last executing test programs: 1m18.15167409s ago: executing program 3 (id=656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x11, 0x148, 0x15c, 0x0, 0x1ec, 0x2a8, 0x2a8, 0x1ec, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0xfc, 0x15c, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'syzkaller1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2dc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r3, &(0x7f0000000c80)=[{&(0x7f0000000440)='K', 0x1}], 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x40, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) write(r3, &(0x7f0000006b00)="bc14", 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x40000) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000000000406d041fc700000000000109022400010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="00220700000071db83"], 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1869, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x100, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0xfb, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xe, 0x52, 0x26}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xc6, 0x2, 0xd, 0x10, 0x2}, 0x43, &(0x7f0000000080)={0x5, 0xf, 0x43, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x3, 0xf, 0xffd5, [0xff00f0, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x10, 0x6, 0x4, 0x0, 0xfe, [0x0, 0xff3ff8, 0x3ff0, 0x30, 0x30, 0xc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x72, &(0x7f0000000100)=@string={0x72, 0x3, "bd20f4a5056fb49ccf486aeddfee73a25671e63f93355304887940f7a241e4d143f960f2bef42f4f8aba1ea99500c30870bf601507ac98e1f6971c27a548473e4727e4149de005762d6ba44ef8bdcb4cf405029f99dde75553cec3b2375ba1bb5866a3b26fe567d5bb12435577d87af8"}}, {0xa9, &(0x7f0000000180)=@string={0xa9, 0x3, "85f7ec1222356b53d5c8e881b1ddd18a83682022f5b052dee1ceea9de68495be0b71342c0a8922402751af840bb2d4876cf4ffb1ca7de0d42cbb771dd0fcf77536f463ef353492acc0726b33131aaf9b295f7e4dffdbd6be2cbbf69096975d60c2e2b68f445112654f54a762915787779019fa72cd735f2e90fe87520cad1e84e5da57d900dd18d7212144553ca45812dacc9986081e982e67de6c422a09b9e723c9402fe12fda"}}, {0x3e, &(0x7f0000000240)=@string={0x3e, 0x3, "9d66540262bf7a8b0b9205e0739026ae8bae47b139d149c79f2700dfb849685bbe5c04167d51938e6fb1f4ba26252c0a5f026fdf7388f6a2c9de1f6e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x414}}, {0x8d, &(0x7f00000002c0)=@string={0x8d, 0x3, "84688c87f6b373d469fa8a71ebd8b3fb3d531e8049a60b65fc674cbbe2756d01703cede7c1aa36b38cfe971dad0bdf5f56edd9778754a7814455906318726a31820855060185f8dbb036aae17508a6bff737002b2eb538cd57c8f6bfd619db3372d83c1b8be0c43b4732e2b06738202c3daeaf9f4e54f539d3d8b4292705653c6d5e8dc17c28bc40530000"}}, {0xa1, &(0x7f0000000380)=@string={0xa1, 0x3, "7cd38612c6cd0ff523e534b111e6378695a60a6ceffd3a51edeb2613f76b2f8a928ae405ad6e940ab58df6214b92b28de9a5f43b90c4ffbd40f1502ce124662ce3c4ca68aaf7c6317afdb6de5b30ac3b86d33947ba81d4a60e6f7e73792d936d31c619aa2caf4ce34dfe0408de9410583f0db6bd0ee14baac258e9fffe9e7280a8c4602ec8db85b7cecaed49661b273eb65cfdb3800daf7b245d7c53677a57"}}]}) 1m14.718491437s ago: executing program 3 (id=680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x53f, &(0x7f0000000380)={0x0, 0x4127, 0x400, 0x2, 0xfe}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x36, 0x0, 0x0, 0x202}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x70, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002100, 0x0, {0x1}}) io_uring_enter(r4, 0x47bc, 0x0, 0x28, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100), 0x0) 1m13.827041225s ago: executing program 3 (id=686): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1a6) socket(0x2, 0x3, 0xff) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x1, 0x2}, 0x8) socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) fcntl$addseals(r4, 0x409, 0x6) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="0000000000200000000000000010000000000000"]) time(0x0) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0) openat(0xffffffffffffffff, &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, 0x80) socket$nl_audit(0x10, 0x3, 0x9) 1m13.696071606s ago: executing program 3 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r0 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)={0x200, 0x31, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x24000000) faccessat(r0, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x20, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x4, 0x32315241, 0x50323234, 0x9, [{}, {0x3, 0x2}, {0x1002}, {0x7}, {0x0, 0x3316aa71}, {}, {0x0, 0x3ff}], 0x0, 0x0, 0x7}}) 1m13.577284141s ago: executing program 3 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ecdeb73a", 0x4}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x4f, &(0x7f0000000080)={@local, @local, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x8001, 0x0, 0x1}, {0x6}, {0x4}], @llc={@snap={0xaa, 0x0, "5e8d", "a38006", 0x9200, "14bb7b01f03f142bf16d93acef97bcfc7bbe3851f1c219807b41e89383fb7ed1088ab8f93598802d"}}}}}}, &(0x7f0000000100)={0x0, 0x1, [0xbb8, 0x700, 0x9b0, 0x674]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x61, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x2b, 0x11, 0xff, @empty, @mcast2, {[], {0x4000, 0xe22, 0x2b, 0x0, @opaque="0ca3e06fae99718b9e942a7e8f9a86e397dc25477882ad54cabf3918a5c51009043561"}}}}}}, 0x0) 1m13.334861383s ago: executing program 3 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) unshare(0x42000000) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x7800, 0x7f, 0x8000, 0xdc66}}) 1m12.936933634s ago: executing program 32 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) unshare(0x42000000) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x7800, 0x7f, 0x8000, 0xdc66}}) 10.916401671s ago: executing program 0 (id=943): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004"], 0x48) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3d}, {}, {}, [@generic={0x96, 0x4, 0x0, 0x3, 0x3ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x0, 0x0, 0x0, 0x400, 0x1}, 0x50) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 10.715551587s ago: executing program 0 (id=947): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_pidfd_open(0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r5) syz_open_procfs$pagemap(r5, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt(r1, 0x7, 0x8, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_mr_vif\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',root{ode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40020, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00276243740501720624347,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c008ae5d639a384f8bf770cd6a53e76417fde2f9e117ec2022613681eb341a1833a11ca8ba4427175823c3937e4707401852f30cc58ed63473cfda8c3286f0f1c0f4762335c6df1b82f6139859c4762f883da12103b"]) pread64(r6, &(0x7f0000000080)=""/237, 0xed, 0x5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) 9.451375635s ago: executing program 0 (id=952): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2851024, &(0x7f0000000040)=ANY=[@ANYBLOB='=', @ANYRES32=r0]) 9.358494322s ago: executing program 0 (id=953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x26020480) r2 = socket(0x10, 0x80002, 0x2) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0xc) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000880) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a000000100001000000ff00000000000100000a20000000080a010300000000000000000a000009090073797a3100000000240000001100010000000000000000000300000a"], 0x48}, 0x1, 0x0, 0x0, 0xb1954759f25c9ac2}, 0x4000080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000160011092cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0020a03c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000ffffac1414bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000ffffffffffffff7f00000000003000000902008000800000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004000000200017000100000025bd700027bd70002abd700026bd700000000080c60000000a002000"], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40088c4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 8.211828114s ago: executing program 5 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x300, 0x2) 8.156863361s ago: executing program 1 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x300, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) 7.996139258s ago: executing program 5 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.968191018s ago: executing program 1 (id=966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xc8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r3, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x53f, &(0x7f0000000380)={0x0, 0x4127, 0x400, 0x2, 0xfe}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x36, 0x0, 0x0, 0x202}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x70, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002100, 0x0, {0x1}}) io_uring_enter(r4, 0x47bc, 0x0, 0x28, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100), 0x0) 7.626284534s ago: executing program 5 (id=967): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10024, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0]) 7.472808044s ago: executing program 5 (id=969): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240), 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604", 0x8e, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r4 = dup(r3) fallocate(r4, 0x10, 0x0, 0x72000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001200)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 7.253479863s ago: executing program 4 (id=971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000026, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0xd, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x188}, &(0x7f0000000180), &(0x7f0000000200)) epoll_create1(0x0) socket$inet(0x2, 0x5, 0x0) 6.987353508s ago: executing program 2 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000001340)=""/4100, 0x1004}, {&(0x7f0000000380)=""/107, 0x6b}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (async) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) write(r5, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000001340)=""/4100, 0x1004}, {&(0x7f0000000380)=""/107, 0x6b}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) (async) 6.986491533s ago: executing program 1 (id=973): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00002e3000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x100000001}], 0x1, 0x40, 0x0, 0x0, 0x4e, 0x20}) (fail_nth: 6) 5.631509419s ago: executing program 1 (id=974): syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2/file0\x00', 0x10, 0xfffffffe) r2 = socket(0x10, 0x803, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'veth1_virt_wifi\x00'}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x3, [0x84, 0x9, 0x2]}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4804) socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) 4.978962151s ago: executing program 4 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) syz_clone(0x40040091, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005860dd40da05a300369d000000010902120001133a00000904b20000e4e56100"], 0x0) getpriority(0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x6d0, 0x191, 0x1, 0x3, 0xdd9f83, 0x1, 0x9, 0x7, 0x2, 0x5, 0x81, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0xc, 0x0, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @lsrr={0x83, 0x7, 0xa, [@remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r3, 0x120, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 3.980989207s ago: executing program 5 (id=976): r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000980)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f000000a880)=[{{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000740)}, {&(0x7f0000000780)="277c316f3209372801d636d5411c593d3e47c95c7efe9074b3b0be16f70d5624beb305ca9306203493750b0fa4ecbf471af0b818abedd0c5a5bf24db91f270285f6af098bc0b", 0x46}], 0x2, 0x0, 0x0, 0x30040811}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000008c0)="d607cacc43f66240b171eae1975c502d1b3d3c322c614d40ac4eda36b867f5e3ff9ca8fdfa967924815e9b3471e377478f8081b5318de50ea27d7d2532c842", 0x3f}], 0x1, &(0x7f0000000b80)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r2, r1, r3]}}], 0x58, 0x80}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c00)="6ca92703624b06d5d37354c5d897f8f04919d21026c7913b33cfe233ed6d54d4254913b93e7e59c71e7bd18b14de28ff2051f5ad802afca65bf5d9619836de00620febcafcc58274c8", 0x49}, {&(0x7f0000000c80)="eb6af46429fa5accab8cb27d0b1891f0b9d56bfe86f216c75061a3f5e0f824079433a26679750d48577159bb7ce765d6c274f1749f40e45d05d678153a056da718c6ea66a095803012fd5adb204dbb955bacd70e5cc8f75ff8477b9099ccd867f917fca5d34b1deee5ce24df712e6432052b8582d59f56c1f0c813b9df622d1269084c0e541a3dc7b88375b97927257b62ed046c3f690ae53d317a1aab8f363e60bec4811e27b4631df4af0d7c21738866640a3fb4f44515", 0xb8}, {&(0x7f0000000d40)="4e345354805259d1ed6ce68f6c4dd037bd955ca7dae27f510fa8437209962f8ab2d0a1c6262c8de73dbf47fdaa625d55353c6caf16516f9a1a66609cb6f51aee000dc4f3fb456c0ecf4a43d133b80d4c74863e7779e1d8d6a9b38efd20129fd1ed3b439eadbfc10357446a9401f58a24a78b8f8d5651abecbbd5e5c4e6afbf06b74263ca6943c7a6d7b4", 0x8a}, {&(0x7f0000000e00)="6626a5577827992118a58c4bb96071f3feb6562a527f66b4d8a7a658497edcdee9a82836899c10beedc63acb581e9b507bb4624fdcb08fbac6558934e368130f1d748f18a9e5b937bb3d62c4812e4fefc39239c014637059ff539a1821855a7ec8d7e53a119d7f22a93179aa4e08c4ca28be9528c30ac5c78c53f4239ca168bb2226ac3d547fdfe13323e63f19962685c81c6be36cfebdc08ea9f3ba83ac3e863ffabbe750", 0xa5}, {&(0x7f0000000ec0)="058bf089ac87062293725ec80c49ca421f66e0a69a6c7140b838ee1f66c0f4431445b67b787146347fbfe220e8da045011d9c81fc3859e23e8a4db04bd1e778c1b139528a05823d27f4f5243225d1ba1347aaa0d0cca934411ac6561ac", 0x5d}, {&(0x7f0000000f40)="9f21c808e6a084ca6ae99b6df9a4e0848b0d09b646132c1d80b0336143e370208a43a62c4a60452d3f8d9e082eaea4a4f1902cb3416567f2c1d56fdf374187512eb7c92875c8c518e5968ac91e168dd1fda6a4025a015f61ed1d6d5a0dd0f9cb06d6", 0x62}], 0x6, 0x0, 0x0, 0x1}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f00000010c0)="994c9d0657273ccbf312d5cac2f362598336df8ba0829149e97f313b59575ddf093dd6e50b917920ae931632248d917cb8ba14677787b3271bc90d0fb160ea2416427fdbea7fd231a62aa5959adf81cbea43862372ba40479de633226207de9404b67c787c8fb4e6cf63e97063358f35537256aca68345a3190250546f9d028630d5858eb0d2746d11cf94116da980895effad7326a0170bcfaef0134bb8d43cd8b75e22ac701ec15d62", 0xaa}, {&(0x7f0000003340)="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", 0x1000}], 0x2, &(0x7f0000008680)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [r3, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0xf8, 0x40001}}, {{&(0x7f0000008780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000008b80)=[{&(0x7f0000008800)="30e779e16ea6b2cd459cbee191c346942b2f2636a6cdf4d9c2bc49dd4e09c1392495e3f67eb8b62513f7f25418060d4539fed0df6b3b860a1bee111b4a242d5703331a8f3b18ddc9049d8529f02b4c14fe29be15084a9fa451289d43b58c00d23eeff1d79425f9f794efa5da64ca74e13160cbd017e922d6cc1fad28d442bfde9d5b0d44aabb86f4d1bc9d7e2760394c438169b9ad8ad12cbf44d19a45171a42de472b6770f79862a11b89cb8dd4d6ae50e0fc9c03811244987459d010faefa3", 0xc0}, {&(0x7f00000088c0)="242322efb85b13513c5ab4e3abff2e45c5869106cfbc914cacdcda6ecf1ddceaa554067e89be86891b148d92f81e1dda53d6363d5a29849edc07eb21e996eb34a2ffaed3780ca282ab59237c8173ed95b72f4c638ffda82ddf1151dae82ff42af4d4ab7a268a3857256aa22d87cfa30336f6ee2d48e0f5d7f2aa666bbf595ba830108bbe398a1a78ad25e6aa4ef094b5eae301c9dd8f8c9c448fd57ece3cdf33d9325181d2283bc667270212eef5964ff95212ed858cce623872b8b2ebd93c1d5d34278ea2de8c6a895117ceefac0a203d29", 0xd2}, {&(0x7f00000089c0)="379b59f272344e97b0f4e658ea05044e9a66216b553ff9caa7e051f11b78a6c8c94534443138dfdf820326904bb086fc009596c5e92161ae4000a1af9401e6fb8ba01dddbed130ecd9b54971912ca5a7909bde90ae1af99c440039826f6d888f1ca56854bbc3d48c29c5d99a3e49f5a3bfbef1ea216f26da2dcff2b0ed24be5627f77f259cef97042a84ccb8138b4afd76dea0514d50ffa7edf66a83e42c29d42f802071a48a88deaa47d901f4e08cadc5e2f4a7122a8b648e5ae9b8610b0277cb38f277099aa7db366a76249195ce0e794d6d2e08", 0xd5}, {&(0x7f0000008ac0)="fe6216d9a6272a448f72191571e93b3683d88dcdb10938007c7f227a3f7ffeeceaaa1c8898bb32aa90f0a7b5ad7e6fd223c69a5c5507c01372bcc4491dbf494cc06e09efa389aa567638a9d6f8561137ba98b7e517146f3bb76e1f980fa61a113f4dd33e7a6d87531caebd6b08a900fe094d454b6b1af5b7b8281f453ef71e736d426ef6fb625964ec613623a7c85dd7e36f68a97907cf2aaaa671f5289272256d2662dc1b508d8d1718", 0xaa}], 0x4, &(0x7f0000008c40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x8c, 0x4000844}}, {{&(0x7f0000008d00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000008d80)="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", 0x1000}, {&(0x7f0000009d80)="3f2dcbe6e71ad6e9cdd1c03e2840363a0b2e9cfecec3c8238dcf9245ac40aa2192b9e1ccda91de08d5db1ee067f46d1c6425c90066ece00686a2fe73377c91483307ba4cde527463e6fed541a38b1b3a83d017fa04c36a582d89ffa67c62e36cd733cdd90a95ce0a55866d3eff1f6a5dd9a755efb74979ee64afd2d70bee3421fcb290e763452e624fa6729125e75df99188c8aa1f64af954ef0509c56a41a392db434234f71942902ec4f907ce44ac8f8e0d8aabefd92239c44acb9cfcf891d9a1549a369db69f566d4a54b488d708330ad9709421583333b44959b493195e0c2a5b206cee70559a4e5e898a7", 0xed}, {&(0x7f0000009e80)="5a28cd3be7d6a9809f2222b6d2d0d7a6c569fc1f408660c90f4bba57ab84320091d1888114366e0e3ca8ab293f993aeab557fde4202252c2541888afef85c093ba9ab94a5b603f9b227677a9073e7eb85a8302302d6d77dd98b78d5bea7b4337e38058bc00795a30b1625d6894955e426b4ee4cd6b63fb3790c4e531e0816b78", 0x80}], 0x3, 0x0, 0x0, 0x4000881}}, {{&(0x7f0000009f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a1c0)=[{&(0x7f0000009fc0)="abad9005f50a908b378ccabd1d5795d95b834c61dd7a232776364a5478fdca9d84c2b9078fa4b790f055308ef5711e40df5fb0b47641283dee6980f0ddce41c1a40821b5fdc2b8f3974ee80d74ab263554a624a876d87526587f3c349887a9df6b1ee06f3b9b8c8d76d9230ed71d9c5fbaf2cb298d5e9b58e3b617ee48f96edb083f3f932f20a91929ee4c45a1f486b7d3d7a73c0d71a3ba7590662c24294167c9dc48063bf7b24d22a55aa62f50a9274f46939d4fa81e030ae821d3f903f0fe78d58afa91698364ae6640d6d763270172a185a8cbd06970074cb2", 0xdb}, {&(0x7f000000a0c0)="8906220a91728ba2fd3280dd79a465109b0a58c05cd68efbc9a2c4d458c46db893dc4d7779109f8f1319793190cbb93ab680b0ed511c21308e61a231908e2876841ed90200af454a5157f44f40df228253500ac3c2d872ec7e5fe5e00d7907e4d5ce13b76a9fe8973edbced5ccc61f3f1de833352e0812f65341bc416e4cbd09fa1686f1fdc9", 0x86}, {&(0x7f000000a180)="295a7bcfad", 0x5}], 0x3, &(0x7f000000a200)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2000e50001000000e4000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x4c, 0x59c57eac81d75178}}, {{&(0x7f000000a280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a840)=[{&(0x7f000000a300)="d2fa16321e5c98ebcb38d9e40033118102c79a5547564ca4f502c63b4b504b6aa961f453d672937135320926e9eb19de1982e67a639bdc45709df48a5f0649030ae3821abde962f608d649a551bd3344ece4a13eeee85251bd6dc0874133d90fa6c5b17ffa56238d471aa496a11ac995c43a2313a3828bcd87fe8ba352e3569ad252db43e6d77b5fa5d047ab935f0f", 0x8f}, {&(0x7f000000a3c0)=')iq', 0x3}, {&(0x7f000000a400)="95ae8d92bf3b9940bc2737dcdbe8e71a2177fcc199fe034ba109858fbca6e7a6983fa50def0b8472711898b146148cc7a9aff8d6db5d384430d1bff70849c8b43e6c644eed10aabe1530a6c2114d523e171770a0a29d1b7bf763b02ed7aa234239741d6bcb9d72a853d7ee908570fb52d41891fe245da37ed8d8350ee56b7f3e467168298e288358159f1743734b6034c6c9fbca2c49c920f4a4f35dd73b21fab20c0a6c4eeb5ebb63c14eb6e4d3a228f801d17a13662953947d6e2418ef6a3f6fad", 0xc2}, {&(0x7f000000a500)="5b16f3a1c2739d0790ac27aa81da781a1d815188b764419313cf551d13d4de4d22cbb7e7e05b54a10525bc5e1526022870bc589a819725943dcbcba085f2cafe", 0x40}, {&(0x7f000000a540)="1bc07516e8d17a64cf0fb571688d4e50aa5b10cf1ab6b7bce6e8973cde81323879aa1b7ce2fd632914e4fcaf08059175703adb48b6706f07975678bb61728c34dff58bc48b75aee94c5f0d5f08ce1b1e80b0e251bbc2eed95e0a6fadffe41e6e03c467637f2e5a55749b3df29b97eae2c92ca9dcc4cedd76b2224a0fcc4aad05013454f260c085ddcb77c219195a728a7179150cb2fc4b895d6dfdbddc670199a102d285582c2850752951f00c1e97f99b83a4043ca5418e95cde4c855b5f5fb4eabb08c81b0db357848913c8e52dc18bb3c", 0xd2}, {&(0x7f000000a640)="5335a22971bd26c966872ab37d0b3bb327840488273abeca6700e43acd5abeef7d4a955a53a086087173c73c1c9b550ff634d4a1ea2b4487312856b7bcfe64fe3b2338d18f97f7a5429cf5165cdb0a253e43ffd78a7e3957a817f6739dbdbffe6ecbeb28a0884f935e9f63c84c7dc21f32cf14d8de010c1b70cb7437095ffd590f374498d9f2cc9ba10ed746b78cbd39a2dc10515bcb08ac032fbf788853240a67d4f39519a92cfe200a5bfa61ddf0f050968626aaf9266d058fddd7c02c5c3b2975c44a30c6af29c31987ba173b275a043b62a1cd0e9f5bf7e3f9fd5130a9307b6f62c592941d8d7fc6ebd18913297437f815", 0xf3}, {&(0x7f000000a740)="0825f933cdd484ba96f701ef21a7e0721f6411aaf2b8d2808b065388fb6b243be96f92867bcfa6dae276d5213711929488a9282264a688843e9292a642972bcdb3ec31c50845aa41b4457936a381dd456ba09d25ca192a5a05f5ab62cdb9ac08b114269325ad7b9d6e1df4946012ac69cc5c235ffed6cef15ec4242b2a014fa2b0bf4fb63a1200ebfe709acba800f08542e634ad1f47ce00000000000003ffeaf2b9335686a774f15fc3f8e998a98ade3ba96a930536226e90e9d792c9b1328f957b96d5a994605f58", 0xc9}], 0x7, 0x0, 0x0, 0x40}}], 0x8, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)="7f", 0x1}, {&(0x7f0000001280)}], 0x3, 0x17, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0x506, 0x6000000000000000, 0x0, 0x0) r7 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="65a244c47378fd6320265b5eb8"], 0xd) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) pipe(&(0x7f0000000140)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f00000012c0)=[{r8, 0x480}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') syz_open_pts(r8, 0x103100) 3.511113098s ago: executing program 1 (id=977): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000440)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}]}, &(0x7f0000000100)=0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x0, 