525c641f87ed3c00cd556a333b6f9fb46eb03ab47811409accc52544724f8ba2a000758be52faf3a2edd16411076e2fd01fe7a21a2964efffd47421f62dc8847f2d146e4be02c42156265763674dddb37729068fccfc9737b708952ae3afefaecfafbfc557a9396419dfbe46f76664f654958bb48067db0ee721d4cfa6abeddd1dd71e4296c6e2a84db032251f2648665798ef228a8e281e3ac346497b00bf8ec1dc7d3be6bb3b72eda571aaca484f239341f702d2507300436a65a92e2d8119d2bb5a0b14be1d3e13c62d1da755c3d6f22bc7dd0c0949d0067c8be362cf54a87ac25f25827dcd9472b618f09d7be2165eed38ec3ac05f0a96c531aa926bd9ff5c5d1ae093d69f7754593e0bebf5d34151d41c0bff59020db1ca58482ee43ab206cc25f33671f842dd3ab2a325bef72374440fbbee750941942eb09c232defcad4cee63ec0f4423df7c39124eba14e5fc3190c776d511e0a14ae6f05fe427ffadf3fba2f0033b85e6c98b83420e0db84c2112e48de299583cf33df848fb4a7249b5ee220fd3bd927fd97f045693f37f039f693fb3951024c36c7707641da9e529463ce9dc540c0a6bede5129bd0a03c1b6dba72bae052e25601f5240ab57bd392b4dda33bbf474d4865b9af412410a673cdc9a9fc03b726da494d0aee6c22a453c83b7f2d0b6aae0c519b6d1d12930fe7dac4b7c394068c0f065712ae7829b3b3248bc8cdea4852f766890287d8bb2201a9d31d586eac60bb5be703060ee52eb12a25c2f3831c5529a42cc34e293c2cbf1bf9c14ca5d9c2594ee7de2c33fa5e56229965a7648101f7d6a488524eb0504832834afaa9f65e2bed83c2a65d07ca0bc28399465a952ec5f7ee2ab749ef7eeaa19f4324041ce852492dc2a84ac827b85389c13778d63c360e674effb72b2a922157f84b64c3ad66e40b75222f2862ac17fda52fdfe7358728e2bd7c31e8e157b9bf39b9a5c7877af530935d8adb9d37176a1fed4e76948051f654aa60f4e12ceb7025a9b97035bf55b2b419fff1e273f5b1e3065a2e4c01ed7baf0d52f2981de2ca54180f8d5e4a30c6331d190b8f1dafae8323875b25665610f3c7337a62e7c2a4b8fdd52a4c899db11bf55fea485dc75a84594a328dad1e3dc188524c44416da7f68398102cccf25252e04363b3d8d51e51f9297f20fdcaddf1b5ea55503d39a15d11ad553a6e5ae14dbf1fdea61629e08c7864a17b93bfce3271f3912cd75d83338ee67b704b7b7c7118fae51fdbbd00d2aa33983abbfd63602e87bd0f6c095f48b8880cef7f21183981deb3d877709544079f889329a0065a2f370514a44cdf747a31c088706e2932a1a43186d5535caf4cf52bae50f67882915b3317ce49fbe7f28696a397be4a3f5ff4e34e971b0d7009575be01f3e6a09480d7f0571dd256588267ee1a888e4efbcb7481bee5adc96a82409f94c3f435203cd5526ecd82259638679a1375b8a2bb943170d17c575e068451262b2434cf23015f66e161771468800711cd6ea292c3dbaf6a00c7cdcc501fe361c7e686f7f7583434b9e9d9cd1e5ffa58e2744dd8c69df9e1884c8f26f375a004c90e75d79166a41e05fe93738fb24c55cd77ac2c441571242570d1086b6ab4ba514684eca9a5527942bd57e5d788405e189a3cb9f9418d60321f57ef6ad498a04b613a97a78322efc0afabb8ffe0dedb470af62acb7370110d727d625cf1f6096706e98d07c81132c3874a670b359dd7de77ec910cd6972fb7b481b2360c8c2dcb1ff0d49f67b1f756fff0358e4cd04b2d41aa39c2860701b1d7f7255456f6bf61a8b366121a598afc5ad94963c7fab84ee8cd2a0ecdf5a8c3e56e81f97da1afa032da0248cbe2433f887eb1f99d88ad1c864f766f232086a53c80a7790b65c72fa5289267f20431492c6c0f4c48f4c805d449b8c88711250fb3d10b06931250bd44848a4cfe44275eb2971f04461a689ea420352c8f0b29fb7aa7d80732db2627b054c4b269d9b53bffef3941ed6c808a776cb2f0dfe18f0694a276776f7a4f3ac57957179f979133cc34290a40273f85fa761688a56d84525eb8733f49f7971744eefd4a04863d86e5a6b651c4a8fac01fcdfa1db6190fed9494750b44b84997b4adee7a87a68df04ca80c3bb7db841fdca288f18aa4396e5f5431ae87d602e52da64d2c33d851467fce3fc8705e7ec6443cdd815533c6df3124cd18b681e0c7b570f73fc2ff728c62a3eda963e8db2b84d6d00196ffccb4f0607e466e1c89a00227e3f7461377a47893d82ae1fa7f4fbef3245ddb73c317f6f6d7918de7888cfa0a69f59eda80f391d967446d2e25c575e7401e7d6f16a3b5109da3556c458dd37443368cf6ed8b728e10590e44a895c942179f61d3da7d09cc3f58254f3467106e630b24149a78df62c1d672c75dc4889e40f510801fddc3f3289fab44f04efbd1077c2cc37283e5d247268b9fc40fc4703213bc28abad57ee1220057ef940440c769f6f305ccc45796cfd4ba3d0e3d46da72f08e8d9ad483c13e0d35727e55a74490b147a65e81a1853118c621d0cbc5872c19c44e5c3c3e12b30bf7ac684afd144a59388f64e2a992f02b68e6058b4477dcdd6f2b6260e15dafa3591b4fa1b597537b38e55cca526eecb16ba8acb4b3bea6afe48c54f9b9de72e20a05b280325053eb666701df03f599f8c46367059241837eb469d656112d3e5e61cce57a0772f0b01c1af9f22660a3b2c0289ccdc4ae36756139c290b19081bbed6734dbd5caa09a4931d07e91819884ded5508b0c937ea1d4a234d49eb6855e8c284a14913ea3e3938dfd174e3f86eb914e3946e30fe978856beec2abdd97a01b2c6746389229cec7264ab9d912fff8c860871acf7fd5680fe37f06fbcf1db779bde965c2b8547c79a1ca6e17147530713dd215c70fcee7999ccc3a18e579d09237a61fbb9a37647dacbcb697932efd8b93ae652aaeffabfa2758be39fa574bbff251406a2c2057464e203cf1b5091d6b9b1919da44bffdcedfcb520d7d475a119a0b87298681e424f8e441edb66588c9e679f64e0a65b717d46a242be5810206c0dece15063db365dd300094fbc37cdc147532e7079c60acd769fffa1ac7998b5a38bf4c0412a7bceb714bce443e9153e263240e2ba867d68ab13fdc1aaa670d67a4f131abed5c59d3db527b130d6830d88fa88893268ae4fdc94e112874ddbffa1b708b2668a8e75e1307b3a16e8bea94890b77a29846fc7ef6d77dde9544fc0ed19df0f03216a1b771752309263a3d45f66359c2195c8e677df9a0a10f298f761d8f364ed29b2eb1cb195e9b4e33ccd333fd22dcc5f9ff38822b97b9a386ed2f97ff2c9495e2b1b6fbb054f9cf0178ce3f982add1cbed4d122a40e3fb24e8fe9f0c05e6af607a41d617cd74e961d8bf265c11e459056228125226490b25d252231671a88639e368cc703b71c10e9e80c5c2335e1e3acded84e115e34af2c882bc63ada3a82d54609a1cc5ed6cc3332381eec7df2a3f73401d53b2a312648a71662957462071eced869c53576036eca646d3742c51a91c62039fc8fa9616f352652972b89433295deefefaec4eb35064cc7d01ec19bd9e2a9eed4a8356d4bf32f706ed6184ce188dced98590653742a4c99de317fa206c8e68c102bb857a252876a8791fdb5bcda7b7ebc39278c9067c8cd009f1fb757f71d7476e6f63b596034296c8f5c9b9d1039e25b4e97b26be7743a577ef1fca5d620cde77f62b148cf6223f2507f599650af4f49b87360337c620fc7c02d528f9460577a62511f28553212116b45aa1e02ef37ccc5939e3de0d3975c060a345dc59f4af0fe0e67c0dc495cb64f564929fb0f054fd667420ac7a135907f8a3841b5115bbf39a630dddd4dbf3872ffd6c8e02843c2e19fb9f03f111cb0afea192ef328fc85aab6881a3fa922824d8078707f0630cee853164d83ba69399ec7f9e019ffdee9fa765e769f4f0c03d4316948b563f5bd18e6d6b12e56538e8a7e70136c3a0cc9b3037d50dbcf3dcb7a2edbfbeaa448f7233910987ae22ff31ab888aabaa3b99fe4adf54c9a73395826f7c8aeb61a153818557225fde94fa11f1793981c17015029e3dcbe7ab9123b57b118ae5d4795e0f0959cfe8ec5c57dc479dbd7fdcea8efeac7acefb999f13606a2b881415f79b605a084ec0b892f34fe313fa946851adf86691a7b6d88c2b3f0abfce604b14f9ffabd1fe09f0be187836c051e0b1da3137f98a5d1e4c861940b7581dc6f168e32fddfc3bcc0331ecd8e1346094a154ab863a3fcef226088373903785fbbba2cb391cb9060268bcc6874212d5748bd278f03877fae7949e5337421ad3ff9bbcc3db0c6b990aeae2b79f688289d4a9a9f2ffe4f2f8", 0x2000, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x90, 0x0, 0x100000000077e1, {0x6, 0x3, 0x80000001, 0x5, 0x5, 0x4, {0x4000002, 0x104000000000002, 0x8800000000000000, 0x0, 0xfffffffffffffc00, 0x2, 0x4, 0x9, 0x3, 0x4000, 0x0, r7, r8, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006940)=ANY=[@ANYBLOB="4affe0450d2c1e14d8e3e42eb969ce00425e4dfd55819f7bbb2bfb0e3dc4062c29b8a2c81bf143f7074af5757697661d19081234a82d291d09fceb2071f5c750b72f784cd699b8308fa6c4518c", @ANYRES64=0x0, @ANYBLOB="0400000000000000020000000000000002000000000000006a000000000000003c10000069c9000004000000000000006f0000000000000005000000000000000500000000000000feffffffffffffffe70000000000000000404c0101000000420200000040000008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="8b7b00000001000000000000030000000000000004000000000000000900000001000000736b636970686572000000000000000002000000000000000300000000000000060000000000000005000000000000000f0000000500000003000000000000000400000000000000ff0f000000000000010000000000000001f8ffffffffffff0e000000000000000800000023ffffff0500000000600000a2830000", @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="0700000008000000000000000600000000000000f4ffffffffffffff0900000000100000736b6369706865720000000000000000"], 0x160) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x5ae2, 0x0, 0x4, 0xfffffffffffffffa, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000006b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-arm\x00'}, 0x58) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d3a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459000000000000000000", 0x53}], 0x2, &(0x7f0000000380)=[@op={0xfffffffffffffefa}], 0x10}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) 1m4.444084912s ago: executing program 0 (id=3403): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) unshare(0x4000600) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fdatasync(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, 0x0, &(0x7f0000000200)="ade5d7", &(0x7f0000000300)}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_MASTER={0x8}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_MTU={0x8}]}, 0x54}, 0x1, 0xba01}, 0x4000040) 1m4.36288162s ago: executing program 5 (id=3404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (fail_nth: 8) 1m3.501265818s ago: executing program 5 (id=3405): r0 = socket(0xa, 0x3, 0xf7) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x4200, 0x0) fcntl$setpipe(r1, 0x407, 0x9) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback={0x2000000}, [], "698f0f0ad7d2a1da"}}}}}}}, 0x0) 1m3.497471937s ago: executing program 6 (id=3406): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x44080) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r7, 0x5600, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x218, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r11 = socket$inet6(0xa, 0x3, 0x5) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004001000ffffe2c423dd3c97c7b8e46eb2fe1640964d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r12}, 0x38) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) 1m3.28584997s ago: executing program 0 (id=3407): r0 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x80201) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x69}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=' ', 0x1}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) 1m2.981867066s ago: executing program 5 (id=3408): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b017494917392", 0x81, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r4) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) listen(r6, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000200)={'netdevsim0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}) 1m2.826584832s ago: executing program 3 (id=3409): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x15, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) 1m2.525832279s ago: executing program 3 (id=3410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0xe, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFINDEX(r3, 0x400454da, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba8983b4a8d4c62f67d5becb53869dc8dd9b8a1d738866895205b82b4475f294961a0570ddec94310739a703276011c31635de2915a189f9d24d72bc74046c78c8a26a8cde0ec428758fa95acb71a9d1181a65f6ae52f5b69fabc3453b5a20976c04e96bf2d2662be38807cc8dda8bac28cd613e5e990e10a0e47e3df3c1aff4b957aa3ceb26bcd353ee7d9a34ba18825d3b329200740c53900fbc8c2eba76d82eca669116c67784b8ac3cbd3d85bc4f8ba73bce342f5e853731e5b1914250167013f", 0xe3}], 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) r5 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001080)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, 0x10) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff9202"]) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x120, 0x11, 0x148, 0x120, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0x9, 0x2], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1m2.167039651s ago: executing program 0 (id=3411): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) lstat(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x8cff, 0x1) 1m1.645087827s ago: executing program 5 (id=3412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) 1m1.614818401s ago: executing program 0 (id=3413): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001e000100000000000400000002000000f77a68b3e56e6cee7f40458e92220bb5eaf24524fa8831256a04675c6355ee2d185f3c319ed964d2bd54331351918a53c75c7b6a33dc0c61ae658ba715059ed834ac1d4b219354d1", @ANYRESDEC=r0, @ANYRES8=r1], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='pim6reg1\x00', 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=r0, @ANYRES8=r2], 0x68}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0xc, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x94) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x44003, 0x7b2107008c5c444c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @remote}], 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280), 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) fremovexattr(r6, &(0x7f00000001c0)=ANY=[@ANYRES32=r7]) r9 = syz_open_dev$media(0x0, 0xbffff002, 0x496500) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) socket$rxrpc(0x21, 0x2, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m0.857151319s ago: executing program 2 (id=3414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba8983b4a8d4c62f67d5becb53869dc8dd9b8a1d738866895205b82b4475f294961a0570ddec94310739a703276011c31635de2915a189f9d24d72bc74046c78c8a26a8cde0ec428758fa95acb71a9d1181a65f6ae52f5b69fabc3453b5a20976c04e96bf2d2662be38807cc8dda8bac28cd613e5e990e10a0e47e3df3c1aff4b957aa3ceb26bcd353ee7d9a34ba18825d3b329200740c53900fbc8c2eba76d82eca669116c67784b8ac3cbd3d85bc4f8ba73bce342f5e853731e5b1914250167013f", 0xe3}], 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) r4 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001080)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff9202"]) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x120, 0x11, 0x148, 0x120, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0x9, 0x2], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1m0.856447371s ago: executing program 5 (id=3424): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000006c0)={0x0, 0x18d6}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000007c0)={r2, 0x0, 0x1, [0x40]}, 0xa) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000840)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265006c7f306003d8a0f4bd0000000000e8ff00", [0x0, 0x2000000000001]}}) 1m0.595891025s ago: executing program 0 (id=3415): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x227}], 0x1}}], 0x1, 0x40000d0) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0xa, 0x2, 0x0, 0x8}) sendto$inet(r0, &(0x7f0000000300)="0906c422", 0x4, 0x40040011, 0x0, 0x0) 59.91369418s ago: executing program 5 (id=3416): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @local}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @empty}}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x4, 0xfad3, 0x101, 0x0, 0x0, "f6a6756c9832488c"}) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x4, 0xfad3, 0x101, 0x0, 0x0, "f6a6756c9832488c"}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6779ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809", 0x94}], 0x1) 0s ago: executing program 34 (id=3415): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x227}], 0x1}}], 0x1, 0x40000d0) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0xa, 0x2, 0x0, 0x8}) sendto$inet(r0, &(0x7f0000000300)="0906c422", 0x4, 0x40040011, 0x0, 0x0) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.351022][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 960.367809][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.382187][ T24] usb 4-1: Product: syz [ 960.387534][ T24] usb 4-1: Manufacturer: syz [ 960.392184][ T24] usb 4-1: SerialNumber: syz [ 960.412464][ T24] usb 4-1: config 0 descriptor?? [ 960.418656][T16990] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 960.429731][T16990] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 960.455832][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 960.480103][T17013] netem: incorrect ge model size [ 960.485324][T17013] netem: change failed [ 960.679212][T16990] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 960.701796][T16990] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 960.778977][T16796] veth0_vlan: entered promiscuous mode [ 960.975572][T16796] veth1_vlan: entered promiscuous mode [ 961.099375][T16796] veth0_macvtap: entered promiscuous mode [ 961.241140][T17021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.250413][T17021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.351987][T17021] gtp0: entered promiscuous mode [ 961.522561][T16796] veth1_macvtap: entered promiscuous mode [ 961.619915][T12510] usb 3-1: USB disconnect, device number 109 [ 961.706628][T16796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.798683][T16796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.861129][T16796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.892210][T16796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.952318][T16796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.016617][T16796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.692226][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.723826][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.849314][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.871306][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.761288][ T24] Error reading MAC address [ 963.790010][ T24] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 963.837773][ T24] usb 4-1: USB disconnect, device number 122 [ 964.791165][T17078] Cannot find add_set index 0 as target [ 965.589685][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.600629][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.614137][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.630339][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.653521][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 966.367135][T16411] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 966.401985][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.634594][T16411] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 966.663356][T16411] usb 2-1: config 0 has no interface number 0 [ 966.690283][T16411] usb 2-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 966.741373][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.782490][T16411] usb 2-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.807618][T16411] usb 2-1: config 0 interface 45 has no altsetting 0 [ 966.824744][T16411] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 966.855227][T16411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.900329][T16411] usb 2-1: config 0 descriptor?? [ 967.048459][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.670027][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.753442][ T5854] Bluetooth: hci0: command tx timeout [ 968.092505][T16411] usbhid 2-1:0.45: can't add hid device: -71 [ 968.112691][T16411] usbhid 2-1:0.45: probe with driver usbhid failed with error -71 [ 968.156238][T16411] usb 2-1: USB disconnect, device number 118 [ 968.458417][T17090] chnl_net:caif_netlink_parms(): no params data found [ 968.853466][ T44] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 969.046789][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 969.076908][ T44] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 969.085787][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 969.097770][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 969.108264][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 969.168043][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 969.179112][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.221059][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.287040][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.584989][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 969.636307][ T44] usbtmc 4-1:16.0: can't read capabilities [ 969.678723][T17161] program syz.1.3084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 969.840613][ T5854] Bluetooth: hci0: command tx timeout [ 969.869772][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 969.889038][T17137] usbtmc 4-1:16.0: Unable to send data, error -71 [ 969.989848][T17169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3082'. [ 970.006029][ T1140] bond0 (unregistering): Released all slaves [ 970.478766][ T1140] bond1 (unregistering): Released all slaves [ 970.683565][ T1140] tipc: Disabling bearer [ 970.697763][ T1140] tipc: Disabling bearer [ 970.720472][ T1140] tipc: Left network mode [ 970.774185][ T1140] IPVS: stopping backup sync thread 9596 ... [ 971.123471][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 971.123494][ T30] audit: type=1326 audit(1752902330.471:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.4.3089" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 971.441400][T17090] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.458699][T17090] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.476590][T17090] bridge_slave_0: entered allmulticast mode [ 971.489456][T17090] bridge_slave_0: entered promiscuous mode [ 971.544436][T17090] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.587643][T17090] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.614074][T17090] bridge_slave_1: entered allmulticast mode [ 971.631748][T17090] bridge_slave_1: entered promiscuous mode [ 971.721833][ T44] usb 4-1: USB disconnect, device number 123 [ 971.895562][ T5854] Bluetooth: hci0: command tx timeout [ 971.938971][ T1140] hsr_slave_0: left promiscuous mode [ 971.974043][ T1140] hsr_slave_1: left promiscuous mode [ 972.025328][ T1140] veth1_macvtap: left promiscuous mode [ 972.030943][ T1140] veth0_macvtap: left promiscuous mode [ 972.052933][ T1140] veth1_vlan: left promiscuous mode [ 972.266894][ T44] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 972.414825][ T44] usb 4-1: device descriptor read/64, error -71 [ 972.703514][ T44] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 972.843639][ T44] usb 4-1: device descriptor read/64, error -71 [ 972.888758][T16411] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 972.973790][ T44] usb usb4-port1: attempt power cycle [ 973.073610][T16411] usb 3-1: Using ep0 maxpacket: 8 [ 973.095045][T16411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.138307][T16411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 973.171649][T16411] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 973.186017][T16411] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.199312][T16411] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 973.216799][T16411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.265088][T16411] usb 3-1: config 0 descriptor?? [ 973.327339][ T44] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 973.374128][ T44] usb 4-1: device descriptor read/8, error -71 [ 973.648647][ T44] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 973.681363][ T44] usb 4-1: device descriptor read/8, error -71 [ 973.807094][ T44] usb usb4-port1: unable to enumerate USB device [ 973.843337][T17201] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.851017][T17201] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.913156][T17090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.939652][T17090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.985911][ T5854] Bluetooth: hci0: command tx timeout [ 974.127564][T17090] team0: Port device team_slave_0 added [ 974.153591][T17090] team0: Port device team_slave_1 added [ 974.333960][T17217] syzkaller1: entered promiscuous mode [ 974.340134][T17217] syzkaller1: entered allmulticast mode [ 974.349119][T17090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.369998][T17090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.449990][T17090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.536694][T17090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.550652][T17090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.582964][T17090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.641408][ T1140] IPVS: stop unused estimator thread 0... [ 974.727722][T17090] hsr_slave_0: entered promiscuous mode [ 974.742941][T17090] hsr_slave_1: entered promiscuous mode [ 974.752374][T17090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.765884][T17090] Cannot create hsr debugfs directory [ 975.032732][T17234] netlink: 'syz.4.3099': attribute type 3 has an invalid length. [ 975.070454][T17234] netlink: 152988 bytes leftover after parsing attributes in process `syz.4.3099'. [ 975.182548][T17237] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3100'. [ 975.194102][T17240] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3100'. [ 975.324926][ T24] usb 3-1: USB disconnect, device number 110 [ 975.690340][T17251] bridge0: port 3(netdevsim0) entered disabled state [ 975.697325][T17251] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.705016][T17251] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.740764][T17254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.764419][T17254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 975.913523][T16411] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 975.992475][T17253] syzkaller1: entered promiscuous mode [ 975.999691][T17253] syzkaller1: entered allmulticast mode [ 976.095537][T16411] usb 2-1: config 7 has an invalid interface number: 78 but max is 0 [ 976.117642][T16411] usb 2-1: config 7 has no interface number 0 [ 976.128484][T16411] usb 2-1: config 7 interface 78 has no altsetting 0 [ 976.151284][T16411] usb 2-1: New USB device found, idVendor=19d2, idProduct=7936, bcdDevice=ca.b6 [ 976.176774][T16411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.198395][T16411] usb 2-1: Product: syz [ 976.212450][T16411] usb 2-1: Manufacturer: syz [ 976.224218][T16411] usb 2-1: SerialNumber: syz [ 976.462596][T16411] usb 2-1: bad CDC descriptors [ 976.555981][T16411] usb 2-1: USB disconnect, device number 119 [ 977.523782][ T24] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 977.683447][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 977.697378][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 977.732265][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.787440][ T24] usb 5-1: Product: syz [ 977.791806][ T24] usb 5-1: Manufacturer: syz [ 977.812176][ T24] usb 5-1: SerialNumber: syz [ 977.874632][ T24] usb 5-1: config 0 descriptor?? [ 977.930717][T17297] bridge0: port 3(netdevsim0) entered blocking state [ 977.953823][T17297] bridge0: port 3(netdevsim0) entered disabled state [ 977.962253][T17297] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 977.965753][T17297] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 977.966399][T17297] bridge0: port 3(netdevsim0) entered blocking state [ 977.966564][T17297] bridge0: port 3(netdevsim0) entered forwarding state [ 978.119880][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 978.303125][T17090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 978.344556][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 978.414565][T17090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 978.492140][T17090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 978.513374][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 978.557387][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.603427][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 978.620558][T17090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 978.649070][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 978.699873][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 978.768463][ T5912] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 978.844685][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.993197][ T5912] usb 4-1: config 0 descriptor?? [ 979.001356][T17090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.071447][T17090] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.126520][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.133784][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.175225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.182418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.252985][T17090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 979.297739][T17090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.529826][T17321] syzkaller1: entered promiscuous mode [ 979.540000][T17321] syzkaller1: entered allmulticast mode [ 979.710776][T17090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.200152][T17090] veth0_vlan: entered promiscuous mode [ 980.280903][T17090] veth1_vlan: entered promiscuous mode [ 980.376593][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 980.409906][T16411] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 980.510054][ T5940] usb 5-1: USB disconnect, device number 118 [ 980.516874][T17090] veth0_macvtap: entered promiscuous mode [ 980.566253][T17090] veth1_macvtap: entered promiscuous mode [ 980.623848][T16411] usb 2-1: Using ep0 maxpacket: 8 [ 980.651435][T13027] usb 4-1: USB disconnect, device number 2 [ 980.673484][T16411] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 980.723478][T16411] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 980.765921][T17090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.777973][T16411] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 980.798752][T16411] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 980.820876][T16411] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 980.868112][T17090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.933337][T16411] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.970581][T17090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.001978][T16411] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 981.013332][T17090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.022316][T17090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.031491][T16411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.049933][T17090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.167038][T17345] loop6: detected capacity change from 0 to 7 [ 981.181008][ T6415] Dev loop6: unable to read RDB block 7 [ 981.190403][ T6415] loop6: unable to read partition table [ 981.213187][ T6415] loop6: partition table beyond EOD, truncated [ 981.258516][T17345] Dev loop6: unable to read RDB block 7 [ 981.264571][T16411] usb 2-1: GET_CAPABILITIES returned 0 [ 981.283880][T16411] usbtmc 2-1:16.0: can't read capabilities [ 981.304334][T17345] loop6: unable to read partition table [ 981.312336][T17345] loop6: partition table beyond EOD, truncated [ 981.321238][T17345] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 981.473028][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 981.492229][T17336] usbtmc 2-1:16.0: Unable to send data, error -71 [ 981.511812][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.555115][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.575236][T17356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3119'. [ 981.613537][T12510] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 981.677652][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.706859][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.842208][T12510] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 981.886598][T12510] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 981.913634][T12510] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.941911][T12510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.969071][T17348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 981.992593][T12510] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 982.287709][T17376] syzkaller1: entered promiscuous mode [ 982.305093][T17376] syzkaller1: entered allmulticast mode [ 983.569787][T17392] FAULT_INJECTION: forcing a failure. [ 983.569787][T17392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.628356][ T24] usb 2-1: USB disconnect, device number 120 [ 983.671463][T17392] CPU: 1 UID: 0 PID: 17392 Comm: syz.0.3130 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 983.671512][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 983.671536][T17392] Call Trace: [ 983.671545][T17392] [ 983.671555][T17392] dump_stack_lvl+0x189/0x250 [ 983.671587][T17392] ? __pfx____ratelimit+0x10/0x10 [ 983.671610][T17392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.671637][T17392] ? __pfx__printk+0x10/0x10 [ 983.671667][T17392] ? __might_fault+0xb0/0x130 [ 983.671709][T17392] should_fail_ex+0x414/0x560 [ 983.671738][T17392] _copy_from_user+0x2d/0xb0 [ 983.671769][T17392] __sys_sendto+0x25c/0x520 [ 983.671809][T17392] ? __pfx___sys_sendto+0x10/0x10 [ 983.671836][T17392] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 983.671874][T17392] ? __fget_files+0x3a0/0x420 [ 983.671904][T17392] ? ksys_write+0x22a/0x250 [ 983.671944][T17392] __ia32_sys_sendto+0xdd/0x100 [ 983.671978][T17392] __do_fast_syscall_32+0xb6/0x2b0 [ 983.672004][T17392] ? lockdep_hardirqs_on+0x9c/0x150 [ 983.672031][T17392] do_fast_syscall_32+0x34/0x80 [ 983.672057][T17392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.672083][T17392] RIP: 0023:0xf70ae539 [ 983.672102][T17392] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 983.672122][T17392] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 983.672145][T17392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 983.672161][T17392] RDX: 00000000000005e0 RSI: 0000000020008040 RDI: 0000000080000080 [ 983.672175][T17392] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 983.672189][T17392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 983.672202][T17392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.672232][T17392] [ 984.311156][ T24] usb 3-1: USB disconnect, device number 111 [ 984.360527][T17403] bridge0: port 3(netdevsim0) entered blocking state [ 984.367617][T17403] bridge0: port 3(netdevsim0) entered disabled state [ 984.611816][T17403] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 984.616368][T17403] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 985.116480][T17420] fuse: Unknown parameter 'group_i00000000000000000000' [ 985.203388][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 985.203413][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 985.373341][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 985.380230][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 985.388953][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 985.410997][T17418] syzkaller1: entered promiscuous mode [ 985.483446][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 985.516128][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.539947][T17418] syzkaller1: entered allmulticast mode [ 985.568018][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 985.599395][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 985.820091][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 985.859447][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 985.876134][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.902248][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 985.948214][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 985.961194][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.000531][ T24] usb 2-1: config 0 descriptor?? [ 986.037742][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.233460][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 986.366329][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 986.374554][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.717968][ T9] usb 4-1: usb_control_msg returned -71 [ 986.831318][ T9] usbtmc 4-1:16.0: can't read capabilities [ 987.001126][ T9] usb 4-1: USB disconnect, device number 3 [ 987.279222][ T5940] usb 2-1: USB disconnect, device number 121 [ 987.319563][T17451] FAULT_INJECTION: forcing a failure. [ 987.319563][T17451] name failslab, interval 1, probability 0, space 0, times 0 [ 987.336639][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.2.3141 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 987.336668][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.336682][T17451] Call Trace: [ 987.336690][T17451] [ 987.336699][T17451] dump_stack_lvl+0x189/0x250 [ 987.336729][T17451] ? __pfx____ratelimit+0x10/0x10 [ 987.336751][T17451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.336776][T17451] ? __pfx__printk+0x10/0x10 [ 987.336825][T17451] should_fail_ex+0x414/0x560 [ 987.336852][T17451] should_failslab+0xa8/0x100 [ 987.336885][T17451] kmem_cache_alloc_noprof+0x73/0x3c0 [ 987.336913][T17451] ? skb_clone+0x212/0x3a0 [ 987.336938][T17451] skb_clone+0x212/0x3a0 [ 987.336961][T17451] __netlink_deliver_tap+0x404/0x850 [ 987.337022][T17451] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.337053][T17451] netlink_deliver_tap+0x19c/0x1b0 [ 987.337086][T17451] netlink_sendskb+0x68/0x140 [ 987.337123][T17451] netlink_rcv_skb+0x28c/0x470 [ 987.337150][T17451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 987.337179][T17451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 987.337219][T17451] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.337246][T17451] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.337279][T17451] netlink_unicast+0x759/0x8e0 [ 987.337316][T17451] netlink_sendmsg+0x805/0xb30 [ 987.337353][T17451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.337385][T17451] ? __import_iovec+0x5d4/0x7f0 [ 987.337410][T17451] ? aa_sock_msg_perm+0x94/0x160 [ 987.337434][T17451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.337457][T17451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.337488][T17451] __sock_sendmsg+0x219/0x270 [ 987.337516][T17451] ____sys_sendmsg+0x505/0x830 [ 987.337552][T17451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.337600][T17451] ___sys_sendmsg+0x21f/0x2a0 [ 987.337633][T17451] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.337704][T17451] ? __fget_files+0x2a/0x420 [ 987.337723][T17451] ? __fget_files+0x3a0/0x420 [ 987.337752][T17451] __sys_sendmsg+0x164/0x220 [ 987.337786][T17451] ? __pfx___sys_sendmsg+0x10/0x10 [ 987.337841][T17451] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 987.337866][T17451] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.337890][T17451] __do_fast_syscall_32+0xb6/0x2b0 [ 987.337915][T17451] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.337940][T17451] do_fast_syscall_32+0x34/0x80 [ 987.337964][T17451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 987.337988][T17451] RIP: 0023:0xf7f85539 [ 987.338006][T17451] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 987.338025][T17451] RSP: 002b:00000000f506455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 987.338046][T17451] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 987.338059][T17451] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.338072][T17451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.338083][T17451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 987.338095][T17451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.338122][T17451] [ 987.867138][T17437] team0 (unregistering): Port device team_slave_0 removed [ 988.016407][T17437] team0 (unregistering): Port device team_slave_1 removed [ 988.114343][T17450] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 989.072543][T17482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 989.145372][ T2995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.215317][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 989.434507][ T2995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.741615][ T2995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.000164][ T2995] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 990.033470][ T44] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 990.043015][ T2995] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 990.074666][ T2995] bridge0: port 3(netdevsim0) entered disabled state [ 990.155755][ T2995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.353549][T17508] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 990.365717][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 990.376186][ T44] usb 3-1: not running at top speed; connect to a high speed hub [ 990.395586][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.403429][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.416671][ T44] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 990.436884][ T44] usb 3-1: config 3 has no interface number 0 [ 990.443060][ T44] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 990.500405][ T44] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0xF has invalid maxpacket 65, setting to 64 [ 990.555326][ T44] usb 3-1: config 3 interface 153 altsetting 128 has an endpoint descriptor with address 0x16, changing to 0x6 [ 990.610401][ T44] usb 3-1: config 3 interface 153 has no altsetting 0 [ 990.650369][ T44] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 990.660188][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.683777][ T44] usb 3-1: Product: syz [ 990.706481][ T44] usb 3-1: Manufacturer: syz [ 990.730631][ T44] usb 3-1: SerialNumber: syz [ 990.794228][T17496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 990.801755][T17496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 990.854769][ T2995] bridge_slave_1: left allmulticast mode [ 990.925486][ T2995] bridge_slave_1: left promiscuous mode [ 990.932916][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.984635][ T2995] bridge_slave_0: left allmulticast mode [ 991.005493][ T2995] bridge_slave_0: left promiscuous mode [ 991.023526][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.058866][T17496] netlink: 'syz.2.3155': attribute type 15 has an invalid length. [ 991.066826][T17496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 991.370573][T15071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 991.396769][T15071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 991.406764][T15071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 991.472142][T15071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 991.480368][T15071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 993.170811][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.216438][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.252492][ T2995] bond0 (unregistering): Released all slaves [ 993.352649][T17548] syzkaller1: entered promiscuous mode [ 993.398211][T17548] syzkaller1: entered allmulticast mode [ 993.406351][ T44] sisusb 3-1:3.153: Invalid USB2VGA device [ 993.422029][ T44] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 993.492696][ T44] usb 3-1: USB disconnect, device number 112 [ 993.573573][ T5854] Bluetooth: hci3: command tx timeout [ 993.983840][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 994.175107][T17570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 994.183645][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 994.194770][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 994.218471][ T2995] hsr_slave_0: left promiscuous mode [ 994.235566][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 994.250422][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.262976][ T2995] hsr_slave_1: left promiscuous mode [ 994.279050][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.286844][ T24] usb 5-1: Product: syz [ 994.305966][ T24] usb 5-1: Manufacturer: syz [ 994.312982][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.322567][ T24] usb 5-1: SerialNumber: syz [ 994.340245][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.350629][ T24] usb 5-1: config 0 descriptor?? [ 994.367624][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.380518][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 994.397517][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'. [ 994.423813][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 994.469606][ T2995] veth1_macvtap: left promiscuous mode [ 994.481113][ T2995] veth0_macvtap: left promiscuous mode [ 994.497473][ T2995] veth1_vlan: left promiscuous mode [ 994.507550][ T2995] veth0_vlan: left promiscuous mode [ 994.669865][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 994.762059][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 994.802867][ T24] em28xx 5-1:0.0: board has no eeprom [ 994.895399][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 994.921713][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 994.951328][T13027] em28xx 5-1:0.0: Binding DVB extension [ 994.990170][ T24] usb 5-1: USB disconnect, device number 119 [ 995.062977][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 995.196046][T13027] em28xx 5-1:0.0: Registering input extension [ 995.247384][ T24] em28xx 5-1:0.0: Closing input extension [ 995.416218][ T24] em28xx 5-1:0.0: Freeing device [ 995.654453][ T5854] Bluetooth: hci3: command tx timeout [ 995.796533][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 995.973769][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 996.003016][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 996.028479][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 996.057316][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 996.067501][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 996.093888][ T24] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 996.114871][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 996.144636][ T24] usb 5-1: Product: syz [ 996.158080][ T24] usb 5-1: Manufacturer: syz [ 996.167649][ T24] usb 5-1: SerialNumber: syz [ 996.190656][ T24] usb 5-1: config 0 descriptor?? [ 996.210300][ T24] usb 5-1: NFC: intf ffff888028a16000 id ffffffff8eb516e0 [ 996.276999][ T24] nfcmrvl 5-1:0.0: NFC: registered with nci successfully [ 996.443640][T17591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.456680][T17591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.465677][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 996.552719][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 996.574270][ T10] usb 5-1: USB disconnect, device number 120 [ 996.600490][ T10] usb 5-1: NFC: intf ffff888028a16000 [ 997.225462][T17587] vlan2: entered promiscuous mode [ 997.230567][T17587] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 997.255613][T17587] vlan2: entered allmulticast mode [ 997.260787][T17587] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 997.648777][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 997.669883][T17644] netem: incorrect ge model size [ 997.674900][T17644] netem: change failed [ 997.736021][ T5854] Bluetooth: hci3: command tx timeout [ 997.760497][T17530] chnl_net:caif_netlink_parms(): no params data found [ 997.863432][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 998.054743][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 998.104730][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 998.140160][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 998.156062][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.162509][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.186478][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 998.211829][ T24] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 998.221509][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.223634][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 998.229998][ T24] usb 3-1: Product: syz [ 998.238275][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.251203][ T24] usb 3-1: Manufacturer: syz [ 998.257024][ T24] usb 3-1: SerialNumber: syz [ 998.275974][ T24] usb 3-1: config 0 descriptor?? [ 998.284239][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.292073][ T24] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 998.311030][T17530] bridge_slave_0: entered allmulticast mode [ 998.334426][T17530] bridge_slave_0: entered promiscuous mode [ 998.368916][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.413419][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 998.427529][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.463701][T17530] bridge_slave_1: entered allmulticast mode [ 998.473781][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 998.482708][T17530] bridge_slave_1: entered promiscuous mode [ 998.543900][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 998.558294][ T10] usb 4-1: string descriptor 0 read error: -22 [ 998.564783][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 998.584644][T17664] syzkaller1: entered