last executing test programs: 5m51.795965354s ago: executing program 1 (id=6): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="0daaedb5bd36fa964f609a0252f3bcc9913e1c309b0f3afe5cb359bf544c7961e59d5196e914a133b2", 0x29}], 0x1}}], 0x1, 0x1000000) 5m50.979559872s ago: executing program 1 (id=9): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000100001fe8000"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 5m48.541493189s ago: executing program 1 (id=16): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x7f000000}}}}}}}, 0x0) 5m48.187921763s ago: executing program 1 (id=17): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_getoverrun(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726fab9a6d6f64653d303030303030303030303030303030303030347365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x6}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x2d7}], 0x38) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0x0, r8, {0x7, 0x0, 0x0, {0x0, 0x4, 0x52, 0x800000000000000, 0x0, 0xad44, 0x8, 0x0, 0x80080000, 0xa000, 0x0, r9}}}, 0x78) r12 = syz_open_procfs$userns(r10, &(0x7f00000000c0)) splice(r12, &(0x7f0000000100)=0x8001, r11, &(0x7f0000000140)=0x6, 0x2, 0x0) 5m47.325189392s ago: executing program 1 (id=18): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x708480, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r2, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m46.809457496s ago: executing program 1 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(r3, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x0, 0x800) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) socket$inet(0x10, 0x80000, 0x0) unshare(0x2a020400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080071296ed90cde2c99", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x400, 0x5, 0x199}, &(0x7f0000000340), &(0x7f0000000000)) 5m46.376170574s ago: executing program 32 (id=20): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(r3, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x0, 0x800) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) socket$inet(0x10, 0x80000, 0x0) unshare(0x2a020400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080071296ed90cde2c99", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x400, 0x5, 0x199}, &(0x7f0000000340), &(0x7f0000000000)) 8.29480636s ago: executing program 4 (id=1410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="020028d17000fb5b0600000000001a03c624ad609070514a4465289c033be630456ea8e24a7ab7f6e16a000000000000017c9fcee437b14c682be2a7002b07f4f5ca2005087b6cc99a2af8ac658d3298fb7c4f3c0e581781e722db606cd65a197f93feab0150a901da5d3bb05e7f20bd64dbdeaf37da3d3065c7b955618bd90812139b5773b1f31a5b0f83ae4ac7437d9ab52d8c5115675a9912ea5f866a7f59d09ba122dea151da35e1ef37141125a2f652becdbac16f709284d45f360a9d912f5f07a30ee813de3441291aecc3ce38814eca7048"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 7.964683432s ago: executing program 4 (id=1414): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x84e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) setns(0xffffffffffffffff, 0x8020000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048080) 7.566283418s ago: executing program 5 (id=1418): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'dvmrp1\x00'}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5cc, 0x0, 0x43c, 0x0, 0x0, 0x16c, 0x504, 0x504, 0x504, 0x504, 0x504, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x124, 0x16c, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x5, 0xf9, 0x2}}, @common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x628) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @multicast1}, &(0x7f0000000200)=0xc) socket(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 7.076608986s ago: executing program 5 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318300000000000400401900000018000180140002006c6f0000000000"], 0x2c}, 0x1, 0xffffffffffffffa6}, 0x40010) 6.772856775s ago: executing program 5 (id=1420): openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGWINSZ(r3, 0x5413, 0xfffffffffffffffe) r4 = socket$inet6_sctp(0xa, 0xe, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r6 = openat$cgroup(r5, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4010, r6}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="07000000410000000041d71cc853a49565000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200032010203010902120001000000000904"], 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r9, r8}, 0xc) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 6.770273316s ago: executing program 0 (id=1421): close(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) (fail_nth: 9) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 6.34372644s ago: executing program 4 (id=1422): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x708480, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010101, 0x1, 0x0, 0x50, 0x0, [{@private}, {@local}, {@multicast1}, {@multicast1}, {@local}]}}) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.304457105s ago: executing program 0 (id=1423): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000010428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000e00010597dc71657273706100001400029208000d000e678a87080014000300000032398537aac8d3c8a9d5a646a23750e7ef1e738e587039bea4e373557e4164c8f12e2fcd2e07729d915a10be1fce726e1d1a599080c3d7e9356b2bb6896ac5599d29b00d655e408ba28aa92ebf0454a97e3538cb651db097805ae36b70717bf1429618726a36453f6e0ee752068de4d4d060325d7bc5a61ff89be6f5d03287d05b1003152e7051e74fcc7a5a4f85dcfe313f66d152146e04bf8bfac700"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40012) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x4008af10, &(0x7f0000000900)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000440ef000000060005401000000008000840"], 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) fchdir(r7) mq_notify(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 5.565367421s ago: executing program 2 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0xeeef0000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x4, 0x40000, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="323c35d1e465d3b15f09a5be1a7b5ecc8c80a1202016014e9d965612837dc7ccb7f416175cde8a87040c61d1b66342150828ce2c0cef599e24638c790db5b0b657da", 0x42}, {&(0x7f0000000100)="7db2d101a7f47ec4bfdb02dc7b054cc600bfe3e89bb90e43b40cc8284d5ac0f22b3f3c0b2722717de2417db880c3dc73b2f70ed8a69f5385e2ccd0eb1d4ee6c6259718299dab20473021874084b29e950fbd64a1643081169843ac2d4dbdfbe7ce059614fb78bfa2adc7ac22c1b0e090fb7900c9bf3357bf71f86a772646890ed682489048a236b082d37f9da8c0c6b131023a15abe7a5aef92e3284bd8ee0a7cf884a91d2e54caa1a", 0xa9}, {&(0x7f00000001c0)="03b13af48f71d522114765ba4cd1390ae9531fea5187320a17d1b2cc9c2d7dc5df35482212e4aaaf50aa4b4c6227a2bb832a476c14d052b71d08cd0ebd6928bad050d70d9153aafb0bf35f", 0x4b}, {&(0x7f0000000240)="30392e689e74d75590fe677b7f2d2370226fc86a8c666776bbd5a9cf4254d04f27dfc2e6effd63f8bdcc6aaebc9b627a7feab495d593f61902f5ce10a90c8fa9528c1db8a8750410d15df9853c929ede617d040037d85a0fd36e83e58f2aef1bc8fc0fce4c2b1a8dfc44a70b0ee261b779", 0x71}], 0x4, &(0x7f0000000300)=[{0xd8, 0x114, 0xec0000, "8fbe0981664351ccf74ec2c5393138357cda2dccaec1e1285d00c489f481a459feb80c03f12a4a31364760733c299018fb0d2550b5d437664bfd2b72c7929bd6809b9bef2b21c850df89bbe8cb7d479b385568ce13dbf3a9f61cacc554f7e9f72de3d0c684113d5d983922798e32160a02ef2afc22573118c48358671db05388149d23ccfe4f705e0809732ed0b9c161e0c20dcb46606da788468ebceb66a35fa4994ff13919d6c47b68eabeb39ddca881e20606feb19654237d3239622e327400cbf1b31e7d"}], 0xd8}, 0x4851) 5.323114923s ago: executing program 2 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000020000a000000800004801300010062726f6164636173742d6c696e6b000024"], 0x94}}, 0x0) 5.295999531s ago: executing program 4 (id=1427): syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r0 = socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000380)=""/171, 0xab, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xff7ffffffffffff5]}, 0xfffffffffffffe49, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = syz_open_dev$sg(&(0x7f0000000280), 0xffffffffffffffff, 0x62501) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xda0, 0x0, 0x7ff}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[]) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) 5.07266675s ago: executing program 2 (id=1428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="c7e0d486e53d16ae99683814546b89b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0", @ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x1d, 0x800, 0x45) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r7}) openat(0xffffffffffffff9c, 0x0, 0x200100, 0x3) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000002c0)={0x1, @remote, 0x4e20, 0x0, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) r10 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r10, 0x400445a0, &(0x7f0000000080)=0x7) 5.034508903s ago: executing program 3 (id=1429): socket$netlink(0x10, 0x3, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x0, 0x1, 0x2}, {0x64}, {0x81}, {0x6, 0x0, 0xfd, 0x7a1f}]}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x5a00, 0xbc03, 0x6, &(0x7f00000000c0)={[0x10000]}, 0x8) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x3, 0x3f, 0x10, 0x9, &(0x7f0000001600)=[{}]}) 4.470367439s ago: executing program 4 (id=1430): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x3, 0xb5}, &(0x7f00000000c0), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) close_range(r1, r1, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x1d, 0x0, {{}, {0x0, 0x4109}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r8 = syz_io_uring_setup(0x401d, &(0x7f0000000280)={0x0, 0x91c, 0x200, 0x0, 0x161}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.840880828s ago: executing program 0 (id=1431): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843a100005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.307721938s ago: executing program 5 (id=1432): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x84e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) setns(0xffffffffffffffff, 0x8020000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048080) 3.304152563s ago: executing program 3 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) (async) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) (async) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f0000000180)) (async) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x969, 0x0, 0x5}]}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="923be53eac72da57850ad6b5d102e1304405581507f3387fbf8dd4f32a1265640d9a95d05749d131c597f88b5f52c476b5a1eca1bda5177e4cb55fb998c6c54009f4ea48fa1771de5ebbee867fccef56deaaa3c81545f98421c71b43b1521d8ee3ac52c4b36d83f7635bd6af0b3305ef9e3fe5999f917b9c975019a3fedbb8bb8b49a78332d5abe0f5d7a27957f3302fc15f0f72bfe2faed6e125660eebe28fd6b86081ed1ccbc34bf6a067ead18fb723a33dcf129dfc9", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001f3a4677019000c328f03f400140104002f6163766c616e3100000000000000000400cc00080005000a73b9c79ab055303d4d43959bd56bc8e435325ed9402e3a6da958f0530cc02094c0c4a22ad96dc898799116db10a1865922e45c509035b132ef99eea22624f78a0f797a79fbeb9e6dfb5d4600d2af35432ccd1966a2b69ad1c0f9c5d7956b56b5555a40dff6c96c13af3ca8d5f549178e6a056f723b94831433fba533cb7bb1ea19b2f4339bac831fedcb71e018b3d45ccf475d242adc11ce50f59b8c92723dc7256a7eb3a287db14d657662522ca93d764970575f53f989d612d783ccb8f02db130d1f7f027a"], 0xe4}}, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r8, 0xc008ae09, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000240)={0x0, 0x0, {0x9, 0x66, 0x3003, 0x1, 0x2, 0x3, 0x0, 0x4}}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x156}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet_udp(0x2, 0x2, 0x0) 3.241939904s ago: executing program 0 (id=1434): socket$inet6(0x2d, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) pread64(r2, 0x0, 0x0, 0x401) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0xc, 0x8, 0x7ffd, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0xfa11, 0x9eb9}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r10, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r11, @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r12, r8, &(0x7f00000000c0)=0x58, 0x5) 2.702777071s ago: executing program 3 (id=1435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x55, 0x5, 0x0, 0x200, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) (async) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) dup3(0xffffffffffffffff, r4, 0x0) (async) r5 = dup3(0xffffffffffffffff, r4, 0x0) recvmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) cachestat(r3, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x6, 0x1, 0x10, 0x6}, {0x3, 0x6, 0x5, 0x326f}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) 2.483141772s ago: executing program 2 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 2.41736739s ago: executing program 4 (id=1437): socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x45bc5459, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019080)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x83, @mcast2, 0x8}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 1.862698048s ago: executing program 0 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.410010731s ago: executing program 5 (id=1439): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x40, 0x1, 0x1, "0aaf482b80af3f6c2abf4984a8bcad7d69207b2538162c50c1f51b06ce5df852", 0xb5315241}) 1.285316786s ago: executing program 3 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000001000000000000a20000000840a0300"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.264265001s ago: executing program 5 (id=1441): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000010428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000e00010597dc71657273706100001400029208000d000e678a87080014000300000032398537aac8d3c8a9d5a646a23750e7ef1e738e587039bea4e373557e4164c8f12e2fcd2e07729d915a10be1fce726e1d1a599080c3d7e9356b2bb6896ac5599d29b00d655e408ba28aa92ebf0454a97e3538cb651db097805ae36b70717bf1429618726a36453f6e0ee752068de4d4d060325d7bc5a61ff89be6f5d03287d05b1003152e7051e74fcc7a5a4f85dcfe313f66d152146e04bf8bfac700"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40012) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x4008af10, &(0x7f0000000900)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000440ef000000060005401000000008000840"], 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) fchdir(r7) mq_notify(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 1.134920403s ago: executing program 3 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2, 0x0, 0x0, 0x1c}, 0x4) 765.048081ms ago: executing program 2 (id=1443): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x2, 0x1, @stop_pts=0x100000001}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0xc, 0x200, 0x77, &(0x7f0000000100)="50d5f8fc5d3605dfbe0042509c90eaa14279656661e10846457f671a7a6ed1c67cdd72ceee0307c040c40ace4bf0fb26220b386aa577348eb868b0aab0b470995ddce584e035a90f6470327cbfcb9e0b38fa58bb2ce3017d9be87e78086e565cd18a39f7949ab619709093ad4570812bca374efdc17623"}], 0x1}) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x170, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6f5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0xc828}]}, @NFQA_PAYLOAD={0xd0, 0xa, "1d1c1cda7fd64b03de8b1e196505cfe00935d6103b9ca94e70292a783995d86f3935f0b6df4db602b45b0c1122819922ab40fe5357fb7fb5474526acac848cbaf0b64198143edacd9cb6b12f0c14ed3ca65f1fe5c44a0ba60c746d1ad24e5d5159f48b8c8835a089d9deabd5e2357b8f36a22961ae82ee82d883951bc79e9f7179eb9e5fafeec442bbbc258b5e92bb0cc1b6b4beefa3d9735f149630d433dd42d32278a6d00b6bb14251f79da7680300cbb76bb75b66a72fd415c315cfec4102a0e0c2461f8fdb483d43cd49"}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6}]}, @NFQA_PAYLOAD={0x25, 0xa, "5665b4bf149dc54cd545c110402d42752f1dcc4e5395fc84fa8c0b8f95f07ceac7"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x161}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x40005) (async) setsockopt(r1, 0xfffff5c2, 0x40, &(0x7f0000000440)="e040f76866a70ad2fd4ae18083fb1f5f81943c55fbaadb31d9c53c81e762f0d38b12c224d8952d0401538132e3df16093fb08d82a169d161aa10c977f583f97225645a3bb83c0d9d82ba07b1300e80b51b66b3eb54798dede33674c6cf288ee366fb7221fb0f28a76ee5a25d5e2e9e07e4b794a09fd3cbe74cd06159dbeb453a388a64337702dfeacc24ab56f186237fb72ff7d198f5d5c34e23d75a0f845277107718410a1ef3a01e385b698b835735e9ec913f0046b3cb9217e95402e6d719d7a29bad431db29f0ca672f27a91aae1498b8b85eefc2b749a33fc8f81f81b31aaae9dd24e", 0xe5) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) (async) r2 = userfaultfd(0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) close(r3) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async) r5 = getpid() getpgid(r5) (async) syz_usb_connect(0x1, 0x5ee, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x65, 0x6a, 0xbd, 0x8, 0x413c, 0x81a8, 0xff37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5dc, 0x1, 0x4, 0x2, 0x50, 0x82, [{{0x9, 0x4, 0xbf, 0x80, 0xf, 0x1b, 0xea, 0xf4, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0xdc}}], [{{0x9, 0x5, 0x1, 0xc, 0x8, 0x4, 0xfe, 0x2, [@generic={0xbd, 0xe, "be3ee212b5ccb9b2757940126f80c5bb676dd71ff88485e96c1a99b4fcbb24a88e365afca2d82e2da5345fbd5cc899884db33790adb1f23b962043eef943c43962201608a1621c62b02207509aef010623f6b16b8e64bfddb3c3b68a3e1b78347db2b5442f256ee07701371c17d998a9d7f7c98f59c5309ecc4f0d33a8bccee2600747376525a1237d0e6923169eb1eda38c67e12356319050237e89d0933ae9727a79a242f2ea1df487d9d1164762dcc5a0cd60a7b20d3b75f47b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x458, 