last executing test programs: 28m20.837625455s ago: executing program 2 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x4}]}}, {"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"}}}}, 0xfce) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x66, 0x0, 0xf8}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x40, 0x3334}, {0x20, 0x1, 0x0, 0xeffff024}, {0x6, 0x6, 0x0, 0x5}]}, 0x8) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0x3ec0) r6 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x1a9) fcntl$notify(r6, 0x402, 0x8000003d) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r8, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4116, 0x1014, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r3, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 28m20.47166854s ago: executing program 2 (id=1419): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 28m20.185959847s ago: executing program 2 (id=1423): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x158d, &(0x7f0000000380)={0x0, 0x1b6f, 0x4, 0x0, 0x3bd}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="cc0000001b0100000000000000000000000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000002f00ac0f0ebf", @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="8f9f02000000006ca200040000000400018085e6635b351b11591c179fa3e57c845682c08580573056e362350fe0d9be0fc23528b60d6c381ce238c88432fe8f43"], 0x18}}, 0x2000c090) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f0000001e80)=[{{&(0x7f0000001980)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) 28m19.203878017s ago: executing program 2 (id=1429): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x4000090, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1}, 0xffffffff}], 0x1, 0x181, 0x0) close(r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 28m18.248496906s ago: executing program 2 (id=1437): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xa, 0x8, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 28m17.843532079s ago: executing program 2 (id=1441): pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0xfffffffffffff2d1, 0x3, 0x4, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7fe, 0x7, 0x402, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 28m17.123566494s ago: executing program 32 (id=1441): pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0xfffffffffffff2d1, 0x3, 0x4, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7fe, 0x7, 0x402, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 6m21.531046127s ago: executing program 4 (id=8267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7010000000000007910a800000000001d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x22, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a11820fffff5bab1b590fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300ff168ef5dd000002100001000a0c10e1000000e6ff22", 0x58}], 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000020000000000000000002020732500000000002020207b1af8ff00000000bf", @ANYRES16=r2, @ANYRES32=r3, @ANYRESHEX=r4, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010029bd7000fdf76d96fe32e04357aa4969dbdf2511000000180001801400020076657468315f746f5f68737200000000", @ANYRES16=r8, @ANYBLOB=',\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8014) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r9, 0x4, 0x42800) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) unshare(0x68040200) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) 6m19.352954814s ago: executing program 4 (id=8274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x240480d0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="b0be5c021609eccc7fd57dcb37abecf86da2c8d1c49a527e3478f40e7c3655ecfb50936780d197fabd3f4c66778a1ac691c204f720577908c43b0e708666331374841499c5eaec8fbb9d00bd96aa", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r6, &(0x7f0000000400)=[{&(0x7f0000000240)=""/20, 0x14}, {0x0}], 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) tkill(r3, 0x12) r8 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r8, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0), 0x8) syz_usb_disconnect(r1) close(r2) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x20, &(0x7f0000000080)=ANY=[@ANYBLOB="010200189393e979b4301c3ef85c13fdcbb0cb00"/32]) 6m16.259119718s ago: executing program 4 (id=8288): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6m13.535837062s ago: executing program 4 (id=8295): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000012c0)='ns/ipc\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) 6m12.944727538s ago: executing program 4 (id=8300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = add_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="e6b416907cbb1e696b8ed17386c0df0a344ea2bc6d4f7c5836ef94cd641c5395c211e0b939fe530fefe6e1c5e23273c76cc8f12186978e3e15b2f0fcc85601cd0534a0186b68bd371706c4ff7b", 0x4d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000480)={r2, 0xec, 0x1c}, 0x0, &(0x7f00000005c0)="08468840d7f6f04805eaf8bd9e48f85fff06ec24441cda7fce38240dc50cd078ea7870b268be911a52777224d9166801b747e038bb784fc3cdbf03d6a3d209f84014900b35cd2217e7d4f649cff33327d7b9e061946f6890d9626af5ba60c0d0e2b6304d946cd2308ecf9d27ac1b3ce8c2a23be1f585a0fbf232852864ec8e6eff0a21b848533dd2f6f5c52efbff2cc672339359c6ef9ad974371f0610c451c31e73369f530bf0ce45eb10d5c46023545ac5cc37071e677b0dc69501fc06191f6c5f1c85414ec2c67ccdbd46507743a9c816f5620ebd7c2e6b8d79b462dba1a87a27dcf68d2414380ec06e84", &(0x7f00000004c0)=""/37) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x2, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) syz_emit_ethernet(0x197, &(0x7f0000001700)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "5e1a78", 0x161, 0x87, 0xff, @mcast1, @mcast2, {[@fragment={0x3c, 0x0, 0x9, 0x0, 0x0, 0x12, 0x68}, @dstopts={0x1, 0xb, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0xc2, 0x6, [0x7fffffffffffffff, 0x7fffffffffffffff, 0x2, 0x3, 0x6, 0x8000000000000001, 0x6ab, 0xf3, 0x4]}}, @enc_lim={0x4, 0x1, 0x9}]}, @routing={0x73}, @fragment={0x3c, 0x0, 0x48, 0x0, 0x0, 0x0, 0x67}, @fragment={0x84, 0x0, 0xe0, 0x1, 0x0, 0x12, 0x64}], "46012e6cca8430e8cebabde3008a7b4c8805e8eb946dea3ce0c20c3cf86a6552f70dad431bad073fda16a24c24d6b994c3fd16b6b3ef2c84277400fb78c039b9d90d111b0b69e3c868100b4096ae85475a0739ed848d9f2aedd97990f07a95b875e1e9c29f148a2b6c713f1b3123374aea7513e34034be20998edf52c921ede18d477a45abdfbd9bef82d50c5fc92c3ac4afe206b349defa39709f7da379527776a337a68cc2c906880facffba3fdfa484ef6046a5ef222902603441aea0531cb226642e271cf0de0b73904a252b8ab6b17528c6fb65fddbd5cb6bef36c553d51b"}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x3, 0x2, 0x7f, 0xfffffffe}, {0xa73, 0x9, 0xe, 0x7ff}, {0x8, 0xf, 0x9, 0x80}]}) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000240)=""/242, 0xf2}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r10, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) 6m12.806169477s ago: executing program 4 (id=8301): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd80", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2", 0x1}], 0x1}}], 0x2, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m12.028908041s ago: executing program 33 (id=8301): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd80", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2", 0x1}], 0x1}}], 0x2, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.774733548s ago: executing program 1 (id=9455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create(0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x8}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x8c5d47e95537ac9b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000001}, 0x40000) 8.723388712s ago: executing program 6 (id=9457): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 8.653310815s ago: executing program 0 (id=9458): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000019f196897abd7000fcdbdf250a001400000001040004000008001e000600000008000400", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20044050) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a3100000000140007800800130000000000080012400000000005000500020000000500040001000000120003006861730f446e65742c706f7274000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x0, 0xd9, 0x2, &(0x7f0000000040)={0x6, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 8.630686987s ago: executing program 6 (id=9459): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000500020e00000000000000070000fdfc4d9400000000000000000000000000988500000000000002000100000004d40081000064e684060000005a0c34f8899b7d0fa4f6e632aa61aa23d327456f0000000005000500000000000a004e22fffff800fc010000000000000000000000003a000106f6fffffffffff3f762da1c2b120dc7d8fac380ce0d289b03baddd70ed9e9a586f083c55ddce13380eb6a494c78e3e963857e6c4046dd9d7a78594383447ef4"], 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="7d8d07000001aaaa0008aa0008004500001c00000000000190780078fffd000000000000000000000000c8"], 0x0) io_uring_enter(r4, 0x48e9, 0x4, 0x2, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10) r8 = dup2(r2, r2) r9 = socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(0x0, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r11, 0xffffffffffffffff, 0x0) 8.201458129s ago: executing program 3 (id=9460): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.759564032s ago: executing program 1 (id=9461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) shutdown(r3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000340)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000000005001700000000000a00000000000000000000000000000000000000000000000000000000000000f8001a00ff0200000001fc0200000000000000000000000000002900"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x94}}, 0x0) 7.082046943s ago: executing program 6 (id=9464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f"], 0x113c}, 0x1, 0x0, 0x0, 0x6004080}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x12062, 0x0, 0x0) 6.873298072s ago: executing program 5 (id=9465): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00010428bd700000dcdf2507000000", @ANYRES32, @ANYBLOB="40002c090a0002000180c200000000000c000e800500010206000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 6.753584079s ago: executing program 1 (id=9466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = add_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="e6b416907cbb1e696b8ed17386c0df0a344ea2bc6d4f7c5836ef94cd641c5395c211e0b939fe530fefe6e1c5e23273c76cc8f12186978e3e15b2f0fcc85601cd0534a0186b68bd371706c4ff7b", 0x4d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000480)={r2, 0xec, 0x1c}, 0x0, &(0x7f00000005c0)="08468840d7f6f04805eaf8bd9e48f85fff06ec24441cda7fce38240dc50cd078ea7870b268be911a52777224d9166801b747e038bb784fc3cdbf03d6a3d209f84014900b35cd2217e7d4f649cff33327d7b9e061946f6890d9626af5ba60c0d0e2b6304d946cd2308ecf9d27ac1b3ce8c2a23be1f585a0fbf232852864ec8e6eff0a21b848533dd2f6f5c52efbff2cc672339359c6ef9ad974371f0610c451c31e73369f530bf0ce45eb10d5c46023545ac5cc37071e677b0dc69501fc06191f6c5f1c85414ec2c67ccdbd46507743a9c816f5620ebd7c2e6b8d79b462dba1a87a27dcf68d2414380ec06e84", &(0x7f00000004c0)=""/37) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x2, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) syz_emit_ethernet(0x197, &(0x7f0000001700)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "5e1a78", 0x161, 0x87, 0xff, @mcast1, @mcast2, {[@fragment={0x3c, 0x0, 0x9, 0x0, 0x0, 0x12, 0x68}, @dstopts={0x1, 0xb, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0xc2, 0x6, [0x7fffffffffffffff, 0x7fffffffffffffff, 0x2, 0x3, 0x6, 0x8000000000000001, 0x6ab, 0xf3, 0x4]}}, @enc_lim={0x4, 0x1, 0x9}]}, @routing={0x73}, @fragment={0x3c, 0x0, 0x48, 0x0, 0x0, 0x0, 0x67}, @fragment={0x84, 0x0, 0xe0, 0x1, 0x0, 0x12, 0x64}], "46012e6cca8430e8cebabde3008a7b4c8805e8eb946dea3ce0c20c3cf86a6552f70dad431bad073fda16a24c24d6b994c3fd16b6b3ef2c84277400fb78c039b9d90d111b0b69e3c868100b4096ae85475a0739ed848d9f2aedd97990f07a95b875e1e9c29f148a2b6c713f1b3123374aea7513e34034be20998edf52c921ede18d477a45abdfbd9bef82d50c5fc92c3ac4afe206b349defa39709f7da379527776a337a68cc2c906880facffba3fdfa484ef6046a5ef222902603441aea0531cb226642e271cf0de0b73904a252b8ab6b17528c6fb65fddbd5cb6bef36c553d51b"}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x3, 0x2, 0x7f, 0xfffffffe}, {0xa73, 0x9, 0xe, 0x7ff}, {0x8, 0xf, 0x9, 0x80}]}) readv(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000240)=""/242, 0xf2}], 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/228], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r10, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) 6.189044689s ago: executing program 5 (id=9467): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 6.006945282s ago: executing program 3 (id=9468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create(0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x8}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x8c5d47e95537ac9b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000001}, 0x40000) 5.601052506s ago: executing program 0 (id=9469): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 4.4274466s ago: executing program 3 (id=9470): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0x0, r3) ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000ffcffc)=0xfa) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 4.295689098s ago: executing program 5 (id=9471): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 3.818939585s ago: executing program 1 (id=9472): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465"], 0xd4}}, 0x8818) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) 3.818574415s ago: executing program 3 (id=9473): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, 0xffffffffffffffff, &(0x7f00000000c0)) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0x200) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020813050503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000100)=@string={0x6, 0x3, "bdf1e074"}}]}) 3.346757704s ago: executing program 0 (id=9474): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.032991851s ago: executing program 6 (id=9475): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000500020e00000000000000070000fdfc4d9400000000000000000000000000988500000000000002000100000004d40081000064e684060000005a0c34f8899b7d0fa4f6e632aa61aa23d327456f0000000005000500000000000a004e22fffff800fc010000000000000000000000003a000106f6fffffffffff3f762da1c2b120dc7d8fac380ce0d289b03baddd70ed9e9a586f083c55ddce13380eb6a494c78e3e963857e6c4046dd9d7a78594383447ef4"], 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="7d8d07000001aaaa0008aa0008004500001c00000000000190780078fffd000000000000000000000000c8"], 0x0) io_uring_enter(r4, 0x48e9, 0x4, 0x2, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10) r8 = dup2(r2, r2) r9 = socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(0x0, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r11, 0xffffffffffffffff, 0x0) 2.311090423s ago: executing program 5 (id=9476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) shutdown(r3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000340)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000000005001700000000000a00000000000000000000000000000000000000000000000000000000000000f8001a00ff0200000001fc0200000000000000000000000000002900"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x94}}, 0x0) 2.053709795s ago: executing program 3 (id=9479): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000019f196897abd7000fcdbdf250a001400000001040004000008001e000600000008000400", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20044050) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a3100000000140007800800130000000000080012400000000005000500020000000500040001000000120003006861730f446e65742c706f7274000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x0, 0xd9, 0x2, &(0x7f0000000040)={0x6, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 2.04336098s ago: executing program 0 (id=9480): r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000010000000000000000000004000000ff"], 0x0) 2.03599405s ago: executing program 6 (id=9481): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 1.79680855s ago: executing program 0 (id=9482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = add_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="e6b416907cbb1e696b8ed17386c0df0a344ea2bc6d4f7c5836ef94cd641c5395c211e0b939fe530fefe6e1c5e23273c76cc8f12186978e3e15b2f0fcc85601cd0534a0186b68bd371706c4ff7b", 0x4d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000480)={r2, 0xec, 0x1c}, 0x0, &(0x7f00000005c0)="08468840d7f6f04805eaf8bd9e48f85fff06ec24441cda7fce38240dc50cd078ea7870b268be911a52777224d9166801b747e038bb784fc3cdbf03d6a3d209f84014900b35cd2217e7d4f649cff33327d7b9e061946f6890d9626af5ba60c0d0e2b6304d946cd2308ecf9d27ac1b3ce8c2a23be1f585a0fbf232852864ec8e6eff0a21b848533dd2f6f5c52efbff2cc672339359c6ef9ad974371f0610c451c31e73369f530bf0ce45eb10d5c46023545ac5cc37071e677b0dc69501fc06191f6c5f1c85414ec2c67ccdbd46507743a9c816f5620ebd7c2e6b8d79b462dba1a87a27dcf68d2414380ec06e84", &(0x7f00000004c0)=""/37) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x2, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) syz_emit_ethernet(0x197, &(0x7f0000001700)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "5e1a78", 0x161, 0x87, 0xff, @mcast1, @mcast2, {[@fragment={0x3c, 0x0, 0x9, 0x0, 0x0, 0x12, 0x68}, @dstopts={0x1, 