promiscuous mode [ 998.590183][T17664] syzkaller1: entered allmulticast mode [ 998.607164][ T24] scsi host1: usb-storage 3-1:0.0 [ 998.623455][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 998.678533][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 998.689867][ T24] usb 3-1: USB disconnect, device number 113 [ 998.733581][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 998.775711][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 998.836120][ T10] usb 4-1: media controller created [ 998.838378][T17673] bridge0: port 3(netdevsim0) entered blocking state [ 998.874746][T17673] bridge0: port 3(netdevsim0) entered disabled state [ 998.887923][T17673] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 998.911536][T17650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.929256][T17673] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 998.981049][T17650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.012094][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.095343][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.123145][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.274215][ T9] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 999.453473][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 999.556741][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.668151][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 999.731773][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.775651][T17530] team0: Port device team_slave_0 added [ 999.793216][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.821967][ T5854] Bluetooth: hci3: command tx timeout [ 999.846420][T17530] team0: Port device team_slave_1 added [ 999.920305][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 999.948023][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.109988][ T30] audit: type=1326 audit(1752902359.561:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.132143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.168298][ T30] audit: type=1326 audit(1752902359.561:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.170096][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.207062][ T30] audit: type=1326 audit(1752902359.561:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.235687][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.263702][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1000.276312][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.305755][ T9] usb 5-1: config 0 descriptor?? [ 1000.463331][ T30] audit: type=1326 audit(1752902359.561:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.558090][ T10] usb 4-1: USB disconnect, device number 4 [ 1000.649695][ T30] audit: type=1326 audit(1752902359.591:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.767463][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.789914][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.815937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.829471][ T30] audit: type=1326 audit(1752902359.591:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.851959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.891059][ T30] audit: type=1326 audit(1752902359.601:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1000.941153][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.089595][ T30] audit: type=1326 audit(1752902359.601:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1001.376349][ T30] audit: type=1326 audit(1752902359.601:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1001.398376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.417698][ T30] audit: type=1326 audit(1752902359.601:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.0.3182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1001.550710][T17530] hsr_slave_0: entered promiscuous mode [ 1001.590779][T17530] hsr_slave_1: entered promiscuous mode [ 1001.659130][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.757072][T17530] Cannot create hsr debugfs directory [ 1001.866056][ T9] usb 5-1: USB disconnect, device number 121 [ 1002.370577][T17710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3187'. [ 1002.407926][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3188'. [ 1002.489006][T17718] netem: incorrect ge model size [ 1002.503462][T17718] netem: change failed [ 1002.675314][T17710] could not allocate digest TFM handle cmac-aes-ce [ 1002.992494][T17530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1003.042603][T17530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1003.118779][T17530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1003.169089][T17728] FAULT_INJECTION: forcing a failure. [ 1003.169089][T17728] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.223304][T17728] CPU: 0 UID: 0 PID: 17728 Comm: syz.4.3190 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1003.223335][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1003.223348][T17728] Call Trace: [ 1003.223356][T17728] [ 1003.223365][T17728] dump_stack_lvl+0x189/0x250 [ 1003.223401][T17728] ? __pfx____ratelimit+0x10/0x10 [ 1003.223424][T17728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.223448][T17728] ? __pfx__printk+0x10/0x10 [ 1003.223490][T17728] should_fail_ex+0x414/0x560 [ 1003.223517][T17728] should_failslab+0xa8/0x100 [ 1003.223550][T17728] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1003.223578][T17728] ? skb_clone+0x212/0x3a0 [ 1003.223603][T17728] skb_clone+0x212/0x3a0 [ 1003.223626][T17728] __netlink_deliver_tap+0x404/0x850 [ 1003.223668][T17728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1003.223697][T17728] netlink_deliver_tap+0x19c/0x1b0 [ 1003.223726][T17728] netlink_sendskb+0x68/0x140 [ 1003.223754][T17728] netlink_rcv_skb+0x28c/0x470 [ 1003.223782][T17728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1003.223812][T17728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.223853][T17728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1003.223881][T17728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1003.223914][T17728] netlink_unicast+0x759/0x8e0 [ 1003.223951][T17728] netlink_sendmsg+0x805/0xb30 [ 1003.223989][T17728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.224021][T17728] ? __import_iovec+0x5d4/0x7f0 [ 1003.224045][T17728] ? aa_sock_msg_perm+0x94/0x160 [ 1003.224067][T17728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1003.224088][T17728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.224116][T17728] __sock_sendmsg+0x219/0x270 [ 1003.224141][T17728] ____sys_sendmsg+0x505/0x830 [ 1003.224176][T17728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.224221][T17728] ___sys_sendmsg+0x21f/0x2a0 [ 1003.224254][T17728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.224316][T17728] ? __fget_files+0x2a/0x420 [ 1003.224334][T17728] ? __fget_files+0x3a0/0x420 [ 1003.224363][T17728] __sys_sendmsg+0x164/0x220 [ 1003.224402][T17728] ? __pfx___sys_sendmsg+0x10/0x10 [ 1003.224447][T17728] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1003.224471][T17728] ? lockdep_hardirqs_on+0x9c/0x150 [ 1003.224492][T17728] __do_fast_syscall_32+0xb6/0x2b0 [ 1003.224517][T17728] ? lockdep_hardirqs_on+0x9c/0x150 [ 1003.224541][T17728] do_fast_syscall_32+0x34/0x80 [ 1003.224563][T17728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1003.224587][T17728] RIP: 0023:0xf704e539 [ 1003.224604][T17728] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1003.224623][T17728] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1003.224644][T17728] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 1003.224668][T17728] RDX: 0000000000040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.224680][T17728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.224691][T17728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1003.224702][T17728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.224729][T17728] [ 1003.230961][T17530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1003.498477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.613395][T17732] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1004.162770][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.295150][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.328659][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.335913][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.405533][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.412759][ T6994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.466074][T17760] binder: 17757:17760 ioctl f504 0 returned -22 [ 1004.830121][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.076733][T17530] veth0_vlan: entered promiscuous mode [ 1005.160323][T17530] veth1_vlan: entered promiscuous mode [ 1005.289949][T17530] veth0_macvtap: entered promiscuous mode [ 1005.301507][T17530] veth1_macvtap: entered promiscuous mode [ 1005.341925][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.383036][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.437003][T17530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.447504][T17530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.464795][T17530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.475308][T17530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.497634][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'. [ 1005.597256][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 1005.670297][T17791] netem: incorrect ge model size [ 1005.724618][T17791] netem: change failed [ 1005.785265][T17795] FAULT_INJECTION: forcing a failure. [ 1005.785265][T17795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1005.850055][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.870972][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.2.3204 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1005.871002][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.871015][T17795] Call Trace: [ 1005.871024][T17795] [ 1005.871032][T17795] dump_stack_lvl+0x189/0x250 [ 1005.871061][T17795] ? __pfx____ratelimit+0x10/0x10 [ 1005.871083][T17795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.871107][T17795] ? __pfx__printk+0x10/0x10 [ 1005.871136][T17795] ? fs_reclaim_acquire+0x7d/0x100 [ 1005.871165][T17795] should_fail_ex+0x414/0x560 [ 1005.871191][T17795] prepare_alloc_pages+0x213/0x610 [ 1005.871219][T17795] __alloc_frozen_pages_noprof+0x123/0x370 [ 1005.871245][T17795] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1005.871271][T17795] ? rcu_is_watching+0x15/0xb0 [ 1005.871317][T17795] ? policy_nodemask+0x27c/0x720 [ 1005.871353][T17795] alloc_pages_mpol+0x232/0x4a0 [ 1005.871389][T17795] alloc_pages_noprof+0xa9/0x190 [ 1005.871423][T17795] alloc_skb_with_frags+0x233/0x890 [ 1005.871479][T17795] sock_alloc_send_pskb+0x857/0x990 [ 1005.871532][T17795] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1005.871558][T17795] ? dev_get_by_index+0x22/0x2e0 [ 1005.871579][T17795] ? dev_get_by_index+0x22/0x2e0 [ 1005.871608][T17795] packet_sendmsg+0x3383/0x5060 [ 1005.871649][T17795] ? aa_bind_mount+0x140/0x590 [ 1005.871698][T17795] ? __pfx___might_resched+0x10/0x10 [ 1005.871721][T17795] ? __lock_acquire+0xab9/0xd20 [ 1005.871755][T17795] ? __pfx_packet_sendmsg+0x10/0x10 [ 1005.871781][T17795] ? aa_sk_perm+0x81e/0x950 [ 1005.871807][T17795] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1005.871837][T17795] ? aa_sock_msg_perm+0x94/0x160 [ 1005.871860][T17795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1005.871881][T17795] ? __pfx_packet_sendmsg+0x10/0x10 [ 1005.871910][T17795] __sock_sendmsg+0x219/0x270 [ 1005.871936][T17795] __sys_sendto+0x3bd/0x520 [ 1005.871966][T17795] ? __pfx___sys_sendto+0x10/0x10 [ 1005.871991][T17795] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1005.872027][T17795] ? __fget_files+0x3a0/0x420 [ 1005.872056][T17795] ? ksys_write+0x22a/0x250 [ 1005.872092][T17795] __ia32_sys_sendto+0xdd/0x100 [ 1005.872123][T17795] __do_fast_syscall_32+0xb6/0x2b0 [ 1005.872147][T17795] ? lockdep_hardirqs_on+0x9c/0x150 [ 1005.872172][T17795] do_fast_syscall_32+0x34/0x80 [ 1005.872195][T17795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.872219][T17795] RIP: 0023:0xf7f85539 [ 1005.872236][T17795] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1005.872254][T17795] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1005.872275][T17795] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 1005.872289][T17795] RDX: 00000000000100a6 RSI: 0000000000000000 RDI: 0000000080000140 [ 1005.872302][T17795] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1005.872313][T17795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1005.872325][T17795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.872367][T17795] [ 1005.875792][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.509044][T17801] syzkaller1: entered promiscuous mode [ 1006.525953][T17801] syzkaller1: entered allmulticast mode [ 1006.593171][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.629486][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.350017][T17861] pim6reg: entered allmulticast mode [ 1010.616680][T17855] bridge_slave_0: left allmulticast mode [ 1010.622745][T17855] bridge_slave_0: left promiscuous mode [ 1010.631699][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.656291][T17855] bridge_slave_1: left allmulticast mode [ 1010.674719][T17855] bridge_slave_1: left promiscuous mode [ 1010.691887][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.712021][T17864] netlink: 'syz.3.3215': attribute type 10 has an invalid length. [ 1010.768811][T17855] bond0: (slave bond_slave_0): Releasing backup interface [ 1010.795483][T17855] bond0: (slave bond_slave_1): Releasing backup interface [ 1010.831859][T17855] team0: Port device team_slave_0 removed [ 1010.872111][T17855] team0: Port device team_slave_1 removed [ 1010.881508][T17855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.892026][T17855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.045503][T17855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.118654][T17855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.195242][T17855] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1011.204340][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'. [ 1011.282525][T17855] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1011.373659][T17855] bridge0: port 3(netdevsim0) entered disabled state [ 1011.746650][T17864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.832161][T17864] team0: Port device bond0 added [ 1011.890256][T17856] pim6reg: left allmulticast mode [ 1011.964489][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3218'. [ 1012.028674][T17869] netem: incorrect ge model size [ 1012.046828][T17869] netem: change failed [ 1012.065038][T17886] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1012.125137][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.132868][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.571597][T17896] syzkaller1: entered promiscuous mode [ 1012.584423][T17896] syzkaller1: entered allmulticast mode [ 1013.940108][T17927] kvm_intel: kvm [17926]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 1014.583917][T17943] xt_bpf: check failed: parse error [ 1015.649817][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1015.943411][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1016.095996][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1016.144231][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1016.151011][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1016.250148][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.251447][T17967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1016.308254][ T10] usb 6-1: config 0 descriptor?? [ 1016.350580][ T10] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1016.401175][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1016.417592][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1016.443693][ T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1016.471652][ T10] usb 6-1: media controller created [ 1016.593063][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1016.657830][T17985] FAULT_INJECTION: forcing a failure. [ 1016.657830][T17985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.686153][ T10] set interface failed [ 1016.686617][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1016.710109][T17985] CPU: 1 UID: 0 PID: 17985 Comm: syz.0.3241 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1016.710140][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1016.710155][T17985] Call Trace: [ 1016.710165][T17985] [ 1016.710175][T17985] dump_stack_lvl+0x189/0x250 [ 1016.710207][T17985] ? __pfx____ratelimit+0x10/0x10 [ 1016.710232][T17985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.710259][T17985] ? __pfx__printk+0x10/0x10 [ 1016.710290][T17985] ? __might_fault+0xb0/0x130 [ 1016.710333][T17985] should_fail_ex+0x414/0x560 [ 1016.710362][T17985] _copy_from_user+0x2d/0xb0 [ 1016.710394][T17985] get_compat_msghdr+0xad/0x4a0 [ 1016.710436][T17985] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1016.710484][T17985] ___sys_sendmsg+0x193/0x2a0 [ 1016.710522][T17985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.710592][T17985] ? __fget_files+0x2a/0x420 [ 1016.710612][T17985] ? __fget_files+0x3a0/0x420 [ 1016.710651][T17985] __sys_sendmsg+0x164/0x220 [ 1016.710689][T17985] ? __pfx___sys_sendmsg+0x10/0x10 [ 1016.710738][T17985] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1016.710764][T17985] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.710802][T17985] __do_fast_syscall_32+0xb6/0x2b0 [ 1016.710828][T17985] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.710855][T17985] do_fast_syscall_32+0x34/0x80 [ 1016.710880][T17985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1016.710907][T17985] RIP: 0023:0xf70ae539 [ 1016.710925][T17985] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1016.710944][T17985] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1016.710967][T17985] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 1016.710982][T17985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.710995][T17985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1016.711007][T17985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1016.711020][T17985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1016.711050][T17985] [ 1016.711953][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1016.711966][ T30] audit: type=1326 audit(1752902376.161:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.0.3241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1016.724755][ T10] error writing reg: 0xff, val: 0x00 [ 1016.756016][T17988] syzkaller1: entered promiscuous mode [ 1016.968496][T17988] syzkaller1: entered allmulticast mode [ 1017.007597][ T30] audit: type=1326 audit(1752902376.191:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.0.3241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1017.023432][ T10] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1017.033389][ T979] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1017.092329][ T10] usb 6-1: USB disconnect, device number 2 [ 1017.213735][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 1017.228766][ T979] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1017.252212][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.287170][ T979] usb 4-1: Product: syz [ 1017.291495][ T979] usb 4-1: Manufacturer: syz [ 1017.320021][ T979] usb 4-1: SerialNumber: syz [ 1017.369259][ T979] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1017.388635][ T979] r8152-cfgselector 4-1: config 0 descriptor?? [ 1017.544718][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1017.597705][ T30] audit: type=1326 audit(1752902377.051:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1017.716778][ T30] audit: type=1326 audit(1752902377.081:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1017.845364][ T979] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 1017.867096][ T30] audit: type=1326 audit(1752902377.081:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1017.981909][ T30] audit: type=1326 audit(1752902377.081:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1018.087353][ T30] audit: type=1326 audit(1752902377.081:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1018.122119][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 1018.182823][ T30] audit: type=1326 audit(1752902377.081:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1018.238545][ T30] audit: type=1326 audit(1752902377.081:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1018.459024][ T30] audit: type=1326 audit(1752902377.081:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.5.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1018.553630][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1018.723849][ T10] usb 3-1: device descriptor read/64, error -71 [ 1018.824166][T18030] FAULT_INJECTION: forcing a failure. [ 1018.824166][T18030] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.862627][T18030] CPU: 1 UID: 0 PID: 18030 Comm: syz.3.3252 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1018.862663][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1018.862676][T18030] Call Trace: [ 1018.862685][T18030] [ 1018.862694][T18030] dump_stack_lvl+0x189/0x250 [ 1018.862724][T18030] ? __pfx____ratelimit+0x10/0x10 [ 1018.862747][T18030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.862772][T18030] ? __pfx__printk+0x10/0x10 [ 1018.862806][T18030] ? __pfx___might_resched+0x10/0x10 [ 1018.862830][T18030] ? fs_reclaim_acquire+0x7d/0x100 [ 1018.862855][T18030] should_fail_ex+0x414/0x560 [ 1018.862882][T18030] should_failslab+0xa8/0x100 [ 1018.862916][T18030] __kmalloc_cache_noprof+0x70/0x3d0 [ 1018.862945][T18030] ? sctp_endpoint_new+0x86/0xa20 [ 1018.862979][T18030] sctp_endpoint_new+0x86/0xa20 [ 1018.863013][T18030] ? __raw_spin_lock_init+0x45/0x100 [ 1018.863045][T18030] sctp_init_sock+0x960/0x11f0 [ 1018.863078][T18030] sctp_v6_init_sock+0x16/0x70 [ 1018.863108][T18030] sctp_v6_create_accept_sk+0x42d/0x5d0 [ 1018.863140][T18030] sctp_accept+0x55c/0x780 [ 1018.863177][T18030] ? __pfx_sctp_accept+0x10/0x10 [ 1018.863202][T18030] ? aa_sk_perm+0x81e/0x950 [ 1018.863221][T18030] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1018.863260][T18030] ? __pfx_aa_sk_perm+0x10/0x10 [ 1018.863286][T18030] inet_accept+0xb2/0x150 [ 1018.863314][T18030] do_accept+0x48c/0x680 [ 1018.863348][T18030] ? __pfx_do_accept+0x10/0x10 [ 1018.863397][T18030] __sys_accept4+0x11c/0x1c0 [ 1018.863427][T18030] ? __pfx___sys_accept4+0x10/0x10 [ 1018.863452][T18030] ? ksys_write+0x22a/0x250 [ 1018.863490][T18030] __ia32_sys_accept4+0x9a/0xb0 [ 1018.863521][T18030] __do_fast_syscall_32+0xb6/0x2b0 [ 1018.863546][T18030] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.863572][T18030] do_fast_syscall_32+0x34/0x80 [ 1018.863596][T18030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1018.863621][T18030] RIP: 0023:0xf7f71539 [ 1018.863638][T18030] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1018.863656][T18030] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 1018.863678][T18030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1018.863693][T18030] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 1018.863705][T18030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1018.863717][T18030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1018.863729][T18030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1018.863758][T18030] [ 1019.323599][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1019.453632][ T10] usb 3-1: device descriptor read/64, error -71 [ 1019.617032][ T10] usb usb3-port1: attempt power cycle [ 1019.687908][T18040] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1020.000816][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1020.019537][T18052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1020.054389][ T10] usb 3-1: device descriptor read/8, error -71 [ 1020.116562][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 1020.293449][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1020.397523][ T10] usb 3-1: device descriptor read/8, error -71 [ 1020.523757][ T10] usb usb3-port1: unable to enumerate USB device [ 1020.642339][T18064] tipc: Started in network mode [ 1020.657704][T18064] tipc: Node identity 00000000000000000000ffffe0000002, cluster identity 4711 [ 1020.691023][T18064] tipc: Enabling of bearer rejected, failed to enable media [ 1021.535818][T18088] FAULT_INJECTION: forcing a failure. [ 1021.535818][T18088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.571058][T18088] CPU: 1 UID: 0 PID: 18088 Comm: syz.2.3264 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1021.571087][T18088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1021.571100][T18088] Call Trace: [ 1021.571108][T18088] [ 1021.571118][T18088] dump_stack_lvl+0x189/0x250 [ 1021.571147][T18088] ? __pfx____ratelimit+0x10/0x10 [ 1021.571168][T18088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1021.571191][T18088] ? __pfx__printk+0x10/0x10 [ 1021.571217][T18088] ? __might_fault+0xb0/0x130 [ 1021.571254][T18088] should_fail_ex+0x414/0x560 [ 1021.571279][T18088] _copy_from_iter+0x1db/0x16f0 [ 1021.571307][T18088] ? rcu_is_watching+0x15/0xb0 [ 1021.571330][T18088] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1021.571365][T18088] ? __pfx__copy_from_iter+0x10/0x10 [ 1021.571391][T18088] ? __build_skb_around+0x257/0x3e0 [ 1021.571421][T18088] ? netlink_sendmsg+0x642/0xb30 [ 1021.571446][T18088] ? skb_put+0x11b/0x210 [ 1021.571476][T18088] netlink_sendmsg+0x6b2/0xb30 [ 1021.571511][T18088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1021.571540][T18088] ? __import_iovec+0x5d4/0x7f0 [ 1021.571564][T18088] ? aa_sock_msg_perm+0x94/0x160 [ 1021.571587][T18088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1021.571607][T18088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1021.571635][T18088] __sock_sendmsg+0x219/0x270 [ 1021.571660][T18088] ____sys_sendmsg+0x505/0x830 [ 1021.571694][T18088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1021.571738][T18088] ___sys_sendmsg+0x21f/0x2a0 [ 1021.571769][T18088] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.571832][T18088] ? __fget_files+0x2a/0x420 [ 1021.571849][T18088] ? __fget_files+0x3a0/0x420 [ 1021.571876][T18088] __sys_sendmsg+0x164/0x220 [ 1021.571924][T18088] ? __pfx___sys_sendmsg+0x10/0x10 [ 1021.571969][T18088] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1021.571993][T18088] ? lockdep_hardirqs_on+0x9c/0x150 [ 1021.572016][T18088] __do_fast_syscall_32+0xb6/0x2b0 [ 1021.572040][T18088] ? lockdep_hardirqs_on+0x9c/0x150 [ 1021.572065][T18088] do_fast_syscall_32+0x34/0x80 [ 1021.572088][T18088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1021.572113][T18088] RIP: 0023:0xf7f85539 [ 1021.572131][T18088] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1021.572167][T18088] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1021.572201][T18088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 1021.572215][T18088] RDX: 0000000000004880 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.572246][T18088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.572258][T18088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1021.572271][T18088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.572301][T18088] [ 1021.996669][T18093] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 1022.292150][T18100] FAULT_INJECTION: forcing a failure. [ 1022.292150][T18100] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.453753][ T44] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1022.467866][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.2.3268 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1022.467894][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1022.467906][T18100] Call Trace: [ 1022.467914][T18100] [ 1022.467923][T18100] dump_stack_lvl+0x189/0x250 [ 1022.467951][T18100] ? __pfx____ratelimit+0x10/0x10 [ 1022.467973][T18100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.467997][T18100] ? __pfx__printk+0x10/0x10 [ 1022.468030][T18100] ? ref_tracker_alloc+0x318/0x460 [ 1022.468055][T18100] should_fail_ex+0x414/0x560 [ 1022.468081][T18100] should_failslab+0xa8/0x100 [ 1022.468112][T18100] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1022.468139][T18100] ? skb_clone+0x212/0x3a0 [ 1022.468162][T18100] skb_clone+0x212/0x3a0 [ 1022.468184][T18100] __netlink_deliver_tap+0x404/0x850 [ 1022.468223][T18100] ? netlink_deliver_tap+0x2e/0x1b0 [ 1022.468259][T18100] netlink_deliver_tap+0x19c/0x1b0 [ 1022.468288][T18100] netlink_unicast+0x730/0x8e0 [ 1022.468323][T18100] netlink_sendmsg+0x805/0xb30 [ 1022.468360][T18100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.468392][T18100] ? __import_iovec+0x5d4/0x7f0 [ 1022.468417][T18100] ? aa_sock_msg_perm+0x94/0x160 [ 1022.468439][T18100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1022.468462][T18100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.468491][T18100] __sock_sendmsg+0x219/0x270 [ 1022.468518][T18100] ____sys_sendmsg+0x505/0x830 [ 1022.468555][T18100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1022.468601][T18100] ___sys_sendmsg+0x21f/0x2a0 [ 1022.468634][T18100] ? __pfx____sys_sendmsg+0x10/0x10 [ 1022.468701][T18100] ? __fget_files+0x2a/0x420 [ 1022.468718][T18100] ? __fget_files+0x3a0/0x420 [ 1022.468747][T18100] __sys_sendmsg+0x164/0x220 [ 1022.468801][T18100] ? __pfx___sys_sendmsg+0x10/0x10 [ 1022.468849][T18100] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1022.468874][T18100] ? lockdep_hardirqs_on+0x9c/0x150 [ 1022.468900][T18100] __do_fast_syscall_32+0xb6/0x2b0 [ 1022.468935][T18100] ? lockdep_hardirqs_on+0x9c/0x150 [ 1022.468959][T18100] do_fast_syscall_32+0x34/0x80 [ 1022.468982][T18100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1022.469007][T18100] RIP: 0023:0xf7f85539 [ 1022.469025][T18100] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1022.469043][T18100] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1022.469065][T18100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1022.469079][T18100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.469091][T18100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1022.469120][T18100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1022.469133][T18100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1022.469164][T18100] [ 1022.833598][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 1022.844276][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.999744][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1023.071055][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1023.087724][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 1023.099018][T18112] netem: incorrect ge model size [ 1023.104027][T18112] netem: change failed [ 1023.145537][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1023.193468][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.326926][ T44] usb 5-1: config 0 descriptor?? [ 1023.373683][T18098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1023.390529][ T44] hub 5-1:0.0: USB hub found [ 1023.591603][ T44] hub 5-1:0.0: 2 ports detected [ 1023.735962][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1023.814349][ T44] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1023.835808][ T44] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1023.879986][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 1023.886115][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1023.925792][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1023.943558][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1023.952269][ T44] usb 5-1: USB disconnect, device number 122 [ 