0x5, 0x3, 0x90}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0x1, 0x6b}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xf6, 0x7, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x6, 0x2, 0x8, [@generic={0x72, 0x32, "30abde5ca0d8686eb9a56b6b129f8b0e679a815ee784eb7859052f9ffd412db4a308da8450f5dbf71028cc8bce300395d783727a784ae7a3339d91e5cbe36f589b407bd90d3f1ac68a77a699e8a6f1df2a190b40725cece0c744fe936881bdd28a9b07fc27f20db334e0dd9b441821b5"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0xd5, 0xc3, 0xc, [@generic={0x9f, 0x21, "d0ecd3be285fe569a6c208e6e53428cb8a3e777e4e3df775dcf405635e9cf81b714741d9e42225eb1b070c11b8b52ca8c23f7d17969feaece5eed8744d9ac4504518412b1ff6ffb2e5c60a5fe25f1e886885aeb1e65eeac20096e80f3a77ea588fdfc7c437f8aa9580e205257ee309fde79dd6553e2dc4e2e546945d5ae572c0b8bb686c2a50829dc4335333d361c5fee8dacbeb066b184cac288dc4f0"}, @generic={0xe0, 0x6, "058bff37b0b29f1fada9a5fffb3719337f1aff064c32b66f2d8209bfcd3cdffc09bdf9818d356ef194633d7ab64604b75f322961ee5ae5b0eaa897f150581218f6cd65e5dea0c2e8852586acba041e16d1ebe832f9404f0f565a3169c2d1067369b411a7d67078918b786f466f9ec061b5c6c68dfcf4983609b3b19b1d7860f0c8b69ab8cede2257e676c931b9a91d9e84ef8593ce154787ac303aafb01b8a1b63fea2313e80563394d10289e2e71d0e7c4fcfd9080a6167afb8cd273fd0668813bc190ecaa864724d3e5277abd44c97fc17c1ccd09194beada44fa56f2e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x6}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x14, 0x2, 0xb, [@generic={0xd5, 0xd, "8be1b8c0bedb27421b8ba5e95759180cd02859233ea0cf0286298728aed24e8f2a1de5a90f5bbaad6449de2ab317e2d57e6b3fb4450306421f87506295f91b8b43bde89279b8bc79117e70cb9a406210c07c5636a7f8833ff75d239545111c94856d363dd3c27ef7f5a4af718652fc6480c4a1ef5ca1107cf4e6f592e2eef0958f7a420b9ebd1ea37f89990e132d07016a69af99b884b86fbde732c9d8e24949ea56668e2287c5879c6183761283ba8ebae979434ccefb59c90500ae120fcc58961143d172d4d4067a85dc6c2bcebf2d346259"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x8}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0xe, 0x9, 0xfc}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6e, 0x2, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x40}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0xff, 0x7, [@generic={0x94, 0x23, "364628113ac50f542bdf901cd6952073efb7d7f80fd936e7ab064b85e1fee487dcf00b118d1d03c543bb74f2867a25f94940166084ffaee75a194168ec3584ee77349a6943d5233d5e437b01de2069f57a250517aaada228853e92c1f668b64f5fbc725b2b6add77a999df08b973767b10633982a2d85de7c29493a6158f410d6b86d904fa0becc828fbfc06eb419ffef3b0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x13, 0x7, 0x1, [@generic={0x3d, 0x24, "1e8a34738084754a6bdfae12651926c290e246c27f27074ec396bc03f8b45ef6e4036731147c2ff41b184ee408ed336fdedc8ff2cd577e15e684f6"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0xf, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xbb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4814}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x8, 0xa, 0x2, [@generic={0xbc, 0x6, "9a82d8c012fbb5ef63b163d8d928a497cc34af1813f3cc361300abcffd3ce6d15e9f2cc1f7a90905f6536fd840c17cdd715ba3a7d31d91ab761b209188b27aaaaf5ac5d5e9358b8a545a3e0faf97d3737453613d2cbac1f1856670f1c5ced52bbdb9993f9b0e3a445a9dd611ed59bca1a366a19e4f43a37ecd38d3d0bae537fcbf18a06f607856af0b4e5f681e52905ad79df971577fe8f6b46d45fc9f52d17103b8e8da0417fccdc17a8e0c26a7ededcf3c4b3a26137cbd50bc"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x38, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x201, 0xc, 0x1, 0xfe, 0x20, 0xfa}, 0x99, &(0x7f0000000d00)={0x5, 0xf, 0x99, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xec, "0001298cd291b33c1ca352460db3f4d7"}, @generic={0x65, 0x10, 0xa, "580c08df11846467abf0d9ed2a5ca3f5532b05af5a71e8bd51bf59b2071458a5e20920aef8c29b5ba2467ec59cc252b2128a4ba8932079ea4b417e36370db62e90500f05a63ccddba7ad5ff8bc1f8bb100774a5ff87631b4f56460450246f9a48f1b"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8b5b30452abcb26056d2609313c24cc5"}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x5, 0x6, 0xe3}]}, 0x5, [{0x7a, &(0x7f0000000dc0)=@string={0x7a, 0x3, "695b4c4dc20294974db98563767679468a6a81ebc94e10358cc0031d6a5dde286d7521e65c8340d9ca8f27dfd27ecfead832ab9885c1d5a1cb470cf6fa91aecf0698f403698ed3797dfe7a0823fe3c38aa40dad0165755eb5a6ec6cb6f26cc4c234fbda9dc7d5542855984189dcd3550af0ea1dc8e6cde23"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x3801}}, {0xf0, &(0x7f0000000e80)=@string={0xf0, 0x3, "c6eb6e9faa428eb712334b1162e98c8e6220284c72191d2159c8c0d74174a51df15dbafcbc17819f186c613a6628b2dad9dfe1d4c03bc62a2638c58056515dbabd9108c13c8acca49e0725c88869d9b4a74072b36581a13d934a2be74d2dc645f46fe139f7f7baf4a971816d7eed69dfc2e10c1353ef4c943f34dd7106605a39833ce2e25aaff02f3adb4fecb41041f846be19817d8e0226ca5f15c84ab78e2369c6cd660d034d3b912a9004cc163cb16d218397bd961b4c998973890e87e135ed9537e21fc03a80f2bbb91606b422467b680dc073b0fd6c034dfaaaca2aa33cd16236fd90f87948d86b08f4c622"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x5800}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x812}}]}) (async) syz_io_uring_setup(0x5b74, &(0x7f0000001080)={0x0, 0x4134, 0x20, 0x0, 0x122}, &(0x7f0000001100), &(0x7f0000001140)) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000001180)=""/31, &(0x7f00000011c0)=0x1f) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x1a0, 0x0, 0xffffffff, 0xa8, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, &(0x7f0000001200), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x16, @remote, @remote, @icmp_id=0x66, @port=0x4e21}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @private=0xa010100, @rand_addr=0x64010100, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x14, @multicast2, @local, @gre_key=0x6, @gre_key=0xf}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@empty, @gre_key=0x6060, @port=0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) (async) syz_open_dev$evdev(&(0x7f00000016c0), 0x5, 0x88000) (async) r6 = open(&(0x7f0000001700)='./file0\x00', 0x26ec6, 0x18) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x12) (async) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000001940)={0x2572, 0x1, &(0x7f0000001840)=[0x90], &(0x7f0000001880)=[0x80, 0x1, 0xf, 0xc3, 0x7, 0x4, 0xdf36], &(0x7f00000018c0)=[0x3, 0x400, 0x0, 0x6, 0x8, 0x1, 0xe], &(0x7f0000001900)=[0x2, 0x8, 0x200, 0xbd8, 0x9, 0x4, 0x7, 0x9, 0x6]}) (async) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000001980)) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000019c0)={0x5, 0xc2, 0x1, 0x0, 0x0, [{{r1}, 0x4}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000001a00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000001a40)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000001a80)={r7, r8, 0xf11, 0xa0f9, 0x7}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x7}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x810) 726.909211ms ago: executing program 0 (id=1444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x29, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824314f63dac994ce05dc7224e5479795b50d9015743a8b75c2"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 529.815353ms ago: executing program 2 (id=1445): r0 = socket$kcm(0x2, 0x0, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000480)=ANY=[@ANYRES32=r3], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x7ffe, 0x0, 0xb3, 0x4, 0xffff7e0000000001, 0x9, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x28000, @loopback, 0x8}]}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x102, 0x0) shutdown(0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000680)="3bc1ffd6a82a0ed67c3193e7bebefe7bd5717d029e7d8cfdebed49311ebfb6f655c15ab99b68e04468c39276e7639eeff43093e1564ec0ecfcb85e116f0daa9efa63127300b306a454923edb63906af855070000000000000030c25cead561764b4345b8d1605e3ce2fec96798c99fec8121bd91047b2157134ef997e534bc67a770666c0f055553c72e095657f7047111615dfa91f044e66a9c778eff99a0552ca9e18f31f1d885dba74ecac1c7f13ab1dc6175abf3558f2e19d5c9a6c52a", 0xbf, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r5, r4}, &(0x7f0000000540)=""/83, 0x53, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000004c0)={0x1, 0x4, 0x0, 0x1ff, @vifc_lcl_ifindex=r6, @multicast1}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd01013b000008000100ac14140008000500640100fc100016800c00010000000000000000f09ab92d0006001500"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r7, @ANYRES32, @ANYRES32=r3, @ANYRES8], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)) socketpair(0x6, 0x80000, 0x2, &(0x7f0000000040)={0x0, 0x0}) 0s ago: executing program 3 (id=1446): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02cc2021001d0001000cbb0500040000024e03090800e5758e0000004ef2071b0400fbffff03"], 0x26) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x14, 0x31, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x10008094) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000a0a030000000000000000000300000808000a400000000008000a4000000003f3ff0740000000010c000b400000000000000000080004400000000208000540000000270800084000000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff4, 0x80010, 0xffffffffffffffff, 0xbe9f5000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r8}) setns(r6, 0x24020000) socket(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): B device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.801790][ T5918] usb 5-1: config 0 descriptor?? [ 308.815565][ T8972] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 309.054215][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.835'. [ 309.081604][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 309.149063][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 309.176233][ T5918] usb 5-1: USB disconnect, device number 14 [ 309.672433][ T9014] netlink: 148 bytes leftover after parsing attributes in process `syz.5.837'. [ 311.700362][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 311.700385][ T30] audit: type=1326 audit(1767142008.992:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 311.813556][ T30] audit: type=1326 audit(1767142008.992:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 311.940055][ T5904] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 311.941685][ T30] audit: type=1326 audit(1767142008.992:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.108116][ T9049] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 312.172085][ T30] audit: type=1326 audit(1767142008.992:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.200056][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 312.270288][ T30] audit: type=1326 audit(1767142008.992:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.271655][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.346397][ T9049] team0: Port device netdevsim0 added [ 312.429217][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.452139][ T5904] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 312.474648][ T30] audit: type=1326 audit(1767142008.992:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.535955][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.597344][ T5904] usb 1-1: config 0 descriptor?? [ 312.619845][ T30] audit: type=1326 audit(1767142008.992:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.679812][ T30] audit: type=1326 audit(1767142009.002:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.709109][ T30] audit: type=1326 audit(1767142009.002:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 312.801024][ T30] audit: type=1326 audit(1767142009.012:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9036 comm="syz.0.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x7ffc0000 [ 313.090938][ T7192] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 313.222497][ T9040] lo: entered promiscuous mode [ 313.237173][ T9040] lo: entered allmulticast mode [ 313.260134][ T5904] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 313.271664][ T7192] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 313.339325][ T7192] usb 3-1: config 0 has an invalid interface number: 38 but max is 1 [ 313.385056][ T7192] usb 3-1: config 0 has no interface number 0 [ 313.418996][ T7192] usb 3-1: config 0 has no interface number 1 [ 313.447231][ T7192] usb 3-1: config 0 interface 38 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.461118][ T5904] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 313.468966][ T5904] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -5 [ 313.492462][ T7192] usb 3-1: config 0 interface 38 has no altsetting 0 [ 313.508627][ T7192] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 313.538673][ T7192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.580213][ T7192] usb 3-1: config 0 descriptor?? [ 313.838214][ T7192] usb 3-1: string descriptor 0 read error: -71 [ 313.931339][ T7192] usb 3-1: USB disconnect, device number 33 [ 314.029906][ T7194] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 314.192046][ T7194] usb 5-1: not running at top speed; connect to a high speed hub [ 314.202180][ T7194] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 314.219083][ T7194] usb 5-1: config 1 has no interface number 1 [ 314.253872][ T7194] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.271431][ T7194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.289088][ T7194] usb 5-1: Product: syz [ 314.300912][ T7194] usb 5-1: Manufacturer: syz [ 314.308756][ T7194] usb 5-1: SerialNumber: syz [ 314.623980][ T7194] usb 5-1: failed to enable PITCH for EP 0x82 [ 314.741290][ T7194] usb 5-1: USB disconnect, device number 15 [ 314.887634][ T9083] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 315.133430][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.219177][ T9090] netlink: 148 bytes leftover after parsing attributes in process `syz.2.854'. [ 315.391822][ T9094] fuse: Bad value for 'fd' [ 315.798236][ T7194] usb 1-1: USB disconnect, device number 20 [ 315.829608][ T7192] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 315.989963][ T5919] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 316.019657][ T7192] usb 6-1: Using ep0 maxpacket: 8 [ 316.110233][ T7192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 316.252442][ T5919] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 316.274281][ T7192] usb 6-1: config 8 has an invalid interface number: 142 but max is 0 [ 316.295931][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.313450][ T7192] usb 6-1: config 8 has an invalid interface number: 1 but max is 0 [ 316.327308][ T5919] usb 5-1: Product: syz [ 316.395217][ T5919] usb 5-1: Manufacturer: syz [ 316.403072][ T7192] usb 6-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 316.422369][ T5919] usb 5-1: SerialNumber: syz [ 316.443287][ T7192] usb 6-1: config 8 has no interface number 0 [ 316.474638][ T7192] usb 6-1: config 8 interface 142 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.531302][ T7192] usb 6-1: too many endpoints for config 8 interface 1 altsetting 7: 214, using maximum allowed: 30 [ 316.571189][ T7192] usb 6-1: config 8 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 316.625986][ T7192] usb 6-1: config 8 interface 142 has no altsetting 0 [ 316.673044][ T7192] usb 6-1: config 8 interface 1 has no altsetting 0 [ 316.704232][ T7192] usb 6-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=5f.8c [ 316.737665][ T7192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.817610][ T7192] usb 6-1: Product: syz [ 316.846361][ T7192] usb 6-1: Manufacturer: syz [ 316.867967][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 316.881135][ T7192] usb 6-1: SerialNumber: syz [ 316.993561][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 318.241065][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 318.690809][ T7192] hub 6-1:8.1: Invalid hub with more than one config or interface [ 318.698736][ T7192] hub 6-1:8.1: probe with driver hub failed with error -22 [ 318.762016][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 318.775863][ T7192] usb 6-1: USB disconnect, device number 18 [ 318.821044][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 318.864478][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 318.891346][ T9124] xt_policy: neither incoming nor outgoing policy selected [ 318.908322][ T5919] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 318.990260][ T5919] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 319.027722][ T5919] usb 5-1: USB disconnect, device number 16 [ 319.233661][ T9133] netlink: 48 bytes leftover after parsing attributes in process `syz.5.865'. [ 319.244863][ T9133] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 319.469442][ T9142] fuse: Bad value for 'fd' [ 319.975906][ T9148] FAULT_INJECTION: forcing a failure. [ 319.975906][ T9148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.990219][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.3.