last executing test programs: 23m15.871306909s ago: executing program 4 (id=3370): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r2 = socket(0x840000000002, 0x3, 0xfa) (rerun: 64) getsockname$inet(r2, 0x0, &(0x7f0000002280)) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) (async) close_range(r2, 0xffffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) (async) unshare(0x62040200) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x100, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48855, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) (async) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}], 0x30}, 0x40c0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) (async, rerun: 64) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) 23m14.311374859s ago: executing program 4 (id=3372): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x355040, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) membarrier(0x10, 0x0) 23m14.103767826s ago: executing program 4 (id=3374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002680)={r4, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0xfff9}, 0x8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380), 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 23m11.249506265s ago: executing program 4 (id=3382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f00000007c0)=@ethtool_perm_addr={0x20, 0xff, "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"}}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) pwritev(r9, &(0x7f0000000240)=[{&(0x7f00000002c0)="32a1e3b1a1f448b68205aa044580db505dcd2b56720944aebdc18c92d51772d8aa287028346ec9aeed1b59c3866586cb014d5f74f4e9c055de2c5d78602befeb7262ac02fa43637c9a3389fd0c4eb071f343c32b2afdd2396f39fd122fd2bf329fbd6a949e79924a70a8c6bd4b69e00be718a1c6babb126253f3748f6ff9f6f4020c0c", 0x83}, {&(0x7f0000000440)="b6561f976ad5b972170edccc5de710b658863393298ca86c1938635bf2aaecf09fc0efb9ce0dc4edea6e294b840fa2e94cea90d7b54b6d81b6b19dd1c015573aac016d50566f45b590d3339417ae71bb5aa80aee40bd5250065f525b2f2d7cdbf12b075092dada1c0e97c88e5e0eefea012d0875dfe08ee15b3c4b4e701505baff71a71b17e10f55715f7fe6fe22fbf03bcdd441b98017882ba8e1f08cba19641b936c10b4ab8373ca246e514cd0926ce1e39d094d835c79c6dc83a7422d24fcacb64a1e692866c53cdacfde699bc6555305f655b0ed2fb9a7435357b6ea551a90dabd", 0xe3}, {&(0x7f0000000100)="0b2b393a0846701a3c937dadce00d93866c0d6f7be672097953764d5d5ad40bcd12aa436b93302efdcf6ca9357e106ff2a676748479f12972bb41ba003f9fdb691dc810833c6e0b60ad5d9dd7ae98d1ead9ca643587893684f1ce76718a13dcd2a30260413e0c652", 0x68}, {&(0x7f0000000200)="67c8cf826dfd31b9967bc431d9c43dfab2cbf088ea75b08b7ded758ce330362b5acbbc100f", 0x25}], 0x4, 0x4, 0xa69) listen(r9, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) getpid() 23m6.501472103s ago: executing program 4 (id=3397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001708000100010000a1"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000109010200000000000000e35513c3c6"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xef, 0x207fff) 23m6.216965386s ago: executing program 4 (id=3398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002680)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0xfff9}, 0x8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 23m5.522966265s ago: executing program 32 (id=3398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002680)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0xfff9}, 0x8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 13m54.923126252s ago: executing program 3 (id=5133): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="66643daa81f7fb0e4275a91b58b39fc373065022b13e3f23b7c28ef05faa8db38bbe3eabe0b80a55197b5eb0603f7f624ca4edfc266aac14ea", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x81, 0x6, 0x0, 0x0, 0x9, 0x2, 0x7, 0x7, r6}, &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e147e0300", 0x5, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001200010008000000000000000000fa"], 0x28}}, 0x802) 13m45.917639719s ago: executing program 3 (id=5154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="2e08000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m45.805388191s ago: executing program 3 (id=5156): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000140)=0x3, 0x4) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffff9f}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x100, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x18006, 0x0, 0x0, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) (async, rerun: 64) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async, rerun: 32) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) (async) sched_setattr(0xffffffffffffffff, &(0x7f00000001c0)={0x38, 0x6, 0x21, 0x8, 0xe94, 0x4, 0xd, 0x2a, 0x7fff, 0x101}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000200)=0x2) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b80)="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", 0x2000, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40010) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x1, 0x0) (async) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x100) 13m43.784381754s ago: executing program 3 (id=5159): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000009c0)=0x60000) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20c200a2}) move_mount(r8, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r8, &(0x7f0000000100)='./file0\x00', 0x220) 13m42.832841887s ago: executing program 3 (id=5163): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000016c0)='attr/keycreate\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) socket$packet(0x11, 0x75c56269a28a1e82, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 13m42.559334966s ago: executing program 3 (id=5164): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 65) 13m40.480081304s ago: executing program 33 (id=5164): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 65) 2m38.941432165s ago: executing program 0 (id=7609): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x800, 0x1005f, 0x3}) 2m38.80613081s ago: executing program 0 (id=7610): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048e0}, 0x20000081) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 2m38.595189298s ago: executing program 0 (id=7613): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x36}, 0x94) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r8 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000000005f2728000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4080) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040630415120000000000010902240001000000090904000401030000000921040004012207000905810320"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 2m35.329547168s ago: executing program 0 (id=7626): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x1002000, 0x1000, 0x80000000, 0x2}, 0x20) r0 = syz_io_uring_setup(0x882, &(0x7f0000000000)={0x0, 0x53f7, 0x4000, 0x4, 0x239}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000500)=0x9, 0x4) sendmmsg$inet6(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x23}}], 0x2, 0x404c851) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x200000000000012a, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) 2m35.206845814s ago: executing program 0 (id=7628): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffff"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000b784a8b5d17d9a2c8a54db000000004000000000000000000200"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2m35.101635051s ago: executing program 0 (id=7630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0xdcf2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) getpid() r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0xbf, [@dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0301f78d89b5d6afffb"}]}]}}}}}}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x8722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) 2m19.891123665s ago: executing program 34 (id=7630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0xdcf2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) getpid() r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x7, 0xbf, [@dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x36, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x8, "02a20948fd74"}, {0x7, 0xd, "ccf0301f78d89b5d6afffb"}]}]}}}}}}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x8722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) 18.339158817s ago: executing program 2 (id=8116): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000000280), 0x0, 0x40000001, 0x0) read$FUSE(r5, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x50d000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 13.730318478s ago: executing program 2 (id=8126): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_normal', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x48a002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1e) r7 = accept(r6, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r7) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x18b}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x110, &(0x7f00000000c0)=0x6, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x63, 0x0, 0x0) 13.452968231s ago: executing program 5 (id=8127): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "f82970c636f5"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x7, 0x2, "0bc6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003000014"], 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x7, 0xfffffff5, 0xab, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, 0x7, 0x8, 0xc, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@bridge_setlink={0x8c, 0x13, 0x300, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x10, 0x200}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x4}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x4}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0xb}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xe}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80000001}]}}}, @IFLA_LINKMODE={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x24000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x18}, [@NHA_GROUP_TYPE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004880}, 0x24008000) 11.967000279s ago: executing program 2 (id=8130): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_usb_connect(0x4, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8, 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4bfa, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000140)=@generic={0x11, "aed9c4eb82a5c61c6f6d3695f7f13772d36fcfbf69b5ff44c8182e904f470d2f45aa683efb8ffd593e066094d5edd9b1b394e622ec8293049428170e1b73a8a4e07180c653c4a8d7ab8837f3cfe78af5e65e2f00177758d18abac3a1d3aa049081167c1324a9e8d6f42bc43901270d0adb3aa834f9a4b87ed7ffcbc68d59"}, 0x80, 0x0}, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) close(r6) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 10.991972347s ago: executing program 6 (id=8131): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x1011, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000000)=0x80, 0x80800) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x1c) io_uring_setup(0x5617, &(0x7f0000000200)={0x0, 0xfffffff9, 0x1f, 0x0, 0xfffffffd}) bind(r1, &(0x7f00000000c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e20, 0x8, @empty, 0x7}}, 0x0, 0xcb}, 0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x6}, &(0x7f0000000280)=0x8) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 10.770204536s ago: executing program 5 (id=8132): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10.000617172s ago: executing program 6 (id=8134): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x94, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6163}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 9.053093785s ago: executing program 5 (id=8136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=""/48}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) 9.051970466s ago: executing program 6 (id=8137): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x36}, 0x94) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r8 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000000005f2728000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4080) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040630415120000000000010902240001000000090904000401030000000921040004012207000905810320"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 8.140095174s ago: executing program 2 (id=8140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005d00)=[{{&(0x7f0000000500)=@ieee802154, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f0000000880)=""/27, 0x1b}], 0x3}, 0x2}, {{&(0x7f0000000680)=@x25, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000005f00)=""/248, 0xf8}], 0x2, &(0x7f0000000940)=""/174, 0xae}, 0x2}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/206, 0xce}], 0x1, &(0x7f0000000b40)=""/211, 0xd3}, 0x4}, {{&(0x7f0000000c40)=@x25, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/105, 0x69}], 0x1, &(0x7f0000000d80)=""/198, 0xc6}, 0x7fff}, {{&(0x7f0000000e80)=@nl=@proc, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/157, 0x9d}], 0x1, &(0x7f0000001000)=""/157, 0x9d}, 0x492d}, {{&(0x7f00000010c0)=@caif, 0x80, &(0x7f0000002600)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/183, 0xb7}, {&(0x7f0000002200)=""/152, 0x98}, {&(0x7f00000022c0)=""/4, 0x4}, {&(0x7f0000002300)=""/104, 0x68}, {&(0x7f0000002380)=""/248, 0xf8}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000002500)=""/205, 0xcd}], 0x8, &(0x7f0000002680)=""/254, 0xfe}, 0x3}, {{&(0x7f0000002780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000002800)=""/218, 0xda}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/51, 0x33}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/183, 0xb7}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x6, &(0x7f0000005a80)=""/173, 0xad}, 0x3}, {{&(0x7f0000005b40)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000006000)=""/254, 0xfe}], 0x1}, 0x4}], 0x8, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000008c0), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = gettid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(r5, 0x0) timerfd_gettime(r8, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="1e5600000000000044459d51404c7a26e265c64cdb3b7f5e301fe7a0b50a30f1f54b"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 7.648890446s ago: executing program 5 (id=8142): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x36}, 0x94) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r8 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000000005f2728000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4080) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040630415120000000000010902240001000000090904000401030000000921040004012207000905810320"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 6.533136414s ago: executing program 7 (id=8144): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2200000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000780)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="0209fc000700000028bd7000fed3df2505001a"], 0x38}, 0x1, 0x1000000}, 0x40408c0) 6.25250469s ago: executing program 7 (id=8145): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r7 = socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRES16=r9, @ANYRESOCT=r6, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x7, 0x8bb, 0x30, @local, @private0, 0x7857, 0x700, 0x1, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x7d5636d8881f1435, 0x20, 0xd4c, 0x3ff, {{0x19, 0x4, 0x1, 0x9, 0x64, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x2b, 0x44, [@multicast1, @private=0xa010100, @loopback, @private=0xa010100, @empty, @loopback, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0x24, 0xc5, 0x3, 0x4, [{@broadcast, 0x1ff}, {@broadcast, 0x8}, {@multicast1, 0x3}, {@multicast2, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0xd9441e9afa516d4, 0x10, 0x9, 0x4, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x66, 0x0, 0xfa, 0x2bfca2af13fbe480, 0x0, @loopback, @private=0xa010102, {[@generic={0x7, 0x10, "767923f89643662f3e3e2d71afb0"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="48010000", @ANYRES16=r9, @ANYBLOB="00042abd7000fbdbdf25040000003400018008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="280001801400020076657468315f746f5f6261746164760008000100", @ANYRES32=r11, @ANYBLOB="08000300020000000c00018008000300020000003000018014000200627269646765300000000000000000000800030003000000080003000300000008000100", @ANYRES32=r12, @ANYBLOB="180001801400020076657468315f746f5f6272696467650020000180140002006d6163766c616e3100000000000000000800030002000000"], 0x148}, 0x1, 0x0, 0x0, 0x4085}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x138}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 5.393499239s ago: executing program 6 (id=8146): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r4}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) truncate(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x9) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902120001000000000904"], 0x0) close_range(r6, r7, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x325840, 0x115) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x110, 0x3e, 0x4, 0x70bd26, 0x25dfdbfe, "", [@typed={0xbe, 0x9a, 0x0, 0x0, @binary="51a68eb884ab74f0db78f81b94847580fc1dea058849277115e58e71a3c89b71bb53c8269802c289bf75305aae44068526659dfa88481b11fa202dd447b5839104631628698e23b1c0c24745eb6f97f544994c25d5062a8021a5654c4bfd17b24af3f8ebf1d654f8d91f3ac4a2aecbe13851eb7a07775d81572e3c70a0050e4151e5e938e2b973d94533472aa8b27a5009e1c6376945a558d5eff7394d4d746afb1e8d11558209ffa1a100d563fe2cfe512ef6278c58b209aa3f"}, @nested={0x39, 0x156, 0x0, 0x1, [@generic="ce702cd7d3b9d9433cef462a39d5c480537b30572c0bdbc78155b0384c7036a5582ecfcbd519b8d402195a21c7", @nested={0x4, 0x10f}, @generic, @nested={0x4, 0x95}]}, @generic, @nested={0x4, 0x99}]}, 0x110}, {0x0}, {&(0x7f0000000640)={0x9c, 0x16, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0xf3, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x5}, @generic="fe0069a55c581378ee61c2f8a701b1bcaa4c1c06e7c4cee869d311d248e0a338e425ac199284350f287502ffb0fa91987b120828c43d5e0edf6b373fb093ce7123ec440083f3313b249ae22b007c6b182eecee96391f9f5c07", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@empty}, @nested={0xc, 0xf8, 0x0, 0x1, [@typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0x10f, 0x0, 0x0, @u32=0x2}]}, 0x9c}], 0x3, 0x0, 0x0, 0x4004}, 0x40040) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12012300000000407f"], 0x0) 4.415048047s ago: executing program 2 (id=8148): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_usb_connect(0x4, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8, 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4bfa, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000140)=@generic={0x11, "aed9c4eb82a5c61c6f6d3695f7f13772d36fcfbf69b5ff44c8182e904f470d2f45aa683efb8ffd593e066094d5edd9b1b394e622ec8293049428170e1b73a8a4e07180c653c4a8d7ab8837f3cfe78af5e65e2f00177758d18abac3a1d3aa049081167c1324a9e8d6f42bc43901270d0adb3aa834f9a4b87ed7ffcbc68d59"}, 0x80, 0x0}, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) close(r6) waitid(0x1, r5, 0x0, 0x61000006, &(0x7f0000000340)) 4.081163424s ago: executing program 7 (id=8149): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801000000000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 3.926064182s ago: executing program 5 (id=8150): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_usb_connect(0x4, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8, 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4bfa, 0x41) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000140)=@generic={0x11, "aed9c4eb82a5c61c6f6d3695f7f13772d36fcfbf69b5ff44c8182e904f470d2f45aa683efb8ffd593e066094d5edd9b1b394e622ec8293049428170e1b73a8a4e07180c653c4a8d7ab8837f3cfe78af5e65e2f00177758d18abac3a1d3aa049081167c1324a9e8d6f42bc43901270d0adb3aa834f9a4b87ed7ffcbc68d59"}, 0x80, 0x0}, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x3}, 0x10) close(r6) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3.847137378s ago: executing program 7 (id=8151): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2.979071972s ago: executing program 7 (id=8152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=""/48}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r3) 2.678216119s ago: executing program 7 (id=8154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000100)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/122, 0x7a}, 0x8000}], 0x1, 0x40000001, 0x0) read$FUSE(r5, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x50d000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 2.207514194s ago: executing program 6 (id=8155): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000040)) listen(r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x1, 0x8}) 2.038059625s ago: executing program 6 (id=8156): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000300)={@any, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x36}, 0x94) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r8 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x10040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4080) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040630415120000000000010902240001000000090904000401030000000921040004012207000905810320"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 1.763944362s ago: executing program 1 (id=8157): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x3b, 0x1, 0x81, 0x2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000680)="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", 0x1a7}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84", 0x17}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000840)="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", 0x1d2, 0x30085092, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.419689756s ago: executing program 1 (id=8158): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x8c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6163}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1.30949806s ago: executing program 1 (id=8159): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x5, 0x7, 0xb8, 0x70, 0x4, 0x7f, 0x9, 0x0, 0x7f, 0x8f, 0x2, 0x2, 0x1}, 0xe) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 1.097029186s ago: executing program 1 (id=8160): r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x5, &(0x7f0000000140)={0x6, 0xc6, 0x4}) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x60000000}, &(0x7f0000000040), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f0000000480)=""/12) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04020000", @ANYRES16=r3, @ANYBLOB="001800001700000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0xc008084}, 0x24008080) 798.853323ms ago: executing program 1 (id=8161): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c010000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08010980040102800c0001"], 0x174}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a010400000000000000000a0000010900010073797a31000000004c00048010000180080001006c6f670004000280380001800b0001006f626a7265660000280002800900020073797a30000000000800014000000002080003400000000908000340000000030900020073797a32"], 0x1ac}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x3, 0x6, 0x32314752, 0x7, 0x101, 0xc2, 0x3, 0x65, 0x1, 0x6, 0x2, 0x3}}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000540)={0x28, 0x2, r9, 0x0, &(0x7f0000141000/0x2000)=nil, 0x2000, 0x768}) 666.498275ms ago: executing program 2 (id=8162): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c67", 0x12, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 158.895626ms ago: executing program 1 (id=8163): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x8080000, 0x100000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 5 (id=8164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=""/48}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r3) kernel console output (not intermixed with test programs): ] ___sys_recvmsg+0x175/0x590 [ 2264.129378][ T1833] ? __pfx____sys_recvmsg+0x10/0x10 [ 2264.129426][ T1833] ? __fget_files+0x3a0/0x420 [ 2264.129469][ T1833] do_recvmmsg+0x334/0x800 [ 2264.129499][ T1833] ? __pfx_do_recvmmsg+0x10/0x10 [ 2264.129532][ T1833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2264.129574][ T1833] __x64_sys_recvmmsg+0x198/0x250 [ 2264.129601][ T1833] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2264.129636][ T1833] do_syscall_64+0x14d/0xf80 [ 2264.129656][ T1833] ? trace_irq_disable+0x3b/0x150 [ 2264.129689][ T1833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.129716][ T1833] ? clear_bhb_loop+0x40/0x90 [ 2264.129743][ T1833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.129766][ T1833] RIP: 0033:0x7f035cf9c799 [ 2264.129787][ T1833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2264.129807][ T1833] RSP: 002b:00007f035ddc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2264.129832][ T1833] RAX: ffffffffffffffda RBX: 00007f035d215fa0 RCX: 00007f035cf9c799 [ 2264.129848][ T1833] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2264.129863][ T1833] RBP: 00007f035ddc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.129877][ T1833] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 2264.129890][ T1833] R13: 00007f035d216038 R14: 00007f035d215fa0 R15: 00007f035d33fa48 [ 2264.129923][ T1833] [ 2264.347087][ T1210] usb 6-1: Using ep0 maxpacket: 8 [ 2264.611617][ T1210] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2264.627279][ T1210] usb 6-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2264.657835][ T1210] usb 6-1: config 0 has no interface number 0 [ 2264.699394][T22666] net_ratelimit: 23 callbacks suppressed [ 2264.699410][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2264.724286][ T1210] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2264.753533][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.774241][ T1210] usb 6-1: Product: syz [ 2264.791440][ T1210] usb 6-1: Manufacturer: syz [ 2264.805336][ T1210] usb 6-1: SerialNumber: syz [ 2264.848992][ T1210] usb 6-1: config 0 descriptor?? [ 2264.869690][ T1210] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2264.877179][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2264.900913][ T1210] uvcvideo 6-1:0.31: No valid video chain found. [ 2264.987184][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2265.090581][ T1843] syzkaller0: entered promiscuous mode [ 2265.096088][ T1843] syzkaller0: entered allmulticast mode [ 2265.156133][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2265.164871][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2265.196896][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2265.707121][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2265.817679][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2265.947256][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2266.067085][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2266.177142][ T1210] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2266.207099][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2266.389484][ T1210] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2266.452068][ T1210] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2266.507169][ T1210] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2266.572532][ T1210] usb 2-1: config 220 has no interface number 2 [ 2266.606025][ T1210] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2266.657306][T26523] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2266.697146][ T1210] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2266.731521][ T1210] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2266.754859][ T1210] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2266.761920][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2266.779512][ T1210] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2266.808784][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.854332][ T1210] usb 2-1: Product: syz [ 2266.870417][T26523] usb 3-1: Using ep0 maxpacket: 16 [ 2266.880529][ T1210] usb 2-1: Manufacturer: syz [ 2266.929256][ T1210] usb 2-1: SerialNumber: syz [ 2266.938294][T26523] usb 3-1: config 0 has no interfaces? [ 2266.949114][T26523] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2266.969058][T26523] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2266.981918][T26523] usb 3-1: Manufacturer: syz [ 2267.001877][T26523] usb 3-1: config 0 descriptor?? [ 2267.072205][T26523] usb 6-1: USB disconnect, device number 70 [ 2267.326726][ T1210] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2267.340760][ T1210] uvcvideo 2-1:220.0: No valid video chain found. [ 2267.349336][ T1210] usb 2-1: selecting invalid altsetting 0 [ 2267.384161][ T1210] usb 2-1: selecting invalid altsetting 0 [ 2267.391496][ T1210] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2267.421712][ T1210] usb 2-1: USB disconnect, device number 25 [ 2268.097507][T26523] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2268.297194][T26523] usb 6-1: Using ep0 maxpacket: 16 [ 2268.332504][T26523] usb 6-1: config 0 has no interfaces? [ 2268.362460][T26523] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2268.378179][T26523] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2268.386307][T26523] usb 6-1: Manufacturer: syz [ 2268.427722][T26523] usb 6-1: config 0 descriptor?? [ 2269.468194][ T1210] usb 3-1: USB disconnect, device number 35 [ 2269.777112][T29564] net_ratelimit: 21 callbacks suppressed [ 2269.777129][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2269.927519][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2270.050450][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2270.248472][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2270.377566][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2270.497485][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2270.637134][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2270.894468][T28266] usb 6-1: USB disconnect, device number 71 [ 2271.062867][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2271.173300][ T1944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.214016][ T1947] loop7: detected capacity change from 0 to 7 [ 2271.222144][ T1946] FAULT_INJECTION: forcing a failure. [ 2271.222144][ T1946] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.292654][ T1946] CPU: 0 UID: 0 PID: 1946 Comm: syz.5.7810 Tainted: G L syzkaller #0 PREEMPT(full) [ 2271.292718][ T1946] Tainted: [L]=SOFTLOCKUP [ 2271.292731][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2271.292747][ T1946] Call Trace: [ 2271.292759][ T1946] [ 2271.292771][ T1946] dump_stack_lvl+0xe8/0x150 [ 2271.292810][ T1946] should_fail_ex+0x412/0x560 [ 2271.292851][ T1946] should_failslab+0xa8/0x100 [ 2271.292891][ T1946] __kmalloc_noprof+0xe8/0x760 [ 2271.292929][ T1946] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2271.293003][ T1946] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2271.293055][ T1946] ? tomoyo_path_number_perm+0x219/0x630 [ 2271.293088][ T1946] tomoyo_path_number_perm+0x246/0x630 [ 2271.293121][ T1946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2271.293160][ T1946] ? __lock_acquire+0x6b5/0x2cf0 [ 2271.293233][ T1946] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2271.293289][ T1946] ? __fget_files+0x2a/0x420 [ 2271.293330][ T1946] ? __fget_files+0x2a/0x420 [ 2271.293363][ T1946] ? __fget_files+0x3a0/0x420 [ 2271.293396][ T1946] ? __fget_files+0x2a/0x420 [ 2271.293437][ T1946] security_file_ioctl+0xc3/0x2a0 [ 2271.293469][ T1946] __se_sys_ioctl+0x47/0x170 [ 2271.293504][ T1946] do_syscall_64+0x14d/0xf80 [ 2271.293530][ T1946] ? trace_irq_disable+0x3b/0x150 [ 2271.293568][ T1946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2271.293599][ T1946] ? clear_bhb_loop+0x40/0x90 [ 2271.293630][ T1946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2271.293660][ T1946] RIP: 0033:0x7fe93cb9c799 [ 2271.293684][ T1946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2271.293710][ T1946] RSP: 002b:00007fe93da01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2271.293737][ T1946] RAX: ffffffffffffffda RBX: 00007fe93ce15fa0 RCX: 00007fe93cb9c799 [ 2271.293752][ T1946] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2271.293792][ T1946] RBP: 00007fe93da01090 R08: 0000000000000000 R09: 0000000000000000 [ 2271.293806][ T1946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.293825][ T1946] R13: 00007fe93ce16038 R14: 00007fe93ce15fa0 R15: 00007fe93cf3fa48 [ 2271.293864][ T1946] [ 2271.312179][ T1946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2271.588689][ T1947] Dev loop7: unable to read RDB block 7 [ 2271.603832][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 2271.613918][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 2271.624677][ T1947] loop7: unable to read partition table [ 2271.651575][ T1947] loop7: partition table beyond EOD, truncated [ 2271.685196][ T1947] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 2271.844744][ T1944] bridge_slave_1: left allmulticast mode [ 2271.851690][ T1944] bridge_slave_1: left promiscuous mode [ 2271.874598][ T1944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.937589][ T1944] bond0: (slave bond_slave_0): Releasing backup interface [ 2271.954870][ T5194] Dev loop7: unable to read RDB block 7 [ 2271.964454][ T1954] x_tables: unsorted entry at hook 2 [ 2271.979416][ T1944] bond0: (slave bond_slave_1): Releasing backup interface [ 2271.996504][ T1944] team0: Port device team_slave_0 removed [ 2272.010046][ T1944] team0: Port device team_slave_1 removed [ 2272.016609][ T1944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2272.021699][ T5194] loop7: unable to read partition table [ 2272.054851][ T1944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2272.072691][ T5194] loop7: partition table beyond EOD, truncated [ 2272.074051][ T1944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2272.107232][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2272.131749][ T1951] syzkaller0: entered promiscuous mode [ 2272.137451][ T1951] syzkaller0: entered allmulticast mode [ 2272.453207][ T1966] FAULT_INJECTION: forcing a failure. [ 2272.453207][ T1966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.500398][ T1966] CPU: 0 UID: 0 PID: 1966 Comm: syz.5.7815 Tainted: G L syzkaller #0 PREEMPT(full) [ 2272.500434][ T1966] Tainted: [L]=SOFTLOCKUP [ 2272.500443][ T1966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2272.500456][ T1966] Call Trace: [ 2272.500465][ T1966] [ 2272.500475][ T1966] dump_stack_lvl+0xe8/0x150 [ 2272.500512][ T1966] should_fail_ex+0x412/0x560 [ 2272.500546][ T1966] _copy_from_user+0x2d/0xb0 [ 2272.500580][ T1966] ___sys_sendmsg+0x1c6/0x360 [ 2272.500609][ T1966] ? __pfx____sys_sendmsg+0x10/0x10 [ 2272.500666][ T1966] ? __fget_files+0x2a/0x420 [ 2272.500699][ T1966] ? __fget_files+0x3a0/0x420 [ 2272.500742][ T1966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2272.500766][ T1966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2272.500797][ T1966] ? __pfx_ksys_write+0x10/0x10 [ 2272.500838][ T1966] do_syscall_64+0x14d/0xf80 [ 2272.500859][ T1966] ? trace_irq_disable+0x3b/0x150 [ 2272.500891][ T1966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.500914][ T1966] ? clear_bhb_loop+0x40/0x90 [ 2272.500941][ T1966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.500963][ T1966] RIP: 0033:0x7fe93cb9c799 [ 2272.500986][ T1966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2272.501005][ T1966] RSP: 002b:00007fe93da01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2272.501029][ T1966] RAX: ffffffffffffffda RBX: 00007fe93ce15fa0 RCX: 00007fe93cb9c799 [ 2272.501045][ T1966] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 2272.501060][ T1966] RBP: 00007fe93da01090 R08: 0000000000000000 R09: 0000000000000000 [ 2272.501075][ T1966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2272.501088][ T1966] R13: 00007fe93ce16038 R14: 00007fe93ce15fa0 R15: 00007fe93cf3fa48 [ 2272.501122][ T1966] [ 2273.247135][T10147] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2273.397248][T10147] usb 2-1: Using ep0 maxpacket: 32 [ 2273.419508][T10147] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2273.441706][T10147] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2273.456126][T10147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.467311][T10147] usb 2-1: Product: syz [ 2273.471604][T10147] usb 2-1: Manufacturer: syz [ 2273.476468][T10147] usb 2-1: SerialNumber: syz [ 2273.672131][ T1985] FAULT_INJECTION: forcing a failure. [ 2273.672131][ T1985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2273.685804][ T1985] CPU: 1 UID: 0 PID: 1985 Comm: syz.5.7822 Tainted: G L syzkaller #0 PREEMPT(full) [ 2273.685840][ T1985] Tainted: [L]=SOFTLOCKUP [ 2273.685850][ T1985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2273.685863][ T1985] Call Trace: [ 2273.685873][ T1985] [ 2273.685884][ T1985] dump_stack_lvl+0xe8/0x150 [ 2273.685922][ T1985] should_fail_ex+0x412/0x560 [ 2273.685956][ T1985] _copy_from_user+0x2d/0xb0 [ 2273.685992][ T1985] ___sys_sendmsg+0x1c6/0x360 [ 2273.686019][ T1985] ? __pfx____sys_sendmsg+0x10/0x10 [ 2273.686077][ T1985] ? __fget_files+0x2a/0x420 [ 2273.686110][ T1985] ? __fget_files+0x3a0/0x420 [ 2273.686152][ T1985] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2273.686177][ T1985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2273.686209][ T1985] ? rcu_is_watching+0x15/0xb0 [ 2273.686253][ T1985] do_syscall_64+0x14d/0xf80 [ 2273.686282][ T1985] ? trace_irq_disable+0x3b/0x150 [ 2273.686315][ T1985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2273.686337][ T1985] ? clear_bhb_loop+0x40/0x90 [ 2273.686364][ T1985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2273.686387][ T1985] RIP: 0033:0x7fe93cb9c799 [ 2273.686408][ T1985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.686427][ T1985] RSP: 002b:00007fe93da01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2273.686451][ T1985] RAX: ffffffffffffffda RBX: 00007fe93ce15fa0 RCX: 00007fe93cb9c799 [ 2273.686468][ T1985] RDX: 0000000004000811 RSI: 0000200000000300 RDI: 0000000000000003 [ 2273.686482][ T1985] RBP: 00007fe93da01090 R08: 0000000000000000 R09: 0000000000000000 [ 2273.686496][ T1985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.686509][ T1985] R13: 00007fe93ce16038 R14: 00007fe93ce15fa0 R15: 00007fe93cf3fa48 [ 2273.686543][ T1985] [ 2274.056339][T10147] usb 2-1: USB disconnect, device number 26 [ 2274.126507][T32593] udevd[32593]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2274.478546][ T1994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7825'. [ 2274.509642][ T1994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2274.570579][ T1967] delete_channel: no stack [ 2274.706546][ T1996] netlink: 'syz.7.7826': attribute type 10 has an invalid length. [ 2274.729254][ T1996] FAULT_INJECTION: forcing a failure. [ 2274.729254][ T1996] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.747678][ T1996] CPU: 1 UID: 0 PID: 1996 Comm: syz.7.7826 Tainted: G L syzkaller #0 PREEMPT(full) [ 2274.747715][ T1996] Tainted: [L]=SOFTLOCKUP [ 2274.747724][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2274.747738][ T1996] Call Trace: [ 2274.747747][ T1996] [ 2274.747757][ T1996] dump_stack_lvl+0xe8/0x150 [ 2274.747794][ T1996] should_fail_ex+0x412/0x560 [ 2274.747829][ T1996] should_failslab+0xa8/0x100 [ 2274.747860][ T1996] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2274.747886][ T1996] ? __alloc_skb+0x1d0/0x7d0 [ 2274.747917][ T1996] ? __local_bh_enable_ip+0xd0/0x130 [ 2274.747952][ T1996] __alloc_skb+0x1d0/0x7d0 [ 2274.747989][ T1996] inet_ifmcaddr_notify+0x7e/0x150 [ 2274.748023][ T1996] __ip_mc_dec_group+0x3ee/0x770 [ 2274.748052][ T1996] inetdev_event+0x2b1/0x1610 [ 2274.748159][ T1996] ? __pfx_inetdev_event+0x10/0x10 [ 2274.748204][ T1996] notifier_call_chain+0x1be/0x400 [ 2274.748249][ T1996] __dev_notify_flags+0x16d/0x310 [ 2274.748287][ T1996] ? __pfx___dev_notify_flags+0x10/0x10 [ 2274.748319][ T1996] ? __dev_change_flags+0x4c6/0x690 [ 2274.748358][ T1996] ? __pfx___dev_change_flags+0x10/0x10 [ 2274.748389][ T1996] ? __irq_work_queue_local+0x1f2/0x590 [ 2274.748427][ T1996] ? __pfx___irq_work_queue_local+0x10/0x10 [ 2274.748460][ T1996] ? console_unlock+0x150/0x1c0 [ 2274.748491][ T1996] ? preempt_schedule_thunk+0x16/0x30 [ 2274.748529][ T1996] netif_change_flags+0xe8/0x1a0 [ 2274.748566][ T1996] do_setlink+0xf82/0x4590 [ 2274.748597][ T1996] ? __wake_up_klogd+0xe6/0x120 [ 2274.748624][ T1996] ? __pfx_vprintk_emit+0x10/0x10 [ 2274.748670][ T1996] ? __pfx_do_setlink+0x10/0x10 [ 2274.748702][ T1996] ? __lock_acquire+0x6b5/0x2cf0 [ 2274.748740][ T1996] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2274.748773][ T1996] ? ___ratelimit+0x58c/0x8d0 [ 2274.748812][ T1996] ? __mutex_trylock_common+0x158/0x260 [ 2274.748849][ T1996] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2274.748886][ T1996] ? rcu_is_watching+0x15/0xb0 [ 2274.748917][ T1996] ? trace_contention_end+0x3d/0x150 [ 2274.748953][ T1996] ? __mutex_lock+0x319/0x1300 [ 2274.748974][ T1996] ? __pfx___nla_validate_parse+0x10/0x10 [ 2274.749016][ T1996] ? rtnl_newlink+0x8a1/0x1be0 [ 2274.749051][ T1996] ? __pfx___mutex_lock+0x10/0x10 [ 2274.749084][ T1996] ? ns_capable+0x89/0xe0 [ 2274.749120][ T1996] rtnl_newlink+0x15a9/0x1be0 [ 2274.749163][ T1996] ? __pfx_rtnl_newlink+0x10/0x10 [ 2274.749191][ T1996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.749252][ T1996] ? kasan_quarantine_put+0xbb/0x1f0 [ 2274.749276][ T1996] ? lockdep_hardirqs_on+0x7a/0x110 [ 2274.749315][ T1996] ? kmem_cache_free+0x187/0x630 [ 2274.749338][ T1996] ? nlmon_xmit+0xb0/0x100 [ 2274.749383][ T1996] ? __lock_acquire+0x6b5/0x2cf0 [ 2274.749414][ T1996] ? __local_bh_enable_ip+0xd0/0x130 [ 2274.749441][ T1996] ? lockdep_hardirqs_on+0x7a/0x110 [ 2274.749473][ T1996] ? __dev_queue_xmit+0x277/0x3890 [ 2274.749495][ T1996] ? __local_bh_enable_ip+0xd0/0x130 [ 2274.749521][ T1996] ? __dev_queue_xmit+0x277/0x3890 [ 2274.749568][ T1996] ? __pfx_rtnl_newlink+0x10/0x10 [ 2274.749597][ T1996] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2274.749630][ T1996] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2274.749687][ T1996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2274.749714][ T1996] ? ref_tracker_free+0x693/0x840 [ 2274.749742][ T1996] ? __copy_skb_header+0xa3/0x4a0 [ 2274.749766][ T1996] ? __pfx_ref_tracker_free+0x10/0x10 [ 2274.749794][ T1996] ? __skb_clone+0x63/0x7a0 [ 2274.749825][ T1996] netlink_rcv_skb+0x232/0x4b0 [ 2274.749858][ T1996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2274.749890][ T1996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2274.749931][ T1996] ? netlink_deliver_tap+0x2e/0x1b0 [ 2274.749969][ T1996] netlink_unicast+0x80f/0x9b0 [ 2274.750004][ T1996] ? __pfx_netlink_unicast+0x10/0x10 [ 2274.750033][ T1996] ? netlink_sendmsg+0x650/0xb40 [ 2274.750061][ T1996] ? skb_put+0x11b/0x210 [ 2274.750096][ T1996] netlink_sendmsg+0x813/0xb40 [ 2274.750134][ T1996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2274.750166][ T1996] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2274.750196][ T1996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2274.750225][ T1996] ____sys_sendmsg+0x972/0x9f0 [ 2274.750253][ T1996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2274.750285][ T1996] ? import_iovec+0x73/0xa0 [ 2274.750322][ T1996] ___sys_sendmsg+0x2a5/0x360 [ 2274.750349][ T1996] ? __pfx____sys_sendmsg+0x10/0x10 [ 2274.750407][ T1996] ? __fget_files+0x2a/0x420 [ 2274.750438][ T1996] ? __fget_files+0x3a0/0x420 [ 2274.750481][ T1996] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2274.750505][ T1996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2274.750538][ T1996] ? __pfx_ksys_write+0x10/0x10 [ 2274.750574][ T1996] do_syscall_64+0x14d/0xf80 [ 2274.750594][ T1996] ? trace_irq_disable+0x3b/0x150 [ 2274.750625][ T1996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.750657][ T1996] ? clear_bhb_loop+0x40/0x90 [ 2274.750684][ T1996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.750705][ T1996] RIP: 0033:0x7fc3c1f9c799 [ 2274.750727][ T1996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2274.750746][ T1996] RSP: 002b:00007fc3c2dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2274.750769][ T1996] RAX: ffffffffffffffda RBX: 00007fc3c2215fa0 RCX: 00007fc3c1f9c799 [ 2274.750785][ T1996] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 2274.750799][ T1996] RBP: 00007fc3c2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.750812][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.750825][ T1996] R13: 00007fc3c2216038 R14: 00007fc3c2215fa0 R15: 00007fc3c233fa48 [ 2274.750859][ T1996] [ 2274.756331][ T1996] 8021q: adding VLAN 0 to HW filter on device team0 [ 2275.311366][ T1996] bond0: (slave team0): Enslaving as an active interface with an up link [ 2275.321535][ T2004] FAULT_INJECTION: forcing a failure. [ 2275.321535][ T2004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.376879][ T2004] CPU: 0 UID: 0 PID: 2004 Comm: syz.5.7828 Tainted: G L syzkaller #0 PREEMPT(full) [ 2275.376915][ T2004] Tainted: [L]=SOFTLOCKUP [ 2275.376923][ T2004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2275.376937][ T2004] Call Trace: [ 2275.376946][ T2004] [ 2275.376960][ T2004] dump_stack_lvl+0xe8/0x150 [ 2275.376996][ T2004] should_fail_ex+0x412/0x560 [ 2275.377030][ T2004] _copy_from_user+0x2d/0xb0 [ 2275.377064][ T2004] copy_from_sockptr+0x5e/0x90 [ 2275.377091][ T2004] do_ip_setsockopt+0x1ee1/0x2ea0 [ 2275.377132][ T2004] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2275.377157][ T2004] ? aa_sk_perm+0x6d5/0x900 [ 2275.377193][ T2004] ? __pfx_aa_sk_perm+0x10/0x10 [ 2275.377222][ T2004] ? __fget_files+0x2a/0x420 [ 2275.377253][ T2004] ? aa_sock_opt_perm+0xff/0x1a0 [ 2275.377284][ T2004] ip_setsockopt+0x66/0x110 [ 2275.377305][ T2004] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2275.377336][ T2004] do_sock_setsockopt+0x17c/0x1b0 [ 2275.377373][ T2004] __x64_sys_setsockopt+0x13d/0x1b0 [ 2275.377412][ T2004] do_syscall_64+0x14d/0xf80 [ 2275.377432][ T2004] ? trace_irq_disable+0x3b/0x150 [ 2275.377463][ T2004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2275.377486][ T2004] ? clear_bhb_loop+0x40/0x90 [ 2275.377513][ T2004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2275.377535][ T2004] RIP: 0033:0x7fe93cb9c799 [ 2275.377556][ T2004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.377575][ T2004] RSP: 002b:00007fe93d9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2275.377599][ T2004] RAX: ffffffffffffffda RBX: 00007fe93ce16180 RCX: 00007fe93cb9c799 [ 2275.377615][ T2004] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 2275.377628][ T2004] RBP: 00007fe93d9bf090 R08: 000000000000000c R09: 0000000000000000 [ 2275.377642][ T2004] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2275.377656][ T2004] R13: 00007fe93ce16218 R14: 00007fe93ce16180 R15: 00007fe93cf3fa48 [ 2275.377690][ T2004] [ 2275.847306][T29591] net_ratelimit: 17 callbacks suppressed [ 2275.847329][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2275.907433][T10147] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2275.967146][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.057083][T10147] usb 3-1: Using ep0 maxpacket: 32 [ 2276.064472][T10147] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2276.073105][T10147] usb 3-1: config 0 has no interface number 0 [ 2276.079902][T10147] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2276.087951][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.092342][T10147] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2276.116101][T10147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.135330][T10147] usb 3-1: Product: syz [ 2276.146803][T10147] usb 3-1: Manufacturer: syz [ 2276.155562][T10147] usb 3-1: SerialNumber: syz [ 2276.178351][T10147] usb 3-1: config 0 descriptor?? [ 2276.221580][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.312528][ T2023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7835'. [ 2276.338086][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.397107][T26523] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2276.457252][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.495784][ T2025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7836'. [ 2276.527363][ T2025] batadv_slave_1: entered promiscuous mode [ 2276.537086][T26523] usb 6-1: device descriptor read/64, error -71 [ 2276.552256][ T2025] macsec1: entered promiscuous mode [ 2276.564743][ T2025] macsec1: entered allmulticast mode [ 2276.571807][ T2025] batadv_slave_1: entered allmulticast mode [ 2276.593588][ T2025] batadv_slave_1: left allmulticast mode [ 2276.607964][ T2025] batadv_slave_1: left promiscuous mode [ 2276.747333][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.779846][T26523] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2276.857141][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2276.927183][T26523] usb 6-1: device descriptor read/64, error -71 [ 2276.967404][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2277.046498][T26523] usb usb6-port1: attempt power cycle [ 2277.087217][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2277.407091][T26523] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2277.441233][T10147] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 2277.465045][T26523] usb 6-1: device descriptor read/8, error -71 [ 2277.661772][T10147] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2277.683196][T10147] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2277.693035][T10147] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2277.705810][T10147] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2277.707906][T26523] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2277.718525][T10147] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2277.771852][T26523] usb 6-1: device descriptor read/8, error -71 [ 2277.784261][T10147] usb 3-1: USB disconnect, device number 36 [ 2277.887384][T26523] usb usb6-port1: unable to enumerate USB device [ 2279.320315][ T2055] input: syz0 as /devices/virtual/input/input141 [ 2279.506144][T10147] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2279.689363][ T2074] tipc: Enabling of bearer rejected, failed to enable media [ 2279.774709][T10147] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2279.820673][T10147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.855866][T10147] usb 6-1: config 0 descriptor?? [ 2280.127539][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2280.287570][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2280.305325][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2280.344799][ T9] usb 3-1: config 8 has an invalid interface number: 45 but max is 0 [ 2280.407072][ T9] usb 3-1: config 8 has no interface number 0 [ 2280.455992][ T9] usb 3-1: config 8 interface 45 has no altsetting 0 [ 2280.528498][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7 [ 2280.582545][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.622769][ T9] usb 3-1: Product: syz [ 2280.655562][ T9] usb 3-1: Manufacturer: syz [ 2280.703535][ T9] usb 3-1: SerialNumber: syz [ 2280.891770][T29591] net_ratelimit: 33 callbacks suppressed [ 2280.891798][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2280.970690][ T2076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.006939][ T2076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2281.047141][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2281.079204][ T2076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2281.132275][T10147] usb 6-1: Cannot set autoneg [ 2281.143209][T10147] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 2281.156689][ T2076] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2281.157598][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2281.309203][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 2281.333670][ T9] gspca_sn9c2028: read1 error -71 [ 2281.343159][ T9] gspca_sn9c2028: read1 error -71 [ 2281.354929][ T9] gspca_sn9c2028: read1 error -71 [ 2281.361214][ T9] sn9c2028 3-1:8.45: probe with driver sn9c2028 failed with error -71 [ 2281.383173][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2281.402770][ T9] usb 3-1: USB disconnect, device number 37 [ 2281.537842][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2281.566314][ T2088] FAULT_INJECTION: forcing a failure. [ 2281.566314][ T2088] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.601944][ T2088] CPU: 1 UID: 0 PID: 2088 Comm: syz.1.7854 Tainted: G L syzkaller #0 PREEMPT(full) [ 2281.601979][ T2088] Tainted: [L]=SOFTLOCKUP [ 2281.601985][ T2088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2281.601996][ T2088] Call Trace: [ 2281.602002][ T2088] [ 2281.602009][ T2088] dump_stack_lvl+0xe8/0x150 [ 2281.602037][ T2088] should_fail_ex+0x412/0x560 [ 2281.602067][ T2088] should_failslab+0xa8/0x100 [ 2281.602088][ T2088] ? skb_clone+0x212/0x3a0 [ 2281.602104][ T2088] kmem_cache_alloc_noprof+0x87/0x650 [ 2281.602120][ T2088] ? __netlink_lookup+0xc6/0x8b0 [ 2281.602157][ T2088] skb_clone+0x212/0x3a0 [ 2281.602179][ T2088] __netlink_deliver_tap+0x404/0x850 [ 2281.602209][ T2088] ? netlink_deliver_tap+0x2e/0x1b0 [ 2281.602231][ T2088] netlink_deliver_tap+0x19c/0x1b0 [ 2281.602274][ T2088] netlink_unicast+0x7e3/0x9b0 [ 2281.602310][ T2088] ? __pfx_netlink_unicast+0x10/0x10 [ 2281.602339][ T2088] ? netlink_sendmsg+0x650/0xb40 [ 2281.602374][ T2088] ? skb_put+0x11b/0x210 [ 2281.602409][ T2088] netlink_sendmsg+0x813/0xb40 [ 2281.602447][ T2088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2281.602482][ T2088] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2281.602513][ T2088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2281.602542][ T2088] ____sys_sendmsg+0x972/0x9f0 [ 2281.602574][ T2088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2281.602606][ T2088] ? import_iovec+0x73/0xa0 [ 2281.602644][ T2088] ___sys_sendmsg+0x2a5/0x360 [ 2281.602672][ T2088] ? __pfx____sys_sendmsg+0x10/0x10 [ 2281.602731][ T2088] ? __fget_files+0x2a/0x420 [ 2281.602763][ T2088] ? __fget_files+0x3a0/0x420 [ 2281.602805][ T2088] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2281.602831][ T2088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2281.602864][ T2088] ? __pfx_ksys_write+0x10/0x10 [ 2281.602900][ T2088] do_syscall_64+0x14d/0xf80 [ 2281.602921][ T2088] ? trace_irq_disable+0x3b/0x150 [ 2281.602953][ T2088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.602976][ T2088] ? clear_bhb_loop+0x40/0x90 [ 2281.603003][ T2088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.603026][ T2088] RIP: 0033:0x7f10b019c799 [ 2281.603055][ T2088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.603073][ T2088] RSP: 002b:00007f10b1124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2281.603096][ T2088] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c799 [ 2281.603113][ T2088] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2281.603126][ T2088] RBP: 00007f10b1124090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.603140][ T2088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.603153][ T2088] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007f10b053fa48 [ 2281.603188][ T2088] [ 2281.880124][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.017286][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.127107][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.448499][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.588308][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.752347][ T2098] FAULT_INJECTION: forcing a failure. [ 2282.752347][ T2098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2282.787255][ T2098] CPU: 1 UID: 0 PID: 2098 Comm: syz.1.7857 Tainted: G L syzkaller #0 PREEMPT(full) [ 2282.787291][ T2098] Tainted: [L]=SOFTLOCKUP [ 2282.787299][ T2098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2282.787313][ T2098] Call Trace: [ 2282.787322][ T2098] [ 2282.787332][ T2098] dump_stack_lvl+0xe8/0x150 [ 2282.787368][ T2098] should_fail_ex+0x412/0x560 [ 2282.787414][ T2098] _copy_from_user+0x2d/0xb0 [ 2282.787449][ T2098] ___sys_sendmsg+0x1c6/0x360 [ 2282.787478][ T2098] ? __pfx____sys_sendmsg+0x10/0x10 [ 2282.787535][ T2098] ? __fget_files+0x2a/0x420 [ 2282.787566][ T2098] ? __fget_files+0x3a0/0x420 [ 2282.787607][ T2098] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2282.787632][ T2098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2282.787663][ T2098] ? __pfx_ksys_write+0x10/0x10 [ 2282.787703][ T2098] do_syscall_64+0x14d/0xf80 [ 2282.787724][ T2098] ? trace_irq_disable+0x3b/0x150 [ 2282.787755][ T2098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2282.787778][ T2098] ? clear_bhb_loop+0x40/0x90 [ 2282.787806][ T2098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2282.787828][ T2098] RIP: 0033:0x7f10b019c799 [ 2282.787848][ T2098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2282.787867][ T2098] RSP: 002b:00007f10b1124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2282.787891][ T2098] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c799 [ 2282.787908][ T2098] RDX: 0000000020000004 RSI: 0000200000000200 RDI: 0000000000000004 [ 2282.787922][ T2098] RBP: 00007f10b1124090 R08: 0000000000000000 R09: 0000000000000000 [ 2282.787936][ T2098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2282.787949][ T2098] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007f10b053fa48 [ 2282.787983][ T2098] [ 2283.212702][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.225019][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.951029][ T2125] FAULT_INJECTION: forcing a failure. [ 2284.951029][ T2125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2284.997094][ T2125] CPU: 0 UID: 0 PID: 2125 Comm: syz.6.7864 Tainted: G L syzkaller #0 PREEMPT(full) [ 2284.997131][ T2125] Tainted: [L]=SOFTLOCKUP [ 2284.997140][ T2125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2284.997153][ T2125] Call Trace: [ 2284.997163][ T2125] [ 2284.997172][ T2125] dump_stack_lvl+0xe8/0x150 [ 2284.997209][ T2125] should_fail_ex+0x412/0x560 [ 2284.997239][ T2125] _copy_from_user+0x2d/0xb0 [ 2284.997274][ T2125] ___sys_sendmsg+0x1c6/0x360 [ 2284.997303][ T2125] ? __pfx____sys_sendmsg+0x10/0x10 [ 2284.997361][ T2125] ? __fget_files+0x2a/0x420 [ 2284.997391][ T2125] ? __fget_files+0x3a0/0x420 [ 2284.997434][ T2125] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2284.997459][ T2125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2284.997491][ T2125] ? __pfx_ksys_write+0x10/0x10 [ 2284.997527][ T2125] do_syscall_64+0x14d/0xf80 [ 2284.997547][ T2125] ? trace_irq_disable+0x3b/0x150 [ 2284.997579][ T2125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.997601][ T2125] ? clear_bhb_loop+0x40/0x90 [ 2284.997628][ T2125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.997651][ T2125] RIP: 0033:0x7f7d59f9c799 [ 2284.997672][ T2125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2284.997691][ T2125] RSP: 002b:00007f7d5ad97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2284.997723][ T2125] RAX: ffffffffffffffda RBX: 00007f7d5a215fa0 RCX: 00007f7d59f9c799 [ 2284.997740][ T2125] RDX: ea5bc50b6199d77e RSI: 0000200000000000 RDI: 0000000000000003 [ 2284.997756][ T2125] RBP: 00007f7d5ad97090 R08: 0000000000000000 R09: 0000000000000000 [ 2284.997769][ T2125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.997782][ T2125] R13: 00007f7d5a216038 R14: 00007f7d5a215fa0 R15: 00007f7d5a33fa48 [ 2284.997816][ T2125] [ 2285.368066][T26523] usb 6-1: USB disconnect, device number 76 [ 2285.917447][T29564] net_ratelimit: 25 callbacks suppressed [ 2285.917467][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2285.948790][ T2141] FAULT_INJECTION: forcing a failure. [ 2285.948790][ T2141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2285.984737][ T2141] CPU: 1 UID: 0 PID: 2141 Comm: syz.5.7871 Tainted: G L syzkaller #0 PREEMPT(full) [ 2285.984764][ T2141] Tainted: [L]=SOFTLOCKUP [ 2285.984770][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2285.984780][ T2141] Call Trace: [ 2285.984787][ T2141] [ 2285.984794][ T2141] dump_stack_lvl+0xe8/0x150 [ 2285.984826][ T2141] should_fail_ex+0x412/0x560 [ 2285.984851][ T2141] _copy_from_user+0x2d/0xb0 [ 2285.984876][ T2141] sk_setsockopt+0x2b3/0x2e80 [ 2285.984905][ T2141] ? __pfx_sk_setsockopt+0x10/0x10 [ 2285.984930][ T2141] ? aa_sk_perm+0x6d5/0x900 [ 2285.984955][ T2141] ? __pfx_aa_sk_perm+0x10/0x10 [ 2285.984976][ T2141] ? __fget_files+0x2a/0x420 [ 2285.984997][ T2141] ? aa_sock_opt_perm+0xff/0x1a0 [ 2285.985019][ T2141] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2285.985041][ T2141] do_sock_setsockopt+0x11b/0x1b0 [ 2285.985068][ T2141] __x64_sys_setsockopt+0x13d/0x1b0 [ 2285.985096][ T2141] do_syscall_64+0x14d/0xf80 [ 2285.985116][ T2141] ? trace_irq_disable+0x3b/0x150 [ 2285.985138][ T2141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.985154][ T2141] ? clear_bhb_loop+0x40/0x90 [ 2285.985173][ T2141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.985189][ T2141] RIP: 0033:0x7fe93cb9c799 [ 2285.985204][ T2141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2285.985218][ T2141] RSP: 002b:00007fe93da01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2285.985234][ T2141] RAX: ffffffffffffffda RBX: 00007fe93ce15fa0 RCX: 00007fe93cb9c799 [ 2285.985246][ T2141] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 2285.985255][ T2141] RBP: 00007fe93da01090 R08: 0000000000000004 R09: 0000000000000000 [ 2285.985265][ T2141] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 2285.985275][ T2141] R13: 00007fe93ce16038 R14: 00007fe93ce15fa0 R15: 00007fe93cf3fa48 [ 2285.985303][ T2141] [ 2286.189963][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2286.417206][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2286.527126][T22666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2286.676024][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2286.733319][ T2148] fuse: Bad value for 'fd' [ 2286.787693][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2286.917251][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2287.187258][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2287.427116][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2287.547125][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2287.557195][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2287.570752][ T2166] FAULT_INJECTION: forcing a failure. [ 2287.570752][ T2166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2287.583936][ T2166] CPU: 1 UID: 0 PID: 2166 Comm: syz.7.7878 Tainted: G L syzkaller #0 PREEMPT(full) [ 2287.583963][ T2166] Tainted: [L]=SOFTLOCKUP [ 2287.583970][ T2166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2287.583980][ T2166] Call Trace: [ 2287.583986][ T2166] [ 2287.583993][ T2166] dump_stack_lvl+0xe8/0x150 [ 2287.584020][ T2166] should_fail_ex+0x412/0x560 [ 2287.584045][ T2166] _copy_to_user+0x31/0xb0 [ 2287.584071][ T2166] simple_read_from_buffer+0xe1/0x170 [ 2287.584097][ T2166] proc_fail_nth_read+0x1bb/0x230 [ 2287.584124][ T2166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2287.584148][ T2166] ? rw_verify_area+0x2a6/0x4d0 [ 2287.584164][ T2166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2287.584187][ T2166] vfs_read+0x20c/0xa70 [ 2287.584202][ T2166] ? fdget_pos+0x246/0x320 [ 2287.584229][ T2166] ? __pfx___mutex_lock+0x10/0x10 [ 2287.584267][ T2166] ? __pfx_vfs_read+0x10/0x10 [ 2287.584293][ T2166] ? __fget_files+0x2a/0x420 [ 2287.584330][ T2166] ? __fget_files+0x3a0/0x420 [ 2287.584363][ T2166] ? __fget_files+0x2a/0x420 [ 2287.584392][ T2166] ksys_read+0x150/0x270 [ 2287.584410][ T2166] ? __pfx_ksys_read+0x10/0x10 [ 2287.584426][ T2166] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2287.584532][ T2166] do_syscall_64+0x14d/0xf80 [ 2287.584547][ T2166] ? trace_irq_disable+0x3b/0x150 [ 2287.584570][ T2166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.584587][ T2166] ? clear_bhb_loop+0x40/0x90 [ 2287.584606][ T2166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2287.584622][ T2166] RIP: 0033:0x7fc3c1f5cfce [ 2287.584636][ T2166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2287.584650][ T2166] RSP: 002b:00007fc3c2dc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2287.584667][ T2166] RAX: ffffffffffffffda RBX: 00007fc3c2dc66c0 RCX: 00007fc3c1f5cfce [ 2287.584679][ T2166] RDX: 000000000000000f RSI: 00007fc3c2dc60a0 RDI: 0000000000000004 [ 2287.584689][ T2166] RBP: 00007fc3c2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2287.584698][ T2166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2287.584708][ T2166] R13: 00007fc3c2216038 R14: 00007fc3c2215fa0 R15: 00007fc3c233fa48 [ 2287.584732][ T2166] [ 2287.890169][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.902681][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2287.963467][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2287.983698][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.014919][ T9] usb 6-1: config 0 descriptor?? [ 2288.178040][ T2175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2288.453440][ T9] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 2288.476521][ T9] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 2288.554201][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.003E/input/input142 [ 2288.628151][ T9] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 2288.998983][T10147] usb 6-1: USB disconnect, device number 77 [ 2289.294224][ T2194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2289.674053][ T2201] FAULT_INJECTION: forcing a failure. [ 2289.674053][ T2201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2289.688566][ T2201] CPU: 0 UID: 0 PID: 2201 Comm: syz.7.7888 Tainted: G L syzkaller #0 PREEMPT(full) [ 2289.688600][ T2201] Tainted: [L]=SOFTLOCKUP [ 2289.688609][ T2201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2289.688623][ T2201] Call Trace: [ 2289.688632][ T2201] [ 2289.688642][ T2201] dump_stack_lvl+0xe8/0x150 [ 2289.688679][ T2201] should_fail_ex+0x412/0x560 [ 2289.688713][ T2201] prepare_alloc_pages+0x22a/0x650 [ 2289.688750][ T2201] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2289.688783][ T2201] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2289.688815][ T2201] ? __pfx_policy_nodemask+0x10/0x10 [ 2289.688847][ T2201] ? do_raw_spin_lock+0x12b/0x2f0 [ 2289.688874][ T2201] alloc_pages_mpol+0x232/0x4a0 [ 2289.688908][ T2201] alloc_pages_noprof+0xa8/0x190 [ 2289.688939][ T2201] __pmd_alloc+0x3a/0x860 [ 2289.688978][ T2201] handle_mm_fault+0xe96/0x3310 [ 2289.689025][ T2201] ? handle_mm_fault+0xee/0x3310 [ 2289.689067][ T2201] ? __pfx_handle_mm_fault+0x10/0x10 [ 2289.689120][ T2201] ? lock_mm_and_find_vma+0xa7/0x340 [ 2289.689148][ T2201] do_user_addr_fault+0x75b/0x1340 [ 2289.689194][ T2201] exc_page_fault+0x6a/0xc0 [ 2289.689229][ T2201] asm_exc_page_fault+0x26/0x30 [ 2289.689250][ T2201] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 2289.689278][ T2201] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 2289.689297][ T2201] RSP: 0018:ffffc9000de67d58 EFLAGS: 00050216 [ 2289.689317][ T2201] RAX: 00007ffffffff001 RBX: 0000000000000030 RCX: 0000000000000030 [ 2289.689341][ T2201] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffc9000de67e30 [ 2289.689355][ T2201] RBP: ffffc9000de67ee0 R08: ffffc9000de67e5f R09: 1ffff92001bccfcb [ 2289.689371][ T2201] R10: dffffc0000000000 R11: fffff52001bccfcc R12: 0000000000000005 [ 2289.689387][ T2201] R13: ffffc9000de67e30 R14: ffffc9000de67e30 R15: 0000200000000140 [ 2289.689422][ T2201] _copy_from_user+0x7a/0xb0 [ 2289.689456][ T2201] __se_sys_rt_tgsigqueueinfo+0xdf/0x510 [ 2289.689492][ T2201] ? __fget_files+0x3a0/0x420 [ 2289.689525][ T2201] ? __pfx___se_sys_rt_tgsigqueueinfo+0x10/0x10 [ 2289.689567][ T2201] ? fput+0xa0/0xd0 [ 2289.689598][ T2201] ? ksys_write+0x242/0x270 [ 2289.689641][ T2201] do_syscall_64+0x14d/0xf80 [ 2289.689660][ T2201] ? trace_irq_disable+0x3b/0x150 [ 2289.689692][ T2201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2289.689714][ T2201] ? clear_bhb_loop+0x40/0x90 [ 2289.689742][ T2201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2289.689764][ T2201] RIP: 0033:0x7fc3c1f9c799 [ 2289.689782][ T2201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2289.689801][ T2201] RSP: 002b:00007fc3c2dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 2289.689822][ T2201] RAX: ffffffffffffffda RBX: 00007fc3c2215fa0 RCX: 00007fc3c1f9c799 [ 2289.689839][ T2201] RDX: 0000000000000005 RSI: 0000000000000065 RDI: 0000000000000064 [ 2289.689853][ T2201] RBP: 00007fc3c2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2289.689867][ T2201] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 2289.689881][ T2201] R13: 00007fc3c2216038 R14: 00007fc3c2215fa0 R15: 00007fc3c233fa48 [ 2289.689915][ T2201] [ 2290.366163][ T2220] FAULT_INJECTION: forcing a failure. [ 2290.366163][ T2220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.393386][ T2220] CPU: 1 UID: 0 PID: 2220 Comm: syz.7.7895 Tainted: G L syzkaller #0 PREEMPT(full) [ 2290.393422][ T2220] Tainted: [L]=SOFTLOCKUP [ 2290.393430][ T2220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2290.393444][ T2220] Call Trace: [ 2290.393452][ T2220] [ 2290.393461][ T2220] dump_stack_lvl+0xe8/0x150 [ 2290.393497][ T2220] should_fail_ex+0x412/0x560 [ 2290.393529][ T2220] _copy_from_user+0x2d/0xb0 [ 2290.393562][ T2220] ___sys_sendmsg+0x1c6/0x360 [ 2290.393589][ T2220] ? __pfx____sys_sendmsg+0x10/0x10 [ 2290.393654][ T2220] __sys_sendmmsg+0x27c/0x4e0 [ 2290.393683][ T2220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2290.393703][ T2220] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2290.393751][ T2220] ? ksys_write+0x242/0x270 [ 2290.393777][ T2220] ? __pfx_ksys_write+0x10/0x10 [ 2290.393807][ T2220] __x64_sys_sendmmsg+0xa0/0xc0 [ 2290.393832][ T2220] do_syscall_64+0x14d/0xf80 [ 2290.393852][ T2220] ? trace_irq_disable+0x3b/0x150 [ 2290.393885][ T2220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.393901][ T2220] ? clear_bhb_loop+0x40/0x90 [ 2290.393944][ T2220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.393969][ T2220] RIP: 0033:0x7fc3c1f9c799 [ 2290.393992][ T2220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.394010][ T2220] RSP: 002b:00007fc3c2dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2290.394026][ T2220] RAX: ffffffffffffffda RBX: 00007fc3c2215fa0 RCX: 00007fc3c1f9c799 [ 2290.394038][ T2220] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000d [ 2290.394048][ T2220] RBP: 00007fc3c2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.394058][ T2220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.394067][ T2220] R13: 00007fc3c2216038 R14: 00007fc3c2215fa0 R15: 00007fc3c233fa48 [ 2290.394090][ T2220] [ 2290.979625][ T2229] syz_tun: entered allmulticast mode [ 2291.107432][T29591] net_ratelimit: 25 callbacks suppressed [ 2291.107454][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2291.169976][ T2233] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7899'. [ 2291.195161][ T2219] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 2291.226584][ T2219] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 2291.237167][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2291.259985][ T2219] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 2291.347176][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2291.462898][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2291.566018][ T2244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2291.627193][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2291.691811][ T2247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2291.733740][ T2250] FAULT_INJECTION: forcing a failure. [ 2291.733740][ T2250] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.790409][ T2250] CPU: 0 UID: 0 PID: 2250 Comm: syz.1.7902 Tainted: G L syzkaller #0 PREEMPT(full) [ 2291.790444][ T2250] Tainted: [L]=SOFTLOCKUP [ 2291.790455][ T2250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2291.790470][ T2250] Call Trace: [ 2291.790477][ T2250] [ 2291.790484][ T2250] dump_stack_lvl+0xe8/0x150 [ 2291.790512][ T2250] should_fail_ex+0x412/0x560 [ 2291.790536][ T2250] should_failslab+0xa8/0x100 [ 2291.790558][ T2250] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2291.790577][ T2250] ? __alloc_skb+0x1d0/0x7d0 [ 2291.790598][ T2250] ? __local_bh_enable_ip+0xd0/0x130 [ 2291.790623][ T2250] __alloc_skb+0x1d0/0x7d0 [ 2291.790649][ T2250] nf_tables_rule_notify+0xc0/0x570 [ 2291.790755][ T2250] ? nft_pernet+0x23/0x240 [ 2291.790793][ T2250] nf_tables_commit+0x1c93/0xa400 [ 2291.790830][ T2250] ? nft_pernet+0x23/0x240 [ 2291.790852][ T2250] ? nft_pernet+0x23/0x240 [ 2291.790867][ T2250] ? nft_pernet+0x23/0x240 [ 2291.790884][ T2250] ? __pfx_nf_tables_commit+0x10/0x10 [ 2291.790909][ T2250] ? rcu_is_watching+0x15/0xb0 [ 2291.790932][ T2250] ? kfree+0x4d/0x630 [ 2291.790945][ T2250] ? nft_trans_rule_add+0x315/0x440 [ 2291.790966][ T2250] ? nf_tables_newrule+0x2590/0x28b0 [ 2291.790992][ T2250] ? __pfx_nf_tables_newrule+0x10/0x10 [ 2291.791024][ T2250] nfnetlink_rcv+0x1c1b/0x27b0 [ 2291.791091][ T2250] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2291.791135][ T2250] ? ref_tracker_free+0x693/0x840 [ 2291.791194][ T2250] ? __netlink_deliver_tap+0x807/0x850 [ 2291.791230][ T2250] ? netlink_deliver_tap+0x2e/0x1b0 [ 2291.791264][ T2250] netlink_unicast+0x80f/0x9b0 [ 2291.791289][ T2250] ? __pfx_netlink_unicast+0x10/0x10 [ 2291.791314][ T2250] ? netlink_sendmsg+0x650/0xb40 [ 2291.791334][ T2250] ? skb_put+0x11b/0x210 [ 2291.791359][ T2250] netlink_sendmsg+0x813/0xb40 [ 2291.791405][ T2250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2291.791429][ T2250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2291.791452][ T2250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2291.791472][ T2250] ____sys_sendmsg+0x972/0x9f0 [ 2291.791495][ T2250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2291.791516][ T2250] ? import_iovec+0x73/0xa0 [ 2291.791543][ T2250] ___sys_sendmsg+0x2a5/0x360 [ 2291.791563][ T2250] ? __pfx____sys_sendmsg+0x10/0x10 [ 2291.791610][ T2250] ? __fget_files+0x2a/0x420 [ 2291.791633][ T2250] ? __fget_files+0x3a0/0x420 [ 2291.791663][ T2250] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2291.791680][ T2250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2291.791702][ T2250] ? __pfx_ksys_write+0x10/0x10 [ 2291.791728][ T2250] do_syscall_64+0x14d/0xf80 [ 2291.791742][ T2250] ? trace_irq_disable+0x3b/0x150 [ 2291.791765][ T2250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2291.791781][ T2250] ? clear_bhb_loop+0x40/0x90 [ 2291.791802][ T2250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2291.791819][ T2250] RIP: 0033:0x7f10b019c799 [ 2291.791834][ T2250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2291.791848][ T2250] RSP: 002b:00007f10b1124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2291.791865][ T2250] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c799 [ 2291.791877][ T2250] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2291.791887][ T2250] RBP: 00007f10b1124090 R08: 0000000000000000 R09: 0000000000000000 [ 2291.791897][ T2250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.791906][ T2250] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007f10b053fa48 [ 2291.791930][ T2250] [ 2292.142418][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2292.520323][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2292.649377][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2292.777190][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2292.861909][ T2258] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7903'. [ 2292.917147][T14930] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2293.077138][T14930] usb 6-1: Using ep0 maxpacket: 8 [ 2293.084771][T14930] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2293.100517][T14930] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2293.110110][T14930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.118528][T14930] usb 6-1: Product: syz [ 2293.122896][T14930] usb 6-1: Manufacturer: syz [ 2293.128036][T14930] usb 6-1: SerialNumber: syz [ 2293.149905][T14930] usb 6-1: config 0 descriptor?? [ 2293.162659][T14930] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2293.198568][ T2264] fuse: Bad value for 'fd' [ 2293.573065][T14930] gspca_zc3xx: reg_w_i err -71 [ 2294.174027][T14930] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2294.183005][T14930] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2294.196841][ T2284] netlink: 'syz.7.7912': attribute type 12 has an invalid length. [ 2294.206650][T14930] usb 6-1: USB disconnect, device number 78 [ 2295.187109][T14930] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2295.379659][T14930] usb 2-1: Using ep0 maxpacket: 16 [ 2295.410422][T14930] usb 2-1: config 0 has no interfaces? [ 2295.444728][T14930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2295.500745][T14930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2295.527072][T14930] usb 2-1: Manufacturer: syz [ 2295.536743][T14930] usb 2-1: config 0 descriptor?? [ 2296.248521][T10147] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2296.437302][T10147] usb 6-1: Using ep0 maxpacket: 16 [ 2296.483502][T10147] usb 6-1: config 0 has no interfaces? [ 2296.513568][T10147] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2296.557955][T10147] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2296.598138][T10147] usb 6-1: Manufacturer: syz [ 2296.643990][T10147] usb 6-1: config 0 descriptor?? [ 2296.784039][ T2295] net_ratelimit: 23 callbacks suppressed [ 2296.784063][ T2295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2296.840729][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2297.211130][ T2309] 8021q: adding VLAN 0 to HW filter on device team0 [ 2297.416041][ T2309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2297.472159][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2297.479036][ T2318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7919'. [ 2297.840355][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2297.882472][ T2326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7921'. [ 2297.967242][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2298.127272][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2298.264238][T10147] usb 2-1: USB disconnect, device number 27 [ 2298.757396][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2298.898206][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2299.027230][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2299.376107][ T29] usb 6-1: USB disconnect, device number 79 [ 2301.397546][ T2376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7935'. [ 2301.433693][ T2375] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 2301.803290][T29591] net_ratelimit: 18 callbacks suppressed [ 2301.803311][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2301.993957][ T2393] input: syz0 as /devices/virtual/input/input143 [ 2302.027283][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2302.147149][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2302.182011][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2302.182031][ T30] audit: type=1326 audit(1773006008.327:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.220323][ T30] audit: type=1326 audit(1773006008.327:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.243460][ T30] audit: type=1326 audit(1773006008.367:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.270954][ T30] audit: type=1326 audit(1773006008.367:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.293520][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2302.296200][ T30] audit: type=1326 audit(1773006008.367:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.341543][ T30] audit: type=1326 audit(1773006008.377:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.402674][ T30] audit: type=1326 audit(1773006008.377:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.440119][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2302.441392][ T30] audit: type=1326 audit(1773006008.387:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.493244][ T2404] FAULT_INJECTION: forcing a failure. [ 2302.493244][ T2404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2302.515748][ T30] audit: type=1326 audit(1773006008.387:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2302.543963][ T2404] CPU: 0 UID: 0 PID: 2404 Comm: syz.2.7941 Tainted: G L syzkaller #0 PREEMPT(full) [ 2302.544000][ T2404] Tainted: [L]=SOFTLOCKUP [ 2302.544009][ T2404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2302.544023][ T2404] Call Trace: [ 2302.544031][ T2404] [ 2302.544041][ T2404] dump_stack_lvl+0xe8/0x150 [ 2302.544078][ T2404] should_fail_ex+0x412/0x560 [ 2302.544111][ T2404] _copy_from_user+0x2d/0xb0 [ 2302.544146][ T2404] ___sys_recvmsg+0x175/0x590 [ 2302.544169][ T2404] ? __lock_acquire+0x6b5/0x2cf0 [ 2302.544203][ T2404] ? __pfx____sys_recvmsg+0x10/0x10 [ 2302.544232][ T2404] ? ktime_get_ts64+0xa9/0x3f0 [ 2302.544292][ T2404] do_recvmmsg+0x334/0x800 [ 2302.544322][ T2404] ? __pfx_do_recvmmsg+0x10/0x10 [ 2302.544357][ T2404] ? _copy_from_user+0x94/0xb0 [ 2302.544406][ T2404] __x64_sys_recvmmsg+0x1b7/0x250 [ 2302.544433][ T2404] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2302.544468][ T2404] do_syscall_64+0x14d/0xf80 [ 2302.544490][ T2404] ? trace_irq_disable+0x3b/0x150 [ 2302.544522][ T2404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.544548][ T2404] ? clear_bhb_loop+0x40/0x90 [ 2302.544576][ T2404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.544598][ T2404] RIP: 0033:0x7f035cf9c799 [ 2302.544618][ T2404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2302.544638][ T2404] RSP: 002b:00007f035ddc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2302.544661][ T2404] RAX: ffffffffffffffda RBX: 00007f035d215fa0 RCX: 00007f035cf9c799 [ 2302.544676][ T2404] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 2302.544692][ T2404] RBP: 00007f035ddc6090 R08: 0000200000003700 R09: 0000000000000000 [ 2302.544707][ T2404] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 2302.544720][ T2404] R13: 00007f035d216038 R14: 00007f035d215fa0 R15: 00007f035d33fa48 [ 2302.544754][ T2404] [ 2302.705794][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2302.858236][ T2407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7943'. [ 2302.896290][ T2407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7943'. [ 2302.988055][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2303.015489][ T30] audit: type=1326 audit(1773006008.387:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2391 comm="syz.7.7939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c1f9c799 code=0x7ffc0000 [ 2303.108075][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2303.227106][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2303.347090][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2303.786032][ T2438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7951'. [ 2303.815686][ T2442] fuse: Bad value for 'rootmode' [ 2304.087185][T24838] Bluetooth: hci4: command 0x0c1a tx timeout [ 2304.094349][T28267] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2304.123957][T28267] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2304.537211][ T2455] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7955'. [ 2305.229063][ T2473] FAULT_INJECTION: forcing a failure. [ 2305.229063][ T2473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2305.258274][ T2473] CPU: 0 UID: 0 PID: 2473 Comm: syz.7.7959 Tainted: G L syzkaller #0 PREEMPT(full) [ 2305.258311][ T2473] Tainted: [L]=SOFTLOCKUP [ 2305.258321][ T2473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2305.258335][ T2473] Call Trace: [ 2305.258345][ T2473] [ 2305.258354][ T2473] dump_stack_lvl+0xe8/0x150 [ 2305.258400][ T2473] should_fail_ex+0x412/0x560 [ 2305.258434][ T2473] _copy_from_user+0x2d/0xb0 [ 2305.258470][ T2473] ___sys_sendmsg+0x1c6/0x360 [ 2305.258499][ T2473] ? __pfx____sys_sendmsg+0x10/0x10 [ 2305.258526][ T2473] ? kstrtouint+0x6e/0xe0 [ 2305.258579][ T2473] ? __fget_files+0x2a/0x420 [ 2305.258610][ T2473] ? __fget_files+0x3a0/0x420 [ 2305.258652][ T2473] __sys_sendmmsg+0x27c/0x4e0 [ 2305.258680][ T2473] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2305.258700][ T2473] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2305.258748][ T2473] ? ksys_write+0x242/0x270 [ 2305.258774][ T2473] ? __pfx_ksys_write+0x10/0x10 [ 2305.258804][ T2473] __x64_sys_sendmmsg+0xa0/0xc0 [ 2305.258828][ T2473] do_syscall_64+0x14d/0xf80 [ 2305.258848][ T2473] ? trace_irq_disable+0x3b/0x150 [ 2305.258880][ T2473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.258902][ T2473] ? clear_bhb_loop+0x40/0x90 [ 2305.258929][ T2473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.258951][ T2473] RIP: 0033:0x7fc3c1f9c799 [ 2305.258973][ T2473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2305.258993][ T2473] RSP: 002b:00007fc3c2dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2305.259016][ T2473] RAX: ffffffffffffffda RBX: 00007fc3c2215fa0 RCX: 00007fc3c1f9c799 [ 2305.259032][ T2473] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 2305.259046][ T2473] RBP: 00007fc3c2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2305.259060][ T2473] R10: 0000000000008044 R11: 0000000000000246 R12: 0000000000000001 [ 2305.259078][ T2473] R13: 00007fc3c2216038 R14: 00007fc3c2215fa0 R15: 00007fc3c233fa48 [ 2305.259112][ T2473] [ 2306.308880][ T2484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2306.502092][ T2492] random: crng reseeded on system resumption [ 2306.529720][ T2492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7963'. [ 2306.542952][ T2492] x_tables: ip_tables: udp match: only valid for protocol 17 [ 2306.847231][T29563] net_ratelimit: 24 callbacks suppressed [ 2306.847256][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2306.958714][T26523] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2306.977716][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.087116][T29563] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.117097][T26523] usb 6-1: Using ep0 maxpacket: 32 [ 2307.133039][T26523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2307.172903][T26523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2307.196690][T26523] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2307.208749][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.225423][T26523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.249385][T26523] usb 6-1: config 0 descriptor?? [ 2307.274379][T26523] hub 6-1:0.0: USB hub found [ 2307.327082][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.437204][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.540554][T26523] hub 6-1:0.0: 1 port detected [ 2307.557115][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.585478][ T2521] lo: entered promiscuous mode [ 2307.620624][ T2521] tunl0: entered promiscuous mode [ 2307.663873][ T2521] gre0: entered promiscuous mode [ 2307.873268][ T2521] gretap0: entered promiscuous mode [ 2307.934078][ T2521] erspan0: entered promiscuous mode [ 2307.950929][ T2521] ip_vti0: entered promiscuous mode [ 2307.973733][ T2521] ip6_vti0: entered promiscuous mode [ 2308.016431][ T2521] sit0: entered promiscuous mode [ 2308.030751][ T2521] ip6tnl0: entered promiscuous mode [ 2308.056029][ T2521] ip6gre0: entered promiscuous mode [ 2308.175592][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2308.210640][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2308.250500][ T2521] ip6gretap0: entered promiscuous mode [ 2308.290335][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state [ 2308.297841][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state [ 2308.309901][T14930] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2308.320303][ T2521] bridge0: entered promiscuous mode [ 2308.335468][T29591] usb 6-1: Failed to suspend device, error -71 [ 2308.344346][ T2521] vcan0: entered promiscuous mode [ 2308.431588][T26523] usb 6-1: USB disconnect, device number 80 [ 2308.570440][ T2521] bond0: entered promiscuous mode [ 2308.581952][ T2521] bond_slave_0: entered promiscuous mode [ 2308.594256][ T2521] bond_slave_1: entered promiscuous mode [ 2308.618979][ T2521] !: entered promiscuous mode [ 2308.761984][ T2521] nlmon0: entered promiscuous mode [ 2308.779280][ T2521] caif0: entered promiscuous mode [ 2308.800341][ T2521] vxcan0: entered promiscuous mode [ 2308.816277][ T2521] vxcan1: entered promiscuous mode [ 2308.841824][ T2521] veth0: entered promiscuous mode [ 2308.868815][ T2521] veth1: entered promiscuous mode [ 2308.917299][ T2521] wg0: entered promiscuous mode [ 2308.933454][ T2521] wg1: entered promiscuous mode [ 2308.953228][ T2521] wg2: entered promiscuous mode [ 2308.975008][ T2521] veth0_to_bridge: entered promiscuous mode [ 2309.005675][ T2521] veth1_to_bridge: entered promiscuous mode [ 2309.037457][ T2521] veth0_to_bond: entered promiscuous mode [ 2309.069742][ T2521] veth1_to_bond: entered promiscuous mode [ 2309.084310][ T2552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2309.142486][ T2521] veth0_to_team: entered promiscuous mode [ 2309.173813][ T2521] team_slave_0: entered promiscuous mode [ 2309.195087][ T2521] veth1_to_team: entered promiscuous mode [ 2309.223164][ T2521] team_slave_1: entered promiscuous mode [ 2309.243969][ T2521] veth0_to_batadv: entered promiscuous mode [ 2309.272953][ T2521] batadv_slave_0: entered promiscuous mode [ 2309.302741][ T2521] veth1_to_batadv: entered promiscuous mode [ 2309.339320][ T2521] batadv_slave_1: entered promiscuous mode [ 2309.361522][ T2521] xfrm0: entered promiscuous mode [ 2309.388835][ T2521] veth0_to_hsr: entered promiscuous mode [ 2309.409714][ T2521] veth1_to_hsr: entered promiscuous mode [ 2309.451937][ T2521] hsr0: entered promiscuous mode [ 2309.502700][ T2521] veth1_virt_wifi: entered promiscuous mode [ 2309.527898][ T2521] veth0_virt_wifi: entered promiscuous mode [ 2309.546259][ T2521] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 2309.593344][ T2521] vlan0: entered promiscuous mode [ 2309.617502][ T2521] vlan1: entered promiscuous mode [ 2309.771532][ T2521] macvlan0: entered promiscuous mode [ 2309.867259][ T2521] macvlan1: entered promiscuous mode [ 2309.891650][ T2521] ipvlan0: entered promiscuous mode [ 2309.908562][ T2521] ipvlan1: entered promiscuous mode [ 2309.957794][ T2521] macvtap0: entered promiscuous mode [ 2309.978529][ T2521] macsec0: entered promiscuous mode [ 2310.010751][ T2521] geneve0: entered promiscuous mode [ 2310.039666][ T2521] geneve1: entered promiscuous mode [ 2310.075811][ T2521] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2310.119974][ T2521] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 2310.451750][ T2521] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 2310.467121][ T2530] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2310.587085][T26523] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2310.619781][ T2521] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 2310.639409][ T2521] mac80211_hwsim hwsim134 wlan0: entered promiscuous mode [ 2310.657756][ T2521] mac80211_hwsim hwsim135 wlan1: entered promiscuous mode [ 2310.675433][ T2530] usb 6-1: config 0 has no interfaces? [ 2310.691553][ T2530] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2310.708004][ T2530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2310.723872][ T2530] usb 6-1: SerialNumber: syz [ 2310.749738][ T2530] usb 6-1: config 0 descriptor?? [ 2310.767365][T26523] usb 3-1: Using ep0 maxpacket: 8 [ 2310.788551][T26523] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2310.806561][T26523] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 2310.832983][ T2521] : entered promiscuous mode [ 2310.846748][ T2521] gtp0: entered promiscuous mode [ 2310.856775][ T2521] gtp1: entered promiscuous mode [ 2310.863528][T26523] usb 3-1: config 0 has no interface number 0 [ 2310.874917][ T2521] syztnl2: entered promiscuous mode [ 2310.886713][ T2521] syztnl1: entered promiscuous mode [ 2310.892975][ T2521] mac80211_hwsim hwsim142 wlan2: entered promiscuous mode [ 2310.903650][ T2521] gtp2: entered promiscuous mode [ 2310.909619][ T2521] mac80211_hwsim hwsim143 wlan3: entered promiscuous mode [ 2310.919709][ T2521] bond1: entered promiscuous mode [ 2310.920805][T26523] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2310.928965][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2310.967394][ T8420] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2310.976336][ T8420] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.995967][ T2578] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7979'. [ 2311.026735][T26523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.116543][T26523] usb 3-1: Product: syz [ 2311.135467][ T8420] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.164921][T26523] usb 3-1: Manufacturer: syz [ 2311.185611][T26523] usb 3-1: SerialNumber: syz [ 2311.191018][ T8420] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.222290][T26523] usb 3-1: config 0 descriptor?? [ 2311.292917][ T2593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7980'. [ 2311.346173][ T8420] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.380659][ T8420] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.384508][ T29] usb 6-1: USB disconnect, device number 81 [ 2311.391077][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2311.411512][T27497] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2311.442544][T27497] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.507058][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2311.546551][ T2572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2311.561797][ T2572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2311.971311][T29586] net_ratelimit: 3 callbacks suppressed [ 2311.971336][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.087473][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.227367][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.371859][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.497752][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.607176][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.733571][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.847168][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2312.987275][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2313.101998][ T2617] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7986'. [ 2313.127589][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2313.457104][T28267] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2313.628171][T28267] usb 6-1: Using ep0 maxpacket: 16 [ 2313.649988][T28267] usb 6-1: config 0 has no interfaces? [ 2313.698318][T28267] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2313.757123][T28267] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2313.798073][T28267] usb 6-1: Manufacturer: syz [ 2313.828142][T28267] usb 6-1: config 0 descriptor?? [ 2313.832337][ T2631] fuse: Unknown parameter 'use00000000000000000000' [ 2314.791775][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7992'. [ 2314.818171][ T2643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7992'. [ 2314.854941][ T2643] team0: Device is already in use. [ 2315.459504][ T2656] loop6: detected capacity change from 0 to 2640 [ 2315.490984][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.501791][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.523989][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.570901][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.594171][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.629348][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.681934][ T2662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7997'. [ 2315.692546][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.725322][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.777250][ T2656] ldm_validate_partition_table(): Disk read failed. [ 2315.791676][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.813854][ T2656] Buffer I/O error on dev loop6, logical block 0, async page read [ 2315.843932][ T2656] Dev loop6: unable to read RDB block 0 [ 2315.850196][ T2656] loop6: unable to read partition table [ 2315.856581][ T2656] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2316.066927][T28267] usb 6-1: USB disconnect, device number 82 [ 2316.383353][T26523] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2316.440970][T26523] uvcvideo 3-1:0.31: No valid video chain found. [ 2316.455534][ T2673] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7999'. [ 2317.020309][ T8420] net_ratelimit: 29 callbacks suppressed [ 2317.020326][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2317.122340][ T2688] fuse: Unknown parameter 'user_i00000000000000000000' [ 2317.137122][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2317.252013][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2317.367278][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2317.491441][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2317.953505][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2318.046233][ T2556] usb 3-1: USB disconnect, device number 38 [ 2318.099151][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2318.207272][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2318.368414][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2318.557102][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2318.787068][ T1210] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2319.016806][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2319.065221][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2319.109842][ T1210] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2319.149610][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.216053][ T1210] usb 3-1: config 0 descriptor?? [ 2320.051876][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2320.116412][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2320.215021][ T2729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2320.259429][ T2729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2320.267931][ T2740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8012'. [ 2320.734181][ T2748] fuse: Unknown parameter 'user_i00000000000000000000' [ 2321.647131][ T2530] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2321.897088][ T2530] usb 6-1: Using ep0 maxpacket: 8 [ 2321.967774][ T2530] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2322.007203][ T2530] usb 6-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2322.037592][ T2530] usb 6-1: config 0 has no interface number 0 [ 2322.097291][ T2530] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2322.112529][T29591] net_ratelimit: 24 callbacks suppressed [ 2322.112551][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2322.143211][ T2530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.167290][ T2530] usb 6-1: Product: syz [ 2322.267210][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2322.370916][ T2530] usb 6-1: Manufacturer: syz [ 2322.406229][ T2530] usb 6-1: SerialNumber: syz [ 2322.465383][ T2530] usb 6-1: config 0 descriptor?? [ 2322.507231][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2322.529880][ T2530] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2322.547722][ T2530] uvcvideo 6-1:0.31: No valid video chain found. [ 2322.638728][ T2769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8016'. [ 2322.679791][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2322.802377][ T2764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.818979][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2322.831966][ T2764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.968706][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2323.078057][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2323.238471][ T1210] usbhid 3-1:0.0: can't add hid device: -71 [ 2323.244537][ T1210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2323.327191][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2323.424218][ T1210] usb 3-1: USB disconnect, device number 39 [ 2323.437150][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2323.513504][ T2779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8019'. [ 2323.557185][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2323.609357][ T2779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8019'. [ 2323.696043][ T2779] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2324.360353][ T2804] fuse: Unknown parameter 'user_i00000000000000000000' [ 2324.525906][ T10] usb 6-1: USB disconnect, device number 83 [ 2324.621111][ T2806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8026'. [ 2324.887276][ T10] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2325.057736][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.085769][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.096484][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2325.106012][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.135712][ T10] usb 6-1: config 0 descriptor?? [ 2325.505900][ T2846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8036'. [ 2325.514996][ T2846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8036'. [ 2325.536850][ T2846] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 2325.694604][ T2844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2325.706470][ T2844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2325.860908][ T2844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.003621][ T2844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.067066][T28267] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2326.237117][T28267] usb 2-1: Using ep0 maxpacket: 8 [ 2326.245079][T28267] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2326.329017][T28267] usb 2-1: config 127 has 0 interfaces, different from the descriptor's value: 2 [ 2326.359557][T28267] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2326.385254][T28267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.395900][T28267] usb 2-1: Product: syz [ 2326.400353][T28267] usb 2-1: Manufacturer: syz [ 2326.405486][T28267] usb 2-1: SerialNumber: syz [ 2326.528942][ T2556] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2326.675743][ T2836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.724076][ T2836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.738311][ T2556] usb 3-1: Using ep0 maxpacket: 8 [ 2326.806203][ T2556] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2326.894528][ T2556] usb 3-1: config 0 has no interface number 0 [ 2326.929425][ T2556] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2326.989283][ T2556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.024756][ T2556] usb 3-1: Product: syz [ 2327.049043][ T2556] usb 3-1: Manufacturer: syz [ 2327.068413][ T2556] usb 3-1: SerialNumber: syz [ 2327.135784][ T2556] usb 3-1: config 0 descriptor?? [ 2327.195298][ T8420] net_ratelimit: 31 callbacks suppressed [ 2327.195324][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2327.359128][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2327.537543][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2327.657444][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2327.696896][ T2866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.740747][ T2866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.777504][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2327.907108][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2328.037755][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2328.167271][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2328.297341][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2328.307789][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 2328.315057][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2328.327241][ T10] usb 6-1: USB disconnect, device number 84 [ 2328.436037][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2328.572315][ T2879] fuse: Unknown parameter 'user_id00000000000000000000' [ 2329.127991][ T1210] usb 2-1: USB disconnect, device number 28 [ 2329.433745][ T2890] netlink: 'syz.1.8043': attribute type 3 has an invalid length. [ 2329.809570][ T2556] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2329.845922][ T2556] uvcvideo 3-1:0.31: No valid video chain found. [ 2329.908288][ T2556] usb 3-1: USB disconnect, device number 40 [ 2330.647086][T28267] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2330.797639][T28267] usb 2-1: device descriptor read/64, error -71 [ 2331.057682][T28267] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2331.258987][T28267] usb 2-1: device descriptor read/64, error -71 [ 2331.394308][T28267] usb usb2-port1: attempt power cycle [ 2331.837291][T28267] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2331.930082][T28267] usb 2-1: device descriptor read/8, error -71 [ 2332.110304][ T2924] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8050'. [ 2332.157749][ T2924] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8050'. [ 2332.226751][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2332.226767][ T30] audit: type=1326 audit(1773006038.357:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2917 comm="syz.7.8050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3c1f9c799 code=0x0 [ 2332.267105][T27497] net_ratelimit: 33 callbacks suppressed [ 2332.267128][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2332.288527][T28267] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2332.492756][ T2929] kvm: pic: non byte write [ 2332.696127][ T2929] bond2: option tlb_dynamic_lb: invalid value (9) [ 2332.729131][ T2929] bond2 (unregistering): Released all slaves [ 2332.887514][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2333.027104][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2333.138496][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2333.247882][ T2935] fuse: Unknown parameter 'user_id00000000000000000000' [ 2333.267657][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2333.278703][T28267] usb 2-1: device descriptor read/8, error -71 [ 2333.387149][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2333.395007][T28267] usb usb2-port1: unable to enumerate USB device [ 2333.518222][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2333.738867][ T2949] FAULT_INJECTION: forcing a failure. [ 2333.738867][ T2949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2333.801666][ T2949] CPU: 0 UID: 0 PID: 2949 Comm: syz.1.8055 Tainted: G L syzkaller #0 PREEMPT(full) [ 2333.801702][ T2949] Tainted: [L]=SOFTLOCKUP [ 2333.801715][ T2949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2333.801727][ T2949] Call Trace: [ 2333.801733][ T2949] [ 2333.801741][ T2949] dump_stack_lvl+0xe8/0x150 [ 2333.801771][ T2949] should_fail_ex+0x412/0x560 [ 2333.801798][ T2949] _copy_from_iter+0x1d3/0x1670 [ 2333.801824][ T2949] ? rcu_is_watching+0x15/0xb0 [ 2333.801855][ T2949] ? __pfx__copy_from_iter+0x10/0x10 [ 2333.801881][ T2949] ? netlink_sendmsg+0x650/0xb40 [ 2333.801902][ T2949] ? skb_put+0x11b/0x210 [ 2333.801928][ T2949] netlink_sendmsg+0x6c0/0xb40 [ 2333.801955][ T2949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2333.801977][ T2949] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2333.802000][ T2949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2333.802020][ T2949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2333.802039][ T2949] sock_write_iter+0x49b/0x4f0 [ 2333.802059][ T2949] ? __pfx_sock_write_iter+0x10/0x10 [ 2333.802095][ T2949] ? bpf_lsm_file_permission+0x9/0x20 [ 2333.802115][ T2949] ? security_file_permission+0x75/0x260 [ 2333.802138][ T2949] vfs_write+0x61d/0xb90 [ 2333.802162][ T2949] ? __pfx_vfs_write+0x10/0x10 [ 2333.802185][ T2949] ? __fget_files+0x2a/0x420 [ 2333.802214][ T2949] ksys_write+0x150/0x270 [ 2333.802232][ T2949] ? __pfx_ksys_write+0x10/0x10 [ 2333.802256][ T2949] do_syscall_64+0x14d/0xf80 [ 2333.802270][ T2949] ? trace_irq_disable+0x3b/0x150 [ 2333.802293][ T2949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.802309][ T2949] ? clear_bhb_loop+0x40/0x90 [ 2333.802328][ T2949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.802348][ T2949] RIP: 0033:0x7f10b019c799 [ 2333.802363][ T2949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2333.802377][ T2949] RSP: 002b:00007f10b1124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2333.802394][ T2949] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c799 [ 2333.802406][ T2949] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2333.802416][ T2949] RBP: 00007f10b1124090 R08: 0000000000000000 R09: 0000000000000000 [ 2333.802425][ T2949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2333.802435][ T2949] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007f10b053fa48 [ 2333.802458][ T2949] [ 2334.286008][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2334.397119][T28267] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2334.547130][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2334.573839][T28267] usb 6-1: Using ep0 maxpacket: 16 [ 2334.599436][T28267] usb 6-1: config 0 has no interfaces? [ 2334.606513][T28267] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2334.626816][T28267] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2334.667522][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2334.676692][T28267] usb 6-1: Manufacturer: syz [ 2334.707233][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2334.742921][T28267] usb 6-1: config 0 descriptor?? [ 2334.857127][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2334.867388][ T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2334.914030][ T10] usb 3-1: config 0 has no interface number 0 [ 2335.007250][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2335.065696][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.123044][ T10] usb 3-1: Product: syz [ 2335.178452][ T10] usb 3-1: Manufacturer: syz [ 2335.183105][ T10] usb 3-1: SerialNumber: syz [ 2335.232670][ T10] usb 3-1: config 0 descriptor?? [ 2335.661051][ T2961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.684025][ T2961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2335.707847][ T2962] netlink: 'syz.6.8058': attribute type 2 has an invalid length. [ 2335.720829][ T2962] netlink: 5120 bytes leftover after parsing attributes in process `syz.6.8058'. [ 2337.337159][T27497] net_ratelimit: 14 callbacks suppressed [ 2337.337177][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2337.528294][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2337.587833][ T10] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2337.626650][ T10] uvcvideo 3-1:0.31: No valid video chain found. [ 2337.637851][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2337.652132][T28267] usb 6-1: USB disconnect, device number 85 [ 2337.748824][ T10] usb 3-1: USB disconnect, device number 41 [ 2338.147252][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.258219][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.377245][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.487155][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.647175][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.757833][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.798697][ T2989] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8064'. [ 2338.829412][ T2989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8064'. [ 2338.868593][ T2989] netlink: 'syz.2.8064': attribute type 3 has an invalid length. [ 2338.894840][ T2989] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8064'. [ 2338.967355][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2338.977707][ T29] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2339.069218][ T2993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2339.137213][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 2339.150163][ T29] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 2339.160784][ T29] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2339.171978][ T29] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 2339.188500][ T29] usb 6-1: config 127 has no interface number 0 [ 2339.206709][ T29] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2339.217771][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.225899][ T29] usb 6-1: Product: syz [ 2339.230769][ T29] usb 6-1: Manufacturer: syz [ 2339.235441][ T29] usb 6-1: SerialNumber: syz [ 2339.473655][ T2998] tipc: Enabling of bearer rejected, failed to enable media [ 2339.481705][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2339.587918][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2340.217061][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2340.380106][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 2340.427938][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2340.484986][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2340.542396][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2340.588863][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2340.613243][ T10] usb 2-1: Product: syz [ 2340.630324][ T10] usb 2-1: Manufacturer: syz [ 2340.671264][ T10] hub 2-1:4.0: USB hub found [ 2340.886909][ T10] hub 2-1:4.0: 7 ports detected [ 2340.907100][ T10] hub 2-1:4.0: insufficient power available to use all downstream ports [ 2341.215212][ T10] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 2341.228488][ T10] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 2341.318038][ T10] usb 2-1: USB disconnect, device number 33 [ 2342.029660][ T29] usb 6-1: USB disconnect, device number 86 [ 2342.059224][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2342.335579][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 2342.377795][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2342.387349][ T1210] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2342.437738][T29591] net_ratelimit: 27 callbacks suppressed [ 2342.437756][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2342.467187][ T10] usb 2-1: config 0 has no interface number 0 [ 2342.607337][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2342.619232][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 2342.667929][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2342.690525][ T1210] usb 3-1: config 0 has no interfaces? [ 2342.722381][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.741997][ T1210] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2342.750771][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2342.795626][ T10] usb 2-1: Product: syz [ 2342.795709][ T1210] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2342.810144][ T10] usb 2-1: Manufacturer: syz [ 2342.820631][ T10] usb 2-1: SerialNumber: syz [ 2342.870020][ T10] usb 2-1: config 0 descriptor?? [ 2342.876139][ T1210] usb 3-1: Manufacturer: syz [ 2342.877500][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2342.933977][ T1210] usb 3-1: config 0 descriptor?? [ 2343.007160][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2343.128718][T29591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2343.185097][ T3017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2343.220079][ T3017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2343.248360][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2343.310817][ T3024] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2343.368562][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2343.497230][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2344.651115][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.657811][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.197790][ T10] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2345.236445][ T10] uvcvideo 2-1:0.31: No valid video chain found. [ 2345.275643][ T10] usb 2-1: USB disconnect, device number 34 [ 2345.343355][ T3058] FAULT_INJECTION: forcing a failure. [ 2345.343355][ T3058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2345.370874][ T3058] CPU: 0 UID: 0 PID: 3058 Comm: syz.1.8082 Tainted: G L syzkaller #0 PREEMPT(full) [ 2345.370910][ T3058] Tainted: [L]=SOFTLOCKUP [ 2345.370918][ T3058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2345.370932][ T3058] Call Trace: [ 2345.370942][ T3058] [ 2345.370953][ T3058] dump_stack_lvl+0xe8/0x150 [ 2345.370993][ T3058] should_fail_ex+0x412/0x560 [ 2345.371028][ T3058] _copy_from_user+0x2d/0xb0 [ 2345.371064][ T3058] ___sys_sendmsg+0x1c6/0x360 [ 2345.371095][ T3058] ? __pfx____sys_sendmsg+0x10/0x10 [ 2345.371153][ T3058] ? __fget_files+0x2a/0x420 [ 2345.371186][ T3058] ? __fget_files+0x3a0/0x420 [ 2345.371229][ T3058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2345.371255][ T3058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2345.371287][ T3058] ? __pfx_ksys_write+0x10/0x10 [ 2345.371325][ T3058] do_syscall_64+0x14d/0xf80 [ 2345.371347][ T3058] ? trace_irq_disable+0x3b/0x150 [ 2345.371380][ T3058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.371404][ T3058] ? clear_bhb_loop+0x40/0x90 [ 2345.371433][ T3058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.371457][ T3058] RIP: 0033:0x7f10b019c799 [ 2345.371479][ T3058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2345.371500][ T3058] RSP: 002b:00007f10b1124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2345.371525][ T3058] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c799 [ 2345.371542][ T3058] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000004 [ 2345.371558][ T3058] RBP: 00007f10b1124090 R08: 0000000000000000 R09: 0000000000000000 [ 2345.371573][ T3058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.371587][ T3058] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007f10b053fa48 [ 2345.371620][ T3058] [ 2345.744810][ T1210] usb 3-1: USB disconnect, device number 42 [ 2345.827123][ T3062] fuse: Invalid gid '00000000000000000003' [ 2345.862447][ T3062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8083'. [ 2345.888462][ T3062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8083'. [ 2346.050760][ T3065] input: syz0 as /devices/virtual/input/input144 [ 2346.227244][ T1210] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 2346.367146][ T29] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2346.378863][ T3082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8089'. [ 2346.400217][ T1210] usb 3-1: not running at top speed; connect to a high speed hub [ 2346.409703][ T1210] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.421076][ T1210] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 2346.434095][ T1210] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=e5.46 [ 2346.444488][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.453020][ T1210] usb 3-1: Product: syz [ 2346.458440][ T1210] usb 3-1: Manufacturer: syz [ 2346.463374][ T1210] usb 3-1: SerialNumber: syz [ 2346.539431][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 2346.556484][ T29] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2346.575686][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.593172][ T29] usb 6-1: Product: syz [ 2346.602343][ T29] usb 6-1: Manufacturer: syz [ 2346.612448][ T29] usb 6-1: SerialNumber: syz [ 2346.642909][ T29] usb 6-1: config 0 descriptor?? [ 2346.695875][ T1210] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2346.762999][ T1210] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2346.800073][ T1210] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 2346.837658][ T1210] usb 3-1: USB disconnect, device number 43 [ 2346.891253][ T29] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 2346.915583][ T3078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2346.955052][ T3078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2347.257143][ T29] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 2347.527406][ T2581] net_ratelimit: 29 callbacks suppressed [ 2347.527423][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2347.649704][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2347.658478][ T29] usb 6-1: [UEAGLE-ATM] interface 1 not found [ 2347.664575][ T29] ueagle-atm 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2347.690577][ T3090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8091'. [ 2347.787068][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2347.847799][ T1210] usb 6-1: USB disconnect, device number 87 [ 2347.897072][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.017203][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.067052][ T2530] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2348.101136][ C0] raw-gadget.4 gadget.1: ignoring, device is not running [ 2348.167280][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.247100][ T2530] usb 2-1: device descriptor read/64, error -32 [ 2348.297219][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.428414][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.497107][ T2530] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2348.513225][ C0] raw-gadget.4 gadget.1: ignoring, device is not running [ 2348.567219][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.657085][ T2530] usb 2-1: device descriptor read/64, error -32 [ 2348.727673][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2348.778444][ T2530] usb usb2-port1: attempt power cycle [ 2348.997068][ T10] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2349.167254][ T2530] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2349.207326][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 2349.229744][ T2530] usb 2-1: Using ep0 maxpacket: 8 [ 2349.254226][ T10] usb 6-1: config 0 has no interfaces? [ 2349.312481][ T2530] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2349.328557][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2349.350354][ T2530] usb 2-1: config 127 has 0 interfaces, different from the descriptor's value: 2 [ 2349.371533][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2349.403357][ T10] usb 6-1: Manufacturer: syz [ 2349.410757][ T2530] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2349.451022][ T10] usb 6-1: config 0 descriptor?? [ 2349.470557][ T2530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.514561][ T2530] usb 2-1: Product: syz [ 2349.532501][ T2530] usb 2-1: Manufacturer: syz [ 2349.553496][ T2530] usb 2-1: SerialNumber: syz [ 2349.920013][ T2530] usb 2-1: can't set config #127, error -71 [ 2349.957897][ T2530] usb 2-1: USB disconnect, device number 37 [ 2350.537484][ T2530] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2350.709457][ T2530] usb 3-1: config 0 has no interfaces? [ 2350.735649][ T2530] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2350.801868][ T2530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2350.835580][ T2530] usb 3-1: SerialNumber: syz [ 2350.872481][ T2530] usb 3-1: config 0 descriptor?? [ 2351.123086][ T3130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8100'. [ 2351.172137][T26523] usb 3-1: USB disconnect, device number 44 [ 2351.277090][ T2530] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2351.306806][ T3140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8103'. [ 2351.490239][ T2530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.525311][ T2530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2351.557514][ T2530] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2351.572297][ T2530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.591013][ T2530] usb 2-1: config 0 descriptor?? [ 2351.655888][ T29] usb 6-1: USB disconnect, device number 88 [ 2352.071715][ T3155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2352.325169][ T3157] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2352.607278][T22669] net_ratelimit: 30 callbacks suppressed [ 2352.611617][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2352.798039][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2352.968323][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2353.101405][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2353.257218][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2353.367677][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2353.507104][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2353.637132][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2353.658867][ T3155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2353.827210][ T3155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2353.849704][T29564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2354.017211][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2354.534810][ T3172] fuse: Unknown parameter 'ser_id' [ 2354.575328][ T3155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.217343][ T29] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2356.261299][ T2530] usbhid 2-1:0.0: can't add hid device: -71 [ 2356.303089][ T2530] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2356.391528][ T2530] usb 2-1: USB disconnect, device number 38 [ 2356.547016][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 2356.567351][ T1210] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2356.739119][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 2356.835507][ T1210] usb 3-1: config 0 has no interfaces? [ 2356.884326][ T1210] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2356.947365][ T1210] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2356.979780][ T1210] usb 3-1: Manufacturer: syz [ 2357.030475][ T1210] usb 3-1: config 0 descriptor?? [ 2357.119344][ T29] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2357.153103][ T3212] FAULT_INJECTION: forcing a failure. [ 2357.153103][ T3212] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.178037][ T29] usb 6-1: config 0 has no interface number 0 [ 2357.199126][ T3212] CPU: 1 UID: 0 PID: 3212 Comm: syz.6.8120 Tainted: G L syzkaller #0 PREEMPT(full) [ 2357.199168][ T3212] Tainted: [L]=SOFTLOCKUP [ 2357.199177][ T3212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2357.199191][ T3212] Call Trace: [ 2357.199200][ T3212] [ 2357.199211][ T3212] dump_stack_lvl+0xe8/0x150 [ 2357.199249][ T3212] should_fail_ex+0x412/0x560 [ 2357.199282][ T3212] ? alloc_inode+0x6a/0x1b0 [ 2357.199314][ T3212] should_failslab+0xa8/0x100 [ 2357.199346][ T3212] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 2357.199370][ T3212] ? simple_start_creating+0xcc/0x110 [ 2357.199410][ T3212] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2357.199490][ T3212] alloc_inode+0x6a/0x1b0 [ 2357.199523][ T3212] new_inode+0x22/0x170 [ 2357.199559][ T3212] __debugfs_create_file+0xb8/0x400 [ 2357.199597][ T3212] debugfs_create_file_full+0x3f/0x60 [ 2357.199634][ T3212] ref_tracker_dir_debugfs+0x197/0x360 [ 2357.199665][ T3212] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2357.199725][ T3212] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 2357.199752][ T3212] ? alloc_netdev_mqs+0xa6/0x11b0 [ 2357.199783][ T3212] ? __raw_spin_lock_init+0x45/0x100 [ 2357.199810][ T3212] alloc_netdev_mqs+0x272/0x11b0 [ 2357.199842][ T3212] ? __pfx_vlan_setup+0x10/0x10 [ 2357.199883][ T3212] rtnl_create_link+0x31f/0xd70 [ 2357.199915][ T3212] rtnl_newlink_create+0x277/0xb70 [ 2357.199954][ T3212] ? __mutex_lock+0x5ac/0x1300 [ 2357.199983][ T3212] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2357.200020][ T3212] ? __pfx___mutex_lock+0x10/0x10 [ 2357.200051][ T3212] ? ns_capable+0x89/0xe0 [ 2357.200086][ T3212] rtnl_newlink+0x1666/0x1be0 [ 2357.200119][ T3212] ? __pfx_rtnl_newlink+0x10/0x10 [ 2357.200148][ T3212] ? __lock_acquire+0x6b5/0x2cf0 [ 2357.200173][ T3212] ? __lock_acquire+0x6b5/0x2cf0 [ 2357.200194][ T3212] ? __lock_acquire+0x6b5/0x2cf0 [ 2357.200217][ T3212] ? irqentry_exit+0x59e/0x620 [ 2357.200235][ T3212] ? unwind_next_frame+0xa5/0x23c0 [ 2357.200280][ T3212] ? __lock_acquire+0x6b5/0x2cf0 [ 2357.200302][ T3212] ? is_bpf_text_address+0x26/0x2b0 [ 2357.200323][ T3212] ? kernel_text_address+0xa5/0xe0 [ 2357.200362][ T3212] ? __pfx_rtnl_newlink+0x10/0x10 [ 2357.200383][ T3212] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2357.200407][ T3212] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2357.200428][ T3212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2357.200458][ T3212] ? __lock_acquire+0x6b5/0x2cf0 [ 2357.200486][ T3212] netlink_rcv_skb+0x232/0x4b0 [ 2357.200508][ T3212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2357.200531][ T3212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2357.200560][ T3212] ? netlink_deliver_tap+0x2e/0x1b0 [ 2357.200586][ T3212] netlink_unicast+0x80f/0x9b0 [ 2357.200611][ T3212] ? __pfx_netlink_unicast+0x10/0x10 [ 2357.200631][ T3212] ? netlink_sendmsg+0x650/0xb40 [ 2357.200650][ T3212] ? skb_put+0x11b/0x210 [ 2357.200675][ T3212] netlink_sendmsg+0x813/0xb40 [ 2357.200703][ T3212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2357.200727][ T3212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2357.200749][ T3212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2357.200770][ T3212] ____sys_sendmsg+0x972/0x9f0 [ 2357.200793][ T3212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2357.200814][ T3212] ? import_iovec+0x73/0xa0 [ 2357.200848][ T3212] ___sys_sendmsg+0x2a5/0x360 [ 2357.200867][ T3212] ? __pfx____sys_sendmsg+0x10/0x10 [ 2357.200909][ T3212] ? __fget_files+0x2a/0x420 [ 2357.200931][ T3212] ? __fget_files+0x3a0/0x420 [ 2357.200962][ T3212] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2357.200980][ T3212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2357.201002][ T3212] ? __pfx_ksys_write+0x10/0x10 [ 2357.201028][ T3212] do_syscall_64+0x14d/0xf80 [ 2357.201042][ T3212] ? trace_irq_disable+0x3b/0x150 [ 2357.201094][ T3212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2357.201115][ T3212] ? clear_bhb_loop+0x40/0x90 [ 2357.201143][ T3212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2357.201166][ T3212] RIP: 0033:0x7f7d59f9c799 [ 2357.201188][ T3212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2357.201207][ T3212] RSP: 002b:00007f7d5ad97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2357.201231][ T3212] RAX: ffffffffffffffda RBX: 00007f7d5a215fa0 RCX: 00007f7d59f9c799 [ 2357.201248][ T3212] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2357.201262][ T3212] RBP: 00007f7d5ad97090 R08: 0000000000000000 R09: 0000000000000000 [ 2357.201276][ T3212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2357.201290][ T3212] R13: 00007f7d5a216038 R14: 00007f7d5a215fa0 R15: 00007f7d5a33fa48 [ 2357.201325][ T3212] [ 2357.206825][ T3212] debugfs: out of free dentries, can not create file 'netdev@ffff8880605c2620' [ 2358.112931][ T29] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2358.157096][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.165153][ T29] usb 6-1: Product: syz [ 2358.209905][ T29] usb 6-1: Manufacturer: syz [ 2358.214560][ T29] usb 6-1: SerialNumber: syz [ 2358.353594][ T29] usb 6-1: config 0 descriptor?? [ 2358.709104][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2358.774261][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.016486][ T3212] .`: (slave vlan2): Opening slave failed [ 2359.488821][ T3198] net_ratelimit: 20 callbacks suppressed [ 2359.488829][ T3198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2359.787299][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2359.927305][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.037067][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.151030][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.258983][T28267] usb 3-1: USB disconnect, device number 45 [ 2360.357634][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.506289][ T29] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 2360.517168][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.530067][ T29] usb 6-1: USB disconnect, device number 89 [ 2360.669189][T27497] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.817503][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2360.937106][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2361.007101][ T29] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2361.167113][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 2361.182844][ T29] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 2361.208432][ T29] usb 6-1: config 1 has no interface number 0 [ 2361.230413][ T29] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2361.257024][ T29] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2361.300699][ T29] usb 6-1: config 1 interface 105 has no altsetting 0 [ 2361.334452][ T29] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2361.363299][ T29] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2361.399398][ T29] usb 6-1: Product: syz [ 2361.414251][ T29] usb 6-1: Manufacturer: syz [ 2361.431878][ T29] usb 6-1: SerialNumber: syz [ 2361.464357][ T3237] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2361.497940][ T3237] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2361.640055][ T1210] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2361.827089][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 2361.845291][ T1210] usb 2-1: config 0 has no interfaces? [ 2361.855223][ T1210] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2361.877220][ T1210] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2361.919245][ T1210] usb 2-1: Manufacturer: syz [ 2361.946884][ T3237] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2361.957454][ T1210] usb 2-1: config 0 descriptor?? [ 2361.983663][ T3237] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2362.418814][ T29] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2362.431778][ T29] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2362.483261][ T29] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:29:70:c6:36:f5 [ 2362.657625][ T3237] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8127'. [ 2362.684713][ T29] usb 6-1: USB disconnect, device number 90 [ 2362.701647][ T29] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2362.808743][ T29] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2362.835360][ T29] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2362.861025][ T29] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2364.292865][T26523] usb 2-1: USB disconnect, device number 39 [ 2364.557094][ T8420] net_ratelimit: 28 callbacks suppressed [ 2364.557116][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2364.701370][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2365.410220][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2365.527197][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2365.647217][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2365.757823][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2365.867854][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2365.977213][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2366.114209][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2366.278435][T29586] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2366.817047][T26523] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2367.043337][T26523] usb 6-1: Using ep0 maxpacket: 8 [ 2367.237411][T26523] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2367.253832][T26523] usb 6-1: config 0 has no interface number 0 [ 2367.516328][T26523] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2367.555178][ T3344] netlink: 'syz.1.8143': attribute type 4 has an invalid length. [ 2367.567043][T26523] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.600500][T26523] usb 6-1: Product: syz [ 2367.614068][ T3342] netlink: 'syz.1.8143': attribute type 4 has an invalid length. [ 2367.622586][T26523] usb 6-1: Manufacturer: syz [ 2367.629487][T26523] usb 6-1: SerialNumber: syz [ 2367.644998][T26523] usb 6-1: config 0 descriptor?? [ 2367.675416][ T3344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2367.947351][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.062310][ T3351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2368.074632][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.147172][ T3341] block device autoloading is deprecated and will be removed. [ 2369.588565][ T2581] net_ratelimit: 27 callbacks suppressed [ 2369.588590][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2369.747167][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2369.887214][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.000345][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.083892][T26523] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2370.096334][T26523] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized! [ 2370.119985][T26523] usb 6-1: USB disconnect, device number 91 [ 2370.127114][T22669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.237074][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.347123][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.467132][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.492991][ T3372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8147'. [ 2370.577073][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2370.687205][ T2581] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2374.087495][ T31] INFO: task syz.0.7630:1288 blocked for more than 143 seconds. [ 2374.095233][ T31] Tainted: G L syzkaller #0 [ 2374.103536][ T31] Blocked by coredump. [ 2374.127317][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2374.170233][ T31] task:syz.0.7630 state:D stack:24960 pid:1288 tgid:1288 ppid:28489 task_flags:0x40044c flags:0x00080002 [ 2374.198742][ T31] Call Trace: [ 2374.202159][ T31] [ 2374.205317][ T31] __schedule+0x15dd/0x52d0 [ 2374.219401][ T31] ? __pfx___schedule+0x10/0x10 [ 2374.233775][ T31] ? schedule+0x90/0x360 [ 2374.243149][ T31] schedule+0x164/0x360 [ 2374.259853][ T31] schedule_preempt_disabled+0x13/0x30 [ 2374.274447][ T31] rwsem_down_read_slowpath+0x61e/0x920 [ 2374.284816][ T31] ? rwsem_down_read_slowpath+0x4d9/0x920 [ 2374.293254][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2374.311423][ T31] ? do_futex+0x395/0x420 [ 2374.315983][ T31] down_read+0x99/0x2e0 [ 2374.327293][ T31] ? exit_mm+0x64/0x220 [ 2374.340113][ T31] exit_mm+0x73/0x220 [ 2374.352496][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 2374.366502][ T31] do_exit+0x6a2/0x23c0 [ 2374.376532][ T31] ? __pfx_do_exit+0x10/0x10 [ 2374.388519][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2374.395638][ T31] do_group_exit+0x21b/0x2d0 [ 2374.403316][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2374.414812][ T31] get_signal+0x1284/0x1330 [ 2374.420997][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 2374.430583][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2374.443486][ T31] ? vm_mmap_pgoff+0x294/0x4f0 [ 2374.455619][ T31] exit_to_user_mode_loop+0x86/0x480 [ 2374.469083][ T31] ? rcu_is_watching+0x15/0xb0 [ 2374.483278][ T31] do_syscall_64+0x32d/0xf80 [ 2374.497028][ T31] ? trace_irq_disable+0x3b/0x150 [ 2374.509454][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.524739][ T31] ? clear_bhb_loop+0x40/0x90 [ 2374.534420][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.548296][ T31] RIP: 0033:0x7f4e7e79c502 [ 2374.559627][ T31] RSP: 002b:00007f4e7eb3faf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2374.578396][ T31] RAX: fffffffffffffffc RBX: 0000000000000000 RCX: 00007f4e7e79c502 [ 2374.595410][ T31] RDX: 0000000000000000 RSI: 0000000000402000 RDI: 0000000000000000 [ 2374.605385][ T8420] net_ratelimit: 32 callbacks suppressed [ 2374.605401][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2374.629897][ T31] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 2374.648857][ T31] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000003 [ 2374.667240][ T31] R13: 0000000000000006 R14: 0000000000000000 R15: 00007f4e7ea15fa0 [ 2374.685430][ T31] [ 2374.692131][ T31] INFO: task syz.0.7630:1289 blocked for more than 143 seconds. [ 2374.715810][ T31] Tainted: G L syzkaller #0 [ 2374.734294][ T31] Blocked by coredump. [ 2374.755767][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2374.764854][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2374.787956][ T31] task:syz.0.7630 state:D stack:27744 pid:1289 tgid:1288 ppid:28489 task_flags:0x40044c flags:0x00080002 [ 2374.806296][ T31] Call Trace: [ 2374.810264][ T31] [ 2374.813508][ T31] __schedule+0x15dd/0x52d0 [ 2374.827456][ T31] ? __pfx___schedule+0x10/0x10 [ 2374.833829][ T31] ? schedule+0x90/0x360 [ 2374.844522][ T31] schedule+0x164/0x360 [ 2374.854792][ T31] schedule_preempt_disabled+0x13/0x30 [ 2374.866417][ T31] rwsem_down_read_slowpath+0x61e/0x920 [ 2374.880303][ T31] ? rwsem_down_read_slowpath+0x4d9/0x920 [ 2374.887094][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2374.897193][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2374.903535][ T31] ? do_futex+0x395/0x420 [ 2374.908305][ T31] down_read+0x99/0x2e0 [ 2374.912591][ T31] ? exit_mm+0x64/0x220 [ 2374.916832][ T31] exit_mm+0x73/0x220 [ 2374.921120][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 2374.926849][ T31] do_exit+0x6a2/0x23c0 [ 2374.931550][ T31] ? __pfx_do_exit+0x10/0x10 [ 2374.936353][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2374.943727][ T31] do_group_exit+0x21b/0x2d0 [ 2374.948492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2374.953986][ T31] get_signal+0x1284/0x1330 [ 2374.961225][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 2374.968267][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2374.974760][ T31] exit_to_user_mode_loop+0x86/0x480 [ 2374.982321][ T31] ? rcu_is_watching+0x15/0xb0 [ 2374.989355][ T31] do_syscall_64+0x32d/0xf80 [ 2374.994287][ T31] ? trace_irq_disable+0x3b/0x150 [ 2374.999567][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2375.008146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.014312][ T31] ? clear_bhb_loop+0x40/0x90 [ 2375.019942][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.025951][ T31] RIP: 0033:0x7f4e7e79c799 [ 2375.030759][ T31] RSP: 002b:00007f4e7f637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2375.039404][ T31] RAX: 000000000000000b RBX: 00007f4e7ea15fa0 RCX: 00007f4e7e79c799 [ 2375.049666][ T31] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 2375.060059][ T31] RBP: 00007f4e7e832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2375.069338][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2375.079085][ T31] R13: 00007f4e7ea16038 R14: 00007f4e7ea15fa0 R15: 00007f4e7eb3fa48 [ 2375.087525][ T31] [ 2375.091824][ T31] INFO: task syz.0.7630:1293 blocked for more than 144 seconds. [ 2375.101118][ T31] Tainted: G L syzkaller #0 [ 2375.107753][ T31] Blocked by coredump. [ 2375.112858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2375.131734][ T31] task:syz.0.7630 state:D stack:25672 pid:1293 tgid:1288 ppid:28489 task_flags:0x40044c flags:0x00080002 [ 2375.144078][ T31] Call Trace: [ 2375.147497][ T31] [ 2375.150491][ T31] __schedule+0x15dd/0x52d0 [ 2375.155194][ T31] ? __pfx___schedule+0x10/0x10 [ 2375.162699][ T31] ? schedule+0x90/0x360 [ 2375.167333][ T31] schedule+0x164/0x360 [ 2375.171570][ T31] schedule_preempt_disabled+0x13/0x30 [ 2375.178389][ T31] rwsem_down_read_slowpath+0x61e/0x920 [ 2375.185083][ T31] ? rwsem_down_read_slowpath+0x4d9/0x920 [ 2375.191478][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2375.199481][ T31] ? do_futex+0x395/0x420 [ 2375.205599][ T31] down_read+0x99/0x2e0 [ 2375.215604][ T31] ? exit_mm+0x64/0x220 [ 2375.220107][ T31] exit_mm+0x73/0x220 [ 2375.224449][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 2375.231079][ T31] do_exit+0x6a2/0x23c0 [ 2375.235416][ T31] ? __pfx_do_exit+0x10/0x10 [ 2375.240509][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2375.245770][ T31] do_group_exit+0x21b/0x2d0 [ 2375.250729][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2375.256065][ T31] get_signal+0x1284/0x1330 [ 2375.260942][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 2375.266650][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2375.277160][ T31] ? __x64_sys_recvmmsg+0x198/0x250 [ 2375.282520][ T31] exit_to_user_mode_loop+0x86/0x480 [ 2375.294469][ T31] ? rcu_is_watching+0x15/0xb0 [ 2375.301993][ T31] do_syscall_64+0x32d/0xf80 [ 2375.307511][ T31] ? trace_irq_disable+0x3b/0x150 [ 2375.312725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.322407][ T31] ? clear_bhb_loop+0x40/0x90 [ 2375.327384][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.333422][ T31] RIP: 0033:0x7f4e7e79c799 [ 2375.342874][ T31] RSP: 002b:00007f4e7f616028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2375.351697][ T31] RAX: 000000000000457d RBX: 00007f4e7ea16090 RCX: 00007f4e7e79c799 [ 2375.359982][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2375.382604][ T31] RBP: 00007f4e7e832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2375.390831][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2375.402218][ T31] R13: 00007f4e7ea16128 R14: 00007f4e7ea16090 R15: 00007f4e7eb3fa48 [ 2375.410459][ T31] [ 2375.414464][ T31] [ 2375.414464][ T31] Showing all locks held in the system: [ 2375.434613][ T31] 1 lock held by khungtaskd/31: [ 2375.446368][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2375.478082][ T31] 2 locks held by getty/5580: [ 2375.490562][ T31] #0: ffff8880351130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2375.514501][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2375.535349][ T31] 5 locks held by kworker/u8:6/22669: [ 2375.551483][ T31] #0: ffff88801b6de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 2375.563204][ T31] #1: ffffc90003707c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 2375.574646][ T31] #2: ffffffff8fbbe5b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 2375.585498][ T31] #3: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 2375.595046][ T31] #4: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 2375.609187][ T31] 1 lock held by syz.0.7630/1288: [ 2375.614695][ T31] #0: ffff888030eb8f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x220 [ 2375.625263][ T31] 1 lock held by syz.0.7630/1289: [ 2375.630732][ T31] #0: ffff888030eb8f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x220 [ 2375.643043][ T31] 1 lock held by syz.0.7630/1293: [ 2375.649617][ T31] #0: ffff888030eb8f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x220 [ 2375.658949][ T31] 3 locks held by syz.0.7630/1294: [ 2375.664235][ T31] 2 locks held by syz.6.8156/3400: [ 2375.670319][ T31] #0: ffff88807686d848 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2375.681093][ T31] #1: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x7f/0x270 [ 2375.691297][ T31] [ 2375.695633][ T31] ============================================= [ 2375.695633][ T31] [ 2375.704945][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2375.713463][ T31] NMI backtrace for cpu 1 [ 2375.713485][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2375.713513][ T31] Tainted: [L]=SOFTLOCKUP [ 2375.713529][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2375.713543][ T31] Call Trace: [ 2375.713551][ T31] [ 2375.713561][ T31] dump_stack_lvl+0xe8/0x150 [ 2375.713597][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2375.713627][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2375.713657][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2375.713686][ T31] sys_info+0x135/0x170 [ 2375.713709][ T31] watchdog+0xfd9/0x1030 [ 2375.713747][ T31] ? watchdog+0x21a/0x1030 [ 2375.713786][ T31] kthread+0x388/0x470 [ 2375.713808][ T31] ? __pfx_watchdog+0x10/0x10 [ 2375.713839][ T31] ? __pfx_kthread+0x10/0x10 [ 2375.713861][ T31] ret_from_fork+0x51e/0xb90 [ 2375.713891][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2375.713918][ T31] ? __switch_to+0xc7d/0x1450 [ 2375.713948][ T31] ? __pfx_kthread+0x10/0x10 [ 2375.713970][ T31] ret_from_fork_asm+0x1a/0x30 [ 2375.714018][ T31] [ 2375.714026][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2375.819677][ T8420] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2375.822735][ C0] NMI backtrace for cpu 0 [ 2375.822753][ C0] CPU: 0 UID: 0 PID: 8420 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 2375.822778][ C0] Tainted: [L]=SOFTLOCKUP [ 2375.822786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2375.822799][ C0] Workqueue: bond1 bond_mii_monitor [ 2375.822901][ C0] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 2375.822928][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 2375.822945][ C0] RSP: 0018:ffffc900059cecc8 EFLAGS: 00000246 [ 2375.822960][ C0] RAX: ffffffff8ba9e201 RBX: fffffffffffffffe RCX: ffffffff8ba9e2cf [ 2375.822975][ C0] RDX: 0000000000000001 RSI: 0000000000000018 RDI: ffffc900059ceda0 [ 2375.822987][ C0] RBP: 0000000000000000 R08: ffffc900059cedb7 R09: 1ffff92000b39db6 [ 2375.823000][ C0] R10: dffffc0000000000 R11: fffff52000b39db5 R12: 0000000000000003 [ 2375.823013][ C0] R13: 00000000000ae522 R14: fffff52000b39db7 R15: 1ffff92000b39db4 [ 2375.823026][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 2375.823041][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2375.823054][ C0] CR2: 00007f7d5a1e9078 CR3: 00000000b32a6000 CR4: 00000000003526f0 [ 2375.823071][ C0] Call Trace: [ 2375.823078][ C0] [ 2375.823089][ C0] __asan_memset+0x22/0x50 [ 2375.823108][ C0] number+0x27f/0xf80 [ 2375.823132][ C0] ? number+0xb1/0xf80 [ 2375.823155][ C0] ? __pfx_number+0x10/0x10 [ 2375.823178][ C0] ? format_decode+0x5a3/0xe10 [ 2375.823202][ C0] vsnprintf+0x8e5/0xee0 [ 2375.823229][ C0] sprintf+0xe7/0x140 [ 2375.823258][ C0] ? __pfx_sprintf+0x10/0x10 [ 2375.823281][ C0] ? desc_read+0x208/0x3f0 [ 2375.823310][ C0] info_print_prefix+0x16b/0x360 [ 2375.823332][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 2375.823352][ C0] ? _prb_read_valid+0xa6f/0xa80 [ 2375.823382][ C0] record_print_text+0x176/0x450 [ 2375.823403][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 2375.823429][ C0] ? __pfx_record_print_text+0x10/0x10 [ 2375.823456][ C0] printk_get_next_message+0x29c/0x880 [ 2375.823479][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 2375.823497][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 2375.823522][ C0] ? format_decode+0x60f/0xe10 [ 2375.823550][ C0] ? lock_acquire+0xf0/0x2e0 [ 2375.823575][ C0] ? console_flush_all+0x4ac/0xb20 [ 2375.823602][ C0] console_flush_all+0x501/0xb20 [ 2375.823622][ C0] ? console_flush_all+0x123/0xb20 [ 2375.823643][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 2375.823663][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2375.823686][ C0] console_unlock+0xd1/0x1c0 [ 2375.823715][ C0] ? __pfx_console_unlock+0x10/0x10 [ 2375.823743][ C0] ? vprintk_emit+0x2cf/0x560 [ 2375.823770][ C0] ? vprintk_emit+0x2cf/0x560 [ 2375.823797][ C0] vprintk_emit+0x485/0x560 [ 2375.823824][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2375.823847][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2375.823879][ C0] _printk+0xdd/0x130 [ 2375.823898][ C0] ? __pfx__printk+0x10/0x10 [ 2375.823918][ C0] ? __netdev_printk+0x36f/0x480 [ 2375.823941][ C0] netdev_warn+0x11e/0x180 [ 2375.823963][ C0] ? __pfx_netdev_warn+0x10/0x10 [ 2375.823981][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2375.824008][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2375.824034][ C0] ? ___ratelimit+0x58c/0x8d0 [ 2375.824062][ C0] bond_mii_monitor+0x1a3a/0x2ec0 [ 2375.824090][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2375.824114][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 2375.824148][ C0] ? process_scheduled_works+0xa25/0x1830 [ 2375.824171][ C0] ? process_scheduled_works+0xa25/0x1830 [ 2375.824196][ C0] process_scheduled_works+0xb02/0x1830 [ 2375.824232][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2375.824259][ C0] ? assign_work+0x3d5/0x5e0 [ 2375.824283][ C0] worker_thread+0xa50/0xfc0 [ 2375.824321][ C0] kthread+0x388/0x470 [ 2375.824338][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2375.824361][ C0] ? __pfx_kthread+0x10/0x10 [ 2375.824378][ C0] ret_from_fork+0x51e/0xb90 [ 2375.824403][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2375.824426][ C0] ? __switch_to+0xc7d/0x1450 [ 2375.824447][ C0] ? __pfx_kthread+0x10/0x10 [ 2375.824464][ C0] ret_from_fork_asm+0x1a/0x30 [ 2375.824499][ C0] [ 2375.884873][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2375.884974][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2375.885069][ T31] Tainted: [L]=SOFTLOCKUP [ 2375.885099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2375.885133][ T31] Call Trace: [ 2375.885163][ T31] [ 2375.885188][ T31] vpanic+0x56c/0xa60 [ 2375.885292][ T31] ? __pfx___schedule+0x10/0x10 [ 2375.885386][ T31] ? __pfx_vpanic+0x10/0x10 [ 2375.885484][ T31] panic+0xc5/0xd0 [ 2375.885566][ T31] ? __pfx_panic+0x10/0x10 [ 2375.885651][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2375.885729][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2375.885824][ T31] watchdog+0x1023/0x1030 [ 2375.885929][ T31] ? watchdog+0x21a/0x1030 [ 2375.886033][ T31] kthread+0x388/0x470 [ 2375.886101][ T31] ? __pfx_watchdog+0x10/0x10 [ 2375.886177][ T31] ? __pfx_kthread+0x10/0x10 [ 2375.886240][ T31] ret_from_fork+0x51e/0xb90 [ 2375.886338][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2375.886431][ T31] ? __switch_to+0xc7d/0x1450 [ 2375.886505][ T31] ? __pfx_kthread+0x10/0x10 [ 2375.886567][ T31] ret_from_fork_asm+0x1a/0x30 [ 2375.886697][ T31] [ 2375.902246][ T31] Kernel Offset: disabled