0xb, '\x00', [@pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0xc2, 0x6, [0x7fffffffffffffff, 0x7fffffffffffffff, 0x2, 0x3, 0x6, 0x8000000000000001, 0x6ab, 0xf3, 0x4]}}, @enc_lim={0x4, 0x1, 0x9}]}, @routing={0x73}, @fragment={0x3c, 0x0, 0x48, 0x0, 0x0, 0x0, 0x67}, @fragment={0x84, 0x0, 0xe0, 0x1, 0x0, 0x12, 0x64}], "46012e6cca8430e8cebabde3008a7b4c8805e8eb946dea3ce0c20c3cf86a6552f70dad431bad073fda16a24c24d6b994c3fd16b6b3ef2c84277400fb78c039b9d90d111b0b69e3c868100b4096ae85475a0739ed848d9f2aedd97990f07a95b875e1e9c29f148a2b6c713f1b3123374aea7513e34034be20998edf52c921ede18d477a45abdfbd9bef82d50c5fc92c3ac4afe206b349defa39709f7da379527776a337a68cc2c906880facffba3fdfa484ef6046a5ef222902603441aea0531cb226642e271cf0de0b73904a252b8ab6b17528c6fb65fddbd5cb6bef36c553d51b"}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x3, 0x2, 0x7f, 0xfffffffe}, {0xa73, 0x9, 0xe, 0x7ff}, {0x8, 0xf, 0x9, 0x80}]}) readv(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000240)=""/242, 0xf2}], 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/228], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r10, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg2\x00'}) 469.118088ms ago: executing program 6 (id=9483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create(0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x8}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x8c5d47e95537ac9b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000001}, 0x40000) 326.192648ms ago: executing program 5 (id=9484): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000480)=""/208, 0xd0, 0x2) 18.602501ms ago: executing program 5 (id=9485): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f"], 0x113c}, 0x1, 0x0, 0x0, 0x6004080}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x12062, 0x0, 0x0) 0s ago: executing program 1 (id=9486): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6711f234db5aaa13f382ad796bd667c9e00000009873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 1] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2014.595750][ T891] usb 4-1: can't read configurations, error -61 [ 2014.722491][ T4607] FAULT_INJECTION: forcing a failure. [ 2014.722491][ T4607] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.748336][ T891] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2014.763562][ T4607] CPU: 1 UID: 0 PID: 4607 Comm: syz.1.8928 Tainted: G L syzkaller #0 PREEMPT(full) [ 2014.763589][ T4607] Tainted: [L]=SOFTLOCKUP [ 2014.763596][ T4607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2014.763607][ T4607] Call Trace: [ 2014.763613][ T4607] [ 2014.763621][ T4607] dump_stack_lvl+0x189/0x250 [ 2014.763644][ T4607] ? __pfx____ratelimit+0x10/0x10 [ 2014.763666][ T4607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2014.763687][ T4607] ? __pfx__printk+0x10/0x10 [ 2014.763717][ T4607] ? __pfx___might_resched+0x10/0x10 [ 2014.763744][ T4607] ? fs_reclaim_acquire+0x7d/0x100 [ 2014.763768][ T4607] should_fail_ex+0x414/0x560 [ 2014.763793][ T4607] should_failslab+0xa8/0x100 [ 2014.763815][ T4607] __kmalloc_noprof+0xdf/0x800 [ 2014.763832][ T4607] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2014.763862][ T4607] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2014.763893][ T4607] genl_family_rcv_msg_doit+0xb8/0x300 [ 2014.763921][ T4607] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2014.763951][ T4607] ? apparmor_capable+0x137/0x1a0 [ 2014.763973][ T4607] ? bpf_lsm_capable+0x9/0x20 [ 2014.763993][ T4607] ? security_capable+0x7e/0x2e0 [ 2014.764020][ T4607] genl_rcv_msg+0x60e/0x790 [ 2014.764050][ T4607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2014.764069][ T4607] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2014.764091][ T4607] ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10 [ 2014.764109][ T4607] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2014.764144][ T4607] netlink_rcv_skb+0x208/0x470 [ 2014.764162][ T4607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2014.764184][ T4607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2014.764221][ T4607] ? down_read+0x274/0x2e0 [ 2014.764241][ T4607] ? genl_rcv+0xd/0x40 [ 2014.764264][ T4607] genl_rcv+0x28/0x40 [ 2014.764280][ T4607] netlink_unicast+0x82f/0x9e0 [ 2014.764314][ T4607] ? __pfx_netlink_unicast+0x10/0x10 [ 2014.764339][ T4607] ? netlink_sendmsg+0x642/0xb30 [ 2014.764356][ T4607] ? skb_put+0x11b/0x210 [ 2014.764384][ T4607] netlink_sendmsg+0x805/0xb30 [ 2014.764412][ T4607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2014.764433][ T4607] ? __import_iovec+0x5d4/0x7f0 [ 2014.764453][ T4607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2014.764479][ T4607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2014.764496][ T4607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2014.764515][ T4607] __sock_sendmsg+0x21c/0x270 [ 2014.764540][ T4607] ____sys_sendmsg+0x505/0x820 [ 2014.764564][ T4607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2014.764595][ T4607] ? kstrtouint+0x6e/0xe0 [ 2014.764621][ T4607] ___sys_sendmsg+0x21f/0x2a0 [ 2014.764641][ T4607] ? __pfx____sys_sendmsg+0x10/0x10 [ 2014.764666][ T4607] ? rcu_read_lock_any_held+0xb3/0x120 [ 2014.764715][ T4607] ? __fget_files+0x2a/0x420 [ 2014.764740][ T4607] ? __fget_files+0x3a0/0x420 [ 2014.764768][ T4607] __sys_sendmsg+0x164/0x220 [ 2014.764787][ T4607] ? __pfx___sys_sendmsg+0x10/0x10 [ 2014.764813][ T4607] ? __pfx_ksys_write+0x10/0x10 [ 2014.764833][ T4607] ? __do_fast_syscall_32+0xbe/0x570 [ 2014.764859][ T4607] __do_fast_syscall_32+0x1f7/0x570 [ 2014.764881][ T4607] ? rcu_is_watching+0x15/0xb0 [ 2014.764898][ T4607] ? do_fast_syscall_32+0x34/0x80 [ 2014.764924][ T4607] do_fast_syscall_32+0x34/0x80 [ 2014.764945][ T4607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2014.764965][ T4607] RIP: 0023:0xf7fa1539 [ 2014.764980][ T4607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2014.764995][ T4607] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2014.765012][ T4607] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 2014.765023][ T4607] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2014.765034][ T4607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2014.765045][ T4607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2014.765055][ T4607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2014.765084][ T4607] [ 2015.343456][ T4608] can: request_module (can-proto-3) failed. [ 2015.475973][ T891] usb 4-1: Using ep0 maxpacket: 32 [ 2015.481722][ T891] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 2015.491724][ T891] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2015.499453][ T891] usb 4-1: can't read configurations, error -61 [ 2015.507165][ T891] usb usb4-port1: attempt power cycle [ 2015.856312][ T891] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2015.877252][ T891] usb 4-1: Using ep0 maxpacket: 32 [ 2015.933050][ T891] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 2015.962721][ T891] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2016.026063][ T891] usb 4-1: can't read configurations, error -61 [ 2016.271488][ T891] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2016.309294][ T891] usb 4-1: Using ep0 maxpacket: 32 [ 2016.315510][ T891] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 2016.341290][ T891] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2016.349072][ T891] usb 4-1: can't read configurations, error -61 [ 2016.459701][ T891] usb usb4-port1: unable to enumerate USB device [ 2016.939667][ T4656] can: request_module (can-proto-3) failed. [ 2016.985880][T12993] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2017.086054][ T891] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 2017.179421][T12993] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2017.190138][T12993] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2017.230618][T12993] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2017.262044][ T891] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2017.279810][ T891] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2017.299308][ T891] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2017.309225][T12993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.320842][ T891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.562390][T12993] usb 2-1: usb_control_msg returned -32 [ 2017.578160][T12993] usbtmc 2-1:16.0: can't read capabilities [ 2017.922911][ T4670] FAULT_INJECTION: forcing a failure. [ 2017.922911][ T4670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.938847][ T4670] CPU: 0 UID: 0 PID: 4670 Comm: syz.1.8937 Tainted: G L syzkaller #0 PREEMPT(full) [ 2017.938871][ T4670] Tainted: [L]=SOFTLOCKUP [ 2017.938875][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2017.938882][ T4670] Call Trace: [ 2017.938887][ T4670] [ 2017.938894][ T4670] dump_stack_lvl+0x189/0x250 [ 2017.938920][ T4670] ? __pfx____ratelimit+0x10/0x10 [ 2017.938943][ T4670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2017.938964][ T4670] ? __pfx__printk+0x10/0x10 [ 2017.938991][ T4670] should_fail_ex+0x414/0x560 [ 2017.939006][ T4670] _copy_to_user+0x31/0xb0 [ 2017.939020][ T4670] simple_read_from_buffer+0xe1/0x170 [ 2017.939036][ T4670] proc_fail_nth_read+0x1b3/0x220 [ 2017.939054][ T4670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2017.939076][ T4670] ? rw_verify_area+0x2a6/0x4d0 [ 2017.939101][ T4670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2017.939121][ T4670] vfs_read+0x200/0xa30 [ 2017.939134][ T4670] ? fdget_pos+0x247/0x320 [ 2017.939148][ T4670] ? __pfx___mutex_lock+0x10/0x10 [ 2017.939161][ T4670] ? __pfx_vfs_read+0x10/0x10 [ 2017.939176][ T4670] ? __fget_files+0x2a/0x420 [ 2017.939189][ T4670] ? __fget_files+0x3a0/0x420 [ 2017.939208][ T4670] ? __fget_files+0x2a/0x420 [ 2017.939238][ T4670] ksys_read+0x145/0x250 [ 2017.939259][ T4670] ? __pfx_ksys_read+0x10/0x10 [ 2017.939278][ T4670] ? __do_fast_syscall_32+0xbe/0x570 [ 2017.939295][ T4670] __do_fast_syscall_32+0x1f7/0x570 [ 2017.939308][ T4670] ? rcu_is_watching+0x15/0xb0 [ 2017.939319][ T4670] ? do_fast_syscall_32+0x34/0x80 [ 2017.939335][ T4670] do_fast_syscall_32+0x34/0x80 [ 2017.939356][ T4670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2017.939377][ T4670] RIP: 0023:0xf7fa1539 [ 2017.939394][ T4670] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2017.939409][ T4670] RSP: 002b:00000000f5475590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2017.939428][ T4670] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5475620 [ 2017.939435][ T4670] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 2017.939441][ T4670] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2017.939447][ T4670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2017.939453][ T4670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2017.939483][ T4670] [ 2018.289382][ T891] usb 6-1: usb_control_msg returned -32 [ 2018.395781][ T891] usbtmc 6-1:16.0: can't read capabilities [ 2018.403721][T14079] usb 2-1: USB disconnect, device number 115 [ 2018.779638][ T4673] can: request_module (can-proto-3) failed. [ 2019.841032][T12993] usb 6-1: USB disconnect, device number 113 [ 2020.203501][ T4693] can: request_module (can-proto-3) failed. [ 2024.187057][ T4749] mac80211_hwsim hwsim457 wlan0: entered promiscuous mode [ 2024.194415][ T4749] FAULT_INJECTION: forcing a failure. [ 2024.194415][ T4749] name failslab, interval 1, probability 0, space 0, times 0 [ 2024.399106][ T4749] CPU: 1 UID: 0 PID: 4749 Comm: syz.6.8958 Tainted: G L syzkaller #0 PREEMPT(full) [ 2024.399134][ T4749] Tainted: [L]=SOFTLOCKUP [ 2024.399140][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2024.399151][ T4749] Call Trace: [ 2024.399158][ T4749] [ 2024.399167][ T4749] dump_stack_lvl+0x189/0x250 [ 2024.399189][ T4749] ? __pfx____ratelimit+0x10/0x10 [ 2024.399208][ T4749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2024.399226][ T4749] ? __pfx__printk+0x10/0x10 [ 2024.399258][ T4749] should_fail_ex+0x414/0x560 [ 2024.399281][ T4749] should_failslab+0xa8/0x100 [ 2024.399301][ T4749] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2024.399326][ T4749] ? __alloc_skb+0x255/0x430 [ 2024.399345][ T4749] ? napi_skb_cache_get+0x4a5/0x780 [ 2024.399364][ T4749] ? napi_skb_cache_get+0x151/0x780 [ 2024.399390][ T4749] __alloc_skb+0x255/0x430 [ 2024.399415][ T4749] ? __pfx___alloc_skb+0x10/0x10 [ 2024.399438][ T4749] ? if_nlmsg_size+0x81b/0x850 [ 2024.399465][ T4749] rtmsg_ifinfo_build_skb+0x84/0x260 [ 2024.399494][ T4749] rtmsg_ifinfo+0x8c/0x1a0 [ 2024.399520][ T4749] __dev_notify_flags+0xf4/0x2e0 [ 2024.399547][ T4749] ? __pfx___dev_notify_flags+0x10/0x10 [ 2024.399568][ T4749] ? __dev_change_flags+0x4af/0x680 [ 2024.399588][ T4749] ? __pfx___dev_change_flags+0x10/0x10 [ 2024.399616][ T4749] netif_change_flags+0xe8/0x1a0 [ 2024.399638][ T4749] do_setlink+0xc55/0x41c0 [ 2024.399672][ T4749] ? __pfx_do_setlink+0x10/0x10 [ 2024.399713][ T4749] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2024.399735][ T4749] ? lockdep_hardirqs_on+0x98/0x140 [ 2024.399758][ T4749] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2024.399779][ T4749] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2024.399805][ T4749] ? rcu_is_watching+0x15/0xb0 [ 2024.399830][ T4749] ? __mutex_lock+0xd3b/0x1350 [ 2024.399866][ T4749] ? __mutex_lock+0x5bb/0x1350 [ 2024.399893][ T4749] ? rtnl_newlink+0x8ec/0x1c90 [ 2024.399920][ T4749] ? __pfx___mutex_lock+0x10/0x10 [ 2024.399950][ T4749] ? full_name_hash+0x92/0xe0 [ 2024.399975][ T4749] ? netdev_name_node_lookup+0xdf/0x120 [ 2024.400000][ T4749] rtnl_newlink+0x161c/0x1c90 [ 2024.400037][ T4749] ? __pfx_rtnl_newlink+0x10/0x10 [ 2024.400058][ T4749] ? __do_fast_syscall_32+0x1f7/0x570 [ 2024.400116][ T4749] ? kasan_quarantine_put+0xdd/0x220 [ 2024.400133][ T4749] ? lockdep_hardirqs_on+0x98/0x140 [ 2024.400162][ T4749] ? kmem_cache_free+0x197/0x620 [ 2024.400178][ T4749] ? nlmon_xmit+0xb0/0x100 [ 2024.400212][ T4749] ? __lock_acquire+0x6b6/0x2cf0 [ 2024.400234][ T4749] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2024.400258][ T4749] ? __dev_queue_xmit+0x289/0x3140 [ 2024.400277][ T4749] ? __dev_queue_xmit+0x289/0x3140 [ 2024.400294][ T4749] ? __dev_queue_xmit+0x289/0x3140 [ 2024.400342][ T4749] ? __pfx_rtnl_newlink+0x10/0x10 [ 2024.400365][ T4749] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2024.400393][ T4749] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2024.400415][ T4749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2024.400437][ T4749] ? ref_tracker_free+0x63a/0x7d0 [ 2024.400458][ T4749] ? __asan_memcpy+0x40/0x70 [ 2024.400482][ T4749] ? __pfx_ref_tracker_free+0x10/0x10 [ 2024.400513][ T4749] netlink_rcv_skb+0x208/0x470 [ 2024.400533][ T4749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2024.400557][ T4749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2024.400584][ T4749] ? netlink_deliver_tap+0x2e/0x1b0 [ 2024.400611][ T4749] netlink_unicast+0x82f/0x9e0 [ 2024.400645][ T4749] ? __pfx_netlink_unicast+0x10/0x10 [ 2024.400671][ T4749] ? netlink_sendmsg+0x642/0xb30 [ 2024.400687][ T4749] ? skb_put+0x11b/0x210 [ 2024.400714][ T4749] netlink_sendmsg+0x805/0xb30 [ 2024.400743][ T4749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2024.400764][ T4749] ? __import_iovec+0x5d4/0x7f0 [ 2024.400785][ T4749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2024.400811][ T4749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2024.400828][ T4749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2024.400852][ T4749] __sock_sendmsg+0x21c/0x270 [ 2024.400875][ T4749] ____sys_sendmsg+0x505/0x820 [ 2024.400897][ T4749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2024.400924][ T4749] ? kstrtouint+0x6e/0xe0 [ 2024.400950][ T4749] ___sys_sendmsg+0x21f/0x2a0 [ 2024.400971][ T4749] ? __pfx____sys_sendmsg+0x10/0x10 [ 2024.400996][ T4749] ? rcu_read_lock_any_held+0xb3/0x120 [ 2024.401046][ T4749] ? __fget_files+0x2a/0x420 [ 2024.401066][ T4749] ? __fget_files+0x3a0/0x420 [ 2024.401097][ T4749] __sys_sendmsg+0x164/0x220 [ 2024.401117][ T4749] ? __pfx___sys_sendmsg+0x10/0x10 [ 2024.401144][ T4749] ? __pfx_ksys_write+0x10/0x10 [ 2024.401166][ T4749] ? __do_fast_syscall_32+0xbe/0x570 [ 2024.401194][ T4749] __do_fast_syscall_32+0x1f7/0x570 [ 2024.401218][ T4749] ? rcu_is_watching+0x15/0xb0 [ 2024.401236][ T4749] ? do_fast_syscall_32+0x34/0x80 [ 2024.401265][ T4749] do_fast_syscall_32+0x34/0x80 [ 2024.401292][ T4749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2024.401314][ T4749] RIP: 0023:0xf70ed539 [ 2024.401330][ T4749] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2024.401346][ T4749] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2024.401366][ T4749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2024.401380][ T4749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2024.401391][ T4749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2024.401402][ T4749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2024.401413][ T4749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2024.401444][ T4749] [ 2025.205890][T17986] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2025.366191][T17986] usb 2-1: Using ep0 maxpacket: 8 [ 2025.376228][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8962'. [ 2025.410151][T17986] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2025.424561][T17986] usb 2-1: config 0 has no interface number 0 [ 