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.990252][ T9148] Tainted: [L]=SOFTLOCKUP [ 319.990260][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.990273][ T9148] Call Trace: [ 319.990281][ T9148] [ 319.990290][ T9148] dump_stack_lvl+0xe8/0x150 [ 319.990324][ T9148] should_fail_ex+0x414/0x560 [ 319.990363][ T9148] prepare_alloc_pages+0x22b/0x650 [ 319.990396][ T9148] __alloc_frozen_pages_noprof+0x123/0x370 [ 319.990426][ T9148] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 319.990458][ T9148] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 319.990489][ T9148] ? policy_nodemask+0x27c/0x720 [ 319.990519][ T9148] alloc_pages_mpol+0x232/0x4a0 [ 319.990551][ T9148] vma_alloc_folio_noprof+0xe4/0x200 [ 319.990577][ T9148] ? page_table_check_set+0x148/0x610 [ 319.990599][ T9148] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 319.990624][ T9148] ? css_rstat_updated+0x239/0x520 [ 319.990664][ T9148] ? ___pte_offset_map+0x29/0x240 [ 319.990699][ T9148] folio_prealloc+0x30/0x180 [ 319.990721][ T9148] do_pte_missing+0x14e8/0x3330 [ 319.990763][ T9148] handle_mm_fault+0x1b26/0x32b0 [ 319.990793][ T9148] ? __pte_offset_map_lock+0x13e/0x210 [ 319.990848][ T9148] ? handle_mm_fault+0xdb/0x32b0 [ 319.990888][ T9148] ? __pfx_handle_mm_fault+0x10/0x10 [ 319.990920][ T9148] ? follow_page_pte+0x7ef/0x13e0 [ 319.990959][ T9148] ? __pfx_follow_page_pte+0x10/0x10 [ 319.991002][ T9148] __get_user_pages+0x1650/0x29f0 [ 319.991054][ T9148] __gup_longterm_locked+0x3dc/0x1660 [ 319.991081][ T9148] ? try_get_folio+0x633/0x660 [ 319.991115][ T9148] gup_fast_fallback+0x1d26/0x2290 [ 319.991158][ T9148] ? __pfx_gup_fast_fallback+0x10/0x10 [ 319.991181][ T9148] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 319.991197][ T9148] ? is_valid_gup_args+0x11f/0x200 [ 319.991219][ T9148] ? pin_user_pages_fast+0x4d/0xb0 [ 319.991242][ T9148] io_pin_pages+0xba/0x1b0 [ 319.991258][ T9148] io_region_pin_pages+0x7d/0x190 [ 319.991276][ T9148] io_create_region+0x38c/0x4a0 [ 319.991298][ T9148] io_allocate_scq_urings+0x1ed/0x790 [ 319.991326][ T9148] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 319.991384][ T9148] io_uring_create+0x42b/0x940 [ 319.991418][ T9148] __se_sys_io_uring_setup+0x235/0x240 [ 319.991450][ T9148] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 319.991494][ T9148] ? __pfx_ksys_write+0x10/0x10 [ 319.991527][ T9148] do_syscall_64+0xec/0xf80 [ 319.991555][ T9148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.991570][ T9148] ? trace_irq_disable+0x37/0x100 [ 319.991591][ T9148] ? clear_bhb_loop+0x60/0xb0 [ 319.991609][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.991624][ T9148] RIP: 0033:0x7f5d8398f749 [ 319.991639][ T9148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.991652][ T9148] RSP: 002b:00007f5d84784038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 319.991674][ T9148] RAX: ffffffffffffffda RBX: 00007f5d83be5fa0 RCX: 00007f5d8398f749 [ 319.991685][ T9148] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 319.991695][ T9148] RBP: 00007f5d84784090 R08: 0000000000000000 R09: 0000000000000000 [ 319.991704][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.991713][ T9148] R13: 00007f5d83be6038 R14: 00007f5d83be5fa0 R15: 00007f5d83d0fa28 [ 319.991737][ T9148] [ 320.450169][ T9117] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 320.451708][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.600125][ T9154] netlink: 148 bytes leftover after parsing attributes in process `syz.3.870'. [ 321.160335][ T9117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.167681][ T9117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.174204][ T9117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.180414][ T9117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.387161][ T9160] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 321.438439][ T5918] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 321.516343][ T9160] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 321.545241][ T9160] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 321.609562][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 321.669668][ T5918] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 321.680257][ T5919] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 321.686775][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 321.710820][ T5918] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.738439][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 321.756849][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 321.770956][ T5918] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 321.779352][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 321.803906][ T5918] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.864154][ T9165] bond7: (slave bridge8): Enslaving as an active interface with a down link [ 321.886453][ T5919] usb 5-1: config 0 has no interfaces? [ 321.934285][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 321.956625][ T5919] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 321.982935][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.002244][ T5919] usb 5-1: Product: syz [ 322.008017][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 322.032869][ T5918] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 322.040881][ T5919] usb 5-1: Manufacturer: syz [ 322.051238][ T5919] usb 5-1: SerialNumber: syz [ 322.051986][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.086862][ T5918] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.118008][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.148512][ T5918] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 322.150050][ T5919] usb 5-1: config 0 descriptor?? [ 322.276247][ T5918] usb 6-1: string descriptor 0 read error: -22 [ 322.283385][ T5918] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 322.317568][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.355242][ T5918] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 322.383001][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.390269][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.448764][ T9158] veth1_macvtap: left promiscuous mode [ 322.530174][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.570722][ T9158] veth1_macvtap: entered promiscuous mode [ 322.599442][ T978] usb 5-1: USB disconnect, device number 17 [ 322.643353][ T5919] usb 6-1: USB disconnect, device number 19 [ 323.173923][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.249625][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.253233][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 323.508856][ T36] veth1_macvtap: left promiscuous mode [ 323.820946][ T9195] fuse: Bad value for 'rootmode' [ 324.576180][ T9201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 324.582862][ T9201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 324.641670][ T9201] vhci_hcd vhci_hcd.0: Device attached [ 324.653762][ T9206] loop5: detected capacity change from 0 to 7 [ 324.664288][ T9206] Dev loop5: unable to read RDB block 7 [ 324.886846][ T9206] loop5: unable to read partition table [ 324.902083][ T9209] netlink: 148 bytes leftover after parsing attributes in process `syz.0.884'. [ 324.982183][ T978] usb 40-1: SetAddress Request (2) to port 0 [ 324.991398][ T978] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 325.018212][ T9206] loop5: partition table beyond EOD, truncated [ 325.067605][ T9206] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 325.105624][ T9204] vhci_hcd: connection reset by peer [ 325.114422][ T72] vhci_hcd vhci_hcd.3: stop threads [ 325.133584][ T72] vhci_hcd vhci_hcd.3: release socket [ 325.141714][ T72] vhci_hcd vhci_hcd.3: disconnect device [ 325.218681][ T9214] FAULT_INJECTION: forcing a failure. [ 325.218681][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 325.299787][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.2.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.299824][ T9214] Tainted: [L]=SOFTLOCKUP [ 325.299832][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.299844][ T9214] Call Trace: [ 325.299857][ T9214] [ 325.299866][ T9214] dump_stack_lvl+0xe8/0x150 [ 325.299900][ T9214] should_fail_ex+0x414/0x560 [ 325.299942][ T9214] should_failslab+0xa8/0x100 [ 325.299970][ T9214] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 325.300004][ T9214] ? fuse_alloc_inode+0x2e/0x1a0 [ 325.300043][ T9214] fuse_alloc_inode+0x2e/0x1a0 [ 325.300076][ T9214] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 325.300106][ T9214] alloc_inode+0x6a/0x1b0 [ 325.300131][ T9214] ? __pfx_fuse_inode_eq+0x10/0x10 [ 325.300158][ T9214] ? __pfx_fuse_inode_set+0x10/0x10 [ 325.300186][ T9214] iget5_locked+0x4a/0xa0 [ 325.300218][ T9214] fuse_iget+0x381/0x9b0 [ 325.300251][ T9214] ? timespec64_to_jiffies+0x68/0xc0 [ 325.300277][ T9214] ? fuse_time_to_jiffies+0xe6/0x130 [ 325.300316][ T9214] ? __pfx_fuse_iget+0x10/0x10 [ 325.300353][ T9214] create_new_entry+0x5a0/0x790 [ 325.300376][ T9214] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.300402][ T9214] ? __pfx_create_new_entry+0x10/0x10 [ 325.300436][ T9214] ? fuse_permission+0xa03/0xdc0 [ 325.300474][ T9214] fuse_mknod+0x33b/0x430 [ 325.300493][ T9214] ? __pfx_fuse_permission+0x10/0x10 [ 325.300528][ T9214] ? __pfx_fuse_mknod+0x10/0x10 [ 325.300566][ T9214] ? apparmor_path_mknod+0x1b1/0x230 [ 325.300594][ T9214] ? inode_permission+0x2fd/0x5f0 [ 325.300620][ T9214] ? bpf_lsm_inode_mknod+0x9/0x20 [ 325.300639][ T9214] ? security_inode_mknod+0xc2/0x360 [ 325.300673][ T9214] vfs_mknod+0x52b/0x580 [ 325.300702][ T9214] do_mknodat+0x3cc/0x610 [ 325.300748][ T9214] ? __pfx_do_mknodat+0x10/0x10 [ 325.300783][ T9214] ? getname_flags+0x1e5/0x540 [ 325.300814][ T9214] __x64_sys_mknod+0x8c/0xa0 [ 325.300837][ T9214] do_syscall_64+0xec/0xf80 [ 325.300860][ T9214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.300881][ T9214] ? trace_irq_disable+0x37/0x100 [ 325.300910][ T9214] ? clear_bhb_loop+0x60/0xb0 [ 325.300936][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.300957][ T9214] RIP: 0033:0x7f97e698f749 [ 325.300976][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.300995][ T9214] RSP: 002b:00007f97e78d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 325.301019][ T9214] RAX: ffffffffffffffda RBX: 00007f97e6be5fa0 RCX: 00007f97e698f749 [ 325.301036][ T9214] RDX: 0000000000000704 RSI: 0000000000001000 RDI: 00002000000002c0 [ 325.301050][ T9214] RBP: 00007f97e78d1090 R08: 0000000000000000 R09: 0000000000000000 [ 325.301064][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.301077][ T9214] R13: 00007f97e6be6038 R14: 00007f97e6be5fa0 R15: 00007f97e6d0fa28 [ 325.301112][ T9214] [ 326.148611][ T9223] veth0_to_team: entered promiscuous mode [ 326.410485][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 326.559610][ T7194] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 326.805958][ T7194] usb 3-1: Using ep0 maxpacket: 8 [ 326.850263][ T7194] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 326.861860][ T7194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.933370][ T7194] usb 3-1: Product: syz [ 326.942033][ T7194] usb 3-1: Manufacturer: syz [ 326.954994][ T7194] usb 3-1: SerialNumber: syz [ 326.990626][ T7194] usb 3-1: config 0 descriptor?? [ 327.011703][ T7194] redrat3 3-1:0.0: Couldn't find all endpoints [ 327.956418][ T7194] usb 3-1: USB disconnect, device number 34 [ 328.321848][ T9263] bridge11: entered promiscuous mode [ 328.556571][ T9267] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 328.913081][ T7194] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 328.927876][ T9267] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 328.965580][ T9267] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 329.054808][ T9271] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 329.113780][ T7194] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 329.180071][ T7194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.207058][ T7194] usb 1-1: Product: syz [ 329.222232][ T7194] usb 1-1: Manufacturer: syz [ 329.226967][ T7194] usb 1-1: SerialNumber: syz [ 329.251695][ T7194] usb 1-1: config 0 descriptor?? [ 329.274034][ T7194] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 329.293726][ T7194] usb 1-1: setting power ON [ 329.306489][ T7194] dvb-usb: bulk message failed: -22 (2/0) [ 329.406375][ T9271] macvlan2: entered promiscuous mode [ 329.412524][ T9271] macvlan2: entered allmulticast mode [ 329.418901][ T9271] bond4: entered promiscuous mode [ 329.440529][ T9271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.485711][ T7194] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 329.502004][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.511302][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.534135][ T9271] bond4: left promiscuous mode [ 329.547302][ T7194] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 329.567796][ T7194] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 329.620277][ T7194] usb 1-1: USB disconnect, device number 21 [ 329.979804][ T9282] netlink: 148 bytes leftover after parsing attributes in process `syz.3.904'. [ 330.093622][ T978] usb 40-1: device descriptor read/8, error -110 [ 330.277385][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 330.521089][ T978] usb usb40-port1: attempt power cycle [ 330.899991][ T5896] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 331.073551][ T5896] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 331.090098][ T978] usb usb40-port1: unable to enumerate USB device [ 331.102788][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.207789][ T5896] usb 3-1: config 0 descriptor?? [ 332.044224][ T5896] usb 3-1: Cannot set MAC address [ 332.055938][ T5896] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 332.220824][ T5896] usb 3-1: USB disconnect, device number 35 [ 332.821101][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 332.872521][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 332.872540][ T30] audit: type=1326 audit(1767142030.242:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9335 comm="syz.2.915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e698f749 code=0x0 [ 332.979790][ T9341] bridge7: entered promiscuous mode [ 333.350079][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 333.800323][ T9352] input: syz1 as /devices/virtual/input/input17 [ 334.402954][ T9357] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.508565][ T9380] syzkaller0: entered promiscuous mode [ 335.514152][ T9380] syzkaller0: entered allmulticast mode [ 335.558827][ T5904] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 335.866690][ T5904] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 335.889862][ T5904] usb 1-1: config 1 has no interface number 0 [ 335.929657][ T5904] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 335.955481][ T5904] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 335.975086][ T5904] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 336.032721][ T5904] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 336.068678][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.086253][ T5904] usb 1-1: Product: syz [ 336.101273][ T5904] usb 1-1: Manufacturer: syz [ 336.115077][ T5904] usb 1-1: SerialNumber: syz [ 336.128769][ T9385] netlink: 148 bytes leftover after parsing attributes in process `syz.5.923'. [ 336.222798][ T9357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.400091][ T7194] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 336.559694][ T7194] usb 3-1: Using ep0 maxpacket: 16 [ 336.578478][ T7194] usb 3-1: unable to get BOS descriptor or descriptor too short [ 336.631689][ T7194] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 336.668672][ T7194] usb 3-1: config 13 has no interface number 0 [ 336.695251][ T7194] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 336.774070][ T7194] usb 3-1: config 13 interface 50 has no altsetting 0 [ 336.870278][ T7194] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 336.887648][ T7194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.903903][ T7194] usb 3-1: Product: syz [ 336.912646][ T7194] usb 3-1: Manufacturer: syz [ 336.924648][ T7194] usb 3-1: SerialNumber: syz [ 337.011251][ T9381] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.100442][ T9391] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 337.178391][ T9391] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 338.004260][ T5904] usb 1-1: Error in usbnet_get_endpoints (-71) [ 338.047749][ T5904] usb 1-1: USB disconnect, device number 22 [ 338.555250][ T7194] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.585276][ T7194] usb 3-1: MIDIStreaming interface descriptor not found [ 338.737458][ T7194] usb 3-1: USB disconnect, device number 36 [ 338.872346][ T7737] udevd[7737]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.071614][ T9411] fuse: Bad value for 'fd' [ 339.107208][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.931'. [ 339.122930][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.931'. [ 339.348680][ T30] audit: type=1326 audit(1767142036.712:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.5.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e18f749 code=0x0 [ 339.620520][ T9421] bridge12: entered promiscuous mode [ 340.093483][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 340.272530][ T9436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.941'. [ 340.299680][ T9436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.941'. [ 340.391042][ T9439] FAULT_INJECTION: forcing a failure. [ 340.391042][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 340.435302][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.3.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.435329][ T9439] Tainted: [L]=SOFTLOCKUP [ 340.435335][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.435344][ T9439] Call Trace: [ 340.435350][ T9439] [ 340.435357][ T9439] dump_stack_lvl+0xe8/0x150 [ 340.435381][ T9439] should_fail_ex+0x414/0x560 [ 340.435410][ T9439] should_failslab+0xa8/0x100 [ 340.435430][ T9439] kmem_cache_alloc_noprof+0x88/0x710 [ 340.435454][ T9439] ? __percpu_counter_compare+0xae/0x2e0 [ 340.435477][ T9439] ? ep_insert+0x272/0x19e0 [ 340.435501][ T9439] ep_insert+0x272/0x19e0 [ 340.435527][ T9439] ? __fget_files+0x2a/0x420 [ 340.435549][ T9439] ? __pfx_ep_insert+0x10/0x10 [ 340.435570][ T9439] ? __pfx___mutex_lock+0x10/0x10 [ 340.435587][ T9439] ? __fget_files+0x2a/0x420 [ 340.435608][ T9439] ? __fget_files+0x2a/0x420 [ 340.435626][ T9439] ? __fget_files+0x3a0/0x420 [ 340.435644][ T9439] ? __fget_files+0x2a/0x420 [ 340.435669][ T9439] do_epoll_ctl+0x7f4/0xe80 [ 340.435696][ T9439] __x64_sys_epoll_ctl+0x163/0x1a0 [ 340.435720][ T9439] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 340.435750][ T9439] do_syscall_64+0xec/0xf80 [ 340.435765][ T9439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.435780][ T9439] ? trace_irq_disable+0x37/0x100 [ 340.435800][ T9439] ? clear_bhb_loop+0x60/0xb0 [ 340.435819][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.435833][ T9439] RIP: 0033:0x7f5d8398f749 [ 340.435847][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.435860][ T9439] RSP: 002b:00007f5d81bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 340.435877][ T9439] RAX: ffffffffffffffda RBX: 00007f5d83be6180 RCX: 00007f5d8398f749 [ 340.435889][ T9439] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 340.435898][ T9439] RBP: 00007f5d81bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.435908][ T9439] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 340.435918][ T9439] R13: 00007f5d83be6218 R14: 00007f5d83be6180 R15: 00007f5d83d0fa28 [ 340.435942][ T9439] [ 340.871920][ T9444] netlink: 148 bytes leftover after parsing attributes in process `syz.2.942'. [ 341.403007][ T9453] netlink: 'syz.5.944': attribute type 10 has an invalid length. [ 341.635996][ T9453] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 341.763676][ T9459] tc_dump_action: action bad kind [ 341.962698][ T9468] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 342.063748][ T9468] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.185714][ T9473] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.195155][ T9473] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 342.227960][ T9473] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 342.397983][ T9468] veth7: entered promiscuous mode [ 342.488210][ T9468] bond8: (slave veth7): Enslaving as an active interface with a down link [ 342.528168][ T9474] macvlan2: entered promiscuous mode [ 342.536258][ T9474] macvlan2: entered allmulticast mode [ 342.548632][ T9474] bond8: entered promiscuous mode [ 342.571350][ T9474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.621929][ T9474] bond8: left promiscuous mode [ 342.869587][ T7192] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 343.039572][ T7192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 343.064743][ T7192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.100157][ T7192] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 343.128537][ T7192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.163112][ T7192] usb 4-1: config 0 descriptor?? [ 343.209068][ T30] audit: type=1326 audit(1767142040.572:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="syz.5.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e18f749 code=0x0 [ 343.362414][ T9492] bridge13: entered promiscuous mode [ 343.399721][ T7194] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 343.591116][ T7192] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 343.632748][ T7192] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 343.750183][ T7194] usb 3-1: device not accepting address 37, error -71 [ 344.012443][ T7192] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 344.646844][ T9478] cp2112 0003:10C4:EA90.0009: Error starting transaction: -38 [ 344.685090][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.726726][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.734882][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 344.960824][ T30] audit: type=1326 audit(1767142042.332:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.4.962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8dd8f749 code=0x0 [ 345.579537][ T40] usb 4-1: USB disconnect, device number 23 [ 345.775601][ T9518] netlink: 148 bytes leftover after parsing attributes in process `syz.3.963'. [ 346.251065][ T5904] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 346.390162][ T5904] usb 1-1: device descriptor read/64, error -71 [ 346.649544][ T5904] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 346.747831][ T9545] bond0: Caught tx_queue_len zero misconfig [ 346.749831][ T5918] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 346.779984][ T5904] usb 1-1: device descriptor read/64, error -71 [ 346.900469][ T5904] usb usb1-port1: attempt power cycle [ 346.922239][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 347.049500][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.070604][ T5918] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 347.091524][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.396592][ T5918] usb 4-1: config 0 descriptor?? [ 347.439850][ T5904] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 347.460772][ T5904] usb 1-1: device descriptor read/8, error -71 [ 347.638755][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 347.646319][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.668916][ T5918] usb 4-1: USB disconnect, device number 24 [ 347.700964][ T5904] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 347.731427][ T5904] usb 1-1: device descriptor read/8, error -71 [ 347.778863][ T9560] ipvlan2: entered promiscuous mode [ 347.784634][ T9560] ipvlan2: entered allmulticast mode [ 347.793120][ T9560] team0: entered allmulticast mode [ 347.799032][ T9560] team_slave_0: entered allmulticast mode [ 347.808765][ T9560] team_slave_1: entered allmulticast mode [ 347.818802][ T9560] vxlan0: entered allmulticast mode [ 347.825705][ T9560] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 347.851653][ T5904] usb usb1-port1: unable to enumerate USB device [ 347.919864][ T7194] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 347.934401][ T9564] ucma_write: process 654 (syz.2.979) changed security contexts after opening file descriptor, this is not allowed. [ 348.093876][ T7194] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 348.118287][ T7194] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 348.136801][ T7194] usb 6-1: Product: syz [ 348.143048][ T7194] usb 6-1: SerialNumber: syz [ 348.158482][ T7194] usb 6-1: config 0 descriptor?? [ 348.380225][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.390312][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.438370][ T9574] netlink: 148 bytes leftover after parsing attributes in process `syz.3.981'. [ 349.355588][ T9585] l2tp_ppp: sess 2/0: no socket in recv [ 349.372506][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 350.634437][ T9498] usb 6-1: USB disconnect, device number 20 [ 350.783428][ T9620] tipc: Started in network mode [ 350.807062][ T9620] tipc: Node identity 2de6000000000000002e, cluster identity 4711 [ 351.329666][ T5918] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 351.395843][ T9629] netlink: 68 bytes leftover after parsing attributes in process `syz.0.999'. [ 351.510538][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 351.518553][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.554540][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.597173][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.609536][ T7194] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 351.638369][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.690440][ T5918] usb 6-1: config 0 descriptor?? [ 351.722426][ T5918] hub 6-1:0.0: USB hub found [ 351.821570][ T7194] usb 3-1: config 0 has no interfaces? [ 351.831215][ T7194] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 351.840753][ T7194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.848900][ T7194] usb 3-1: Product: syz [ 351.853310][ T7194] usb 3-1: Manufacturer: syz [ 351.857942][ T7194] usb 3-1: SerialNumber: syz [ 351.934790][ T5918] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 351.976239][ T7194] usb 3-1: config 0 descriptor?? [ 351.988579][ T9640] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1001'. [ 352.209095][ T9626] veth1_macvtap: left promiscuous mode [ 352.302894][ T9626] veth1_macvtap: entered promiscuous mode [ 352.326197][ T10] usb 3-1: USB disconnect, device number 39 [ 352.669556][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 352.840988][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.861920][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 352.903212][ T10] usb 4-1: config 6 has an invalid interface number: 36 but max is 0 [ 352.925012][ T10] usb 4-1: config 6 has no interface number 0 [ 352.942540][ T10] usb 4-1: config 6 interface 36 altsetting 4 endpoint 0x5 has invalid maxpacket 1032, setting to 64 [ 352.989537][ T10] usb 4-1: config 6 interface 36 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 353.028029][ T10] usb 4-1: config 6 interface 36 has no altsetting 0 [ 353.093739][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=8002, bcdDevice=3f.e0 [ 353.133441][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.167154][ T10] usb 4-1: Product: ъ [ 353.187481][ T10] usb 4-1: Manufacturer: 쓙ই薎恕␙㒾ᬆ틊籬名愵颉籒㛀뭈댰ⵑ䓂刔鄂᝹햴છ絕炧톝풏뫦췇䭥ǿꪵ⢚㣆釋Ⴐꩾ훔䬘鉥뮌 [ 353.265767][ T10] usb 4-1: SerialNumber: я [ 353.290074][ T9648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 353.298349][ T9648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 353.388796][ T5939] veth1_macvtap: left promiscuous mode [ 353.434233][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 353.449850][ T40] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 353.473015][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 353.551523][ T10] ftdi_sio 4-1:6.36: FTDI USB Serial Device converter detected [ 353.586866][ T10] ftdi_sio ttyUSB0: unknown device type: 0x3fe0 [ 353.622008][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.641433][ T10] usb 4-1: USB disconnect, device number 25 [ 353.682458][ T10] ftdi_sio 4-1:6.36: device disconnected [ 353.698668][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.728022][ T40] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.761886][ T40] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 353.779178][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.792784][ T40] usb 3-1: config 0 descriptor?? [ 354.089652][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 354.280210][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 354.292199][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.312350][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 354.321448][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.335764][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.352489][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.385125][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.418308][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.490390][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 354.498310][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.538447][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.575094][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.778065][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.809584][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 354.817793][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 354.837273][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.870568][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.888172][ T40] usbhid 3-1:0.0: can't add hid device: -71 [ 354.905466][ T40] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 354.909314][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.966300][ T10] usb 1-1: string descriptor 0 read error: -22 [ 354.979265][ T40] usb 3-1: USB disconnect, device number 40 [ 354.988205][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 355.007681][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.082983][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 355.363219][ T9679] trusted_key: encrypted_key: key user:syz not found [ 355.504114][ T9667] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1012'. [ 355.545023][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 355.752337][ T10] usb 1-1: USB disconnect, device number 27 [ 355.808406][ T9683] input: syz0 as /devices/virtual/input/input18 [ 356.132902][ T9693] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 356.211803][ T9696] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 356.222643][ T9693] team0: Port device netdevsim0 added [ 356.248973][ T9696] team0: Port device netdevsim0 removed [ 356.267385][ T9696] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 356.772314][ T9705] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1022'. [ 357.291749][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1023'. [ 357.436805][ T5918] usbhid 6-1:0.0: can't add hid device: -32 [ 357.478438][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 357.608014][ T9713] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 357.616389][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.626425][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.633721][ T9713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.089982][ T9725] syzkaller0: entered promiscuous mode [ 358.102755][ T9725] syzkaller0: entered allmulticast mode [ 358.811944][ T9739] input: syz1 as /devices/virtual/input/input19 [ 359.297094][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 359.319684][ T9749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.327063][ T9749] IPv6: NLM_F_CREATE should be set when creating new route [ 359.550320][ T40] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 359.600954][ T30] audit: type=1326 audit(1767142056.972:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.4.1038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8dd8f749 code=0x0 [ 359.816807][ T40] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.828490][ T40] usb 4-1: not running at top speed; connect to a high speed hub [ 359.848091][ T40] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.877537][ T40] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.540218][ T40] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.589880][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.638234][ T40] usb 4-1: Product: syz [ 360.687626][ T40] usb 4-1: Manufacturer: syz [ 360.696102][ T40] usb 4-1: SerialNumber: syz [ 360.899964][ T978] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 361.070083][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 361.088101][ T978] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 361.107845][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.162422][ T978] usb 1-1: Product: syz [ 361.166714][ T978] usb 1-1: Manufacturer: syz [ 361.176419][ T978] usb 1-1: SerialNumber: syz [ 361.402120][ T9766] bridge5: entered promiscuous mode [ 361.925151][ T40] usb 4-1: 0:2 : does not exist [ 361.930592][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 362.022209][ T40] usb 4-1: USB disconnect, device number 26 [ 362.155921][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.846737][ T9790] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1042'. [ 363.316141][ T9786] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1043'. [ 363.778483][ T978] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.952130][ T978] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 364.007353][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.010532][ T978] usb 1-1: USB disconnect, device number 28 [ 364.249855][ T30] audit: type=1326 audit(1767142061.612:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9807 comm="syz.2.1050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e698f749 code=0x0 [ 364.318298][ T9815] netlink: 'syz.5.1053': attribute type 10 has an invalid length. [ 364.346799][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1053'. [ 364.601409][ T9820] binder: 9810:9820 ioctl 4018620d 0 returned -22 [ 364.644242][ T9815] team0: Port device geneve0 added [ 364.958737][ T9826] bridge8: entered promiscuous mode [ 365.537136][ T9819] binder: 9810:9819 ioctl d000941e 0 returned -22 [ 366.612469][ T9848] Cannot find add_set index 0 as target [ 366.732205][ T9848] vivid-002: disconnect [ 366.979567][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 367.142883][ T9851] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 367.183237][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 367.192630][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.206518][ T10] usb 4-1: config 0 descriptor?? [ 367.214690][ T10] cp210x 4-1:0.0: cp210x converter detected [ 367.277970][ T9851] 8021q: adding VLAN 0 to HW filter on device bond9 [ 367.343501][ T9857] netlink: 'syz.5.1060': attribute type 6 has an invalid length. [ 367.398219][ T9853] bond9: (slave veth9): Enslaving as an active interface with a down link [ 367.416195][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 367.454389][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 367.464438][ T10] cp210x 4-1:0.0: querying part number failed [ 367.466474][ T9856] bond4: (slave dummy0): Releasing active interface [ 367.498906][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 367.512579][ T9856] bond9: (slave dummy0): making interface the new active one [ 367.541899][ T9856] dummy0: entered promiscuous mode [ 367.561031][ T9856] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 368.555390][ T30] audit: type=1326 audit(1767142065.922:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9883 comm="syz.4.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8dd8f749 code=0x0 [ 368.679558][ T7192] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 368.736457][ T9893] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1066'. [ 368.909531][ T978] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 369.061949][ T978] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 369.071368][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.082656][ T978] usb 1-1: config 0 descriptor?? [ 369.258298][ T978] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 369.557466][ T9904] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 369.639217][ T7194] usb 4-1: USB disconnect, device number 27 [ 369.653935][ T978] gp8psk: usb in 137 operation failed. [ 369.686230][ T9848] vivid-002: reconnect [ 369.691518][ T978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 369.703161][ T7194] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 369.715881][ T978] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 369.734819][ T7194] cp210x 4-1:0.0: device disconnected [ 369.794275][ T978] usb 1-1: USB disconnect, device number 29 [ 370.083035][ T9914] netlink: 'syz.5.1076': attribute type 1 has an invalid length. [ 370.226278][ T9914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.309077][ T9918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.363804][ T9918] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 370.419229][ T9918] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 370.512184][ T9914] veth9: entered promiscuous mode [ 370.521176][ T9914] bond4: (slave veth9): Enslaving as an active interface with a down link [ 370.539076][ T9920] macvlan2: entered promiscuous mode [ 370.556562][ T9920] macvlan2: entered allmulticast mode [ 370.579676][ T9920] bond4: entered promiscuous mode [ 370.610130][ T9920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.870213][ T9920] bond4: left promiscuous mode [ 371.052423][ T9923] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 371.068107][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.078550][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.085917][ T9923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.142664][ T9926] bridge0: entered promiscuous mode [ 371.168347][ T9926] bridge0: port 1(macvtap1) entered blocking state [ 371.177592][ T9926] bridge0: port 1(macvtap1) entered disabled state [ 371.205940][ T9926] macvtap1: entered allmulticast mode [ 371.219666][ T9926] bridge0: entered allmulticast mode [ 371.246550][ T9926] macvtap1: left allmulticast mode [ 371.263989][ T9926] bridge0: left allmulticast mode [ 371.292801][ T9926] bridge0: left promiscuous mode [ 371.602667][ T30] audit: type=1326 audit(1767142068.972:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.5.1081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e18f749 code=0x0 [ 371.940241][ T9942] bridge15: entered promiscuous mode [ 372.099922][ T7194] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 372.340031][ T7194] usb 4-1: Using ep0 maxpacket: 16 [ 372.353382][ T7194] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 59373, setting to 1024 [ 372.394471][ T7194] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 372.438848][ T7194] usb 4-1: config 0 interface 0 has no altsetting 0 [ 372.469362][ T7194] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 372.518510][ T7194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.597876][ T7194] usb 4-1: config 0 descriptor?? [ 372.619059][ T9928] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 372.910389][ T7194] usbhid 4-1:0.0: can't add hid device: -71 [ 372.916478][ T7194] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 373.006333][ T7194] usb 4-1: USB disconnect, device number 28 [ 373.101106][ T9960] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1086'. [ 373.352577][ T9963] binder: BINDER_SET_CONTEXT_MGR already set [ 373.359173][ T9963] binder: 9961:9963 ioctl 4018620d 200000000100 returned -16 [ 373.513759][ T9963] binder: BINDER_SET_CONTEXT_MGR already set [ 373.638386][ T9963] binder: 9961:9963 ioctl 4018620d 200000000100 returned -16 [ 373.723648][ T9963] binder: BINDER_SET_CONTEXT_MGR already set [ 373.731680][ T9963] binder: 9961:9963 ioctl 4018620d 200000000100 returned -16 [ 373.746937][ T9963] binder: BINDER_SET_CONTEXT_MGR already set [ 373.769563][ T5917] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 373.881918][ T9963] binder: 9961:9963 ioctl 4018620d 200000000100 returned -16 [ 373.973272][ T9963] binder: BINDER_SET_CONTEXT_MGR already set [ 374.048318][ T9973] ipvlan2: entered promiscuous mode [ 374.106970][ T9963] binder: 9961:9963 ioctl 4018620d 200000000100 returned -16 [ 374.155807][ T9973] ipvlan2: entered allmulticast mode [ 374.185489][ T9973] team0: entered allmulticast mode [ 374.208089][ T9973] team_slave_0: entered allmulticast mode [ 374.234342][ T9973] team_slave_1: entered allmulticast mode [ 374.250283][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 374.258833][ T9973] batadv1: entered allmulticast mode [ 374.674197][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1095'. [ 374.680230][ T5917] usb 3-1: device descriptor read/all, error -71 [ 374.881185][ T30] audit: type=1326 audit(1767142072.252:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e698f749 code=0x0 [ 375.364313][T10010] xt_hashlimit: max too large, truncated to 1048576 [ 375.693642][ T9498] IPVS: starting estimator thread 0... [ 375.789522][T10016] IPVS: using max 29 ests per chain, 69600 per kthread [ 376.252192][T10028] fuse: Bad value for 'fd' [ 376.354513][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1109'. [ 376.425357][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.438165][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.181451][T10044] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1112'. [ 377.294888][T10054] FAULT_INJECTION: forcing a failure. [ 377.294888][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 377.310127][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.2.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.310152][T10054] Tainted: [L]=SOFTLOCKUP [ 377.310158][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.310172][T10054] Call Trace: [ 377.310179][T10054] [ 377.310186][T10054] dump_stack_lvl+0xe8/0x150 [ 377.310214][T10054] should_fail_ex+0x414/0x560 [ 377.310243][T10054] should_failslab+0xa8/0x100 [ 377.310264][T10054] kmem_cache_alloc_noprof+0x88/0x710 [ 377.310289][T10054] ? ep_ptable_queue_proc+0x5c/0x200 [ 377.310317][T10054] ep_ptable_queue_proc+0x5c/0x200 [ 377.310342][T10054] snd_pcm_oss_poll+0x484/0x980 [ 377.310371][T10054] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 377.310399][T10054] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 377.310420][T10054] ep_insert+0x1161/0x19e0 [ 377.310452][T10054] ? __pfx_ep_insert+0x10/0x10 [ 377.310473][T10054] ? __pfx___mutex_lock+0x10/0x10 [ 377.310490][T10054] ? __fget_files+0x2a/0x420 [ 377.310511][T10054] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 377.310534][T10054] ? __fget_files+0x3a0/0x420 [ 377.310553][T10054] ? __fget_files+0x2a/0x420 [ 377.310578][T10054] do_epoll_ctl+0x7f4/0xe80 [ 377.310605][T10054] __x64_sys_epoll_ctl+0x163/0x1a0 [ 377.310629][T10054] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 377.310662][T10054] do_syscall_64+0xec/0xf80 [ 377.310677][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.310692][T10054] ? trace_irq_disable+0x37/0x100 [ 377.310713][T10054] ? clear_bhb_loop+0x60/0xb0 [ 377.310731][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.310751][T10054] RIP: 0033:0x7f97e698f749 [ 377.310766][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.310780][T10054] RSP: 002b:00007f97e7876038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 377.310797][T10054] RAX: ffffffffffffffda RBX: 00007f97e6be6180 RCX: 00007f97e698f749 [ 377.310809][T10054] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 377.310818][T10054] RBP: 00007f97e7876090 R08: 0000000000000000 R09: 0000000000000000 [ 377.310827][T10054] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 377.310837][T10054] R13: 00007f97e6be6218 R14: 00007f97e6be6180 R15: 00007f97e6d0fa28 [ 377.310861][T10054] [ 377.554669][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 377.882924][ T10] usb 5-1: config 0 has no interfaces? [ 377.895578][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 377.928844][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.956949][ T10] usb 5-1: config 0 descriptor?? [ 378.069638][ T9498] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 378.230797][ T9498] usb 1-1: Using ep0 maxpacket: 8 [ 378.264585][ T9498] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 378.293238][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.322935][ T9498] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.350436][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.373466][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.415816][ T9498] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 378.463383][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.482104][ T9498] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.544489][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.569911][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.601779][ T9498] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 378.615164][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.637343][ T9498] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.637366][ T30] audit: type=1326 audit(1767142076.002:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.2.1118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e698f749 code=0x0 [ 378.786852][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.864569][ T9498] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.913934][ T9498] usb 1-1: string descriptor 0 read error: -22 [ 378.921665][ T9498] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 378.937916][ T9498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.991924][ T9498] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 379.375404][T10056] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 379.494412][T10056] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 379.610721][ T7917] dummy0: left promiscuous mode [ 379.703600][ T9498] usb 1-1: USB disconnect, device number 30 [ 380.185931][ T5904] usb 5-1: USB disconnect, device number 18 [ 380.285829][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'. [ 381.249671][ T9498] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 381.443955][ T9498] usb 3-1: Using ep0 maxpacket: 8 [ 381.482604][ T9498] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.513662][ T9498] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 381.541201][ T9498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.572492][ T9498] usb 3-1: config 0 descriptor?? [ 382.205221][T10116] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1129'. [ 382.805995][T10097] fuse: root generation should be zero [ 383.524171][ T30] audit: type=1326 audit(1767142080.892:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.0.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4538f749 code=0x0 [ 383.816626][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.823082][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.118220][T10133] bridge10: entered promiscuous mode [ 384.821867][ T9498] usbhid 3-1:0.0: can't add hid device: -71 [ 384.827895][ T9498] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 384.932825][ T9498] usb 3-1: USB disconnect, device number 44 [ 385.183132][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1134'. [ 385.954341][T10154] netlink: 'syz.3.1138': attribute type 8 has an invalid length. [ 386.003716][T10154] netlink: 'syz.3.1138': attribute type 9 has an invalid length. [ 386.068955][T10154] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 386.108949][T10159] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 386.211198][T10154] netlink: 'syz.3.1138': attribute type 11 has an invalid length. [ 386.278452][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 386.459593][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 386.571259][T10167] tipc: Started in network mode [ 386.576217][T10167] tipc: Node identity 2de6000000000000002e, cluster identity 4711 [ 386.629720][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.668383][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 386.699533][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.761354][ T10] usb 5-1: config 0 descriptor?? [ 386.984108][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 387.006588][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 387.048283][ T10] usb 5-1: USB disconnect, device number 19 [ 387.139876][ T5830] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 387.299735][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 387.312518][ T5830] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 387.322712][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.349267][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.397297][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.411195][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 387.431031][ T5830] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 387.449768][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.577167][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.614078][ T30] audit: type=1326 audit(1767142084.892:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.5.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6e18f749 code=0x0 [ 387.678326][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.679807][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 387.715910][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 387.744481][ T5830] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 387.754505][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.772150][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.793909][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 388.033292][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 388.047058][ T5830] usb 4-1: string descriptor 0 read error: -22 [ 388.078930][ T5830] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 388.119968][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.134647][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.152141][T10197] bridge17: entered promiscuous mode [ 388.319584][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.321699][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.357373][T10199] input: syz1 as /devices/virtual/input/input22 [ 388.389229][ T10] usb 5-1: config 0 descriptor?? [ 388.503281][ T5830] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 388.643146][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.690428][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.706617][ T5918] usb 4-1: USB disconnect, device number 29 [ 388.785228][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 388.800330][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 388.863997][ T10] usb 5-1: USB disconnect, device number 20 [ 389.545163][T10216] loop6: detected capacity change from 0 to 4095 [ 389.761393][T10223] sctp: [Deprecated]: syz.2.1162 (pid 10223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.761393][T10223] Use struct sctp_sack_info instead [ 389.926534][T10225] SET target dimension over the limit! [ 390.329559][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 390.339661][ T5918] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 390.370558][ T5830] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 390.489626][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 390.500911][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.529583][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.537960][ T10] usb 4-1: Product: syz [ 390.543087][ T10] usb 4-1: Manufacturer: syz [ 390.547762][ T10] usb 4-1: SerialNumber: syz [ 390.558043][ T10] usb 4-1: config 0 descriptor?? [ 390.572341][ T5918] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 390.576994][ T5830] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 390.589965][ T5918] usb 3-1: config 0 has no interface number 0 [ 390.606461][ T5830] usb 1-1: config 0 has no interface number 0 [ 390.611719][ T5918] usb 3-1: too many endpoints for config 0 interface 32 altsetting 202: 180, using maximum allowed: 30 [ 390.629024][ T5830] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 390.663397][ T5918] usb 3-1: config 0 interface 32 altsetting 202 has 0 endpoint descriptors, different from the interface descriptor's value: 180 [ 390.676917][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.676948][ T5830] usb 1-1: Product: syz [ 390.676965][ T5830] usb 1-1: Manufacturer: syz [ 390.685656][ T5918] usb 3-1: config 0 interface 32 has no altsetting 0 [ 390.711738][ T5830] usb 1-1: SerialNumber: syz [ 390.732666][ T5830] usb 1-1: config 0 descriptor?? [ 390.761998][ T5918] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 390.790251][ T5917] usb 4-1: USB disconnect, device number 30 [ 390.797860][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.891536][ T5918] usb 3-1: Product: syz [ 390.895784][ T5918] usb 3-1: Manufacturer: syz [ 391.003262][ T5830] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 391.018098][ T5830] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 391.042180][ T5830] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 391.050475][ T5830] usb 1-1: media controller created [ 391.061362][ T5918] usb 3-1: SerialNumber: syz [ 391.095581][ T5918] usb 3-1: config 0 descriptor?? [ 391.155087][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.336723][ T5830] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 392.565769][ T5830] usb 1-1: USB disconnect, device number 31 [ 392.802860][ T5918] ftdi_sio 3-1:0.32: FTDI USB Serial Device converter detected [ 392.842186][ T5918] usb 3-1: Detected FT-X [ 392.863481][ T5918] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 392.909391][ T5918] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 392.936347][ T5918] ftdi_sio 3-1:0.32: GPIO initialisation failed: -71 [ 392.979763][ T5918] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 393.018360][ T5918] usb 3-1: USB disconnect, device number 45 [ 393.086838][ T5918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 393.108057][ T5918] ftdi_sio 3-1:0.32: device disconnected [ 393.510529][T10266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 394.062205][T10286] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 394.590094][ T5918] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 394.749522][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 394.815298][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.886459][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.987326][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.059591][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.124576][T10293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.204653][ T5918] usb 5-1: Product: syz [ 395.241253][ T5918] usb 5-1: Manufacturer: syz [ 395.257224][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.350658][ T5918] usb 5-1: SerialNumber: syz [ 395.360881][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.372308][T10294] syzkaller0: entered promiscuous mode [ 395.401944][T10294] syzkaller0: entered allmulticast mode [ 395.509973][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.519028][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.530935][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.551822][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.019376][T10305] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 396.129837][ T5917] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 396.196730][T10305] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.282287][T10309] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.290872][T10309] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 396.312863][T10309] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 396.320366][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 396.329336][ T5917] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 396.341312][ T5917] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 396.379834][ T5917] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.412214][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 396.434480][T10305] veth11: entered promiscuous mode [ 396.451072][ T5917] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 396.454580][T10305] bond10: (slave veth11): Enslaving as an active interface with a down link [ 396.474131][ T5917] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 396.525800][T10310] macvlan2: entered promiscuous mode [ 396.535119][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.544510][ T5917] usb 3-1: Product: syz [ 396.548979][ T5917] usb 3-1: Manufacturer: syz [ 396.553367][T10310] macvlan2: entered allmulticast mode [ 396.560337][ T5917] usb 3-1: SerialNumber: syz [ 396.571105][T10310] bond10: entered promiscuous mode [ 396.580898][T10310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.595583][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 396.605242][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 396.628439][ T10] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 396.643212][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.644297][T10310] bond10: left promiscuous mode [ 396.680629][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 396.703872][ T10] usb 4-1: Product: syz [ 396.708130][ T10] usb 4-1: Manufacturer: syz [ 396.728583][ T10] usb 4-1: SerialNumber: syz [ 396.735810][ T5917] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input25 [ 396.861965][ T5917] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 396.904967][ T5917] (id 0x00) [ 396.975478][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.998633][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.057476][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.067295][ T5917] rc_core: IR keymap rc-imon-pad not found [ 397.103569][ T5917] Registered IR keymap rc-empty [ 397.107920][ T5917] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 397.107946][ T5917] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 397.112074][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.136506][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 397.136647][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 397.141889][ T5917] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 397.144678][ T5917] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input26 [ 397.150336][ T10] usb 4-1: USB disconnect, device number 31 [ 397.168849][ T5917] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:46> initialized [ 397.194819][ T7192] usb 3-1: USB disconnect, device number 46 [ 397.603620][ T5918] usb 5-1: 0:2 : does not exist [ 397.613156][ T5918] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 397.695377][ T5918] usb 5-1: USB disconnect, device number 21 [ 397.740000][T10330] ipvlan2: entered promiscuous mode [ 397.740029][T10330] ipvlan2: entered allmulticast mode [ 397.740045][T10330] team0: entered allmulticast mode [ 397.740060][T10330] team_slave_0: entered allmulticast mode [ 397.740078][T10330] team_slave_1: entered allmulticast mode [ 397.740096][T10330] vxlan0: entered allmulticast mode [ 397.865251][T10334] lo: Caught tx_queue_len zero misconfig [ 398.406392][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.599966][ T5830] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 399.614372][T10371] FAULT_INJECTION: forcing a failure. [ 399.614372][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 399.637445][T10371] CPU: 1 UID: 0 PID: 10371 Comm: syz.0.1204 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.637480][T10371] Tainted: [L]=SOFTLOCKUP [ 399.637488][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.637502][T10371] Call Trace: [ 399.637509][T10371] [ 399.637519][T10371] dump_stack_lvl+0xe8/0x150 [ 399.637551][T10371] should_fail_ex+0x414/0x560 [ 399.637590][T10371] should_failslab+0xa8/0x100 [ 399.637617][T10371] __kmalloc_noprof+0xdf/0x800 [ 399.637638][T10371] ? ___neigh_create+0x6d5/0x2230 [ 399.637684][T10371] ___neigh_create+0x6d5/0x2230 [ 399.637725][T10371] ? ip6_neigh_lookup+0x14e/0x470 [ 399.637763][T10371] ? ip6_neigh_lookup+0x14e/0x470 [ 399.637798][T10371] ? ip6_neigh_lookup+0x14e/0x470 [ 399.637832][T10371] ip6_neigh_lookup+0x3b7/0x470 [ 399.637867][T10371] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 399.637905][T10371] ? ip6_dst_neigh_lookup+0x74/0xf0 [ 399.637939][T10371] addr_resolve+0x146f/0x1f70 [ 399.637969][T10371] ? addr_resolve+0xe9/0x1f70 [ 399.638006][T10371] ? __pfx_addr_resolve+0x10/0x10 [ 399.638053][T10371] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.638091][T10371] ? timer_init_key+0x161/0x2b0 [ 399.638128][T10371] rdma_resolve_ip+0x444/0x840 [ 399.638165][T10371] rdma_resolve_addr+0x7a7/0x2030 [ 399.638206][T10371] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 399.638234][T10371] ? __mutex_lock+0x335/0x1350 [ 399.638269][T10371] ? ucma_resolve_ip+0x1a5/0x280 [ 399.638318][T10371] ucma_resolve_ip+0x1db/0x280 [ 399.638345][T10371] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 399.638386][T10371] ucma_write+0x249/0x2e0 [ 399.638411][T10371] ? __pfx_ucma_write+0x10/0x10 [ 399.638432][T10371] ? security_file_permission+0x75/0x290 [ 399.638455][T10371] ? rw_verify_area+0x255/0x4d0 [ 399.638480][T10371] vfs_writev+0x4b6/0x960 [ 399.638509][T10371] ? __pfx_ucma_write+0x10/0x10 [ 399.638535][T10371] ? __pfx_vfs_writev+0x10/0x10 [ 399.638575][T10371] ? __fget_files+0x2a/0x420 [ 399.638606][T10371] ? __fget_files+0x3a0/0x420 [ 399.638631][T10371] ? __fget_files+0x2a/0x420 [ 399.638666][T10371] do_writev+0x14d/0x2d0 [ 399.638701][T10371] ? __pfx_do_writev+0x10/0x10 [ 399.638739][T10371] do_syscall_64+0xec/0xf80 [ 399.638761][T10371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.638781][T10371] ? trace_irq_disable+0x37/0x100 [ 399.638809][T10371] ? clear_bhb_loop+0x60/0xb0 [ 399.638834][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.638854][T10371] RIP: 0033:0x7f6a4538f749 [ 399.638873][T10371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.638891][T10371] RSP: 002b:00007f6a461c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 399.638914][T10371] RAX: ffffffffffffffda RBX: 00007f6a455e6090 RCX: 00007f6a4538f749 [ 399.638930][T10371] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000015 [ 399.638943][T10371] RBP: 00007f6a461c6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.638957][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.638974][T10371] R13: 00007f6a455e6128 R14: 00007f6a455e6090 R15: 00007f6a4570fa28 [ 399.639008][T10371] [ 400.091823][ T5830] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 400.101166][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.121385][ T5830] usb 3-1: config 0 descriptor?? [ 400.138995][ T5830] gspca_main: spca508-2.14.0 probing 8086:0110 [ 400.369808][ T5830] gspca_spca508: reg_read err -32 [ 400.378754][ T5830] gspca_spca508: reg_read err -32 [ 400.385437][ T5830] gspca_spca508: reg_read err -32 [ 400.642251][T10365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1203'. [ 400.653081][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 400.710964][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.761694][ T5830] gspca_spca508: reg_read err -32 [ 400.780741][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.963587][ T5830] gspca_spca508: reg write: error -71 [ 400.989994][ T5830] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 401.014455][T10390] process 'memfd:-BN4EyѧS:)' started with executable stack [ 401.030306][ T5830] usb 3-1: USB disconnect, device number 47 [ 401.099870][T10393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1213'. [ 401.322394][T10393] input: syz0 as /devices/virtual/input/input27 [ 401.443083][T10407] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 401.539097][T10407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.795658][T10412] bond6: (slave veth13): Enslaving as an active interface with a down link [ 401.911461][T10404] netlink: 'syz.0.1208': attribute type 4 has an invalid length. [ 401.931057][T10404] netlink: 'syz.0.1208': attribute type 4 has an invalid length. [ 402.390242][T10428] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 402.464757][T10428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.516455][T10433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.550151][T10433] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 402.591060][T10433] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 402.612140][ T978] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 402.659578][ T5904] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 402.737759][T10428] veth11: entered promiscuous mode [ 402.763068][T10428] bond5: (slave veth11): Enslaving as an active interface with a down link [ 402.789682][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 402.811039][ T978] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 402.821561][ T5904] usb 5-1: config 162 has an invalid interface number: 230 but max is 1 [ 402.835685][T10434] macvlan2: entered promiscuous mode [ 402.849749][ T978] usb 3-1: config 0 has no interface number 0 [ 402.849749][ T5904] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 402.849779][ T5904] usb 5-1: config 162 has no interface number 0 [ 402.876902][ T978] usb 3-1: config 0 interface 235 has no altsetting 0 [ 402.887221][T10434] macvlan2: entered allmulticast mode [ 402.908428][ T5904] usb 5-1: config 162 interface 230 altsetting 4 endpoint 0x9 has invalid wMaxPacketSize 0 [ 402.911461][ T978] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 402.938471][T10434] bond5: entered promiscuous mode [ 402.944975][T10434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 402.965447][ T5904] usb 5-1: config 162 interface 230 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 8 [ 402.965920][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.005004][T10434] bond5: left promiscuous mode [ 403.015733][ T5904] usb 5-1: config 162 interface 230 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 403.046236][ T978] usb 3-1: Product: syz [ 403.052153][ T5904] usb 5-1: config 162 interface 230 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.089584][ T5904] usb 5-1: config 162 interface 230 has no altsetting 0 [ 403.106298][ T978] usb 3-1: Manufacturer: syz [ 403.124497][ T978] usb 3-1: SerialNumber: syz [ 403.158987][ T978] usb 3-1: config 0 descriptor?? [ 403.343118][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.362194][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.479566][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.502459][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.517740][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.546762][T10447] PKCS7: Unknown OID: [4] 4.2(bad) [ 403.553800][T10447] PKCS7: Only support pkcs7_signedData type [ 403.655058][T10449] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 403.684715][T10449] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 404.004164][T10459] fuse: Bad value for 'fd' [ 404.233819][ T5964] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.379836][ T5917] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.491342][ T5918] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 404.669586][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 404.793200][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.817350][ T5918] usb 4-1: config 8 has an invalid interface number: 142 but max is 0 [ 404.839999][ T5918] usb 4-1: config 8 has an invalid interface number: 1 but max is 0 [ 404.867667][ T5918] usb 4-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 404.890692][ T5918] usb 4-1: config 8 has no interface number 0 [ 404.916495][ T5918] usb 4-1: config 8 interface 142 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.945968][ T5918] usb 4-1: too many endpoints for config 8 interface 1 altsetting 7: 214, using maximum allowed: 30 [ 404.981210][ T5918] usb 4-1: config 8 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 405.014402][ T5918] usb 4-1: config 8 interface 142 has no altsetting 0 [ 405.029535][ T5918] usb 4-1: config 8 interface 1 has no altsetting 0 [ 405.116599][ T5918] usb 4-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=5f.8c [ 405.227305][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.254802][ T5918] usb 4-1: Product: syz [ 405.260214][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 405.299745][ T5830] usb 3-1: USB disconnect, device number 48 [ 405.342024][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 405.421510][ T5918] usb 4-1: Manufacturer: syz [ 405.441196][ T5918] usb 4-1: SerialNumber: syz [ 405.517324][ T5904] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 405.576623][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.646840][ T5904] usb 5-1: can't set config #162, error -71 [ 405.698473][ T5904] usb 5-1: USB disconnect, device number 22 [ 405.849894][ T978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 406.262338][T10478] netlink: 'syz.5.1238': attribute type 1 has an invalid length. [ 406.275125][T10478] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.319930][T10478] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.327215][T10478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.073975][ T30] audit: type=1326 audit(1767142104.442:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.2.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e698f749 code=0x0 [ 407.381729][T10500] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 407.613580][ T5918] hub 4-1:8.1: Invalid hub with more than one config or interface [ 407.628639][ T5918] hub 4-1:8.1: probe with driver hub failed with error -22 [ 407.684643][ T5918] usb 4-1: USB disconnect, device number 32 [ 407.856772][T10504] bridge10: entered promiscuous mode [ 408.089648][ T5904] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 408.239732][ T5904] usb 1-1: device descriptor read/64, error -71 [ 408.529807][ T5904] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 408.689700][ T5904] usb 1-1: device descriptor read/64, error -71 [ 408.800007][ T5904] usb usb1-port1: attempt power cycle [ 409.089618][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 409.170619][ T5904] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 409.200826][ T5904] usb 1-1: device descriptor read/8, error -71 [ 409.450443][ T5904] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 409.500394][ T5904] usb 1-1: device descriptor read/8, error -71 [ 409.631300][ T5904] usb usb1-port1: unable to enumerate USB device [ 409.750851][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1256'. [ 411.913232][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.994358][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.088358][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.325907][T10586] fuse: Unknown parameter '0x000000000000000400000000000000000000003' [ 413.626500][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 413.917119][T10600] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 413.998219][T10600] CPU: 1 UID: 0 PID: 10600 Comm: syz.0.