0x21, 0x17, {0x17, 0x22, "63c445269b6c030000004d01869f33542fa20b3c20"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000004c0)={0x2, 0x200, 0x6, 0x1, 0x3, 0x1}) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000000c0)={0x3, 0x100, 0x2, 0x3fd, 0x8, 0x81}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0xa) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x80000001, 0x9, 0xffff, 0x1, 0xfff, 0x0, 0xff, 0x200, 0xa, 0x31c2, 0x10001, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x2, 0x5, 0x401], 0xc000, 0x400}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000200)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000007000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioprio_set$uid(0x3, r6, 0x6000) 3.436155979s ago: executing program 2 (id=978): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x3000000, &(0x7f00002e3000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x100000001}], 0x1, 0x40, 0x0, 0x0, 0x4e, 0x20}) 3.435729192s ago: executing program 0 (id=979): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d00060905820200"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x805}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010235259f40f30c050080e90102030109021b00010e0e103209040ffb01eb27580209050c020004b0f4f749eb84a594969db59196fc332e95824b06420ee287e6ac5a2a41919687a43fa8b934fb20b447c48ae22474a034eb498ddbeaabf0580513e25d174205f22af93d1fbccfb9051bf9190a1ae9bae344f6c1cecc26ac6f4d57af624ed0a022e1c9f7a4bdde83bd935ab842b4114ae9fbe6b8c6ccc64d2ceab605d89d43bfd34d98e59ed6968fcf5c5f3ae2b9ca0e16d555eb19bc594aeb0eca185921bbf8d7683ad2a4f9da2444bfd9c89ddba06cfcc459c0515a31c57ab6f1abce97a338e6b14f1c252aaaa052166f"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 3.127824812s ago: executing program 2 (id=980): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2=0xe000006a}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd6) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 2.528071096s ago: executing program 4 (id=981): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 2.30112424s ago: executing program 4 (id=982): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000280)=0x189d, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f00000002c0)={0x6, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x4c) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x6, 0x3, 0x80, 0x99b, 0x6, 0x152, 0x2, 0x0]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.547656734s ago: executing program 1 (id=983): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) shutdown(r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xf61, &(0x7f0000000240)={0x0, 0x529a, 0x8, 0x0, 0x29d}) syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0xf267, 0x40, 0x3, 0xa8}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10004041}, 0x2000c088) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000009f08d085e675779fcb739590246a240001002abd7000fedbdf250b00000020000e801c005180b2d6a68dad388e50eb1efdd50e95f03930f4741e3879f87d"], 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x8, @pix_mp={0x1, 0x2, 0x35323645, 0x5, 0x3, [{0x4, 0xb}, {0x10001, 0xa7000000}, {0x6, 0x6}, {0x9, 0x9}, {0x3, 0x8}, {0x2, 0xe15}, {0x4, 0x5}, {0x9ec, 0xfffffff7}], 0x9, 0x1, 0x6, 0x2, 0x6}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x5c, @rand_addr=0x64010100, 0x4e23, 0x2, 'none\x00', 0x42, 0x1, 0x39}, 0x2c) 1.276703476s ago: executing program 2 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 1.241614183s ago: executing program 0 (id=985): ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000700)={&(0x7f0000002080)=[0xfffffff8, 0x895b, 0x5, 0xfffffffa, 0x5, 0x6, 0x5, 0xfffffffd, 0x4, 0x7, 0x2, 0x8aa8, 0x8, 0x40, 0x3, 0xffffffce, 0x6, 0x0, 0x3, 0x10000, 0x5, 0x8, 0x4, 0x1, 0x6, 0xca52, 0xc28d, 0x317, 0x28ce, 0x0, 0x8, 0x6680, 0x800, 0x4c, 0x3, 0x0, 0xffffffff, 0x3, 0x5, 0x9, 0x5, 0x1, 0x6, 0xffff, 0x0, 0x3, 0xebb, 0x916f, 0x4, 0x401, 0x2, 0x8, 0x800d0, 0x5, 0xd466, 0x0, 0x6, 0x1, 0x7, 0x7f, 0x7, 0x7, 0x81, 0x1, 0x9, 0x401, 0x6, 0x8, 0x9, 0x800, 0x8000, 0x9, 0x44e, 0x5, 0xd8e, 0x2, 0x5, 0x401, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xb, 0x5, 0x9, 0x3, 0x8, 0x1, 0x1, 0xffffff01, 0x400, 0x7fffffff, 0xffffffff, 0x6, 0x1000, 0x2, 0x8, 0x7, 0xc90, 0x3, 0x1, 0x6, 0x7, 0x3, 0x6, 0x6, 0x3, 0x1, 0x5, 0x8, 0x2d222354, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x6, 0x0, 0xfffffc00, 0x5, 0x6, 0x3, 0x5d, 0xc, 0x800, 0xa3, 0x100, 0x800, 0x4, 0x23, 0x8001, 0x7, 0x4, 0x1400000, 0x3, 0x4, 0x0, 0x6, 0xfff, 0x5f6c2097, 0x5, 0x8001, 0x9d1, 0x80000001, 0x7b, 0xffffff94, 0x101, 0x8001, 0x1, 0x7, 0x4, 0x9, 0x447, 0x6, 0x100, 0x10001, 0x2a45, 0x1, 0x4, 0x4, 0xffff8001, 0x15c5ef0c, 0x6, 0x4, 0x5, 0x80000001, 0x7, 0x8001, 0x8, 0x80000001, 0x70f, 0x2, 0x2, 0x10001, 0x7, 0x1, 0xc76, 0x4, 0x2, 0x5, 0xff, 0x7, 0x0, 0x1, 0x8, 0x4f1, 0x9, 0x76c0, 0x0, 0x9, 0x4, 0x7, 0xfc6, 0x7, 0x4, 0xc000000, 0x7, 0x9, 0x6, 0x3, 0x9, 0xce4, 0x6, 0x55, 0x1, 0x80, 0x0, 0x4, 0x7, 0x7f, 0xd, 0x8, 0x2, 0x4, 0x7fffffff, 0x83, 0x3, 0x7, 0xa, 0x5, 0x4, 0x9, 0x6, 0x6, 0x2, 0x519, 0x0, 0x1, 0x7, 0xfb5e, 0x9, 0x2, 0x5, 0x1, 0xf, 0x0, 0x800, 0x0, 0xe, 0x6, 0x8, 0x2, 0x8, 0x4, 0x3, 0x5, 0x6, 0x800, 0x6, 0x9, 0x5, 0x1189, 0x9d5, 0x7, 0x0, 0xfc, 0xff, 0x7, 0x3, 0xfff, 0x2, 0x7, 0x5, 0x7, 0x7fffffff, 0x3000, 0xa148, 0xa9, 0x7fffffff, 0x8, 0x4, 0x4, 0x8, 0x3, 0xa, 0xee, 0xd0dd, 0x2, 0x56dadf6a, 0xb0cd, 0x8, 0xb0, 0x5, 0x8, 0x2, 0x6, 0x1, 0x89, 0x9, 0x81, 0x4, 0x6, 0x8001, 0xca, 0xc4, 0x9ec, 0x4, 0x800, 0x7, 0x9, 0x5, 0x8, 0x7, 0x5, 0x8678, 0x1, 0x5, 0x2, 0x1, 0xfffeffff, 0xe, 0x5, 0x3, 0x7, 0x5, 0x0, 0xa3c4, 0x9, 0x1, 0x9, 0xdb, 0x401, 0x3, 0xe408, 0x7fffffff, 0x9de, 0xb, 0xd, 0x9, 0x10001, 0x9, 0x2, 0x200, 0x81, 0xfffffff9, 0x10000, 0x7ff, 0x0, 0x4, 0x482, 0x9, 0x4, 0xfd, 0xfffffffc, 0x1, 0xfb8, 0x0, 0x7ff, 0x5, 0x80, 0x9, 0xff, 0x1d, 0xa, 0x0, 0x3, 0x7, 0x9, 0x7, 0xfff, 0x2, 0x9, 0x7, 0x7f, 0x33, 0x4, 0x4, 0x7ff, 0xbc, 0x7, 0xffffffff, 0x2, 0x3, 0xf, 0x8, 0x8, 0x80, 0x2, 0x1ff, 0x9, 0x3e, 0x2, 0x80000000, 0x2, 0x1, 0x2a94, 0x401, 0x7, 0x9, 0x2d3, 0x6, 0x9, 0x616, 0x3ff, 0x8, 0xb38c, 0xfffffff8, 0x3, 0x5, 0x502e, 0xfffffffc, 0x8, 0x61, 0x7fffffff, 0x10000, 0x97c, 0x7, 0xffff, 0x9, 0x7, 0x4, 0xf678, 0x1, 0xfffffff7, 0x3, 0x3, 0x8, 0x7, 0xee, 0xfff, 0x7f, 0x8000, 0x6, 0x10000, 0xfffffffd, 0xad, 0x7, 0x466, 0x8001, 0x4, 0x0, 0xa9, 0x8001, 0x9, 0x9ab, 0x9, 0x9, 0x2, 0x1ac, 0x0, 0x101, 0x8, 0x3, 0x8, 0x1, 0xffffffff, 0x8000, 0x4, 0x6, 0x3, 0x6, 0x8, 0x7, 0x2, 0x0, 0x4, 0x54, 0x7fffffff, 0x7, 0xc, 0x3, 0xc9, 0x2, 0xfffffffc, 0x8, 0x101, 0xd7c6, 0x6, 0x5, 0x6c6, 0x9, 0x7fffffff, 0x1, 0xffffffff, 0x5, 0x7, 0xd, 0x4e3, 0x1ff, 0x1, 0x7, 0x400, 0x100, 0x4, 0x5, 0x8, 0x3, 0xce5, 0x9, 0x42, 0x5, 0x261, 0x8, 0x6, 0x8000, 0x9aea, 0x1ee, 0x8, 0xa, 0x6, 0x6, 0x4abb, 0xfff, 0x5, 0xbe, 0xf, 0x6044, 0xffffffff, 0xd, 0xd46d, 0x7, 0x1, 0x0, 0x3, 0x5, 0xf, 0x8, 0x9, 0x3, 0x5, 0x91400000, 0x8, 0x3ff, 0x5, 0x2, 0x101, 0x6, 0x2, 0xffff8001, 0x5, 0xf3, 0xc, 0x6, 0x3, 0x1, 0x7, 0x1f10f408, 0x8, 0x270000, 0x9b63, 0x1, 0x6e, 0x101, 0xa76, 0x4, 0xffffffff, 0x4, 0x8e, 0x1, 0x3, 0x7d0320b2, 0x2, 0x7fffffff, 0x7, 0x69ef, 0x4, 0x7, 0x8d2e, 0x9, 0x2, 0x6, 0x9, 0x6, 0x80000000, 0x13a4, 0x8, 0xffffffff, 0x83, 0x2, 0x4, 0x4, 0x10001, 0x2, 0x1, 0xa, 0x0, 0x7, 0x5, 0x8000, 0x5, 0x32f5, 0x1, 0x400, 0x4, 0x3, 0xfffffff8, 0x2, 0x68a6, 0x76f, 0xfffffffa, 0x3, 0x0, 0x1, 0x7ff, 0x4, 0xfffffffa, 0x1, 0x1bb8e2b7, 0x800, 0x9, 0x2, 0x8, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0xfffffeff, 0x10001, 0x5, 0x2511a31b, 0x1000, 0x0, 0x400, 0x8aa, 0x7c3469c0, 0x4522, 0x401, 0xb519, 0x9, 0xfe, 0x7, 0xc267, 0x1, 0x40, 0x0, 0x3, 0xfff, 0x1, 0x1, 0x4, 0x7fffffff, 0xd563, 0x7f, 0x1, 0x1, 0x8001, 0x9, 0xc, 0x101, 0x7, 0x157, 0x3, 0x60f0, 0x8, 0xb, 0x1ff, 0x7, 0x3, 0x4, 0x9, 0x1, 0x1, 0x5, 0x9, 0xb5ec, 0x3, 0x9, 0x283, 0x4, 0x4, 0x79b0, 0x4a5, 0x2, 0x6389, 0x73, 0x4, 0x0, 0x4e8, 0x0, 0x6e5, 0x9, 0xffff0001, 0x0, 0x0, 0x2, 0x0, 0xca, 0xfffffffe, 0xe1, 0x2, 0x9, 0xfffffc00, 0x6, 0x1000, 0x19ae, 0x4, 0x44, 0x8, 0x3, 0x3ff, 0x2, 0xb524, 0x0, 0x9, 0x8, 0x4, 0x9, 0xffff, 0xdd, 0x80, 0x2, 0x9, 0x0, 0x4, 0x2, 0x3, 0xfffffdb1, 0x3, 0x7ff, 0x2, 0xfdd, 0x2, 0x4, 0x6, 0x2, 0x7f, 0x2, 0xf, 0x9, 0x10000, 0x0, 0x8, 0x70, 0x7, 0x7fff, 0x877, 0x0, 0xdbb7, 0x10000, 0x1, 0x6, 0xe927, 0x7, 0x1, 0x9, 0x800, 0x31, 0xfffffff8, 0xc, 0x2, 0x200, 0x1ff, 0x400, 0x2, 0x2, 0x40, 0x8, 0x2, 0x78, 0xd, 0x7, 0x0, 0x8, 0x3, 0x10000, 0x5, 0x8, 0x7, 0xfffff801, 0x10001, 0x9, 0xb63, 0x9aa1, 0xffffffff, 0xb, 0x446b, 0x1, 0x40, 0x81, 0x2814, 0x1, 0x6, 0x8, 0x6, 0x2, 0x8, 0x0, 0xda, 0x5, 0x5, 0x7f, 0x3, 0x9e39, 0x3, 0x8001, 0x0, 0x3, 0xd, 0xffff, 0x9, 0x2, 0x1, 0xdab, 0xdd5, 0x3, 0x7fff, 0x2, 0x5, 0x4, 0x9, 0x0, 0x100, 0x94a, 0x3, 0x5, 0x1c7, 0x1ff, 0xe23f, 0x7fff, 0xffffffff, 0x8, 0x9, 0x7f, 0xc05, 0x49b3, 0x7, 0x8, 0x2, 0x3, 0x7, 0xf487, 0x3, 0x7, 0x4, 0x6, 0xc, 0x1, 0x3, 0xd, 0x4, 0x3, 0x3, 0xa, 0x7f, 0x728, 0xfb, 0x2, 0x100, 0x8b4, 0x6, 0x40, 0xffffffff, 0x7ff, 0x200, 0x417339d5, 0x3, 0x7, 0xfffffff7, 0x3, 0xf17e, 0x200, 0x80000000, 0xfffffffe, 0x5, 0x5, 0x0, 0x0, 0x8, 0x2, 0x9, 0x8000, 0x3, 0x5, 0x4, 0x3, 0x0, 0x80000001, 0x7fffffff, 0x2, 0x6, 0xffffffff, 0x8, 0x10001, 0x4, 0x4, 0xe0, 0x7, 0xfffffe00, 0x22, 0x8001, 0x8, 0x0, 0xd015, 0xe, 0xfffffff7, 0x854b, 0x0, 0x5, 0x0, 0xd2, 0x2c61, 0x4, 0x5, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x69f, 0x5, 0x1, 0x7ff, 0x1, 0x4, 0x4, 0x7, 0x5, 0x6, 0x1, 0xf, 0x5, 0x69, 0x2, 0x0, 0x7, 0x96d, 0x7, 0xe, 0x0, 0x401, 0x4, 0x4, 0x459, 0x8, 0xc2, 0xca3f, 0x3, 0x8, 0x6, 0xc3, 0xc, 0x3, 0xb3c5, 0x5, 0x50b0, 0x101, 0x8, 0x8, 0x9, 0x5, 0x2208, 0x6, 0x6, 0x80000001, 0x9, 0x7fff, 0x7fffffff, 0x0, 0xf, 0x401, 0x80, 0x7fff, 0x9, 0x2, 0x3ca, 0x6, 0xff, 0x9, 0xd, 0xd, 0x5dea, 0x3, 0x8c8b, 0x401, 0x4, 0x3, 0x3, 0x7, 0x3, 0x6, 0xcc, 0xf, 0x8000, 0x0, 0x7021, 0x5b, 0xdc, 0xb47, 0x1, 0x7fffffff, 0x8, 0x3, 0xfc, 0x0, 0x1, 0xa, 0x2, 0xfffffff7, 0x3, 0xff, 0x0, 0xffff, 0x40, 0x0, 0x5, 0x8, 0x9, 0x1, 0x4, 0x10000, 0xf5, 0x1, 0x0, 0x4, 0x7, 0x4000000, 0x7, 0x3, 0x8866, 0x8, 0x0, 0x1, 0xfff, 0x8, 0x0, 0x7f, 0x6, 0x4, 0xffffff80, 0xc, 0x1, 0x9, 0x7], 0x6, 0x400, 0x3}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x63c, 0x0, 0x350, 0x350, 0x0, 0x230, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd8, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0x2, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x1, 0x5}, 0x0, 0xec, 0x158, 0x0, {}, [@common=@eui64={{0x24}}, @common=@eui64={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x100, 0x8, 0x6, 0x0, 0x0, "0b4d66201b7f50ed57f1663b9b29deec512f5da08f075fb1aa98c112a228cfe2a51e125958d417d11d83dfffe2f80649394edfbb1726f30822ae3a997d5146f5"}}}, {{@uncond, 0x0, 0xec, 0x120, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@mh={{0x24}, {"31f2", 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x3, 0x6}, {0x3, 0x1}, 0x851, 0xe537}}}, {{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@empty, 0x6, 0x13, 0xe}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x62, 0x8, 0xa, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x24}, {0x6}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x4, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r10 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) write$FUSE_LK(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x65, 0x7eb, 0x1, r10}}}, 0x28) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40030002, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0xe, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x7, 0x3, 0x2}]}]}]}}]}, 0xb0}}, 0x0) unshare(0x26020480) 831.419359ms ago: executing program 5 (id=986): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) r1 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x240000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x11e) r2 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = getpgid(r5) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r6}) r7 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d000009058202000200"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x1c) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) syz_usb_control_io(r2, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000, 0x0, 0x0, 0x0, 0x0, 0x3]}}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4205, r9, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000740)={0x0}) lseek(r8, 0x36, 0x1) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="401202000000e8"], 0x0, 0x0}) 716.718896ms ago: executing program 4 (id=987): syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2/file0\x00', 0x10, 0xfffffffe) r2 = socket(0x10, 0x803, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'veth1_virt_wifi\x00'}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x3, [0x84, 0x9, 0x2]}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4804) socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) 628.163325ms ago: executing program 2 (id=988): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = openat$proc_mixer(0xffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer\x00', 0xe57998a125084bfe, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x81}}, './file0\x00'}) sendmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c080) 87.059789ms ago: executing program 4 (id=989): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x2, &(0x7f0000000000)=0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r1 = eventfd(0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000002400)={0x3, 0xff, 0x2, 0x4000, 0xffffffffffffffff}) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000002800), 0x400000, 0x0) io_submit(r0, 0x7, &(0x7f00000027c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x7f, r1, &(0x7f0000001380)="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", 0x1000, 0x4, 0x0, 0x3, r1}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f0000002380)="70c10a86cf057f196d43668735c92a4b155f312003653d02b84dc34d4c0ea2268b97f954eb108ad6df3e4c708843bd8218b9d5dc4ef32f1906be4709cc467fc60b7baa5d082d5411888f50eb8a84605653e8ce3dac50720f6f14a2a2ffdf870ee76d9d65", 0x64, 0x7, 0x0, 0x2, r1}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000002440)="ae2a6a2f937f52cf6d36121751d4358770b8ac901592c33e36b793b78f66", 0x1e, 0x100}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x2, 0x40, r1, &(0x7f00000024c0)="20af2b41dbda6e5fca691a2c5bf1dccf2e0bc0ace1403ed140b39c2b", 0x1c, 0xffffffffffffffff, 0x0, 0x2, r1}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x2, 0x449, r1, &(0x7f0000002540)="aa7a2d40854c6012a9cc2f2ea98b3a3d0d11ebf39a1a859cf58eb0d78dd7e66a18edd135a754704171207fe22ff9cf25a7d365999e8015ae36007066ce29ab6bc866454e8d8cee76ef4887edf14f7209098dc2a0b41d8539500b8d74c8e9daef5ea63b49bc071980bd9bb96ba82e711296a6da1258c914b95e0a19038167c2f1cc71", 0x82, 0xe, 0x0, 0x0, r1}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000002640)="b1a83c96b4aec0c5c8ff7c4309edbd3f6be4ec4b3e2c9a8ce49ac31b1ad9c21ee20bff14ba675f8e5305e1008d9ce64598395fbcb7ec381a4a2daa478693b139e32435e6adec254a86c2f1", 0x4b, 0x2, 0x0, 0x3, r2}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f0000002700)="a818e7ac0fa10efffe8a46a77b5eb657a6452ad19f239b5ff269cf729223e52032b21ce8f420743bc40cada78aeb81f1a508e9b838ef890c10a5a74bcb967a1c0a553151125a08207b2901e4", 0x4c, 0x1, 0x0, 0x1}]) io_setup(0x9, &(0x7f0000000040)=0x0) (async) syz_usb_connect(0x5, 0x46, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe1, 0xdb, 0xdf, 0x10, 0x421, 0x2d9, 0x5c1b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x1, 0xb0}, {0x6, 0x24, 0x1a, 0x401}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, "e9"}]}]}}]}}]}}, 0x0) io_getevents(r4, 0x3, 0x2, &(0x7f0000000100)=[{}, {}], 0x0) (async) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40a00000, &(0x7f0000000280)="3481ac7c788eee1ffe7017564d2deac9abe97fd50c33c41c239780a6fd9afe4766e9060d53a8251b0de683e88b5fddd059fe04aff5659d3f738aa2e60521525f6ee71a4bcd4a866267a282de93eea85064c0d0e8152b28c8f86f12a26cccb3e1f575b444e9cd65026eb37c9893fc79d5ed2f0d0bb949e6faf9cec54e65ee4b3ce34b86cee122d297c6cb1a5520066d37e5241233279cf59e42552e682953be88ca31699529752e286583dca8d7b1ea95ce6e1a5d4f29627bc96bcd90eed9c160e6803b4631e2e02b27a5f876844007b405990ec8be6ce0de4088bb50e665bdc9aefd99f11d97a76628", 0xe9, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000380)="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") 0s ago: executing program 2 (id=990): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000380)={0x80000000, &(0x7f0000000600)=[{0x80000000}], &(0x7f0000000400)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f00000005c0)={r3, &(0x7f0000000480), &(0x7f00000004c0)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000253e3e1aa447508a000200", @ANYBLOB], 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={r5, 0x58, &(0x7f0000000640)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x1, @local, 0x8}, @in6={0xa, 0x0, 0x0, @local, 0x100}]}, &(0x7f0000000700)=0xc) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="9856af54a0317b9d0b4d22e15aad780a9e38214c376afd020b1002679c0bfdb8ef9bc529a88883ae2c3ff38c1532b431fc752ec7ec9d9fc19b18bcf69b3c414f09681c"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in={{0x2, 0x4e20, @local}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700100003e000701feffffff00000000017c0000040042800c00018006000600800a00004c0102804501148004"], 0x170}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000200)={r9, r10, r11, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ailure. [ 209.251940][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 209.276007][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.2.752 Not tainted syzkaller #0 PREEMPT(full) [ 209.276032][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 209.276043][ T8279] Call Trace: [ 209.276050][ T8279] [ 209.276058][ T8279] dump_stack_lvl+0xe8/0x150 [ 209.276085][ T8279] should_fail_ex+0x412/0x560 [ 209.276110][ T8279] should_failslab+0xa8/0x100 [ 209.276131][ T8279] kmem_cache_alloc_noprof+0x87/0x6e0 [ 209.276156][ T8279] ? skb_clone+0x212/0x3a0 [ 209.276182][ T8279] skb_clone+0x212/0x3a0 [ 209.276206][ T8279] __netlink_deliver_tap+0x404/0x850 [ 209.276236][ T8279] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.276255][ T8279] netlink_deliver_tap+0x19c/0x1b0 [ 209.276274][ T8279] netlink_sendskb+0x68/0x140 [ 209.276298][ T8279] netlink_unicast+0x3a3/0x9b0 [ 209.276329][ T8279] ? __pfx_netlink_unicast+0x10/0x10 [ 209.276361][ T8279] netlink_rcv_skb+0x2b6/0x4b0 [ 209.276380][ T8279] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 209.276406][ T8279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.276434][ T8279] ? bpf_lsm_capable+0x9/0x20 [ 209.276454][ T8279] ? security_capable+0x7e/0x2c0 [ 209.276480][ T8279] nfnetlink_rcv+0x2c0/0x27b0 [ 209.276511][ T8279] ? __local_bh_enable_ip+0xd0/0x130 [ 209.276527][ T8279] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.276543][ T8279] ? __dev_queue_xmit+0x274/0x3850 [ 209.276563][ T8279] ? __local_bh_enable_ip+0xd0/0x130 [ 209.276575][ T8279] ? __dev_queue_xmit+0x274/0x3850 [ 209.276594][ T8279] ? __dev_queue_xmit+0x1e6c/0x3850 [ 209.276615][ T8279] ? __sys_sendmsg+0x183/0x260 [ 209.276644][ T8279] ? __dev_queue_xmit+0x274/0x3850 [ 209.276666][ T8279] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.276702][ T8279] ? __pfx___dev_queue_xmit+0x10/0x10 [ 209.276731][ T8279] ? ref_tracker_free+0x693/0x840 [ 209.276750][ T8279] ? __copy_skb_header+0xa3/0x4a0 [ 209.276772][ T8279] ? __pfx_ref_tracker_free+0x10/0x10 [ 209.276791][ T8279] ? __skb_clone+0x63/0x7a0 [ 209.276816][ T8279] ? __skb_clone+0x483/0x7a0 [ 209.276843][ T8279] ? skb_clone+0x246/0x3a0 [ 209.276867][ T8279] ? __netlink_deliver_tap+0x807/0x850 [ 209.276884][ T8279] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.276908][ T8279] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.276933][ T8279] netlink_unicast+0x80f/0x9b0 [ 209.276963][ T8279] ? __pfx_netlink_unicast+0x10/0x10 [ 209.276984][ T8279] ? __alloc_skb+0x193/0x390 [ 209.277003][ T8279] ? netlink_sendmsg+0x650/0xb40 [ 209.277019][ T8279] ? skb_put+0x11b/0x210 [ 209.277041][ T8279] netlink_sendmsg+0x813/0xb40 [ 209.277068][ T8279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.277089][ T8279] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.277110][ T8279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.277130][ T8279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.277147][ T8279] ____sys_sendmsg+0xa68/0xad0 [ 209.277174][ T8279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.277199][ T8279] ? kstrtoull+0x12f/0x1d0 [ 209.277225][ T8279] ___sys_sendmsg+0x2a5/0x360 [ 209.277245][ T8279] ? __lock_acquire+0x6b5/0x2cf0 [ 209.277270][ T8279] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.277294][ T8279] ? get_pid_task+0x20/0x1f0 [ 209.277311][ T8279] ? get_pid_task+0x20/0x1f0 [ 209.277326][ T8279] ? get_pid_task+0x20/0x1f0 [ 209.277370][ T8279] ? __fget_files+0x2a/0x420 [ 209.277386][ T8279] ? __fget_files+0x3a0/0x420 [ 209.277414][ T8279] __sys_sendmsg+0x183/0x260 [ 209.277437][ T8279] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.277469][ T8279] ? __pfx_ksys_write+0x10/0x10 [ 209.277499][ T8279] __do_fast_syscall_32+0x1d2/0x540 [ 209.277517][ T8279] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.277533][ T8279] ? do_fast_syscall_32+0x33/0x70 [ 209.277550][ T8279] ? asm_int80_emulation+0x1a/0x20 [ 209.277565][ T8279] ? do_int80_emulation+0x20e/0x400 [ 209.277588][ T8279] do_fast_syscall_32+0x33/0x70 [ 209.277606][ T8279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.277625][ T8279] RIP: 0023:0xf7f97539 [ 209.277641][ T8279] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 209.277655][ T8279] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 209.277680][ T8279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 209.277692][ T8279] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.277702][ T8279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.277712][ T8279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.277722][ T8279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.277750][ T8279] [ 209.379952][ T5906] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 209.397460][ T12] net_ratelimit: 82 callbacks suppressed [ 209.397479][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.585305][ T5906] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.585332][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.585351][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.585383][ T5906] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 209.585404][ T5906] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.805988][ T9] usb usb1-port1: attempt power cycle [ 209.829856][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.943165][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 209.977384][ T50] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.110347][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.119147][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.179863][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 210.231817][ T9] usb 1-1: device descriptor read/8, error -71 [ 210.300063][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.307859][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.419983][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 210.428036][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.469892][ T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 210.490477][ T9] usb 1-1: device descriptor read/8, error -71 [ 210.620178][ T9] usb usb1-port1: unable to enumerate USB device [ 211.016196][ T8304] usb usb8: usbfs: process 8304 (syz.2.756) did not claim interface 2 before use [ 211.457623][ T8310] FAULT_INJECTION: forcing a failure. [ 211.457623][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 211.470313][ T8310] CPU: 1 UID: 0 PID: 8310 Comm: syz.0.758 Not tainted syzkaller #0 PREEMPT(full) [ 211.470330][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 211.470337][ T8310] Call Trace: [ 211.470344][ T8310] [ 211.470349][ T8310] dump_stack_lvl+0xe8/0x150 [ 211.470367][ T8310] should_fail_ex+0x412/0x560 [ 211.470382][ T8310] should_failslab+0xa8/0x100 [ 211.470399][ T8310] kmem_cache_alloc_noprof+0x87/0x6e0 [ 211.470416][ T8310] ? skb_clone+0x212/0x3a0 [ 211.470432][ T8310] skb_clone+0x212/0x3a0 [ 211.470445][ T8310] ? dev_queue_xmit_nit+0x268/0xad0 [ 211.470459][ T8310] dev_queue_xmit_nit+0x29a/0xad0 [ 211.470471][ T8310] ? dev_queue_xmit_nit+0x2d/0xad0 [ 211.470487][ T8310] dev_hard_start_xmit+0x1c1/0x7f0 [ 211.470508][ T8310] __dev_queue_xmit+0x168f/0x3850 [ 211.470521][ T8310] ? __sys_sendmsg+0x183/0x260 [ 211.470539][ T8310] ? __dev_queue_xmit+0x274/0x3850 [ 211.470607][ T8310] ? __pfx___dev_queue_xmit+0x10/0x10 [ 211.470626][ T8310] ? __copy_skb_header+0xa3/0x4a0 [ 211.470639][ T8310] ? __asan_memcpy+0x40/0x70 [ 211.470652][ T8310] ? __skb_clone+0x63/0x7a0 [ 211.470667][ T8310] ? __skb_clone+0x483/0x7a0 [ 211.470682][ T8310] ? skb_clone+0x246/0x3a0 [ 211.470697][ T8310] __netlink_deliver_tap+0x5ad/0x850 [ 211.470713][ T8310] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.470724][ T8310] netlink_deliver_tap+0x19c/0x1b0 [ 211.470734][ T8310] netlink_unicast+0x7e3/0x9b0 [ 211.470753][ T8310] ? __pfx_netlink_unicast+0x10/0x10 [ 211.470767][ T8310] ? __alloc_skb+0x193/0x390 [ 211.470778][ T8310] ? netlink_sendmsg+0x650/0xb40 [ 211.470787][ T8310] ? skb_put+0x11b/0x210 [ 211.470800][ T8310] netlink_sendmsg+0x813/0xb40 [ 211.470819][ T8310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.470831][ T8310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.470843][ T8310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.470855][ T8310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.470865][ T8310] ____sys_sendmsg+0xa68/0xad0 [ 211.470882][ T8310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.470897][ T8310] ? kstrtoull+0x12f/0x1d0 [ 211.470912][ T8310] ___sys_sendmsg+0x2a5/0x360 [ 211.470923][ T8310] ? __lock_acquire+0x6b5/0x2cf0 [ 211.470939][ T8310] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.470953][ T8310] ? get_pid_task+0x20/0x1f0 [ 211.470963][ T8310] ? get_pid_task+0x20/0x1f0 [ 211.470973][ T8310] ? get_pid_task+0x20/0x1f0 [ 211.470995][ T8310] ? __fget_files+0x2a/0x420 [ 211.471005][ T8310] ? __fget_files+0x3a0/0x420 [ 211.471020][ T8310] __sys_sendmsg+0x183/0x260 [ 211.471036][ T8310] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.471057][ T8310] ? __pfx_ksys_write+0x10/0x10 [ 211.471086][ T8310] __do_fast_syscall_32+0x1d2/0x540 [ 211.471102][ T8310] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.471118][ T8310] ? do_fast_syscall_32+0x33/0x70 [ 211.471131][ T8310] ? asm_int80_emulation+0x1a/0x20 [ 211.471145][ T8310] ? do_int80_emulation+0x20e/0x400 [ 211.471165][ T8310] do_fast_syscall_32+0x33/0x70 [ 211.471180][ T8310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.471197][ T8310] RIP: 0023:0xf7f56539 [ 211.471212][ T8310] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 211.471224][ T8310] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 211.471241][ T8310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 211.471252][ T8310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.471261][ T8310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.471269][ T8310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.471276][ T8310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.471301][ T8310] [ 212.236456][ T5906] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.246122][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.286072][ T5906] usb 6-1: can't set config #1, error -71 [ 212.329255][ T5906] usb 6-1: USB disconnect, device number 2 [ 214.369718][ T8350] ipip0: entered promiscuous mode [ 214.374879][ T8350] ipip0: entered allmulticast mode [ 214.385304][ T5906] hid (null): unknown global tag 0xd [ 214.405695][ T5906] hid (null): unknown global tag 0x7d [ 214.450103][ T5906] hid (null): report_id 40248 is invalid [ 214.456564][ T65] net_ratelimit: 56 callbacks suppressed [ 214.456578][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.501704][ T5906] hid (null): unknown global tag 0xfe [ 214.519903][ T5906] hid (null): unknown global tag 0xd [ 214.533362][ T5906] hid (null): unknown global tag 0xc4 [ 214.570012][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 214.577522][ T5906] hid (null): unknown global tag 0xe [ 214.615572][ T5906] hid (null): unknown global tag 0xe [ 214.638328][ T5906] hid (null): unknown global tag 0xb2 [ 214.658440][ T5906] hid (null): report_id 334925566 is invalid [ 214.730092][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.754434][ T5906] hid (null): unknown global tag 0xc [ 214.767200][ T5906] hid (null): report_id 0 is invalid [ 214.784622][ T5906] hid (null): unknown global tag 0xe [ 214.790549][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.888444][ T5906] hid (null): invalid report_size 1650067927 [ 214.894760][ T5906] hid (null): report_id 44173 is invalid [ 214.910129][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.924394][ T5906] hid (null): invalid report_size 7251 [ 214.933488][ T5906] hid (null): unknown global tag 0xe [ 214.941233][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 214.960242][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.092533][ T5906] hid (null): unknown global tag 0xd [ 215.172084][ T5906] hid (null): unknown global tag 0xc [ 215.177438][ T5906] hid (null): report_id 22022 is invalid [ 215.216037][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.412001][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 215.439942][ T5906] hid (null): unknown global tag 0x72 [ 215.445422][ T5906] hid (null): unknown global tag 0xe [ 215.460864][ T5906] hid (null): unknown global tag 0xc [ 215.481790][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 215.508947][ T5906] hid (null): report_id 0 is invalid [ 215.519948][ T5892] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 215.533468][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 215.798219][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 215.890884][ T5906] hid (null): unknown global tag 0xf1 [ 215.919725][ T5906] hid (null): unknown global tag 0xe [ 215.926200][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 215.965355][ T5906] hid (null): global environment stack underflow [ 215.977536][ T5892] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.988270][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.008549][ T5906] hid (null): bogus close delimiter [ 216.063666][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.190745][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 216.203263][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.239683][ T24] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 216.251242][ T5906] hid (null): report_id 25647 is invalid [ 216.276580][ T5906] hid (null): global environment stack underflow [ 216.287576][ T5892] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.297257][ T5906] hid (null): unknown global tag 0xe [ 216.306103][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 216.314912][ T24] usb 2-1: can't read configurations, error -61 [ 216.321342][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.339498][ T5906] hid (null): unknown global tag 0xd [ 216.345791][ T5892] usb 3-1: Product: syz [ 216.377225][ T5892] usb 3-1: Manufacturer: syz [ 216.406706][ T5906] hid-generic 0058:00FF:0006.000D: unknown main item tag 0x1 [ 216.428029][ T5906] hid-generic 0058:00FF:0006.000D: unexpected long global item [ 216.444013][ T5906] hid-generic 0058:00FF:0006.000D: probe with driver hid-generic failed with error -22 [ 216.500098][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 216.501532][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 216.623806][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 216.646350][ T5892] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.660434][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 216.676431][ T24] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 216.709921][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 216.725129][ T24] usb 2-1: can't read configurations, error -61 [ 216.759605][ T24] usb usb2-port1: attempt power cycle [ 217.056679][ T8383] FAULT_INJECTION: forcing a failure. [ 217.056679][ T8383] name failslab, interval 1, probability 0, space 0, times 0 [ 217.069454][ T8383] CPU: 0 UID: 0 PID: 8383 Comm: syz.0.775 Not tainted syzkaller #0 PREEMPT(full) [ 217.069471][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 217.069477][ T8383] Call Trace: [ 217.069482][ T8383] [ 217.069487][ T8383] dump_stack_lvl+0xe8/0x150 [ 217.069505][ T8383] should_fail_ex+0x412/0x560 [ 217.069520][ T8383] should_failslab+0xa8/0x100 [ 217.069533][ T8383] kmem_cache_alloc_noprof+0x87/0x6e0 [ 217.069548][ T8383] ? skb_clone+0x212/0x3a0 [ 217.069565][ T8383] skb_clone+0x212/0x3a0 [ 217.069578][ T8383] ? dev_queue_xmit_nit+0x268/0xad0 [ 217.069591][ T8383] dev_queue_xmit_nit+0x29a/0xad0 [ 217.069604][ T8383] ? dev_queue_xmit_nit+0x2d/0xad0 [ 217.069620][ T8383] dev_hard_start_xmit+0x1c1/0x7f0 [ 217.069641][ T8383] __dev_queue_xmit+0x168f/0x3850 [ 217.069655][ T8383] ? __sys_sendmsg+0x183/0x260 [ 217.069672][ T8383] ? __dev_queue_xmit+0x274/0x3850 [ 217.069691][ T8383] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.069708][ T8383] ? __copy_skb_header+0xa3/0x4a0 [ 217.069722][ T8383] ? __asan_memcpy+0x40/0x70 [ 217.069735][ T8383] ? __skb_clone+0x63/0x7a0 [ 217.069750][ T8383] ? __skb_clone+0x483/0x7a0 [ 217.069766][ T8383] ? skb_clone+0x246/0x3a0 [ 217.069780][ T8383] __netlink_deliver_tap+0x5ad/0x850 [ 217.069810][ T8383] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.069826][ T8383] netlink_deliver_tap+0x19c/0x1b0 [ 217.069842][ T8383] netlink_unicast+0x7e3/0x9b0 [ 217.069868][ T8383] ? __pfx_netlink_unicast+0x10/0x10 [ 217.069881][ T8383] ? __alloc_skb+0x193/0x390 [ 217.069892][ T8383] ? netlink_sendmsg+0x650/0xb40 [ 217.069902][ T8383] ? skb_put+0x11b/0x210 [ 217.069915][ T8383] netlink_sendmsg+0x813/0xb40 [ 217.069930][ T8383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.069941][ T8383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 217.069955][ T8383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.069967][ T8383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.069976][ T8383] ____sys_sendmsg+0xa68/0xad0 [ 217.069993][ T8383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.070008][ T8383] ? kstrtoull+0x12f/0x1d0 [ 217.070024][ T8383] ___sys_sendmsg+0x2a5/0x360 [ 217.070036][ T8383] ? __lock_acquire+0x6b5/0x2cf0 [ 217.070052][ T8383] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.070066][ T8383] ? get_pid_task+0x20/0x1f0 [ 217.070077][ T8383] ? get_pid_task+0x20/0x1f0 [ 217.070086][ T8383] ? get_pid_task+0x20/0x1f0 [ 217.070108][ T8383] ? __fget_files+0x2a/0x420 [ 217.070119][ T8383] ? __fget_files+0x3a0/0x420 [ 217.070134][ T8383] __sys_sendmsg+0x183/0x260 [ 217.070148][ T8383] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.070171][ T8383] ? __pfx_ksys_write+0x10/0x10 [ 217.070191][ T8383] __do_fast_syscall_32+0x1d2/0x540 [ 217.070203][ T8383] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.070212][ T8383] ? do_fast_syscall_32+0x33/0x70 [ 217.070222][ T8383] ? asm_int80_emulation+0x1a/0x20 [ 217.070231][ T8383] ? do_int80_emulation+0x20e/0x400 [ 217.070244][ T8383] do_fast_syscall_32+0x33/0x70 [ 217.070255][ T8383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.070267][ T8383] RIP: 0023:0xf7f56539 [ 217.070276][ T8383] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 217.070285][ T8383] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 217.070296][ T8383] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800015c0 [ 217.070303][ T8383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.070309][ T8383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.070314][ T8383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.070320][ T8383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.070334][ T8383] [ 217.160719][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 217.626406][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 217.634928][ T24] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 217.670178][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 217.678120][ T24] usb 2-1: can't read configurations, error -61 [ 217.726830][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.776'. [ 217.809976][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 217.840811][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 217.846779][ T24] usb 2-1: too many configurations: 49, using maximum allowed: 8 [ 217.856858][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 217.867455][ T24] usb 2-1: can't read configurations, error -61 [ 217.874308][ T24] usb usb2-port1: unable to enumerate USB device [ 218.429485][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 218.429502][ T30] audit: type=1326 audit(1769916804.030:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.464918][ T30] audit: type=1326 audit(1769916804.030:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.501910][ T30] audit: type=1326 audit(1769916804.030:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.531335][ T30] audit: type=1326 audit(1769916804.030:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.609946][ T48] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 218.618938][ T30] audit: type=1326 audit(1769916804.030:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.687121][ T30] audit: type=1326 audit(1769916804.030:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.763459][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.789395][ T30] audit: type=1326 audit(1769916804.030:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.791580][ T1209] usb 3-1: USB disconnect, device number 23 [ 218.811503][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 218.827903][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.836372][ T30] audit: type=1326 audit(1769916804.030:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.866314][ T30] audit: type=1326 audit(1769916804.030:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.909605][ T30] audit: type=1326 audit(1769916804.030:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.780" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 218.963201][ T48] usb 2-1: config 0 descriptor?? [ 218.972123][ T48] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 219.150217][ T5892] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 219.339921][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 219.348224][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 219.365753][ T5892] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.377549][ T5892] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.390719][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.406423][ T5892] usb 1-1: New USB device found, idVendor=056a, idProduct=9bba, bcdDevice= 0.00 [ 219.420693][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.452337][ T5892] usb 1-1: config 0 descriptor?? [ 219.483956][ T2048] net_ratelimit: 89 callbacks suppressed [ 219.483989][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.510560][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.534807][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.563463][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.591095][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.643971][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.681304][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.711002][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.745578][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.774011][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.867397][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 219.878490][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 219.893883][ T5892] usb 1-1: USB disconnect, device number 24 [ 219.967651][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.987701][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.556348][ T8413] syzkaller0: entered promiscuous mode [ 220.594177][ T8413] syzkaller0: entered allmulticast mode [ 220.955229][ T8438] input: syz0 as /devices/virtual/input/input17 [ 221.231601][ T8446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.270118][ T5892] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 221.313980][ T1209] usb 2-1: USB disconnect, device number 34 [ 221.434152][ T5892] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 221.451955][ T5892] usb 1-1: config 0 has no interface number 0 [ 221.474070][ T5892] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 221.502685][ T5892] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.544144][ T5892] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 221.569859][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.591540][ T5892] usb 1-1: Product: syz [ 221.617538][ T5892] usb 1-1: Manufacturer: syz [ 221.630836][ T5892] usb 1-1: SerialNumber: syz [ 221.677652][ T5892] usb 1-1: config 0 descriptor?? [ 221.705749][ T8438] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 221.718413][ T5892] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 221.785811][ T5892] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 221.993999][ T5892] usb 1-1: USB disconnect, device number 25 [ 223.176528][ T8467] Cannot find add_set index 0 as target [ 223.456408][ T8472] FAULT_INJECTION: forcing a failure. [ 223.456408][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 223.469100][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.0.791 Not tainted syzkaller #0 PREEMPT(full) [ 223.469121][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 223.469131][ T8472] Call Trace: [ 223.469139][ T8472] [ 223.469147][ T8472] dump_stack_lvl+0xe8/0x150 [ 223.469170][ T8472] should_fail_ex+0x412/0x560 [ 223.469185][ T8472] should_failslab+0xa8/0x100 [ 223.469197][ T8472] kmem_cache_alloc_noprof+0x87/0x6e0 [ 223.469213][ T8472] ? skb_clone+0x212/0x3a0 [ 223.469229][ T8472] skb_clone+0x212/0x3a0 [ 223.469242][ T8472] ? dev_queue_xmit_nit+0x268/0xad0 [ 223.469256][ T8472] dev_queue_xmit_nit+0x29a/0xad0 [ 223.469268][ T8472] ? dev_queue_xmit_nit+0x2d/0xad0 [ 223.469284][ T8472] dev_hard_start_xmit+0x1c1/0x7f0 [ 223.469305][ T8472] __dev_queue_xmit+0x168f/0x3850 [ 223.469319][ T8472] ? __sys_sendmsg+0x183/0x260 [ 223.469336][ T8472] ? __dev_queue_xmit+0x274/0x3850 [ 223.469354][ T8472] ? __pfx___dev_queue_xmit+0x10/0x10 [ 223.469372][ T8472] ? __copy_skb_header+0xa3/0x4a0 [ 223.469385][ T8472] ? __asan_memcpy+0x40/0x70 [ 223.469399][ T8472] ? __skb_clone+0x63/0x7a0 [ 223.469414][ T8472] ? __skb_clone+0x483/0x7a0 [ 223.469430][ T8472] ? skb_clone+0x246/0x3a0 [ 223.469444][ T8472] __netlink_deliver_tap+0x5ad/0x850 [ 223.469460][ T8472] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.469471][ T8472] netlink_deliver_tap+0x19c/0x1b0 [ 223.469481][ T8472] netlink_unicast+0x7e3/0x9b0 [ 223.469500][ T8472] ? __pfx_netlink_unicast+0x10/0x10 [ 223.469514][ T8472] ? __alloc_skb+0x193/0x390 [ 223.469525][ T8472] ? netlink_sendmsg+0x650/0xb40 [ 223.469534][ T8472] ? skb_put+0x11b/0x210 [ 223.469547][ T8472] netlink_sendmsg+0x813/0xb40 [ 223.469562][ T8472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.469573][ T8472] ? aa_sock_msg_perm+0xf1/0x1b0 [ 223.469587][ T8472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.469598][ T8472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.469608][ T8472] ____sys_sendmsg+0xa68/0xad0 [ 223.469625][ T8472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.469640][ T8472] ? kstrtoull+0x12f/0x1d0 [ 223.469655][ T8472] ___sys_sendmsg+0x2a5/0x360 [ 223.469667][ T8472] ? __lock_acquire+0x6b5/0x2cf0 [ 223.469683][ T8472] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.469697][ T8472] ? get_pid_task+0x20/0x1f0 [ 223.469707][ T8472] ? get_pid_task+0x20/0x1f0 [ 223.469716][ T8472] ? get_pid_task+0x20/0x1f0 [ 223.469739][ T8472] ? __fget_files+0x2a/0x420 [ 223.469749][ T8472] ? __fget_files+0x3a0/0x420 [ 223.469764][ T8472] __sys_sendmsg+0x183/0x260 [ 223.469778][ T8472] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.469811][ T8472] ? __pfx_ksys_write+0x10/0x10 [ 223.469845][ T8472] __do_fast_syscall_32+0x1d2/0x540 [ 223.469862][ T8472] ? lockdep_hardirqs_on+0x7a/0x110 [ 223.469876][ T8472] ? do_fast_syscall_32+0x33/0x70 [ 223.469891][ T8472] ? asm_int80_emulation+0x1a/0x20 [ 223.469906][ T8472] ? do_int80_emulation+0x20e/0x400 [ 223.469925][ T8472] do_fast_syscall_32+0x33/0x70 [ 223.469942][ T8472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.469960][ T8472] RIP: 0023:0xf7f56539 [ 223.469974][ T8472] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 223.469987][ T8472] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 223.470004][ T8472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 223.470015][ T8472] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.470025][ T8472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.470034][ T8472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.470041][ T8472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.470055][ T8472] [ 224.509899][ T13] net_ratelimit: 191 callbacks suppressed [ 224.509920][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.549917][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.585198][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.610015][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.617770][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 224.752903][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.823713][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 224.975253][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.018253][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 225.215352][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.549886][ T5892] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 225.743311][ T8517] FAULT_INJECTION: forcing a failure. [ 225.743311][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 225.897032][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.2.802 Not tainted syzkaller #0 PREEMPT(full) [ 225.897058][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 225.897069][ T8517] Call Trace: [ 225.897076][ T8517] [ 225.897085][ T8517] dump_stack_lvl+0xe8/0x150 [ 225.897111][ T8517] should_fail_ex+0x412/0x560 [ 225.897131][ T8517] should_failslab+0xa8/0x100 [ 225.897144][ T8517] __kmalloc_noprof+0xde/0x7e0 [ 225.897154][ T8517] ? ___neigh_create+0x6d5/0x2230 [ 225.897168][ T8517] ___neigh_create+0x6d5/0x2230 [ 225.897182][ T8517] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 225.897215][ T8517] ip6_finish_output2+0x1038/0x1360 [ 225.897246][ T8517] ? ip6_output+0x126/0x550 [ 225.897265][ T8517] ip6_output+0x340/0x550 [ 225.897286][ T8517] ? ip6_mr_output+0x1f3/0x11c0 [ 225.897297][ T8517] ip6_mr_output+0x549/0x11c0 [ 225.897309][ T8517] ? __pfx_ip6t_do_table+0x10/0x10 [ 225.897324][ T8517] ? ip6_mr_output+0x1f3/0x11c0 [ 225.897335][ T8517] ? __pfx_ip6_mr_output+0x10/0x10 [ 225.897355][ T8517] ? __ip6_local_out+0x601/0x890 [ 225.897376][ T8517] ? __ip6_local_out+0x84d/0x890 [ 225.897396][ T8517] ? __ip6_local_out+0x601/0x890 [ 225.897423][ T8517] ? skb_dst+0x4f/0xd0 [ 225.897436][ T8517] ? dst_output+0x17b/0x1c0 [ 225.897443][ T8517] ? ip6_send_skb+0x10f/0x390 [ 225.897456][ T8517] ip6_send_skb+0x1d5/0x390 [ 225.897470][ T8517] rawv6_push_pending_frames+0x6ec/0x8e0 [ 225.897488][ T8517] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 225.897511][ T8517] ? __pfx_raw6_getfrag+0x10/0x10 [ 225.897538][ T8517] rawv6_sendmsg+0x13b3/0x18f0 [ 225.897575][ T8517] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 225.897595][ T8517] ? aa_sk_perm+0x82d/0x960 [ 225.897611][ T8517] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.897623][ T8517] ? __fget_files+0x3a0/0x420 [ 225.897641][ T8517] ? sock_rps_record_flow+0x19/0x400 [ 225.897668][ T8517] ? inet_sendmsg+0x2f4/0x370 [ 225.897688][ T8517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.897709][ T8517] __sys_sendto+0x627/0x7a0 [ 225.897732][ T8517] ? __pfx___sys_sendto+0x10/0x10 [ 225.897764][ T8517] ? fput+0xa0/0xd0 [ 225.897776][ T8517] ? ksys_write+0x242/0x270 [ 225.897792][ T8517] ? __pfx_ksys_write+0x10/0x10 [ 225.897811][ T8517] __ia32_sys_sendto+0xdd/0x100 [ 225.897835][ T8517] __do_fast_syscall_32+0x1d2/0x540 [ 225.897854][ T8517] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.897869][ T8517] ? do_fast_syscall_32+0x33/0x70 [ 225.897885][ T8517] ? asm_int80_emulation+0x1a/0x20 [ 225.897896][ T8517] ? do_int80_emulation+0x20e/0x400 [ 225.897909][ T8517] do_fast_syscall_32+0x33/0x70 [ 225.897920][ T8517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.897931][ T8517] RIP: 0023:0xf7f97539 [ 225.897940][ T8517] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 225.897950][ T8517] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 225.897967][ T8517] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 225.897980][ T8517] RDX: 000000000000000b RSI: 0000000000000024 RDI: 0000000000000000 [ 225.897990][ T8517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.898000][ T8517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.898010][ T8517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.898038][ T8517] [ 226.631070][ T5892] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.653671][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.670060][ T5892] usb 2-1: Product: syz [ 226.686301][ T5892] usb 2-1: Manufacturer: syz [ 226.699922][ T5892] usb 2-1: SerialNumber: syz [ 226.750924][ T5892] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 226.842867][ T1209] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.085011][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 227.085028][ T30] audit: type=1326 audit(1769916812.690:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.1.796" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d539 code=0x0 [ 227.210334][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 227.372812][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.383027][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 227.439360][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.494841][ T24] usb 5-1: config 0 descriptor?? [ 227.556230][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 227.654280][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 227.899982][ T1209] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 227.908360][ T1209] ath9k_htc: Failed to initialize the device [ 228.054044][ T1209] usb 2-1: ath9k_htc: USB layer deinitialized [ 228.525644][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.534432][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.670535][ T24] usb 2-1: USB disconnect, device number 35 [ 229.061905][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 229.593371][ T8572] syz_tun: entered promiscuous mode [ 229.599365][ T8572] vlan2: entered promiscuous mode [ 229.616700][ T2048] net_ratelimit: 73 callbacks suppressed [ 229.616717][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.649944][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.657810][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 229.741295][ T5892] usb 5-1: USB disconnect, device number 25 [ 229.770006][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 229.788046][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 229.840884][ T8575] FAULT_INJECTION: forcing a failure. [ 229.840884][ T8575] name failslab, interval 1, probability 0, space 0, times 0 [ 229.860130][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.4.818 Not tainted syzkaller #0 PREEMPT(full) [ 229.860156][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 229.860166][ T8575] Call Trace: [ 229.860173][ T8575] [ 229.860180][ T8575] dump_stack_lvl+0xe8/0x150 [ 229.860206][ T8575] should_fail_ex+0x412/0x560 [ 229.860231][ T8575] should_failslab+0xa8/0x100 [ 229.860252][ T8575] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 229.860277][ T8575] ? __alloc_skb+0x1d7/0x390 [ 229.860295][ T8575] ? __local_bh_enable_ip+0xd0/0x130 [ 229.860312][ T8575] ? __alloc_skb+0x193/0x390 [ 229.860330][ T8575] __alloc_skb+0x1d7/0x390 [ 229.860352][ T8575] __ip6_append_data+0x2c27/0x3f50 [ 229.860394][ T8575] ? __pfx_raw6_getfrag+0x10/0x10 [ 229.860426][ T8575] ? ip6_mtu+0x7d/0x490 [ 229.860447][ T8575] ? __pfx___ip6_append_data+0x10/0x10 [ 229.860464][ T8575] ? __pfx_ip6_mtu+0x10/0x10 [ 229.860490][ T8575] ip6_append_data+0x1c0/0x380 [ 229.860515][ T8575] ? __pfx_raw6_getfrag+0x10/0x10 [ 229.860538][ T8575] rawv6_sendmsg+0x12fc/0x18f0 [ 229.860560][ T8575] ? __lock_acquire+0x6b5/0x2cf0 [ 229.860594][ T8575] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 229.860624][ T8575] ? aa_sk_perm+0x82d/0x960 [ 229.860658][ T8575] ? __pfx_aa_sk_perm+0x10/0x10 [ 229.860679][ T8575] ? sock_rps_record_flow+0x19/0x400 [ 229.860703][ T8575] ? inet_sendmsg+0x2f4/0x370 [ 229.860723][ T8575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.860745][ T8575] sock_write_iter+0x421/0x550 [ 229.860769][ T8575] ? __pfx_sock_write_iter+0x10/0x10 [ 229.860802][ T8575] ? kstrtoull+0x12f/0x1d0 [ 229.860829][ T8575] do_iter_readv_writev+0x619/0x8c0 [ 229.860856][ T8575] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 229.860883][ T8575] ? bpf_lsm_file_permission+0x9/0x20 [ 229.860900][ T8575] ? security_file_permission+0x75/0x260 [ 229.860919][ T8575] ? rw_verify_area+0x255/0x4d0 [ 229.860944][ T8575] vfs_writev+0x33c/0x990 [ 229.860972][ T8575] ? __pfx_vfs_writev+0x10/0x10 [ 229.861004][ T8575] ? __fget_files+0x2a/0x420 [ 229.861025][ T8575] ? __fget_files+0x3a0/0x420 [ 229.861042][ T8575] ? __fget_files+0x2a/0x420 [ 229.861066][ T8575] do_writev+0x154/0x2e0 [ 229.861086][ T8575] ? __pfx_do_writev+0x10/0x10 [ 229.861104][ T8575] ? __pfx_ksys_write+0x10/0x10 [ 229.861134][ T8575] __do_fast_syscall_32+0x1d2/0x540 [ 229.861153][ T8575] ? lockdep_hardirqs_on+0x7a/0x110 [ 229.861168][ T8575] ? do_fast_syscall_32+0x33/0x70 [ 229.861184][ T8575] ? asm_int80_emulation+0x1a/0x20 [ 229.861200][ T8575] ? do_int80_emulation+0x20e/0x400 [ 229.861223][ T8575] do_fast_syscall_32+0x33/0x70 [ 229.861242][ T8575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.861261][ T8575] RIP: 0023:0xf744d539 [ 229.861277][ T8575] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 229.861291][ T8575] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 229.861310][ T8575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800192c0 [ 229.861322][ T8575] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.861332][ T8575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.861342][ T8575] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.861353][ T8575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.861380][ T8575] [ 230.067930][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.261022][ T2048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.333234][ T8576] netlink: 'syz.0.817': attribute type 5 has an invalid length. [ 230.369957][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.421793][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 230.503856][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.642971][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.479913][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 231.672037][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.729309][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.752901][ T8612] FAULT_INJECTION: forcing a failure. [ 231.752901][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 231.765739][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.806982][ T8612] CPU: 1 UID: 0 PID: 8612 Comm: syz.4.827 Not tainted syzkaller #0 PREEMPT(full) [ 231.807009][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.807020][ T8612] Call Trace: [ 231.807027][ T8612] [ 231.807035][ T8612] dump_stack_lvl+0xe8/0x150 [ 231.807062][ T8612] should_fail_ex+0x412/0x560 [ 231.807088][ T8612] should_failslab+0xa8/0x100 [ 231.807109][ T8612] __kmalloc_noprof+0xde/0x7e0 [ 231.807127][ T8612] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 231.807154][ T8612] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 231.807182][ T8612] genl_family_rcv_msg_doit+0xd9/0x330 [ 231.807209][ T8612] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 231.807238][ T8612] ? apparmor_capable+0x137/0x1a0 [ 231.807262][ T8612] ? bpf_lsm_capable+0x9/0x20 [ 231.807280][ T8612] ? security_capable+0x7e/0x2c0 [ 231.807305][ T8612] genl_rcv_msg+0x61c/0x7a0 [ 231.807331][ T8612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.807350][ T8612] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 231.807371][ T8612] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 231.807388][ T8612] ? __pfx_nl80211_post_doit+0x10/0x10 [ 231.807422][ T8612] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.807444][ T8612] ? __skb_clone+0x63/0x7a0 [ 231.807471][ T8612] netlink_rcv_skb+0x232/0x4b0 [ 231.807490][ T8612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.807512][ T8612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.807534][ T8612] ? genl_rcv+0x19/0x40 [ 231.807563][ T8612] ? down_read+0x272/0x2e0 [ 231.807580][ T8612] ? genl_rcv+0xd/0x40 [ 231.807601][ T8612] genl_rcv+0x28/0x40 [ 231.807619][ T8612] netlink_unicast+0x80f/0x9b0 [ 231.807651][ T8612] ? __pfx_netlink_unicast+0x10/0x10 [ 231.807672][ T8612] ? __alloc_skb+0x193/0x390 [ 231.807692][ T8612] ? netlink_sendmsg+0x650/0xb40 [ 231.807713][ T8612] ? skb_put+0x11b/0x210 [ 231.807735][ T8612] netlink_sendmsg+0x813/0xb40 [ 231.807762][ T8612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.807784][ T8612] ? aa_sock_msg_perm+0xf1/0x1b0 [ 231.807805][ T8612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.807825][ T8612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.807839][ T8612] ____sys_sendmsg+0xa68/0xad0 [ 231.807865][ T8612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.807885][ T8612] ? kstrtoull+0x12f/0x1d0 [ 231.807911][ T8612] ___sys_sendmsg+0x2a5/0x360 [ 231.807931][ T8612] ? __lock_acquire+0x6b5/0x2cf0 [ 231.807955][ T8612] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.807977][ T8612] ? get_pid_task+0x20/0x1f0 [ 231.807992][ T8612] ? get_pid_task+0x20/0x1f0 [ 231.808006][ T8612] ? get_pid_task+0x20/0x1f0 [ 231.808043][ T8612] ? __fget_files+0x2a/0x420 [ 231.808042][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.808063][ T8612] ? __fget_files+0x3a0/0x420 [ 231.808088][ T8612] __sys_sendmsg+0x183/0x260 [ 231.808116][ T8612] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.808147][ T8612] ? __pfx_ksys_write+0x10/0x10 [ 231.808177][ T8612] __do_fast_syscall_32+0x1d2/0x540 [ 231.808194][ T8612] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.808210][ T8612] ? do_fast_syscall_32+0x33/0x70 [ 231.808226][ T8612] ? asm_int80_emulation+0x1a/0x20 [ 231.808241][ T8612] ? do_int80_emulation+0x20e/0x400 [ 231.808263][ T8612] do_fast_syscall_32+0x33/0x70 [ 231.808280][ T8612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.808298][ T8612] RIP: 0023:0xf744d539 [ 231.808313][ T8612] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 231.808327][ T8612] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 231.808346][ T8612] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800022c0 [ 231.808357][ T8612] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.808367][ T8612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.808377][ T8612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.808387][ T8612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.808412][ T8612] [ 232.294155][ T5892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.305781][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.382586][ T5892] usb 6-1: config 0 descriptor?? [ 232.398266][ T8618] FAULT_INJECTION: forcing a failure. [ 232.398266][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 232.455881][ T8620] FAULT_INJECTION: forcing a failure. [ 232.455881][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 232.470472][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.4.831 Not tainted syzkaller #0 PREEMPT(full) [ 232.470496][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.470507][ T8620] Call Trace: [ 232.470514][ T8620] [ 232.470522][ T8620] dump_stack_lvl+0xe8/0x150 [ 232.470552][ T8620] should_fail_ex+0x412/0x560 [ 232.470577][ T8620] should_failslab+0xa8/0x100 [ 232.470597][ T8620] __kmalloc_noprof+0xde/0x7e0 [ 232.470614][ T8620] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 232.470641][ T8620] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 232.470670][ T8620] genl_family_rcv_msg_doit+0xd9/0x330 [ 232.470697][ T8620] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.470725][ T8620] ? apparmor_capable+0x137/0x1a0 [ 232.470749][ T8620] ? bpf_lsm_capable+0x9/0x20 [ 232.470767][ T8620] ? security_capable+0x7e/0x2c0 [ 232.470792][ T8620] genl_rcv_msg+0x61c/0x7a0 [ 232.470820][ T8620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.470838][ T8620] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 232.470858][ T8620] ? __pfx_nl80211_start_ap+0x10/0x10 [ 232.470877][ T8620] ? __pfx_nl80211_post_doit+0x10/0x10 [ 232.470901][ T8620] ? __pfx_ref_tracker_free+0x10/0x10 [ 232.470928][ T8620] netlink_rcv_skb+0x232/0x4b0 [ 232.470947][ T8620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.470968][ T8620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.470983][ T8620] ? genl_rcv+0x19/0x40 [ 232.471018][ T8620] ? down_read+0x272/0x2e0 [ 232.471035][ T8620] ? genl_rcv+0xd/0x40 [ 232.471056][ T8620] genl_rcv+0x28/0x40 [ 232.471074][ T8620] netlink_unicast+0x80f/0x9b0 [ 232.471105][ T8620] ? __pfx_netlink_unicast+0x10/0x10 [ 232.471126][ T8620] ? __alloc_skb+0x193/0x390 [ 232.471144][ T8620] ? netlink_sendmsg+0x650/0xb40 [ 232.471166][ T8620] ? skb_put+0x11b/0x210 [ 232.471188][ T8620] netlink_sendmsg+0x813/0xb40 [ 232.471215][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.471235][ T8620] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.471255][ T8620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.471275][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.471291][ T8620] ____sys_sendmsg+0xa68/0xad0 [ 232.471320][ T8620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.471345][ T8620] ? kstrtoull+0x12f/0x1d0 [ 232.471373][ T8620] ___sys_sendmsg+0x2a5/0x360 [ 232.471392][ T8620] ? __lock_acquire+0x6b5/0x2cf0 [ 232.471418][ T8620] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.471440][ T8620] ? get_pid_task+0x20/0x1f0 [ 232.471458][ T8620] ? get_pid_task+0x20/0x1f0 [ 232.471473][ T8620] ? get_pid_task+0x20/0x1f0 [ 232.471516][ T8620] ? __fget_files+0x2a/0x420 [ 232.471532][ T8620] ? __fget_files+0x3a0/0x420 [ 232.471559][ T8620] __sys_sendmsg+0x183/0x260 [ 232.471582][ T8620] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.471614][ T8620] ? __pfx_ksys_write+0x10/0x10 [ 232.471644][ T8620] __do_fast_syscall_32+0x1d2/0x540 [ 232.471663][ T8620] ? lockdep_hardirqs_on+0x7a/0x110 [ 232.471679][ T8620] ? do_fast_syscall_32+0x33/0x70 [ 232.471695][ T8620] ? asm_int80_emulation+0x1a/0x20 [ 232.471710][ T8620] ? do_int80_emulation+0x20e/0x400 [ 232.471732][ T8620] do_fast_syscall_32+0x33/0x70 [ 232.471748][ T8620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.471766][ T8620] RIP: 0023:0xf744d539 [ 232.471781][ T8620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.471794][ T8620] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 232.471811][ T8620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 232.471823][ T8620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.471832][ T8620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.471841][ T8620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.471851][ T8620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.471871][ T8620] [ 232.918693][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(full) [ 232.918730][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.918741][ T8618] Call Trace: [ 232.918748][ T8618] [ 232.918755][ T8618] dump_stack_lvl+0xe8/0x150 [ 232.918779][ T8618] should_fail_ex+0x412/0x560 [ 232.918804][ T8618] should_failslab+0xa8/0x100 [ 232.918823][ T8618] kmem_cache_alloc_noprof+0x87/0x6e0 [ 232.918845][ T8618] ? apparmor_capable+0x137/0x1a0 [ 232.918866][ T8618] ? skb_clone+0x212/0x3a0 [ 232.918892][ T8618] skb_clone+0x212/0x3a0 [ 232.918911][ T8618] ? nfnetlink_rcv+0x4b0/0x27b0 [ 232.918936][ T8618] nfnetlink_rcv+0x4e2/0x27b0 [ 232.918968][ T8618] ? lockdep_hardirqs_on+0x7a/0x110 [ 232.918985][ T8618] ? __dev_queue_xmit+0x274/0x3850 [ 232.919005][ T8618] ? __local_bh_enable_ip+0xd0/0x130 [ 232.919020][ T8618] ? __dev_queue_xmit+0x1e6c/0x3850 [ 232.919040][ T8618] ? __sys_sendmsg+0x183/0x260 [ 232.919069][ T8618] ? __dev_queue_xmit+0x274/0x3850 [ 232.919091][ T8618] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 232.919123][ T8618] ? ref_tracker_free+0x693/0x840 [ 232.919141][ T8618] ? __copy_skb_header+0xa3/0x4a0 [ 232.919169][ T8618] ? __pfx_ref_tracker_free+0x10/0x10 [ 232.919187][ T8618] ? __skb_clone+0x63/0x7a0 [ 232.919209][ T8618] ? __skb_clone+0x483/0x7a0 [ 232.919232][ T8618] ? skb_clone+0x246/0x3a0 [ 232.919255][ T8618] ? __netlink_deliver_tap+0x807/0x850 [ 232.919272][ T8618] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.919304][ T8618] netlink_unicast+0x80f/0x9b0 [ 232.919334][ T8618] ? __pfx_netlink_unicast+0x10/0x10 [ 232.919356][ T8618] ? __alloc_skb+0x193/0x390 [ 232.919374][ T8618] ? netlink_sendmsg+0x650/0xb40 [ 232.919390][ T8618] ? skb_put+0x11b/0x210 [ 232.919412][ T8618] netlink_sendmsg+0x813/0xb40 [ 232.919436][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.919456][ T8618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.919476][ T8618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.919495][ T8618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.919510][ T8618] ____sys_sendmsg+0xa68/0xad0 [ 232.919538][ T8618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.919562][ T8618] ? kstrtoull+0x12f/0x1d0 [ 232.919587][ T8618] ___sys_sendmsg+0x2a5/0x360 [ 232.919607][ T8618] ? __lock_acquire+0x6b5/0x2cf0 [ 232.919632][ T8618] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.919654][ T8618] ? get_pid_task+0x20/0x1f0 [ 232.919672][ T8618] ? get_pid_task+0x20/0x1f0 [ 232.919687][ T8618] ? get_pid_task+0x20/0x1f0 [ 232.919725][ T8618] ? __fget_files+0x2a/0x420 [ 232.919741][ T8618] ? __fget_files+0x3a0/0x420 [ 232.919767][ T8618] __sys_sendmsg+0x183/0x260 [ 232.919788][ T8618] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.919816][ T8618] ? __pfx_ksys_write+0x10/0x10 [ 232.919843][ T8618] __do_fast_syscall_32+0x1d2/0x540 [ 232.919861][ T8618] ? lockdep_hardirqs_on+0x7a/0x110 [ 232.919876][ T8618] ? do_fast_syscall_32+0x33/0x70 [ 232.919892][ T8618] ? asm_int80_emulation+0x1a/0x20 [ 232.919907][ T8618] ? do_int80_emulation+0x20e/0x400 [ 232.919929][ T8618] do_fast_syscall_32+0x33/0x70 [ 232.919947][ T8618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.919967][ T8618] RIP: 0023:0xf7f97539 [ 232.919983][ T8618] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.919997][ T8618] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 232.920014][ T8618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 232.920027][ T8618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.920037][ T8618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.920046][ T8618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.920055][ T8618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.920081][ T8618] [ 233.362784][ T5892] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 233.464101][ T8622] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 233.561009][ T8628] fuse: Invalid uid '00000000000000000004' [ 233.583180][ T8622] bond1 (unregistering): Released all slaves [ 233.648257][ T8628] ip6gretap0: entered promiscuous mode [ 233.671446][ T8628] vlan3: entered promiscuous mode [ 234.036147][ T8643] syzkaller0: entered promiscuous mode [ 234.041738][ T8643] syzkaller0: entered allmulticast mode [ 234.229936][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 234.400043][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 234.412228][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.429967][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.443127][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.476243][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.507397][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.548160][ T24] usb 2-1: config 0 descriptor?? [ 234.626702][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.840'. [ 234.635839][ T50] net_ratelimit: 75 callbacks suppressed [ 234.635898][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.674805][ T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.700127][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.729991][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.764756][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.799923][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.839937][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.870961][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.901986][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 234.941062][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.051355][ T5892] usb 6-1: USB disconnect, device number 3 [ 235.133374][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 235.174669][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input19 [ 235.208336][ T24] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 235.233668][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 236.074287][ T8675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 236.211424][ T5892] usb 2-1: USB disconnect, device number 36 [ 237.884767][ T8689] Invalid logical block size (32) [ 239.042805][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.852'. [ 239.230366][ T8713] SET target dimension over the limit! [ 239.480005][ T5892] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 239.521666][ T1209] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 239.661091][ T36] net_ratelimit: 138 callbacks suppressed [ 239.661107][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.675487][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 239.747782][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 239.790075][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.799889][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 239.870875][ T48] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 239.918586][ T1209] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.920422][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 239.950203][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.950272][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 239.958233][ T1209] usb 1-1: Product: syz [ 239.958254][ T1209] usb 1-1: Manufacturer: syz [ 239.958266][ T1209] usb 1-1: SerialNumber: syz [ 240.007629][ T8729] netlink: 'syz.2.860': attribute type 5 has an invalid length. [ 240.035338][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.051245][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.066503][ T48] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.071215][ T1209] usb 1-1: config 0 descriptor?? [ 240.091276][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.101442][ T48] usb 6-1: SerialNumber: syz [ 240.176530][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 240.187788][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 240.300814][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 240.310478][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 240.320552][ T8733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.862'. [ 240.342524][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.376218][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.930920][ T48] usb 6-1: 0:2 : does not exist [ 240.977401][ T48] usb 6-1: USB disconnect, device number 4 [ 241.126376][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 241.370325][ T8757] syzkaller0: entered promiscuous mode [ 241.379995][ T8757] syzkaller0: entered allmulticast mode [ 241.668120][ T8765] VFS: Lookup of 'devices.allow' in fuse fuse would have caused loop [ 241.714733][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 241.733463][ T8767] FAULT_INJECTION: forcing a failure. [ 241.733463][ T8767] name failslab, interval 1, probability 0, space 0, times 0 [ 241.748884][ T8767] CPU: 0 UID: 0 PID: 8767 Comm: syz.1.870 Not tainted syzkaller #0 PREEMPT(full) [ 241.748909][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 241.748933][ T8767] Call Trace: [ 241.748939][ T8767] [ 241.748946][ T8767] dump_stack_lvl+0xe8/0x150 [ 241.748971][ T8767] should_fail_ex+0x412/0x560 [ 241.748995][ T8767] should_failslab+0xa8/0x100 [ 241.749015][ T8767] __kmalloc_noprof+0xde/0x7e0 [ 241.749032][ T8767] ? rcu_is_watching+0x15/0xb0 [ 241.749047][ T8767] ? security_sk_alloc+0x52/0x360 [ 241.749076][ T8767] security_sk_alloc+0x52/0x360 [ 241.749100][ T8767] sk_prot_alloc+0x101/0x210 [ 241.749123][ T8767] sk_alloc+0x3a/0x390 [ 241.749144][ T8767] inet6_create+0x7f0/0x1260 [ 241.749161][ T8767] ? inet6_create+0x83/0x1260 [ 241.749182][ T8767] __sock_create+0x4b2/0x9d0 [ 241.749208][ T8767] mptcp_subflow_create_socket+0xfb/0x800 [ 241.749236][ T8767] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 241.749257][ T8767] ? __pfx_process_measurement+0x10/0x10 [ 241.749282][ T8767] ? aa_label_sk_perm+0x529/0x6d0 [ 241.749303][ T8767] __mptcp_nmpc_sk+0x155/0x790 [ 241.749325][ T8767] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.749343][ T8767] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 241.749363][ T8767] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 241.749388][ T8767] mptcp_sendmsg_fastopen+0xd4/0x580 [ 241.749408][ T8767] ? __local_bh_enable_ip+0xd0/0x130 [ 241.749429][ T8767] mptcp_sendmsg+0x17af/0x19d0 [ 241.749458][ T8767] ? aa_sk_perm+0x82d/0x960 [ 241.749476][ T8767] ? __might_fault+0xaf/0x130 [ 241.749502][ T8767] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.749524][ T8767] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 241.749548][ T8767] ? inet6_sendmsg+0x101/0x120 [ 241.749566][ T8767] ____sys_sendmsg+0x62c/0xad0 [ 241.749596][ T8767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.749621][ T8767] ? kstrtoull+0x12f/0x1d0 [ 241.749651][ T8767] ___sys_sendmsg+0x2a5/0x360 [ 241.749669][ T8767] ? __lock_acquire+0x6b5/0x2cf0 [ 241.749694][ T8767] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.749718][ T8767] ? get_pid_task+0x20/0x1f0 [ 241.749736][ T8767] ? get_pid_task+0x20/0x1f0 [ 241.749752][ T8767] ? get_pid_task+0x20/0x1f0 [ 241.749793][ T8767] ? __fget_files+0x2a/0x420 [ 241.749808][ T8767] ? __fget_files+0x3a0/0x420 [ 241.749833][ T8767] __sys_sendmsg+0x183/0x260 [ 241.749854][ T8767] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.749884][ T8767] ? __pfx_ksys_write+0x10/0x10 [ 241.749916][ T8767] __do_fast_syscall_32+0x1d2/0x540 [ 241.749934][ T8767] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.749951][ T8767] ? do_fast_syscall_32+0x33/0x70 [ 241.749968][ T8767] ? asm_int80_emulation+0x1a/0x20 [ 241.749983][ T8767] ? do_int80_emulation+0x20e/0x400 [ 241.750006][ T8767] do_fast_syscall_32+0x33/0x70 [ 241.750025][ T8767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.750044][ T8767] RIP: 0023:0xf742d539 [ 241.750060][ T8767] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 241.750074][ T8767] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 241.750093][ T8767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000780 [ 241.750105][ T8767] RDX: 0000000020000081 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.750116][ T8767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.750125][ T8767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.750135][ T8767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.750163][ T8767] [ 242.445182][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.875'. [ 243.109243][ T48] usb 1-1: USB disconnect, device number 26 [ 243.570933][ T48] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 243.735845][ T48] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 243.761765][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.777158][ T48] usb 1-1: Product: syz [ 243.782309][ T48] usb 1-1: Manufacturer: syz [ 243.786917][ T48] usb 1-1: SerialNumber: syz [ 243.818054][ T8792] FAULT_INJECTION: forcing a failure. [ 243.818054][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 243.828934][ T48] usb 1-1: config 0 descriptor?? [ 243.857097][ T48] hub 1-1:0.0: bad descriptor, ignoring hub [ 243.891758][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.5.878 Not tainted syzkaller #0 PREEMPT(full) [ 243.891779][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 243.891786][ T8792] Call Trace: [ 243.891792][ T8792] [ 243.891797][ T8792] dump_stack_lvl+0xe8/0x150 [ 243.891815][ T8792] should_fail_ex+0x412/0x560 [ 243.891830][ T8792] should_failslab+0xa8/0x100 [ 243.891843][ T8792] __kmalloc_cache_noprof+0x83/0x6e0 [ 243.891854][ T8792] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 243.891864][ T8792] ? __genradix_ptr+0x1e1/0x220 [ 243.891875][ T8792] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 243.891889][ T8792] sctp_association_new+0x15d3/0x25e0 [ 243.891909][ T8792] sctp_connect_new_asoc+0x2e4/0x6b0 [ 243.891923][ T8792] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 243.891938][ T8792] ? __local_bh_enable_ip+0xd0/0x130 [ 243.891947][ T8792] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 243.891959][ T8792] ? security_sctp_bind_connect+0x7e/0x2c0 [ 243.891970][ T8792] sctp_sendmsg+0x1528/0x2c10 [ 243.891989][ T8792] ? __pfx_sctp_sendmsg+0x10/0x10 [ 243.892009][ T8792] ? aa_sk_perm+0x15a/0x960 [ 243.892021][ T8792] ? aa_sk_perm+0x82d/0x960 [ 243.892031][ T8792] ? __might_fault+0xaf/0x130 [ 243.892048][ T8792] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.892060][ T8792] ? sock_rps_record_flow+0x19/0x400 [ 243.892076][ T8792] ? inet_sendmsg+0x2f4/0x370 [ 243.892090][ T8792] __sys_sendto+0x627/0x7a0 [ 243.892104][ T8792] ? __pfx___sys_sendto+0x10/0x10 [ 243.892127][ T8792] ? fput+0xa0/0xd0 [ 243.892138][ T8792] ? ksys_write+0x242/0x270 [ 243.892154][ T8792] ? __pfx_ksys_write+0x10/0x10 [ 243.892168][ T8792] __ia32_sys_sendto+0xdd/0x100 [ 243.892181][ T8792] __do_fast_syscall_32+0x1d2/0x540 [ 243.892193][ T8792] ? lockdep_hardirqs_on+0x7a/0x110 [ 243.892202][ T8792] ? do_fast_syscall_32+0x33/0x70 [ 243.892212][ T8792] ? asm_int80_emulation+0x1a/0x20 [ 243.892220][ T8792] ? do_int80_emulation+0x20e/0x400 [ 243.892232][ T8792] do_fast_syscall_32+0x33/0x70 [ 243.892243][ T8792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.892255][ T8792] RIP: 0023:0xf7f24539 [ 243.892264][ T8792] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 243.892273][ T8792] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 243.892284][ T8792] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080847fff [ 243.892291][ T8792] RDX: 0000000000034000 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 243.892298][ T8792] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 243.892303][ T8792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.892309][ T8792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.892323][ T8792] [ 243.895369][ T48] hub 1-1:0.0: probe with driver hub failed with error -5 [ 244.213240][ T8787] netlink: 'syz.0.876': attribute type 11 has an invalid length. [ 244.222370][ T48] f81232 1-1:0.0: f81534a converter detected [ 244.289148][ T48] usb 1-1: f81534a converter now attached to ttyUSB0 [ 244.637175][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 244.700229][ T48] usb 1-1: USB disconnect, device number 27 [ 244.721809][ T48] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 244.760027][ T3525] net_ratelimit: 128 callbacks suppressed [ 244.760049][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 244.799031][ T48] f81232 1-1:0.0: device disconnected [ 244.810346][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 244.833656][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 244.980688][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 244.995456][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 245.028366][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 245.129892][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.147683][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 245.269954][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.280087][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 245.385542][ T8824] vlan2: entered allmulticast mode [ 245.392795][ T8824] veth0_to_bond: entered allmulticast mode [ 245.412753][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 245.427895][ T5823] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 245.460032][ T5823] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 245.494149][ T8823] fuse: Invalid uid '00000000000000000005' [ 245.503590][ T8823] netlink: 892 bytes leftover after parsing attributes in process `syz.0.889'. [ 245.637541][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 245.686834][ T5823] usb 4-1: USB disconnect, device number 19 [ 245.799882][ T797] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.991621][ T797] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 246.003095][ T797] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 246.012411][ T797] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 246.023331][ T797] usb 3-1: config 220 has no interface number 2 [ 246.030914][ T797] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 246.044656][ T797] usb 3-1: config 220 interface 0 has no altsetting 0 [ 246.051538][ T797] usb 3-1: config 220 interface 76 has no altsetting 0 [ 246.058597][ T797] usb 3-1: config 220 interface 1 has no altsetting 0 [ 246.067708][ T797] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 246.077152][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.085454][ T797] usb 3-1: Product: syz [ 246.089762][ T797] usb 3-1: Manufacturer: syz [ 246.094485][ T797] usb 3-1: SerialNumber: syz [ 246.135456][ T8836] netlink: 204 bytes leftover after parsing attributes in process `syz.1.893'. [ 246.137613][ T8838] netlink: 'syz.5.894': attribute type 1 has an invalid length. [ 246.186547][ T8838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.276757][ T8840] FAULT_INJECTION: forcing a failure. [ 246.276757][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 246.377430][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.5.894 Not tainted syzkaller #0 PREEMPT(full) [ 246.377456][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 246.377466][ T8840] Call Trace: [ 246.377473][ T8840] [ 246.377480][ T8840] dump_stack_lvl+0xe8/0x150 [ 246.377506][ T8840] should_fail_ex+0x412/0x560 [ 246.377532][ T8840] should_failslab+0xa8/0x100 [ 246.377552][ T8840] __kmalloc_cache_noprof+0x83/0x6e0 [ 246.377568][ T8840] ? __pfx_stack_trace_save+0x10/0x10 [ 246.377588][ T8840] ? rtnl_newlink+0x136/0x1be0 [ 246.377619][ T8840] rtnl_newlink+0x136/0x1be0 [ 246.377638][ T8840] ? kasan_save_track+0x4f/0x80 [ 246.377653][ T8840] ? kasan_save_track+0x3e/0x80 [ 246.377666][ T8840] ? kasan_save_free_info+0x46/0x50 [ 246.377685][ T8840] ? __kasan_slab_free+0x5c/0x80 [ 246.377700][ T8840] ? kmem_cache_free+0x195/0x610 [ 246.377716][ T8840] ? __dev_queue_xmit+0x168f/0x3850 [ 246.377736][ T8840] ? __netlink_deliver_tap+0x5ad/0x850 [ 246.377752][ T8840] ? netlink_deliver_tap+0x19c/0x1b0 [ 246.377768][ T8840] ? netlink_unicast+0x7e3/0x9b0 [ 246.377788][ T8840] ? netlink_sendmsg+0x813/0xb40 [ 246.377805][ T8840] ? __pfx_rtnl_newlink+0x10/0x10 [ 246.377822][ T8840] ? do_fast_syscall_32+0x33/0x70 [ 246.377840][ T8840] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.377890][ T8840] ? kasan_quarantine_put+0xbb/0x1f0 [ 246.377912][ T8840] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.377934][ T8840] ? kmem_cache_free+0x195/0x610 [ 246.377950][ T8840] ? nlmon_xmit+0xb0/0x100 [ 246.377976][ T8840] ? __lock_acquire+0x6b5/0x2cf0 [ 246.378006][ T8840] ? __local_bh_enable_ip+0xd0/0x130 [ 246.378021][ T8840] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.378037][ T8840] ? __dev_queue_xmit+0x274/0x3850 [ 246.378056][ T8840] ? __local_bh_enable_ip+0xd0/0x130 [ 246.378071][ T8840] ? __dev_queue_xmit+0x274/0x3850 [ 246.378098][ T8840] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 246.378129][ T8840] ? __pfx_rtnl_newlink+0x10/0x10 [ 246.378147][ T8840] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 246.378168][ T8840] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 246.378185][ T8840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.378202][ T8840] ? ref_tracker_free+0x693/0x840 [ 246.378220][ T8840] ? __copy_skb_header+0xa3/0x4a0 [ 246.378243][ T8840] ? __pfx_ref_tracker_free+0x10/0x10 [ 246.378261][ T8840] ? __skb_clone+0x63/0x7a0 [ 246.378289][ T8840] netlink_rcv_skb+0x232/0x4b0 [ 246.378307][ T8840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.378327][ T8840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.378354][ T8840] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.378378][ T8840] netlink_unicast+0x80f/0x9b0 [ 246.378408][ T8840] ? __pfx_netlink_unicast+0x10/0x10 [ 246.378429][ T8840] ? __alloc_skb+0x193/0x390 [ 246.378447][ T8840] ? netlink_sendmsg+0x650/0xb40 [ 246.378463][ T8840] ? skb_put+0x11b/0x210 [ 246.378485][ T8840] netlink_sendmsg+0x813/0xb40 [ 246.378510][ T8840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.378530][ T8840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.378552][ T8840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.378572][ T8840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.378588][ T8840] ____sys_sendmsg+0xa68/0xad0 [ 246.378622][ T8840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.378646][ T8840] ? kstrtoull+0x12f/0x1d0 [ 246.378673][ T8840] ___sys_sendmsg+0x2a5/0x360 [ 246.378691][ T8840] ? __lock_acquire+0x6b5/0x2cf0 [ 246.378715][ T8840] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.378738][ T8840] ? get_pid_task+0x20/0x1f0 [ 246.378755][ T8840] ? get_pid_task+0x20/0x1f0 [ 246.378771][ T8840] ? get_pid_task+0x20/0x1f0 [ 246.378812][ T8840] ? __fget_files+0x2a/0x420 [ 246.378829][ T8840] ? __fget_files+0x3a0/0x420 [ 246.378855][ T8840] __sys_sendmsg+0x183/0x260 [ 246.378878][ T8840] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.378909][ T8840] ? __pfx_ksys_write+0x10/0x10 [ 246.378938][ T8840] __do_fast_syscall_32+0x1d2/0x540 [ 246.378956][ T8840] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.378971][ T8840] ? do_fast_syscall_32+0x33/0x70 [ 246.378988][ T8840] ? asm_int80_emulation+0x1a/0x20 [ 246.379003][ T8840] ? do_int80_emulation+0x20e/0x400 [ 246.379024][ T8840] do_fast_syscall_32+0x33/0x70 [ 246.379043][ T8840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.379061][ T8840] RIP: 0023:0xf7f24539 [ 246.379076][ T8840] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 246.379090][ T8840] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 246.379108][ T8840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 246.379121][ T8840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.379130][ T8840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.379140][ T8840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.379150][ T8840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.379175][ T8840] [ 247.483952][ T8844] input: syz0 as /devices/virtual/input/input20 [ 247.500137][ T5823] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 247.689906][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 247.707009][ T5823] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 247.718212][ T5909] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 247.726045][ T5823] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 247.768362][ T5823] usb 1-1: config 0 has no interface number 0 [ 247.780821][ T5823] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 247.801311][ T5823] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.821498][ T5823] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 247.835445][ T5823] usb 1-1: config 0 interface 126 has no altsetting 0 [ 247.856803][ T5823] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 247.868090][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.876902][ T5909] usb 6-1: device descriptor read/64, error -71 [ 247.886320][ T5823] usb 1-1: Product: syz [ 247.890686][ T5823] usb 1-1: Manufacturer: syz [ 247.895371][ T5823] usb 1-1: SerialNumber: syz [ 248.105629][ T5823] usb 1-1: config 0 descriptor?? [ 248.120005][ T5909] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 248.135862][ T8851] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 248.251497][ T5909] usb 6-1: device descriptor read/64, error -71 [ 248.370293][ T5909] usb usb6-port1: attempt power cycle [ 248.418834][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.911'. [ 248.517715][ T797] usb 3-1: selecting invalid altsetting 0 [ 248.549724][ T797] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 248.567143][ T797] uvcvideo 3-1:220.0: No valid video chain found. [ 248.615424][ T797] usb 3-1: selecting invalid altsetting 0 [ 248.631894][ T797] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 248.667821][ T797] usb 3-1: USB disconnect, device number 24 [ 248.827494][ T5909] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 248.925799][ T5909] usb 6-1: device descriptor read/8, error -71 [ 249.170454][ T5909] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 249.190720][ T5909] usb 6-1: device descriptor read/8, error -71 [ 249.517304][ T5909] usb usb6-port1: unable to enumerate USB device [ 249.779909][ T48] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 249.891818][ T12] net_ratelimit: 95 callbacks suppressed [ 249.891837][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 249.911161][ T48] usb 2-1: device descriptor read/64, error -71 [ 249.919995][ T5823] ir_usb 1-1:0.126: IR Dongle converter detected [ 249.929915][ T5823] usb 1-1: IRDA class descriptor not found, device not bound [ 249.945558][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 249.995657][ T5823] usb 1-1: USB disconnect, device number 28 [ 250.091962][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.109620][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 250.169875][ T48] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 250.223318][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 250.269918][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.277784][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 250.321001][ T48] usb 2-1: device descriptor read/64, error -71 [ 250.334796][ T8903] bond0: entered allmulticast mode [ 250.409946][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.431126][ T48] usb usb2-port1: attempt power cycle [ 250.440343][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.582887][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.659933][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 250.719371][ T8922] FAULT_INJECTION: forcing a failure. [ 250.719371][ T8922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.795592][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.2.908 Not tainted syzkaller #0 PREEMPT(full) [ 250.795617][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.795628][ T8922] Call Trace: [ 250.795635][ T8922] [ 250.795643][ T8922] dump_stack_lvl+0xe8/0x150 [ 250.795670][ T8922] should_fail_ex+0x412/0x560 [ 250.795694][ T8922] _copy_from_user+0x2d/0xb0 [ 250.795717][ T8922] copy_bpf_fprog_from_user+0x1ba/0x2d0 [ 250.795742][ T8922] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 250.795773][ T8922] sk_setsockopt+0x1019/0x2e80 [ 250.795792][ T8922] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 250.795815][ T8922] ? __pfx_sk_setsockopt+0x10/0x10 [ 250.795837][ T8922] ? __lock_acquire+0x6b5/0x2cf0 [ 250.795871][ T8922] ? aa_sk_perm+0x15a/0x960 [ 250.795890][ T8922] ? aa_sk_perm+0x82d/0x960 [ 250.795908][ T8922] udp_lib_setsockopt+0xf6/0x980 [ 250.795929][ T8922] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 250.795947][ T8922] ? __fget_files+0x2a/0x420 [ 250.795964][ T8922] ? aa_sock_opt_perm+0xff/0x1a0 [ 250.795986][ T8922] udp_setsockopt+0x77/0xc0 [ 250.796001][ T8922] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 250.796020][ T8922] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 250.796039][ T8922] do_sock_setsockopt+0x17c/0x1b0 [ 250.796074][ T8922] __ia32_sys_setsockopt+0x13d/0x1b0 [ 250.796100][ T8922] __do_fast_syscall_32+0x1d2/0x540 [ 250.796120][ T8922] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.796136][ T8922] ? do_fast_syscall_32+0x33/0x70 [ 250.796152][ T8922] ? asm_int80_emulation+0x1a/0x20 [ 250.796167][ T8922] ? do_int80_emulation+0x20e/0x400 [ 250.796189][ T8922] do_fast_syscall_32+0x33/0x70 [ 250.796207][ T8922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.796227][ T8922] RIP: 0023:0xf7f97539 [ 250.796242][ T8922] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 250.796258][ T8922] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 250.796277][ T8922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 250.796289][ T8922] RDX: 0000000000000033 RSI: 0000000080000040 RDI: 0000000000000008 [ 250.796301][ T8922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.796310][ T8922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 250.796321][ T8922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.796345][ T8922] [ 251.041541][ T48] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 251.129871][ T48] usb 2-1: device descriptor read/8, error -71 [ 251.502288][ T48] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 251.542046][ T48] usb 2-1: device descriptor read/8, error -71 [ 251.663722][ T48] usb usb2-port1: unable to enumerate USB device [ 251.711136][ T8946] FAULT_INJECTION: forcing a failure. [ 251.711136][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 251.729005][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.0.915 Not tainted syzkaller #0 PREEMPT(full) [ 251.729029][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 251.729039][ T8946] Call Trace: [ 251.729046][ T8946] [ 251.729054][ T8946] dump_stack_lvl+0xe8/0x150 [ 251.729081][ T8946] should_fail_ex+0x412/0x560 [ 251.729106][ T8946] should_failslab+0xa8/0x100 [ 251.729124][ T8946] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 251.729147][ T8946] ? __lock_acquire+0x6b5/0x2cf0 [ 251.729167][ T8946] ? proc_alloc_inode+0x2a/0xc0 [ 251.729189][ T8946] ? __pfx_proc_alloc_inode+0x10/0x10 [ 251.729210][ T8946] proc_alloc_inode+0x2a/0xc0 [ 251.729241][ T8946] alloc_inode+0x6a/0x1b0 [ 251.729260][ T8946] new_inode+0x22/0x170 [ 251.729282][ T8946] proc_get_inode+0x22/0x6a0 [ 251.729301][ T8946] proc_lookup_de+0x251/0x340 [ 251.729324][ T8946] __lookup_slow+0x2b7/0x410 [ 251.729346][ T8946] ? __pfx___lookup_slow+0x10/0x10 [ 251.729377][ T8946] ? down_read+0x272/0x2e0 [ 251.729401][ T8946] lookup_slow+0x53/0x70 [ 251.729421][ T8946] link_path_walk+0xd1e/0x18d0 [ 251.729454][ T8946] path_openat+0x2bf/0x3e20 [ 251.729499][ T8946] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 251.729520][ T8946] ? getname_flags+0xb7/0x540 [ 251.729539][ T8946] ? __pfx_path_openat+0x10/0x10 [ 251.729561][ T8946] ? __lock_acquire+0x6b5/0x2cf0 [ 251.729594][ T8946] do_filp_open+0x22d/0x490 [ 251.729615][ T8946] ? __pfx_do_filp_open+0x10/0x10 [ 251.729658][ T8946] ? _raw_spin_unlock+0x28/0x50 [ 251.729678][ T8946] ? alloc_fd+0x64b/0x6c0 [ 251.729705][ T8946] do_sys_openat2+0x12f/0x220 [ 251.729727][ T8946] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.729750][ T8946] ? ksys_write+0x242/0x270 [ 251.729778][ T8946] __ia32_compat_sys_openat+0x131/0x160 [ 251.729804][ T8946] __do_fast_syscall_32+0x1d2/0x540 [ 251.729819][ T8946] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.729834][ T8946] ? do_fast_syscall_32+0x33/0x70 [ 251.729848][ T8946] ? asm_int80_emulation+0x1a/0x20 [ 251.729862][ T8946] ? do_int80_emulation+0x20e/0x400 [ 251.729881][ T8946] do_fast_syscall_32+0x33/0x70 [ 251.729899][ T8946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.729917][ T8946] RIP: 0023:0xf7f56539 [ 251.729932][ T8946] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.729946][ T8946] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 251.729965][ T8946] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 251.729978][ T8946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.729988][ T8946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.729998][ T8946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.730008][ T8946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.730035][ T8946] [ 252.259979][ T5906] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 252.422061][ T8953] syzkaller0: entered promiscuous mode [ 252.440190][ T48] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 252.441533][ T8953] syzkaller0: entered allmulticast mode [ 252.553419][ T5906] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 252.562667][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.573391][ T5906] usb 5-1: Product: syz [ 252.583816][ T5906] usb 5-1: Manufacturer: syz [ 252.805435][ T8953] FAULT_INJECTION: forcing a failure. [ 252.805435][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 252.818332][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.1.919 Not tainted syzkaller #0 PREEMPT(full) [ 252.818348][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 252.818355][ T8953] Call Trace: [ 252.818362][ T8953] [ 252.818368][ T8953] dump_stack_lvl+0xe8/0x150 [ 252.818396][ T8953] should_fail_ex+0x412/0x560 [ 252.818422][ T8953] should_failslab+0xa8/0x100 [ 252.818443][ T8953] kmem_cache_alloc_noprof+0x87/0x6e0 [ 252.818464][ T8953] ? skb_clone+0x212/0x3a0 [ 252.818478][ T8953] ? lockdep_unlock+0x5d/0xd0 [ 252.818493][ T8953] skb_clone+0x212/0x3a0 [ 252.818505][ T8953] ? netem_enqueue+0x129a/0x3980 [ 252.818518][ T8953] netem_enqueue+0x12a7/0x3980 [ 252.818549][ T8953] ? __pfx_netem_enqueue+0x10/0x10 [ 252.818565][ T8953] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.818582][ T8953] ? __dev_queue_xmit+0xbe7/0x3850 [ 252.818605][ T8953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 252.818618][ T8953] dev_qdisc_enqueue+0x4e/0x240 [ 252.818628][ T8953] ? __dev_queue_xmit+0x1ac7/0x3850 [ 252.818643][ T8953] __dev_queue_xmit+0x1ae1/0x3850 [ 252.818662][ T8953] ? __dev_queue_xmit+0x274/0x3850 [ 252.818688][ T8953] ? _copy_from_iter+0x21b/0x1670 [ 252.818712][ T8953] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.818732][ T8953] ? sock_alloc_send_pskb+0x896/0x990 [ 252.818758][ T8953] ? packet_parse_headers+0x808/0xb50 [ 252.818772][ T8953] ? packet_parse_headers+0x8b5/0xb50 [ 252.818789][ T8953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 252.818803][ T8953] ? __pfx_packet_parse_headers+0x10/0x10 [ 252.818820][ T8953] ? skb_copy_datagram_from_iter+0x60c/0x710 [ 252.818847][ T8953] ? packet_xmit+0x68/0x320 [ 252.818872][ T8953] packet_sendmsg+0x3eb6/0x50f0 [ 252.818922][ T8953] ? aa_sk_perm+0x15a/0x960 [ 252.818935][ T8953] ? aa_sk_perm+0x82d/0x960 [ 252.818945][ T8953] ? __pfx_packet_sendmsg+0x10/0x10 [ 252.818960][ T8953] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 252.818985][ T8953] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.819007][ T8953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.819029][ T8953] __sys_sendto+0x709/0x7a0 [ 252.819051][ T8953] ? __pfx___sys_sendto+0x10/0x10 [ 252.819074][ T8953] ? fput+0xa0/0xd0 [ 252.819086][ T8953] ? ksys_write+0x242/0x270 [ 252.819101][ T8953] ? __pfx_ksys_write+0x10/0x10 [ 252.819120][ T8953] __ia32_sys_sendto+0xdd/0x100 [ 252.819144][ T8953] __do_fast_syscall_32+0x1d2/0x540 [ 252.819164][ T8953] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.819180][ T8953] ? do_fast_syscall_32+0x33/0x70 [ 252.819196][ T8953] ? asm_int80_emulation+0x1a/0x20 [ 252.819206][ T8953] ? do_int80_emulation+0x20e/0x400 [ 252.819219][ T8953] do_fast_syscall_32+0x33/0x70 [ 252.819230][ T8953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.819242][ T8953] RIP: 0023:0xf742d539 [ 252.819253][ T8953] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.819264][ T8953] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 252.819283][ T8953] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000180 [ 252.819295][ T8953] RDX: 000000000000000e RSI: 0000000000000000 RDI: 00000000800001c0 [ 252.819306][ T8953] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 252.819317][ T8953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.819327][ T8953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.819351][ T8953] [ 252.851900][ T48] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.170116][ T5906] usb 5-1: SerialNumber: syz [ 253.274006][ T5906] usb 5-1: config 0 descriptor?? [ 253.288403][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.309914][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.320236][ T5823] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 253.352788][ T48] usb 3-1: SerialNumber: syz [ 253.459892][ T5823] usb 6-1: device descriptor read/64, error -71 [ 253.919927][ T5823] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 254.112508][ T48] usb 3-1: USB disconnect, device number 25 [ 254.170892][ T5823] usb 6-1: device descriptor read/64, error -71 [ 254.252635][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.922'. [ 254.300436][ T5823] usb usb6-port1: attempt power cycle [ 254.443598][ T8993] l2tp_ppp: sess 2/0: no socket in recv [ 254.680011][ T5823] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 254.723197][ T5823] usb 6-1: device descriptor read/8, error -71 [ 254.780243][ T1209] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 254.926807][ T5906] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 254.964041][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.975351][ T5823] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 254.983141][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.990426][ T2048] net_ratelimit: 65 callbacks suppressed [ 254.990445][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 254.994599][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 255.017883][ T5823] usb 6-1: device descriptor read/8, error -71 [ 255.018924][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.024449][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.050960][ T5909] usb 5-1: USB disconnect, device number 27 [ 255.098894][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.111993][ T1209] usb 2-1: config 0 descriptor?? [ 255.140030][ T5823] usb usb6-port1: unable to enumerate USB device [ 255.169006][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.195916][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.224288][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.328387][ T5906] usb 1-1: device descriptor read/all, error -71 [ 255.350406][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.374399][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.492632][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 255.506530][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.539723][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.595381][ T9035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.622747][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.646523][ T1209] usbhid 2-1:0.0: can't add hid device: -71 [ 255.655832][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.675011][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681442][ T1209] usb 2-1: USB disconnect, device number 41 [ 255.682074][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.699923][ T5909] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 255.865697][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 255.877486][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 255.919309][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.949856][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.013795][ T5909] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 256.026675][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.153405][ T5909] usb 5-1: config 0 descriptor?? [ 256.379907][ T9055] FAULT_INJECTION: forcing a failure. [ 256.379907][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 256.392940][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.5.936 Not tainted syzkaller #0 PREEMPT(full) [ 256.392962][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 256.392973][ T9055] Call Trace: [ 256.392981][ T9055] [ 256.392988][ T9055] dump_stack_lvl+0xe8/0x150 [ 256.393015][ T9055] should_fail_ex+0x412/0x560 [ 256.393040][ T9055] should_failslab+0xa8/0x100 [ 256.393061][ T9055] kmem_cache_alloc_noprof+0x87/0x6e0 [ 256.393084][ T9055] ? sctp_get_port_local+0x6f2/0x1730 [ 256.393108][ T9055] sctp_get_port_local+0x6f2/0x1730 [ 256.393126][ T9055] ? sctp_bind_addr_match+0x30/0x2b0 [ 256.393155][ T9055] ? __pfx_sctp_get_port_local+0x10/0x10 [ 256.393179][ T9055] ? sctp_bind_addr_match+0x28b/0x2b0 [ 256.393200][ T9055] sctp_do_bind+0x4f1/0x9d0 [ 256.393229][ T9055] sctp_connect_new_asoc+0x270/0x6b0 [ 256.393249][ T9055] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 256.393276][ T9055] ? __local_bh_enable_ip+0xd0/0x130 [ 256.393289][ T9055] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 256.393307][ T9055] ? security_sctp_bind_connect+0x7e/0x2c0 [ 256.393326][ T9055] sctp_sendmsg+0x1528/0x2c10 [ 256.393360][ T9055] ? __pfx_sctp_sendmsg+0x10/0x10 [ 256.393377][ T9055] ? aa_sk_perm+0x15a/0x960 [ 256.393395][ T9055] ? aa_sk_perm+0x82d/0x960 [ 256.393414][ T9055] ? __might_fault+0xaf/0x130 [ 256.393437][ T9055] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.393458][ T9055] ? sock_rps_record_flow+0x19/0x400 [ 256.393482][ T9055] ? inet_sendmsg+0x2f4/0x370 [ 256.393506][ T9055] ____sys_sendmsg+0x894/0xad0 [ 256.393536][ T9055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.393561][ T9055] ? kstrtoull+0x12f/0x1d0 [ 256.393587][ T9055] ___sys_sendmsg+0x2a5/0x360 [ 256.393607][ T9055] ? __lock_acquire+0x6b5/0x2cf0 [ 256.393632][ T9055] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.393654][ T9055] ? get_pid_task+0x20/0x1f0 [ 256.393671][ T9055] ? get_pid_task+0x20/0x1f0 [ 256.393685][ T9055] ? get_pid_task+0x20/0x1f0 [ 256.393728][ T9055] ? __fget_files+0x2a/0x420 [ 256.393745][ T9055] ? __fget_files+0x3a0/0x420 [ 256.393772][ T9055] __sys_sendmsg+0x183/0x260 [ 256.393794][ T9055] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.393825][ T9055] ? __pfx_ksys_write+0x10/0x10 [ 256.393855][ T9055] __do_fast_syscall_32+0x1d2/0x540 [ 256.393873][ T9055] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.393889][ T9055] ? do_fast_syscall_32+0x33/0x70 [ 256.393905][ T9055] ? asm_int80_emulation+0x1a/0x20 [ 256.393920][ T9055] ? do_int80_emulation+0x20e/0x400 [ 256.393950][ T9055] do_fast_syscall_32+0x33/0x70 [ 256.393969][ T9055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.393988][ T9055] RIP: 0023:0xf7f24539 [ 256.394005][ T9055] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.394019][ T9055] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 256.394037][ T9055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 256.394049][ T9055] RDX: 000000000004c0e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.394060][ T9055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.394069][ T9055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 256.394079][ T9055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.394107][ T9055] [ 256.397392][ T5823] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 256.712859][ T9060] tipc: Started in network mode [ 256.720708][ T5909] hid (null): invalid report_size 9073 [ 256.741006][ T5909] hid (null): unknown global tag 0xd [ 256.746309][ T5909] hid (null): unknown global tag 0xf4 [ 256.757377][ T9060] tipc: Node identity 7f000001, cluster identity 4711 [ 256.759988][ T5909] hid (null): unknown global tag 0xd [ 256.769461][ T5909] hid (null): invalid report_size 41748 [ 256.784002][ T5909] hid (null): invalid report_size -33668420 [ 256.794844][ T5909] hid (null): report_id 57319 is invalid [ 256.815152][ T5909] usb 5-1: string descriptor 0 read error: -71 [ 256.835642][ T9060] tipc: Enabling of bearer rejected, failed to enable media [ 256.844365][ T5909] uclogic 0003:5543:0081.0010: failed retrieving string descriptor #200: -71 [ 256.854914][ T5909] uclogic 0003:5543:0081.0010: failed retrieving pen parameters: -71 [ 256.880067][ T5909] uclogic 0003:5543:0081.0010: failed probing pen v2 parameters: -71 [ 256.888997][ T5909] uclogic 0003:5543:0081.0010: failed probing parameters: -71 [ 256.899995][ T5909] uclogic 0003:5543:0081.0010: probe with driver uclogic failed with error -71 [ 256.926282][ T5909] usb 5-1: USB disconnect, device number 28 [ 257.057998][ T9064] binder_alloc: 9063: binder_alloc_buf, no vma [ 257.064595][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 