last executing test programs: 28.92531378s ago: executing program 4 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x183100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x5}]) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=0x1000) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r10 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r10, 0x4112, 0x0) syz_clone3(&(0x7f0000000280)={0x2041080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000140)={0x126, @time={0xfffffff1, 0xfffffffe}, 0x0, {}, 0x2, 0x0, 0xf}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18004e00", @ANYRES32=0x0], 0x18}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r11, 0x10, 0x70bd23, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffa4, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 27.202041572s ago: executing program 4 (id=1350): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000feff0002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004"], 0x78) 26.815250731s ago: executing program 4 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x130, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x0, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0xa4, 0x3, [@m_connmark={0xa0, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x6e, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400000ecee8ac4600"/25, @ANYRES32=0x0, @ANYBLOB="000000000000000053fd128009000100626f6e64000000000c00028008000500ffffffff"], 0x3c}}, 0x0) unshare(0x400) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f0000000080)) r5 = socket(0x10, 0x803, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000000)) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 26.69428869s ago: executing program 4 (id=1352): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) (rerun: 64) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g']) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 26.581471783s ago: executing program 4 (id=1353): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xbf, 0x0, [{}, {}, {}, {0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 26.21232058s ago: executing program 4 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x16, 0xc, "50768c007eccf21a5ec632241a83329ae212"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000000)={0x8, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000600)="eae7564800f20f01dfbaf80c66b89c446c8d66efbafc0cb841d5ef0f7fbe000064acbaf80c66b85451338e66efbafc0c66b87f39186c66ef660fc7b4b4d7670f01d1f30f1ec10fb7db", 0x49}], 0x1, 0x20, &(0x7f00000006c0)=[@efer={0x2, 0x4000}, @cr4={0x1, 0x20000}], 0x2) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r6, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) r7 = syz_open_pts(r6, 0x42000) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x8, "b518203fa604addb78d17ae61b0095c03a1bb2a19073c4d3a963922a69b5eb0df779ff400fde833f7c2b56fbf3c49bccd000282618b14c54f8c2f67c78da67f246c89f19e3a48bd10d91b4b4ff65efe5009cfe36d68319ec6ff92099fdf632d156326cb9e39ae87f9345fcb3ac546985658b8666a82ffaef298bd33293f0c5a43a85b390dc8081bb37e7203e0c122820eb52aa5ff6eeb8cd2459729d953f1f9b5ab6b6b0e8865a15277363759130e630d42253d6cc91cda735e6efa52e4e58fe1eb19e30311522351e1428d21df9011be837bec090176580edbbc4b448d5af007c8c6a4c900edc562b0e3f20030bf8e588097b0d8b4bae667f3c7f1702925fe5", 0x9, 0x9, 0x80, 0x5, 0x5, 0x1, 0x2, 0x1}, r9}}, 0x128) 25.694800649s ago: executing program 32 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x16, 0xc, "50768c007eccf21a5ec632241a83329ae212"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000000)={0x8, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r5}, 0x68) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000600)="eae7564800f20f01dfbaf80c66b89c446c8d66efbafc0cb841d5ef0f7fbe000064acbaf80c66b85451338e66efbafc0c66b87f39186c66ef660fc7b4b4d7670f01d1f30f1ec10fb7db", 0x49}], 0x1, 0x20, &(0x7f00000006c0)=[@efer={0x2, 0x4000}, @cr4={0x1, 0x20000}], 0x2) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r6, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) r7 = syz_open_pts(r6, 0x42000) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x8, "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", 0x9, 0x9, 0x80, 0x5, 0x5, 0x1, 0x2, 0x1}, r9}}, 0x128) 7.784043204s ago: executing program 0 (id=1410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 7.539821808s ago: executing program 1 (id=1413): r0 = syz_io_uring_complete(0x0) r1 = eventfd2(0xfffffffb, 0x1) fanotify_init(0xa00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r1}) syslog(0x3, 0xffffffffffffffff, 0x1000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) lsetxattr$security_capability(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) write$FUSE_NOTIFY_STORE(r6, 0x0, 0x28) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r6) execve(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setns(r3, 0x8020000) 6.976967378s ago: executing program 5 (id=1415): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000011000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES16=r0], 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.774032049s ago: executing program 5 (id=1417): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r1, 0x3) sendmsg$inet6(r0, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006fffe4e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000ffa6000000", 0x40b}], 0x1) 5.537179229s ago: executing program 1 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1c20000035020000140035007465616d5f736c6176655f31000000001800348014"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.272388734s ago: executing program 5 (id=1419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000400000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00, 0x70}, 0x94) 5.242790354s ago: executing program 3 (id=1420): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4$tipc(r2, &(0x7f0000000000)=@name, 0x0, 0x80000) unshare(0x2040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000140), 0x0}, 0x20) statx(0xffffffffffffff9c, &(0x7f0000002880)='\x00', 0x1000, 0x7ff, &(0x7f00000028c0)) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x306f) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) 5.213384355s ago: executing program 1 (id=1421): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000102, 0xfffb, 0x0, 0x0) 5.011696979s ago: executing program 5 (id=1423): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d50e6f3a98d9"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="18030000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf25010000000800070009000000e80208804c000080240002009959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392298020080540209801c00008006000100020000000800020064010101050003000000000070000080060001000a00000014000200fe80000000000000000000000000000f0500030000000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000a00000800600010002000000080002007f0000010500030001000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000006000100b50544557ece29fcfe880000000000000000000000000001050003000200000006000100020000000800020064010101050003000300000094000080062001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200fe8000000000000000000000000000360500030002000000060001000a00000014000200fc00000000000000000000000000000105000300030000001c000080060001000200000008000200ac1414bb050003000000000040000080"], 0x318}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) sendmmsg$inet(r3, &(0x7f0000000100), 0x0, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r8, &(0x7f0000002380), 0x0, 0x0, 0x0) 5.0109065s ago: executing program 0 (id=1424): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @sdr={0x42474752, 0x4}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x810, 0xffffffffffffffff, 0x9f221000) syncfs(r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) syz_open_dev$video4linux(&(0x7f0000000040), 0x159bf131, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 4.904494291s ago: executing program 1 (id=1425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a400000000009004e6798b37a32000000000900010073797a3000000000080005400000000c4c0000000c0a010300000000000000000100000008000440000000000900010073797a300000000024000380"], 0xd0}, 0x1, 0x0, 0x2000, 0xf9dda1e65e16e18a}, 0x22000000) 4.757412991s ago: executing program 1 (id=1426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000002c0)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0x4, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000000)={0xce, 0x0, r4}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000440)={0x80, "99b0f587ab891d4092ef24dcb9337f0a67af99fccd6a9e5ade883d0c3391775d4ad24cb974ebd6ea244be4ecfe61be00d3224e60057300adc5d2566a6c892345"}) 4.013755296s ago: executing program 2 (id=1427): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="84650000", 0x4) 3.883575019s ago: executing program 2 (id=1428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000003000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.583493285s ago: executing program 2 (id=1429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c061}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfffff000}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x16c3035570970880) 3.375015243s ago: executing program 3 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x1200000000000000, 0x0, 0x20000004}, 0x0) 3.268670906s ago: executing program 2 (id=1431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105000) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0x4000, 0x4000}) socket$inet6(0xa, 0x80000, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.296375092s ago: executing program 3 (id=1432): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x1f, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 1.900740698s ago: executing program 2 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104000000000304000000a1ff00", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c61766500000000580005800500190003000000050005000000000006001f00d5000000050007000000000005000a00000000000500080000000000060018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.840260017s ago: executing program 0 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000001900)=""/76, 0x4c) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) landlock_restrict_self(r5, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x80, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) landlock_restrict_self(r5, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_ATTR(r8, &(0x7f00000002c0)={0x78, 0x0, r1, {0x7fffffffffffffff, 0x5, 0x0, {0x2, 0x4, 0xc, 0x80000000, 0x4, 0x144, 0x7, 0x7fffffff, 0x5, 0x6000, 0x200, r2, r3, 0x5, 0x4}}}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.839921993s ago: executing program 5 (id=1435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x8848}, 0x0) 1.751827681s ago: executing program 3 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef7, 0x0, 0x0, 0x504bb288, 0x1], [0x10000, 0x3, 0x0, 0xfff, 0x6, 0x6, 0xfffffffe, 0x7], [0x7, 0x0, 0x5, 0x0, 0xea7, 0x1000, 0x0, 0x1]], '\x00', [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x1, 0x1}, {0x3, 0x6}, {0xfffffffb, 0x4000005f, 0x1}, {}, {}, {0x103, 0x7f}, {0x0, 0x8766}, {0x1}, {0x0, 0xffffffff}], '\x00', 0x101004}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314152}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000400)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001280)={r9}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) socket$inet6(0xa, 0x1, 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x5, 0xf16, [0x200000000340, 0x0, 0x0, 0x2000000005fc, 0x2000000008d8], 0x0, &(0x7f00000001c0), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x1f, 0x2, 0x22eb, 'veth1_to_bond\x00', 'bond0\x00', 'vlan1\x00', 'pimreg\x00', @remote, [0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe6, 0xe6, 0x11e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x7fff, 0xfffffffb, 0x3, 0x0, 0x0, 0xfff}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x2}}}], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}, {0x9, 0x32, 0x16, 'wlan1\x00', 'ipvlan1\x00', 'ip6_vti0\x00', 'veth1_to_team\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xb6, 0x136, 0x16e, [@ip={{'ip\x00', 0x0, 0x20}, {{@multicast1, @empty, 0x0, 0x0, 0x99, 0x2, 0x2c, 0x11, 0x4e20, 0x4e24, 0x4e23, 0x4e22}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x7f, {0x27c4}}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x0, 0xf0bb, 'wlan0\x00', 'bond_slave_0\x00', 'ipvlan1\x00', 'rose0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}, {0x5, 0x50, 0x7, 'veth0_macvtap\x00', 'wg1\x00', 'ip6_vti0\x00', 'bond0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0x1d6, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xffffffffffffffee}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x44, 0x9000, 'bridge_slave_1\x00', 'wlan1\x00', 'veth0_to_team\x00', 'vlan1\x00', @remote, [0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x916, 0x916, 0x94e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x0, 0x3}}}, @among={{'among\x00', 0x0, 0x850}, {{@offset=0xc, @zero, 0x2, {[0xbe5, 0x5, 0x0, 0x80000000, 0x8, 0x100, 0x5, 0x1, 0xc44, 0x3, 0x1, 0x5, 0x80000000, 0x5, 0x5, 0x83, 0x296b, 0xe34b, 0x5, 0x9, 0x4, 0xfffffffa, 0x0, 0x5, 0xffff, 0x2f2, 0x6, 0x7ff, 0x7, 0x5, 0x794, 0x10, 0x6, 0x10001, 0x87ce, 0x5, 0x9, 0x5, 0x5, 0x1000, 0x72, 0x8, 0x0, 0x483e, 0x2, 0x4, 0x0, 0xfffffffc, 0x2, 0xff, 0xfffffffd, 0x3, 0x145, 0x0, 0xb2, 0x10001, 0x8, 0x8000, 0x0, 0x7, 0x8001, 0x2, 0xa745, 0x1, 0x9, 0x10001, 0xfffffffa, 0x8f, 0xfffffff7, 0x7, 0x10000, 0x0, 0x8, 0x5, 0xa, 0x3, 0x100, 0x9, 0x7, 0xa9ff, 0x2, 0x0, 0x3, 0xffffb722, 0x8, 0x2, 0x9, 0x4, 0x1, 0x81, 0x5, 0x0, 0x5, 0x6, 0xf9, 0x98, 0x7fffffff, 0x4, 0x4, 0xb3d, 0x8000, 0x4, 0x0, 0x9, 0xb, 0x6, 0x4, 0x3627, 0x8000, 0x0, 0x3, 0xfff, 0x71d4, 0xfffffffb, 0x200, 0x3, 0x1, 0x933, 0x7fffffff, 0x0, 0x7, 0x10000, 0x9, 0x7, 0x40000000, 0x2, 0x7, 0x1, 0x1, 0x3, 0x40, 0x1, 0x8, 0x4, 0x6, 0x0, 0x4, 0x7fffffff, 0x8, 0x6, 0xf, 0x4200, 0xfffffffb, 0xfffffffc, 0xfffffff8, 0x200, 0x7, 0x9, 0x0, 0x0, 0xd5, 0x7, 0x1, 0x9, 0x8d8f, 0x13e0, 0x6, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x100, 0x1, 0x7fffffff, 0x10, 0x9, 0x94, 0x4, 0xfffffff9, 0x2, 0x1, 0x1000, 0x0, 0xc, 0x9, 0x0, 0x481, 0x1, 0x10, 0x0, 0x2, 0x2, 0xff, 0x6, 0x6f7a, 0x3, 0x2, 0xdd, 0xc0f6, 0x6, 0x1, 0x0, 0x2, 0x7ff, 0x70c, 0x81, 0xd, 0x5, 0x3, 0x7ff, 0x0, 0x101, 0x3, 0x7fffffff, 0x200, 0x1, 0x8, 0xff, 0x10f, 0x9, 0x289c4f70, 0x3, 0x4646, 0x1a0a895b, 0x2, 0xe, 0x7, 0x833f, 0x80, 0x1ff, 0x9, 0x8, 0xab2, 0x0, 0xd, 0x7fff, 0x7, 0xffffffff, 0x622, 0x7fff, 0x5, 0x1ff, 0x0, 0x9, 0x0, 0xc6, 0x10000, 0x9, 0x5, 0x1, 0xfffffff7, 0xf, 0x3, 0x6, 0x9, 0x7, 0x5, 0x2, 0x9, 0x3, 0x6, 0x0, 0x1, 0x48, 0xb, 0x2], 0x3, [{[0x3, 0x3], @rand_addr=0x64010101}, {[0x0, 0x7], @loopback}, {[0x7fff, 0x1c], @loopback}]}, {[0x2, 0x1, 0x1, 0x4, 0x3, 0x1fb2, 0x6, 0xccf, 0x9, 0x3, 0xe, 0x9, 0x57, 0x10, 0x7fff, 0x4, 0x8, 0x8, 0xffff, 0x0, 0x2, 0x1, 0xea11, 0xa, 0x4, 0x0, 0x3, 0x0, 0x1ff, 0x80000001, 0x3, 0x0, 0xbc, 0x1, 0xfffffffa, 0x8, 0x6, 0x1, 0x4208, 0x1, 0x7, 0x1ff, 0x4, 0x4, 0x0, 0x2, 0x1ff, 0x33b, 0x887, 0x3, 0x50000000, 0x5, 0x1, 0x9, 0x9, 0x4, 0x5, 0x3, 0x382, 0x80000001, 0xe, 0xfff, 0x7, 0x7, 0x8, 0x4, 0x800, 0x1, 0x4, 0x8, 0xfffffff3, 0x2, 0x5, 0x5, 0x9, 0x5, 0x9, 0xc297480, 0x0, 0x5, 0x5f, 0x9, 0x3a9c, 0x8, 0x9, 0x1, 0x2, 0x4, 0x7, 0x80000000, 0x6, 0x58aab9b1, 0x1, 0x401, 0x0, 0xa, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x7, 0x1, 0x9595, 0x4, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0x6, 0x5bf, 0x2, 0x452, 0x4, 0x9, 0x7f, 0x6, 0x7, 0x6c84, 0x1, 0x2, 0x9, 0x4, 0x9, 0x7f, 0x9, 0x4, 0x2, 0x3, 0xfffffff9, 0x10, 0x1ff, 0x1ff, 0x8, 0x8, 0xd, 0x8000, 0xfffffff9, 0x4, 0x8, 0x9, 0x1, 0x51, 0x772, 0xce4, 0x81, 0x554d, 0x9, 0x9, 0xe, 0x4, 0x7, 0x3, 0xfffffff7, 0x5c7, 0x3, 0x4, 0x4, 0x40, 0x4d, 0x40, 0x83, 0xfffff797, 0x5, 0x0, 0x7, 0x1, 0x81, 0xfffffffb, 0xf, 0xdc, 0x2, 0x4, 0x780, 0x1, 0x1, 0x40, 0x0, 0x8, 0x2, 0x8, 0x2, 0x7, 0x8ac, 0xffffffff, 0x8, 0x7, 0x80, 0xfffffff9, 0x1, 0x4, 0x200, 0x7f, 0x4, 0xea98, 0xaac, 0xfffffffa, 0x8e, 0x30, 0xfffffff7, 0x9, 0x1f, 0x3, 0xfafa, 0x10, 0x10000, 0x353, 0x40000, 0x6122, 0x9, 0x1000, 0x9, 0x10001, 0x7, 0x80000000, 0x1, 0x1, 0x7, 0x6, 0x0, 0x8, 0xc39c0000, 0x0, 0x7, 0xe, 0xadb2, 0x3, 0x7, 0x4, 0x8, 0x4, 0x1, 0x7, 0x6, 0xa, 0xe1d3, 0xfff, 0x401, 0xdc, 0x9, 0x4, 0x5, 0x6, 0x7f, 0x4c, 0x9e, 0xd, 0xffff8001, 0x8001, 0x6, 0x5, 0xfffffff9, 0x8, 0x40], 0x1, [{[0x443c, 0x9], @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}]}, 0xf8e) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x1d, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\f\x00\n', @ANYRES16=r2, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f0000000000"], 0x40}}, 0x0) 1.573386435s ago: executing program 5 (id=1437): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d50e6f3a98d9"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[], 0x318}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet(r2, &(0x7f0000000100), 0x0, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r5, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x1, 0x0) 1.395737587s ago: executing program 0 (id=1438): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xfcffffff, 0x0, 0x21, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r6, @ANYBLOB="10000180", @ANYRES8], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.344698518s ago: executing program 2 (id=1439): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1.074269222s ago: executing program 3 (id=1440): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 894.59992ms ago: executing program 3 (id=1441): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e000", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x35) tkill(r0, 0x36) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_fuse_handle_req(r3, &(0x7f0000000240)="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", 0x2000, 0xfffffffffffffffe) r4 = dup(r2) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe032000010007000800070000000000030000000200000002000000000400000d"], 0x58) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fallocate(r3, 0x8, 0x3, 0x3) 826.330305ms ago: executing program 1 (id=1442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) write$P9_RLERROR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000702000600c55b272d21"], 0xf) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(r1) accept(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x80000f, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x428b, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x47, 0x81, 0x80, 0xe8db, 0xfffffffffffffff9, 0x8, 0x201, 0xc, 0x1, 0x8, 0x4, 0x24, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x0, 0x40000000000001, 0x6, 0x6, 0x100000000, 0xa, 0x1000000000000000, 0x5, 0x401, 0x5, 0x88, 0x5, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0x9fffffffffe, 0x0, 0x1, 0x108, 0x8000000000000003, 0xd41, 0xbbeb, 0x1, 0x6, 0x4, 0x400000000000006, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x1000000011ad, 0x5, 0xa, 0x8000, 0x100080, 0x15ca000000000000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x4, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x1, 0x5, 0xffffffffffff66e3, 0xe29, 0xffffffffffffffe6, 0x5e997b8e, 0x7ff, 0x3, 0x6, 0x4, 0x100, 0x1000000004, 0x5, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x4, 0x7, 0x5, 0x6, 0x3, 0xdf, 0x2, 0x1, 0x5, 0xffb, 0x0, 0x80]}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000d80)={{r6, 0x9, 0x80000000, 0x2, 0x19544230, 0x200000003, 0xd, 0x3f, 0xb1e0, 0x9000, 0x8, 0x7fffffffffffffff, 0x66f4, 0xd, 0x1}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000c40)={r5, r6, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000c40)={r6, 0x7}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400a0000000019e97641e5255c89cb37f53f69964705e15592bfcabebd0f2bc2cc4495080000a3e342123d2a40606509279eaadf0f3076bf6be53b827f10dbea"], 0x0, 0x0, 0x0, 0x0}) write$midi(r1, &(0x7f0000000080)="da56fcf21f810f377a226b88e8296d447833c57acc8bf5936edac8a017654888e9e44c6bf9ee2234c0b457ffcdc98ada780d951986bb95650d762752054598ec9926609b197e4c14066266b03037f492330eaa500a54936f", 0x58) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00 \x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 708.522242ms ago: executing program 0 (id=1443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000001140)) (fail_nth: 5) 0s ago: executing program 0 (id=1444): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @sdr={0x42474752, 0x4}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x810, 0xffffffffffffffff, 0x9f221000) syncfs(r4) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) syz_open_dev$video4linux(&(0x7f0000000040), 0x159bf131, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) kernel console output (not intermixed with test programs): 48 bytes leftover after parsing attributes in process `syz.3.873'. [ 272.504543][ T8625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.718623][ T8625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 272.738747][ T8629] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 273.052411][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 273.251270][ T8634] dummy0: entered promiscuous mode [ 273.256552][ T8634] macsec1: entered allmulticast mode [ 273.862816][ T8634] dummy0: entered allmulticast mode [ 273.930766][ T8634] dummy0: left allmulticast mode [ 273.956466][ T8634] dummy0: left promiscuous mode [ 274.160284][ T8638] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 274.254042][ T8638] bond2: entered promiscuous mode [ 274.259575][ T8638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.321276][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 274.355979][ T8638] bond2: (slave bridge1): making interface the new active one [ 274.365370][ T8638] bridge1: entered promiscuous mode [ 274.394910][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 274.405501][ T8638] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 274.527203][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 274.810767][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 274.827103][ T8650] syzkaller0: entered promiscuous mode [ 275.017553][ T29] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.411068][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.455802][ T29] usb 4-1: config 0 descriptor?? [ 275.529251][ T29] cp210x 4-1:0.0: cp210x converter detected [ 276.000873][ T29] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 276.008862][ T29] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 276.065117][ T29] usb 4-1: cp210x converter now attached to ttyUSB0 [ 276.100896][ T29] usb 4-1: USB disconnect, device number 24 [ 276.132041][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.190737][ T797] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 276.191608][ T29] cp210x 4-1:0.0: device disconnected [ 276.363895][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 276.381838][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.393141][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.448634][ T797] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.498803][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.574105][ T797] usb 1-1: config 0 descriptor?? [ 276.599836][ T797] hub 1-1:0.0: USB hub found [ 276.801299][ T797] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 276.870139][ T8680] x_tables: duplicate underflow at hook 4 [ 276.894347][ T8680] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 277.094839][ T8682] FAULT_INJECTION: forcing a failure. [ 277.094839][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 277.130147][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.3.893 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.130187][ T8682] Tainted: [L]=SOFTLOCKUP [ 277.130196][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.130222][ T8682] Call Trace: [ 277.130231][ T8682] [ 277.130240][ T8682] dump_stack_lvl+0xe8/0x150 [ 277.130276][ T8682] should_fail_ex+0x412/0x560 [ 277.130312][ T8682] should_failslab+0xa8/0x100 [ 277.130341][ T8682] __kmalloc_noprof+0xe8/0x760 [ 277.130366][ T8682] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 277.130393][ T8682] tomoyo_realpath_from_path+0xe3/0x5d0 [ 277.130424][ T8682] ? tomoyo_path_number_perm+0x219/0x630 [ 277.130452][ T8682] tomoyo_path_number_perm+0x246/0x630 [ 277.130483][ T8682] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.130514][ T8682] ? __lock_acquire+0x6b5/0x2cf0 [ 277.130552][ T8682] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 277.130599][ T8682] ? __fget_files+0x2a/0x420 [ 277.130632][ T8682] ? __fget_files+0x2a/0x420 [ 277.130661][ T8682] ? __fget_files+0x3a0/0x420 [ 277.130690][ T8682] ? __fget_files+0x2a/0x420 [ 277.130725][ T8682] security_file_ioctl+0xc3/0x2a0 [ 277.130763][ T8682] __se_sys_ioctl+0x47/0x170 [ 277.130792][ T8682] do_syscall_64+0x14d/0xf80 [ 277.130815][ T8682] ? trace_irq_disable+0x3b/0x150 [ 277.130833][ T8682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.130855][ T8682] ? clear_bhb_loop+0x40/0x90 [ 277.130881][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.130902][ T8682] RIP: 0033:0x7f50f579c799 [ 277.130929][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.130947][ T8682] RSP: 002b:00007f50f6719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.130969][ T8682] RAX: ffffffffffffffda RBX: 00007f50f5a15fa0 RCX: 00007f50f579c799 [ 277.130984][ T8682] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 277.130998][ T8682] RBP: 00007f50f6719090 R08: 0000000000000000 R09: 0000000000000000 [ 277.131011][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.131023][ T8682] R13: 00007f50f5a16038 R14: 00007f50f5a15fa0 R15: 00007f50f5b3fa48 [ 277.131056][ T8682] [ 277.641567][ T8682] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.702322][ T797] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 277.811390][ T797] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 277.932136][ T797] usb 1-1: USB disconnect, device number 16 [ 278.057286][ T8685] fido_id[8685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 278.124333][ T8688] netlink: 'syz.4.895': attribute type 10 has an invalid length. [ 278.166888][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.895'. [ 278.225430][ T8688] batadv0: entered promiscuous mode [ 278.257655][ T8688] batadv0: entered allmulticast mode [ 278.295495][ T8688] bridge0: port 4(batadv0) entered blocking state [ 278.363111][ T8688] bridge0: port 4(batadv0) entered disabled state [ 278.399972][ T8688] bridge0: port 4(batadv0) entered blocking state [ 278.406638][ T8688] bridge0: port 4(batadv0) entered forwarding state [ 278.420807][ T797] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 278.429175][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 278.751475][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 278.761127][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 278.830717][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 278.853543][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.885984][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.932038][ T797] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.960845][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.992831][ T797] usb 1-1: config 0 descriptor?? [ 279.012914][ T797] hub 1-1:0.0: USB hub found [ 279.021645][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 279.219258][ T797] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 279.244870][ T797] usbhid 1-1:0.0: can't add hid device: -71 [ 279.270876][ T797] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.311838][ T797] usb 1-1: USB disconnect, device number 17 [ 279.420101][ T5937] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 279.750704][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 279.812890][ T5937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.846225][ T5937] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 279.872570][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.912556][ T5937] usb 5-1: Product: syz [ 279.923950][ T5937] usb 5-1: Manufacturer: syz [ 279.973138][ T5937] usb 5-1: SerialNumber: syz [ 280.217052][ T5937] empeg 5-1:1.0: empeg converter detected [ 280.260936][ T5937] empeg 5-1:1.0: probe with driver empeg failed with error -71 [ 280.314349][ T5937] usb 5-1: USB disconnect, device number 22 [ 280.337200][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 280.744065][ T8738] netlink: 'syz.0.910': attribute type 2 has an invalid length. [ 280.840111][ T8738] netlink: 'syz.0.910': attribute type 8 has an invalid length. [ 280.927045][ T8738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.910'. [ 281.494284][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 281.660781][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.916'. [ 281.722947][ T8765] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 281.841047][ T30] audit: type=1326 audit(1774599491.433:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 281.956261][ T30] audit: type=1326 audit(1774599491.433:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 282.282235][ T8769] netlink: 148 bytes leftover after parsing attributes in process `syz.3.919'. [ 282.346959][ T30] audit: type=1326 audit(1774599491.433:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 282.638356][ T30] audit: type=1326 audit(1774599491.433:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 282.700808][ T30] audit: type=1326 audit(1774599491.433:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 282.725532][ T8780] netlink: 'syz.2.920': attribute type 3 has an invalid length. [ 283.230956][ T30] audit: type=1326 audit(1774599491.433:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 283.282273][ T8784] lo: entered allmulticast mode [ 283.291506][ T30] audit: type=1326 audit(1774599492.693:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 283.316064][ T8784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.340790][ T30] audit: type=1326 audit(1774599492.693:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d339c799 code=0x7ffc0000 [ 283.424208][ T8787] netlink: 72 bytes leftover after parsing attributes in process `syz.3.923'. [ 283.464065][ T8787] netlink: 72 bytes leftover after parsing attributes in process `syz.3.923'. [ 283.485643][ T8788] hma(sha224): entered promiscuous mode [ 284.651813][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 284.740751][ T5926] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 284.900708][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 284.923905][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.945626][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.966047][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.997165][ T8817] netlink: 164 bytes leftover after parsing attributes in process `syz.2.933'. [ 285.016124][ T5926] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 285.030678][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.038729][ T5926] usb 4-1: Product: syz [ 285.052013][ T8817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.933'. [ 285.063870][ T5926] usb 4-1: Manufacturer: syz [ 285.068528][ T5926] usb 4-1: SerialNumber: syz [ 285.090734][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 285.250855][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 285.258248][ T29] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 285.268478][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.295951][ T29] usb 5-1: config 0 has no interface number 0 [ 285.305261][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 285.314882][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.323376][ T29] usb 5-1: Product: syz [ 285.327875][ T29] usb 5-1: Manufacturer: syz [ 285.332928][ T29] usb 5-1: SerialNumber: syz [ 285.343723][ T29] usb 5-1: config 0 descriptor?? [ 285.565356][ T29] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 285.578692][ T29] uvcvideo 5-1:0.31: No valid video chain found. [ 285.586797][ T5926] usb 4-1: USB disconnect, device number 25 [ 285.812532][ T8814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.826609][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.840079][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.884716][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.948658][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.038720][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.096055][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.118473][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 286.149522][ T8838] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 286.186150][ T8840] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 286.520536][ T8849] program syz.3.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.798143][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 287.023090][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 287.023403][ T8867] netlink: 'syz.0.942': attribute type 3 has an invalid length. [ 287.639830][ T24] usb 5-1: USB disconnect, device number 23 [ 288.282575][ T8888] netlink: 'syz.3.950': attribute type 3 has an invalid length. [ 288.760807][ T24] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 288.776332][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 288.949759][ T24] usb 5-1: no configurations [ 288.956731][ T24] usb 5-1: can't read configurations, error -22 [ 289.009824][ T5898] IPVS: starting estimator thread 0... [ 289.110805][ T8907] IPVS: using max 38 ests per chain, 91200 per kthread [ 289.132165][ T24] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 289.179622][ T8909] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 289.311692][ T24] usb 5-1: no configurations [ 289.316761][ T24] usb 5-1: can't read configurations, error -22 [ 289.346458][ T24] usb usb5-port1: attempt power cycle [ 289.490733][ T29] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 289.585645][ T30] audit: type=1326 audit(1774599499.263:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 289.611304][ T30] audit: type=1326 audit(1774599499.273:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 289.878633][ T30] audit: type=1326 audit(1774599499.273:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 289.890902][ T29] usb 2-1: device descriptor read/64, error -71 [ 289.908366][ T24] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 290.646351][ T24] usb 5-1: no configurations [ 290.671835][ T24] usb 5-1: can't read configurations, error -22 [ 290.697510][ T30] audit: type=1326 audit(1774599499.273:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 290.721493][ T29] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 290.780736][ T30] audit: type=1326 audit(1774599500.333:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 290.870784][ T30] audit: type=1326 audit(1774599500.333:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 290.900756][ T29] usb 2-1: device descriptor read/64, error -71 [ 290.907467][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 290.981951][ T24] usb 5-1: no configurations [ 290.986872][ T24] usb 5-1: can't read configurations, error -22 [ 290.993329][ T30] audit: type=1326 audit(1774599500.503:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 291.012227][ T24] usb usb5-port1: unable to enumerate USB device [ 291.062050][ T29] usb usb2-port1: attempt power cycle [ 291.400750][ T29] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 291.441606][ T29] usb 2-1: device descriptor read/8, error -71 [ 291.690745][ T29] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 291.741519][ T29] usb 2-1: device descriptor read/8, error -71 [ 291.868722][ T29] usb usb2-port1: unable to enumerate USB device [ 291.992498][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 292.040756][ T5926] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 292.106908][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 292.117493][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 292.217608][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 292.240859][ T5926] usb 1-1: can't read configurations, error -61 [ 292.434518][ T5926] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 292.625308][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 292.635653][ T5926] usb 1-1: can't read configurations, error -61 [ 292.655573][ T5926] usb usb1-port1: attempt power cycle [ 292.699673][ T8964] netlink: 'syz.1.971': attribute type 3 has an invalid length. [ 292.741082][ T797] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 292.800970][ T5937] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 292.913213][ T797] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.931005][ T797] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.947961][ T797] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 292.958370][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 292.967243][ T797] usb 3-1: Product: syz [ 292.972280][ T797] usb 3-1: Manufacturer: syz [ 292.977047][ T797] usb 3-1: SerialNumber: syz [ 292.983704][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.998247][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 293.010846][ T5926] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 293.020996][ T5937] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 293.055906][ T5937] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 293.073800][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 293.082599][ T5926] usb 1-1: can't read configurations, error -61 [ 293.092514][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.102032][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.113057][ T5937] usb 4-1: Product: syz [ 293.117277][ T5937] usb 4-1: Manufacturer: syz [ 293.122276][ T5937] usb 4-1: SerialNumber: syz [ 293.136799][ T8960] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 293.147660][ T5937] cdc_mbim 4-1:1.0: skipping garbage [ 293.240784][ T5926] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 293.256786][ T29] usb 3-1: USB disconnect, device number 26 [ 293.286735][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 293.300717][ T5926] usb 1-1: can't read configurations, error -61 [ 293.323461][ T5926] usb usb1-port1: unable to enumerate USB device [ 293.342199][ T8968] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8968 comm: syz.4.974) [ 293.388463][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'. [ 293.400498][ T30] audit: type=1800 audit(1774599503.113:89): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.974" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27938 res=0 errno=0 [ 293.437149][ T8960] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 293.449218][ T8960] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 294.046495][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 294.268650][ T8981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.976'. [ 294.334203][ T8983] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 294.426472][ T8980] syzkaller0: entered promiscuous mode [ 294.437215][ T8980] syzkaller0: entered allmulticast mode [ 295.890715][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 297.344961][ T8993] syzkaller1: entered promiscuous mode [ 297.350514][ T8993] syzkaller1: entered allmulticast mode [ 297.382811][ T5937] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 297.430834][ T5937] cdc_mbim 4-1:1.0: bind() failure [ 297.455727][ T5937] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 297.470215][ T5937] cdc_ncm 4-1:1.1: bind() failure [ 297.502734][ T5937] usb 4-1: USB disconnect, device number 26 [ 297.594584][ T9001] binder: 9000:9001 ioctl c0306201 2000000003c0 returned -14 [ 297.636834][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 297.677972][ T9007] xt_socket: unknown flags 0xc [ 298.276188][ T9029] netlink: 'syz.3.985': attribute type 3 has an invalid length. [ 298.450272][ T9028] netlink: 164 bytes leftover after parsing attributes in process `syz.4.989'. [ 298.490467][ T9028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.989'. [ 298.847960][ T9035] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 299.428491][ T9045] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 299.491847][ T9050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.667636][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 299.845043][ T9055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.998'. [ 300.124327][ T30] audit: type=1326 audit(1774599509.863:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.182784][ T9057] program syz.2.999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.197903][ T30] audit: type=1326 audit(1774599509.893:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.384227][ T30] audit: type=1326 audit(1774599509.893:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.493102][ T30] audit: type=1326 audit(1774599509.893:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.549082][ T30] audit: type=1326 audit(1774599509.893:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.662265][ T30] audit: type=1326 audit(1774599509.893:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.763738][ T30] audit: type=1326 audit(1774599509.893:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.814136][ T30] audit: type=1326 audit(1774599509.893:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.877879][ T30] audit: type=1326 audit(1774599509.893:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 300.958376][ T30] audit: type=1326 audit(1774599509.893:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 301.449422][ T9076] netlink: 'syz.1.1005': attribute type 3 has an invalid length. [ 301.589917][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 301.630717][ T9081] fuse: Unknown parameter '00000000000000000000' [ 303.371684][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'. [ 303.391053][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 303.504540][ T9107] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1015'. [ 303.803941][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 305.786617][ T9142] netlink: 'syz.0.1021': attribute type 3 has an invalid length. [ 306.162303][ T9151] loop5: detected capacity change from 0 to 7 [ 306.174070][ T5830] Dev loop5: unable to read RDB block 7 [ 306.179677][ T5830] loop5: unable to read partition table [ 306.373359][ T5830] loop5: partition table beyond EOD, truncated [ 306.440151][ T9151] Dev loop5: unable to read RDB block 7 [ 306.450895][ T9151] loop5: unable to read partition table [ 306.456906][ T9151] loop5: partition table beyond EOD, truncated [ 306.463702][ T9151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.680273][ T5926] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 306.891993][ T5926] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 306.920738][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.960541][ T5926] usb 3-1: Product: syz [ 306.971872][ T5926] usb 3-1: Manufacturer: syz [ 306.986936][ T5926] usb 3-1: SerialNumber: syz [ 307.037708][ T5926] usb 3-1: config 0 descriptor?? [ 308.018025][ T9156] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 308.510628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 308.690783][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.721812][ T5926] usb 3-1: Firmware version (0.0) predates our first public release. [ 308.738164][ T5926] usb 3-1: Please update to version 0.2 or newer [ 308.887683][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.887744][ T29] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 308.887769][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.913666][ T29] usb 2-1: config 0 descriptor?? [ 308.919022][ T29] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 309.013669][ T9187] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1039'. [ 309.142207][ T5926] usb 3-1: USB disconnect, device number 27 [ 309.201961][ T9172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.217468][ T9172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.240189][ T29] usb 2-1: USB disconnect, device number 27 [ 309.287543][ T9188] vlan2: entered allmulticast mode [ 309.293044][ T9188] bridge0: entered allmulticast mode [ 309.301017][ T9188] batman_adv: batadv0: Adding interface: vlan2 [ 309.308083][ T9188] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.337356][ T9188] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 309.355546][ T9194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.731360][ T5926] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 309.894933][ T5926] usb 3-1: device descriptor read/64, error -71 [ 309.960696][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 310.087801][ T9217] netlink: 'syz.3.1044': attribute type 3 has an invalid length. [ 310.121102][ T24] usb 1-1: device descriptor read/64, error -71 [ 310.182037][ T5926] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 310.330767][ T5926] usb 3-1: device descriptor read/64, error -71 [ 310.410732][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 310.441122][ T5926] usb usb3-port1: attempt power cycle [ 310.570718][ T24] usb 1-1: device descriptor read/64, error -71 [ 310.756945][ T24] usb usb1-port1: attempt power cycle [ 310.780875][ T5926] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 310.811541][ T5926] usb 3-1: device descriptor read/8, error -71 [ 311.094446][ T5926] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 311.122166][ T5926] usb 3-1: device descriptor read/8, error -71 [ 311.150690][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 311.190288][ T24] usb 1-1: device descriptor read/8, error -71 [ 311.241339][ T5926] usb usb3-port1: unable to enumerate USB device [ 311.460724][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 311.499858][ T24] usb 1-1: device descriptor read/8, error -71 [ 311.642570][ T24] usb usb1-port1: unable to enumerate USB device [ 312.055701][ T9242] syzkaller1: entered promiscuous mode [ 312.068549][ T9242] syzkaller1: entered allmulticast mode [ 312.095734][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 312.261170][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 312.274865][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 312.306849][ T24] usb 5-1: config 0 has no interface number 0 [ 312.323778][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 312.336927][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 312.347394][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.386073][ T24] usb 5-1: Product: syz [ 312.390322][ T24] usb 5-1: Manufacturer: syz [ 312.395055][ T24] usb 5-1: SerialNumber: syz [ 312.419088][ T24] usb 5-1: config 0 descriptor?? [ 312.427749][ T9240] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 312.698182][ T9240] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 313.499740][ T9268] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 313.643609][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.657405][ T9268] batadv0: entered promiscuous mode [ 313.674856][ T9268] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 314.328854][ T9276] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 314.519352][ T9286] netlink: 'syz.1.1064': attribute type 3 has an invalid length. [ 314.837546][ T9292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1068'. [ 315.174101][ T9298] bridge0: left allmulticast mode [ 315.215383][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 315.233025][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 315.245726][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 315.591282][ T24] usb 5-1: USB disconnect, device number 28 [ 316.202627][ T9308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.207142][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.213574][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.344454][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1080'. [ 317.423415][ T5937] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 317.588224][ T5937] usb 2-1: config 1 interface 0 has no altsetting 0 [ 317.598204][ T5937] usb 2-1: string descriptor 0 read error: -22 [ 317.607852][ T5937] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.40 [ 317.634407][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.902916][ T9334] xt_CT: No such helper "snmp" [ 318.050712][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 318.084651][ T9339] syzkaller0: entered promiscuous mode [ 318.092115][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.099148][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.148829][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.180739][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.210756][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 318.235443][ T24] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 318.273059][ T24] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 318.288671][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.299283][ T24] usb 4-1: config 0 has no interface number 0 [ 318.303464][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.320353][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.326240][ T24] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 318.349423][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.372043][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.379187][ T24] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 318.412654][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 318.422588][ T24] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 318.430185][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.439222][ T24] usb 4-1: Product: syz [ 318.445341][ T24] usb 4-1: Manufacturer: syz [ 318.467092][ T24] usb 4-1: config 0 descriptor?? [ 318.477371][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.504208][ T5937] elecom 0003:056E:011C.000A: unknown main item tag 0x0 [ 318.539077][ T9341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.546914][ T9341] IPv6: NLM_F_CREATE should be set when creating new route [ 318.611118][ T9341] lo: entered allmulticast mode [ 318.661434][ T9343] FAULT_INJECTION: forcing a failure. [ 318.661434][ T9343] name failslab, interval 1, probability 0, space 0, times 0 [ 318.666584][ T9341] tunl0: entered allmulticast mode [ 318.696512][ T24] usb 4-1: USB disconnect, device number 27 [ 318.729536][ T5937] elecom 0003:056E:011C.000A: hidraw0: USB HID v0.04 Device [HID 056e:011c] on usb-dummy_hcd.1-1/input0 [ 318.748821][ T9341] gre0: entered allmulticast mode [ 318.767980][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: syz.0.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.768013][ T9343] Tainted: [L]=SOFTLOCKUP [ 318.768021][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.768033][ T9343] Call Trace: [ 318.768041][ T9343] [ 318.768050][ T9343] dump_stack_lvl+0xe8/0x150 [ 318.768085][ T9343] should_fail_ex+0x412/0x560 [ 318.768119][ T9343] should_failslab+0xa8/0x100 [ 318.768149][ T9343] __kmalloc_cache_noprof+0x88/0x660 [ 318.768173][ T9343] ? vb2_vmalloc_get_userptr+0x5f/0x450 [ 318.768206][ T9343] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 318.768239][ T9343] vb2_vmalloc_get_userptr+0x5f/0x450 [ 318.768279][ T9343] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 318.768312][ T9343] __buf_prepare+0xe90/0x4a20 [ 318.768358][ T9343] ? __pfx___buf_prepare+0x10/0x10 [ 318.768385][ T9343] ? is_bpf_text_address+0x26/0x2b0 [ 318.768412][ T9343] ? is_bpf_text_address+0x292/0x2b0 [ 318.768433][ T9343] ? is_bpf_text_address+0x26/0x2b0 [ 318.768456][ T9343] ? kernel_text_address+0xa5/0xe0 [ 318.768478][ T9343] ? __kernel_text_address+0xd/0x30 [ 318.768499][ T9343] ? unwind_get_return_address+0x4d/0x90 [ 318.768529][ T9343] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.768551][ T9343] ? arch_stack_walk+0xfb/0x150 [ 318.768585][ T9343] ? __lock_acquire+0x6b5/0x2cf0 [ 318.768618][ T9343] ? stack_trace_save+0xa9/0x100 [ 318.768640][ T9343] ? __pfx_stack_trace_save+0x10/0x10 [ 318.768660][ T9343] ? kasan_save_free_info+0x46/0x50 [ 318.768695][ T9343] ? stack_depot_save_flags+0x33/0x810 [ 318.768786][ T9343] vb2_core_prepare_buf+0xad/0x2c0 [ 318.768819][ T9343] __video_do_ioctl+0xadb/0xca0 [ 318.768859][ T9343] ? __pfx___video_do_ioctl+0x10/0x10 [ 318.768904][ T9343] video_usercopy+0x876/0x14b0 [ 318.768942][ T9343] ? __pfx___video_do_ioctl+0x10/0x10 [ 318.768976][ T9343] ? __pfx_video_usercopy+0x10/0x10 [ 318.769017][ T9343] ? __fget_files+0x2a/0x420 [ 318.769051][ T9343] ? __fget_files+0x2a/0x420 [ 318.769079][ T9343] ? __fget_files+0x3a0/0x420 [ 318.769112][ T9343] v4l2_ioctl+0x18d/0x1e0 [ 318.769140][ T9343] ? __pfx_v4l2_ioctl+0x10/0x10 [ 318.769168][ T9343] __se_sys_ioctl+0xfc/0x170 [ 318.769195][ T9343] do_syscall_64+0x14d/0xf80 [ 318.769219][ T9343] ? trace_irq_disable+0x3b/0x150 [ 318.769238][ T9343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.769260][ T9343] ? clear_bhb_loop+0x40/0x90 [ 318.769294][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.769315][ T9343] RIP: 0033:0x7fa9c8f9c799 [ 318.769335][ T9343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.769353][ T9343] RSP: 002b:00007fa9c9df2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.769375][ T9343] RAX: ffffffffffffffda RBX: 00007fa9c9215fa0 RCX: 00007fa9c8f9c799 [ 318.769391][ T9343] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 318.769404][ T9343] RBP: 00007fa9c9df2090 R08: 0000000000000000 R09: 0000000000000000 [ 318.769416][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.769427][ T9343] R13: 00007fa9c9216038 R14: 00007fa9c9215fa0 R15: 00007fa9c933fa48 [ 318.769460][ T9343] [ 319.452422][ T5937] usb 2-1: USB disconnect, device number 28 [ 319.492576][ T9341] gretap0: entered allmulticast mode [ 319.599169][ T9341] ip_vti0: entered allmulticast mode [ 319.666899][ T9348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'. [ 319.681609][ T9341] ip6_vti0: entered allmulticast mode [ 319.699707][ T9341] sit0: entered allmulticast mode [ 319.710856][ T9348] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 319.730695][ T9341] ip6tnl0: entered allmulticast mode [ 319.754064][ T9341] ip6gre0: entered allmulticast mode [ 319.834722][ T9341] syz_tun: entered allmulticast mode [ 319.957357][ T9353] netlink: 'syz.4.1089': attribute type 3 has an invalid length. [ 319.964807][ T9341] ip6gretap0: entered allmulticast mode [ 320.021274][ T9354] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1090'. [ 320.022152][ T9341] bridge0: entered allmulticast mode [ 320.101563][ T9341] vcan0: entered allmulticast mode [ 320.108072][ T9362] x_tables: duplicate underflow at hook 4 [ 320.115305][ T9362] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 320.230546][ T9341] bond0: entered allmulticast mode [ 320.257908][ T9341] bond_slave_0: entered allmulticast mode [ 320.350844][ T9341] bond_slave_1: entered allmulticast mode [ 320.376225][ T9341] batadv0: entered allmulticast mode [ 320.526418][ T9341] team0: entered allmulticast mode [ 320.555597][ T9341] team_slave_0: entered allmulticast mode [ 320.576508][ T9341] team_slave_1: entered allmulticast mode [ 320.603185][ T9341] dummy0: entered allmulticast mode [ 320.709864][ T9341] nlmon0: entered allmulticast mode [ 320.792965][ T9341] caif0: entered allmulticast mode [ 320.831387][ T9341] vxcan0: entered allmulticast mode [ 320.837881][ T9341] vxcan1: entered allmulticast mode [ 320.876618][ T9341] veth0: entered allmulticast mode [ 320.907011][ T9341] veth1: entered allmulticast mode [ 321.067914][ T9341] wg0: entered allmulticast mode [ 321.104170][ T9341] wg1: left promiscuous mode [ 321.133237][ T9341] wg1: entered allmulticast mode [ 321.229384][ T9341] wg2: entered allmulticast mode [ 321.238547][ T9341] veth0_to_bridge: entered allmulticast mode [ 321.304552][ T9341] veth1_to_bridge: entered allmulticast mode [ 321.361530][ T9341] veth0_to_bond: entered allmulticast mode [ 321.389779][ T9341] veth1_to_bond: entered allmulticast mode [ 321.411500][ T9341] veth0_to_team: entered allmulticast mode [ 321.446258][ T9341] veth1_to_team: entered allmulticast mode [ 321.481820][ T9341] veth0_to_batadv: entered allmulticast mode [ 321.507729][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.539456][ T9341] batadv_slave_0: entered allmulticast mode [ 321.573587][ T9341] veth1_to_batadv: entered allmulticast mode [ 321.620075][ T9341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.653767][ T9341] batadv_slave_1: entered allmulticast mode [ 321.682096][ T9341] xfrm0: entered allmulticast mode [ 321.713867][ T9341] veth0_to_hsr: entered allmulticast mode [ 321.753514][ T9341] hsr_slave_0: entered allmulticast mode [ 321.781931][ T9341] veth1_to_hsr: entered allmulticast mode [ 321.812313][ T9341] hsr_slave_1: entered allmulticast mode [ 321.852828][ T9341] hsr0: entered allmulticast mode [ 321.872274][ T9341] veth1_virt_wifi: entered allmulticast mode [ 321.893217][ T9341] veth0_virt_wifi: entered allmulticast mode [ 321.912713][ T9341] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 321.931279][ T9341] veth1_vlan: entered allmulticast mode [ 321.967955][ T9341] vlan0: entered allmulticast mode [ 321.977952][ T9341] vlan1: entered allmulticast mode [ 321.994167][ T9341] macvlan0: entered allmulticast mode [ 322.013221][ T9341] macvlan1: entered allmulticast mode [ 322.031766][ T9341] ipvlan0: entered allmulticast mode [ 322.037836][ T9341] ipvlan1: left promiscuous mode [ 322.054518][ T9341] veth1_macvtap: entered allmulticast mode [ 322.066391][ T9341] veth0_macvtap: entered allmulticast mode [ 322.077113][ T9341] macvtap0: entered allmulticast mode [ 322.086256][ T9341] macsec0: entered allmulticast mode [ 322.097159][ T9341] geneve0: entered allmulticast mode [ 322.107300][ T9341] geneve1: entered allmulticast mode [ 322.118739][ T9341] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 322.133757][ T9341] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 322.144767][ T9341] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 322.156886][ T9341] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 322.171200][ T9341] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 322.180322][ T9341] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 322.189183][ T9341] batadv0.5: entered allmulticast mode [ 322.195796][ T9341] veth2: entered allmulticast mode [ 322.201932][ T9341] veth3: entered allmulticast mode [ 322.207874][ T9341] bond1: left promiscuous mode [ 322.215261][ T9341] bridge1: left promiscuous mode [ 322.220493][ T9341] bond1: entered allmulticast mode [ 322.227021][ T9341] bridge1: entered allmulticast mode [ 322.237094][ T9341] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 322.244805][ T9341] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 322.254773][ T9341] veth4: entered allmulticast mode [ 322.260164][ T9341] veth5: entered allmulticast mode [ 322.266992][ T9341] bond2: entered allmulticast mode [ 322.274602][ T9341] ip6gre1: entered allmulticast mode [ 322.282543][ T9341] bond3: left promiscuous mode [ 322.287520][ T9341] bridge2: left promiscuous mode [ 322.293599][ T9341] bond3: entered allmulticast mode [ 322.298762][ T9341] bridge2: entered allmulticast mode [ 322.309206][ T9341] hma(sha224): entered allmulticast mode [ 322.341743][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.413604][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.440510][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.488838][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.816737][ T9385] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 322.846582][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 323.092824][ T9385] bond4: entered promiscuous mode [ 323.098326][ T9385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.560121][ T5937] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 323.743141][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.770745][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.802055][ T9405] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1107'. [ 323.802905][ T5937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.841947][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.850025][ T5937] usb 4-1: Product: syz [ 323.883909][ T5937] usb 4-1: Manufacturer: syz [ 323.909425][ T5937] usb 4-1: SerialNumber: syz [ 324.337776][ T5937] usb 4-1: 0:2 : does not exist [ 324.523927][ T9415] bridge0: port 3(vlan2) entered blocking state [ 324.531601][ T9415] bridge0: port 3(vlan2) entered disabled state [ 324.538297][ T9415] vlan2: entered allmulticast mode [ 324.544299][ T9415] bond0: entered allmulticast mode [ 324.549543][ T9415] bond_slave_0: entered allmulticast mode [ 324.556870][ T9415] bond_slave_1: entered allmulticast mode [ 324.564153][ T9415] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 324.578716][ T9415] vlan2: entered promiscuous mode [ 324.584399][ T9415] bond0: entered promiscuous mode [ 324.635759][ T9420] binder: 9419:9420 ioctl c0306201 200000000100 returned -11 [ 324.753266][ T29] usb 4-1: USB disconnect, device number 28 [ 324.873060][ T9426] kvm: user requested TSC rate below hardware speed [ 324.881716][ T9426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 324.900702][ T5937] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 325.070746][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 325.088808][ T5937] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 325.100573][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.129533][ T5937] usb 1-1: config 0 has no interface number 0 [ 325.135898][ T5937] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 325.156096][ T5937] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 325.170172][ T5937] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 325.187143][ T5937] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 325.210704][ T5937] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 325.233414][ T5937] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 325.268087][ T5937] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 325.292304][ T5937] usb 1-1: config 0 interface 239 has no altsetting 0 [ 325.314547][ T5937] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 325.325423][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.334818][ T5937] usb 1-1: Product: syz [ 325.339138][ T5937] usb 1-1: Manufacturer: syz [ 325.344363][ T5937] usb 1-1: SerialNumber: syz [ 325.395322][ T5937] usb 1-1: config 0 descriptor?? [ 325.401437][ T9420] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 325.420157][ T5898] hid-generic 0008:0091:0009.000B: reserved main item tag 0xd [ 325.430944][ T9420] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 325.447547][ T5898] hid-generic 0008:0091:0009.000B: item fetching failed at offset 28/32 [ 325.461509][ T5898] hid-generic 0008:0091:0009.000B: probe with driver hid-generic failed with error -22 [ 325.500790][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 325.620826][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 325.663812][ T5898] usb 1-1: USB disconnect, device number 26 [ 325.695025][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 325.725932][ T29] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 325.759013][ T29] usb 3-1: config 0 has no interface number 0 [ 325.792764][ T29] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.836365][ T29] usb 3-1: config 0 interface 85 has no altsetting 0 [ 325.859916][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 325.872068][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.885808][ T29] usb 3-1: Product: syz [ 325.890056][ T29] usb 3-1: Manufacturer: syz [ 325.903563][ T29] usb 3-1: SerialNumber: syz [ 325.948298][ T29] usb 3-1: config 0 descriptor?? [ 326.307452][ T9461] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1125'. [ 326.318207][ T9461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1125'. [ 326.625341][ T29] appletouch 3-1:0.85: Geyser mode initialized. [ 326.650044][ T29] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 326.788317][ T9464] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 326.852656][ T5937] usb 3-1: USB disconnect, device number 32 [ 326.911942][ T5937] appletouch 3-1:0.85: input: appletouch disconnected [ 326.984167][ T9471] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 327.012422][ T9464] bond4: entered promiscuous mode [ 327.017854][ T9464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.053546][ T9470] bond4: (slave bridge2): making interface the new active one [ 327.061585][ T9470] bridge2: entered promiscuous mode [ 327.067878][ T9470] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 327.539831][ T9487] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.652298][ T9487] macvlan2: entered allmulticast mode [ 327.675217][ T9487] team0: Port device macvlan2 added [ 328.252428][ T9492] netlink: 'syz.4.1132': attribute type 3 has an invalid length. [ 328.559140][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1137'. [ 329.232296][ T9515] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1141'. [ 329.520765][ T5937] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 329.682862][ T5937] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 329.694981][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.707849][ T5937] usb 4-1: config 0 descriptor?? [ 329.736873][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1144'. [ 329.753657][ T5937] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 329.898267][ T9524] bridge0: port 4(batadv0) entered disabled state [ 329.917613][ T9524] bond0: left allmulticast mode [ 329.923063][ T9524] bond_slave_0: left allmulticast mode [ 329.929111][ T5937] gp8psk: usb in 128 operation failed. [ 329.936900][ T9524] bond_slave_1: left allmulticast mode [ 329.958209][ T9524] bond1: left allmulticast mode [ 329.975969][ T9524] bridge0: port 3(bond0) entered disabled state [ 330.012018][ T9524] bridge_slave_1: left allmulticast mode [ 330.017934][ T9524] bridge_slave_1: left promiscuous mode [ 330.044625][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.065005][ T9529] fuse: Bad value for 'fd' [ 330.098668][ T9524] bridge_slave_0: left allmulticast mode [ 330.104587][ T9524] bridge_slave_0: left promiscuous mode [ 330.110462][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.394101][ T9532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.460483][ T9532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.528053][ T9532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.591280][ T9540] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1150'. [ 331.110611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 331.228652][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 331.555249][ T9568] tipc: Enabling of bearer rejected, failed to enable media [ 332.007101][ T5937] gp8psk: usb in 137 operation failed. [ 332.025168][ T5937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 332.355259][ T5937] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 332.388590][ T9576] syzkaller1: entered promiscuous mode [ 332.404307][ T9576] syzkaller1: entered allmulticast mode [ 332.621920][ T29] usb 4-1: USB disconnect, device number 29 [ 333.044474][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 333.384074][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 333.575463][ T29] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 333.588768][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.615562][ T29] usb 3-1: config 0 has no interface number 0 [ 333.675226][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 333.700952][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.727140][ T29] usb 3-1: Product: syz [ 333.748354][ T29] usb 3-1: Manufacturer: syz [ 333.771256][ T29] usb 3-1: SerialNumber: syz [ 333.866309][ T29] usb 3-1: config 0 descriptor?? [ 333.877002][ T29] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 334.086953][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 334.086974][ T30] audit: type=1326 audit(1774599543.823:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.2.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x0 [ 334.237486][ T5937] usb 3-1: USB disconnect, device number 33 [ 334.387365][ T9592] syz.1.1165 (9592): drop_caches: 2 [ 334.907091][ T9620] xt_socket: unknown flags 0xc [ 334.935342][ T9616] netlink: 'syz.0.1172': attribute type 3 has an invalid length. [ 335.339788][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 335.348929][ T9634] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 335.380731][ T5926] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 335.532789][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 335.558020][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.591978][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.606518][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.619652][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.632726][ T5926] usb 3-1: Product: syz [ 335.637088][ T5926] usb 3-1: Manufacturer: syz [ 335.642257][ T5926] usb 3-1: SerialNumber: syz [ 335.861579][ T5926] usb 3-1: skipping empty audio interface (v1) [ 336.017490][ T5926] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 336.059373][ T5926] usb 3-1: USB disconnect, device number 34 [ 336.121726][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.240781][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 336.391613][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 336.405253][ T29] usb 1-1: config 0 has no interfaces? [ 336.433876][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 336.491360][ T5898] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 336.546721][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 336.626551][ T29] usb 1-1: Manufacturer: syz [ 336.650666][ T5898] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 336.676203][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 336.713933][ T29] usb 1-1: config 0 descriptor?? [ 336.745526][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 336.748214][ T5898] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 336.775986][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 336.810969][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.872237][ T5926] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 336.901888][ T5898] usb 5-1: Product: syz [ 336.906179][ T5898] usb 5-1: Manufacturer: syz [ 336.911334][ T5898] usb 5-1: SerialNumber: syz [ 336.918909][ T5898] usb 5-1: config 0 descriptor?? [ 337.061717][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 337.074746][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'. [ 337.085802][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 337.129022][ T9652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 337.161213][ T5926] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 337.180456][ T5926] usb 4-1: config 0 has no interface number 0 [ 337.188735][ T5926] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.228503][ T5926] usb 4-1: config 0 interface 85 has no altsetting 0 [ 337.258210][ T5926] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 337.268333][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.283072][ T5926] usb 4-1: Product: syz [ 337.287348][ T5926] usb 4-1: Manufacturer: syz [ 337.307195][ T5926] usb 4-1: SerialNumber: syz [ 337.358549][ T5926] usb 4-1: config 0 descriptor?? [ 337.481910][ T5898] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 337.573061][ T5926] appletouch 4-1:0.85: Failed to read mode from device. [ 337.580553][ T5926] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 337.661407][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.679656][ T5898] usb 2-1: config 0 has no interfaces? [ 337.724041][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.734543][ T5898] usb 2-1: config 0 has no interfaces? [ 337.743101][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.753497][ T5898] usb 2-1: config 0 has no interfaces? [ 337.778550][ T5898] usb 2-1: string descriptor 0 read error: -22 [ 337.785771][ T5898] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 337.798858][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.821368][ T5898] usb 2-1: config 0 descriptor?? [ 337.986184][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.995636][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.013860][ T5926] usb 4-1: USB disconnect, device number 30 [ 338.035040][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 338.111130][ T5937] usb 2-1: USB disconnect, device number 29 [ 339.123639][ T5898] usb 1-1: USB disconnect, device number 27 [ 339.149787][ T5937] usb 5-1: USB disconnect, device number 29 [ 339.207678][ T30] audit: type=1326 audit(1774599548.933:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 339.340497][ T30] audit: type=1326 audit(1774599548.943:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 339.509363][ T30] audit: type=1326 audit(1774599549.123:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 339.698498][ T9694] openvswitch: netlink: Message has 8 unknown bytes. [ 339.729150][ T30] audit: type=1326 audit(1774599549.123:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 339.769982][ T30] audit: type=1326 audit(1774599549.123:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 339.842241][ T30] audit: type=1326 audit(1774599549.123:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f00fa758bec code=0x7ffc0000 [ 339.889075][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 339.906926][ T9692] team0: Port device batadv1 added [ 340.025671][ T30] audit: type=1326 audit(1774599549.123:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f00fa758c4e code=0x7ffc0000 [ 340.070886][ T30] audit: type=1326 audit(1774599549.123:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00fa79c42b code=0x7ffc0000 [ 340.103747][ T9709] tipc: Enabling not permitted [ 340.202635][ T9709] tipc: Enabling of bearer rejected, failed to enable media [ 340.212956][ T30] audit: type=1326 audit(1774599549.123:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 340.236053][ T30] audit: type=1326 audit(1774599549.123:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00fa79c799 code=0x7ffc0000 [ 340.906009][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1202'. [ 341.480703][ T5937] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 341.650754][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 341.696298][ T5937] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 341.726503][ T5937] usb 5-1: config 0 has no interface number 0 [ 341.774049][ T5937] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 341.794080][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.821071][ T5937] usb 5-1: Product: syz [ 341.843853][ T5937] usb 5-1: Manufacturer: syz [ 341.866858][ T5937] usb 5-1: SerialNumber: syz [ 341.888123][ T5937] usb 5-1: config 0 descriptor?? [ 341.918132][ T5937] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.165098][ T5937] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 342.330772][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 14 [ 342.371109][ T5937] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 343.581832][ T9760] netlink: 'syz.3.1218': attribute type 39 has an invalid length. [ 343.655941][ T9762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.253362][ T9782] x_tables: duplicate underflow at hook 4 [ 344.260910][ T9782] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 344.604072][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 344.605399][ T24] usb 5-1: USB disconnect, device number 30 [ 344.628585][ T9787] ip6t_srh: unknown srh invflags 4000 [ 344.636527][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 344.705022][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 344.735090][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1229'. [ 344.745074][ T24] quatech2 5-1:0.51: device disconnected [ 344.910676][ T5937] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 345.061782][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 345.092743][ T5937] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 345.113602][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.143924][ T5937] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 345.154757][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.163252][ T5937] usb 3-1: Product: syz [ 345.168841][ T5937] usb 3-1: Manufacturer: syz [ 345.175090][ T5937] usb 3-1: SerialNumber: syz [ 345.195436][ T5937] usb 3-1: config 0 descriptor?? [ 345.214218][ T5937] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 345.231337][ T9801] xt_socket: unknown flags 0xc [ 345.932055][ T5926] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 346.093899][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.105534][ T5926] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 346.135817][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.166769][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 346.177983][ T5926] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 346.212283][ T5926] usb 5-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 346.258948][ T5926] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.424565][ T5926] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 346.483730][ T29] usb 5-1: USB disconnect, device number 31 [ 346.542391][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 346.700746][ T24] usb 4-1: device descriptor read/64, error -71 [ 346.940714][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 347.041530][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.056744][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.073563][ T24] usb 4-1: device descriptor read/64, error -71 [ 347.192530][ T24] usb usb4-port1: attempt power cycle [ 347.286763][ T9787] xt_TCPMSS: Only works on TCP SYN packets [ 347.295156][ T5937] gspca_sunplus: reg_r err -71 [ 347.316171][ T5937] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 347.338133][ T5937] usb 3-1: USB disconnect, device number 35 [ 347.545546][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 347.571432][ T24] usb 4-1: device descriptor read/8, error -71 [ 347.820797][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 347.820797][ T5937] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 347.861717][ T24] usb 4-1: device descriptor read/8, error -71 [ 347.980924][ T24] usb usb4-port1: unable to enumerate USB device [ 348.075865][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.084860][ T5937] usb 5-1: config 1 has an invalid interface descriptor of length 3, skipping [ 348.095153][ T5937] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 348.105888][ T5937] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 348.141456][ T5937] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 348.151540][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.189777][ T5937] usb 5-1: Product: syz [ 348.216978][ T5937] usb 5-1: Manufacturer: syz [ 348.233892][ T5937] usb 5-1: SerialNumber: syz [ 348.271028][ T9827] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 348.280492][ T9827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1242'. [ 348.300833][ T9827] ipvlan1: entered promiscuous mode [ 348.325922][ T9827] bridge0: port 3(ipvlan1) entered blocking state [ 348.340930][ T9827] bridge0: port 3(ipvlan1) entered disabled state [ 348.351073][ T9827] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 348.519351][ T5937] usb 5-1: 0:2 : does not exist [ 348.738010][ T5937] usb 5-1: USB disconnect, device number 32 [ 349.011149][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 349.387568][ T9851] tipc: Started in network mode [ 349.395071][ T9851] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 349.434202][ T9851] tipc: Enabling of bearer rejected, failed to enable media [ 349.770330][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 349.770345][ T30] audit: type=1326 audit(1774599559.503:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 349.850341][ T30] audit: type=1326 audit(1774599559.543:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 349.930671][ T30] audit: type=1326 audit(1774599559.613:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 349.990001][ T30] audit: type=1326 audit(1774599559.623:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.043354][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1253'. [ 350.066698][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 350.093129][ T30] audit: type=1326 audit(1774599559.623:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.176321][ T30] audit: type=1326 audit(1774599559.623:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.238351][ T30] audit: type=1326 audit(1774599559.623:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.320322][ T30] audit: type=1326 audit(1774599559.623:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.396630][ T30] audit: type=1326 audit(1774599559.623:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.456663][ T30] audit: type=1326 audit(1774599559.623:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 350.535101][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 350.827978][ T9872] FAULT_INJECTION: forcing a failure. [ 350.827978][ T9872] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 350.844051][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.3.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.844088][ T9872] Tainted: [L]=SOFTLOCKUP [ 350.844095][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.844109][ T9872] Call Trace: [ 350.844118][ T9872] [ 350.844127][ T9872] dump_stack_lvl+0xe8/0x150 [ 350.844163][ T9872] should_fail_ex+0x412/0x560 [ 350.844200][ T9872] prepare_alloc_pages+0x22a/0x650 [ 350.844236][ T9872] __alloc_frozen_pages_noprof+0x12f/0x380 [ 350.844267][ T9872] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.844300][ T9872] ? __pfx_policy_nodemask+0x10/0x10 [ 350.844332][ T9872] ? __lock_acquire+0x6b5/0x2cf0 [ 350.844363][ T9872] alloc_pages_mpol+0x232/0x4a0 [ 350.844406][ T9872] vma_alloc_folio_noprof+0xea/0x210 [ 350.844437][ T9872] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 350.844463][ T9872] ? keyring_get_key_chunk+0x101/0x4d0 [ 350.844499][ T9872] do_pte_missing+0x1656/0x3490 [ 350.844545][ T9872] handle_mm_fault+0x1bec/0x3310 [ 350.844593][ T9872] ? handle_mm_fault+0xee/0x3310 [ 350.844635][ T9872] ? __pfx_handle_mm_fault+0x10/0x10 [ 350.844689][ T9872] ? lock_mm_and_find_vma+0xa7/0x340 [ 350.844716][ T9872] do_user_addr_fault+0x75b/0x1340 [ 350.844762][ T9872] exc_page_fault+0x6a/0xc0 [ 350.844789][ T9872] asm_exc_page_fault+0x26/0x30 [ 350.844809][ T9872] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 350.844841][ T9872] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 350.844859][ T9872] RSP: 0018:ffffc9000469f9f8 EFLAGS: 00050206 [ 350.844879][ T9872] RAX: ffffffff84acbc01 RBX: ffff88802bfc0000 RCX: 0000000000000c6b [ 350.844895][ T9872] RDX: 0000000000000000 RSI: ffff88802bfc0000 RDI: 0000200000004200 [ 350.844910][ T9872] RBP: ffffc9000469fb78 R08: ffff88802bfc0c6a R09: 1ffff110057f818d [ 350.844925][ T9872] R10: dffffc0000000000 R11: ffffed10057f818e R12: 1ffff920008d3faf [ 350.844939][ T9872] R13: 0000200000004200 R14: ffffc9000469fd88 R15: 0000000000000c6b [ 350.844962][ T9872] ? _copy_to_iter+0x191/0x17d0 [ 350.845001][ T9872] _copy_to_iter+0x255/0x17d0 [ 350.845036][ T9872] ? proc_keys_show+0x3c0/0xba0 [ 350.845056][ T9872] ? __pfx_proc_keys_show+0x10/0x10 [ 350.845083][ T9872] ? __pfx__copy_to_iter+0x10/0x10 [ 350.845136][ T9872] ? do_raw_spin_unlock+0xf5/0x210 [ 350.845161][ T9872] seq_read_iter+0xbf5/0xe10 [ 350.845207][ T9872] proc_reg_read_iter+0x1b7/0x280 [ 350.845230][ T9872] vfs_read+0x582/0xa70 [ 350.845250][ T9872] ? fdget_pos+0x246/0x320 [ 350.845267][ T9872] ? ksys_write+0x1e6/0x270 [ 350.845294][ T9872] ? __pfx_vfs_read+0x10/0x10 [ 350.845324][ T9872] ? __fget_files+0x2a/0x420 [ 350.845359][ T9872] ksys_read+0x150/0x270 [ 350.845384][ T9872] ? __pfx_ksys_read+0x10/0x10 [ 350.845426][ T9872] do_syscall_64+0x14d/0xf80 [ 350.845449][ T9872] ? trace_irq_disable+0x3b/0x150 [ 350.845465][ T9872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.845484][ T9872] ? clear_bhb_loop+0x40/0x90 [ 350.845508][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.845528][ T9872] RIP: 0033:0x7f50f579c799 [ 350.845547][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.845564][ T9872] RSP: 002b:00007f50f6719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.845585][ T9872] RAX: ffffffffffffffda RBX: 00007f50f5a15fa0 RCX: 00007f50f579c799 [ 350.845600][ T9872] RDX: 0000000000002020 RSI: 0000200000004200 RDI: 0000000000000003 [ 350.845613][ T9872] RBP: 00007f50f6719090 R08: 0000000000000000 R09: 0000000000000000 [ 350.845626][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.845639][ T9872] R13: 00007f50f5a16038 R14: 00007f50f5a15fa0 R15: 00007f50f5b3fa48 [ 350.845673][ T9872] [ 351.309554][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1258'. [ 351.335504][ T9872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1258'. [ 351.476109][ T9879] hub 1-0:1.0: USB hub found [ 351.482096][ T9879] hub 1-0:1.0: 1 port detected [ 351.590262][ T9886] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1262'. [ 351.676489][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 351.916704][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 351.991050][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 354.558816][ T9909] xt_CT: No such helper "snmp" [ 354.911884][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 355.260100][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 355.284085][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.306138][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.358789][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.392301][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.451859][ T24] usb 3-1: config 0 descriptor?? [ 355.480108][ T24] hub 3-1:0.0: USB hub found [ 355.679596][ T24] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 356.095839][ T24] hid_parser_main: 4007 callbacks suppressed [ 356.095869][ T24] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 356.257004][ T9935] binder: BINDER_SET_CONTEXT_MGR already set [ 356.272218][ T9935] binder: 9930:9935 ioctl 4018620d 200000004a80 returned -16 [ 356.427637][ T24] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 356.488781][ T9939] xt_socket: unknown flags 0xc [ 356.859036][ T24] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 357.101097][ T9951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.255173][ T24] usbhid 3-1:0.0: reset_resume error -1 [ 357.270795][ T9953] netlink: 'syz.4.1284': attribute type 10 has an invalid length. [ 357.290899][ T9953] batadv0: left promiscuous mode [ 357.295924][ T9953] batadv0: left allmulticast mode [ 357.341985][ T9953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.351856][ T9953] batadv0: entered promiscuous mode [ 357.357872][ T9953] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 357.571174][ T24] usb 3-1: USB disconnect, device number 36 [ 358.510754][ T5919] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 358.711134][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 358.725028][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.748653][ T5919] usb 3-1: config 0 has no interfaces? [ 358.766157][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 358.794480][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.825665][ T5919] usb 3-1: config 0 descriptor?? [ 358.871128][ T5926] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 359.061436][ T5919] usb 3-1: USB disconnect, device number 37 [ 359.330905][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.351380][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.421814][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 359.429460][ T5926] usb 2-1: can't read configurations, error -71 [ 360.930693][ T5926] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 361.045605][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 361.081463][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 361.097706][ T5926] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 361.119830][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.143582][ T5926] usb 2-1: Product: syz [ 361.156825][ T5926] usb 2-1: Manufacturer: syz [ 361.171950][ T5926] usb 2-1: SerialNumber: syz [ 361.193289][ T5926] usb 2-1: config 0 descriptor?? [ 361.309022][ T5926] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 362.452135][T10029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1306'. [ 362.729326][T10028] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3480241289 (13920965156 ns) > initial count (268 ns). Using initial count to start timer. [ 363.161246][ T5926] gspca_ov534_9: reg_r err -110 [ 363.217984][T10034] syzkaller1: entered promiscuous mode [ 363.225592][T10034] syzkaller1: entered allmulticast mode [ 363.460683][ T5926] gspca_ov534_9: Unknown sensor 0000 [ 363.460786][ T5926] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 364.064038][ T5926] usb 2-1: USB disconnect, device number 33 [ 364.332586][ T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 364.368030][T10052] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 364.386901][T10052] team0: Port device batadv1 added [ 364.583348][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 364.644147][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 364.653432][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 364.661714][ T29] usb 5-1: Product: syz [ 364.666665][ T29] usb 5-1: Manufacturer: syz [ 364.870647][ T29] usb 5-1: SerialNumber: syz [ 364.962136][ T29] usb 5-1: config 0 descriptor?? [ 364.995179][ T29] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 365.184464][ T29] gspca_sn9c2028: read1 error -32 [ 365.190311][ T29] gspca_sn9c2028: read1 error -32 [ 365.423436][T10065] xt_CT: No such helper "snmp" [ 365.749450][T10070] bridge0: left allmulticast mode [ 365.911107][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.942759][ T5898] usb 5-1: USB disconnect, device number 33 [ 365.963759][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.055472][T10081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1322'. [ 366.079149][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.785936][T10089] netlink: 'syz.4.1325': attribute type 39 has an invalid length. [ 367.208375][T10102] x_tables: duplicate underflow at hook 4 [ 367.216473][T10102] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 368.100765][ T5898] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 368.260872][ T5898] usb 4-1: device descriptor read/64, error -71 [ 368.537758][ T5898] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 368.597259][T10125] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 368.608423][T10125] team0: Port device batadv1 added [ 368.760697][ T5898] usb 4-1: device descriptor read/64, error -71 [ 368.881180][ T5898] usb usb4-port1: attempt power cycle [ 369.381298][ T5926] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 369.490673][ T5898] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 369.548727][T10129] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1340'. [ 369.560636][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 369.561244][ T5898] usb 4-1: device descriptor read/8, error -71 [ 369.574046][T10129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1340'. [ 369.574828][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.616671][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.639815][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 369.659849][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.679216][ T5926] usb 3-1: config 0 descriptor?? [ 369.688030][ T5926] hub 3-1:0.0: USB hub found [ 370.071766][ T5926] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 370.071921][ T5898] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 370.101512][ T5898] usb 4-1: device descriptor read/8, error -71 [ 370.192451][T10142] netlink: 'syz.4.1342': attribute type 3 has an invalid length. [ 370.202027][ T29] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 370.320610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 370.342216][ T5898] usb usb4-port1: unable to enumerate USB device [ 370.651069][ T29] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 370.659845][ T29] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 370.670049][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 370.681880][ T5926] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 370.694114][ T29] usb 1-1: config 1 has no interface number 0 [ 370.701100][ T29] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 370.726835][ T5926] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 370.742587][ T29] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 370.807840][ T29] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 370.825587][T10148] FAULT_INJECTION: forcing a failure. [ 370.825587][T10148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.850496][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.897877][T10148] CPU: 1 UID: 0 PID: 10148 Comm: syz.1.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.897911][T10148] Tainted: [L]=SOFTLOCKUP [ 370.897918][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.897934][T10148] Call Trace: [ 370.897943][T10148] [ 370.897952][T10148] dump_stack_lvl+0xe8/0x150 [ 370.897987][T10148] should_fail_ex+0x412/0x560 [ 370.898024][T10148] _copy_to_user+0x31/0xb0 [ 370.898050][T10148] simple_read_from_buffer+0xe1/0x170 [ 370.898101][T10148] proc_fail_nth_read+0x1bb/0x230 [ 370.898135][T10148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.898168][T10148] ? rw_verify_area+0x2a6/0x4d0 [ 370.898190][T10148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.898222][T10148] vfs_read+0x20c/0xa70 [ 370.898242][T10148] ? fdget_pos+0x246/0x320 [ 370.898266][T10148] ? __pfx___mutex_lock+0x10/0x10 [ 370.898293][T10148] ? __pfx_vfs_read+0x10/0x10 [ 370.898317][T10148] ? __fget_files+0x2a/0x420 [ 370.898351][T10148] ? __fget_files+0x3a0/0x420 [ 370.898380][T10148] ? __fget_files+0x2a/0x420 [ 370.898419][T10148] ksys_read+0x150/0x270 [ 370.898439][T10148] ? __pfx_filldir64+0x10/0x10 [ 370.898467][T10148] ? __pfx_ksys_read+0x10/0x10 [ 370.898501][T10148] do_syscall_64+0x14d/0xf80 [ 370.898525][T10148] ? trace_irq_disable+0x3b/0x150 [ 370.898542][T10148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.898564][T10148] ? clear_bhb_loop+0x40/0x90 [ 370.898589][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.898617][T10148] RIP: 0033:0x7fda3975cfce [ 370.898636][T10148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.898654][T10148] RSP: 002b:00007fda3a661fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.898676][T10148] RAX: ffffffffffffffda RBX: 00007fda3a6626c0 RCX: 00007fda3975cfce [ 370.898690][T10148] RDX: 000000000000000f RSI: 00007fda3a6620a0 RDI: 0000000000000006 [ 370.898704][T10148] RBP: 00007fda3a662090 R08: 0000000000000000 R09: 0000000000000000 [ 370.898716][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.898728][T10148] R13: 00007fda39a16038 R14: 00007fda39a15fa0 R15: 00007fda39b3fa48 [ 370.898761][T10148] [ 371.221986][ T29] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 371.430720][ T29] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 371.458868][ T29] snd_usb_pod 1-1:1.1: invalid control EP [ 371.477499][ T29] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 371.506369][ T29] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 371.519267][ T29] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 371.646938][ T29] usb 1-1: USB disconnect, device number 28 [ 371.739339][T10127] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 372.131998][T10127] usbhid 3-1:0.0: reset_resume error -1 [ 372.392497][ T5926] usb 3-1: USB disconnect, device number 38 [ 372.435722][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.578544][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.743807][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.026657][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.087609][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 373.087630][ T30] audit: type=1326 audit(1774599582.823:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 373.092858][T10182] FAULT_INJECTION: forcing a failure. [ 373.092858][T10182] name failslab, interval 1, probability 0, space 0, times 0 [ 373.130673][ T30] audit: type=1326 audit(1774599582.823:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 373.163493][T10186] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1360'. [ 373.234712][T10182] CPU: 1 UID: 0 PID: 10182 Comm: syz.3.1361 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.234739][T10182] Tainted: [L]=SOFTLOCKUP [ 373.234745][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.234754][T10182] Call Trace: [ 373.234760][T10182] [ 373.234767][T10182] dump_stack_lvl+0xe8/0x150 [ 373.234792][T10182] should_fail_ex+0x412/0x560 [ 373.234826][T10182] should_failslab+0xa8/0x100 [ 373.234848][T10182] __kmalloc_noprof+0xe8/0x760 [ 373.234866][T10182] ? aa_label_asxprint+0x70/0x130 [ 373.234888][T10182] aa_label_asxprint+0x70/0x130 [ 373.234909][T10182] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 373.234936][T10182] audit_log_subj_ctx+0x116/0x530 [ 373.234958][T10182] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 373.234983][T10182] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 373.235007][T10182] audit_log_task_context+0x94/0xe0 [ 373.235027][T10182] ? __pfx_audit_log_task_context+0x10/0x10 [ 373.235048][T10182] ? audit_log_start+0x7e9/0xa20 [ 373.235074][T10182] audit_log_task+0x19b/0x3d0 [ 373.235093][T10182] ? __pfx_audit_log_task+0x10/0x10 [ 373.235118][T10182] audit_seccomp+0x85/0x190 [ 373.235138][T10182] __seccomp_filter+0xd48/0x1ef0 [ 373.235164][T10182] ? __pfx___seccomp_filter+0x10/0x10 [ 373.235183][T10182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.235205][T10182] ? __fget_files+0x3a0/0x420 [ 373.235231][T10182] ? fput+0xa0/0xd0 [ 373.235257][T10182] ? __pfx_ksys_write+0x10/0x10 [ 373.235277][T10182] ? __secure_computing+0xe1/0x2a0 [ 373.235297][T10182] do_syscall_64+0xf4/0xf80 [ 373.235315][T10182] ? trace_irq_disable+0x3b/0x150 [ 373.235328][T10182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.235343][T10182] ? clear_bhb_loop+0x40/0x90 [ 373.235361][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.235376][T10182] RIP: 0033:0x7f50f579c799 [ 373.235390][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.235402][T10182] RSP: 002b:00007f50f6719028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 373.235419][T10182] RAX: ffffffffffffffda RBX: 00007f50f5a15fa0 RCX: 00007f50f579c799 [ 373.235430][T10182] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 00007f50f66f8000 [ 373.235439][T10182] RBP: 00007f50f6719090 R08: 0000200000001140 R09: 0000000000000000 [ 373.235448][T10182] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 373.235458][T10182] R13: 00007f50f5a16038 R14: 00007f50f5a15fa0 R15: 00007f50f5b3fa48 [ 373.235480][T10182] [ 373.235506][T10182] audit: error in audit_log_subj_ctx [ 373.360451][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.377657][T10190] netlink: 'syz.1.1363': attribute type 10 has an invalid length. [ 373.472737][ T30] audit: type=1326 audit(1774599582.823:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 373.491168][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.547625][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.558596][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.567908][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.601894][ T30] audit: type=1326 audit(1774599582.823:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 373.755201][ T30] audit: type=1326 audit(1774599582.823:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 373.999739][ T30] audit: type=1326 audit(1774599582.833:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50f575cfce code=0x7ffc0000 [ 374.060774][ T30] audit: type=1326 audit(1774599582.833:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50f575cfce code=0x7ffc0000 [ 374.123816][ T30] audit: type=1326 audit(1774599582.833:297): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 374.219668][ T30] audit: type=1326 audit(1774599583.103:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f50f575cfce code=0x7ffc0000 [ 374.384128][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 375.002914][ T36] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 375.041042][ T36] bridge1 (unregistering): left promiscuous mode [ 375.145932][ T36] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 375.192014][ T36] bridge2 (unregistering): left promiscuous mode [ 375.316944][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.345235][ T36] bond_slave_0: left promiscuous mode [ 375.367271][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.389495][ T36] bond_slave_1: left promiscuous mode [ 375.414673][ T36] bond0 (unregistering): (slave bond1): Releasing backup interface [ 375.427507][ T36] bond1 (unregistering): left promiscuous mode [ 375.440230][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 375.450280][ T36] batadv0: left promiscuous mode [ 375.461978][ T36] bond0 (unregistering): Released all slaves [ 375.477246][ T36] bond1 (unregistering): Released all slaves [ 375.721046][ T5842] Bluetooth: hci2: command tx timeout [ 375.792785][ T36] bond2 (unregistering): Released all slaves [ 375.815850][ T36] bond3 (unregistering): Released all slaves [ 375.870297][ T36] bond4 (unregistering): Released all slaves [ 375.904780][T10201] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 376.006176][ T5926] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 376.064361][ T36] IPVS: stopping master sync thread 7974 ... [ 376.185232][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 376.195645][ T5926] usb 3-1: config 0 has no interfaces? [ 376.206495][ T5926] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 376.219942][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.231758][ T5926] usb 3-1: Product: syz [ 376.237567][ T5926] usb 3-1: Manufacturer: syz [ 376.297083][ T5919] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 376.362525][ T5926] usb 3-1: SerialNumber: syz [ 376.385467][ T5926] usb 3-1: config 0 descriptor?? [ 376.450725][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 376.469094][ T5919] usb 4-1: config 4 has an invalid interface number: 228 but max is 0 [ 376.483910][ T5919] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 376.525174][ T5919] usb 4-1: config 4 has no interface number 0 [ 376.570781][ T5919] usb 4-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 376.609914][ T5919] usb 4-1: config 4 interface 228 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 376.623552][ T36] hsr_slave_0: left promiscuous mode [ 376.636160][ T36] hsr_slave_1: left promiscuous mode [ 376.656334][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.667280][ T5919] usb 4-1: config 4 interface 228 has no altsetting 0 [ 376.680386][T10223] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 376.689655][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.700407][ T5919] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 376.709950][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.719394][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.729263][ T5919] usb 4-1: Product: syz [ 376.734185][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.741796][ T5919] usb 4-1: Manufacturer: syz [ 376.746567][ T5919] usb 4-1: SerialNumber: syz [ 376.765083][ T36] veth1_macvtap: left promiscuous mode [ 376.772534][ T36] veth0_macvtap: left promiscuous mode [ 376.782064][ T36] veth1_vlan: left promiscuous mode [ 376.796788][ T36] veth0_vlan: left promiscuous mode [ 377.467877][ T36] team0 (unregistering): Port device team_slave_1 removed [ 377.506294][ T36] team0 (unregistering): Port device team_slave_0 removed [ 377.710608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 377.749566][T10260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.779617][ T5842] Bluetooth: hci2: command tx timeout [ 377.929338][T10263] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 378.246139][T10223] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 378.281217][T10223] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 378.428389][T10223] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 378.646017][ T5926] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 378.648912][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660014][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.685043][ T5926] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.743803][T10193] chnl_net:caif_netlink_parms(): no params data found [ 378.766620][ T5919] usb 4-1: USB disconnect, device number 39 [ 378.847438][ T24] usb 3-1: USB disconnect, device number 39 [ 378.867444][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.898787][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.293474][T10279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.336137][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.369771][T10193] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.379927][T10193] bridge_slave_0: entered allmulticast mode [ 379.418259][T10193] bridge_slave_0: entered promiscuous mode [ 379.454930][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.462465][T10193] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.469913][T10193] bridge_slave_1: entered allmulticast mode [ 379.479317][T10193] bridge_slave_1: entered promiscuous mode [ 379.744749][T10294] netlink: 'syz.3.1376': attribute type 3 has an invalid length. [ 379.845726][ T5842] Bluetooth: hci2: command tx timeout [ 379.888516][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.968515][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.448227][T10193] team0: Port device team_slave_0 added [ 380.463975][T10193] team0: Port device team_slave_1 added [ 380.581802][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.600854][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.720805][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.781104][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.808577][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.864455][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.988714][T10193] hsr_slave_0: entered promiscuous mode [ 381.006028][T10193] hsr_slave_1: entered promiscuous mode [ 381.035261][T10193] debugfs: 'hsr0' already exists in 'hsr' [ 381.064919][T10193] Cannot create hsr debugfs directory [ 381.928224][ T5842] Bluetooth: hci2: command tx timeout [ 382.868331][T10337] bridge0: port 4(macvlan4) entered blocking state [ 382.887436][T10337] bridge0: port 4(macvlan4) entered disabled state [ 382.931874][T10337] macvlan4: entered allmulticast mode [ 383.022877][T10337] bridge0: entered allmulticast mode [ 383.065521][T10337] macvlan4: left allmulticast mode [ 383.092784][T10337] bridge0: left allmulticast mode [ 383.407073][ T5919] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 383.479918][T10193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.560145][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 383.596635][T10193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.610722][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 383.630033][T10193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.652643][ T5919] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 383.685131][ T5919] usb 3-1: config 0 has no interface number 0 [ 383.724463][ T5919] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 383.737793][T10193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.743707][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.783640][ T5919] usb 3-1: Product: syz [ 383.787880][ T5919] usb 3-1: Manufacturer: syz [ 383.816949][ T5919] usb 3-1: SerialNumber: syz [ 383.848391][ T5919] usb 3-1: config 0 descriptor?? [ 384.000994][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 384.153479][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 384.190663][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.248824][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.263556][T10193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.284925][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 384.358765][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 384.375428][ T24] usb 1-1: Manufacturer: syz [ 384.449396][T10193] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.484396][ T24] usb 1-1: config 0 descriptor?? [ 384.511669][ T24] igorplugusb 1-1:0.0: endpoint incorrect [ 384.565628][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.572892][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.672140][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.679300][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.296645][ T5898] usb 1-1: USB disconnect, device number 29 [ 385.714459][ T5937] IPVS: starting estimator thread 0... [ 385.741778][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.831256][T10379] IPVS: using max 38 ests per chain, 91200 per kthread [ 385.899805][T10193] veth0_vlan: entered promiscuous mode [ 385.930059][T10193] veth1_vlan: entered promiscuous mode [ 386.085555][T10193] veth0_macvtap: entered promiscuous mode [ 386.133604][T10193] veth1_macvtap: entered promiscuous mode [ 386.242944][T10193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.307085][T10193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.366248][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.375448][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.392744][ T5919] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 386.407150][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.420789][ T5919] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 386.432611][ T5919] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 386.451246][ T5919] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 386.478517][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.561970][ T5919] usb 3-1: USB disconnect, device number 40 [ 386.653368][T10388] FAULT_INJECTION: forcing a failure. [ 386.653368][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 386.666269][T10385] xt_SECMARK: invalid mode: 2 [ 386.682301][T10387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1392'. [ 386.718227][T10388] CPU: 0 UID: 0 PID: 10388 Comm: syz.1.1394 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.718261][T10388] Tainted: [L]=SOFTLOCKUP [ 386.718269][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.718282][T10388] Call Trace: [ 386.718290][T10388] [ 386.718299][T10388] dump_stack_lvl+0xe8/0x150 [ 386.718334][T10388] should_fail_ex+0x412/0x560 [ 386.718369][T10388] should_failslab+0xa8/0x100 [ 386.718395][T10388] ? skb_clone+0x212/0x3a0 [ 386.718419][T10388] kmem_cache_alloc_noprof+0x87/0x650 [ 386.718441][T10388] ? __netlink_lookup+0xc6/0x8b0 [ 386.718470][T10388] skb_clone+0x212/0x3a0 [ 386.718499][T10388] __netlink_deliver_tap+0x404/0x850 [ 386.718542][T10388] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.718576][T10388] netlink_deliver_tap+0x19c/0x1b0 [ 386.718609][T10388] netlink_unicast+0x7e3/0x9b0 [ 386.718646][T10388] ? __pfx_netlink_unicast+0x10/0x10 [ 386.718678][T10388] ? netlink_sendmsg+0x650/0xb40 [ 386.718696][T10388] ? skb_put+0x11b/0x210 [ 386.718720][T10388] netlink_sendmsg+0x813/0xb40 [ 386.718749][T10388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.718772][T10388] ? aa_sock_msg_perm+0xf1/0x1b0 [ 386.718811][T10388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.718839][T10388] ____sys_sendmsg+0x972/0x9f0 [ 386.718870][T10388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.718902][T10388] ? import_iovec+0x73/0xa0 [ 386.718935][T10388] ___sys_sendmsg+0x2a5/0x360 [ 386.718965][T10388] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.719025][T10388] ? __fget_files+0x2a/0x420 [ 386.719055][T10388] ? __fget_files+0x3a0/0x420 [ 386.719096][T10388] __x64_sys_sendmsg+0x1bd/0x2a0 [ 386.719125][T10388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.719157][T10388] ? __pfx_ksys_write+0x10/0x10 [ 386.719190][T10388] do_syscall_64+0x14d/0xf80 [ 386.719216][T10388] ? trace_irq_disable+0x3b/0x150 [ 386.719233][T10388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.719255][T10388] ? clear_bhb_loop+0x40/0x90 [ 386.719281][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.719301][T10388] RIP: 0033:0x7fda3979c799 [ 386.719321][T10388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.719339][T10388] RSP: 002b:00007fda3a662028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.719362][T10388] RAX: ffffffffffffffda RBX: 00007fda39a15fa0 RCX: 00007fda3979c799 [ 386.719378][T10388] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 386.719390][T10388] RBP: 00007fda3a662090 R08: 0000000000000000 R09: 0000000000000000 [ 386.719403][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.719415][T10388] R13: 00007fda39a16038 R14: 00007fda39a15fa0 R15: 00007fda39b3fa48 [ 386.719447][T10388] [ 386.719471][T10388] netlink: 'syz.1.1394': attribute type 10 has an invalid length. [ 387.103320][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.117551][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.151878][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 387.233981][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.242080][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.460868][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1394'. [ 387.472823][T10388] ipvlan1: entered promiscuous mode [ 387.478358][T10388] ipvlan1: entered allmulticast mode [ 387.530455][T10388] veth0_vlan: entered allmulticast mode [ 387.554651][T10388] bridge0: port 4(ipvlan1) entered blocking state [ 387.574367][T10388] bridge0: port 4(ipvlan1) entered disabled state [ 387.599972][T10388] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 388.623767][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 388.623788][ T30] audit: type=1326 audit(1774599598.303:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 388.711515][ T30] audit: type=1326 audit(1774599598.303:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 388.735816][ T30] audit: type=1326 audit(1774599598.303:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 388.759840][ T30] audit: type=1326 audit(1774599598.303:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 388.886152][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 388.991943][T10424] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 389.023814][ T30] audit: type=1326 audit(1774599598.303:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 389.075817][T10424] netlink: 'syz.3.1405': attribute type 2 has an invalid length. [ 389.118250][ T30] audit: type=1326 audit(1774599598.303:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 389.344061][T10430] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1407'. [ 389.642314][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1409'. [ 390.319311][ T30] audit: type=1326 audit(1774599598.313:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 390.347476][ T30] audit: type=1326 audit(1774599598.313:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 390.630411][ T30] audit: type=1326 audit(1774599598.313:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 390.802309][ T30] audit: type=1326 audit(1774599598.313:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f50f579c799 code=0x7ffc0000 [ 391.081361][T10454] netlink: 'syz.3.1411': attribute type 10 has an invalid length. [ 391.133761][T10454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1411'. [ 391.530436][T10460] fuse: Bad value for 'fd' [ 393.662963][T10491] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1423'. [ 393.700836][ T5937] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 393.942573][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 393.969248][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.995745][ T5937] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 394.029610][ T5937] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.123745][ T5937] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 394.136453][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.145298][ T5937] usb 4-1: Product: syz [ 394.170489][ T5937] usb 4-1: Manufacturer: syz [ 394.177726][ T5937] usb 4-1: SerialNumber: syz [ 394.510913][ T5898] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 394.682450][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.693972][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.734559][ T5898] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 394.800711][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.917092][ T5898] usb 2-1: config 0 descriptor?? [ 395.009689][ T5937] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 395.103959][ T5937] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 395.468733][T10495] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1426'. [ 395.478901][T10506] bridge0: entered promiscuous mode [ 395.506109][T10506] bridge0: port 4(macvlan2) entered blocking state [ 395.523554][T10506] bridge0: port 4(macvlan2) entered disabled state [ 395.571078][T10506] macvlan2: entered allmulticast mode [ 395.656994][T10506] macvlan2: left allmulticast mode [ 395.706481][T10506] bridge0: left promiscuous mode [ 395.852729][ T5937] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 395.945068][ T5937] usb 4-1: USB disconnect, device number 40 [ 396.088101][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.284966][ T5898] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 396.411629][ T5898] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 396.652036][ T5898] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 396.759043][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 396.768163][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 396.775096][ T797] usb 2-1: USB disconnect, device number 34 [ 396.849052][ T797] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 396.946849][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1433'. [ 396.999485][T10535] fido_id[10535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 397.419963][T10550] binder: 10548:10550 ioctl c0306201 2000000003c0 returned -14 [ 397.514651][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 397.822279][T10555] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 397.917425][T10555] batadv1: entered allmulticast mode [ 397.927656][T10555] team0: Port device batadv1 added [ 397.953020][T10570] FAULT_INJECTION: forcing a failure. [ 397.953020][T10570] name failslab, interval 1, probability 0, space 0, times 0 [ 397.959507][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 397.959570][ T30] audit: type=1326 audit(1774599607.683:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 397.981880][T10570] CPU: 0 UID: 0 PID: 10570 Comm: syz.0.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.981974][T10570] Tainted: [L]=SOFTLOCKUP [ 397.981995][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.982034][T10570] Call Trace: [ 397.982056][T10570] [ 397.982077][T10570] dump_stack_lvl+0xe8/0x150 [ 397.982162][T10570] should_fail_ex+0x412/0x560 [ 397.982261][T10570] should_failslab+0xa8/0x100 [ 397.982336][T10570] __kmalloc_cache_noprof+0x88/0x660 [ 397.982409][T10570] ? audit_log_d_path+0xb8/0x1a0 [ 397.982501][T10570] audit_log_d_path+0xb8/0x1a0 [ 397.982596][T10570] audit_log_d_path_exe+0x42/0x70 [ 397.982676][T10570] audit_log_task+0x2c3/0x3d0 [ 397.982748][T10570] ? __pfx_audit_log_task+0x10/0x10 [ 397.982840][T10570] audit_seccomp+0x85/0x190 [ 397.982908][T10570] __seccomp_filter+0xd48/0x1ef0 [ 397.983001][T10570] ? __pfx___seccomp_filter+0x10/0x10 [ 397.983064][T10570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 397.983148][T10570] ? __fget_files+0x3a0/0x420 [ 397.983245][T10570] ? fput+0xa0/0xd0 [ 397.983339][T10570] ? __pfx_ksys_write+0x10/0x10 [ 397.983424][T10570] ? __secure_computing+0xe1/0x2a0 [ 397.983492][T10570] do_syscall_64+0xf4/0xf80 [ 397.983555][T10570] ? trace_irq_disable+0x3b/0x150 [ 397.983598][T10570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.983653][T10570] ? clear_bhb_loop+0x40/0x90 [ 397.983724][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.983777][T10570] RIP: 0033:0x7fa9c8f9c799 [ 397.983829][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.983891][T10570] RSP: 002b:00007fa9c9df2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 397.983958][T10570] RAX: ffffffffffffffda RBX: 00007fa9c9215fa0 RCX: 00007fa9c8f9c799 [ 397.984012][T10570] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 00007fa9c9dd1000 [ 397.984052][T10570] RBP: 00007fa9c9df2090 R08: 0000200000001140 R09: 0000000000000000 [ 397.984084][T10570] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 397.984116][T10570] R13: 00007fa9c9216038 R14: 00007fa9c9215fa0 R15: 00007fa9c933fa48 [ 397.984198][T10570] [ 398.100911][ T5937] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 398.330807][ T29] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 398.495497][ T30] audit: type=1326 audit(1774599607.683:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 398.559225][ T30] audit: type=1326 audit(1774599607.693:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 398.590731][ T5937] usb 2-1: device descriptor read/64, error -71 [ 398.592834][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 398.623092][ T29] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 398.663997][ T30] audit: type=1326 audit(1774599607.693:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c8f5cfce code=0x7ffc0000 [ 398.700635][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.741603][ T30] audit: type=1326 audit(1774599607.693:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9c8f5cfce code=0x7ffc0000 [ 398.832916][ T30] audit: type=1326 audit(1774599607.693:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa9c8f9c799 code=0x7ffc0000 [ 398.876856][ T5937] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 398.879886][ T29] usb 4-1: config 0 descriptor?? [ 398.965306][ T29] as10x_usb: device has been detected [ 398.978037][ T30] audit: type=1326 audit(1774599607.723:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa9c8f5cfce code=0x7ffc0000 [ 399.032276][ T5937] usb 2-1: device descriptor read/64, error -71 [ 399.033492][ T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 399.143722][ T30] audit: type=1326 audit(1774599607.723:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9c8f5cfce code=0x7ffc0000 [ 399.172295][ T5937] usb usb2-port1: attempt power cycle [ 399.192271][T10562] ------------[ cut here ]------------ [ 399.197762][T10562] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 399.197785][T10562] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#0: syz.3.1441/10562 [ 399.214067][T10562] Modules linked in: [ 399.218058][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.3.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.229189][T10562] Tainted: [L]=SOFTLOCKUP [ 399.233592][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.243872][T10562] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 399.250089][T10562] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 5c 61 04 00 75 13 48 8d 3d 1c 72 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 399.269846][T10562] RSP: 0018:ffffc900045e7a20 EFLAGS: 00010246 [ 399.275973][T10562] RAX: 0000000000000000 RBX: 1ffff920008bcf5c RCX: 0000000000080000 [ 399.284255][T10562] RDX: ffffc9000cf01000 RSI: ffffffff8bcce0c0 RDI: ffffffff90150710 [ 399.292759][T10562] RBP: ffffc900045e7bd8 R08: ffffffff9011f1c3 R09: 1ffffffff2023e38 [ 399.301110][T10562] R10: dffffc0000000000 R11: fffffbfff2023e39 R12: ffff888024eb4b60 [ 399.309107][T10562] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.317173][T10562] FS: 00007f50f67196c0(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 399.326191][T10562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.332847][T10562] CR2: 000000110c2e21a0 CR3: 0000000078944000 CR4: 00000000003526f0 [ 399.340918][T10562] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.349030][T10562] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 399.357073][T10562] Call Trace: [ 399.360386][T10562] [ 399.363584][T10562] ? __mutex_lock+0x319/0x1300 [ 399.368465][T10562] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 399.374260][T10562] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 399.377204][ T29] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 399.380763][T10562] ? __pfx___mutex_lock+0x10/0x10 [ 399.380804][T10562] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 399.400605][T10562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.406692][T10562] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.411908][T10562] as102_dvb_dmx_start_feed+0x70/0x290 [ 399.417702][T10562] dmx_section_feed_start_filtering+0x518/0x6c0 [ 399.424026][T10562] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 399.429618][T10562] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 399.435223][T10562] dvb_demux_do_ioctl+0x470/0x540 [ 399.440316][T10562] dvb_usercopy+0x199/0x2e0 [ 399.444863][T10562] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 399.450448][T10562] ? __pfx_dvb_usercopy+0x10/0x10 [ 399.455571][T10562] ? __fget_files+0x3a0/0x420 [ 399.460295][T10562] ? __fget_files+0x2a/0x420 [ 399.464956][T10562] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 399.470306][T10562] dvb_demux_ioctl+0x29/0x40 [ 399.475004][T10562] __se_sys_ioctl+0xfc/0x170 [ 399.479653][T10562] do_syscall_64+0x14d/0xf80 [ 399.484398][T10562] ? trace_irq_disable+0x3b/0x150 [ 399.489444][T10562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.495589][T10562] ? clear_bhb_loop+0x40/0x90 [ 399.500675][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.506599][T10562] RIP: 0033:0x7f50f579c799 [ 399.511237][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.530939][T10562] RSP: 002b:00007f50f6719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.539400][T10562] RAX: ffffffffffffffda RBX: 00007f50f5a15fa0 RCX: 00007f50f579c799 [ 399.547717][T10562] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 399.555763][T10562] RBP: 00007f50f5832c99 R08: 0000000000000000 R09: 0000000000000000 [ 399.563800][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.571885][T10562] R13: 00007f50f5a16038 R14: 00007f50f5a15fa0 R15: 00007f50f5b3fa48 [ 399.579887][T10562] [ 399.583273][T10562] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.590599][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.3.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.601560][T10562] Tainted: [L]=SOFTLOCKUP [ 399.605912][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.615999][T10562] Call Trace: [ 399.619285][T10562] [ 399.622225][T10562] vpanic+0x56c/0xa60 [ 399.626223][T10562] ? __pfx__printk+0x10/0x10 [ 399.630824][T10562] ? __pfx_vpanic+0x10/0x10 [ 399.635335][T10562] ? is_bpf_text_address+0x292/0x2b0 [ 399.640632][T10562] ? is_bpf_text_address+0x26/0x2b0 [ 399.645863][T10562] panic+0xc5/0xd0 [ 399.649603][T10562] ? __pfx_panic+0x10/0x10 [ 399.654036][T10562] __warn+0x315/0x4f0 [ 399.658027][T10562] ? __mutex_lock+0x10a4/0x1300 [ 399.662893][T10562] ? __mutex_lock+0x10a4/0x1300 [ 399.667996][T10562] __report_bug+0x29a/0x540 [ 399.672549][T10562] ? dvb_demux_do_ioctl+0x470/0x540 [ 399.677808][T10562] ? __mutex_lock+0x10a4/0x1300 [ 399.682672][T10562] ? __pfx___report_bug+0x10/0x10 [ 399.687700][T10562] ? pfn_valid+0x125/0x4c0 [ 399.692137][T10562] ? __lock_acquire+0x6b5/0x2cf0 [ 399.697112][T10562] report_bug_entry+0x19a/0x290 [ 399.701982][T10562] ? __mutex_lock+0x10ab/0x1300 [ 399.706949][T10562] ? __mutex_lock+0x10b0/0x1300 [ 399.711807][T10562] handle_bug+0xce/0x200 [ 399.716061][T10562] exc_invalid_op+0x1a/0x50 [ 399.720592][T10562] asm_exc_invalid_op+0x1a/0x20 [ 399.725458][T10562] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 399.730929][T10562] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 5c 61 04 00 75 13 48 8d 3d 1c 72 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 399.750564][T10562] RSP: 0018:ffffc900045e7a20 EFLAGS: 00010246 [ 399.756659][T10562] RAX: 0000000000000000 RBX: 1ffff920008bcf5c RCX: 0000000000080000 [ 399.764642][T10562] RDX: ffffc9000cf01000 RSI: ffffffff8bcce0c0 RDI: ffffffff90150710 [ 399.772622][T10562] RBP: ffffc900045e7bd8 R08: ffffffff9011f1c3 R09: 1ffffffff2023e38 [ 399.780608][T10562] R10: dffffc0000000000 R11: fffffbfff2023e39 R12: ffff888024eb4b60 [ 399.788598][T10562] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.796635][T10562] ? __mutex_lock+0x319/0x1300 [ 399.801437][T10562] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 399.807087][T10562] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 399.813521][T10562] ? __pfx___mutex_lock+0x10/0x10 [ 399.818572][T10562] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 399.824219][T10562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.830203][T10562] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.835257][T10562] as102_dvb_dmx_start_feed+0x70/0x290 [ 399.840737][T10562] dmx_section_feed_start_filtering+0x518/0x6c0 [ 399.847059][T10562] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 399.852730][T10562] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 399.858223][T10562] dvb_demux_do_ioctl+0x470/0x540 [ 399.863268][T10562] dvb_usercopy+0x199/0x2e0 [ 399.867805][T10562] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 399.873371][T10562] ? __pfx_dvb_usercopy+0x10/0x10 [ 399.878421][T10562] ? __fget_files+0x3a0/0x420 [ 399.883126][T10562] ? __fget_files+0x2a/0x420 [ 399.887834][T10562] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 399.893141][T10562] dvb_demux_ioctl+0x29/0x40 [ 399.897748][T10562] __se_sys_ioctl+0xfc/0x170 [ 399.902349][T10562] do_syscall_64+0x14d/0xf80 [ 399.906948][T10562] ? trace_irq_disable+0x3b/0x150 [ 399.911977][T10562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.918046][T10562] ? clear_bhb_loop+0x40/0x90 [ 399.922733][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.928723][T10562] RIP: 0033:0x7f50f579c799 [ 399.933232][T10562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.952871][T10562] RSP: 002b:00007f50f6719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.961298][T10562] RAX: ffffffffffffffda RBX: 00007f50f5a15fa0 RCX: 00007f50f579c799 [ 399.969284][T10562] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 399.977264][T10562] RBP: 00007f50f5832c99 R08: 0000000000000000 R09: 0000000000000000 [ 399.985271][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.993252][T10562] R13: 00007f50f5a16038 R14: 00007f50f5a15fa0 R15: 00007f50f5b3fa48 [ 400.001236][T10562] [ 400.004910][T10562] Kernel Offset: disabled [ 400.009245][T10562] Rebooting in 86400 seconds..