2025.436408][T17986] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2025.501883][T17986] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2025.556122][T17986] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2025.606162][T17986] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2025.631314][ T4766] can: request_module (can-proto-3) failed. [ 2025.655544][T17986] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2025.785714][T17986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.817221][T17986] usb 2-1: config 0 descriptor?? [ 2025.891721][T17986] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2026.189532][ T4754] netlink: 'syz.1.8959': attribute type 3 has an invalid length. [ 2026.214031][ T9] usb 2-1: USB disconnect, device number 116 [ 2026.237192][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2026.612381][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8964'. [ 2027.302573][ T4781] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.310144][ T4781] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.786505][ T4781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2027.827545][ T4781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2027.877378][ T4795] can: request_module (can-proto-3) failed. [ 2028.004982][T31011] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.038566][T31011] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.067580][T31011] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.096761][T31011] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.379563][ T4807] can: request_module (can-proto-3) failed. [ 2029.007834][ T4821] can: request_module (can-proto-3) failed. [ 2030.361489][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8977'. [ 2031.125892][ T4845] netlink: 'syz.6.8977': attribute type 1 has an invalid length. [ 2031.194598][ T4849] can: request_module (can-proto-3) failed. [ 2032.117627][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8980'. [ 2033.404401][ T4882] can: request_module (can-proto-3) failed. [ 2036.365757][ T4928] can: request_module (can-proto-3) failed. [ 2037.459970][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.467267][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.545878][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2037.655967][ T4648] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 2037.941961][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2037.953097][ T4648] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2037.964941][ T4648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2037.976903][ T4648] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2038.002513][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8999'. [ 2038.014741][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.022904][ T9] usb 2-1: Product: syz [ 2038.032725][ T9] usb 2-1: Manufacturer: syz [ 2038.063676][ T4648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.063686][ T9] usb 2-1: SerialNumber: syz [ 2038.094666][ T4648] usb 6-1: config 0 descriptor?? [ 2038.124285][ T4945] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2038.157165][ T4648] hub 6-1:0.0: USB hub found [ 2038.348387][ T4648] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 2038.372219][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.387032][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.973157][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 2038.987059][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 2039.003422][ T9] usb 2-1: USB disconnect, device number 117 [ 2039.419902][ T4965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9002'. [ 2039.606941][T32247] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2039.856967][T32247] usb 4-1: Using ep0 maxpacket: 8 [ 2039.864545][T32247] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2039.874483][T32247] usb 4-1: config 0 has no interface number 0 [ 2039.881411][T32247] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2039.894093][T32247] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2039.906861][T32247] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2040.079131][T32247] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2040.094962][T32247] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2040.107319][T32247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.155656][T32247] usb 4-1: config 0 descriptor?? [ 2040.185091][T32247] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2040.740245][ T4963] netlink: 'syz.3.9001': attribute type 3 has an invalid length. [ 2040.891148][T32247] usb 4-1: USB disconnect, device number 83 [ 2040.901446][T32247] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2040.949183][ T4648] usbhid 6-1:0.0: can't add hid device: -71 [ 2040.960296][ T4648] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2040.997356][ T4648] usb 6-1: USB disconnect, device number 114 [ 2041.565393][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9008'. [ 2041.743019][ T5005] FAULT_INJECTION: forcing a failure. [ 2041.743019][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.756667][ T5005] CPU: 0 UID: 0 PID: 5005 Comm: syz.1.9011 Tainted: G L syzkaller #0 PREEMPT(full) [ 2041.756696][ T5005] Tainted: [L]=SOFTLOCKUP [ 2041.756703][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2041.756715][ T5005] Call Trace: [ 2041.756723][ T5005] [ 2041.756731][ T5005] dump_stack_lvl+0x189/0x250 [ 2041.756758][ T5005] ? __pfx____ratelimit+0x10/0x10 [ 2041.756781][ T5005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2041.756801][ T5005] ? __pfx__printk+0x10/0x10 [ 2041.756828][ T5005] ? __pfx___might_resched+0x10/0x10 [ 2041.756849][ T5005] ? fs_reclaim_acquire+0x7d/0x100 [ 2041.756872][ T5005] should_fail_ex+0x414/0x560 [ 2041.756897][ T5005] should_failslab+0xa8/0x100 [ 2041.756919][ T5005] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 2041.756945][ T5005] ? hugetlbfs_alloc_inode+0xef/0x130 [ 2041.756975][ T5005] hugetlbfs_alloc_inode+0xef/0x130 [ 2041.757001][ T5005] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 2041.757024][ T5005] alloc_inode+0x6a/0x1b0 [ 2041.757046][ T5005] new_inode+0x22/0x170 [ 2041.757065][ T5005] ? resv_map_alloc+0x1da/0x2c0 [ 2041.757092][ T5005] hugetlbfs_get_inode+0x80/0x640 [ 2041.757117][ T5005] ? in_group_p+0x83/0x1c0 [ 2041.757142][ T5005] hugetlb_file_setup+0x28f/0x630 [ 2041.757167][ T5005] newseg+0x43d/0xbb0 [ 2041.757198][ T5005] ? __pfx_newseg+0x10/0x10 [ 2041.757230][ T5005] ipcget+0x1c8/0xea0 [ 2041.757256][ T5005] ? __pfx_vfs_write+0x10/0x10 [ 2041.757276][ T5005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2041.757304][ T5005] ? __pfx_ipcget+0x10/0x10 [ 2041.757335][ T5005] __ia32_sys_shmget+0x139/0x180 [ 2041.757358][ T5005] ? exc_page_fault+0x82/0x100 [ 2041.757381][ T5005] ? __pfx___ia32_sys_shmget+0x10/0x10 [ 2041.757408][ T5005] ? __do_fast_syscall_32+0xbe/0x570 [ 2041.757443][ T5005] __do_fast_syscall_32+0x1f7/0x570 [ 2041.757465][ T5005] ? lockdep_hardirqs_on+0x98/0x140 [ 2041.757486][ T5005] ? do_fast_syscall_32+0x34/0x80 [ 2041.757509][ T5005] ? irqentry_exit+0x10f/0x660 [ 2041.757528][ T5005] ? rcu_is_watching+0x15/0xb0 [ 2041.757553][ T5005] do_fast_syscall_32+0x34/0x80 [ 2041.757576][ T5005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.757597][ T5005] RIP: 0023:0xf7fa1539 [ 2041.757613][ T5005] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2041.757628][ T5005] RSP: 002b:00000000f545455c EFLAGS: 00000206 ORIG_RAX: 000000000000018b [ 2041.757648][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002000 [ 2041.757661][ T5005] RDX: 0000000000004800 RSI: 0000000080260000 RDI: 0000000000000000 [ 2041.757673][ T5005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2041.757683][ T5005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2041.757694][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2041.757722][ T5005] [ 2042.459188][ T5001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2043.105804][ T5930] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2043.326380][ T5930] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2043.338287][ T5930] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 2043.379361][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.404770][ T5930] usb 7-1: Product: syz [ 2043.409031][ T5930] usb 7-1: Manufacturer: syz [ 2043.413608][ T5930] usb 7-1: SerialNumber: syz [ 2044.238247][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9018'. [ 2044.407934][T32246] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2044.575956][T32246] usb 6-1: Using ep0 maxpacket: 8 [ 2044.582952][T32246] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2044.593020][T32246] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 2044.622749][T32246] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2044.651258][T32246] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2044.671069][T32246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.694258][T32246] usb 6-1: Product: syz [ 2044.703146][T32246] usb 6-1: Manufacturer: syz [ 2044.719826][T32246] usb 6-1: SerialNumber: syz [ 2044.765392][T32246] hso 6-1:6.0: Can't find BULK IN endpoint [ 2044.849956][ T5930] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input224 [ 2044.928739][ T5930] usb 7-1: USB disconnect, device number 37 [ 2044.937124][ T5184] pxrc 7-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 2044.982423][T32246] usb 6-1: USB disconnect, device number 115 [ 2045.140393][ T5043] can: request_module (can-proto-3) failed. [ 2045.231124][ T5051] can: request_module (can-proto-3) failed. [ 2045.649870][ T5930] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2045.856285][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 2045.880358][ T5930] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2045.890767][ T5930] usb 7-1: config 0 has no interface number 0 [ 2045.898818][ T5930] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2045.910394][ T5930] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2045.928993][ T5930] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2046.280594][ T5930] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2046.306075][ T5930] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2046.330753][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.375977][ T5930] usb 7-1: config 0 descriptor?? [ 2046.384232][ T5930] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2046.611436][ T5068] IPv6: NLM_F_CREATE should be specified when creating new route [ 2046.670176][ T5050] netlink: 'syz.6.9021': attribute type 3 has an invalid length. [ 2046.686394][ T9] usb 7-1: USB disconnect, device number 38 [ 2046.699841][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2047.332769][ T5082] binder: 5081:5082 ioctl c018620c 800002c0 returned -1 [ 2047.746317][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9030'. [ 2048.567117][ T5103] can: request_module (can-proto-3) failed. [ 2048.632302][ T5108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2049.293006][ T5118] FAULT_INJECTION: forcing a failure. [ 2049.293006][ T5118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.477269][ T5115] can: request_module (can-proto-3) failed. [ 2049.525770][ T5118] CPU: 1 UID: 0 PID: 5118 Comm: syz.3.9037 Tainted: G L syzkaller #0 PREEMPT(full) [ 2049.525799][ T5118] Tainted: [L]=SOFTLOCKUP [ 2049.525806][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2049.525817][ T5118] Call Trace: [ 2049.525825][ T5118] [ 2049.525833][ T5118] dump_stack_lvl+0x189/0x250 [ 2049.525859][ T5118] ? __pfx____ratelimit+0x10/0x10 [ 2049.525881][ T5118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2049.525901][ T5118] ? __pfx__printk+0x10/0x10 [ 2049.525924][ T5118] ? __might_fault+0xb0/0x130 [ 2049.525957][ T5118] should_fail_ex+0x414/0x560 [ 2049.525981][ T5118] _copy_from_user+0x2d/0xb0 [ 2049.526003][ T5118] kstrtouint_from_user+0xc4/0x170 [ 2049.526024][ T5118] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2049.526059][ T5118] proc_fail_nth_write+0x88/0x200 [ 2049.526079][ T5118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2049.526103][ T5118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2049.526121][ T5118] vfs_write+0x27e/0xb30 [ 2049.526147][ T5118] ? __pfx_vfs_write+0x10/0x10 [ 2049.526165][ T5118] ? __fget_files+0x2a/0x420 [ 2049.526191][ T5118] ? __fget_files+0x3a0/0x420 [ 2049.526209][ T5118] ? __fget_files+0x2a/0x420 [ 2049.526239][ T5118] ksys_write+0x145/0x250 [ 2049.526257][ T5118] ? __pfx_ksys_write+0x10/0x10 [ 2049.526274][ T5118] ? __do_fast_syscall_32+0xbe/0x570 [ 2049.526300][ T5118] __do_fast_syscall_32+0x1f7/0x570 [ 2049.526324][ T5118] ? rcu_is_watching+0x15/0xb0 [ 2049.526344][ T5118] ? do_fast_syscall_32+0x34/0x80 [ 2049.526372][ T5118] do_fast_syscall_32+0x34/0x80 [ 2049.526395][ T5118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2049.526425][ T5118] RIP: 0023:0xf709d539 [ 2049.526441][ T5118] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2049.526456][ T5118] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2049.526475][ T5118] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d620 [ 2049.526488][ T5118] RDX: 0000000000000001 RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 2049.526499][ T5118] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2049.526510][ T5118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2049.526520][ T5118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2049.526550][ T5118] [ 2050.152411][ T5126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2050.199105][ T5131] FAULT_INJECTION: forcing a failure. [ 2050.199105][ T5131] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.232169][ T5131] CPU: 1 UID: 0 PID: 5131 Comm: syz.5.9038 Tainted: G L syzkaller #0 PREEMPT(full) [ 2050.232190][ T5131] Tainted: [L]=SOFTLOCKUP [ 2050.232195][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2050.232201][ T5131] Call Trace: [ 2050.232207][ T5131] [ 2050.232213][ T5131] dump_stack_lvl+0x189/0x250 [ 2050.232230][ T5131] ? __pfx____ratelimit+0x10/0x10 [ 2050.232243][ T5131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2050.232254][ T5131] ? __pfx__printk+0x10/0x10 [ 2050.232272][ T5131] ? __pfx___might_resched+0x10/0x10 [ 2050.232284][ T5131] ? fs_reclaim_acquire+0x7d/0x100 [ 2050.232297][ T5131] should_fail_ex+0x414/0x560 [ 2050.232311][ T5131] should_failslab+0xa8/0x100 [ 2050.232324][ T5131] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2050.232339][ T5131] ? __alloc_skb+0x255/0x430 [ 2050.232352][ T5131] ? napi_skb_cache_get+0x4a5/0x780 [ 2050.232363][ T5131] ? napi_skb_cache_get+0x151/0x780 [ 2050.232379][ T5131] __alloc_skb+0x255/0x430 [ 2050.232393][ T5131] ? __pfx___alloc_skb+0x10/0x10 [ 2050.232410][ T5131] ? netlink_ack_tlv_len+0x6c/0x210 [ 2050.232421][ T5131] netlink_ack+0x146/0xa50 [ 2050.232430][ T5131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2050.232442][ T5131] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 2050.232453][ T5131] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 2050.232472][ T5131] netlink_rcv_skb+0x28c/0x470 [ 2050.232483][ T5131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2050.232496][ T5131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2050.232521][ T5131] ? down_read+0x274/0x2e0 [ 2050.232535][ T5131] ? genl_rcv+0xd/0x40 [ 2050.232547][ T5131] genl_rcv+0x28/0x40 [ 2050.232558][ T5131] netlink_unicast+0x82f/0x9e0 [ 2050.232577][ T5131] ? __pfx_netlink_unicast+0x10/0x10 [ 2050.232591][ T5131] ? netlink_sendmsg+0x642/0xb30 [ 2050.232600][ T5131] ? skb_put+0x11b/0x210 [ 2050.232615][ T5131] netlink_sendmsg+0x805/0xb30 [ 2050.232630][ T5131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2050.232641][ T5131] ? __import_iovec+0x5d4/0x7f0 [ 2050.232653][ T5131] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2050.232668][ T5131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2050.232677][ T5131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2050.232688][ T5131] __sock_sendmsg+0x21c/0x270 [ 2050.232702][ T5131] ____sys_sendmsg+0x505/0x820 [ 2050.232715][ T5131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2050.232731][ T5131] ? kstrtouint+0x6e/0xe0 [ 2050.232745][ T5131] ___sys_sendmsg+0x21f/0x2a0 [ 2050.232756][ T5131] ? __pfx____sys_sendmsg+0x10/0x10 [ 2050.232770][ T5131] ? rcu_read_lock_any_held+0xb3/0x120 [ 2050.232797][ T5131] ? __fget_files+0x2a/0x420 [ 2050.232808][ T5131] ? __fget_files+0x3a0/0x420 [ 2050.232825][ T5131] __sys_sendmsg+0x164/0x220 [ 2050.232835][ T5131] ? __pfx___sys_sendmsg+0x10/0x10 [ 2050.232850][ T5131] ? __pfx_ksys_write+0x10/0x10 [ 2050.232862][ T5131] ? __do_fast_syscall_32+0xbe/0x570 [ 2050.232877][ T5131] __do_fast_syscall_32+0x1f7/0x570 [ 2050.232891][ T5131] ? rcu_is_watching+0x15/0xb0 [ 2050.232902][ T5131] ? do_fast_syscall_32+0x34/0x80 [ 2050.232917][ T5131] do_fast_syscall_32+0x34/0x80 [ 2050.232930][ T5131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2050.232942][ T5131] RIP: 0023:0xf7f93539 [ 2050.232951][ T5131] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2050.232960][ T5131] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2050.232972][ T5131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800029c0 [ 2050.232979][ T5131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2050.232986][ T5131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2050.232991][ T5131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2050.232997][ T5131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2050.233012][ T5131] [ 2051.524800][ T5154] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9044'. [ 2051.634449][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9045'. [ 2051.981594][ T5160] FAULT_INJECTION: forcing a failure. [ 2051.981594][ T5160] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.995200][ T5160] CPU: 0 UID: 0 PID: 5160 Comm: syz.0.9047 Tainted: G L syzkaller #0 PREEMPT(full) [ 2051.995226][ T5160] Tainted: [L]=SOFTLOCKUP [ 2051.995232][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2051.995241][ T5160] Call Trace: [ 2051.995248][ T5160] [ 2051.995255][ T5160] dump_stack_lvl+0x189/0x250 [ 2051.995280][ T5160] ? __pfx____ratelimit+0x10/0x10 [ 2051.995302][ T5160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2051.995330][ T5160] ? __pfx__printk+0x10/0x10 [ 2051.995356][ T5160] ? __pfx___might_resched+0x10/0x10 [ 2051.995371][ T5160] ? fs_reclaim_acquire+0x7d/0x100 [ 2051.995391][ T5160] should_fail_ex+0x414/0x560 [ 2051.995414][ T5160] should_failslab+0xa8/0x100 [ 2051.995434][ T5160] __kvmalloc_node_noprof+0x175/0x920 [ 2051.995454][ T5160] ? vmemdup_user+0x2b/0xd0 [ 2051.995477][ T5160] vmemdup_user+0x2b/0xd0 [ 2051.995496][ T5160] kvm_vm_ioctl+0xbd0/0xc60 [ 2051.995517][ T5160] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2051.995534][ T5160] ? kasan_save_track+0x4f/0x80 [ 2051.995547][ T5160] ? kasan_save_track+0x3e/0x80 [ 2051.995561][ T5160] ? kasan_save_free_info+0x46/0x50 [ 2051.995582][ T5160] ? __kasan_slab_free+0x5c/0x80 [ 2051.995597][ T5160] ? kfree+0x1c0/0x660 [ 2051.995616][ T5160] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 2051.995635][ T5160] ? security_file_ioctl_compat+0xcb/0x2d0 [ 2051.995652][ T5160] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 2051.995676][ T5160] ? __do_fast_syscall_32+0x1f7/0x570 [ 2051.995696][ T5160] ? do_fast_syscall_32+0x34/0x80 [ 2051.995715][ T5160] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2051.995749][ T5160] ? kvm_arch_vm_compat_ioctl+0x119/0x220 [ 2051.995769][ T5160] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 2051.995811][ T5160] ? kasan_quarantine_put+0xdd/0x220 [ 2051.995828][ T5160] ? lockdep_hardirqs_on+0x98/0x140 [ 2051.995858][ T5160] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2051.995880][ T5160] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2051.995906][ T5160] ? do_vfs_ioctl+0xbe8/0x1430 [ 2051.995964][ T5160] kvm_vm_compat_ioctl+0x265/0x330 [ 2051.995987][ T5160] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 2051.996011][ T5160] ? __fget_files+0x3a0/0x420 [ 2051.996030][ T5160] ? __fget_files+0x2a/0x420 [ 2051.996053][ T5160] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2051.996074][ T5160] __ia32_compat_sys_ioctl+0x543/0x840 [ 2051.996102][ T5160] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2051.996126][ T5160] ? __fget_files+0x3a0/0x420 [ 2051.996152][ T5160] ? fput+0xa0/0xd0 [ 2051.996173][ T5160] ? ksys_write+0x22a/0x250 [ 2051.996189][ T5160] ? exc_page_fault+0x82/0x100 [ 2051.996211][ T5160] ? __pfx_ksys_write+0x10/0x10 [ 2051.996231][ T5160] ? __do_fast_syscall_32+0xbe/0x570 [ 2051.996258][ T5160] __do_fast_syscall_32+0x1f7/0x570 [ 2051.996282][ T5160] ? rcu_is_watching+0x15/0xb0 [ 2051.996301][ T5160] ? do_fast_syscall_32+0x34/0x80 [ 2051.996334][ T5160] do_fast_syscall_32+0x34/0x80 [ 2051.996357][ T5160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2051.996378][ T5160] RIP: 0023:0xf706d539 [ 2051.996393][ T5160] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2051.996408][ T5160] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2051.996426][ T5160] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004008ae6a [ 2051.996438][ T5160] RDX: 0000000080001340 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.996449][ T5160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2051.996459][ T5160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2051.996469][ T5160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2051.996496][ T5160] [ 2052.757545][ T5174] can: request_module (can-proto-3) failed. [ 2053.306014][T32246] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2053.466743][T32246] usb 4-1: device descriptor read/64, error -71 [ 2053.737512][T32246] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2053.916041][T32246] usb 4-1: device descriptor read/64, error -71 [ 2054.026426][T32246] usb usb4-port1: attempt power cycle [ 2054.219309][ T5212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2054.499906][T32246] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2054.527439][T32246] usb 4-1: device descriptor read/8, error -71 [ 2054.715591][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9059'. [ 2054.781945][T32246] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2054.858530][T32246] usb 4-1: device descriptor read/8, error -71 [ 2054.967064][T32246] usb usb4-port1: unable to enumerate USB device [ 2056.088030][ T5241] can: request_module (can-proto-3) failed. [ 2056.184327][ T5249] vlan2: entered allmulticast mode [ 2056.189663][ T5249] macsec0: entered allmulticast mode [ 2056.195063][ T5249] veth1_macvtap: entered allmulticast mode [ 2056.913104][ T5257] can: request_module (can-proto-3) failed. [ 2057.644802][ T5270] vti0: entered promiscuous mode [ 2057.650294][ T5270] vti0: entered allmulticast mode [ 2059.700675][ T5295] FAULT_INJECTION: forcing a failure. [ 2059.700675][ T5295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.714787][ T5295] CPU: 0 UID: 0 PID: 5295 Comm: syz.6.9079 Tainted: G L syzkaller #0 PREEMPT(full) [ 2059.714816][ T5295] Tainted: [L]=SOFTLOCKUP [ 2059.714822][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2059.714833][ T5295] Call Trace: [ 2059.714842][ T5295] [ 2059.714851][ T5295] dump_stack_lvl+0x189/0x250 [ 2059.714877][ T5295] ? __pfx____ratelimit+0x10/0x10 [ 2059.714899][ T5295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2059.714919][ T5295] ? __pfx__printk+0x10/0x10 [ 2059.714957][ T5295] should_fail_ex+0x414/0x560 [ 2059.714982][ T5295] _copy_to_user+0x31/0xb0 [ 2059.715008][ T5295] sctp_getsockopt_pr_assocstatus+0x594/0x690 [ 2059.715034][ T5295] ? __pfx_sctp_getsockopt_pr_assocstatus+0x10/0x10 [ 2059.715055][ T5295] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2059.715089][ T5295] sctp_getsockopt+0xb06/0xb60 [ 2059.715110][ T5295] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2059.715135][ T5295] do_sock_getsockopt+0x2b4/0x3d0 [ 2059.715164][ T5295] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2059.715188][ T5295] ? __do_fast_syscall_32+0x10/0x570 [ 2059.715211][ T5295] ? __fget_files+0x2a/0x420 [ 2059.715231][ T5295] ? __fget_files+0x3a0/0x420 [ 2059.715250][ T5295] ? __fget_files+0x2a/0x420 [ 2059.715278][ T5295] __ia32_sys_getsockopt+0x1a5/0x250 [ 2059.715302][ T5295] ? __do_fast_syscall_32+0x10/0x570 [ 2059.715327][ T5295] ? __do_fast_syscall_32+0x10/0x570 [ 2059.715355][ T5295] __do_fast_syscall_32+0x1f7/0x570 [ 2059.715378][ T5295] ? rcu_is_watching+0x15/0xb0 [ 2059.715406][ T5295] ? do_fast_syscall_32+0x34/0x80 [ 2059.715435][ T5295] do_fast_syscall_32+0x34/0x80 [ 2059.715458][ T5295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2059.715479][ T5295] RIP: 0023:0xf70ed539 [ 2059.715496][ T5295] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2059.715511][ T5295] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2059.715530][ T5295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 2059.715543][ T5295] RDX: 0000000000000073 RSI: 0000000080000040 RDI: 0000000080000080 [ 2059.715554][ T5295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2059.715565][ T5295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2059.715576][ T5295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2059.715605][ T5295] [ 2060.005063][ T5298] can: request_module (can-proto-3) failed. [ 2060.373991][ T5308] netem: invalid attributes len -3 [ 2060.379784][ T5308] netem: change failed [ 2060.408521][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9077'. [ 2060.626070][T32247] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 2060.834459][T32247] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2060.843920][T32247] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.857272][T32247] usb 7-1: config 0 descriptor?? [ 2060.865431][T32247] ums-realtek 7-1:0.0: USB Mass Storage device detected [ 2061.061810][ T5315] can: request_module (can-proto-3) failed. [ 2061.086311][ T9] usb 7-1: USB disconnect, device number 39 [ 2061.508028][ T5333] can: request_module (can-proto-3) failed. [ 2061.605754][ T9] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 2061.755972][ T9] usb 4-1: device descriptor read/64, error -71 [ 2061.918227][ T5340] can: request_module (can-proto-3) failed. [ 2062.011193][ T9] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 2062.219642][ T9] usb 4-1: device descriptor read/64, error -71 [ 2062.407950][ T9] usb usb4-port1: attempt power cycle [ 2062.921377][ T9] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 2062.960382][ T9] usb 4-1: device descriptor read/8, error -71 [ 2063.033005][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9090'. [ 2063.055943][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2063.079596][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9090'. [ 2063.250461][ T9] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 2063.546818][ T9] usb 4-1: device descriptor read/8, error -71 [ 2063.683743][ T9] usb usb4-port1: unable to enumerate USB device [ 2063.796373][ T5357] can: request_module (can-proto-3) failed. [ 2064.136032][ T9] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2064.321982][ T5375] FAULT_INJECTION: forcing a failure. [ 2064.321982][ T5375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2064.335722][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 2064.350834][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.369885][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 2064.383270][ T5375] CPU: 0 UID: 0 PID: 5375 Comm: syz.0.9097 Tainted: G L syzkaller #0 PREEMPT(full) [ 2064.383295][ T5375] Tainted: [L]=SOFTLOCKUP [ 2064.383301][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2064.383311][ T5375] Call Trace: [ 2064.383319][ T5375] [ 2064.383326][ T5375] dump_stack_lvl+0x189/0x250 [ 2064.383347][ T5375] ? __pfx____ratelimit+0x10/0x10 [ 2064.383368][ T5375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2064.383385][ T5375] ? __pfx__printk+0x10/0x10 [ 2064.383408][ T5375] ? __might_fault+0xb0/0x130 [ 2064.383440][ T5375] should_fail_ex+0x414/0x560 [ 2064.383463][ T5375] copy_fpstate_to_sigframe+0x9fb/0xcc0 [ 2064.383491][ T5375] ? copy_fpstate_to_sigframe+0x181/0xcc0 [ 2064.383519][ T5375] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 2064.383563][ T5375] ? fpu__alloc_mathframe+0xad/0x130 [ 2064.383587][ T5375] get_sigframe+0x58d/0x7d0 [ 2064.383613][ T5375] ? __pfx_get_sigframe+0x10/0x10 [ 2064.383633][ T5375] ? irqentry_exit+0x5dd/0x660 [ 2064.383654][ T5375] ? trace_irq_disable+0x37/0x100 [ 2064.383688][ T5375] ia32_setup_rt_frame+0x106/0xb70 [ 2064.383713][ T5375] ? _raw_spin_unlock_irq+0x29/0x50 [ 2064.383734][ T5375] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2064.383751][ T5375] ? get_signal+0x1150/0x1340 [ 2064.383775][ T5375] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 2064.383804][ T5375] arch_do_signal_or_restart+0x409/0x7a0 [ 2064.383830][ T5375] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2064.383893][ T5375] ? exit_to_user_mode_loop+0x55/0x4f0 [ 2064.383916][ T5375] exit_to_user_mode_loop+0x87/0x4f0 [ 2064.383933][ T5375] ? rcu_is_watching+0x15/0xb0 [ 2064.383964][ T5375] __do_fast_syscall_32+0x3cb/0x570 [ 2064.383986][ T5375] ? lockdep_hardirqs_on+0x98/0x140 [ 2064.384006][ T5375] ? do_fast_syscall_32+0x34/0x80 [ 2064.384026][ T5375] ? asm_int80_emulation+0x1a/0x20 [ 2064.384043][ T5375] ? do_int80_emulation+0x224/0x410 [ 2064.384066][ T5375] do_fast_syscall_32+0x34/0x80 [ 2064.384087][ T5375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2064.384107][ T5375] RIP: 0023:0xf706d539 [ 2064.384124][ T5375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2064.384138][ T5375] RSP: 002b:00000000f545d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2064.384157][ T5375] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f545d610 [ 2064.384168][ T5375] RDX: 0000000000000001 RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 2064.384178][ T5375] RBP: 00000000f7434f80 R08: 0000000000000000 R09: 0000000000000000 [ 2064.384189][ T5375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2064.384199][ T5375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2064.384227][ T5375] [ 2064.652375][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.696561][ T9] usb 6-1: config 0 descriptor?? [ 2064.707167][ T9] usb 6-1: bad CDC descriptors [ 2064.906224][ T5384] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9100'. [ 2064.926512][ T794] usb 6-1: USB disconnect, device number 116 [ 2065.273364][ T5396] can: request_module (can-proto-3) failed. [ 2065.624738][ T5408] vti0: entered promiscuous mode [ 2065.630531][ T5408] vti0: entered allmulticast mode [ 2066.077274][ T5418] FAULT_INJECTION: forcing a failure. [ 2066.077274][ T5418] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.140734][ T5418] CPU: 0 UID: 0 PID: 5418 Comm: syz.0.9108 Tainted: G L syzkaller #0 PREEMPT(full) [ 2066.140765][ T5418] Tainted: [L]=SOFTLOCKUP [ 2066.140772][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2066.140783][ T5418] Call Trace: [ 2066.140790][ T5418] [ 2066.140799][ T5418] dump_stack_lvl+0x189/0x250 [ 2066.140824][ T5418] ? __pfx____ratelimit+0x10/0x10 [ 2066.140846][ T5418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2066.140866][ T5418] ? __pfx__printk+0x10/0x10 [ 2066.140895][ T5418] ? __pfx___might_resched+0x10/0x10 [ 2066.140914][ T5418] ? fs_reclaim_acquire+0x7d/0x100 [ 2066.140936][ T5418] should_fail_ex+0x414/0x560 [ 2066.140961][ T5418] should_failslab+0xa8/0x100 [ 2066.140983][ T5418] __kmalloc_cache_noprof+0x84/0x700 [ 2066.140999][ T5418] ? __genradix_ptr_alloc+0x463/0x4a0 [ 2066.141022][ T5418] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2066.141055][ T5418] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2066.141084][ T5418] sctp_association_new+0x15d3/0x25c0 [ 2066.141122][ T5418] sctp_connect_new_asoc+0x2c5/0x690 [ 2066.141147][ T5418] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2066.141178][ T5418] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 2066.141203][ T5418] __sctp_connect+0x5ba/0xd50 [ 2066.141237][ T5418] ? __pfx___sctp_connect+0x10/0x10 [ 2066.141262][ T5418] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2066.141280][ T5418] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2066.141304][ T5418] sctp_getsockopt_connectx3+0x2c4/0x440 [ 2066.141330][ T5418] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 2066.141351][ T5418] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2066.141383][ T5418] sctp_getsockopt+0x98a/0xb60 [ 2066.141403][ T5418] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2066.141428][ T5418] do_sock_getsockopt+0x2b4/0x3d0 [ 2066.141455][ T5418] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2066.141479][ T5418] ? __do_fast_syscall_32+0x10/0x570 [ 2066.141501][ T5418] ? __fget_files+0x2a/0x420 [ 2066.141521][ T5418] ? __fget_files+0x3a0/0x420 [ 2066.141540][ T5418] ? __fget_files+0x2a/0x420 [ 2066.141567][ T5418] __ia32_sys_getsockopt+0x1a5/0x250 [ 2066.141588][ T5418] ? __do_fast_syscall_32+0x10/0x570 [ 2066.141610][ T5418] ? __do_fast_syscall_32+0x10/0x570 [ 2066.141632][ T5418] __do_fast_syscall_32+0x1f7/0x570 [ 2066.141655][ T5418] ? rcu_is_watching+0x15/0xb0 [ 2066.141674][ T5418] ? do_fast_syscall_32+0x34/0x80 [ 2066.141701][ T5418] do_fast_syscall_32+0x34/0x80 [ 2066.141723][ T5418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2066.141744][ T5418] RIP: 0023:0xf706d539 [ 2066.141760][ T5418] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2066.141775][ T5418] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2066.141793][ T5418] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 2066.141805][ T5418] RDX: 000000000000006f RSI: 00000000800000c0 RDI: 0000000080000100 [ 2066.141816][ T5418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2066.141827][ T5418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2066.141838][ T5418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2066.141867][ T5418] [ 2067.032988][ T5427] can: request_module (can-proto-3) failed. [ 2068.931945][ T5453] can: request_module (can-proto-3) failed. [ 2069.011728][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9116'. [ 2069.590460][ T5479] netlink: 'syz.3.9122': attribute type 1 has an invalid length. [ 2069.712207][ T5481] can: request_module (can-proto-3) failed. [ 2069.750903][ T5487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9122'. [ 2071.568842][ T5519] can: request_module (can-proto-3) failed. [ 2073.095935][T32247] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 2073.225960][T32247] usb 4-1: device descriptor read/64, error -71 [ 2073.249001][ T5542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.356328][ T5542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.449324][ T5541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.477029][T32247] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 2073.666420][T32247] usb 