1023.993595][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1024.093450][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1024.124124][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1024.233356][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1024.279613][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.314630][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1024.325128][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.483401][ T44] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1024.650170][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1024.660661][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1024.849766][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1024.859157][T18122] usbtmc 4-1:16.0: Unable to send data, error -71 [ 1025.028642][T18150] syzkaller1: entered promiscuous mode [ 1025.038668][T18150] syzkaller1: entered allmulticast mode [ 1025.243351][ T979] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1025.373490][ T979] usb 6-1: device descriptor read/64, error -71 [ 1025.623376][ T979] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1025.754089][ T979] usb 6-1: device descriptor read/64, error -71 [ 1025.898474][ T979] usb usb6-port1: attempt power cycle [ 1026.170082][T12510] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1026.201238][T12510] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1026.285320][T18163] netlink: 'syz.2.3285': attribute type 1 has an invalid length. [ 1026.361241][T18163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1026.368174][ T979] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1026.397827][T18167] bond1: (slave gretap1): making interface the new active one [ 1026.412253][T18167] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1026.421210][ T979] usb 6-1: device descriptor read/8, error -71 [ 1026.559913][ T24] usb 4-1: USB disconnect, device number 6 [ 1026.663333][ T979] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1026.744983][ T979] usb 6-1: device descriptor read/8, error -71 [ 1026.855910][ T979] usb usb6-port1: unable to enumerate USB device [ 1026.912063][T18175] Cannot find set identified by id 3 to match [ 1027.854326][T18191] syzkaller1: entered promiscuous mode [ 1027.860032][T18191] syzkaller1: entered allmulticast mode [ 1028.084082][T12510] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1028.259526][T12510] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1028.276476][T12510] usb 4-1: not running at top speed; connect to a high speed hub [ 1028.298815][T12510] usb 4-1: config 3 has an invalid interface number: 153 but max is 0 [ 1028.315279][T12510] usb 4-1: config 3 has no interface number 0 [ 1028.322100][T12510] usb 4-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1028.359116][T12510] usb 4-1: config 3 interface 153 altsetting 128 endpoint 0xF has invalid maxpacket 65, setting to 64 [ 1028.371915][T18205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1028.388510][T12510] usb 4-1: config 3 interface 153 altsetting 128 has an endpoint descriptor with address 0x16, changing to 0x6 [ 1028.405547][T12510] usb 4-1: config 3 interface 153 has no altsetting 0 [ 1028.414663][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1028.427682][T12510] usb 4-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 1028.447716][T12510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.449036][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1028.477453][T12510] usb 4-1: Product: syz [ 1028.489124][T12510] usb 4-1: Manufacturer: syz [ 1028.499624][T12510] usb 4-1: SerialNumber: syz [ 1028.539769][T18190] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1028.564818][T18190] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1028.615604][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1028.629739][ T9] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1028.653471][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1028.690223][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1028.723144][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1028.752351][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1028.789754][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.854709][T12510] sisusb 4-1:3.153: Invalid USB2VGA device [ 1028.880359][T12510] sisusb 4-1:3.153: probe with driver sisusb failed with error -22 [ 1028.904758][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1028.929970][T12510] usb 4-1: USB disconnect, device number 7 [ 1028.936238][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.212930][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 1029.226907][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1029.323083][T18224] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1029.416326][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1029.425767][T18201] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1030.058136][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1030.313189][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1030.313208][ T30] audit: type=1326 audit(1752902389.761:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 1030.352189][ T30] audit: type=1326 audit(1752902389.801:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 1030.501294][ T30] audit: type=1326 audit(1752902389.801:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 1030.581369][ T30] audit: type=1326 audit(1752902389.801:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 1030.673156][ T30] audit: type=1326 audit(1752902389.801:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 1030.695303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.705508][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1030.778125][T18262] netem: incorrect ge model size [ 1030.793716][ T30] audit: type=1326 audit(1752902389.801:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 1030.816741][T18262] netem: change failed [ 1030.867519][ T30] audit: type=1326 audit(1752902389.801:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 1030.922532][ T30] audit: type=1326 audit(1752902389.801:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 1030.944800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.065432][T18271] bridge0: port 3(netdevsim0) entered blocking state [ 1031.083106][T18271] bridge0: port 3(netdevsim0) entered disabled state [ 1031.543375][ T30] audit: type=1326 audit(1752902389.801:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 1031.612794][ T30] audit: type=1326 audit(1752902389.801:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18240 comm="syz.2.3303" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 1031.717467][ T979] usb 6-1: USB disconnect, device number 7 [ 1032.257662][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3313'. [ 1032.348881][T18292] fuse: Bad value for 'fd' [ 1033.880549][T18315] FAULT_INJECTION: forcing a failure. [ 1033.880549][T18315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.942089][T18315] CPU: 1 UID: 0 PID: 18315 Comm: syz.3.3318 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1033.942119][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.942133][T18315] Call Trace: [ 1033.942141][T18315] [ 1033.942150][T18315] dump_stack_lvl+0x189/0x250 [ 1033.942180][T18315] ? __pfx____ratelimit+0x10/0x10 [ 1033.942202][T18315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.942235][T18315] ? __pfx__printk+0x10/0x10 [ 1033.942262][T18315] ? __might_fault+0xb0/0x130 [ 1033.942301][T18315] should_fail_ex+0x414/0x560 [ 1033.942328][T18315] _copy_from_iter+0x3f5/0x16f0 [ 1033.942356][T18315] ? sock_alloc_send_pskb+0x875/0x990 [ 1033.942385][T18315] ? __pfx__copy_from_iter+0x10/0x10 [ 1033.942418][T18315] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1033.942442][T18315] skb_copy_datagram_from_iter+0xf5/0x720 [ 1033.942470][T18315] ? dev_get_by_index+0x22/0x2e0 [ 1033.942492][T18315] ? skb_put+0x11b/0x210 [ 1033.942524][T18315] packet_sendmsg+0x377a/0x5060 [ 1033.942563][T18315] ? aa_bind_mount+0x140/0x590 [ 1033.942612][T18315] ? __pfx___might_resched+0x10/0x10 [ 1033.942652][T18315] ? __pfx_packet_sendmsg+0x10/0x10 [ 1033.942680][T18315] ? aa_sk_perm+0x81e/0x950 [ 1033.942706][T18315] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1033.942733][T18315] ? __asan_memset+0x22/0x50 [ 1033.942761][T18315] ? __import_iovec+0x40e/0x7f0 [ 1033.942786][T18315] ? aa_sock_msg_perm+0x94/0x160 [ 1033.942810][T18315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.942832][T18315] ? __pfx_packet_sendmsg+0x10/0x10 [ 1033.942862][T18315] __sock_sendmsg+0x219/0x270 [ 1033.942888][T18315] ____sys_sendmsg+0x505/0x830 [ 1033.942925][T18315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.942971][T18315] ___sys_sendmsg+0x21f/0x2a0 [ 1033.943004][T18315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.943070][T18315] ? __fget_files+0x2a/0x420 [ 1033.943088][T18315] ? __fget_files+0x3a0/0x420 [ 1033.943117][T18315] __sys_sendmsg+0x164/0x220 [ 1033.943150][T18315] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.943195][T18315] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1033.943226][T18315] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.943249][T18315] __do_fast_syscall_32+0xb6/0x2b0 [ 1033.943273][T18315] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.943297][T18315] do_fast_syscall_32+0x34/0x80 [ 1033.943319][T18315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.943361][T18315] RIP: 0023:0xf7f71539 [ 1033.943381][T18315] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.943402][T18315] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1033.943425][T18315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1033.943441][T18315] RDX: 00000000256b48a8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.943455][T18315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.943467][T18315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1033.943481][T18315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.943512][T18315] [ 1034.573767][ T44] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1034.747343][ T44] usb 3-1: config 0 has an invalid interface number: 114 but max is 0 [ 1034.769041][ T44] usb 3-1: config 0 has no interface number 0 [ 1034.788222][ T44] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 1034.803395][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1034.821896][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.846430][ T44] usb 3-1: Product: syz [ 1034.856362][ T44] usb 3-1: Manufacturer: syz [ 1034.866871][ T44] usb 3-1: SerialNumber: syz [ 1034.888523][ T44] usb 3-1: config 0 descriptor?? [ 1034.963473][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1034.971109][ T24] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1034.982109][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1035.028871][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1035.078745][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1035.132638][ T44] cdc_subset 3-1:0.114: probe with driver cdc_subset failed with error -22 [ 1035.147838][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1035.174464][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.242380][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1035.311479][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.344281][T18317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.353088][T18317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.385694][ T9] usb 3-1: USB disconnect, device number 119 [ 1035.573780][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 1035.581982][ T24] usbtmc 5-1:16.0: can't read capabilities [ 1035.788884][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1035.798297][T18326] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1035.871510][T18362] bridge0: port 3(netdevsim0) entered blocking state [ 1035.878459][T18362] bridge0: port 3(netdevsim0) entered disabled state [ 1035.885707][T18362] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1035.905533][T18362] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1035.963501][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1035.972061][T18367] FAULT_INJECTION: forcing a failure. [ 1035.972061][T18367] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.041534][T18367] CPU: 1 UID: 0 PID: 18367 Comm: syz.0.3332 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1036.041571][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1036.041602][T18367] Call Trace: [ 1036.041612][T18367] [ 1036.041622][T18367] dump_stack_lvl+0x189/0x250 [ 1036.041654][T18367] ? __pfx____ratelimit+0x10/0x10 [ 1036.041678][T18367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.041705][T18367] ? __pfx__printk+0x10/0x10 [ 1036.041750][T18367] should_fail_ex+0x414/0x560 [ 1036.041778][T18367] should_failslab+0xa8/0x100 [ 1036.041813][T18367] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1036.041843][T18367] ? skb_clone+0x212/0x3a0 [ 1036.041869][T18367] skb_clone+0x212/0x3a0 [ 1036.041893][T18367] __netlink_deliver_tap+0x404/0x850 [ 1036.041938][T18367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.041969][T18367] netlink_deliver_tap+0x19c/0x1b0 [ 1036.042022][T18367] netlink_sendskb+0x68/0x140 [ 1036.042051][T18367] netlink_rcv_skb+0x28c/0x470 [ 1036.042081][T18367] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1036.042106][T18367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1036.042145][T18367] ? bpf_lsm_capable+0x9/0x20 [ 1036.042172][T18367] ? security_capable+0x7e/0x2e0 [ 1036.042201][T18367] nfnetlink_rcv+0x26a/0x2520 [ 1036.042227][T18367] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1036.042253][T18367] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1036.042302][T18367] ? __dev_queue_xmit+0x27e/0x3a70 [ 1036.042324][T18367] ? do_fast_syscall_32+0x34/0x80 [ 1036.042359][T18367] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1036.042383][T18367] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1036.042419][T18367] ? ref_tracker_free+0x63a/0x7d0 [ 1036.042440][T18367] ? __copy_skb_header+0xa7/0x550 [ 1036.042461][T18367] ? __pfx_ref_tracker_free+0x10/0x10 [ 1036.042484][T18367] ? __skb_clone+0x63/0x7a0 [ 1036.042508][T18367] ? __skb_clone+0x483/0x7a0 [ 1036.042535][T18367] ? skb_clone+0x246/0x3a0 [ 1036.042559][T18367] ? __netlink_deliver_tap+0x807/0x850 [ 1036.042589][T18367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.042624][T18367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.042653][T18367] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.042688][T18367] netlink_unicast+0x759/0x8e0 [ 1036.042727][T18367] netlink_sendmsg+0x805/0xb30 [ 1036.042767][T18367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.042800][T18367] ? __import_iovec+0x5d4/0x7f0 [ 1036.042826][T18367] ? aa_sock_msg_perm+0x94/0x160 [ 1036.042850][T18367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1036.042873][T18367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.042904][T18367] __sock_sendmsg+0x219/0x270 [ 1036.042933][T18367] ____sys_sendmsg+0x505/0x830 [ 1036.042973][T18367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1036.043032][T18367] ___sys_sendmsg+0x21f/0x2a0 [ 1036.043069][T18367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1036.043142][T18367] ? __fget_files+0x2a/0x420 [ 1036.043161][T18367] ? __fget_files+0x3a0/0x420 [ 1036.043192][T18367] __sys_sendmsg+0x164/0x220 [ 1036.043227][T18367] ? __pfx___sys_sendmsg+0x10/0x10 [ 1036.043273][T18367] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1036.043298][T18367] ? lockdep_hardirqs_on+0x9c/0x150 [ 1036.043332][T18367] __do_fast_syscall_32+0xb6/0x2b0 [ 1036.043356][T18367] ? lockdep_hardirqs_on+0x9c/0x150 [ 1036.043382][T18367] do_fast_syscall_32+0x34/0x80 [ 1036.043405][T18367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1036.043429][T18367] RIP: 0023:0xf70ae539 [ 1036.043446][T18367] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1036.043464][T18367] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1036.043503][T18367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1036.043530][T18367] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.043542][T18367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.043553][T18367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1036.043564][T18367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.043593][T18367] [ 1036.875703][ T24] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 1036.910624][ T24] usb 4-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 1036.959932][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1036.959932][ T24] usb 4-1: config 0 has no interface number 0 [ 1036.959979][ T24] usb 4-1: too many endpoints for config 0 interface 108 altsetting 230: 145, using maximum allowed: 30 [ 1036.993217][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1037.006634][T18375] netem: incorrect ge model size [ 1037.011648][T18375] netem: change failed [ 1037.163348][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1037.169753][ T24] usb 4-1: config 0 interface 108 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 1037.196137][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.218268][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1037.277510][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.299889][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.315121][ T24] usb 4-1: config 0 interface 108 has no altsetting 0 [ 1037.342556][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1037.348415][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1037.361561][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.378500][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.402582][ T9] usb 6-1: config 0 descriptor?? [ 1037.478458][ T24] usb 4-1: config 0 descriptor?? [ 1037.699741][T13027] usb 5-1: USB disconnect, device number 123 [ 1037.726659][T18358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1037.757549][T18358] netlink: 'syz.3.3330': attribute type 32 has an invalid length. [ 1037.788008][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1037.837880][T18358] netlink: 'syz.3.3330': attribute type 32 has an invalid length. [ 1038.117408][T18387] usb usb8: usbfs: process 18387 (syz.3.3330) did not claim interface 0 before use [ 1038.139347][T18391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1038.186205][T18391] netlink: 4504 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1038.396666][T18401] syzkaller1: entered promiscuous mode [ 1038.407181][T18401] syzkaller1: entered allmulticast mode [ 1038.545271][T13027] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1038.747155][T13027] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.799609][T13027] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.856210][T13027] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.887119][T13027] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.920983][T13027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.973628][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1038.985513][T13027] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1039.028331][T13027] usb 3-1: invalid MIDI out EP 0 [ 1039.034200][ T24] usb 4-1: USB disconnect, device number 8 [ 1039.222558][T18416] usb 6-1: USB disconnect, device number 8 [ 1039.435092][T13027] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1039.886322][T16411] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1040.057710][T16411] usb 5-1: Using ep0 maxpacket: 32 [ 1040.075489][T16411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.098431][T16411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.119844][T16411] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1040.136986][T16411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.163880][T16411] usb 5-1: config 0 descriptor?? [ 1041.179283][T18418] usb 3-1: USB disconnect, device number 120 [ 1041.181054][T15071] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.215876][T16411] savu 0003:1E7D:2D5A.0026: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1041.443358][T13027] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1041.494349][T18418] usb 5-1: USB disconnect, device number 124 [ 1041.591315][T18454] fido_id[18454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1041.671693][T13027] usb 6-1: Using ep0 maxpacket: 32 [ 1041.708019][T13027] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1041.722790][T13027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.732862][T13027] usb 6-1: Product: syz [ 1041.742740][T13027] usb 6-1: Manufacturer: syz [ 1041.751460][T13027] usb 6-1: SerialNumber: syz [ 1041.783744][T13027] usb 6-1: config 0 descriptor?? [ 1041.823992][T13027] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1041.863346][ T5940] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1042.015996][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 1042.060287][ T5940] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1042.089111][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1042.108940][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1042.127302][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1042.163422][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1042.204203][T18464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1042.218203][ T5940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.249573][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1042.315318][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.355783][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1042.577819][ T5940] usb 3-1: GET_CAPABILITIES returned 0 [ 1042.601501][ T5940] usbtmc 3-1:16.0: can't read capabilities [ 1042.682935][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.783739][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1042.816838][T18459] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1042.861292][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.018051][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.236938][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1043.254802][T13027] gspca_topro: reg_r err -71 [ 1043.259458][T13027] gspca_topro: Sensor soi763a [ 1043.288341][T13027] usb 6-1: USB disconnect, device number 9 [ 1043.294370][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1043.303628][ T37] bridge0: port 3(netdevsim0) entered disabled state [ 1043.387351][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.220392][ T37] bridge_slave_1: left allmulticast mode [ 1044.270459][ T37] bridge_slave_1: left promiscuous mode [ 1044.290242][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.316159][ T37] bridge_slave_0: left allmulticast mode [ 1044.329852][ T37] bridge_slave_0: left promiscuous mode [ 1044.340288][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.446212][T15071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1044.457824][T15071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1044.487370][T15071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1044.497776][T15071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1044.506134][T15071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1044.685973][T16411] usb 3-1: USB disconnect, device number 121 [ 1045.445580][T18532] loop7: detected capacity change from 0 to 6 [ 1045.460915][T18532] Dev loop7: unable to read RDB block 6 [ 1045.467108][T18532] loop7: unable to read partition table [ 1045.473067][T18532] loop7: partition table beyond EOD, truncated [ 1045.479950][T18532] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1045.657133][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.764026][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.775855][ T37] bond0 (unregistering): Released all slaves [ 1045.926066][ T37] IPVS: stopping backup sync thread 16132 ... [ 1046.136842][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1046.534838][T15071] Bluetooth: hci2: command tx timeout [ 1046.656273][ T37] hsr_slave_0: left promiscuous mode [ 1046.682046][ T37] hsr_slave_1: left promiscuous mode [ 1046.700429][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.730146][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.753973][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.773722][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.927311][ T37] veth1_macvtap: left promiscuous mode [ 1046.974682][ T37] veth0_macvtap: left promiscuous mode [ 1047.009482][ T37] veth1_vlan: left promiscuous mode [ 1047.019839][ T37] veth0_vlan: left promiscuous mode [ 1047.333413][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1047.513395][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1047.520936][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1047.530350][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1047.560759][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1047.601547][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1047.649366][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1047.683171][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.704411][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1047.723507][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.965561][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1047.971107][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1048.194047][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1048.201300][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1048.212546][T18567] usbtmc 4-1:16.0: Unable to send data, error -71 [ 1048.277745][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1048.461220][T18579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1048.601367][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1048.613433][T15071] Bluetooth: hci2: command tx timeout [ 1048.796840][T18560] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1049.159987][T18516] chnl_net:caif_netlink_parms(): no params data found [ 1049.396517][ T37] IPVS: stop unused estimator thread 0... [ 1049.544378][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.567189][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.578281][T18516] bridge_slave_0: entered allmulticast mode [ 1049.592126][T18516] bridge_slave_0: entered promiscuous mode [ 1049.605301][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.612624][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.622803][T18516] bridge_slave_1: entered allmulticast mode [ 1049.665563][T18516] bridge_slave_1: entered promiscuous mode [ 1050.107756][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.125818][ T5940] usb 4-1: USB disconnect, device number 9 [ 1050.605509][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.707624][ T5854] Bluetooth: hci2: command tx timeout [ 1050.805860][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1050.972552][T18628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1051.147850][T18516] team0: Port device team_slave_0 added [ 1051.195729][T18516] team0: Port device team_slave_1 added [ 1051.380468][T18516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.410184][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.413428][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1051.503583][T18516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.786151][T18516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.826345][T18636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1051.867954][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.909600][T18516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.948984][T18642] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1051.958767][T18642] netlink: zone id is out of range [ 1051.967150][T18642] netlink: zone id is out of range [ 1051.984584][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1051.998646][T18642] netlink: zone id is out of range [ 1052.004363][T18642] netlink: zone id is out of range [ 1052.033580][T18642] netlink: get zone limit has 8 unknown bytes [ 1052.326942][T18516] hsr_slave_0: entered promiscuous mode [ 1052.357573][T18516] hsr_slave_1: entered promiscuous mode [ 1052.503595][T18654] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1052.774525][T15071] Bluetooth: hci2: command tx timeout [ 1053.214786][T18516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1053.238474][T18516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1053.243589][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1053.278342][T18516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1053.342508][T18516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1053.426627][ T10] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 1053.448803][ T10] usb 6-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 1053.473336][ T10] usb 6-1: config 0 has no interface number 0 [ 1053.489319][ T10] usb 6-1: too many endpoints for config 0 interface 108 altsetting 230: 145, using maximum allowed: 30 [ 1053.509628][ T10] usb 6-1: config 0 interface 108 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 1053.557366][ T10] usb 6-1: config 0 interface 108 has no altsetting 0 [ 1053.586085][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1053.613319][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.631672][ T10] usb 6-1: config 0 descriptor?? [ 1053.846218][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1053.888426][T18674] netlink: 'syz.5.3387': attribute type 32 has an invalid length. [ 1053.897105][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1053.913355][T18674] netlink: 'syz.5.3387': attribute type 32 has an invalid length. [ 1054.087250][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.163206][T18516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.236482][T18707] usb usb8: usbfs: process 18707 (syz.5.3387) did not claim interface 0 before use [ 1054.295099][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.302303][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.383328][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.390480][ T6994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.485208][T13027] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1054.532311][T13027] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1054.807847][T18516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.062243][T18516] veth0_vlan: entered promiscuous mode [ 1055.130066][T18516] veth1_vlan: entered promiscuous mode [ 1055.313624][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1055.411384][T18516] veth0_macvtap: entered promiscuous mode [ 1055.420940][ T10] usb 6-1: string descriptor 0 read error: -71 [ 1055.458630][ T10] usb 6-1: USB disconnect, device number 10 [ 1055.466266][T18516] veth1_macvtap: entered promiscuous mode [ 1055.531333][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1055.541926][T18516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.555648][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1055.583681][ T24] usb 3-1: config 0 has no interface number 0 [ 1055.594088][T18516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.636265][ T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1055.660388][T18516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.672077][ T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1055.688384][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1055.703979][T18516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.705607][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1055.712816][T18516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.725387][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.748583][ T24] usb 3-1: Product: syz [ 1055.753053][ T24] usb 3-1: Manufacturer: syz [ 1055.763199][ T24] usb 3-1: SerialNumber: syz [ 1055.788265][ T24] usb 3-1: config 0 descriptor?? [ 