257.071502][ T5823] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 257.080431][ T5823] usb 3-1: config 0 has no interface number 0 [ 257.105529][ T5823] usb 3-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 257.144572][ T5823] usb 3-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 257.156818][ T5823] usb 3-1: config 0 interface 86 has no altsetting 0 [ 257.170194][ T5823] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 257.179514][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.197942][ T5823] usb 3-1: Product: syz [ 257.225362][ T5823] usb 3-1: Manufacturer: syz [ 257.259893][ T5823] usb 3-1: SerialNumber: syz [ 257.282167][ T5823] usb 3-1: config 0 descriptor?? [ 257.515407][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.532690][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.559573][ T5906] usb 3-1: USB disconnect, device number 26 [ 257.669279][ T9094] fuse: Unknown parameter 'root{ode' [ 257.675073][ T5823] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 257.790001][ T797] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 257.862270][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 257.877506][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 257.894177][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 257.910619][ T5823] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 257.919727][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.951352][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.963720][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.975909][ T797] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 257.987071][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.987088][ T5823] usb 6-1: Product: syz [ 257.987105][ T5823] usb 6-1: Manufacturer: syz [ 258.015457][ T5823] usb 6-1: SerialNumber: syz [ 258.018329][ T797] usb 2-1: config 0 descriptor?? [ 258.028732][ T5823] usb 6-1: config 0 descriptor?? [ 258.251689][ T5823] powermate: unknown product id 0240 [ 258.277776][ T5823] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 258.299192][ T5823] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 258.341397][ T5823] usb 6-1: USB disconnect, device number 13 [ 258.436925][ T797] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 258.452402][ T797] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 258.475498][ T797] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0011/input/input22 [ 258.627828][ T797] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 258.673705][ T797] usb 2-1: USB disconnect, device number 42 [ 258.691667][ T6035] udevd[6035]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 258.766206][ T9107] fido_id[9107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 258.943077][ T9118] netlink: 64 bytes leftover after parsing attributes in process `syz.5.954'. [ 258.956978][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.954'. [ 259.153171][ T9121] netlink: 22 bytes leftover after parsing attributes in process `syz.0.953'. [ 259.182390][ T9124] netlink: 'syz.2.955': attribute type 12 has an invalid length. [ 259.217388][ T9121] netlink: 'syz.0.953': attribute type 32 has an invalid length. [ 259.255890][ T9121] netlink: 'syz.0.953': attribute type 32 has an invalid length. [ 259.351706][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.502271][ T797] IPVS: starting estimator thread 0... [ 259.525971][ T9130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.957'. [ 259.605712][ T9140] FAULT_INJECTION: forcing a failure. [ 259.605712][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 259.624409][ T9133] IPVS: using max 54 ests per chain, 129600 per kthread [ 259.639992][ T9140] CPU: 0 UID: 0 PID: 9140 Comm: syz.4.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.640022][ T9140] Tainted: [L]=SOFTLOCKUP [ 259.640028][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 259.640037][ T9140] Call Trace: [ 259.640043][ T9140] [ 259.640050][ T9140] dump_stack_lvl+0xe8/0x150 [ 259.640071][ T9140] should_fail_ex+0x412/0x560 [ 259.640092][ T9140] should_failslab+0xa8/0x100 [ 259.640109][ T9140] __kmalloc_noprof+0xde/0x7e0 [ 259.640122][ T9140] ? tomoyo_encode+0x28b/0x550 [ 259.640142][ T9140] tomoyo_encode+0x28b/0x550 [ 259.640161][ T9140] tomoyo_mount_permission+0x3a2/0x9d0 [ 259.640178][ T9140] ? stack_depot_save_flags+0x33/0x810 [ 259.640192][ T9140] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 259.640206][ T9140] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 259.640260][ T9140] security_sb_mount+0xe4/0x320 [ 259.640279][ T9140] path_mount+0xbc/0x10e0 [ 259.640292][ T9140] ? kmem_cache_free+0x195/0x610 [ 259.640312][ T9140] __se_sys_mount+0x31d/0x420 [ 259.640331][ T9140] ? __pfx___se_sys_mount+0x10/0x10 [ 259.640345][ T9140] ? __pfx_ksys_write+0x10/0x10 [ 259.640365][ T9140] ? __ia32_sys_mount+0x20/0xc0 [ 259.640380][ T9140] __do_fast_syscall_32+0x1d2/0x540 [ 259.640395][ T9140] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.640406][ T9140] ? do_fast_syscall_32+0x33/0x70 [ 259.640427][ T9140] ? asm_int80_emulation+0x1a/0x20 [ 259.640438][ T9140] ? do_int80_emulation+0x20e/0x400 [ 259.640455][ T9140] do_fast_syscall_32+0x33/0x70 [ 259.640469][ T9140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.640484][ T9140] RIP: 0023:0xf744d539 [ 259.640497][ T9140] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 259.640508][ T9140] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 259.640524][ T9140] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 259.640534][ T9140] RDX: 0000000000000000 RSI: 0000000000010024 RDI: 00000000800004c0 [ 259.640542][ T9140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.640549][ T9140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.640557][ T9140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.640578][ T9140] [ 260.010496][ T12] net_ratelimit: 73 callbacks suppressed [ 260.010515][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.075840][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.172453][ T9152] FAULT_INJECTION: forcing a failure. [ 260.172453][ T9152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.210011][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.217914][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.231419][ T9154] netlink: 'syz.5.965': attribute type 1 has an invalid length. [ 260.234567][ T9152] CPU: 0 UID: 0 PID: 9152 Comm: syz.4.964 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.234595][ T9152] Tainted: [L]=SOFTLOCKUP [ 260.234602][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.234612][ T9152] Call Trace: [ 260.234619][ T9152] [ 260.234626][ T9152] dump_stack_lvl+0xe8/0x150 [ 260.234651][ T9152] should_fail_ex+0x412/0x560 [ 260.234676][ T9152] _copy_to_user+0x31/0xb0 [ 260.234701][ T9152] simple_read_from_buffer+0xe1/0x170 [ 260.234724][ T9152] proc_fail_nth_read+0x1bb/0x230 [ 260.234749][ T9152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.234773][ T9152] ? rw_verify_area+0x2a6/0x4d0 [ 260.234794][ T9152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.234817][ T9152] vfs_read+0x20c/0xa70 [ 260.234837][ T9152] ? fdget_pos+0x246/0x320 [ 260.234858][ T9152] ? __pfx___mutex_lock+0x10/0x10 [ 260.234879][ T9152] ? __pfx_vfs_read+0x10/0x10 [ 260.234902][ T9152] ? __fget_files+0x2a/0x420 [ 260.234925][ T9152] ? __fget_files+0x3a0/0x420 [ 260.234942][ T9152] ? __fget_files+0x2a/0x420 [ 260.234967][ T9152] ksys_read+0x150/0x270 [ 260.234992][ T9152] ? __pfx_ksys_read+0x10/0x10 [ 260.235018][ T9152] ? asm_int80_emulation+0x1a/0x20 [ 260.235038][ T9152] ? asm_int80_emulation+0x1a/0x20 [ 260.235054][ T9152] do_int80_emulation+0x111/0x400 [ 260.235074][ T9152] ? clear_bhb_loop+0x60/0xb0 [ 260.235090][ T9152] ? clear_bhb_loop+0x60/0xb0 [ 260.235110][ T9152] asm_int80_emulation+0x1a/0x20 [ 260.235127][ T9152] RIP: 0023:0xf71b572b [ 260.235142][ T9152] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 260.235157][ T9152] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 260.235176][ T9152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54765d0 [ 260.235188][ T9152] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 260.235199][ T9152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.235210][ T9152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.235221][ T9152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.235247][ T9152] [ 260.478986][ T3530] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.533839][ T3530] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.559113][ T3530] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.637082][ T9165] tmpfs: Unknown parameter '18446744073709551615' [ 260.667570][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.4.968'. [ 260.689943][ T3530] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.721367][ T3530] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 260.742945][ T9166] syzkaller0: entered promiscuous mode [ 260.748462][ T9166] syzkaller0: entered allmulticast mode [ 260.851382][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 260.987875][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'. [ 261.220497][ T5823] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 261.529537][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 261.548489][ T9182] syzkaller0: entered promiscuous mode [ 261.731088][ T9182] syzkaller0: entered allmulticast mode [ 261.748557][ T9184] netlink: 'syz.2.972': attribute type 15 has an invalid length. [ 261.764066][ T9183] FAULT_INJECTION: forcing a failure. [ 261.764066][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.777748][ T9184] netlink: 666 bytes leftover after parsing attributes in process `syz.2.972'. [ 261.788793][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.1.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.788821][ T9183] Tainted: [L]=SOFTLOCKUP [ 261.788828][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 261.788839][ T9183] Call Trace: [ 261.788846][ T9183] [ 261.788854][ T9183] dump_stack_lvl+0xe8/0x150 [ 261.788880][ T9183] should_fail_ex+0x412/0x560 [ 261.788905][ T9183] _copy_to_user+0x31/0xb0 [ 261.788932][ T9183] do_pagemap_cmd+0xbac/0xc50 [ 261.788960][ T9183] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 261.789001][ T9183] ? __fget_files+0x2a/0x420 [ 261.789023][ T9183] ? __fget_files+0x3a0/0x420 [ 261.789040][ T9183] ? __fget_files+0x2a/0x420 [ 261.789060][ T9183] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 261.789084][ T9183] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 261.789110][ T9183] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 261.789136][ T9183] ? __fget_files+0x3a0/0x420 [ 261.789159][ T9183] ? fput+0xa0/0xd0 [ 261.789179][ T9183] ? ksys_write+0x242/0x270 [ 261.789206][ T9183] ? __pfx_ksys_write+0x10/0x10 [ 261.789247][ T9183] __do_fast_syscall_32+0x1d2/0x540 [ 261.789267][ T9183] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.789283][ T9183] ? do_fast_syscall_32+0x33/0x70 [ 261.789299][ T9183] ? asm_int80_emulation+0x1a/0x20 [ 261.789314][ T9183] ? do_int80_emulation+0x20e/0x400 [ 261.789335][ T9183] do_fast_syscall_32+0x33/0x70 [ 261.789354][ T9183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.789379][ T9183] RIP: 0023:0xf742d539 [ 261.789395][ T9183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.789410][ T9183] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 261.789429][ T9183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0606610 [ 261.789441][ T9183] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.789452][ T9183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.789462][ T9183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.789473][ T9183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.789499][ T9183] [ 262.172657][ T5823] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.224337][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.232408][ T5823] usb 6-1: Product: syz [ 262.236736][ T5823] usb 6-1: Manufacturer: syz [ 262.241575][ T5823] usb 6-1: SerialNumber: syz [ 262.250460][ T5823] usb 6-1: config 0 descriptor?? [ 262.715068][ T5823] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.590016][ T5823] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 263.762669][ T5823] usb 5-1: config 19 has an invalid interface number: 178 but max is 0 [ 263.779677][ T5823] usb 5-1: config 19 has no interface number 0 [ 263.787403][ T5823] usb 5-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 263.797104][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.036174][ T5909] usb 6-1: USB disconnect, device number 14 [ 264.343509][ T30] audit: type=1400 audit(1769916849.950:289): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9197 comm="syz.5.976" [ 264.626122][ T9195] tipc: Started in network mode [ 264.646809][ T9195] tipc: Node identity 7f000001, cluster identity 4711 [ 264.666673][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 264.967466][ T5823] usb 5-1: string descriptor 0 read error: -71 [ 264.983897][ T5823] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 265.011992][ T5823] usb 5-1: USB disconnect, device number 29 [ 265.030006][ T797] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 265.050099][ T48] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 265.089916][ T3530] net_ratelimit: 136 callbacks suppressed [ 265.089937][ T3530] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.130522][ T3530] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.138276][ T3530] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.200023][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 265.206233][ T797] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 265.214627][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.226240][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.236920][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.250830][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.258897][ T797] usb 1-1: config 0 has no interface number 0 [ 265.265642][ T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.270467][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.275450][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.292733][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.300003][ T1209] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 265.306257][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.308413][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.319110][ T48] usb 2-1: config 0 descriptor?? [ 265.335166][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.348667][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.356373][ T797] usb 1-1: config 0 has no interface number 0 [ 265.356444][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.356466][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.357945][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.394865][ T797] usb 1-1: config 0 has no interface number 0 [ 265.401615][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.411516][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.424236][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.432479][ T797] usb 1-1: config 0 has no interface number 0 [ 265.438702][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.448529][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.461076][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.469195][ T797] usb 1-1: config 0 has no interface number 0 [ 265.475350][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.480386][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.485343][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.494062][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.504602][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.512543][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 265.519326][ T797] usb 1-1: config 0 has no interface number 0 [ 265.535145][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.545597][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.557966][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.560608][ T1209] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 265.577800][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.587396][ T1209] usb 3-1: Product: syz [ 265.588484][ T797] usb 1-1: config 0 has no interface number 0 [ 265.592109][ T1209] usb 3-1: Manufacturer: syz [ 265.603536][ T1209] usb 3-1: SerialNumber: syz [ 265.613466][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.624745][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.630256][ T3525] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 265.643215][ T1209] usb 3-1: config 0 descriptor?? [ 265.648499][ T797] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 265.652006][ T1209] hub 3-1:0.0: bad descriptor, ignoring hub [ 265.664952][ T3525] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.665080][ T797] usb 1-1: config 0 has no interface number 0 [ 265.678752][ T1209] hub 3-1:0.0: probe with driver hub failed with error -5 [ 265.678756][ T797] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.696088][ T797] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.699716][ T1209] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 265.738647][ T797] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 265.755528][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.765724][ T797] usb 1-1: Product: syz [ 265.771202][ T48] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 265.783788][ T48] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 265.791432][ T797] usb 1-1: Manufacturer: syz [ 265.797256][ T797] usb 1-1: SerialNumber: syz [ 265.818955][ T48] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 265.850575][ T797] usb 1-1: config 0 descriptor?? [ 265.870819][ T797] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 266.034542][ T48] usb 2-1: USB disconnect, device number 43 [ 266.065806][ T797] etas_es58x 1-1:0.2: could not parse product info: 'ࠅ' [ 266.293164][ T9219] program syz.4.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.311553][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.336338][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.387072][ T5909] usb 1-1: USB disconnect, device number 31 [ 266.409055][ T5909] etas_es58x 1-1:0.2: Disconnecting syz syz [ 267.022468][ T9236] Cannot find map_set index 2 as target [ 267.059899][ T48] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 267.219109][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.316311][ T48] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 267.316351][ T48] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 267.316364][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.367001][ T48] usb 2-1: config 0 descriptor?? [ 267.640103][ T1209] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 267.654836][ T9253] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 267.802675][ T1209] usb 6-1: unable to get BOS descriptor or descriptor too short [ 267.817808][ T1209] usb 6-1: not running at top speed; connect to a high speed hub [ 267.882514][ T1209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.882541][ T1209] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.886025][ T1209] usb 6-1: string descriptor 0 read error: -22 [ 267.886164][ T1209] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.886189][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.896785][ T1209] usb 6-1: 0:2 : does not exist [ 268.439983][ T797] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 268.590523][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 268.603562][ T797] usb 5-1: config 3 has an invalid interface number: 144 but max is 0 [ 268.603591][ T797] usb 5-1: config 3 has no interface number 0 [ 268.606315][ T797] usb 5-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=5c.1b [ 268.606339][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.606357][ T797] usb 5-1: Product: syz [ 268.606380][ T797] usb 5-1: Manufacturer: syz [ 268.606389][ T797] usb 5-1: SerialNumber: syz [ 268.618276][ T797] usb 5-1: bad CDC descriptors [ 268.663364][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.760325][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.771143][ T9246] [ 268.771155][ T9246] ===================================================== [ 268.771167][ T9246] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 268.771194][ T9246] syzkaller #0 Tainted: G L [ 268.771205][ T9246] ----------------------------------------------------- [ 268.771214][ T9246] syz.5.986/9246 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 268.771235][ T9246] ffffffff8e20c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 268.771294][ T9246] [ 268.771294][ T9246] and this task is already holding: [ 268.771302][ T9246] ffff88802f2e86a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 268.771348][ T9246] which would create a new lock dependency: [ 268.771356][ T9246] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 268.771408][ T9246] [ 268.771408][ T9246] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 268.771417][ T9246] (&dev->event_lock#2){..-.