4-1: device descriptor read/64, error -71 [ 2073.738979][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9136'. [ 2073.793357][T32247] usb usb4-port1: attempt power cycle [ 2074.059079][ T5553] can: request_module (can-proto-3) failed. [ 2074.156648][T32247] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 2074.195892][T32247] usb 4-1: device descriptor read/8, error -71 [ 2074.675803][T32247] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 2074.706544][T32247] usb 4-1: device descriptor read/8, error -71 [ 2074.816781][T32247] usb usb4-port1: unable to enumerate USB device [ 2074.820026][ T5566] FAULT_INJECTION: forcing a failure. [ 2074.820026][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.897959][ T5566] CPU: 0 UID: 0 PID: 5566 Comm: syz.6.9139 Tainted: G L syzkaller #0 PREEMPT(full) [ 2074.897999][ T5566] Tainted: [L]=SOFTLOCKUP [ 2074.898006][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2074.898017][ T5566] Call Trace: [ 2074.898026][ T5566] [ 2074.898035][ T5566] dump_stack_lvl+0x189/0x250 [ 2074.898061][ T5566] ? __pfx____ratelimit+0x10/0x10 [ 2074.898083][ T5566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2074.898104][ T5566] ? __pfx__printk+0x10/0x10 [ 2074.898131][ T5566] ? __pfx___might_resched+0x10/0x10 [ 2074.898151][ T5566] ? fs_reclaim_acquire+0x7d/0x100 [ 2074.898175][ T5566] should_fail_ex+0x414/0x560 [ 2074.898207][ T5566] should_failslab+0xa8/0x100 [ 2074.898230][ T5566] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2074.898256][ T5566] ? __alloc_skb+0x255/0x430 [ 2074.898277][ T5566] ? napi_skb_cache_get+0x4a5/0x780 [ 2074.898302][ T5566] ? napi_skb_cache_get+0x151/0x780 [ 2074.898329][ T5566] __alloc_skb+0x255/0x430 [ 2074.898355][ T5566] ? __pfx___alloc_skb+0x10/0x10 [ 2074.898385][ T5566] ? netlink_ack_tlv_len+0x6c/0x210 [ 2074.898406][ T5566] netlink_ack+0x146/0xa50 [ 2074.898421][ T5566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2074.898441][ T5566] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2074.898465][ T5566] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2074.898501][ T5566] netlink_rcv_skb+0x28c/0x470 [ 2074.898519][ T5566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2074.898542][ T5566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2074.898574][ T5566] ? down_read+0x274/0x2e0 [ 2074.898596][ T5566] ? genl_rcv+0xd/0x40 [ 2074.898619][ T5566] genl_rcv+0x28/0x40 [ 2074.898639][ T5566] netlink_unicast+0x82f/0x9e0 [ 2074.898671][ T5566] ? __pfx_netlink_unicast+0x10/0x10 [ 2074.898699][ T5566] ? netlink_sendmsg+0x642/0xb30 [ 2074.898715][ T5566] ? skb_put+0x11b/0x210 [ 2074.898742][ T5566] netlink_sendmsg+0x805/0xb30 [ 2074.898769][ T5566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2074.898791][ T5566] ? __import_iovec+0x5d4/0x7f0 [ 2074.898812][ T5566] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2074.898838][ T5566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2074.898855][ T5566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2074.898874][ T5566] __sock_sendmsg+0x21c/0x270 [ 2074.898899][ T5566] ____sys_sendmsg+0x505/0x820 [ 2074.898922][ T5566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2074.898952][ T5566] ? kstrtouint+0x6e/0xe0 [ 2074.898979][ T5566] ___sys_sendmsg+0x21f/0x2a0 [ 2074.898999][ T5566] ? __pfx____sys_sendmsg+0x10/0x10 [ 2074.899023][ T5566] ? rcu_read_lock_any_held+0xb3/0x120 [ 2074.899073][ T5566] ? __fget_files+0x2a/0x420 [ 2074.899094][ T5566] ? __fget_files+0x3a0/0x420 [ 2074.899125][ T5566] __sys_sendmsg+0x164/0x220 [ 2074.899144][ T5566] ? __pfx___sys_sendmsg+0x10/0x10 [ 2074.899171][ T5566] ? __pfx_ksys_write+0x10/0x10 [ 2074.899198][ T5566] ? __do_fast_syscall_32+0xbe/0x570 [ 2074.899226][ T5566] __do_fast_syscall_32+0x1f7/0x570 [ 2074.899250][ T5566] ? rcu_is_watching+0x15/0xb0 [ 2074.899269][ T5566] ? do_fast_syscall_32+0x34/0x80 [ 2074.899298][ T5566] do_fast_syscall_32+0x34/0x80 [ 2074.899321][ T5566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2074.899342][ T5566] RIP: 0023:0xf70ed539 [ 2074.899358][ T5566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2074.899372][ T5566] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2074.899392][ T5566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 2074.899405][ T5566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2074.899416][ T5566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2074.899426][ T5566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2074.899437][ T5566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2074.899466][ T5566] [ 2076.066633][ T5584] can: request_module (can-proto-3) failed. [ 2076.605064][ T5581] netlink: 'syz.6.9142': attribute type 3 has an invalid length. [ 2077.334159][ T5605] can: request_module (can-proto-3) failed. [ 2078.952734][T17986] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2079.136236][T17986] usb 7-1: Using ep0 maxpacket: 32 [ 2079.156156][T17986] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 2079.166072][T17986] usb 7-1: config 0 has no interface number 0 [ 2079.173603][T17986] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2079.189466][T17986] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2079.199982][T17986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.208427][T17986] usb 7-1: Product: syz [ 2079.212791][T17986] usb 7-1: Manufacturer: syz [ 2079.218657][T17986] usb 7-1: SerialNumber: syz [ 2079.240094][T17986] usb 7-1: config 0 descriptor?? [ 2079.251319][T17986] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2079.263673][T17986] em28xx 7-1:0.132: Video interface 132 found: [ 2079.526425][T17986] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 2079.594378][T17986] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2079.612611][T17986] em28xx 7-1:0.132: board has no eeprom [ 2079.731575][T32247] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2079.790126][T17986] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2079.805741][T17986] em28xx 7-1:0.132: analog set to bulk mode. [ 2079.826203][ T794] em28xx 7-1:0.132: Registering V4L2 extension [ 2079.890789][T17986] usb 7-1: USB disconnect, device number 40 [ 2079.896175][T32247] usb 6-1: Using ep0 maxpacket: 8 [ 2079.903356][T32247] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.906931][T17986] em28xx 7-1:0.132: Disconnecting em28xx [ 2079.945492][T32247] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=d6.1d [ 2079.995412][T32247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.027356][T32247] usb 6-1: config 0 descriptor?? [ 2080.161957][ T794] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 2080.176001][ T794] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 2080.191575][ T794] em28xx 7-1:0.132: No AC97 audio processor [ 2080.201844][ T5644] FAULT_INJECTION: forcing a failure. [ 2080.201844][ T5644] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.221107][ T794] usb 7-1: Decoder not found [ 2080.226335][ T794] em28xx 7-1:0.132: failed to create media graph [ 2080.232727][ T794] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 2080.240107][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: syz.1.9155 Tainted: G L syzkaller #0 PREEMPT(full) [ 2080.240131][ T5644] Tainted: [L]=SOFTLOCKUP [ 2080.240137][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2080.240147][ T5644] Call Trace: [ 2080.240153][ T5644] [ 2080.240161][ T5644] dump_stack_lvl+0x189/0x250 [ 2080.240188][ T5644] ? __pfx____ratelimit+0x10/0x10 [ 2080.240210][ T5644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2080.240230][ T5644] ? __pfx__printk+0x10/0x10 [ 2080.240255][ T5644] ? __pfx___might_resched+0x10/0x10 [ 2080.240274][ T5644] ? fs_reclaim_acquire+0x7d/0x100 [ 2080.240297][ T5644] should_fail_ex+0x414/0x560 [ 2080.240321][ T5644] should_failslab+0xa8/0x100 [ 2080.240340][ T5644] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2080.240365][ T5644] ? __alloc_skb+0x255/0x430 [ 2080.240383][ T5644] ? napi_skb_cache_get+0x4a5/0x780 [ 2080.240413][ T5644] ? napi_skb_cache_get+0x151/0x780 [ 2080.240438][ T5644] __alloc_skb+0x255/0x430 [ 2080.240459][ T5644] ? __pfx___alloc_skb+0x10/0x10 [ 2080.240489][ T5644] tipc_nl_compat_dumpit+0x34d/0x7b0 [ 2080.240514][ T5644] tipc_nl_compat_recv+0x802/0xbe0 [ 2080.240533][ T5644] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2080.240548][ T5644] ? __mutex_trylock_common+0x153/0x260 [ 2080.240569][ T5644] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 2080.240586][ T5644] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 2080.240604][ T5644] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2080.240632][ T5644] ? trace_contention_end+0x39/0x100 [ 2080.240658][ T5644] genl_family_rcv_msg_doit+0x215/0x300 [ 2080.240687][ T5644] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2080.240726][ T5644] genl_rcv_msg+0x60e/0x790 [ 2080.240755][ T5644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2080.240775][ T5644] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2080.240804][ T5644] netlink_rcv_skb+0x208/0x470 [ 2080.240824][ T5644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2080.240847][ T5644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2080.240883][ T5644] ? down_read+0x274/0x2e0 [ 2080.240904][ T5644] ? genl_rcv+0xd/0x40 [ 2080.240924][ T5644] genl_rcv+0x28/0x40 [ 2080.240942][ T5644] netlink_unicast+0x82f/0x9e0 [ 2080.240974][ T5644] ? __pfx_netlink_unicast+0x10/0x10 [ 2080.240997][ T5644] ? netlink_sendmsg+0x642/0xb30 [ 2080.241012][ T5644] ? skb_put+0x11b/0x210 [ 2080.241036][ T5644] netlink_sendmsg+0x805/0xb30 [ 2080.241059][ T5644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2080.241075][ T5644] ? __import_iovec+0x5d4/0x7f0 [ 2080.241091][ T5644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2080.241112][ T5644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2080.241125][ T5644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2080.241140][ T5644] __sock_sendmsg+0x21c/0x270 [ 2080.241162][ T5644] ____sys_sendmsg+0x505/0x820 [ 2080.241186][ T5644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2080.241217][ T5644] ? kstrtouint+0x6e/0xe0 [ 2080.241243][ T5644] ___sys_sendmsg+0x21f/0x2a0 [ 2080.241263][ T5644] ? __pfx____sys_sendmsg+0x10/0x10 [ 2080.241288][ T5644] ? rcu_read_lock_any_held+0xb3/0x120 [ 2080.241339][ T5644] ? __fget_files+0x2a/0x420 [ 2080.241358][ T5644] ? __fget_files+0x3a0/0x420 [ 2080.241389][ T5644] __sys_sendmsg+0x164/0x220 [ 2080.241415][ T5644] ? __pfx___sys_sendmsg+0x10/0x10 [ 2080.241442][ T5644] ? __pfx_ksys_write+0x10/0x10 [ 2080.241461][ T5644] ? __do_fast_syscall_32+0xbe/0x570 [ 2080.241483][ T5644] __do_fast_syscall_32+0x1f7/0x570 [ 2080.241504][ T5644] ? rcu_is_watching+0x15/0xb0 [ 2080.241521][ T5644] ? do_fast_syscall_32+0x34/0x80 [ 2080.241546][ T5644] do_fast_syscall_32+0x34/0x80 [ 2080.241567][ T5644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2080.241587][ T5644] RIP: 0023:0xf7fa1539 [ 2080.241603][ T5644] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2080.241618][ T5644] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2080.241635][ T5644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 2080.241647][ T5644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2080.241657][ T5644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2080.241666][ T5644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2080.241675][ T5644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2080.241700][ T5644] [ 2080.251333][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.271136][ T794] em28xx 7-1:0.132: Remote control support is not available for this card. [ 2080.278769][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.683059][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.693760][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.720967][T17986] em28xx 7-1:0.132: Closing input extension [ 2080.743400][T17986] em28xx 7-1:0.132: Freeing device [ 2080.782220][T32247] usb 6-1: USB disconnect, device number 117 [ 2081.115287][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9156'. [ 2082.742422][ T5680] can: request_module (can-proto-3) failed. [ 2083.243077][ T5686] can: request_module (can-proto-3) failed. [ 2084.755793][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2085.178597][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2085.241171][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2085.846798][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2085.881221][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.900548][ T9] usb 2-1: SerialNumber: syz [ 2086.679174][ T9] cdc_ncm 2-1:1.0: bind() failure [ 2087.156764][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2087.163704][ T9] cdc_ncm 2-1:1.1: bind() failure [ 2087.366423][ T5728] bond1: Removing last ns target with arp_interval on [ 2087.463956][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9173'. [ 2087.476039][ T9] usb 2-1: USB disconnect, device number 118 [ 2087.520912][ T5730] can: request_module (can-proto-3) failed. [ 2087.660462][ T5745] program syz.1.9174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2088.768642][ T5759] can: request_module (can-proto-3) failed. [ 2089.220808][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9178'. [ 2089.988498][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9179'. [ 2090.158406][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9180'. [ 2091.910223][ T5807] gre0: entered promiscuous mode [ 2091.915358][ T5807] gre0: entered allmulticast mode [ 2091.946137][T32247] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2092.096036][T32247] usb 4-1: Using ep0 maxpacket: 8 [ 2092.102882][T32247] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.121983][T32247] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2092.148743][T32247] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 2092.159196][T32247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.321713][T32247] usb 4-1: Product: syz [ 2092.331331][T32247] usb 4-1: Manufacturer: syz [ 2092.346769][T32247] usb 4-1: SerialNumber: syz [ 2092.365488][T32247] usb 4-1: config 0 descriptor?? [ 2092.740685][ T5817] can: request_module (can-proto-3) failed. [ 2094.119973][ T5843] IPVS: Error connecting to the multicast addr [ 2095.149328][ T5852] can: request_module (can-proto-3) failed. [ 2095.716586][T32247] usb 4-1: USB disconnect, device number 96 [ 2095.809048][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9194'. [ 2096.501275][ T30] audit: type=1326 audit(1765049113.118:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.3.9198" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 2096.550715][ T5872] can: request_module (can-proto-3) failed. [ 2096.702399][ T5884] loop5: detected capacity change from 0 to 5407 [ 2096.753805][ T4920] Buffer I/O error on dev loop5, logical block 675, async page read [ 2097.095849][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2097.276361][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2097.297326][ T9] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 2097.307558][ T9] usb 4-1: config 6 has no interface number 0 [ 2097.315015][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2097.335020][ T9] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2097.730076][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2097.755908][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2097.792051][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2097.808761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.894370][ T9] usb 4-1: Product: syz [ 2097.942199][ T9] usb 4-1: Manufacturer: syz [ 2097.951644][ T9] usb 4-1: SerialNumber: syz [ 2098.023260][ T9] hso 4-1:6.2: Failed to find BULK IN ep [ 2098.431477][ T5898] can: request_module (can-proto-3) failed. [ 2098.849144][ T5905] can: request_module (can-proto-3) failed. [ 2098.906816][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.913312][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.678677][T14079] usb 4-1: USB disconnect, device number 97 [ 2100.054407][ T5914] can: request_module (can-proto-3) failed. [ 2100.133385][ T5923] netlink: 'syz.6.9207': attribute type 39 has an invalid length. [ 2100.498349][T31002] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.756770][ T5938] FAULT_INJECTION: forcing a failure. [ 2100.756770][ T5938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2100.771300][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.3.9211 Tainted: G L syzkaller #0 PREEMPT(full) [ 2100.771330][ T5938] Tainted: [L]=SOFTLOCKUP [ 2100.771334][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2100.771340][ T5938] Call Trace: [ 2100.771346][ T5938] [ 2100.771351][ T5938] dump_stack_lvl+0x189/0x250 [ 2100.771368][ T5938] ? __pfx____ratelimit+0x10/0x10 [ 2100.771381][ T5938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2100.771392][ T5938] ? __pfx__printk+0x10/0x10 [ 2100.771406][ T5938] ? __might_fault+0xb0/0x130 [ 2100.771426][ T5938] should_fail_ex+0x414/0x560 [ 2100.771440][ T5938] _copy_from_user+0x2d/0xb0 [ 2100.771454][ T5938] ethtool_set_features+0xf6/0x2e0 [ 2100.771468][ T5938] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2100.771481][ T5938] ? __pfx_ethtool_set_features+0x10/0x10 [ 2100.771496][ T5938] ? __pm_runtime_resume+0x9d/0x180 [ 2100.771511][ T5938] dev_ethtool+0xf5d/0x19c0 [ 2100.771530][ T5938] ? __pfx_dev_ethtool+0x10/0x10 [ 2100.771550][ T5938] ? dev_load+0x21/0x1f0 [ 2100.771565][ T5938] dev_ioctl+0x392/0x1150 [ 2100.771580][ T5938] compat_sock_ioctl+0xc3b/0xc80 [ 2100.771595][ T5938] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2100.771608][ T5938] ? __fget_files+0x3a0/0x420 [ 2100.771620][ T5938] ? __fget_files+0x2a/0x420 [ 2100.771632][ T5938] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2100.771646][ T5938] __ia32_compat_sys_ioctl+0x543/0x840 [ 2100.771662][ T5938] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2100.771677][ T5938] ? __fget_files+0x3a0/0x420 [ 2100.771691][ T5938] ? fput+0xa0/0xd0 [ 2100.771703][ T5938] ? ksys_write+0x22a/0x250 [ 2100.771712][ T5938] ? exc_page_fault+0x82/0x100 [ 2100.771725][ T5938] ? __pfx_ksys_write+0x10/0x10 [ 2100.771736][ T5938] ? __do_fast_syscall_32+0xbe/0x570 [ 2100.771751][ T5938] __do_fast_syscall_32+0x1f7/0x570 [ 2100.771765][ T5938] ? rcu_is_watching+0x15/0xb0 [ 2100.771776][ T5938] ? do_fast_syscall_32+0x34/0x80 [ 2100.771792][ T5938] do_fast_syscall_32+0x34/0x80 [ 2100.771805][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2100.771817][ T5938] RIP: 0023:0xf709d539 [ 2100.771827][ T5938] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2100.771836][ T5938] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2100.771847][ T5938] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008946 [ 2100.771854][ T5938] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2100.771861][ T5938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2100.771867][ T5938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2100.771873][ T5938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2100.771888][ T5938] [ 2101.381295][T29730] Bluetooth: hci2: command 0x0406 tx timeout [ 2101.484552][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9212'. [ 2102.412244][ T5954] can: request_module (can-proto-3) failed. [ 2103.299583][ T5969] can: request_module (can-proto-3) failed. [ 2103.582593][ T5978] can: request_module (can-proto-3) failed. [ 2104.015969][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 2104.380297][ T5989] can: request_module (can-proto-3) failed. [ 2105.270438][ T6007] can: request_module (can-proto-3) failed. [ 2105.746150][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9222'. [ 2106.713168][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9223'. [ 2107.045694][ T6034] can: request_module (can-proto-3) failed. [ 2109.387544][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9231'. [ 2109.823235][ T6068] can: request_module (can-proto-3) failed. [ 2110.463620][ T6084] can: request_module (can-proto-3) failed. [ 2110.905239][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9238'. [ 2112.805099][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9241'. [ 2113.023448][ T6118] can: request_module (can-proto-3) failed. [ 2113.115612][ T6127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9245'. [ 2113.125969][ T794] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2113.126193][ T6127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9245'. [ 2113.659856][ T6129] can: request_module (can-proto-3) failed. [ 2113.925298][ T794] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2114.019451][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.129664][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.161995][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.206049][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.295866][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.316163][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.350153][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.369291][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.394344][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.475865][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9247'. [ 2114.512457][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.530409][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.555282][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.579735][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.601451][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.619173][ T6144] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9248'. [ 2114.682385][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.779332][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.808526][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.885055][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.911066][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.920248][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2114.932093][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2114.952872][ T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.158651][ T794] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.185450][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2115.186730][ T6148] dvmrp0: entered allmulticast mode [ 2115.218221][ T794] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2115.228188][ T794] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2115.310125][ T794] usb 2-1: Product: syz [ 2115.314641][ T794] usb 2-1: Manufacturer: syz [ 2115.323655][ T794] usb 2-1: SerialNumber: syz [ 2115.343941][ T794] usb 2-1: config 0 descriptor?? [ 2115.368044][ T794] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2115.592106][ T6166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2115.639202][ T6155] can: request_module (can-proto-3) failed. [ 2115.720556][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.802862][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.887251][ T9] usb 2-1: USB disconnect, device number 119 [ 2115.894812][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2116.219224][ T6172] can: request_module (can-proto-3) failed. [ 2117.090481][ T6186] can: request_module (can-proto-3) failed. [ 2117.752969][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9258'. [ 2118.135082][ T6205] FAULT_INJECTION: forcing a failure. [ 2118.135082][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.148688][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.6.9261 Tainted: G L syzkaller #0 PREEMPT(full) [ 2118.148707][ T6205] Tainted: [L]=SOFTLOCKUP [ 2118.148711][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2118.148718][ T6205] Call Trace: [ 2118.148724][ T6205] [ 2118.148729][ T6205] dump_stack_lvl+0x189/0x250 [ 2118.148745][ T6205] ? __pfx____ratelimit+0x10/0x10 [ 2118.148758][ T6205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2118.148770][ T6205] ? __pfx__printk+0x10/0x10 [ 2118.148787][ T6205] ? __pfx___might_resched+0x10/0x10 [ 2118.148798][ T6205] ? fs_reclaim_acquire+0x7d/0x100 [ 2118.148811][ T6205] should_fail_ex+0x414/0x560 [ 2118.148825][ T6205] should_failslab+0xa8/0x100 [ 2118.148838][ T6205] __kmalloc_noprof+0xdf/0x800 [ 2118.148847][ T6205] ? nla_strdup+0x9d/0x140 [ 2118.148864][ T6205] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 2118.148875][ T6205] nla_strdup+0x9d/0x140 [ 2118.148888][ T6205] nf_tables_newtable+0x491/0x1890 [ 2118.148900][ T6205] ? nfnetlink_subsys_unregister+0x152/0x1b0 [ 2118.148925][ T6205] nfnetlink_rcv+0x11d9/0x2590 [ 2118.148957][ T6205] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2118.148968][ T6205] ? kasan_save_track+0x4f/0x80 [ 2118.149005][ T6205] ? netlink_deliver_tap+0x2e/0x1b0 [ 2118.149024][ T6205] netlink_unicast+0x82f/0x9e0 [ 2118.149043][ T6205] ? __pfx_netlink_unicast+0x10/0x10 [ 2118.149057][ T6205] ? netlink_sendmsg+0x642/0xb30 [ 2118.149066][ T6205] ? skb_put+0x11b/0x210 [ 2118.149082][ T6205] netlink_sendmsg+0x805/0xb30 [ 2118.149097][ T6205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2118.149108][ T6205] ? __import_iovec+0x5d4/0x7f0 [ 2118.149120][ T6205] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2118.149135][ T6205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2118.149145][ T6205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2118.149155][ T6205] __sock_sendmsg+0x21c/0x270 [ 2118.149169][ T6205] ____sys_sendmsg+0x505/0x820 [ 2118.149182][ T6205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2118.149198][ T6205] ? kstrtouint+0x6e/0xe0 [ 2118.149213][ T6205] ___sys_sendmsg+0x21f/0x2a0 [ 2118.149224][ T6205] ? __pfx____sys_sendmsg+0x10/0x10 [ 2118.149237][ T6205] ? rcu_read_lock_any_held+0xb3/0x120 [ 2118.149264][ T6205] ? __fget_files+0x2a/0x420 [ 2118.149276][ T6205] ? __fget_files+0x3a0/0x420 [ 2118.149292][ T6205] __sys_sendmsg+0x164/0x220 [ 2118.149303][ T6205] ? __pfx___sys_sendmsg+0x10/0x10 [ 2118.149317][ T6205] ? __pfx_ksys_write+0x10/0x10 [ 2118.149329][ T6205] ? __do_fast_syscall_32+0xbe/0x570 [ 2118.149345][ T6205] __do_fast_syscall_32+0x1f7/0x570 [ 2118.149358][ T6205] ? rcu_is_watching+0x15/0xb0 [ 2118.149369][ T6205] ? do_fast_syscall_32+0x34/0x80 [ 2118.149384][ T6205] do_fast_syscall_32+0x34/0x80 [ 2118.149397][ T6205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2118.149409][ T6205] RIP: 0023:0xf70ed539 [ 2118.149419][ T6205] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2118.149428][ T6205] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2118.149440][ T6205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2118.149447][ T6205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2118.149453][ T6205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2118.149459][ T6205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2118.149465][ T6205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2118.149480][ T6205] [ 2118.195897][T17986] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2118.501970][ T794] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2118.666672][ T794] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2118.677780][ T794] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 2118.696106][ T794] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2118.716081][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.725824][T17986] usb 6-1: Using ep0 maxpacket: 8 [ 2118.742384][T17986] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2118.767691][ T794] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2118.775314][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2118.797159][ T794] usb 2-1: invalid MIDI out EP 0 [ 2118.805923][T17986] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2118.842666][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2118.903855][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2118.924978][ T794] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2118.953721][T17986] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2118.967624][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2118.990597][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.002175][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2119.020590][T17986] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2119.040297][ T891] usb 2-1: USB disconnect, device number 120 [ 2119.233744][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2119.446011][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2119.641203][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2119.656735][T17986] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2119.664385][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2119.676815][T17986] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2119.704726][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2119.721150][T17986] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2119.746654][T17986] usb 6-1: string descriptor 0 read error: -22 [ 2119.754639][T17986] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2119.764365][T17986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.791545][T17986] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2119.897729][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9265'. [ 2120.007437][ T6201] tipc: Enabled bearer , priority 0 [ 2120.015122][ T6201] syzkaller0: entered promiscuous mode [ 2120.021380][ T6201] syzkaller0: entered allmulticast mode [ 2120.044524][ T6201] tipc: Resetting bearer [ 2120.056849][ T6200] tipc: Resetting bearer [ 2120.094217][ T6200] tipc: Disabling bearer [ 2120.167694][T17986] usb 6-1: USB disconnect, device number 118 [ 2121.464563][T29730] Bluetooth: hci4: command 0x0406 tx timeout [ 2121.775880][ T9] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2122.115929][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2122.134407][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2122.187487][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2122.199626][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2122.214044][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2122.268658][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2122.288900][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2122.309205][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2122.344840][ T9] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 2122.356178][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.364272][ T9] usb 6-1: Product: syz [ 2122.379656][ T9] usb 6-1: Manufacturer: syz [ 2122.385318][ T9] usb 6-1: SerialNumber: syz [ 2122.396067][ T9] usb 6-1: config 0 descriptor?? [ 2122.412486][ T6248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2122.421628][ T9] usb 6-1: NFC: Reader power on cmd error -90 [ 2122.435774][ T9] pn533_usb 6-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 2122.452865][ T9] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90 [ 2122.922239][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2122.931986][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2122.983162][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2122.996819][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.739605][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9277'. [ 2126.054395][ T6736] usb 6-1: USB disconnect, device number 119 [ 2126.935881][ T5930] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2126.943861][ T6321] can: request_module (can-proto-3) failed. [ 2127.155842][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 2127.277780][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2127.303746][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2127.372805][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2127.384730][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.405260][ T5930] usb 2-1: Product: syz [ 2127.420878][ T5930] usb 2-1: Manufacturer: syz [ 2127.434002][ T5930] usb 2-1: SerialNumber: syz [ 2127.455090][ T5930] usb 2-1: config 0 descriptor?? [ 2127.476724][ T5930] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2127.486139][ T5930] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2128.238850][ T6336] mac80211_hwsim hwsim506 wlan0: entered promiscuous mode [ 2128.246354][ T6336] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2128.282983][ T5930] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2128.295837][ T5930] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2128.532523][ T6340] input: syz1 as /devices/virtual/input/input226 [ 2128.574138][ T6343] dvmrp0: entered allmulticast mode [ 2128.618281][ T5930] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 2128.629409][ T5930] em28xx 2-1:0.0: No AC97 audio processor [ 2129.143731][ T6351] can: request_module (can-proto-3) failed. [ 2130.254600][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9301'. [ 2130.283758][ T6371] netlink: 'syz.6.9301': attribute type 10 has an invalid length. [ 2130.293493][ T6371] bond0: (slave wlan1): Opening slave failed [ 2130.788890][T14079] usb 2-1: USB disconnect, device number 121 [ 2130.817492][T14079] em28xx 2-1:0.0: Disconnecting em28xx [ 2130.849850][T14079] em28xx 2-1:0.0: Freeing device [ 2131.195301][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9305'. [ 2131.591036][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9306'. [ 2131.858151][ T6393] can: request_module (can-proto-3) failed. [ 2134.100099][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9313'. [ 2134.278232][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9313'. [ 2134.335146][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9314'. [ 2134.357565][ T6423] netlink: 'syz.3.9314': attribute type 10 has an invalid length. [ 2134.373330][ T6423] bond0: (slave wlan1): Opening slave failed [ 2135.195968][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2135.318254][ T6445] fuse: Bad value for 'fd' [ 2135.326218][ T6445] fuse: Bad value for 'fd' [ 2136.055811][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2136.067210][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2136.077241][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.137214][ T9] usb 2-1: config 0 descriptor?? [ 2136.365387][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2136.422195][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2136.436409][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2136.445457][ T9] usb 2-1: media controller created [ 2136.509668][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2137.553866][ T6453] bridge_slave_0: left allmulticast mode [ 2137.586374][ T6453] bridge_slave_0: left promiscuous mode [ 2137.606124][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2137.659283][ T6453] bridge_slave_1: left allmulticast mode [ 2137.665017][ T6453] bridge_slave_1: left promiscuous mode [ 2137.690937][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 2137.767894][ T6453] bond0: (slave bond_slave_0): Releasing backup interface [ 2137.778855][ T6453] bond0: (slave bond_slave_1): Releasing backup interface [ 2137.795517][ T6453] team0: Port device team_slave_0 removed [ 2137.820866][ T6453] team0: Port device team_slave_1 removed [ 2137.828730][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2137.836496][ T6453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2138.322678][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2138.422299][ T6453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2138.443022][ T6453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2138.493165][ T6456] ip6gre0: entered promiscuous mode [ 2138.558449][ T6456] team0: Port device ip6gre0 added [ 2138.726045][ T9] az6027: usb out operation failed. (-110) [ 2138.733058][ T9] az6027: usb out operation failed. (-71) [ 2138.743932][ T9] stb0899_attach: Driver disabled by Kconfig [ 2138.751469][ T9] az6027: no front-end attached [ 2138.751469][ T9] [ 2138.764665][ T9] az6027: usb out operation failed. (-71) [ 2138.771041][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2138.781341][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input227 [ 2138.823529][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 2138.833277][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2138.861073][ T9] usb 2-1: USB disconnect, device number 122 [ 2138.928197][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2139.123636][ T6468] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 2139.921706][ T6487] FAULT_INJECTION: forcing a failure. [ 2139.921706][ T6487] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.934398][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.0.9327 Tainted: G L syzkaller #0 PREEMPT(full) [ 2139.934427][ T6487] Tainted: [L]=SOFTLOCKUP [ 2139.934433][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2139.934445][ T6487] Call Trace: [ 2139.934454][ T6487] [ 2139.934462][ T6487] dump_stack_lvl+0x189/0x250 [ 2139.934489][ T6487] ? __pfx____ratelimit+0x10/0x10 [ 2139.934511][ T6487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2139.934538][ T6487] ? __pfx__printk+0x10/0x10 [ 2139.934577][ T6487] should_fail_ex+0x414/0x560 [ 2139.934602][ T6487] should_failslab+0xa8/0x100 [ 2139.934625][ T6487] kmem_cache_alloc_noprof+0x88/0x710 [ 2139.934649][ T6487] ? nf_ct_pernet+0x45/0x270 [ 2139.934669][ T6487] ? nf_ct_pernet+0x45/0x270 [ 2139.934688][ T6487] ? __nf_conntrack_alloc+0x81/0x3e0 [ 2139.934714][ T6487] __nf_conntrack_alloc+0x81/0x3e0 [ 2139.934742][ T6487] init_conntrack+0x155/0xef0 [ 2139.934772][ T6487] ? __pfx_init_conntrack+0x10/0x10 [ 2139.934798][ T6487] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 2139.934818][ T6487] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2139.934837][ T6487] ? __siphash_unaligned+0x232/0x3b0 [ 2139.934866][ T6487] nf_conntrack_in+0xbb7/0x15c0 [ 2139.934910][ T6487] ? __pfx_nf_conntrack_in+0x10/0x10 [ 2139.934943][ T6487] ? ipt_do_table+0x2a3/0x1640 [ 2139.934969][ T6487] ? NF_HOOK+0x9a/0x3a0 [ 2139.934989][ T6487] ? NF_HOOK+0x9a/0x3a0 [ 2139.935006][ T6487] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 2139.935023][ T6487] ? ip_sabotage_in+0x57/0x270 [ 2139.935039][ T6487] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 2139.935061][ T6487] nf_hook_slow+0xc5/0x220 [ 2139.935087][ T6487] NF_HOOK+0x206/0x3a0 [ 2139.935108][ T6487] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2139.935126][ T6487] ? NF_HOOK+0x9a/0x3a0 [ 2139.935144][ T6487] ? __pfx_NF_HOOK+0x10/0x10 [ 2139.935161][ T6487] ? ip_rcv_core+0x7f7/0xd00 [ 2139.935182][ T6487] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2139.935211][ T6487] ? __pfx_ip_rcv+0x10/0x10 [ 2139.935228][ T6487] __netif_receive_skb+0x143/0x380 [ 2139.935258][ T6487] ? netif_receive_skb+0x105/0x750 [ 2139.935278][ T6487] netif_receive_skb+0x1bb/0x750 [ 2139.935299][ T6487] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 2139.935317][ T6487] ? __pfx_netif_receive_skb+0x10/0x10 [ 2139.935344][ T6487] ? tun_rx_batched+0x160/0x730 [ 2139.935368][ T6487] tun_rx_batched+0x1b9/0x730 [ 2139.935396][ T6487] ? __pfx_tun_rx_batched+0x10/0x10 [ 2139.935422][ T6487] ? tun_get_user+0x266d/0x3dc0 [ 2139.935454][ T6487] ? tun_get_user+0x266d/0x3dc0 [ 2139.935476][ T6487] tun_get_user+0x2aa3/0x3dc0 [ 2139.935501][ T6487] ? tun_get_user+0x6fc/0x3dc0 [ 2139.935543][ T6487] ? aa_file_perm+0x44c/0x1530 [ 2139.935561][ T6487] ? __pfx_tun_get_user+0x10/0x10 [ 2139.935585][ T6487] ? __lock_acquire+0x6b6/0x2cf0 [ 2139.935606][ T6487] ? kstrtoull+0x12f/0x1d0 [ 2139.935633][ T6487] ? ref_tracker_alloc+0x318/0x460 [ 2139.935659][ T6487] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2139.935680][ T6487] ? tun_get+0x1c/0x2f0 [ 2139.935702][ T6487] ? tun_get+0x1c/0x2f0 [ 2139.935721][ T6487] ? tun_get+0x1c/0x2f0 [ 2139.935743][ T6487] tun_chr_write_iter+0x113/0x200 [ 2139.935766][ T6487] vfs_write+0x5c9/0xb30 [ 2139.935786][ T6487] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2139.935806][ T6487] ? __pfx_vfs_write+0x10/0x10 [ 2139.935830][ T6487] ? __fget_files+0x2a/0x420 [ 2139.935855][ T6487] ksys_write+0x145/0x250 [ 2139.935869][ T6487] ? exc_page_fault+0x82/0x100 [ 2139.935889][ T6487] ? __pfx_ksys_write+0x10/0x10 [ 2139.935909][ T6487] ? __do_fast_syscall_32+0xbe/0x570 [ 2139.935935][ T6487] __do_fast_syscall_32+0x1f7/0x570 [ 2139.935958][ T6487] ? rcu_is_watching+0x15/0xb0 [ 2139.935977][ T6487] ? do_fast_syscall_32+0x34/0x80 [ 2139.936004][ T6487] do_fast_syscall_32+0x34/0x80 [ 2139.936026][ T6487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2139.936046][ T6487] RIP: 0023:0xf706d539 [ 2139.936063][ T6487] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2139.936079][ T6487] RSP: 002b:00000000f545d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2139.936098][ T6487] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 2139.936110][ T6487] RDX: 0000000000000036 RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 2139.936121][ T6487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2139.936131][ T6487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2139.936142][ T6487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2139.936170][ T6487] [ 2140.684760][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9329'. [ 2143.906322][ T891] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2144.036546][ T5930] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2144.067529][ T891] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 2144.078308][ T891] usb 6-1: config 1 has no interface number 0 [ 2144.084442][ T891] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2144.102415][ T891] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2144.114493][ T891] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.123366][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9340'. [ 2144.186005][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 2144.193012][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.221806][ T5930] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2144.257067][ T891] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2144.323827][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.324818][ T6537] can: request_module (can-proto-3) failed. [ 2144.338709][ T891] usb 6-1: Product: syz [ 2144.746642][ T891] usb 6-1: Manufacturer: syz [ 2144.758669][ T891] usb 6-1: SerialNumber: syz [ 2144.778569][ T5930] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 2144.816432][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.835246][ T6525] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2144.835289][ T5930] usb 4-1: Product: syz [ 2144.895913][ T5930] usb 4-1: Manufacturer: syz [ 2144.932957][ T5930] usb 4-1: SerialNumber: syz [ 2144.941707][ T5930] usb 4-1: config 0 descriptor?? [ 2144.970303][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9342'. [ 2145.065918][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2145.132259][ T6547] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2145.250917][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2145.436098][ T891] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:05:07 [ 2145.939285][ T891] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 2145.961503][ T891] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 2146.110999][ T891] usb 6-1: USB disconnect, device number 120 [ 2146.131135][ T891] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 2146.612964][ T6556] can: request_module (can-proto-3) failed. [ 2146.690040][ T891] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2147.210211][ T5930] usb 4-1: USB disconnect, device number 98 [ 2147.676093][ T5930] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2147.835882][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 2147.842425][ T5930] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2147.855538][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.885918][ T794] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 2147.901462][ T5930] usb 4-1: config 0 descriptor?? [ 2148.045760][ T794] usb 7-1: device descriptor read/64, error -71 [ 2148.387686][ T5930] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2148.426576][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2148.437385][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2148.444604][ T5930] usb 4-1: media controller created [ 2148.498050][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2148.526734][ T794] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 2148.614366][ T6571] bridge_slave_0: left allmulticast mode [ 2148.620251][ T6571] bridge_slave_0: left promiscuous mode [ 2148.626512][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.671719][ T794] usb 7-1: device descriptor read/64, error -71 [ 2148.826287][ T794] usb usb7-port1: attempt power cycle [ 2149.455848][ T794] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 2149.629124][ T794] usb 7-1: device descriptor read/8, error -71 [ 2149.659044][ T6571] bridge_slave_1: left allmulticast mode [ 2149.664866][ T6571] bridge_slave_1: left promiscuous mode [ 2149.671102][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.701444][ T6571] bond0: (slave bond_slave_0): Releasing backup interface [ 2149.718805][ T6571] bond0: (slave bond_slave_1): Releasing backup interface [ 2149.740452][ T6571] team0: Port device team_slave_0 removed [ 2149.750704][ T6571] team0: Port device team_slave_1 removed [ 2149.758122][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2149.765611][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2149.808171][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2149.843337][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2149.866511][ T6571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2149.945218][ T794] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 2149.963534][ T6594] ip6gre0: entered promiscuous mode [ 2149.977787][ T6594] team0: Port device ip6gre0 added [ 2150.026466][ T794] usb 7-1: device descriptor read/8, error -71 [ 2150.130247][ T6598] can: request_module (can-proto-3) failed. [ 2150.136690][ T794] usb usb7-port1: unable to enumerate USB device [ 2150.147786][ T5930] az6027: usb out operation failed. (-71) [ 2150.153921][ T5930] az6027: usb out operation failed. (-71) [ 2150.198515][ T5930] stb0899_attach: Driver disabled by Kconfig [ 2150.204547][ T5930] az6027: no front-end attached [ 2150.204547][ T5930] [ 2150.222672][ T5930] az6027: usb out operation failed. (-71) [ 2150.236062][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2150.264306][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9354'. [ 2150.313496][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input228 [ 2150.351014][ T5930] dvb-usb: schedule remote query interval to 400 msecs. [ 2150.384106][ T5930] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2150.407524][ T5930] usb 4-1: USB disconnect, device number 99 [ 2150.439528][ T6611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9354'. [ 2150.598715][ T5930] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2151.064767][ T6612] can: request_module (can-proto-3) failed. [ 2151.507384][ T6622] can: request_module (can-proto-3) failed. [ 2151.575784][T12993] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2151.826550][T12993] usb 6-1: Using ep0 maxpacket: 8 [ 2151.890072][T12993] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.905258][T12993] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2151.927725][T12993] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 2151.944186][T12993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.958441][T12993] usb 6-1: Product: syz [ 2151.966160][T12993] usb 6-1: Manufacturer: syz [ 2151.973802][T12993] usb 6-1: SerialNumber: syz [ 2152.079149][T12993] usb 6-1: config 0 descriptor?? [ 2153.641125][ T6648] FAULT_INJECTION: forcing a failure. [ 2153.641125][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.664899][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.1.9362 Tainted: G L syzkaller #0 PREEMPT(full) [ 2153.664929][ T6648] Tainted: [L]=SOFTLOCKUP [ 2153.664936][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2153.664947][ T6648] Call Trace: [ 2153.664955][ T6648] [ 2153.664963][ T6648] dump_stack_lvl+0x189/0x250 [ 2153.664990][ T6648] ? __pfx____ratelimit+0x10/0x10 [ 2153.665012][ T6648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2153.665034][ T6648] ? __pfx__printk+0x10/0x10 [ 2153.665061][ T6648] ? __pfx___might_resched+0x10/0x10 [ 2153.665087][ T6648] should_fail_ex+0x414/0x560 [ 2153.665112][ T6648] should_failslab+0xa8/0x100 [ 2153.665134][ T6648] kmem_cache_alloc_noprof+0x88/0x710 [ 2153.665160][ T6648] ? __mpol_dup+0x79/0x320 [ 2153.665183][ T6648] __mpol_dup+0x79/0x320 [ 2153.665202][ T6648] ? __pfx___mpol_dup+0x10/0x10 [ 2153.665250][ T6648] mbind_range+0x3c8/0x800 [ 2153.665280][ T6648] __se_sys_mbind+0x746/0xc40 [ 2153.665298][ T6648] ? __pfx_vfs_write+0x10/0x10 [ 2153.665321][ T6648] ? __pfx___se_sys_mbind+0x10/0x10 [ 2153.665349][ T6648] ? fput+0xa0/0xd0 [ 2153.665370][ T6648] ? ksys_write+0x22a/0x250 [ 2153.665389][ T6648] ? __pfx_ksys_write+0x10/0x10 [ 2153.665410][ T6648] ? __ia32_sys_mbind+0x21/0xf0 [ 2153.665430][ T6648] __do_fast_syscall_32+0x1f7/0x570 [ 2153.665454][ T6648] ? rcu_is_watching+0x15/0xb0 [ 2153.665473][ T6648] ? do_fast_syscall_32+0x34/0x80 [ 2153.665501][ T6648] do_fast_syscall_32+0x34/0x80 [ 2153.665524][ T6648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2153.665545][ T6648] RIP: 0023:0xf7fa1539 [ 2153.665561][ T6648] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2153.665576][ T6648] RSP: 002b:00000000f545455c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 2153.665594][ T6648] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 2153.665607][ T6648] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2153.665618][ T6648] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2153.665628][ T6648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2153.665638][ T6648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2153.665665][ T6648] [ 2154.898989][T12993] usb 6-1: USB disconnect, device number 121 [ 2155.365180][ T6666] can: request_module (can-proto-3) failed. [ 2156.158098][ T6680] misc userio: Invalid payload size [ 2156.311992][ T6691] netlink: 'syz.5.9371': attribute type 12 has an invalid length. [ 2156.358756][ T6684] can: request_module (can-proto-3) failed. [ 2156.418634][ T6697] netlink: 'syz.1.9375': attribute type 33 has an invalid length. [ 2156.561007][ T6701] fuse: Bad value for 'fd' [ 2156.567181][ T6701] fuse: Bad value for 'fd' [ 2156.667951][ T6697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9375'. [ 2159.219258][ T6711] can: request_module (can-proto-3) failed. [ 2159.398631][ T5930] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2159.666120][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 2159.678878][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2159.689877][ T5930] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2160.249242][ T5930] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 2160.272023][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.313074][ T5930] usb 6-1: Product: syz [ 2160.323207][ T5930] usb 6-1: Manufacturer: syz [ 2160.333327][ T5930] usb 6-1: SerialNumber: syz [ 2160.346973][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.353256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.391048][ T5930] usb 6-1: config 0 descriptor?? [ 2161.036368][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9385'. [ 2161.611920][ T6755] can: request_module (can-proto-3) failed. [ 2163.089510][ T6763] can: request_module (can-proto-3) failed. [ 2163.262365][ T5930] usb 6-1: USB disconnect, device number 122 [ 2163.326181][ T891] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2163.635809][ T891] usb 2-1: Using ep0 maxpacket: 8 [ 2163.758345][ T891] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 2163.766700][ T891] usb 2-1: config 0 has no interface number 0 [ 2163.772804][ T891] usb 2-1: config 0 interface 167 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 2163.792678][ T891] usb 2-1: config 0 interface 167 has no altsetting 0 [ 2163.831859][ T891] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2163.841047][ T891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.849600][ T891] usb 2-1: Product: syz [ 2163.853754][ T891] usb 2-1: Manufacturer: syz [ 2163.858949][ T891] usb 2-1: SerialNumber: syz [ 2163.887674][ T891] usb 2-1: config 0 descriptor?? [ 2164.152742][ T891] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2164.175520][ T891] gspca_sonixj: reg_w1 err -71 [ 2165.065903][ T891] sonixj 2-1:0.167: probe with driver sonixj failed with error -71 [ 2165.076403][ T6788] can: request_module (can-proto-3) failed. [ 2165.098914][ T891] usb 2-1: USB disconnect, device number 123 [ 2166.779870][ T6838] can: request_module (can-proto-3) failed. [ 2168.012782][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2168.023073][ T6848] team0: Device batadv1 is of different type [ 2168.413928][ T6857] can: request_module (can-proto-3) failed. [ 2168.688597][ T6868] can: request_module (can-proto-3) failed. [ 2170.761674][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9420'. [ 2170.795571][ T6901] FAULT_INJECTION: forcing a failure. [ 2170.795571][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.848354][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.5.9420 Tainted: G L syzkaller #0 PREEMPT(full) [ 2170.848374][ T6901] Tainted: [L]=SOFTLOCKUP [ 2170.848378][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2170.848384][ T6901] Call Trace: [ 2170.848389][ T6901] [ 2170.848396][ T6901] dump_stack_lvl+0x189/0x250 [ 2170.848413][ T6901] ? __pfx____ratelimit+0x10/0x10 [ 2170.848426][ T6901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2170.848444][ T6901] ? __pfx__printk+0x10/0x10 [ 2170.848465][ T6901] should_fail_ex+0x414/0x560 [ 2170.848480][ T6901] should_failslab+0xa8/0x100 [ 2170.848493][ T6901] kmem_cache_alloc_noprof+0x88/0x710 [ 2170.848508][ T6901] ? skb_clone+0x212/0x3a0 [ 2170.848521][ T6901] skb_clone+0x212/0x3a0 [ 2170.848533][ T6901] __netlink_deliver_tap+0x404/0x850 [ 2170.848551][ T6901] ? netlink_deliver_tap+0x2e/0x1b0 [ 2170.848562][ T6901] netlink_deliver_tap+0x19c/0x1b0 [ 2170.848573][ T6901] netlink_sendskb+0x68/0x140 [ 2170.848588][ T6901] netlink_unicast+0x397/0x9e0 [ 2170.848600][ T6901] ? __asan_memcpy+0x40/0x70 [ 2170.848619][ T6901] ? __pfx_netlink_unicast+0x10/0x10 [ 2170.848637][ T6901] netlink_rcv_skb+0x28c/0x470 [ 2170.848648][ T6901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2170.848661][ T6901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2170.848681][ T6901] ? down_read+0x274/0x2e0 [ 2170.848695][ T6901] ? genl_rcv+0xd/0x40 [ 2170.848708][ T6901] genl_rcv+0x28/0x40 [ 2170.848719][ T6901] netlink_unicast+0x82f/0x9e0 [ 2170.848737][ T6901] ? __pfx_netlink_unicast+0x10/0x10 [ 2170.848752][ T6901] ? netlink_sendmsg+0x642/0xb30 [ 2170.848760][ T6901] ? skb_put+0x11b/0x210 [ 2170.848776][ T6901] netlink_sendmsg+0x805/0xb30 [ 2170.848791][ T6901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2170.848803][ T6901] ? __import_iovec+0x5d4/0x7f0 [ 2170.848814][ T6901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2170.848829][ T6901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2170.848838][ T6901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2170.848849][ T6901] __sock_sendmsg+0x21c/0x270 [ 2170.848863][ T6901] ____sys_sendmsg+0x505/0x820 [ 2170.848876][ T6901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2170.848893][ T6901] ? kstrtouint+0x6e/0xe0 [ 2170.848907][ T6901] ___sys_sendmsg+0x21f/0x2a0 [ 2170.848918][ T6901] ? __pfx____sys_sendmsg+0x10/0x10 [ 2170.848931][ T6901] ? rcu_read_lock_any_held+0xb3/0x120 [ 2170.848959][ T6901] ? __fget_files+0x2a/0x420 [ 2170.848970][ T6901] ? __fget_files+0x3a0/0x420 [ 2170.848987][ T6901] __sys_sendmsg+0x164/0x220 [ 2170.848998][ T6901] ? __pfx___sys_sendmsg+0x10/0x10 [ 2170.849012][ T6901] ? __pfx_ksys_write+0x10/0x10 [ 2170.849024][ T6901] ? __do_fast_syscall_32+0xbe/0x570 [ 2170.849040][ T6901] __do_fast_syscall_32+0x1f7/0x570 [ 2170.849054][ T6901] ? rcu_is_watching+0x15/0xb0 [ 2170.849066][ T6901] ? do_fast_syscall_32+0x34/0x80 [ 2170.849081][ T6901] do_fast_syscall_32+0x34/0x80 [ 2170.849094][ T6901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2170.849106][ T6901] RIP: 0023:0xf7f93539 [ 2170.849116][ T6901] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2170.849125][ T6901] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2170.849137][ T6901] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 2170.849144][ T6901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2170.849150][ T6901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2170.849156][ T6901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2170.849162][ T6901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2170.849177][ T6901] [ 2171.650956][ T6903] can: request_module (can-proto-3) failed. [ 2171.985287][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9422'. [ 2172.024324][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2172.048889][ T6910] team0: Port device batadv1 added [ 2173.095993][T12993] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2173.819976][ T6927] can: request_module (can-proto-3) failed. [ 2173.847706][T12993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2173.863295][T12993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2173.942796][T12993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2173.969460][T12993] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2173.979618][T12993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.989615][T12993] usb 4-1: Product: syz [ 2174.209181][T12993] usb 4-1: Manufacturer: syz [ 2174.218339][T12993] usb 4-1: SerialNumber: syz [ 2174.229562][T12993] usb 4-1: config 0 descriptor?? [ 2174.444270][T12993] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2174.742835][ T891] usb 4-1: USB disconnect, device number 100 [ 2175.157398][ T891] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2175.415770][ T891] usb 4-1: Using ep0 maxpacket: 32 [ 2175.435190][ T891] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 2175.443660][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 2175.476936][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 2175.552073][ T891] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2175.563302][ T891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.578825][ T891] usb 4-1: Product: syz [ 2175.593963][ T891] usb 4-1: Manufacturer: syz [ 2175.606903][ T891] usb 4-1: SerialNumber: syz [ 2175.648095][ T891] usb 4-1: config 0 descriptor?? [ 2175.668414][ T891] hub 4-1:0.0: bad descriptor, ignoring hub [ 2175.695483][ T891] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2175.735385][ T891] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input229 [ 2175.809527][ T891] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 2176.010520][ T891] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 2176.171182][ T6964] can: request_module (can-proto-3) failed. [ 2176.271792][ T891] usb 4-1: USB disconnect, device number 101 [ 2176.853334][ T30] audit: type=1326 audit(1765049193.468:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.0.9439" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 2177.708264][ T6989] can: request_module (can-proto-3) failed. [ 2178.419263][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9449'. [ 2178.685933][ T6736] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2178.948017][ T6736] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 2178.988001][ T6736] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2179.016657][ T6736] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.037790][ T6736] usb 7-1: config 220 has no interface number 2 [ 2179.047466][ T6736] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2179.085292][ T6736] usb 7-1: config 220 interface 0 has no altsetting 0 [ 2179.092348][ T6736] usb 7-1: config 220 interface 76 has no altsetting 0 [ 2179.099521][ T6736] usb 7-1: config 220 interface 1 has no altsetting 0 [ 2179.108623][ T6736] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2179.121174][ T6736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.335896][ T6736] usb 7-1: Product: syz [ 2179.340118][ T6736] usb 7-1: Manufacturer: syz [ 2179.344717][ T6736] usb 7-1: SerialNumber: syz [ 2179.704008][ T6736] uvcvideo 7-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 2179.725836][ T6736] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2179.733294][ T6736] uvcvideo 7-1:220.0: No valid video chain found. [ 2179.755981][ T6736] usb 7-1: selecting invalid altsetting 0 [ 2179.858549][ T6736] usb 7-1: selecting invalid altsetting 0 [ 2179.864343][ T6736] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 2179.930455][ T6736] usb 7-1: USB disconnect, device number 45 [ 2180.375197][ T7034] netlink: 'syz.0.9452': attribute type 1 has an invalid length. [ 2180.506758][ T7034] bond2: entered promiscuous mode [ 2180.511839][ T7034] bond2: entered allmulticast mode [ 2180.781119][ T7038] can: request_module (can-proto-3) failed. [ 2181.260260][ T7052] can: request_module (can-proto-3) failed. [ 2182.971982][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9460'. [ 2184.636337][T32246] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2184.816409][T32246] usb 7-1: Using ep0 maxpacket: 8 [ 2184.825612][T32246] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.842002][T32246] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2184.869376][T32246] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 2184.886094][T32246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.925108][T32246] usb 7-1: Product: syz [ 2184.935281][T32246] usb 7-1: Manufacturer: syz [ 2184.952499][T32246] usb 7-1: SerialNumber: syz [ 2184.965259][ T7100] can: request_module (can-proto-3) failed. [ 2185.017133][T32246] usb 7-1: config 0 descriptor?? [ 2185.433650][ T7115] can: request_module (can-proto-3) failed. [ 2187.042815][ T7129] can: request_module (can-proto-3) failed. [ 2187.475901][ T5930] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2187.637232][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 2187.658855][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2187.683320][ T5930] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 2187.697914][ T5930] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.743751][ T5930] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2187.753435][ T5930] usb 4-1: config 128 has no interface number 0 [ 2187.773475][ T5930] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2187.786513][ T5930] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2187.797437][ T5930] usb 4-1: config 128 interface 127 has no altsetting 0 [ 2187.820176][T32246] usb 7-1: USB disconnect, device number 46 [ 2187.841581][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2187.864134][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.885808][ T5930] usb 4-1: Product: syz [ 2187.908410][ T5930] usb 4-1: Manufacturer: syz [ 2187.931321][ T5930] usb 4-1: SerialNumber: syz [ 2187.982621][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9474'. [ 2188.256722][ T5930] usb 4-1: USB disconnect, device number 102 [ 2188.530912][ T4920] udevd[4920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2189.076757][ T7161] can: request_module (can-proto-3) failed. [ 2189.818241][ T794] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2190.175800][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 2190.192065][ T794] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2190.205718][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.236493][ T794] usb 4-1: config 0 descriptor?? [ 2190.561526][ T794] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2190.588841][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2190.616670][ T794] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2190.634224][ T794] usb 4-1: media controller created [ 2190.791816][ T7167] team0: Port device ip6gre0 removed [ 2190.798097][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2190.930992][ T5930] skbuff: skb_under_panic: text:ffffffff8a1cc848 len:136 put:40 head:ffff888047970000 data:ffff88804796ffe8 tail:0x70 end:0x6c0 dev:team0 [ 2190.938972][ T7167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2191.042960][ T5930] ------------[ cut here ]------------ [ 2191.048581][ T5930] kernel BUG at net/core/skbuff.c:213! [ 2191.132673][ T5930] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2191.138964][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 2191.149924][ T5930] Tainted: [L]=SOFTLOCKUP [ 2191.154240][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2191.164293][ T5930] Workqueue: mld mld_ifc_work [ 2191.168980][ T5930] RIP: 0010:skb_panic+0x157/0x160 [ 2191.174018][ T5930] Code: c7 e0 1e 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 be 92 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2191.193620][ T5930] RSP: 0018:ffffc900053c72c0 EFLAGS: 00010286 [ 2191.199680][ T5930] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: b9a7de25d719d500 [ 2191.207658][ T5930] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2191.215628][ T5930] RBP: 00000000000006c0 R08: ffffc900053c6fc7 R09: 1ffff92000a78df8 [ 2191.223602][ T5930] R10: dffffc0000000000 R11: fffff52000a78df9 R12: ffff888036068010 [ 2191.231574][ T5930] R13: ffff888047970000 R14: ffff88804796ffe8 R15: 0000000000000070 [ 2191.239537][ T5930] FS: 0000000000000000(0000) GS:ffff888126184000(0000) knlGS:0000000000000000 [ 2191.248466][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2191.255048][ T5930] CR2: 00000000f72b1e30 CR3: 00000000384f6000 CR4: 00000000003526f0 [ 2191.263014][ T5930] Call Trace: [ 2191.266285][ T5930] [ 2191.269205][ T5930] ? ip6gre_header+0xc8/0x790 [ 2191.273875][ T5930] ? ip6gre_header+0xc8/0x790 [ 2191.278538][ T5930] skb_push+0xc3/0xe0 [ 2191.282509][ T5930] ip6gre_header+0xc8/0x790 [ 2191.287012][ T5930] ? __pfx_ip6gre_header+0x10/0x10 [ 2191.292111][ T5930] ? read_seqbegin+0x1ac/0x250 [ 2191.296869][ T5930] ? __pfx_read_seqbegin+0x10/0x10 [ 2191.301973][ T5930] ? ___neigh_create+0x1c5f/0x2230 [ 2191.307076][ T5930] ? __pfx_ip6gre_header+0x10/0x10 [ 2191.312179][ T5930] neigh_connected_output+0x286/0x460 [ 2191.317547][ T5930] ip6_finish_output2+0xfb3/0x1480 [ 2191.322653][ T5930] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2191.328190][ T5930] ? ip6_mtu+0x7d/0x490 [ 2191.332335][ T5930] ? ip6_mtu+0x38c/0x490 [ 2191.336568][ T5930] ? ip6_finish_output+0x2ef/0x4e0 [ 2191.341675][ T5930] ? ip6_output+0x126/0x550 [ 2191.346171][ T5930] ip6_output+0x340/0x550 [ 2191.350501][ T5930] NF_HOOK+0x9e/0x380 [ 2191.354476][ T5930] ? NF_HOOK+0x101/0x380 [ 2191.358710][ T5930] ? __pfx_NF_HOOK+0x10/0x10 [ 2191.363295][ T5930] ? __pfx_dst_output+0x10/0x10 [ 2191.368132][ T5930] ? icmp6_dst_alloc+0x3a5/0x420 [ 2191.373062][ T5930] ? icmp6_dst_alloc+0x3a5/0x420 [ 2191.377997][ T5930] mld_sendpack+0x8d4/0xe60 [ 2191.382496][ T5930] ? mld_sendpack+0x1e7/0xe60 [ 2191.387160][ T5930] ? __pfx_mld_sendpack+0x10/0x10 [ 2191.392183][ T5930] mld_ifc_work+0x83e/0xd60 [ 2191.396767][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 2191.401953][ T5930] ? process_scheduled_works+0x9ef/0x1770 [ 2191.407755][ T5930] process_scheduled_works+0xad1/0x1770 [ 2191.413306][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 2191.419281][ T5930] worker_thread+0x8a0/0xda0 [ 2191.423887][ T5930] kthread+0x711/0x8a0 [ 2191.427955][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 2191.433058][ T5930] ? __pfx_kthread+0x10/0x10 [ 2191.437658][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 2191.442847][ T5930] ? lockdep_hardirqs_on+0x98/0x140 [ 2191.448042][ T5930] ? __pfx_kthread+0x10/0x10 [ 2191.452669][ T5930] ret_from_fork+0x599/0xb30 [ 2191.457256][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 2191.462361][ T5930] ? __switch_to_asm+0x39/0x70 [ 2191.467117][ T5930] ? __switch_to_asm+0x33/0x70 [ 2191.471871][ T5930] ? __pfx_kthread+0x10/0x10 [ 2191.476450][ T5930] ret_from_fork_asm+0x1a/0x30 [ 2191.481209][ T5930] [ 2191.484227][ T5930] Modules linked in: [ 2191.489104][ T5930] ---[ end trace 0000000000000000 ]--- [ 2191.768462][ T7193] can: request_module (can-proto-3) failed. [ 2191.893983][ T5930] RIP: 0010:skb_panic+0x157/0x160 [ 2191.900469][ T5930] Code: c7 e0 1e 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 be 92 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2191.990739][ T891] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2192.018654][ T5930] RSP: 0018:ffffc900053c72c0 EFLAGS: 00010286 [ 2192.032452][ T5930] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: b9a7de25d719d500 [ 2192.049937][ T5930] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2192.069765][ T5930] RBP: 00000000000006c0 R08: ffffc900053c6fc7 R09: 1ffff92000a78df8 [ 2192.090486][ T5930] R10: dffffc0000000000 R11: fffff52000a78df9 R12: ffff888036068010 [ 2192.110065][ T5930] R13: ffff888047970000 R14: ffff88804796ffe8 R15: 0000000000000070 [ 2192.130226][ T5930] FS: 0000000000000000(0000) GS:ffff888126184000(0000) knlGS:0000000000000000 [ 2192.152745][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2192.159573][ T891] usb 6-1: Using ep0 maxpacket: 8 [ 2192.166643][ T891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.184918][ T5930] CR2: 00000000801db018 CR3: 0000000063dea000 CR4: 00000000003526f0 [ 2192.194926][ T891] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2192.205849][ T5930] Kernel panic - not syncing: Fatal exception [ 2192.212346][ T5930] Kernel Offset: disabled [ 2192.216673][ T5930] Rebooting in 86400 seconds..