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.998257][T10600] Tainted: [L]=SOFTLOCKUP [ 413.998266][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.998281][T10600] Call Trace: [ 413.998290][T10600] [ 413.998301][T10600] dump_stack_lvl+0xe8/0x150 [ 413.998337][T10600] sysfs_warn_dup+0x8e/0xa0 [ 413.998364][T10600] sysfs_do_create_link_sd+0xc0/0x110 [ 413.998411][T10600] device_add_class_symlinks+0x1cf/0x240 [ 413.998441][T10600] device_add+0x475/0xb80 [ 413.998468][T10600] wiphy_register+0x1d2e/0x2d20 [ 413.998520][T10600] ? __pfx_wiphy_register+0x10/0x10 [ 413.998554][T10600] ? __pfx_netdev_run_todo+0x10/0x10 [ 413.998587][T10600] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 413.998622][T10600] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 413.998653][T10600] ieee80211_register_hw+0x34a7/0x4110 [ 413.998680][T10600] ? __lock_acquire+0x6b6/0x2cf0 [ 413.998716][T10600] ? ieee80211_register_hw+0x1411/0x4110 [ 413.998763][T10600] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 413.998808][T10600] ? __hrtimer_setup+0x181/0x200 [ 413.998836][T10600] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 413.998867][T10600] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 413.998921][T10600] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 413.998944][T10600] ? kstrndup+0xbf/0x160 [ 413.998979][T10600] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 413.999010][T10600] ? __pfx___nla_validate_parse+0x10/0x10 [ 413.999051][T10600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.999086][T10600] ? rcu_is_watching+0x15/0xb0 [ 413.999118][T10600] ? __nla_parse+0x40/0x60 [ 413.999147][T10600] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 413.999180][T10600] genl_family_rcv_msg_doit+0x215/0x300 [ 413.999211][T10600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 413.999248][T10600] ? bpf_lsm_capable+0x9/0x20 [ 413.999274][T10600] ? security_capable+0x7e/0x2e0 [ 413.999307][T10600] genl_rcv_msg+0x60e/0x790 [ 413.999334][T10600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.999354][T10600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 413.999379][T10600] ? __asan_memcpy+0x40/0x70 [ 413.999400][T10600] ? __pfx_ref_tracker_free+0x10/0x10 [ 413.999419][T10600] ? __skb_clone+0x63/0x7a0 [ 413.999451][T10600] netlink_rcv_skb+0x208/0x470 [ 413.999481][T10600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.999503][T10600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.999528][T10600] ? genl_rcv+0x19/0x40 [ 413.999581][T10600] ? down_read+0x274/0x2e0 [ 413.999606][T10600] ? genl_rcv+0xd/0x40 [ 413.999641][T10600] genl_rcv+0x28/0x40 [ 413.999673][T10600] netlink_unicast+0x82f/0x9e0 [ 413.999706][T10600] ? __pfx_netlink_unicast+0x10/0x10 [ 413.999741][T10600] ? __alloc_skb+0x198/0x3a0 [ 413.999764][T10600] ? netlink_sendmsg+0x642/0xb30 [ 413.999791][T10600] ? skb_put+0x11b/0x210 [ 413.999819][T10600] netlink_sendmsg+0x805/0xb30 [ 413.999860][T10600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.999893][T10600] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.999925][T10600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.999946][T10600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.999977][T10600] __sock_sendmsg+0x21c/0x270 [ 414.000015][T10600] ____sys_sendmsg+0x505/0x820 [ 414.000049][T10600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.000087][T10600] ? import_iovec+0x74/0xa0 [ 414.000119][T10600] ___sys_sendmsg+0x21f/0x2a0 [ 414.000149][T10600] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.000183][T10600] ? futex_wake+0x4b2/0x560 [ 414.000242][T10600] ? __fget_files+0x2a/0x420 [ 414.000270][T10600] ? __fget_files+0x3a0/0x420 [ 414.000311][T10600] __x64_sys_sendmsg+0x19b/0x260 [ 414.000342][T10600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.000381][T10600] ? rcu_is_watching+0x15/0xb0 [ 414.000423][T10600] do_syscall_64+0xec/0xf80 [ 414.000446][T10600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.000468][T10600] ? trace_irq_disable+0x37/0x100 [ 414.000498][T10600] ? clear_bhb_loop+0x60/0xb0 [ 414.000527][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.000549][T10600] RIP: 0033:0x7f6a4538f749 [ 414.000569][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.000589][T10600] RSP: 002b:00007f6a461e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.000612][T10600] RAX: ffffffffffffffda RBX: 00007f6a455e5fa0 RCX: 00007f6a4538f749 [ 414.000630][T10600] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 414.000644][T10600] RBP: 00007f6a45413f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.000658][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.000672][T10600] R13: 00007f6a455e6038 R14: 00007f6a455e5fa0 R15: 00007f6a4570fa28 [ 414.000710][T10600] [ 415.284527][T10613] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1277'. [ 415.349511][ T978] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 415.415913][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1279'. [ 415.509559][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 415.521372][T10618] xt_TCPMSS: Only works on TCP SYN packets [ 415.532857][ T978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 415.546145][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.572128][ T978] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 415.581565][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.607884][ T978] usb 1-1: Product: syz [ 415.616017][ T978] usb 1-1: Manufacturer: syz [ 415.624025][ T978] usb 1-1: SerialNumber: syz [ 415.643151][ T978] usb 1-1: config 0 descriptor?? [ 415.674942][ T978] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 415.704038][ T978] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 415.881499][T10629] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 415.984121][T10629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.989922][ T5896] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 416.140056][T10631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.148514][T10631] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.161429][ T5896] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.174710][T10631] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 416.176569][ T5896] usb 5-1: config 0 has no interface number 0 [ 416.208859][ T5896] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 416.225812][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.234226][ T5896] usb 5-1: Product: syz [ 416.239062][ T5896] usb 5-1: Manufacturer: syz [ 416.271518][ T978] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 416.275893][ T5896] usb 5-1: SerialNumber: syz [ 416.295411][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.306088][ T978] em28xx 1-1:0.0: Config register raw data: 0xa7 [ 416.314585][ T5896] usb 5-1: config 0 descriptor?? [ 416.321279][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.329396][ T978] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 416.337826][ T978] em28xx 1-1:0.0: No AC97 audio processor [ 416.410341][T10629] veth5: entered promiscuous mode [ 416.438458][ T978] usb 1-1: USB disconnect, device number 36 [ 416.448080][T10629] bond5: (slave veth5): Enslaving as an active interface with a down link [ 416.456928][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 416.476206][T10646] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1288'. [ 416.568790][ T5896] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 416.632896][ T5896] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.664675][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 416.696029][ T5896] usb 5-1: media controller created [ 416.705550][T10655] l2tp_ppp: sess 2/0: no socket in recv [ 416.745901][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.889964][ T978] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 417.089769][ T978] usb 1-1: Invalid ep0 maxpacket: 64 [ 417.117396][T10661] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1293'. [ 417.241934][ T978] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 417.353689][T10665] fuse: Bad value for 'fd' [ 417.570943][ T978] usb 1-1: Invalid ep0 maxpacket: 64 [ 417.583382][ T978] usb usb1-port1: attempt power cycle [ 417.850037][ T5896] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 417.897029][ T5830] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 417.930097][ T978] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 417.983631][ T978] usb 1-1: Invalid ep0 maxpacket: 64 [ 418.059559][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 418.085247][ T5896] usb 5-1: USB disconnect, device number 23 [ 418.106328][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 418.159581][ T978] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 418.173166][ T5830] usb 3-1: config 8 has an invalid interface number: 142 but max is 0 [ 418.213838][ T5830] usb 3-1: config 8 has an invalid interface number: 1 but max is 0 [ 418.230021][ T978] usb 1-1: Invalid ep0 maxpacket: 64 [ 418.261062][ T978] usb usb1-port1: unable to enumerate USB device [ 418.274990][ T5830] usb 3-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 418.315059][ T5830] usb 3-1: config 8 has no interface number 0 [ 418.355649][ T5830] usb 3-1: config 8 interface 142 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.424126][ T5830] usb 3-1: too many endpoints for config 8 interface 1 altsetting 7: 214, using maximum allowed: 30 [ 418.462529][ T5830] usb 3-1: config 8 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 418.521877][ T5830] usb 3-1: config 8 interface 142 has no altsetting 0 [ 418.528936][ T5830] usb 3-1: config 8 interface 1 has no altsetting 0 [ 418.583441][ T5830] usb 3-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=5f.8c [ 418.598844][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.629372][ T5830] usb 3-1: Product: syz [ 418.639183][ T5830] usb 3-1: Manufacturer: syz [ 418.670735][ T5830] usb 3-1: SerialNumber: syz [ 418.739877][ T5896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 418.784397][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'. [ 419.053336][ T5896] usb 4-1: config 0 has no interfaces? [ 419.097828][ T5896] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 419.153714][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.189502][ T5896] usb 4-1: Product: syz [ 419.247999][ T5896] usb 4-1: Manufacturer: syz [ 419.265522][ T5896] usb 4-1: SerialNumber: syz [ 419.357638][ T5896] usb 4-1: config 0 descriptor?? [ 419.391761][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.430468][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.466558][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.478471][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1300'. [ 419.492623][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.505431][T10680] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1300'. [ 419.594529][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1300'. [ 419.662482][T10680] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1300'. [ 419.715079][T10680] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 419.805996][T10671] veth1_macvtap: left promiscuous mode [ 419.943635][T10671] veth1_macvtap: entered promiscuous mode [ 419.955793][ T5896] usb 4-1: USB disconnect, device number 33 [ 420.297568][T10690] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1302'. [ 420.714817][ T5939] veth1_macvtap: left promiscuous mode [ 420.892381][ T5830] hub 3-1:8.1: Invalid hub with more than one config or interface [ 420.925901][ T5830] hub 3-1:8.1: probe with driver hub failed with error -22 [ 420.992734][ T5830] usb 3-1: USB disconnect, device number 49 [ 421.421096][T10711] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 421.809808][T10717] usb usb1: usbfs: process 10717 (syz.2.1311) did not claim interface 0 before use [ 422.454092][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'. [ 422.913421][T10732] netlink: 'syz.5.1316': attribute type 10 has an invalid length. [ 422.969530][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 423.174633][T10736] netlink: 'syz.5.1316': attribute type 10 has an invalid length. [ 423.266659][T10732] bridge0: port 2(netdevsim0) entered disabled state [ 423.306159][T10732] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 423.333619][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 423.353089][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.365802][T10732] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 423.378612][ T10] usb 1-1: Product: syz [ 423.388880][ T10] usb 1-1: Manufacturer: syz [ 423.397288][T10732] bridge0: port 2(netdevsim0) entered disabled state [ 423.410168][ T10] usb 1-1: SerialNumber: syz [ 423.462022][T10732] team0: Port device netdevsim0 added [ 424.020153][ T9498] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 424.210380][ T9498] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.231621][ T9498] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 424.255868][ T9498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.348159][ T9498] usb 3-1: config 0 descriptor?? [ 424.743684][T10746] loop6: detected capacity change from 0 to 524287999 [ 424.782962][ T5983] buffer_io_error: 27 callbacks suppressed [ 424.783006][ T5983] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 424.978784][ T5983] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 425.005857][ T9498] a4tech 0003:09DA:022B.000A: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.2-1/input0 [ 425.273847][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 425.320223][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 425.363859][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 425.427798][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 425.463588][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 425.493276][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 425.561825][ T10] usb 1-1: USB disconnect, device number 41 [ 425.925570][T10763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 426.439594][ T9498] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 426.591892][ T9498] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.638037][ T9498] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 426.774812][ T978] usb 3-1: USB disconnect, device number 50 [ 426.781101][ T9498] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.855140][ T9498] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 426.888061][ T9498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.902234][ T9498] usb 1-1: Product: syz [ 426.906757][ T9498] usb 1-1: Manufacturer: syz [ 426.911960][ T9498] usb 1-1: SerialNumber: syz [ 426.923618][ T9498] hub 1-1:1.0: bad descriptor, ignoring hub [ 426.949555][ T9498] hub 1-1:1.0: probe with driver hub failed with error -5 [ 427.127676][ T9498] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 427.449936][T10787] loop7: detected capacity change from 0 to 16384 [ 427.816967][ T9498] usb 1-1: USB disconnect, device number 42 [ 427.823582][T10788] loop7: detected capacity change from 16384 to 16383 [ 427.851364][T10792] syzkaller0: entered promiscuous mode [ 427.874594][T10792] syzkaller0: entered allmulticast mode [ 428.577560][ T978] usblp0: removed [ 429.045944][T10814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1341'. [ 429.251905][T10817] syzkaller0: entered promiscuous mode [ 429.275745][T10817] syzkaller0: entered allmulticast mode [ 429.323131][T10814] input: syz0 as /devices/virtual/input/input28 [ 429.968756][T10842] bond0: (slave wlan1): Releasing backup interface [ 429.998527][T10842] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 430.279553][ T9498] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 430.306901][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1356'. [ 430.514444][ T9498] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 430.523928][ T9498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.532305][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 430.544251][ T9498] usb 3-1: Product: syz [ 430.550410][ T9498] usb 3-1: Manufacturer: syz [ 430.559739][ T9498] usb 3-1: SerialNumber: syz [ 430.567345][ T9498] usb 3-1: config 0 descriptor?? [ 433.181622][ T9498] usb 3-1: USB disconnect, device number 51 [ 433.264832][T10886] FAULT_INJECTION: forcing a failure. [ 433.264832][T10886] name failslab, interval 1, probability 0, space 0, times 0 [ 433.279280][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.5.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.279315][T10886] Tainted: [L]=SOFTLOCKUP [ 433.279321][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.279334][T10886] Call Trace: [ 433.279341][T10886] [ 433.279347][T10886] dump_stack_lvl+0xe8/0x150 [ 433.279372][T10886] should_fail_ex+0x414/0x560 [ 433.279420][T10886] should_failslab+0xa8/0x100 [ 433.279449][T10886] __kmalloc_cache_noprof+0x84/0x700 [ 433.279468][T10886] ? __asan_memset+0x22/0x50 [ 433.279487][T10886] ? snd_pcm_oss_change_params_locked+0xb09/0x3f70 [ 433.279528][T10886] snd_pcm_oss_change_params_locked+0xb09/0x3f70 [ 433.279576][T10886] ? rcu_is_watching+0x15/0xb0 [ 433.279600][T10886] ? __mutex_lock+0x335/0x1350 [ 433.279626][T10886] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 433.279661][T10886] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 433.279694][T10886] snd_pcm_oss_make_ready+0x11b/0x360 [ 433.279722][T10886] snd_pcm_oss_set_trigger+0x95/0x740 [ 433.279752][T10886] snd_pcm_oss_poll+0x841/0x980 [ 433.279782][T10886] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 433.279810][T10886] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 433.279832][T10886] ep_insert+0x1161/0x19e0 [ 433.279864][T10886] ? __pfx_ep_insert+0x10/0x10 [ 433.279885][T10886] ? __pfx___mutex_lock+0x10/0x10 [ 433.279902][T10886] ? __fget_files+0x2a/0x420 [ 433.279924][T10886] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 433.279953][T10886] ? __fget_files+0x3a0/0x420 [ 433.279972][T10886] ? __fget_files+0x2a/0x420 [ 433.280003][T10886] do_epoll_ctl+0x7f4/0xe80 [ 433.280037][T10886] __x64_sys_epoll_ctl+0x163/0x1a0 [ 433.280060][T10886] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 433.280091][T10886] do_syscall_64+0xec/0xf80 [ 433.280107][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.280121][T10886] ? trace_irq_disable+0x37/0x100 [ 433.280142][T10886] ? clear_bhb_loop+0x60/0xb0 [ 433.280161][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.280176][T10886] RIP: 0033:0x7f1d6e18f749 [ 433.280194][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.280208][T10886] RSP: 002b:00007f1d6ef48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 433.280227][T10886] RAX: ffffffffffffffda RBX: 00007f1d6e3e6180 RCX: 00007f1d6e18f749 [ 433.280238][T10886] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 433.280247][T10886] RBP: 00007f1d6ef48090 R08: 0000000000000000 R09: 0000000000000000 [ 433.280257][T10886] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 433.280267][T10886] R13: 00007f1d6e3e6218 R14: 00007f1d6e3e6180 R15: 00007f1d6e50fa28 [ 433.280291][T10886] [ 434.395663][T10910] netlink: 'syz.5.1371': attribute type 1 has an invalid length. [ 434.405173][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.416518][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.423746][T10910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.057197][T10928] input: syz0 as /devices/virtual/input/input32 [ 435.168317][T10931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1377'. [ 435.269693][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1377'. [ 436.020313][T10937] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1379'. [ 436.128719][T10939] libceph: resolve '. [ 436.128719][T10939] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 436.128719][T10939] ' (ret=-3): failed [ 436.491168][T10950] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.508932][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.322412][T10969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1392'. [ 437.489560][ T5917] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 437.528663][ T30] audit: type=1326 audit(1767142134.892:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.2.1393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97e698f749 code=0x0 [ 437.639569][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 437.651095][ T5917] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 437.669880][ T5917] usb 1-1: config 0 has no interface number 0 [ 437.679619][ T5917] usb 1-1: too many endpoints for config 0 interface 12 altsetting 148: 216, using maximum allowed: 30 [ 437.707609][ T5917] usb 1-1: config 0 interface 12 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 437.724578][ T5917] usb 1-1: config 0 interface 12 has no altsetting 0 [ 437.743741][ T5917] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 437.758980][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.777395][ T5917] usb 1-1: Product: syz [ 437.803615][ T5917] usb 1-1: Manufacturer: syz [ 437.808279][ T5917] usb 1-1: SerialNumber: syz [ 437.822473][ T5896] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 437.841215][ T5917] usb 1-1: config 0 descriptor?? [ 437.847007][T10977] bridge11: entered promiscuous mode [ 437.856387][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.908557][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.952130][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.972616][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.989561][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 437.997124][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 438.015051][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 438.037746][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.062667][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.081437][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 438.111637][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 438.119112][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 438.141637][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.170370][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.189589][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 438.212090][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 438.258232][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 438.275607][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.289598][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.301077][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 438.331971][ T5896] usb 5-1: string descriptor 0 read error: -22 [ 438.338329][ T5896] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 438.368207][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.425020][ T5896] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 438.565731][ T5917] RobotFuzz Open Source InterFace, OSIF 1-1:0.12: failure sending bit rate [ 438.589344][ T5917] RobotFuzz Open Source InterFace, OSIF 1-1:0.12: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 438.692869][ T5917] usb 1-1: USB disconnect, device number 43 [ 438.768979][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 438.825780][T10974] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 438.926971][T10974] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 439.086963][T10997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1399'. [ 439.127764][ T978] usb 5-1: USB disconnect, device number 24 [ 439.308329][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1399'. [ 439.450429][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1402'. [ 439.595944][T11008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.628398][T11008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.037000][T11018] tipc: Enabling of bearer rejected, failed to enable media [ 440.052548][T11018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1408'. [ 440.121957][T11020] loop4: detected capacity change from 0 to 524287936 [ 440.309739][ T5830] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 440.462414][ T5830] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.472723][ T5830] usb 1-1: config 0 has no interface number 0 [ 440.500134][ T5830] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 440.534229][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.573583][ T5830] usb 1-1: Product: syz [ 440.588081][ T5830] usb 1-1: Manufacturer: syz [ 440.598468][ T5830] usb 1-1: SerialNumber: syz [ 440.620331][ T5830] usb 1-1: config 0 descriptor?? [ 440.828782][ T5830] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 440.854022][ T5830] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.869622][ T9498] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 440.929208][ T5830] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 440.943132][ T5830] usb 1-1: media controller created [ 440.957472][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.060305][ T9498] usb 4-1: too many configurations: 234, using maximum allowed: 8 [ 441.068588][T11018] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 441.083945][T11046] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 441.106116][ T9498] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 441.162244][ T9498] usb 4-1: can't read configurations, error -61 [ 441.274180][ T5830] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 441.322851][ T9498] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 441.329615][T11048] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 441.344271][T11048] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 441.381997][ T5830] usb 1-1: USB disconnect, device number 44 [ 441.477350][T11049] bond6: (slave bridge12): Enslaving as an active interface with a down link [ 441.496935][ T9498] usb 4-1: too many configurations: 234, using maximum allowed: 8 [ 441.514307][ T9498] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 441.523185][ T9498] usb 4-1: can't read configurations, error -61 [ 441.551820][ T9498] usb usb4-port1: attempt power cycle [ 441.655560][T11053] macvlan2: entered promiscuous mode [ 441.678378][T11053] macvlan2: entered allmulticast mode [ 441.688309][T11053] bond6: entered promiscuous mode [ 441.717347][T11053] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 441.733831][T11053] bond6: left promiscuous mode [ 441.929579][ T9498] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 441.971835][ T9498] usb 4-1: too many configurations: 234, using maximum allowed: 8 [ 442.001375][ T9498] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.009501][ T9498] usb 4-1: can't read configurations, error -61 [ 442.154237][T11062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.163019][ T9498] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 442.168112][T11062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.369679][ T9498] usb 4-1: too many configurations: 234, using maximum allowed: 8 [ 442.412288][ T9498] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 442.434455][ T9498] usb 4-1: can't read configurations, error -61 [ 442.514480][ T9498] usb usb4-port1: unable to enumerate USB device [ 442.794571][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1423'. [ 443.040404][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 443.400955][T11085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1426'. [ 443.895261][T11096] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000 [ 443.992063][ T10] IPVS: starting estimator thread 0... [ 444.085129][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.095632][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.109488][ T30] audit: type=1326 audit(1767142141.462:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d8398f749 code=0x0 [ 444.192778][T11097] IPVS: using max 26 ests per chain, 62400 per kthread [ 444.404707][T11104] bridge7: entered promiscuous mode [ 445.008163][T11109] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 445.042069][T11109] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 445.084763][T11110] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 445.162524][T11109] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 445.212470][T11109] team0: Port device netdevsim0 added [ 445.259466][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.265820][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.746641][T11135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.863879][T11137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.618950][T11153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1441'. [ 447.715547][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1441'. [ 447.823447][T11155] syzkaller0: entered promiscuous mode [ 447.828944][T11155] syzkaller0: entered allmulticast mode [ 448.701929][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 449.396758][ T5832] Bluetooth: hci0: ACL packet for unknown connection handle 204 [ 449.448096][T11175] use of bytesused == 0 is deprecated and will be removed in the future, [ 449.513042][T11177] [ 449.515451][T11177] ============================================ [ 449.521641][T11177] WARNING: possible recursive locking detected [ 449.527824][T11177] syzkaller #0 Tainted: G L [ 449.532518][T11175] use the actual size instead. [ 449.533820][T11177] -------------------------------------------- [ 449.533830][T11177] syz.3.1446/11177 is trying to acquire lock: [ 449.550843][T11177] ffff88807121cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcbc/0x1e10 [ 449.562137][T11177] [ 449.562137][T11177] but task is already holding lock: [ 449.569516][T11177] ffff88807121cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 449.579444][T11177] and the lock comparison function returns 0: [ 449.585521][T11177] [ 449.585521][T11177] other info that might help us debug this: [ 449.593583][T11177] Possible unsafe locking scenario: [ 449.593583][T11177] [ 449.601047][T11177] CPU0 [ 449.604351][T11177] ---- [ 449.607626][T11177] lock(&dev_instance_lock_key#20); [ 449.612921][T11177] lock(&dev_instance_lock_key#20); [ 449.618219][T11177] [ 449.618219][T11177] *** DEADLOCK *** [ 449.618219][T11177] [ 449.626368][T11177] May be due to missing lock nesting notation [ 449.626368][T11177] [ 449.634703][T11177] 2 locks held by syz.3.1446/11177: [ 449.639899][T11177] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 449.648879][T11177] #1: ffff88807121cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 449.659163][T11177] [ 449.659163][T11177] stack backtrace: [ 449.665057][T11177] CPU: 1 UID: 0 PID: 11177 Comm: syz.3.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.665081][T11177] Tainted: [L]=SOFTLOCKUP [ 449.665087][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.665097][T11177] Call Trace: [ 449.665103][T11177] [ 449.665109][T11177] dump_stack_lvl+0xe8/0x150 [ 449.665132][T11177] print_deadlock_bug+0x279/0x290 [ 449.665153][T11177] __lock_acquire+0x2540/0x2cf0 [ 449.665173][T11177] ? stack_trace_save+0x9c/0xe0 [ 449.665197][T11177] ? __pfx_stack_trace_save+0x10/0x10 [ 449.665220][T11177] ? kasan_save_free_info+0x46/0x50 [ 449.665245][T11177] ? stack_depot_save_flags+0x33/0x810 [ 449.665276][T11177] ? __netdev_update_features+0xcbc/0x1e10 [ 449.665297][T11177] lock_acquire+0x107/0x340 [ 449.665312][T11177] ? __netdev_update_features+0xcbc/0x1e10 [ 449.665337][T11177] __mutex_lock+0x187/0x1350 [ 449.665354][T11177] ? __netdev_update_features+0xcbc/0x1e10 [ 449.665379][T11177] ? __netdev_update_features+0xcbc/0x1e10 [ 449.665400][T11177] ? team_fix_features+0x34/0x250 [ 449.665422][T11177] ? __pfx___mutex_lock+0x10/0x10 [ 449.665440][T11177] ? team_fix_features+0x34/0x250 [ 449.665465][T11177] __netdev_update_features+0xcbc/0x1e10 [ 449.665492][T11177] ? __pfx___netdev_update_features+0x10/0x10 [ 449.665516][T11177] ? __lock_acquire+0x6b6/0x2cf0 [ 449.665533][T11177] ? ethnl_default_notify+0x806/0xb20 [ 449.665557][T11177] ? ethnl_default_notify+0x8a9/0xb20 [ 449.665582][T11177] netdev_compute_master_upper_features+0x8eb/0xab0 [ 449.665611][T11177] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 449.665635][T11177] ? macvlan_device_event+0x10a/0x860 [ 449.665662][T11177] team_device_event+0x408/0x5b0 [ 449.665687][T11177] notifier_call_chain+0x19d/0x3a0 [ 449.665709][T11177] netdev_features_change+0x85/0xc0 [ 449.665734][T11177] ? __pfx_netdev_features_change+0x10/0x10 [ 449.665759][T11177] ? lockdep_hardirqs_on+0x7b/0x110 [ 449.665774][T11177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 449.665800][T11177] dev_ethtool+0x1541/0x19c0 [ 449.665827][T11177] ? __pfx_dev_ethtool+0x10/0x10 [ 449.665849][T11177] ? dev_load+0x21/0x1f0 [ 449.665870][T11177] ? dev_load+0x21/0x1f0 [ 449.665885][T11177] dev_ioctl+0x392/0x1150 [ 449.665902][T11177] sock_do_ioctl+0x22c/0x300 [ 449.665924][T11177] ? __pfx_sock_do_ioctl+0x10/0x10 [ 449.665945][T11177] ? do_futex+0x395/0x420 [ 449.665966][T11177] sock_ioctl+0x576/0x790 [ 449.665988][T11177] ? __pfx_sock_ioctl+0x10/0x10 [ 449.666008][T11177] ? __fget_files+0x2a/0x420 [ 449.666028][T11177] ? __fget_files+0x3a0/0x420 [ 449.666046][T11177] ? __fget_files+0x2a/0x420 [ 449.666066][T11177] ? bpf_lsm_file_ioctl+0x9/0x20 [ 449.666083][T11177] ? __pfx_sock_ioctl+0x10/0x10 [ 449.666103][T11177] __se_sys_ioctl+0xfc/0x170 [ 449.666118][T11177] do_syscall_64+0xec/0xf80 [ 449.666133][T11177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.666149][T11177] ? trace_irq_disable+0x37/0x100 [ 449.666170][T11177] ? clear_bhb_loop+0x60/0xb0 [ 449.666187][T11177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.666202][T11177] RIP: 0033:0x7f5d8398f749 [ 449.666216][T11177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.666230][T11177] RSP: 002b:00007f5d84763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.666246][T11177] RAX: ffffffffffffffda RBX: 00007f5d83be6090 RCX: 00007f5d8398f749 [ 449.666258][T11177] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000006 [ 449.666274][T11177] RBP: 00007f5d83a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.666284][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.666293][T11177] R13: 00007f5d83be6128 R14: 00007f5d83be6090 R15: 00007f5d83d0fa28 [ 449.666311][T11177] [ 459.329605][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!