1055.805533][T18516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.823873][T18723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1055.831453][T18723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1056.073414][T18723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1056.080796][T18723] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1056.297070][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.344050][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.481799][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.501987][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.671656][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.681577][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.891461][T18743] gtp0: entered promiscuous mode [ 1057.573793][T18418] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1057.756597][T18418] usb 7-1: Using ep0 maxpacket: 8 [ 1057.766124][T18418] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1057.779032][T18418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.828810][T18418] usb 7-1: Product: syz [ 1057.863737][T18418] usb 7-1: Manufacturer: syz [ 1057.888708][T18418] usb 7-1: SerialNumber: syz [ 1057.958991][T18418] usb 7-1: config 0 descriptor?? [ 1058.307474][T18418] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1059.279099][ T24] Error reading MAC address [ 1059.293632][ T24] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 1059.549669][ T24] usb 3-1: USB disconnect, device number 122 [ 1059.580092][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.595748][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.516788][T18781] vlan3: entered allmulticast mode [ 1060.537971][T18781] bond0: entered allmulticast mode [ 1060.556216][T18781] bond_slave_0: entered allmulticast mode [ 1060.571746][T18785] FAULT_INJECTION: forcing a failure. [ 1060.571746][T18785] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.584480][T18785] CPU: 0 UID: 0 PID: 18785 Comm: syz.5.3404 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 1060.584505][T18785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.584517][T18785] Call Trace: [ 1060.584525][T18785] [ 1060.584533][T18785] dump_stack_lvl+0x189/0x250 [ 1060.584563][T18785] ? __pfx____ratelimit+0x10/0x10 [ 1060.584589][T18785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1060.584611][T18785] ? __pfx__printk+0x10/0x10 [ 1060.584645][T18785] should_fail_ex+0x414/0x560 [ 1060.584667][T18785] should_failslab+0xa8/0x100 [ 1060.584699][T18785] __kmalloc_noprof+0xcb/0x4f0 [ 1060.584725][T18785] ? hash_netport4_add+0xf1e/0x2720 [ 1060.584756][T18785] hash_netport4_add+0xf1e/0x2720 [ 1060.584782][T18785] ? hash_netport4_add+0x81/0x2720 [ 1060.584835][T18785] hash_netport4_uadt+0xba9/0xf30 [ 1060.584869][T18785] ? __pfx_hash_netport4_add+0x10/0x10 [ 1060.584895][T18785] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 1060.584920][T18785] ? __nla_validate_parse+0x2400/0x2d40 [ 1060.584960][T18785] call_ad+0x175/0xb00 [ 1060.584993][T18785] ? __pfx_call_ad+0x10/0x10 [ 1060.585026][T18785] ? __nla_parse+0x40/0x60 [ 1060.585050][T18785] ip_set_ad+0x791/0x930 [ 1060.585078][T18785] ? __pfx_ip_set_ad+0x10/0x10 [ 1060.585096][T18785] ? __mutex_lock+0x330/0xe80 [ 1060.585152][T18785] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1060.585173][T18785] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1060.585208][T18785] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1060.585225][T18785] ? kasan_save_free_info+0x46/0x50 [ 1060.585289][T18785] netlink_rcv_skb+0x205/0x470 [ 1060.585314][T18785] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1060.585336][T18785] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1060.585370][T18785] ? bpf_lsm_capable+0x9/0x20 [ 1060.585398][T18785] ? security_capable+0x7e/0x2e0 [ 1060.585423][T18785] nfnetlink_rcv+0x26a/0x2520 [ 1060.585445][T18785] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1060.585467][T18785] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1060.585494][T18785] ? __dev_queue_xmit+0x27e/0x3a70 [ 1060.585512][T18785] ? do_fast_syscall_32+0x34/0x80 [ 1060.585546][T18785] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1060.585565][T18785] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1060.585599][T18785] ? ref_tracker_free+0x63a/0x7d0 [ 1060.585617][T18785] ? __copy_skb_header+0xa7/0x550 [ 1060.585636][T18785] ? __pfx_ref_tracker_free+0x10/0x10 [ 1060.585655][T18785] ? __skb_clone+0x63/0x7a0 [ 1060.585680][T18785] ? __skb_clone+0x483/0x7a0 [ 1060.585702][T18785] ? skb_clone+0x246/0x3a0 [ 1060.585722][T18785] ? __netlink_deliver_tap+0x807/0x850 [ 1060.585746][T18785] ? netlink_deliver_tap+0x2e/0x1b0 [ 1060.585775][T18785] ? netlink_deliver_tap+0x2e/0x1b0 [ 1060.585801][T18785] ? netlink_deliver_tap+0x2e/0x1b0 [ 1060.585833][T18785] netlink_unicast+0x759/0x8e0 [ 1060.585864][T18785] netlink_sendmsg+0x805/0xb30 [ 1060.585897][T18785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.585924][T18785] ? __import_iovec+0x5d4/0x7f0 [ 1060.585951][T18785] ? aa_sock_msg_perm+0x94/0x160 [ 1060.585972][T18785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1060.586003][T18785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.586029][T18785] __sock_sendmsg+0x219/0x270 [ 1060.586052][T18785] ____sys_sendmsg+0x505/0x830 [ 1060.586087][T18785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.586130][T18785] ___sys_sendmsg+0x21f/0x2a0 [ 1060.586158][T18785] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.586216][T18785] ? __fget_files+0x2a/0x420 [ 1060.586234][T18785] ? __fget_files+0x3a0/0x420 [ 1060.586258][T18785] __sys_sendmsg+0x164/0x220 [ 1060.586286][T18785] ? __pfx___sys_sendmsg+0x10/0x10 [ 1060.586326][T18785] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1060.586346][T18785] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.586372][T18785] __do_fast_syscall_32+0xb6/0x2b0 [ 1060.586392][T18785] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.586414][T18785] do_fast_syscall_32+0x34/0x80 [ 1060.586434][T18785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1060.586456][T18785] RIP: 0023:0xf712e539 [ 1060.586470][T18785] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1060.586486][T18785] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1060.586509][T18785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1060.586521][T18785] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1060.586532][T18785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1060.586542][T18785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1060.586552][T18785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1060.586580][T18785] [ 1060.586967][T18781] bond_slave_1: entered allmulticast mode [ 1061.014147][T18418] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1061.224208][ T9] usb 7-1: USB disconnect, device number 2 [ 1061.233411][T18416] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1061.435723][T18416] usb 3-1: config 0 has no interfaces? [ 1061.532909][T18416] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1061.767420][T18416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.821893][T18416] usb 3-1: Product: syz [ 1061.846653][T18416] usb 3-1: Manufacturer: syz [ 1061.863167][T18416] usb 3-1: SerialNumber: syz [ 1061.960677][T18416] usb 3-1: config 0 descriptor?? [ 1062.040991][T18805] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1062.125564][T18805] netlink: zone id is out of range [ 1062.137702][T18805] netlink: zone id is out of range [ 1062.150716][T18805] netlink: zone id is out of range [ 1062.170918][T18805] netlink: zone id is out of range [ 1062.181706][T18805] netlink: get zone limit has 8 unknown bytes [ 1062.528849][T18817] bridge0: port 1(netdevsim0) entered blocking state [ 1062.625268][T18817] bridge0: port 1(netdevsim0) entered disabled state [ 1062.632354][T18817] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1062.651047][T18817] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1062.667030][T18817] bridge0: port 1(netdevsim0) entered blocking state [ 1062.673936][T18817] bridge0: port 1(netdevsim0) entered forwarding state [ 1063.403536][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1063.593418][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1063.603156][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.631469][T18833] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3413'. [ 1063.651337][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1063.722948][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1063.753359][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.814662][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1063.833757][T18418] usb 3-1: USB disconnect, device number 123 [ 1063.863320][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.940408][ T9] usb 4-1: config 0 descriptor?? [ 1064.075083][T18838] loop7: detected capacity change from 0 to 6 [ 1064.093783][T18838] Dev loop7: unable to read RDB block 6 [ 1064.151402][T18838] loop7: unable to read partition table [ 1064.166457][T18838] loop7: partition table beyond EOD, truncated [ 1064.174407][T18838] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1064.706541][T18418] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1068.373728][T18418] usb 3-1: Using ep0 maxpacket: 8 [ 1071.741994][ C1] sched: DL replenish lagged too much [ 1074.300941][T18418] usb 3-1: device descriptor read/all, error -110 [ 1074.637710][T18418] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1074.929517][T18418] usb 3-1: device descriptor read/64, error -32 [ 1077.344382][T18418] usb usb3-port1: attempt power cycle [ 1081.155742][T18418] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1081.890567][T13027] usb 4-1: USB disconnect, device number 10 [ 1093.534553][T15071] Bluetooth: hci0: command 0x0406 tx timeout [ 1096.775896][T18418] usb 3-1: device descriptor read/8, error -71 [ 1124.947214][T15071] Bluetooth: hci3: command 0x0406 tx timeout [ 1125.191704][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.212343][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.099711][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1195.799029][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1256.751894][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1256.773371][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.802350][ T5854] Bluetooth: hci2: command tx timeout [ 1305.535217][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.556259][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1324.553181][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1324.560216][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18816/1:b..l [ 1324.568762][ C1] rcu: (detected by 1, t=10502 jiffies, g=126881, q=1601819 ncpus=2) [ 1324.576960][ C1] task:syz.6.3406 state:R running task stack:25960 pid:18816 tgid:18794 ppid:18516 task_flags:0x40044c flags:0x20004002 [ 1324.591765][ C1] Call Trace: [ 1324.595082][ C1] [ 1324.598048][ C1] __schedule+0x16f5/0x4d00 [ 1324.602599][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1324.607913][ C1] ? __pfx___schedule+0x10/0x10 [ 1324.612792][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1324.618025][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1324.623346][ C1] preempt_schedule_irq+0xb5/0x150 [ 1324.628490][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1324.634238][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1324.640436][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1324.646284][ C1] irqentry_exit+0x6f/0x90 [ 1324.650730][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1324.656753][ C1] RIP: 0010:lock_acquire+0x77/0x360 [ 1324.661979][ C1] Code: 00 89 c0 48 0f a3 05 88 9a 03 0e 73 16 e8 f1 f0 08 00 84 c0 75 0d f6 05 67 7e ed 0d 01 0f 84 d7 01 00 00 83 3d a9 cb 03 0e 00 <0f> 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 63 d4 83 00 [ 1324.681602][ C1] RSP: 0018:ffffc900042becd8 EFLAGS: 00000202 [ 1324.687670][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f0b5632fc62f0200 [ 1324.695641][ C1] RDX: 0000000000000000 RSI: ffffffff8be28be0 RDI: ffffffff8be28ba0 [ 1324.703608][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000 [ 1324.711670][ C1] R10: ffffc900042bee98 R11: ffffffff81ad0050 R12: 0000000000000002 [ 1324.719654][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 1324.727639][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1324.732746][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1324.738903][ C1] ? lock_acquire+0x5f/0x360 [ 1324.743491][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1324.748599][ C1] ? shmem_evict_inode+0x272/0xa70 [ 1324.753715][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1324.758822][ C1] unwind_next_frame+0xc2/0x2390 [ 1324.763775][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1324.768888][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1324.774013][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 1324.779145][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1324.785336][ C1] arch_stack_walk+0x11c/0x150 [ 1324.790119][ C1] ? shmem_evict_inode+0x272/0xa70 [ 1324.795260][ C1] stack_trace_save+0x9c/0xe0 [ 1324.799951][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1324.805343][ C1] save_stack+0xf5/0x1f0 [ 1324.809601][ C1] ? __pfx_save_stack+0x10/0x10 [ 1324.814455][ C1] ? free_unref_folios+0xc66/0x14d0 [ 1324.819661][ C1] ? folios_put_refs+0x559/0x640 [ 1324.824625][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 1324.829744][ C1] ? shmem_evict_inode+0x272/0xa70 [ 1324.834868][ C1] ? page_ext_put+0x97/0xc0 [ 1324.839373][ C1] __reset_page_owner+0x71/0x1f0 [ 1324.844313][ C1] free_unref_folios+0xc66/0x14d0 [ 1324.849351][ C1] folios_put_refs+0x559/0x640 [ 1324.854118][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1324.859410][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 1324.865739][ C1] shmem_undo_range+0x49e/0x14b0 [ 1324.870689][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1324.876076][ C1] ? __lock_acquire+0xab9/0xd20 [ 1324.880988][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 1324.886626][ C1] shmem_evict_inode+0x272/0xa70 [ 1324.891613][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 1324.897244][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1324.902708][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1324.908774][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1324.913977][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1324.919456][ C1] evict+0x501/0x9c0 [ 1324.923363][ C1] ? __pfx_evict+0x10/0x10 [ 1324.927774][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1324.932988][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1324.937841][ C1] ? iput+0x6d8/0x9d0 [ 1324.941827][ C1] __dentry_kill+0x209/0x660 [ 1324.946406][ C1] ? dput+0x37/0x2b0 [ 1324.950296][ C1] dput+0x19f/0x2b0 [ 1324.954106][ C1] __fput+0x68e/0xa70 [ 1324.958100][ C1] task_work_run+0x1d1/0x260 [ 1324.962697][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1324.967817][ C1] do_exit+0x6b5/0x22e0 [ 1324.971988][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1324.977013][ C1] ? __pfx_do_exit+0x10/0x10 [ 1324.981621][ C1] do_group_exit+0x21c/0x2d0 [ 1324.986216][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1324.991412][ C1] get_signal+0x1286/0x1340 [ 1324.995925][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 1325.001474][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1325.007629][ C1] ? __sys_recvmmsg+0x19d/0x280 [ 1325.012483][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 1325.017944][ C1] exit_to_user_mode_loop+0x75/0x110 [ 1325.023229][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 1325.028450][ C1] do_fast_syscall_32+0x34/0x80 [ 1325.033294][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1325.039617][ C1] RIP: 0023:0xf70de539 [ 1325.043678][ C1] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1325.052088][ C1] RAX: 0000000000010106 RBX: 0000000000000003 RCX: 00000000800000c0 [ 1325.060056][ C1] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1325.068060][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1325.076048][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1325.084023][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.091994][ C1]