}-{3:3} [ 268.771441][ T9246] [ 268.771441][ T9246] ... which became SOFTIRQ-irq-safe at: [ 268.771451][ T9246] lock_acquire+0x106/0x330 [ 268.771476][ T9246] _raw_spin_lock_irqsave+0x40/0x60 [ 268.771502][ T9246] input_event+0x76/0xe0 [ 268.771522][ T9246] atp_complete_geyser_3_4+0x114e/0x1d90 [ 268.771543][ T9246] __usb_hcd_giveback_urb+0x376/0x540 [ 268.771565][ T9246] dummy_timer+0xbbd/0x45d0 [ 268.771589][ T9246] __hrtimer_run_queues+0x527/0xc30 [ 268.771606][ T9246] hrtimer_run_softirq+0x182/0x5a0 [ 268.771624][ T9246] handle_softirqs+0x22a/0x7c0 [ 268.771639][ T9246] __irq_exit_rcu+0x5f/0x150 [ 268.771655][ T9246] irq_exit_rcu+0x9/0x30 [ 268.771670][ T9246] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.771687][ T9246] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.771707][ T9246] _raw_spin_unlock_irqrestore+0x47/0x80 [ 268.771733][ T9246] dummy_urb_enqueue+0x58a/0x780 [ 268.771756][ T9246] usb_hcd_submit_urb+0x328/0x1b70 [ 268.771780][ T9246] atp_open+0x63/0xc0 [ 268.771797][ T9246] input_open_device+0x1f8/0x3b0 [ 268.771824][ T9246] mousedev_open_device+0xcc/0x150 [ 268.771848][ T9246] mousedev_open+0x2ef/0x4a0 [ 268.771868][ T9246] chrdev_open+0x4cd/0x5e0 [ 268.771885][ T9246] do_dentry_open+0x7ce/0x1420 [ 268.771905][ T9246] vfs_open+0x3b/0x340 [ 268.771923][ T9246] path_openat+0x3486/0x3e20 [ 268.771946][ T9246] do_filp_open+0x22d/0x490 [ 268.771968][ T9246] do_sys_openat2+0x12f/0x220 [ 268.771988][ T9246] __x64_sys_openat+0x138/0x170 [ 268.772008][ T9246] do_syscall_64+0xe2/0xf80 [ 268.772026][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.772044][ T9246] [ 268.772044][ T9246] to a SOFTIRQ-irq-unsafe lock: [ 268.772053][ T9246] (tasklist_lock){.+.+}-{3:3} [ 268.772070][ T9246] [ 268.772070][ T9246] ... which became SOFTIRQ-irq-unsafe at: [ 268.772080][ T9246] ... [ 268.772084][ T9246] lock_acquire+0x106/0x330 [ 268.772107][ T9246] _raw_read_lock+0x36/0x50 [ 268.772122][ T9246] __do_wait+0xde/0x740 [ 268.772141][ T9246] do_wait+0x1e7/0x4f0 [ 268.772159][ T9246] kernel_wait+0xd6/0x1c0 [ 268.772179][ T9246] call_usermodehelper_exec_work+0xbe/0x230 [ 268.772200][ T9246] process_scheduled_works+0xaec/0x17a0 [ 268.772221][ T9246] worker_thread+0xda6/0x1360 [ 268.772241][ T9246] kthread+0x726/0x8b0 [ 268.772259][ T9246] ret_from_fork+0x51b/0xa40 [ 268.772280][ T9246] ret_from_fork_asm+0x1a/0x30 [ 268.772300][ T9246] [ 268.772300][ T9246] other info that might help us debug this: [ 268.772300][ T9246] [ 268.772307][ T9246] Chain exists of: [ 268.772307][ T9246] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 268.772307][ T9246] [ 268.772346][ T9246] Possible interrupt unsafe locking scenario: [ 268.772346][ T9246] [ 268.772353][ T9246] CPU0 CPU1 [ 268.772359][ T9246] ---- ---- [ 268.772364][ T9246] lock(tasklist_lock); [ 268.772378][ T9246] local_irq_disable(); [ 268.772386][ T9246] lock(&dev->event_lock#2); [ 268.772407][ T9246] lock(&f_owner->lock); [ 268.772431][ T9246] [ 268.772437][ T9246] lock(&dev->event_lock#2); [ 268.772457][ T9246] [ 268.772457][ T9246] *** DEADLOCK *** [ 268.772457][ T9246] [ 268.772463][ T9246] 2 locks held by syz.5.986/9246: [ 268.772473][ T9246] #0: ffff88807e260fa0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 268.772528][ T9246] #1: ffff88802f2e86a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 268.772579][ T9246] [ 268.772579][ T9246] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 268.772588][ T9246] -> (&dev->event_lock#2){..-.}-{3:3} { [ 268.772619][ T9246] IN-SOFTIRQ-W at: [ 268.772630][ T9246] lock_acquire+0x106/0x330 [ 268.772652][ T9246] _raw_spin_lock_irqsave+0x40/0x60 [ 268.772677][ T9246] input_event+0x76/0xe0 [ 268.772694][ T9246] atp_complete_geyser_3_4+0x114e/0x1d90 [ 268.772714][ T9246] __usb_hcd_giveback_urb+0x376/0x540 [ 268.772738][ T9246] dummy_timer+0xbbd/0x45d0 [ 268.772759][ T9246] __hrtimer_run_queues+0x527/0xc30 [ 268.772776][ T9246] hrtimer_run_softirq+0x182/0x5a0 [ 268.772795][ T9246] handle_softirqs+0x22a/0x7c0 [ 268.772810][ T9246] __irq_exit_rcu+0x5f/0x150 [ 268.772835][ T9246] irq_exit_rcu+0x9/0x30 [ 268.772851][ T9246] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.772875][ T9246] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.772895][ T9246] _raw_spin_unlock_irqrestore+0x47/0x80 [ 268.772922][ T9246] dummy_urb_enqueue+0x58a/0x780 [ 268.772949][ T9246] usb_hcd_submit_urb+0x328/0x1b70 [ 268.772975][ T9246] atp_open+0x63/0xc0 [ 268.772993][ T9246] input_open_device+0x1f8/0x3b0 [ 268.773012][ T9246] mousedev_open_device+0xcc/0x150 [ 268.773035][ T9246] mousedev_open+0x2ef/0x4a0 [ 268.773057][ T9246] chrdev_open+0x4cd/0x5e0 [ 268.773074][ T9246] do_dentry_open+0x7ce/0x1420 [ 268.773095][ T9246] vfs_open+0x3b/0x340 [ 268.773114][ T9246] path_openat+0x3486/0x3e20 [ 268.773138][ T9246] do_filp_open+0x22d/0x490 [ 268.773163][ T9246] do_sys_openat2+0x12f/0x220 [ 268.773183][ T9246] __x64_sys_openat+0x138/0x170 [ 268.773205][ T9246] do_syscall_64+0xe2/0xf80 [ 268.773223][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.773243][ T9246] INITIAL USE at: [ 268.773256][ T9246] lock_acquire+0x106/0x330 [ 268.773279][ T9246] _raw_spin_lock_irqsave+0x40/0x60 [ 268.773305][ T9246] input_inject_event+0xa5/0x340 [ 268.773324][ T9246] kbd_led_trigger_activate+0xbc/0x100 [ 268.773349][ T9246] led_trigger_set+0x535/0x960 [ 268.773373][ T9246] led_trigger_set_default+0x260/0x2a0 [ 268.773398][ T9246] led_classdev_register_ext+0x787/0x9c0 [ 268.773422][ T9246] input_leds_connect+0x517/0x790 [ 268.773445][ T9246] input_register_device+0xd00/0x1160 [ 268.773468][ T9246] atkbd_connect+0x731/0xa50 [ 268.773485][ T9246] serio_driver_probe+0x82/0xd0 [ 268.773515][ T9246] really_probe+0x267/0xaf0 [ 268.773534][ T9246] __driver_probe_device+0x18c/0x320 [ 268.773552][ T9246] driver_probe_device+0x4f/0x240 [ 268.773570][ T9246] __driver_attach+0x349/0x640 [ 268.773587][ T9246] bus_for_each_dev+0x23b/0x2c0 [ 268.773610][ T9246] serio_handle_event+0x232/0x10d0 [ 268.773632][ T9246] process_scheduled_works+0xaec/0x17a0 [ 268.773657][ T9246] worker_thread+0xda6/0x1360 [ 268.773682][ T9246] kthread+0x726/0x8b0 [ 268.773700][ T9246] ret_from_fork+0x51b/0xa40 [ 268.773724][ T9246] ret_from_fork_asm+0x1a/0x30 [ 268.773746][ T9246] } [ 268.773752][ T9246] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 268.773778][ T9246] -> (&client->buffer_lock){....}-{3:3} { [ 268.773809][ T9246] INITIAL USE at: [ 268.773831][ T9246] lock_acquire+0x106/0x330 [ 268.773854][ T9246] _raw_spin_lock+0x2e/0x40 [ 268.773876][ T9246] evdev_pass_values+0xb9/0xbd0 [ 268.773900][ T9246] evdev_events+0x1e6/0x340 [ 268.773922][ T9246] input_pass_values+0x288/0x890 [ 268.773943][ T9246] input_event_dispose+0x330/0x6b0 [ 268.773961][ T9246] input_inject_event+0x1dd/0x340 [ 268.773980][ T9246] evdev_write+0x325/0x4c0 [ 268.774005][ T9246] vfs_write+0x29a/0xb90 [ 268.774027][ T9246] ksys_write+0x150/0x270 [ 268.774051][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.774071][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.774088][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.774110][ T9246] } [ 268.774116][ T9246] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 268.774141][ T9246] ... acquired at: [ 268.774148][ T9246] _raw_spin_lock+0x2e/0x40 [ 268.774171][ T9246] evdev_pass_values+0xb9/0xbd0 [ 268.774193][ T9246] evdev_events+0x1e6/0x340 [ 268.774217][ T9246] input_pass_values+0x288/0x890 [ 268.774238][ T9246] input_event_dispose+0x330/0x6b0 [ 268.774257][ T9246] input_inject_event+0x1dd/0x340 [ 268.774276][ T9246] evdev_write+0x325/0x4c0 [ 268.774300][ T9246] vfs_write+0x29a/0xb90 [ 268.774323][ T9246] ksys_write+0x150/0x270 [ 268.774344][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.774364][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.774382][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.774403][ T9246] [ 268.774408][ T9246] -> (&new->fa_lock){...-}-{3:3} { [ 268.774438][ T9246] IN-SOFTIRQ-R at: [ 268.774450][ T9246] lock_acquire+0x106/0x330 [ 268.774481][ T9246] _raw_read_lock_irqsave+0x48/0x60 [ 268.774497][ T9246] kill_fasync+0x199/0x4d0 [ 268.774520][ T9246] sock_wake_async+0x137/0x160 [ 268.774538][ T9246] sock_def_readable+0x3c1/0x530 [ 268.774555][ T9246] packet_rcv+0x11e1/0x1720 [ 268.774576][ T9246] __netif_receive_skb_core+0x6f1/0x30a0 [ 268.774595][ T9246] process_backlog+0x76d/0x1950 [ 268.774614][ T9246] __napi_poll+0xae/0x340 [ 268.774631][ T9246] net_rx_action+0x627/0xf70 [ 268.774650][ T9246] handle_softirqs+0x22a/0x7c0 [ 268.774667][ T9246] do_softirq+0x76/0xd0 [ 268.774683][ T9246] __local_bh_enable_ip+0xf8/0x130 [ 268.774700][ T9246] __dev_queue_xmit+0x1e6c/0x3850 [ 268.774727][ T9246] packet_sendmsg+0x3eb6/0x50f0 [ 268.774748][ T9246] __sys_sendto+0x709/0x7a0 [ 268.774768][ T9246] __ia32_sys_sendto+0xdd/0x100 [ 268.774790][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.774812][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.774841][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.774865][ T9246] INITIAL USE at: [ 268.774878][ T9246] lock_acquire+0x106/0x330 [ 268.774901][ T9246] _raw_write_lock_irq+0x3d/0x50 [ 268.774919][ T9246] fasync_remove_entry+0xf1/0x1c0 [ 268.774942][ T9246] __fput+0x8a5/0xa70 [ 268.774962][ T9246] task_work_run+0x1d9/0x270 [ 268.774984][ T9246] do_exit+0x69b/0x2310 [ 268.775006][ T9246] do_group_exit+0x21b/0x2d0 [ 268.775029][ T9246] get_signal+0x1284/0x1330 [ 268.775053][ T9246] arch_do_signal_or_restart+0xbc/0x830 [ 268.775077][ T9246] exit_to_user_mode_loop+0x86/0x480 [ 268.775101][ T9246] __do_fast_syscall_32+0x38e/0x540 [ 268.775119][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.775138][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.775160][ T9246] INITIAL READ USE at: [ 268.775173][ T9246] lock_acquire+0x106/0x330 [ 268.775197][ T9246] _raw_read_lock_irqsave+0x48/0x60 [ 268.775215][ T9246] kill_fasync+0x199/0x4d0 [ 268.775238][ T9246] evdev_pass_values+0x627/0xbd0 [ 268.775264][ T9246] evdev_events+0x1e6/0x340 [ 268.775286][ T9246] input_pass_values+0x288/0x890 [ 268.775309][ T9246] input_event_dispose+0x330/0x6b0 [ 268.775329][ T9246] input_inject_event+0x1dd/0x340 [ 268.775348][ T9246] evdev_write+0x325/0x4c0 [ 268.775371][ T9246] vfs_write+0x29a/0xb90 [ 268.775393][ T9246] ksys_write+0x150/0x270 [ 268.775416][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.775435][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.775454][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.775476][ T9246] } [ 268.775482][ T9246] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 268.775505][ T9246] ... acquired at: [ 268.775511][ T9246] _raw_read_lock_irqsave+0x48/0x60 [ 268.775528][ T9246] kill_fasync+0x199/0x4d0 [ 268.775549][ T9246] evdev_pass_values+0x627/0xbd0 [ 268.775573][ T9246] evdev_events+0x1e6/0x340 [ 268.775593][ T9246] input_pass_values+0x288/0x890 [ 268.775615][ T9246] input_event_dispose+0x330/0x6b0 [ 268.775634][ T9246] input_inject_event+0x1dd/0x340 [ 268.775653][ T9246] evdev_write+0x325/0x4c0 [ 268.775675][ T9246] vfs_write+0x29a/0xb90 [ 268.775697][ T9246] ksys_write+0x150/0x270 [ 268.775721][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.775741][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.775760][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.775781][ T9246] [ 268.775786][ T9246] -> (&f_owner->lock){....}-{3:3} { [ 268.775833][ T9246] INITIAL USE at: [ 268.775846][ T9246] lock_acquire+0x106/0x330 [ 268.775869][ T9246] _raw_write_lock_irq+0x3d/0x50 [ 268.775887][ T9246] __f_setown+0x67/0x370 [ 268.775910][ T9246] generic_setlease+0xba2/0xed0 [ 268.775927][ T9246] do_fcntl_add_lease+0x35e/0x470 [ 268.775944][ T9246] fcntl_setdeleg+0x14c/0x1e0 [ 268.775960][ T9246] do_fcntl+0xe6d/0x1a20 [ 268.775983][ T9246] do_compat_fcntl64+0x51e/0x7e0 [ 268.776006][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.776027][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.776048][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.776069][ T9246] INITIAL READ USE at: [ 268.776082][ T9246] lock_acquire+0x106/0x330 [ 268.776106][ T9246] _raw_read_lock_irqsave+0x48/0x60 [ 268.776123][ T9246] send_sigio+0x38/0x370 [ 268.776143][ T9246] kill_fasync+0x24d/0x4d0 [ 268.776166][ T9246] lease_break_callback+0x26/0x30 [ 268.776187][ T9246] __break_lease+0x741/0x1b80 [ 268.776213][ T9246] try_break_deleg+0xb1/0x120 [ 268.776237][ T9246] notify_change+0xb5a/0xf40 [ 268.776263][ T9246] chmod_common+0x265/0x410 [ 268.776280][ T9246] do_fchmodat+0xfc/0x1d0 [ 268.776302][ T9246] __ia32_sys_chmod+0x62/0x70 [ 268.776321][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.776343][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.776363][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.776385][ T9246] } [ 268.776392][ T9246] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 268.776415][ T9246] ... acquired at: [ 268.776422][ T9246] _raw_read_lock_irqsave+0x48/0x60 [ 268.776440][ T9246] send_sigio+0x38/0x370 [ 268.776462][ T9246] kill_fasync+0x24d/0x4d0 [ 268.776485][ T9246] lease_break_callback+0x26/0x30 [ 268.776512][ T9246] __break_lease+0x741/0x1b80 [ 268.776539][ T9246] try_break_deleg+0xb1/0x120 [ 268.776564][ T9246] notify_change+0xb5a/0xf40 [ 268.776589][ T9246] chmod_common+0x265/0x410 [ 268.776607][ T9246] do_fchmodat+0xfc/0x1d0 [ 268.776629][ T9246] __ia32_sys_chmod+0x62/0x70 [ 268.776646][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.776672][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.776691][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.776713][ T9246] [ 268.776719][ T9246] [ 268.776719][ T9246] the dependencies between the lock to be acquired [ 268.776725][ T9246] and SOFTIRQ-irq-unsafe lock: [ 268.776746][ T9246] -> (tasklist_lock){.+.+}-{3:3} { [ 268.776774][ T9246] HARDIRQ-ON-R at: [ 268.776786][ T9246] lock_acquire+0x106/0x330 [ 268.776809][ T9246] _raw_read_lock+0x36/0x50 [ 268.776833][ T9246] __do_wait+0xde/0x740 [ 268.776854][ T9246] do_wait+0x1e7/0x4f0 [ 268.776874][ T9246] kernel_wait+0xd6/0x1c0 [ 268.776894][ T9246] call_usermodehelper_exec_work+0xbe/0x230 [ 268.776919][ T9246] process_scheduled_works+0xaec/0x17a0 [ 268.776945][ T9246] worker_thread+0xda6/0x1360 [ 268.776970][ T9246] kthread+0x726/0x8b0 [ 268.776990][ T9246] ret_from_fork+0x51b/0xa40 [ 268.777014][ T9246] ret_from_fork_asm+0x1a/0x30 [ 268.777037][ T9246] SOFTIRQ-ON-R at: [ 268.777050][ T9246] lock_acquire+0x106/0x330 [ 268.777071][ T9246] _raw_read_lock+0x36/0x50 [ 268.777086][ T9246] __do_wait+0xde/0x740 [ 268.777105][ T9246] do_wait+0x1e7/0x4f0 [ 268.777127][ T9246] kernel_wait+0xd6/0x1c0 [ 268.777147][ T9246] call_usermodehelper_exec_work+0xbe/0x230 [ 268.777171][ T9246] process_scheduled_works+0xaec/0x17a0 [ 268.777196][ T9246] worker_thread+0xda6/0x1360 [ 268.777219][ T9246] kthread+0x726/0x8b0 [ 268.777238][ T9246] ret_from_fork+0x51b/0xa40 [ 268.777260][ T9246] ret_from_fork_asm+0x1a/0x30 [ 268.777280][ T9246] INITIAL USE at: [ 268.777292][ T9246] lock_acquire+0x106/0x330 [ 268.777315][ T9246] _raw_write_lock_irq+0x3d/0x50 [ 268.777332][ T9246] copy_process+0x2199/0x3980 [ 268.777349][ T9246] kernel_clone+0x248/0x870 [ 268.777367][ T9246] user_mode_thread+0x110/0x180 [ 268.777386][ T9246] rest_init+0x23/0x300 [ 268.777408][ T9246] start_kernel+0x380/0x3d0 [ 268.777431][ T9246] x86_64_start_reservations+0x24/0x30 [ 268.777450][ T9246] x86_64_start_kernel+0x143/0x1c0 [ 268.777466][ T9246] common_startup_64+0x13e/0x147 [ 268.777487][ T9246] INITIAL READ USE at: [ 268.777498][ T9246] lock_acquire+0x106/0x330 [ 268.777523][ T9246] _raw_read_lock+0x36/0x50 [ 268.777540][ T9246] __do_wait+0xde/0x740 [ 268.777563][ T9246] do_wait+0x1e7/0x4f0 [ 268.777585][ T9246] kernel_wait+0xd6/0x1c0 [ 268.777604][ T9246] call_usermodehelper_exec_work+0xbe/0x230 [ 268.777631][ T9246] process_scheduled_works+0xaec/0x17a0 [ 268.777656][ T9246] worker_thread+0xda6/0x1360 [ 268.777679][ T9246] kthread+0x726/0x8b0 [ 268.777697][ T9246] ret_from_fork+0x51b/0xa40 [ 268.777721][ T9246] ret_from_fork_asm+0x1a/0x30 [ 268.777746][ T9246] } [ 268.777752][ T9246] ... key at: [] tasklist_lock+0x18/0x40 [ 268.777777][ T9246] ... acquired at: [ 268.777783][ T9246] _raw_read_lock+0x36/0x50 [ 268.777798][ T9246] send_sigurg+0x12b/0x420 [ 268.777828][ T9246] sk_send_sigurg+0x6c/0x2e0 [ 268.777845][ T9246] queue_oob+0x42c/0x4f0 [ 268.777863][ T9246] unix_stream_sendmsg+0xcb1/0xe80 [ 268.777881][ T9246] ____sys_sendmsg+0xa68/0xad0 [ 268.777902][ T9246] ___sys_sendmsg+0x2a5/0x360 [ 268.777923][ T9246] __sys_sendmmsg+0x2e7/0x4e0 [ 268.777945][ T9246] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 268.777967][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.777988][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.778008][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.778028][ T9246] [ 268.778032][ T9246] [ 268.778032][ T9246] stack backtrace: [ 268.778045][ T9246] CPU: 1 UID: 0 PID: 9246 Comm: syz.5.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.778070][ T9246] Tainted: [L]=SOFTLOCKUP [ 268.778077][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 268.778089][ T9246] Call Trace: [ 268.778096][ T9246] [ 268.778104][ T9246] dump_stack_lvl+0xe8/0x150 [ 268.778126][ T9246] __lock_acquire+0x2a94/0x2cf0 [ 268.778158][ T9246] ? send_sigurg+0x12b/0x420 [ 268.778179][ T9246] lock_acquire+0x106/0x330 [ 268.778202][ T9246] ? send_sigurg+0x12b/0x420 [ 268.778231][ T9246] _raw_read_lock+0x36/0x50 [ 268.778247][ T9246] ? send_sigurg+0x12b/0x420 [ 268.778268][ T9246] send_sigurg+0x12b/0x420 [ 268.778291][ T9246] sk_send_sigurg+0x6c/0x2e0 [ 268.778309][ T9246] queue_oob+0x42c/0x4f0 [ 268.778328][ T9246] ? __pfx_queue_oob+0x10/0x10 [ 268.778346][ T9246] ? __lock_acquire+0x6b5/0x2cf0 [ 268.778371][ T9246] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 268.778396][ T9246] unix_stream_sendmsg+0xcb1/0xe80 [ 268.778412][ T9246] ? finish_task_switch+0x23c/0x920 [ 268.778435][ T9246] ? finish_task_switch+0x23c/0x920 [ 268.778458][ T9246] ? rcu_is_watching+0x15/0xb0 [ 268.778479][ T9246] ? __might_fault+0xaf/0x130 [ 268.778505][ T9246] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 268.778524][ T9246] ? __import_iovec+0x5d4/0x7e0 [ 268.778551][ T9246] ? aa_sock_msg_perm+0xda/0x1b0 [ 268.778574][ T9246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.778593][ T9246] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 268.778608][ T9246] ____sys_sendmsg+0xa68/0xad0 [ 268.778636][ T9246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.778661][ T9246] ? futex_unqueue+0x22/0x240 [ 268.778684][ T9246] ? futex_unqueue+0x22/0x240 [ 268.778711][ T9246] ___sys_sendmsg+0x2a5/0x360 [ 268.778732][ T9246] ? __lock_acquire+0x6b5/0x2cf0 [ 268.778757][ T9246] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.778778][ T9246] ? __pfx___futex_wait+0x10/0x10 [ 268.778798][ T9246] ? __pfx_futex_wake_mark+0x10/0x10 [ 268.778835][ T9246] ? __fget_files+0x2a/0x420 [ 268.778854][ T9246] ? __fget_files+0x3a0/0x420 [ 268.778876][ T9246] __sys_sendmmsg+0x2e7/0x4e0 [ 268.778902][ T9246] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.778924][ T9246] ? do_futex+0x333/0x420 [ 268.778956][ T9246] ? rcu_is_watching+0x15/0xb0 [ 268.778976][ T9246] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 268.778999][ T9246] __do_fast_syscall_32+0x1d2/0x540 [ 268.779020][ T9246] ? do_fast_syscall_32+0x33/0x70 [ 268.779041][ T9246] ? irqentry_exit+0x10e/0x620 [ 268.779061][ T9246] do_fast_syscall_32+0x33/0x70 [ 268.779081][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.779104][ T9246] RIP: 0023:0xf7f24539 [ 268.779121][ T9246] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 268.779139][ T9246] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 268.779158][ T9246] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006c40 [ 268.779173][ T9246] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 268.779186][ T9246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.779197][ T9246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 268.779210][ T9246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.779229][ T9246] [ 268.955317][ T9275] netlink: 'syz.2.990': attribute type 2 has an invalid length. [ 268.959702][ T9275] : entered promiscuous mode [ 269.734068][ T48] Bluetooth: Can't get state to change to load ram patch err [ 269.734101][ T48] Bluetooth: Loading patch file failed [ 269.734122][ T48] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 269.735276][ T48] usb 2-1: USB disconnect, device number 44 [ 270.027432][ T5878] usb 3-1: USB disconnect, device number 27 [ 270.181103][ T2048] net_ratelimit: 81 callbacks suppressed [ 270.181122][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 270.181141][ T2048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.292407][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 270.292432][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.402382][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 270.402409][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.516422][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 270.516449][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.624203][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 270.624231][ T2048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.307050][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.307331][ T5909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.760767][ T5878] usb 5-1: USB disconnect, device number 30 [ 274.220204][ T1209] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 274.232115][ T1209] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 274.242667][ T1209] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 274.260204][ T1209] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 274.272184][ T1209] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 275.229996][ T2048] net_ratelimit: 80 callbacks suppressed [ 275.230013][ T2048] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 275.243452][ T2048] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.359909][ T65] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 275.367734][ T65] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.480572][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 275.488305][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.609988][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 275.617767][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.729929][ T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 275.737682][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex