last executing test programs: 16m34.431032852s ago: executing program 1 (id=6058): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$isdn(0x22, 0x3, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc", 0x2, r2) keyctl$link(0x8, r3, r2) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)=ANY=[], 0x550}}, 0xc020) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480802, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f0000000080), 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000300)=[0xad34, 0x0, 0xfffc, 0x4], &(0x7f0000000340)=[0x5, 0x0, 0x2, 0x0, 0x3, 0x3], &(0x7f0000000380)=[0x40, 0x2]}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xf, 0x7}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xfff0}}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x4000, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x80000000, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x7, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x80000000, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x1bb31, 0x3, 0xd, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x102, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x3, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0x6, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xffffffef, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0x7, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1008}], 0x2, 0x0, 0x0, 0x0) r9 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r9, 0x3, &(0x7f0000000100)={{0x0, 0x989680}, {r10, r11+60000000}}, 0x0) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, r0, 'id0\x00'}) 16m34.022043905s ago: executing program 1 (id=6061): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) 16m33.562275642s ago: executing program 1 (id=6064): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x14c}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 16m33.497631054s ago: executing program 1 (id=6065): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0x320c, 0x10100, 0x807fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r2, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 16m33.267015123s ago: executing program 1 (id=6067): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x12, 0x4) syz_io_uring_setup(0x118, &(0x7f0000000140)={0x0, 0xfec9, 0x10, 0x0, 0x31a, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000340)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r2, &(0x7f0000000040)={0x38}, 0x38, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r3, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 16m32.511111368s ago: executing program 1 (id=6073): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x480802, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x4000, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x80000000, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x7, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x80000000, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x1bb31, 0x3, 0xd, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x102, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x3, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0x6, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xffffffef, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0x7, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1008}], 0x2, 0x0, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{0x0, 0x989680}, {r6, r7+60000000}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 'id0\x00'}) 16m32.260425866s ago: executing program 32 (id=6073): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x480802, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000080), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x4000, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x80000000, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x7, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x80000000, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x1bb31, 0x3, 0xd, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x102, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x3, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0x6, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xffffffef, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0x7, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1008}], 0x2, 0x0, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{0x0, 0x989680}, {r6, r7+60000000}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 'id0\x00'}) 6.523532302s ago: executing program 2 (id=13356): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) syz_io_uring_setup(0x2232, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c}, &(0x7f00000000c0)={0x1f, 0x4, 0x8, 0x0, 0x5000000, 0x0, 0x3ffffffffc}, 0x0, 0x0, 0x0) 6.307894701s ago: executing program 2 (id=13358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x20000081) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c06, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.176053757s ago: executing program 2 (id=13360): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000002c0)={0x4, 0x0, [{0x80000019, 0x6, 0x3, 0x80003900, 0x6, 0x2, 0x1}, {0xd, 0x2, 0x3, 0x3, 0x10001, 0x3, 0x8}, {0xb, 0x5, 0x2, 0x50, 0x401, 0x8000, 0x80000000}, {0x0, 0x97, 0x5, 0x3, 0x7, 0x0, 0x5}]}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x8e) ioctl$FS_IOC_GETVERSION(r6, 0x80015b11, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3fc, 0x1fc, 0x2a0, 0xfeffffff, 0x2a0, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'ipvlan1\x00'}, 0x0, 0x134, 0x158, 0x0, {0x0, 0x7}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xffffff00], @ipv6=@loopback, [0xff, 0x0, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff, 0xffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], 0x247, 0x0, 0x8, 0x4e22, 0x0, 0x4e21, 0x4e21, 0x800, 0x800}, 0x200, 0xcb8f3756a3060b45, 0x4e22, 0x4e23, 0x4e20, 0x4e24}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x368}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @icmp_id=0x64, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x458) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, 0x0) 4.574308928s ago: executing program 5 (id=13374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000001300)=""/103, 0x67}], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020305000000000000000000000000e308000340ba000000080001000200000900000000040000210888ad3783ce5c0005400000000809000200000000090200000008000340000000030800044000000026080540000000100800034000000f4db965f1b61ae4fb329b58427264893646feffcdf2e5bd3b6e66b066a4415aad8c4fa3f4e36c000020000000000000"], 0x68}}, 0x800) 4.310126971s ago: executing program 5 (id=13377): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x31, 0xc, {0xc, 0x9, "0e49eeee3eaa56ac5dea"}}, 0x0, 0x0, 0x0}, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000871006001c001a8018000580140009"], 0x3c}}, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000280)={0x4, "69fdd8f82dd19c31b6090b6facbb4f31c0cf486d6272a661f6a9712e9f428285f336578e285518760237c4488b62c2956a38a233b311fcfa5b143101d6a25e4bb4c86900847897308e26f13d0536b11f13a0d2e3b0fa71095047c5f04112a7bb626b1f30307fd57c5d0ab7a1ae5778c6556ea59d6fd1d5e793c4329fa2d1d0bea92e7a1f464a173ce4467c8b14f04f787aa1f79da670bae066aeda3030ff9dd7267f355d13acd39db11289aee3343db590ba7af7678b2336e2455122ad8ee3e76eba3c40383e7500a71b74aecc1b878175898785702e90692cd50e8b183c988a5fa3e9add8e8f9ebab4041e07a99dbe3366c792faefeb7de7a0d9e0e36d9c7d2d50ea887615b2ed87842a138a347987f441a5fa807fd0e444fbbf655758ef36260d77d8277162c2c2b5060bd54d117432e84b0fe50c8ceffa80bcac4a67cdfafef705a455b9723b13a5f96d5e181309ca7e7f71b70fc602bc593c43ebb9f1032f4f52404a8ca158a6558011a43e54947752d35b3e2136a708fad207c21e3391fb692dea313fd1363b5e31fd9eaab0d89e42f71f8eebe029a77c29d522c9b3ce7f75546f9e4f13639b8b750d8d8cce7ecd122e57367281a4347ff9f6caa5dfb5b01f4ff05b258f9de065d0def4a4fb7ec5172a597a695d6ee07c307386269a126c1a16ff45b7cd083e9bb0619f08cd6466e22015e1db6170426a6c3d466a7e5c3"}) fspick(r2, &(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x9}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xa, 0x4}, @raw32={[0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x8b7, 0xf}}], 0x38) 3.824262654s ago: executing program 2 (id=13381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0xfff, 0x7, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0xa, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x27}}}}}) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8000000000000000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x4, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$sequencer(r8, &(0x7f0000000040)=[@raw={0xc, 0xb, "4ece7d9aee44"}, @e={0xff, 0x1, 0xd, 0x4, @SEQ_CONTROLLER=0xfe, 0x1, 0x4, 0xc9}, @echo=0x2, @n={0x3, 0xa2, @SEQ_NOTEON=@special, 0x5}, @raw={0x0, 0xc, "6c93e3d87e98"}, @s={0x5, @SEQ_MIDIPUTC=0xb8, 0xe, 0x8}, @v={0x93, 0x7, 0x90, 0x1d, @MIDI_NOTEON=@note=0x32, 0xbd, 0x3}], 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x7fff) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40030002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x8801) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r8, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) syz_usb_ep_write(r2, 0x8, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0) 3.595436145s ago: executing program 5 (id=13383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000300fcdbdf254f00000008000300", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.41432833s ago: executing program 5 (id=13387): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) userfaultfd(0x801) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000029c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x3967, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x200000000000000) 2.332314179s ago: executing program 5 (id=13393): bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x8, 0x5, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000001, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x8001], 0xeeee8000, 0x3c4210}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) eventfd(0x6) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c11, &(0x7f0000000140)={0x0, 0x9c40, 0x80, 0x1, 0xfff}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000200)={{r3}, "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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) clock_gettime(0x3, &(0x7f0000000480)) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x110c015, 0x0) 2.227246473s ago: executing program 3 (id=13395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}}, 0x40040c4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'team_slave_0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}}, 0x40040c4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'team_slave_0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x50}}, 0x0) (async) 2.1964082s ago: executing program 0 (id=13396): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xf58ca000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003b0001002abd7000fedbdf2507000000", @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f00007e4000/0x4000)=nil, &(0x7f0000a60000/0x4000)=nil, 0x0, 0x0, 0x0, 0x22, 0x4, 0x21, 0x4d}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000240)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x1, 0x2, 0x86, 0x2}, 0x20) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.047331987s ago: executing program 3 (id=13397): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0x4020, 0x20, 0x42474752, 0x0, 0x0, [{}, {}, {}, {0x0, 0x10000}, {}, {0xfffffffd}], 0xfc}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0xfc, 0x2b8, 0x182, 0xfc, 0x0, 0x1c8, 0x3a8, 0x3a8, 0x1c8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xdc, 0xfc, 0x0, {0x0, 0x1800}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x6c, 0x3}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @remote, [], [], 'macsec0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8e64, 0x1000, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2ec) unshare(0x400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x7, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0}}, 0xd5) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) openat$random(0xffffff9c, &(0x7f0000000180), 0xbca40, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x622, 0x1, @loopback, 0x80}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000400)={0x10, 0x0, "67b33a67446e7f41ef8d722832121006"}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400c74dc2d700f9bb9b0000100005ff00000000000000000000004a", @ANYRES16=r8, @ANYBLOB="7f15000000000000140012800b000100626174616476000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x2f) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r8}, 0x8) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 1.858653624s ago: executing program 2 (id=13398): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x80}}, 0x4000004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000cc010000060a010400000000000000000100000008000b4000000000a4010480a001018008000100636d70009401028008000240000000001000038009000100efbb17b7990000000800014000000000080002400000000208000140000000100800014000000015080002400000000450010380a700010039283fc7dfa6a6b373efd80a330cd454284c374e41ef8ced5510027249e931a2f5f60fda0cfff63c04eea90a45509503b3dc23f4fbdb09744e5cd9073655f7c1b687af3f7a947d1cdaa88a1d02b246bfd40a17e9c1bbaa3f9dd4f6fddc75e511808f5cafb8b7d38ab3a2025400967aa570c3a9f7892039e12638dc7201ce1b87a460bd3b723533c4e14a36ddca002f914e773c9530965b39b51d807e94d1b051cfa52f00510001007a3845675dc0c10d39a0f3fec2e944991335edfa8a7641e0e6581dfd807ac97afb36160b27e2686f7e82c3c8b2d53d63332a00b2ec5653d52ed0c81fce363f375e8a4f588b58ff29ab1e2dc749000000500002800900020073797a310000000008000180fffffffe0900020073797a320000000008000340000000010800034000000002080003400000000108000340000000010900020073797a30000000000900010073797a30"], 0x240}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x10001, 0x2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x3, 0x2000, 0x0, @value}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x5, &(0x7f0000000240)=[{0xfff7, 0x5, 0x2, 0x7fff}, {0x2, 0x2, 0xbf, 0xc}, {0xb32d, 0x2, 0x6, 0x1}, {0x9, 0xa2, 0x3, 0x8}, {0x5, 0x45, 0x0, 0x4}]}) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x1f}}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000007c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000900)={0xffff, 0x1, 0x4}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x20, r7, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000100)=""/188, &(0x7f00000001c0)=0xbc) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) 1.757360614s ago: executing program 0 (id=13399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0xc00}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f00000000c0)={0x4, 0x6, 0x2, {0x1, @pix_mp={0x3, 0x1, 0x50424752, 0x8, 0x5, [{0x800, 0x6}, {0xcc4, 0x100006}, {0x6, 0xff}, {0x20400000, 0xfffffff0}, {0x3, 0x4}, {0x3, 0x7}, {0x39cd, 0x9}, {0x6}], 0x2, 0x6, 0x2, 0x0, 0x3}}, 0xfffffdff}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/54}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000020601020000060000000000000000001c00078008001240000600000800084000000037080013400000000010000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x64}}, 0x0) 1.590492127s ago: executing program 5 (id=13401): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r0, 0x0) mprotect(&(0x7f00001a7000/0x1000)=nil, 0x1000, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d72, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000140)='1\x00', 0x2) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x101) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) r4 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000001200)={0x20000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000027a00003c000480200001800a00010071756f7461000000100002800c00014000000000000004011800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000000000a78bda7aadb4eb1f19bdfe192804385d0eb074f290988c4875885d405c8b78a9cca936330b140ffa633e5bf4d5c29fa0d15b7b72b8eb97935754dbf46a38d0a60cfc1bda9767c2be7a8e66a6ed1b31791972eb7e86ebf0e11fe426f34b5035eb07ae889d796"], 0x28}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) 1.583273449s ago: executing program 4 (id=13402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 1.289996589s ago: executing program 0 (id=13403): syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x34, &(0x7f0000000040)=0x1, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0xc84) 1.20166453s ago: executing program 4 (id=13404): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x30, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.132727925s ago: executing program 3 (id=13405): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0xb2c}}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f00000001c0)='./file0\x00', 0xa2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c72cc6300000000000030303030303030303030303030303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',dirsync,\x00']) write$UHID_INPUT(r3, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x0, 0x8000, 0x5, 0x1, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x44, 0xe9, 0x3, 0x5, [{@local, 0x3fd}, {@loopback, 0xa63}, {@multicast2, 0x7}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x7}, {@multicast1, 0xa50}, {@remote, 0x1c0}, {@local, 0x80000000}]}]}}}}}) r8 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @broadcast, 0x4e20, 0x1, 'sh\x00', 0x8, 0x6, 0x4a}, 0x2c) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x3}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 1.003531295s ago: executing program 0 (id=13406): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2f) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x3000000, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 923.194624ms ago: executing program 4 (id=13407): r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) r1 = fsmount(r0, 0x1, 0x71) sendmsg$tipc(r1, &(0x7f00000023c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000080)="079c16dc9f79fb50437894fd4fd2eb619990775e0b0ad86d1c0635f7d44da45ab797e60f7fef42c8edc911d91cb73b40f294f635a5125ea9532099f3a0165cd6c288384b84f45c0fb5382088f6e56e92e47e54b138eb5c433988bd7f8fae03638b4a02bbb05234326e9a47313a062aff85fd333a69814da1c6055c49e3ed80ca0969be37430c9683a8a97516256ff92d749bd24332a818c2177f34adf1623598cf21db66479c56141406244964e527441336118bd58ca36b5ac22b6f2c0804734e98af3b48105082f6914c3996c0566803276b8077fc523931d94a2d42f7b21af9287d0c599eee0166bbf8dbcfa6", 0xee}, {&(0x7f0000000180)="9ade79094d1d51d5222e1787b5005574395967f6be08d58538b79f626151ceb53167477db8a307f1d492f4ffd63e552dc2f83d106a298fc75ea6f013f229c9ba46e91d534ee2701063afbbe7ed6cb3b3c11df0a6788d", 0x56}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="4a568234f37fe4d42e7a45c991c20fad424451577c8dad2d092b97bbb010ea0169c279740a032c172c9cd6a2815a028e63c2235c51cdd94cbe2413892207b99fa0b46c52bd7609291d0dd2515ad773d905720628edc39a9b6fb74c48446fc9f63e11f4b64f0f26727f7275cc022e600eb5b4abf5add66819cadcc6c03f9f79728dc88f91c104d25dd66485501bfe532fc8e188c87ffb25aa2619382ad50efbbd0a0da150bde43051a43482d24085b277168bf795f62bf1db165761665495a6256e377104390369daec808cc9482cb52fb6fc14ab40feb7ae65b8abfcab3f3056c4", 0xe1}, {&(0x7f0000001300)="880008f994e82b8bcc309cbe6a32f5eb366428887c08b772ef179163150b75f101c389dc6527e7999f63f258cbad4368e63f59965ffa0e3c4b89d7cd2a9e2570e1d3e5b902c29d", 0x47}], 0x5, &(0x7f00000013c0)="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", 0x1000, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x5c, 0x0, 0x530, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9906332ed619"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0dc6b9297091"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f8436191799f"}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002540)=0x800, 0x4) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x30, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) (rerun: 64) preadv(r0, &(0x7f00000029c0)=[{&(0x7f0000002680)=""/105, 0x69}, {&(0x7f0000002700)=""/103, 0x67}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/145, 0x91}, {&(0x7f0000002880)=""/17, 0x11}, {&(0x7f00000028c0)=""/193, 0xc1}], 0x6, 0x0, 0x4) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) r2 = syz_clone(0x2000000, &(0x7f0000002a00)="44ce2665b9af1295c5911014daa1202d013575a0aee8554efc18faca42bc63e60cd3548d07c02eeebaea479d5e7c5d11b8d91413c72db475e4f711706ce655ad20a80df113654d9ea35dd90fb631", 0x4e, &(0x7f0000002a80), &(0x7f0000002ac0), &(0x7f0000002b00)="a62460d3adfec6b8305383cb6b08995a4a6f9cffbded0a4abaea4837f1fa33dc28de62833ae2b7d41bb1a1ece9c4118e381c36cf51f9dd0931c89fca3f0fd006b57a05665cc22e3251eb052d0544434402ad110b413f4539b7763aa2ab5dda5b9dd9f4fc5cec573612d2e5469d603103f46b25320cbdf77b90cb0f05225859a55c78b02704b88445fd134c692df87a0208293fcd1d243c338227a2ac48c22914fc35af7189cdb13aff09330fbf850bf9d96a1fb8ea77a3842627dd48") (async, rerun: 64) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x7) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f0000002bc0)={0x0, 0x7f, 0x9, 0x0, 0x0, [0x0, 0x0], [0x10000, 0x2, 0x7, 0x5], [0xa, 0x5c52, 0x7, 0x5dde], [0x7fff, 0x7, 0xd, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002c40)={r3}) r4 = openat$cuse(0xffffff9c, &(0x7f0000002c80), 0x2, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f00)={0x11, 0x10, &(0x7f0000002cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x60}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x1, 0x1, 0x0, 0x5, 0x4, 0xffffffffffffffff}, @generic={0x1, 0x1, 0x1, 0x8, 0x7}, @call={0x85, 0x0, 0x0, 0xd3}, @alu={0x4, 0x1, 0x5, 0x1, 0x9, 0xccafa870390d3874}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000002d40)='GPL\x00', 0x30, 0x70, &(0x7f0000002d80)=""/112, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002e00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002e40)={0x1, 0xb, 0xc, 0xe0}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002e80)=[r1, r1, r1, r1, r1, r1], &(0x7f0000002ec0)=[{0x4, 0x5, 0x7}], 0x10, 0x100, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000040c0)={r5, 0x0, 0x1000, 0x55, &(0x7f0000002fc0)="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", &(0x7f0000003fc0)=""/85, 0x3, 0x0, 0x1b, 0x2d, &(0x7f0000004040)="452a131a5db08b2f415041f0e2f59e80a064d12e6ef95bc4818d01", &(0x7f0000004080)="7f361bfbcc39ee1885f3ca35a7c93c58b353b82ed8a1b98b6c44ef47e672bfdae1cc4915655045954627374f2b", 0x2, 0x0, 0x9}, 0x4c) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000004140)) (async) r6 = syz_open_procfs(r2, &(0x7f0000004180)='net/rt_cache\x00') fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000041c0)='PPPPPP', &(0x7f0000004200)='):[)%:\x00', 0x0) (async) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000004240)) (async) r7 = add_key$keyring(&(0x7f0000004340), &(0x7f0000004380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000004280), &(0x7f00000042c0)={'syz', 0x1}, &(0x7f0000004300)={0x0, 0x0, @d}, 0x18, r7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004580)={&(0x7f00000043c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x58, 0x4}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @union={0x5, 0x9, 0x0, 0x5, 0x1, 0x6, [{0xb}, {0x5, 0x5, 0x5}, {0xe, 0x3, 0xfffffffd}, {0x3, 0x1, 0x9}, {0x0, 0x0, 0x92e}, {0x0, 0x0, 0x2}, {0x4, 0x1, 0x2}, {0xa, 0x3, 0x2}, {0x9, 0x5, 0x400}]}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x6f]}}, &(0x7f0000004480)=""/251, 0xbf, 0xfb, 0x1, 0x883a, 0x0, @void, @value}, 0x28) (async, rerun: 32) openat$kvm(0xffffff9c, &(0x7f00000045c0), 0x404000, 0x0) (rerun: 32) statx(r1, &(0x7f0000004600)='./file0\x00', 0x100, 0x40, &(0x7f0000004640)) (async) r8 = openat$sysfs(0xffffff9c, &(0x7f0000004740)='/sys/kernel/uevent_helper', 0x40, 0x21) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000004780)={0x4, 0x0, [{0x1a0, 0x0, 0x9}, {0x963, 0x0, 0x5}, {0x8a8, 0x0, 0x326}, {0x2a0, 0x0, 0x4}]}) (async) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000004800), &(0x7f0000004840)=0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000004880)=0xac) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000048c0)={r3}) (async) openat$tun(0xffffff9c, &(0x7f0000004900), 0x60803, 0x0) 801.574213ms ago: executing program 3 (id=13408): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) 723.534194ms ago: executing program 0 (id=13409): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a000000000000000000000000000000000000fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9f85ba48070a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c0f2c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386c020000000000000017fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b653d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b5295e93496a6fdf5af8122257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a026ff8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c80b779eb826047466b60f7d78fd2e76e9b01f8706e27d8478f99bab2bc465b34716101963e60ee1a2d0653826395c52deeff831126649b4fb5b6e950a933a90846abc7fb13"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xf58ca000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003b0001002abd7000fedbdf2507000000", @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f00007e4000/0x4000)=nil, &(0x7f0000a60000/0x4000)=nil, 0x0, 0x0, 0x0, 0x22, 0x4, 0x21, 0x4d}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000240)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x1, 0x2, 0x86, 0x2}, 0x20) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 663.457274ms ago: executing program 2 (id=13410): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00'}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022050000830e233cc000"], 0x0}, 0x0) fremovexattr(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="73797374656d2e05006e643000"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) syz_open_dev$video4linux(0x0, 0x80013d5, 0x121380) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pidfd_send_signal(r7, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xffffffffffffff11, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x4000014) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@int=0x4, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000003400)=ANY=[@ANYBLOB="12010000000000406a0559000000000000010902240001000000000904000001030002000921"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xd, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) close(r9) 629.562587ms ago: executing program 4 (id=13411): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000300)=[{0x8, 0x6, 0x8, 0x1}, {0xb, 0x9, 0x4, 0x4}]}) creat(&(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000002700), 0x0, 0x321980) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xca}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x0, 0x1fd, 0x0, 0xb49, 0x10000, 0x8, 0xf, 0x6}, 0x0) socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x3) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2b637075a0"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2d63707520f46dc06aae04d6c8390e362dd47167f959603b1c0049d9ea213f575f8f98d095ba0d1d579f0c2f26590fe3c8bd9007d785976eee5eb32bfef67eaf7cc05fc666b22a08ac4e8996797fdb7e7e0e98a50afbce63c2fb25d5a6295e1a2dd1ddc61d6ddb8190622411e22df70aaeb7453fbc576ee01dfa253da59d9a999fbb53f1376cb4bdced1bdd7852660c6c798ed4e958064da2b47ccba450d5ac1aff5b87ac6d1fccf4658"], 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) 413.809085ms ago: executing program 3 (id=13412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x1fd, {0x0, 0xa}, {0x1}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r10, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000240), 0x4) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r8, 0x0, 0x4ffe6, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff0324) 318.340748ms ago: executing program 4 (id=13413): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x8, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r3, &(0x7f0000000ec0)=""/4096, 0x1000) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000002280), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x50, r4, 0x4f6f5000) 109.904636ms ago: executing program 3 (id=13414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0xfffffffd, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000800904000000010100000a24010000060201020c24020502020602060006ff090401000001020000090401010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504072501000006000904020000010200000904020101ffff00000724d17bf018000724015afd05000f2402020000859900354fa656e9470c2402011f024808"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 88.752825ms ago: executing program 4 (id=13415): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1e, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$I2C_TENBIT(r1, 0x704, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x2, 0x3, 0x11, 0x8, "3508b736236c4696625377c061fd47aefc1cc98de31f05b83720f756713681d4d40a6349af5da26b845059a4ddfb523e8b5715aaff21dd3f78f9dab8ef1ad928", "c140f61d776a16f7c220aa79b1e9010a4e692eb0b2f79e7f1ddd22983789ddd0", [0x10001, 0x4]}) 0s ago: executing program 0 (id=13416): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0xbcad, [0x1, 0x8001, 0xb, 0xc000, 0x94c, 0x100, 0x2d8a, 0xfde8, 0x6, 0x8, 0x40, 0x400, 0x6, 0x4, 0x5, 0x16, 0x214, 0x2, 0x52, 0x0, 0x7fff, 0x4, 0x80, 0x9, 0x5, 0x5, 0xfff, 0xb12, 0x8, 0x8, 0x0, 0x1000, 0xe, 0xffff, 0x3, 0x10, 0x2, 0xb4e, 0x3, 0x4, 0x5, 0x1ff, 0x8000, 0x48, 0x8, 0x4, 0x9, 0x4], 0x7}) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6"}) dup(r1) kernel console output (not intermixed with test programs): 0 [ 2130.479940][T13378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.479960][T13378] RIP: 0023:0xf708e539 [ 2130.479972][T13378] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2130.479984][T13378] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2130.479998][T13378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2130.480007][T13378] RDX: 000000000000fe33 RSI: 0000000000000000 RDI: 0000000000000000 [ 2130.480015][T13378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.480023][T13378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2130.480031][T13378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.480049][T13378] [ 2130.959305][T13382] program syz.0.12598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2131.013439][ T6184] usb 3-1: USB disconnect, device number 110 [ 2131.400393][T13583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12602'. [ 2131.573728][T13602] netlink: 12824 bytes leftover after parsing attributes in process `syz.4.12606'. [ 2131.712947][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2131.725059][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.244807][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12609'. [ 2132.519321][T13914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2132.537051][T13914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.602699][T13914] loop2: detected capacity change from 0 to 7 [ 2132.619670][T13919] Dev loop2: unable to read RDB block 7 [ 2132.650994][T13919] loop2: unable to read partition table [ 2132.688984][T13919] loop2: partition table beyond EOD, truncated [ 2132.735184][T13914] Dev loop2: unable to read RDB block 7 [ 2132.776117][T13914] loop2: unable to read partition table [ 2132.817737][T13914] loop2: partition table beyond EOD, truncated [ 2132.863244][T13914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2133.047727][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12614'. [ 2133.611530][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2133.646658][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2133.807984][T14385] FAULT_INJECTION: forcing a failure. [ 2133.807984][T14385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.822323][T14385] CPU: 1 UID: 0 PID: 14385 Comm: syz.0.12622 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2133.822362][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2133.822376][T14385] Call Trace: [ 2133.822385][T14385] [ 2133.822395][T14385] dump_stack_lvl+0x189/0x250 [ 2133.822434][T14385] ? __pfx____ratelimit+0x10/0x10 [ 2133.822466][T14385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.822511][T14385] ? __pfx__printk+0x10/0x10 [ 2133.822545][T14385] should_fail_ex+0x414/0x560 [ 2133.822576][T14385] _copy_to_user+0x31/0xb0 [ 2133.822598][T14385] simple_read_from_buffer+0xe1/0x170 [ 2133.822625][T14385] proc_fail_nth_read+0x1df/0x250 [ 2133.822653][T14385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2133.822680][T14385] ? rw_verify_area+0x258/0x650 [ 2133.822710][T14385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2133.822736][T14385] vfs_read+0x1fd/0x980 [ 2133.822772][T14385] ? __pfx___mutex_lock+0x10/0x10 [ 2133.822791][T14385] ? __pfx_vfs_read+0x10/0x10 [ 2133.822824][T14385] ? __fget_files+0x2a/0x420 [ 2133.822851][T14385] ? __fget_files+0x3a0/0x420 [ 2133.822872][T14385] ? __fget_files+0x2a/0x420 [ 2133.822903][T14385] ksys_read+0x145/0x250 [ 2133.822924][T14385] ? __pfx_ksys_read+0x10/0x10 [ 2133.822957][T14385] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2133.822991][T14385] ? lockdep_hardirqs_on+0x9c/0x150 [ 2133.823022][T14385] __do_fast_syscall_32+0xb6/0x2b0 [ 2133.823041][T14385] ? lockdep_hardirqs_on+0x9c/0x150 [ 2133.823074][T14385] do_fast_syscall_32+0x34/0x80 [ 2133.823093][T14385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2133.823117][T14385] RIP: 0023:0xf7f03539 [ 2133.823134][T14385] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2133.823152][T14385] RSP: 002b:00000000f5026590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2133.823172][T14385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5026620 [ 2133.823187][T14385] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 2133.823199][T14385] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2133.823210][T14385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2133.823222][T14385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2133.823251][T14385] [ 2134.377128][T14557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.404039][T14557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.509639][T14662] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12629'. [ 2134.540194][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.566424][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.655431][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.664377][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.781740][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12633'. [ 2134.833329][T10831] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2134.840143][T14775] netlink: 'syz.4.12634': attribute type 9 has an invalid length. [ 2134.850570][T14775] netlink: 'syz.4.12634': attribute type 6 has an invalid length. [ 2134.993285][T10831] usb 3-1: Using ep0 maxpacket: 16 [ 2135.001624][T10831] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2135.012691][T10831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2135.036537][T10831] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2135.053459][T10831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.061502][T10831] usb 3-1: Product: syz [ 2135.081079][T10831] usb 3-1: Manufacturer: syz [ 2135.086165][T10831] usb 3-1: SerialNumber: syz [ 2135.188799][T14884] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12638'. [ 2135.292705][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12637'. [ 2135.340099][T10831] usb 3-1: 0:2 : does not exist [ 2135.350125][T14897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.375160][T10831] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2135.389739][T14897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.482761][T10831] usb 3-1: USB disconnect, device number 111 [ 2135.530626][T25747] udevd[25747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2135.700089][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12643'. [ 2135.721782][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12643'. [ 2135.827967][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12645'. [ 2135.837683][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12646'. [ 2135.877991][T15204] fuseblk: Unknown parameter '<0x0000000000000005' [ 2135.980527][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12648'. [ 2136.310393][T15378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.340672][T15378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.413407][ T7529] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2136.458698][T15431] FAULT_INJECTION: forcing a failure. [ 2136.458698][T15431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.474186][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.4.12657 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2136.474216][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2136.474229][T15431] Call Trace: [ 2136.474237][T15431] [ 2136.474246][T15431] dump_stack_lvl+0x189/0x250 [ 2136.474281][T15431] ? __pfx____ratelimit+0x10/0x10 [ 2136.474311][T15431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2136.474342][T15431] ? __pfx__printk+0x10/0x10 [ 2136.474376][T15431] should_fail_ex+0x414/0x560 [ 2136.474407][T15431] _copy_to_user+0x31/0xb0 [ 2136.474429][T15431] simple_read_from_buffer+0xe1/0x170 [ 2136.474455][T15431] proc_fail_nth_read+0x1df/0x250 [ 2136.474483][T15431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2136.474510][T15431] ? rw_verify_area+0x258/0x650 [ 2136.474539][T15431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2136.474565][T15431] vfs_read+0x1fd/0x980 [ 2136.474600][T15431] ? __pfx___mutex_lock+0x10/0x10 [ 2136.474622][T15431] ? __pfx_vfs_read+0x10/0x10 [ 2136.474654][T15431] ? __fget_files+0x2a/0x420 [ 2136.474681][T15431] ? __fget_files+0x3a0/0x420 [ 2136.474703][T15431] ? __fget_files+0x2a/0x420 [ 2136.474733][T15431] ksys_read+0x145/0x250 [ 2136.474754][T15431] ? __pfx_ksys_read+0x10/0x10 [ 2136.474787][T15431] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2136.474819][T15431] ? lockdep_hardirqs_on+0x9c/0x150 [ 2136.474852][T15431] __do_fast_syscall_32+0xb6/0x2b0 [ 2136.474873][T15431] ? lockdep_hardirqs_on+0x9c/0x150 [ 2136.474907][T15431] do_fast_syscall_32+0x34/0x80 [ 2136.474926][T15431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2136.474951][T15431] RIP: 0023:0xf7f46539 [ 2136.474969][T15431] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2136.474988][T15431] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2136.475009][T15431] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5066620 [ 2136.475023][T15431] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 2136.475036][T15431] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2136.475047][T15431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2136.475068][T15431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2136.475097][T15431] [ 2136.826214][ T7529] usb 3-1: Using ep0 maxpacket: 32 [ 2136.834298][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2136.846030][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2136.856354][ T7529] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2136.867684][ T7529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.890875][ T7529] usb 3-1: config 0 descriptor?? [ 2136.908730][T15640] FAULT_INJECTION: forcing a failure. [ 2136.908730][T15640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.909857][T15638] FAULT_INJECTION: forcing a failure. [ 2136.909857][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.935780][T15638] CPU: 0 UID: 0 PID: 15638 Comm: syz.4.12660 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2136.935807][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2136.935824][T15638] Call Trace: [ 2136.935833][T15638] [ 2136.935841][T15638] dump_stack_lvl+0x189/0x250 [ 2136.935876][T15638] ? __pfx____ratelimit+0x10/0x10 [ 2136.935907][T15638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2136.935937][T15638] ? __pfx__printk+0x10/0x10 [ 2136.935958][T15638] ? __might_fault+0xb0/0x130 [ 2136.935986][T15638] should_fail_ex+0x414/0x560 [ 2136.936016][T15638] _copy_from_iter+0x1db/0x16f0 [ 2136.936060][T15638] ? rcu_is_watching+0x15/0xb0 [ 2136.936090][T15638] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 2136.936111][T15638] ? __pfx__copy_from_iter+0x10/0x10 [ 2136.936132][T15638] ? __build_skb_around+0x257/0x3e0 [ 2136.936150][T15638] ? netlink_sendmsg+0x642/0xb30 [ 2136.936165][T15638] ? skb_put+0x11b/0x210 [ 2136.936183][T15638] netlink_sendmsg+0x6b2/0xb30 [ 2136.936204][T15638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2136.936222][T15638] ? __import_iovec+0x5d4/0x7f0 [ 2136.936234][T15638] ? aa_sock_msg_perm+0x94/0x160 [ 2136.936253][T15638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2136.936270][T15638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2136.936294][T15638] __sock_sendmsg+0x21c/0x270 [ 2136.936316][T15638] ____sys_sendmsg+0x505/0x830 [ 2136.936337][T15638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2136.936363][T15638] ___sys_sendmsg+0x21f/0x2a0 [ 2136.936382][T15638] ? __pfx____sys_sendmsg+0x10/0x10 [ 2136.936420][T15638] ? __fget_files+0x2a/0x420 [ 2136.936435][T15638] ? __fget_files+0x3a0/0x420 [ 2136.936456][T15638] __sys_sendmsg+0x164/0x220 [ 2136.936474][T15638] ? __pfx___sys_sendmsg+0x10/0x10 [ 2136.936496][T15638] ? rcu_is_watching+0x15/0xb0 [ 2136.936518][T15638] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2136.936540][T15638] ? lockdep_hardirqs_on+0x9c/0x150 [ 2136.936561][T15638] __do_fast_syscall_32+0xb6/0x2b0 [ 2136.936574][T15638] ? lockdep_hardirqs_on+0x9c/0x150 [ 2136.936614][T15638] do_fast_syscall_32+0x34/0x80 [ 2136.936628][T15638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2136.936646][T15638] RIP: 0023:0xf7f46539 [ 2136.936659][T15638] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2136.936672][T15638] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2136.936687][T15638] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 2136.936697][T15638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2136.936706][T15638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2136.936714][T15638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2136.936723][T15638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2136.936742][T15638] [ 2136.937706][T15640] CPU: 1 UID: 0 PID: 15640 Comm: syz.3.12661 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2136.937732][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2136.937744][T15640] Call Trace: [ 2136.937752][T15640] [ 2136.937762][T15640] dump_stack_lvl+0x189/0x250 [ 2136.937796][T15640] ? __pfx____ratelimit+0x10/0x10 [ 2136.937826][T15640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2136.937857][T15640] ? __pfx__printk+0x10/0x10 [ 2136.937878][T15640] ? __might_fault+0xb0/0x130 [ 2136.937909][T15640] should_fail_ex+0x414/0x560 [ 2136.937940][T15640] _copy_from_user+0x2d/0xb0 [ 2136.937961][T15640] get_compat_msghdr+0xad/0x4a0 [ 2136.937994][T15640] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2136.938015][T15640] ? rcu_is_watching+0x15/0xb0 [ 2136.938044][T15640] ? ___sys_recvmsg+0x1c4/0x510 [ 2136.938077][T15640] ___sys_recvmsg+0x17f/0x510 [ 2136.938109][T15640] ? __pfx____sys_recvmsg+0x10/0x10 [ 2136.938155][T15640] ? __fget_files+0x3a0/0x420 [ 2136.938178][T15640] do_recvmmsg+0x36a/0x770 [ 2136.938204][T15640] ? __pfx_do_recvmmsg+0x10/0x10 [ 2136.938244][T15640] ? __pfx_vfs_write+0x10/0x10 [ 2136.938288][T15640] __sys_recvmmsg+0x19d/0x280 [ 2136.938313][T15640] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2136.938330][T15640] ? ksys_write+0x22a/0x250 [ 2136.938349][T15640] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2136.938383][T15640] __do_fast_syscall_32+0xb6/0x2b0 [ 2136.938403][T15640] ? lockdep_hardirqs_on+0x9c/0x150 [ 2136.938435][T15640] do_fast_syscall_32+0x34/0x80 [ 2136.938453][T15640] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2136.938470][T15640] RIP: 0023:0xf708e539 [ 2136.938482][T15640] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2136.938495][T15640] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2136.938513][T15640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800066c0 [ 2136.938528][T15640] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 2136.938540][T15640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2136.938552][T15640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2136.938563][T15640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2136.938589][T15640] [ 2137.529074][ T7529] usbhid 3-1:0.0: can't add hid device: -71 [ 2137.535462][ T7529] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2137.566133][ T7529] usb 3-1: USB disconnect, device number 112 [ 2138.483418][ T7529] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2138.635726][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2138.673185][ T7529] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2138.701687][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2138.734355][ T7529] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2138.753254][ T7529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.786811][ T7529] usb 3-1: config 0 descriptor?? [ 2138.842259][ T7529] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 2138.874799][ T7529] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 2138.894420][T16519] FAULT_INJECTION: forcing a failure. [ 2138.894420][T16519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2138.935855][T16519] CPU: 1 UID: 0 PID: 16519 Comm: syz.0.12677 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2138.935884][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2138.935896][T16519] Call Trace: [ 2138.935903][T16519] [ 2138.935911][T16519] dump_stack_lvl+0x189/0x250 [ 2138.935945][T16519] ? __pfx____ratelimit+0x10/0x10 [ 2138.935974][T16519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2138.936003][T16519] ? __pfx__printk+0x10/0x10 [ 2138.936075][T16519] should_fail_ex+0x414/0x560 [ 2138.936123][T16519] _copy_to_user+0x31/0xb0 [ 2138.936146][T16519] simple_read_from_buffer+0xe1/0x170 [ 2138.936172][T16519] proc_fail_nth_read+0x1df/0x250 [ 2138.936200][T16519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2138.936228][T16519] ? rw_verify_area+0x258/0x650 [ 2138.936269][T16519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2138.936293][T16519] vfs_read+0x1fd/0x980 [ 2138.936329][T16519] ? __pfx_vfs_read+0x10/0x10 [ 2138.936359][T16519] ? do_utimes+0x1a1/0x2a0 [ 2138.936382][T16519] ? do_sys_openat2+0x154/0x1c0 [ 2138.936405][T16519] ? kmem_cache_free+0x18f/0x400 [ 2138.936425][T16519] ? __pfx_do_utimes+0x10/0x10 [ 2138.936450][T16519] ? do_sys_openat2+0x154/0x1c0 [ 2138.936483][T16519] ksys_read+0x145/0x250 [ 2138.936503][T16519] ? __pfx_ksys_read+0x10/0x10 [ 2138.936532][T16519] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2138.936563][T16519] ? lockdep_hardirqs_on+0x9c/0x150 [ 2138.936594][T16519] __do_fast_syscall_32+0xb6/0x2b0 [ 2138.936613][T16519] ? lockdep_hardirqs_on+0x9c/0x150 [ 2138.936644][T16519] do_fast_syscall_32+0x34/0x80 [ 2138.936663][T16519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2138.936686][T16519] RIP: 0023:0xf7f03539 [ 2138.936703][T16519] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2138.936721][T16519] RSP: 002b:00000000f5026590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2138.936741][T16519] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5026620 [ 2138.936755][T16519] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 2138.936767][T16519] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2138.936779][T16519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2138.936790][T16519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2138.936817][T16519] [ 2139.292699][T16163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.352141][T16163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.399627][T16657] netlink: 'syz.3.12679': attribute type 12 has an invalid length. [ 2139.521324][ T7529] usb 3-1: USB disconnect, device number 113 [ 2139.950781][T17002] __nla_validate_parse: 2 callbacks suppressed [ 2139.950801][T17002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12684'. [ 2139.994679][T17004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.004325][T17004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.367799][T17073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.387996][T17073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.555217][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 2140.555235][ T30] audit: type=1326 audit(1749930113.390:11933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.2.12695" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 2140.617018][ T30] audit: type=1326 audit(1749930113.420:11934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.2.12695" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 2141.013762][T17446] netlink: 'syz.2.12699': attribute type 10 has an invalid length. [ 2141.023085][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12699'. [ 2141.032337][T17446] bridge_slave_1: left allmulticast mode [ 2141.038898][T17446] bridge_slave_1: left promiscuous mode [ 2141.044968][T17446] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.056316][T17446] bridge_slave_0: left allmulticast mode [ 2141.062072][T17446] bridge_slave_0: left promiscuous mode [ 2141.068221][T17446] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.537062][T17660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.554870][T17660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.570578][T17660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.586107][T17660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.641373][T17674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.661127][T17674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2142.203374][ T7529] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2142.295859][T17946] batadv_slave_0: entered promiscuous mode [ 2142.305213][T17946] batadv_slave_0: entered allmulticast mode [ 2142.338247][T17946] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2142.384873][ T7529] usb 3-1: Using ep0 maxpacket: 32 [ 2142.392212][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12715'. [ 2142.400958][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2142.423698][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2142.438034][ T7529] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2142.448148][T17980] [U] #! ./file0 [ 2142.451916][ T7529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.464190][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2142.472979][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2142.485874][ T7529] usb 3-1: config 0 descriptor?? [ 2142.508121][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2142.533684][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2142.553465][T17980] random: crng reseeded on system resumption [ 2142.616716][T17979] [U] ¥ [ 2142.774721][ T7529] usbhid 3-1:0.0: can't add hid device: -71 [ 2142.780838][ T7529] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2142.792423][ T7529] usb 3-1: USB disconnect, device number 114 [ 2142.852885][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12719'. [ 2142.992647][T17993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.004628][T17993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2143.025978][T17993] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12721'. [ 2143.037214][T17993] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12721'. [ 2143.644896][T18205] FAULT_INJECTION: forcing a failure. [ 2143.644896][T18205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2143.660368][T18205] CPU: 1 UID: 0 PID: 18205 Comm: syz.4.12726 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2143.660397][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2143.660410][T18205] Call Trace: [ 2143.660419][T18205] [ 2143.660428][T18205] dump_stack_lvl+0x189/0x250 [ 2143.660465][T18205] ? __pfx____ratelimit+0x10/0x10 [ 2143.660496][T18205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2143.660527][T18205] ? __pfx__printk+0x10/0x10 [ 2143.660562][T18205] should_fail_ex+0x414/0x560 [ 2143.660595][T18205] _copy_to_user+0x31/0xb0 [ 2143.660618][T18205] simple_read_from_buffer+0xe1/0x170 [ 2143.660651][T18205] proc_fail_nth_read+0x1df/0x250 [ 2143.660679][T18205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2143.660708][T18205] ? rw_verify_area+0x258/0x650 [ 2143.660738][T18205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2143.660765][T18205] vfs_read+0x1fd/0x980 [ 2143.660801][T18205] ? __pfx___mutex_lock+0x10/0x10 [ 2143.660822][T18205] ? __pfx_vfs_read+0x10/0x10 [ 2143.660854][T18205] ? __fget_files+0x2a/0x420 [ 2143.660899][T18205] ? __fget_files+0x3a0/0x420 [ 2143.660922][T18205] ? __fget_files+0x2a/0x420 [ 2143.660957][T18205] ksys_read+0x145/0x250 [ 2143.660980][T18205] ? __pfx_ksys_read+0x10/0x10 [ 2143.661017][T18205] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2143.661053][T18205] ? lockdep_hardirqs_on+0x9c/0x150 [ 2143.661090][T18205] __do_fast_syscall_32+0xb6/0x2b0 [ 2143.661112][T18205] ? lockdep_hardirqs_on+0x9c/0x150 [ 2143.661150][T18205] do_fast_syscall_32+0x34/0x80 [ 2143.661172][T18205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2143.661199][T18205] RIP: 0023:0xf7f46539 [ 2143.661218][T18205] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2143.661237][T18205] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2143.661260][T18205] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5066620 [ 2143.661276][T18205] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 2143.661290][T18205] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2143.661302][T18205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2143.661316][T18205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2143.661351][T18205] [ 2143.962379][T18208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.976800][T18208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2144.529698][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12732'. [ 2145.458365][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.472191][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.744102][T18338] syzkaller1: entered promiscuous mode [ 2145.749948][T18338] syzkaller1: entered allmulticast mode [ 2146.234562][ T30] audit: type=1326 audit(1749930119.060:11935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.339899][ T30] audit: type=1326 audit(1749930119.060:11936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.363280][ T30] audit: type=1326 audit(1749930119.150:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.386973][ T30] audit: type=1326 audit(1749930119.150:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.411895][ T30] audit: type=1326 audit(1749930119.150:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.452283][ T30] audit: type=1326 audit(1749930119.150:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.540137][ T30] audit: type=1326 audit(1749930119.160:11941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.599332][ T30] audit: type=1326 audit(1749930119.160:11942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.643146][ T30] audit: type=1326 audit(1749930119.160:11943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.649070][T18571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.699038][ T30] audit: type=1326 audit(1749930119.160:11944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18443 comm="syz.3.12740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2146.728528][T18571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2146.768887][T18571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.790812][T18571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.386020][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12751'. [ 2147.397547][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12751'. [ 2147.405698][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.426294][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.593093][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2147.753129][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 2147.768619][T19092] fuse: Unknown parameter 'fd0x0000000000000004' [ 2147.775300][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.775327][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2147.775364][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2147.777905][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 2147.813179][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.821228][ T10] usb 3-1: Product: syz [ 2147.831398][ T10] usb 3-1: Manufacturer: syz [ 2147.837158][ T10] usb 3-1: SerialNumber: syz [ 2147.851725][T19092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.864782][ T10] usb 3-1: config 0 descriptor?? [ 2147.872328][T19092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.018504][T19117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.030368][T19117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.201641][T19202] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12758'. [ 2148.245029][T19206] FAULT_INJECTION: forcing a failure. [ 2148.245029][T19206] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.245058][T19206] CPU: 0 UID: 0 PID: 19206 Comm: syz.0.12759 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2148.245077][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2148.245086][T19206] Call Trace: [ 2148.245092][T19206] [ 2148.245099][T19206] dump_stack_lvl+0x189/0x250 [ 2148.245127][T19206] ? __pfx____ratelimit+0x10/0x10 [ 2148.245151][T19206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2148.245175][T19206] ? __pfx__printk+0x10/0x10 [ 2148.245202][T19206] should_fail_ex+0x414/0x560 [ 2148.245234][T19206] should_failslab+0xa8/0x100 [ 2148.245253][T19206] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2148.245278][T19206] ? skb_clone+0x212/0x3a0 [ 2148.245302][T19206] skb_clone+0x212/0x3a0 [ 2148.245324][T19206] __netlink_deliver_tap+0x404/0x850 [ 2148.245351][T19206] ? netlink_deliver_tap+0x2e/0x1b0 [ 2148.245370][T19206] netlink_deliver_tap+0x19c/0x1b0 [ 2148.245389][T19206] netlink_sendskb+0x68/0x140 [ 2148.245406][T19206] netlink_rcv_skb+0x28c/0x470 [ 2148.245424][T19206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2148.245442][T19206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2148.245469][T19206] ? netlink_deliver_tap+0x2e/0x1b0 [ 2148.245487][T19206] ? netlink_deliver_tap+0x2e/0x1b0 [ 2148.245508][T19206] netlink_unicast+0x758/0x8d0 [ 2148.245531][T19206] netlink_sendmsg+0x805/0xb30 [ 2148.245556][T19206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2148.245588][T19206] ? aa_sock_msg_perm+0x94/0x160 [ 2148.245609][T19206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2148.245627][T19206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2148.245645][T19206] __sock_sendmsg+0x21c/0x270 [ 2148.245669][T19206] sock_write_iter+0x258/0x330 [ 2148.245691][T19206] ? __pfx_sock_write_iter+0x10/0x10 [ 2148.245737][T19206] ? bpf_lsm_file_permission+0x9/0x20 [ 2148.245758][T19206] ? security_file_permission+0x75/0x290 [ 2148.245781][T19206] vfs_write+0x548/0xa90 [ 2148.245808][T19206] ? __pfx_sock_write_iter+0x10/0x10 [ 2148.245830][T19206] ? __pfx_vfs_write+0x10/0x10 [ 2148.245861][T19206] ? __fget_files+0x2a/0x420 [ 2148.245885][T19206] ksys_write+0x145/0x250 [ 2148.245900][T19206] ? __pfx_ksys_write+0x10/0x10 [ 2148.245916][T19206] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2148.245942][T19206] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.245967][T19206] __do_fast_syscall_32+0xb6/0x2b0 [ 2148.245982][T19206] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.246007][T19206] do_fast_syscall_32+0x34/0x80 [ 2148.246021][T19206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2148.246039][T19206] RIP: 0023:0xf7f03539 [ 2148.246052][T19206] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2148.246065][T19206] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2148.246081][T19206] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 2148.246091][T19206] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 2148.246100][T19206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2148.246109][T19206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2148.246118][T19206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2148.246138][T19206] [ 2148.298250][T19205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.594758][T19205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.844460][ T6184] usb 3-1: USB disconnect, device number 115 [ 2148.890467][T19214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.915735][T19214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.958481][T19218] raw-gadget.3 gadget.0: failed to queue resume event [ 2148.981200][T19217] raw-gadget.3 gadget.0: failed to queue suspend event [ 2149.120141][T19226] FAULT_INJECTION: forcing a failure. [ 2149.120141][T19226] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.134340][T19226] CPU: 1 UID: 0 PID: 19226 Comm: syz.0.12767 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2149.134368][T19226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2149.134381][T19226] Call Trace: [ 2149.134390][T19226] [ 2149.134397][T19226] dump_stack_lvl+0x189/0x250 [ 2149.134423][T19226] ? __pfx____ratelimit+0x10/0x10 [ 2149.134447][T19226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.134469][T19226] ? __pfx__printk+0x10/0x10 [ 2149.134488][T19226] ? __pfx___might_resched+0x10/0x10 [ 2149.134514][T19226] should_fail_ex+0x414/0x560 [ 2149.134536][T19226] should_failslab+0xa8/0x100 [ 2149.134552][T19226] __kmalloc_noprof+0xcb/0x4f0 [ 2149.134565][T19226] ? __kasan_kmalloc+0x93/0xb0 [ 2149.134578][T19226] ? nla_strdup+0x9d/0x140 [ 2149.134601][T19226] nla_strdup+0x9d/0x140 [ 2149.134623][T19226] nf_tables_newtable+0x491/0x1890 [ 2149.134656][T19226] nfnetlink_rcv+0x1132/0x2520 [ 2149.134700][T19226] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2149.134732][T19226] ? ref_tracker_free+0x63a/0x7d0 [ 2149.134772][T19226] ? __netlink_deliver_tap+0x807/0x850 [ 2149.134795][T19226] ? netlink_deliver_tap+0x2e/0x1b0 [ 2149.134812][T19226] ? netlink_deliver_tap+0x2e/0x1b0 [ 2149.134832][T19226] netlink_unicast+0x758/0x8d0 [ 2149.134856][T19226] netlink_sendmsg+0x805/0xb30 [ 2149.134879][T19226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2149.134898][T19226] ? __import_iovec+0x5d4/0x7f0 [ 2149.134911][T19226] ? aa_sock_msg_perm+0x94/0x160 [ 2149.134931][T19226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2149.134950][T19226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2149.134968][T19226] __sock_sendmsg+0x21c/0x270 [ 2149.134992][T19226] ____sys_sendmsg+0x505/0x830 [ 2149.135014][T19226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2149.135044][T19226] ___sys_sendmsg+0x21f/0x2a0 [ 2149.135063][T19226] ? __pfx____sys_sendmsg+0x10/0x10 [ 2149.135112][T19226] ? __fget_files+0x2a/0x420 [ 2149.135128][T19226] ? __fget_files+0x3a0/0x420 [ 2149.135151][T19226] __sys_sendmsg+0x164/0x220 [ 2149.135170][T19226] ? __pfx___sys_sendmsg+0x10/0x10 [ 2149.135199][T19226] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2149.135223][T19226] ? lockdep_hardirqs_on+0x9c/0x150 [ 2149.135246][T19226] __do_fast_syscall_32+0xb6/0x2b0 [ 2149.135260][T19226] ? lockdep_hardirqs_on+0x9c/0x150 [ 2149.135284][T19226] do_fast_syscall_32+0x34/0x80 [ 2149.135297][T19226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2149.135315][T19226] RIP: 0023:0xf7f03539 [ 2149.135327][T19226] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2149.135340][T19226] RSP: 002b:00000000f500555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2149.135355][T19226] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800000c0 [ 2149.135370][T19226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2149.135379][T19226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2149.135387][T19226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2149.135395][T19226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2149.135415][T19226] [ 2149.959123][T19231] FAULT_INJECTION: forcing a failure. [ 2149.959123][T19231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2149.983542][T19231] CPU: 1 UID: 0 PID: 19231 Comm: syz.4.12771 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2149.983563][T19231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2149.983573][T19231] Call Trace: [ 2149.983579][T19231] [ 2149.983585][T19231] dump_stack_lvl+0x189/0x250 [ 2149.983612][T19231] ? __pfx____ratelimit+0x10/0x10 [ 2149.983635][T19231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.983657][T19231] ? __pfx__printk+0x10/0x10 [ 2149.983673][T19231] ? __might_fault+0xb0/0x130 [ 2149.983694][T19231] should_fail_ex+0x414/0x560 [ 2149.983716][T19231] _copy_from_user+0x2d/0xb0 [ 2149.983730][T19231] get_compat_msghdr+0xad/0x4a0 [ 2149.983754][T19231] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2149.983773][T19231] ? rcu_is_watching+0x15/0xb0 [ 2149.983796][T19231] ? ___sys_recvmsg+0x1c4/0x510 [ 2149.983831][T19231] ___sys_recvmsg+0x17f/0x510 [ 2149.983852][T19231] ? __pfx____sys_recvmsg+0x10/0x10 [ 2149.983885][T19231] ? __fget_files+0x3a0/0x420 [ 2149.983924][T19231] do_recvmmsg+0x36a/0x770 [ 2149.983949][T19231] ? __pfx_do_recvmmsg+0x10/0x10 [ 2149.983976][T19231] ? __pfx_vfs_write+0x10/0x10 [ 2149.984008][T19231] __sys_recvmmsg+0x19d/0x280 [ 2149.984035][T19231] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2149.984052][T19231] ? ksys_write+0x22a/0x250 [ 2149.984071][T19231] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2149.984094][T19231] __do_fast_syscall_32+0xb6/0x2b0 [ 2149.984108][T19231] ? lockdep_hardirqs_on+0x9c/0x150 [ 2149.984132][T19231] do_fast_syscall_32+0x34/0x80 [ 2149.984145][T19231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2149.984163][T19231] RIP: 0023:0xf7f46539 [ 2149.984175][T19231] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2149.984188][T19231] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2149.984203][T19231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800066c0 [ 2149.984213][T19231] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 2149.984221][T19231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2149.984230][T19231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2149.984239][T19231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2149.984258][T19231] [ 2150.243329][T19238] FAULT_INJECTION: forcing a failure. [ 2150.243329][T19238] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.256278][T19238] CPU: 1 UID: 0 PID: 19238 Comm: syz.5.12774 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2150.256313][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2150.256323][T19238] Call Trace: [ 2150.256329][T19238] [ 2150.256335][T19238] dump_stack_lvl+0x189/0x250 [ 2150.256364][T19238] ? __pfx____ratelimit+0x10/0x10 [ 2150.256388][T19238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2150.256412][T19238] ? __pfx__printk+0x10/0x10 [ 2150.256434][T19238] ? ref_tracker_alloc+0x318/0x460 [ 2150.256457][T19238] should_fail_ex+0x414/0x560 [ 2150.256479][T19238] should_failslab+0xa8/0x100 [ 2150.256497][T19238] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2150.256521][T19238] ? skb_clone+0x212/0x3a0 [ 2150.256545][T19238] skb_clone+0x212/0x3a0 [ 2150.256568][T19238] __netlink_deliver_tap+0x404/0x850 [ 2150.256594][T19238] ? netlink_deliver_tap+0x2e/0x1b0 [ 2150.256613][T19238] netlink_deliver_tap+0x19c/0x1b0 [ 2150.256632][T19238] netlink_unicast+0x72f/0x8d0 [ 2150.256655][T19238] netlink_sendmsg+0x805/0xb30 [ 2150.256680][T19238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2150.256700][T19238] ? __import_iovec+0x5d4/0x7f0 [ 2150.256714][T19238] ? aa_sock_msg_perm+0x94/0x160 [ 2150.256735][T19238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2150.256755][T19238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2150.256774][T19238] __sock_sendmsg+0x21c/0x270 [ 2150.256799][T19238] ____sys_sendmsg+0x505/0x830 [ 2150.256822][T19238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2150.256854][T19238] ___sys_sendmsg+0x21f/0x2a0 [ 2150.256874][T19238] ? __pfx____sys_sendmsg+0x10/0x10 [ 2150.256920][T19238] ? __fget_files+0x2a/0x420 [ 2150.256936][T19238] ? __fget_files+0x3a0/0x420 [ 2150.256961][T19238] __sys_sendmsg+0x164/0x220 [ 2150.256982][T19238] ? __pfx___sys_sendmsg+0x10/0x10 [ 2150.257018][T19238] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2150.257043][T19238] ? lockdep_hardirqs_on+0x9c/0x150 [ 2150.257068][T19238] __do_fast_syscall_32+0xb6/0x2b0 [ 2150.257083][T19238] ? lockdep_hardirqs_on+0x9c/0x150 [ 2150.257109][T19238] do_fast_syscall_32+0x34/0x80 [ 2150.257123][T19238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2150.257142][T19238] RIP: 0023:0xf7ff5539 [ 2150.257155][T19238] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2150.257169][T19238] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2150.257185][T19238] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 2150.257197][T19238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2150.257206][T19238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2150.257215][T19238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2150.257223][T19238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2150.257244][T19238] [ 2150.606517][T19240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.627655][T19240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.637924][T19239] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.12770'. [ 2150.760039][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.843811][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.887530][T19252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12778'. [ 2150.960805][T19250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12780'. [ 2151.427691][T19333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2151.519074][T19372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2151.547029][T19372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2152.058722][T19380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12790'. [ 2153.321139][T19614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.356455][T19614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.366591][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12810'. [ 2154.637163][T19935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.839065][T19935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.753246][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2155.865397][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.898964][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.923345][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 2155.948802][ T10] usb 3-1: config 0 has an invalid interface number: 145 but max is 1 [ 2155.959032][ T10] usb 3-1: config 0 has an invalid interface number: 43 but max is 1 [ 2155.968371][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.989222][ T10] usb 3-1: config 0 has no interface number 0 [ 2155.997842][ T10] usb 3-1: config 0 has no interface number 1 [ 2156.005068][ T10] usb 3-1: config 0 interface 43 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2156.020086][ T10] usb 3-1: config 0 interface 145 has no altsetting 0 [ 2156.030683][ T10] usb 3-1: config 0 interface 43 has no altsetting 0 [ 2156.041737][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 2156.057935][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.067426][ T10] usb 3-1: Product: syz [ 2156.071953][ T10] usb 3-1: Manufacturer: syz [ 2156.078329][ T10] usb 3-1: SerialNumber: syz [ 2156.095944][ T10] usb 3-1: config 0 descriptor?? [ 2156.162419][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.175746][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.311836][T20256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.336122][T20256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.416294][ T10] keyspan_pda 3-1:0.145: required endpoints missing [ 2156.448504][ T10] keyspan_pda 3-1:0.43: required endpoints missing [ 2156.500972][ T10] usb 3-1: USB disconnect, device number 116 [ 2156.588940][T20789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.613873][T20789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.744969][T20795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.757178][T20795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.700928][T20907] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12842'. [ 2157.718536][T20909] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12841'. [ 2157.890036][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12844'. [ 2157.941284][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12844'. [ 2158.127602][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12846'. [ 2158.167202][T20918] [U] #! ./file0 [ 2158.172895][T20918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.185663][T20918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.245183][T20917] [U] ¥ [ 2158.493122][T20241] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2158.748195][T20241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2158.793465][T20241] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2158.809194][T20241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.853919][T20241] usb 3-1: config 0 descriptor?? [ 2159.228097][T21038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.254844][T21038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.276783][T21038] bridge0: port 1(erspan0) entered disabled state [ 2159.324280][T20241] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 2159.336734][T21039] fuse: Bad value for 'fd' [ 2159.343988][T21039] netlink: 12824 bytes leftover after parsing attributes in process `syz.3.12853'. [ 2159.438990][T20241] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001E/input/input88 [ 2159.729954][T21038] bridge0 (unregistering): left allmulticast mode [ 2159.744953][T20241] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2160.134688][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.141264][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.733852][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12861'. [ 2160.791109][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2160.791128][ T30] audit: type=1326 audit(1749930133.620:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21665 comm="syz.4.12862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2160.926740][ T30] audit: type=1326 audit(1749930133.620:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21665 comm="syz.4.12862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2161.032715][T21768] netlink: 'syz.3.12863': attribute type 1 has an invalid length. [ 2161.074002][ T30] audit: type=1326 audit(1749930133.620:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21665 comm="syz.4.12862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2161.109288][T21768] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.12863'. [ 2161.120854][T21770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.131338][T21770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.668299][T20241] usb 3-1: USB disconnect, device number 117 [ 2161.787282][T21984] netlink: 308 bytes leftover after parsing attributes in process `syz.4.12870'. [ 2161.843262][T21984] netlink: 308 bytes leftover after parsing attributes in process `syz.4.12870'. [ 2161.912961][T22008] FAULT_INJECTION: forcing a failure. [ 2161.912961][T22008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2161.962832][T22008] CPU: 1 UID: 0 PID: 22008 Comm: syz.3.12871 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2161.962866][T22008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2161.962879][T22008] Call Trace: [ 2161.962887][T22008] [ 2161.962896][T22008] dump_stack_lvl+0x189/0x250 [ 2161.962933][T22008] ? __pfx____ratelimit+0x10/0x10 [ 2161.962963][T22008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2161.962995][T22008] ? __pfx__printk+0x10/0x10 [ 2161.963030][T22008] should_fail_ex+0x414/0x560 [ 2161.963061][T22008] _copy_from_user+0x2d/0xb0 [ 2161.963082][T22008] copy_from_sockptr+0x5e/0xa0 [ 2161.963114][T22008] packet_setsockopt+0x444/0x12c0 [ 2161.963144][T22008] ? __pfx_packet_setsockopt+0x10/0x10 [ 2161.963172][T22008] ? rcu_read_lock_any_held+0xb3/0x120 [ 2161.963192][T22008] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2161.963221][T22008] ? aa_sk_perm+0x81e/0x950 [ 2161.963247][T22008] ? vfs_write+0x8d8/0xa90 [ 2161.963278][T22008] ? __pfx_aa_sk_perm+0x10/0x10 [ 2161.963312][T22008] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2161.963338][T22008] ? __pfx_packet_setsockopt+0x10/0x10 [ 2161.963366][T22008] do_sock_setsockopt+0x257/0x3e0 [ 2161.963394][T22008] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2161.963426][T22008] ? ksys_write+0x1e1/0x250 [ 2161.963451][T22008] __ia32_sys_setsockopt+0x18b/0x220 [ 2161.963482][T22008] __do_fast_syscall_32+0xb6/0x2b0 [ 2161.963503][T22008] ? lockdep_hardirqs_on+0x9c/0x150 [ 2161.963536][T22008] do_fast_syscall_32+0x34/0x80 [ 2161.963556][T22008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2161.963579][T22008] RIP: 0023:0xf708e539 [ 2161.963597][T22008] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2161.963615][T22008] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2161.963644][T22008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 2161.963658][T22008] RDX: 0000000000000014 RSI: 0000000080000080 RDI: 0000000000000004 [ 2161.963670][T22008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2161.963682][T22008] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2161.963694][T22008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2161.963722][T22008] [ 2162.191761][T22092] netlink: 'syz.5.12873': attribute type 13 has an invalid length. [ 2162.266833][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12869'. [ 2162.301998][T22143] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12873'. [ 2162.643090][T20241] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2162.816333][T20241] usb 3-1: Using ep0 maxpacket: 8 [ 2162.825575][T20241] usb 3-1: config 2 has an invalid interface number: 108 but max is 1 [ 2162.837124][T20241] usb 3-1: config 2 has an invalid interface number: 2 but max is 1 [ 2162.845747][T20241] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.856580][T22092] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.880405][T20241] usb 3-1: config 2 has no interface number 0 [ 2162.889088][T20241] usb 3-1: config 2 has no interface number 1 [ 2162.896153][T22092] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.905915][T20241] usb 3-1: config 2 interface 108 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2162.921003][T22092] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.931809][T22092] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.942278][T20241] usb 3-1: too many endpoints for config 2 interface 2 altsetting 1: 159, using maximum allowed: 30 [ 2162.955353][T20241] usb 3-1: config 2 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 2162.969361][T20241] usb 3-1: config 2 interface 108 has no altsetting 0 [ 2162.985057][T20241] usb 3-1: config 2 interface 2 has no altsetting 0 [ 2163.003338][T20241] usb 3-1: New USB device found, idVendor=19d2, idProduct=0024, bcdDevice=dc.62 [ 2163.016964][T20241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.026960][T20241] usb 3-1: Product: syz [ 2163.035059][T20241] usb 3-1: Manufacturer: ꣂì³Ê‰ê‡¼ä©†ë»ƒæ¢ºã’䧟麀蚾 [ 2163.042562][T20241] usb 3-1: SerialNumber: syz [ 2163.242565][T22207] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2163.314796][T20241] option 3-1:2.108: GSM modem (1-port) converter detected [ 2163.409294][T20241] usb 3-1: USB disconnect, device number 118 [ 2163.448804][T20241] option 3-1:2.108: device disconnected [ 2163.686078][T22422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12883'. [ 2163.926474][ T6184] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2163.939047][ T6184] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2163.978536][T22633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.993306][T22633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.007737][ T6184] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2164.020543][ T6184] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2164.026236][T22634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.030309][ T6184] rtc rtc0: __rtc_set_alarm: err=-22 [ 2164.053428][T22634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.100167][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12885'. [ 2164.434585][T22634] macvtap9: entered promiscuous mode [ 2164.458227][T22634] team0: entered promiscuous mode [ 2164.486187][T22634] macvtap9: entered allmulticast mode [ 2164.491630][T22634] team0: entered allmulticast mode [ 2164.500479][T22634] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 2164.531014][T22738] team0: left allmulticast mode [ 2164.544177][T22738] team0: left promiscuous mode [ 2164.697864][T22891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.723498][T22891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.652961][T23174] netlink: 'syz.5.12898': attribute type 12 has an invalid length. [ 2165.681712][T23174] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12898'. [ 2165.716206][T23173] kernel read not supported for file /eth0 (pid: 23173 comm: syz.4.12899) [ 2165.745324][ T30] audit: type=1800 audit(1749930138.580:11992): pid=23173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12899" name="eth0" dev="mqueue" ino=15709 res=0 errno=0 [ 2166.764134][T23399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12909'. [ 2167.124596][T23406] sock: sock_set_timeout: `syz.5.12911' (pid 23406) tries to set negative timeout [ 2167.449660][T23413] netlink: 120 bytes leftover after parsing attributes in process `syz.4.12914'. [ 2167.614779][ T30] audit: type=1326 audit(1749930140.450:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2167.681064][ T30] audit: type=1326 audit(1749930140.470:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2167.703404][ C0] vkms_vblank_simulate: vblank timer overrun [ 2167.728360][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12916'. [ 2167.738242][ T30] audit: type=1326 audit(1749930140.470:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2167.806914][ T30] audit: type=1326 audit(1749930140.470:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2167.863382][ T30] audit: type=1326 audit(1749930140.470:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2168.136463][ T30] audit: type=1326 audit(1749930140.470:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2168.280297][ T30] audit: type=1326 audit(1749930140.470:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2168.303260][ T30] audit: type=1326 audit(1749930140.470:12000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2168.325734][ T30] audit: type=1326 audit(1749930140.470:12001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2168.493047][ T30] audit: type=1326 audit(1749930140.470:12002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23058 comm="syz.3.12893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2169.045334][T23845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2169.095052][T23845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2169.263391][T23847] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12925'. [ 2169.296796][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12926'. [ 2169.937362][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12930'. [ 2170.703338][T16754] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2170.780932][T24179] netlink: 'syz.0.12936': attribute type 9 has an invalid length. [ 2170.791598][T24179] netlink: 'syz.0.12936': attribute type 6 has an invalid length. [ 2170.863405][T16754] usb 3-1: Using ep0 maxpacket: 32 [ 2170.890847][T16754] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2170.925740][T16754] usb 3-1: config 0 has no interface number 0 [ 2170.950825][T16754] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2170.972076][T16754] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2170.992158][T16754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.005299][T16754] usb 3-1: Product: syz [ 2171.010481][T16754] usb 3-1: Manufacturer: syz [ 2171.015500][T16754] usb 3-1: SerialNumber: syz [ 2171.029298][T16754] usb 3-1: config 0 descriptor?? [ 2171.477143][T24172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2171.504750][T24172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.539176][T24172] vxcan3: entered promiscuous mode [ 2171.547029][T24310] netlink: 'syz.3.12944': attribute type 12 has an invalid length. [ 2171.555434][T16754] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2171.565376][T16754] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 2171.585577][T16754] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2171.605745][T16754] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 2171.626871][T16754] usb 3-1: USB disconnect, device number 119 [ 2171.958304][T24425] FAULT_INJECTION: forcing a failure. [ 2171.958304][T24425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.983886][T24425] CPU: 1 UID: 0 PID: 24425 Comm: syz.0.12950 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2171.983916][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2171.983929][T24425] Call Trace: [ 2171.983938][T24425] [ 2171.983946][T24425] dump_stack_lvl+0x189/0x250 [ 2171.983982][T24425] ? __pfx____ratelimit+0x10/0x10 [ 2171.984018][T24425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2171.984050][T24425] ? __pfx__printk+0x10/0x10 [ 2171.984083][T24425] should_fail_ex+0x414/0x560 [ 2171.984114][T24425] _copy_to_user+0x31/0xb0 [ 2171.984136][T24425] simple_read_from_buffer+0xe1/0x170 [ 2171.984162][T24425] proc_fail_nth_read+0x1df/0x250 [ 2171.984190][T24425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.984217][T24425] ? rw_verify_area+0x258/0x650 [ 2171.984245][T24425] ? aa_sk_perm+0x81e/0x950 [ 2171.984267][T24425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.984292][T24425] vfs_read+0x1fd/0x980 [ 2171.984321][T24425] ? __pfx_aa_sk_perm+0x10/0x10 [ 2171.984346][T24425] ? do_sock_setsockopt+0x267/0x3e0 [ 2171.984372][T24425] ? __pfx_vfs_read+0x10/0x10 [ 2171.984399][T24425] ? do_sock_setsockopt+0x267/0x3e0 [ 2171.984422][T24425] ? kfree+0x4d/0x440 [ 2171.984451][T24425] ? __pfx_packet_setsockopt+0x10/0x10 [ 2171.984479][T24425] ? do_sock_setsockopt+0x267/0x3e0 [ 2171.984505][T24425] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2171.984536][T24425] ksys_read+0x145/0x250 [ 2171.984556][T24425] ? __pfx_ksys_read+0x10/0x10 [ 2171.984588][T24425] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2171.984622][T24425] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.984659][T24425] __do_fast_syscall_32+0xb6/0x2b0 [ 2171.984680][T24425] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.984712][T24425] do_fast_syscall_32+0x34/0x80 [ 2171.984732][T24425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2171.984757][T24425] RIP: 0023:0xf7f03539 [ 2171.984773][T24425] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2171.984792][T24425] RSP: 002b:00000000f5026590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2171.984813][T24425] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5026620 [ 2171.984826][T24425] RDX: 000000000000000f RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 2171.984839][T24425] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2171.984851][T24425] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2171.984863][T24425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2171.984891][T24425] [ 2172.783490][ T6184] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2172.913733][ T6184] usb 3-1: device descriptor read/64, error -71 [ 2172.939322][T24554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2172.965362][T24554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2172.985120][T24554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2173.005031][T24554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2173.066088][T24554] geneve2: entered promiscuous mode [ 2173.071363][T24554] geneve2: entered allmulticast mode [ 2173.136403][T24554] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2173.155584][T24554] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2173.173085][ T6184] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2173.181971][T24554] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2173.215764][T24554] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 2173.363227][ T6184] usb 3-1: device descriptor read/64, error -71 [ 2173.477808][ T6184] usb usb3-port1: attempt power cycle [ 2173.823113][ T6184] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2173.863684][ T6184] usb 3-1: device descriptor read/8, error -71 [ 2174.023298][T24871] netlink: 176 bytes leftover after parsing attributes in process `syz.4.12966'. [ 2174.113321][ T6184] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2174.153955][ T6184] usb 3-1: device descriptor read/8, error -71 [ 2174.264868][ T6184] usb usb3-port1: unable to enumerate USB device [ 2174.538778][T24983] fuse: Unknown parameter 'gRkup_id' [ 2174.616567][T25009] fuse: Bad value for 'fd' [ 2174.689705][T25092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.710038][T25092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.210074][T25199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.257050][T25199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.403171][T25207] syzkaller1: entered promiscuous mode [ 2175.408713][T25207] syzkaller1: entered allmulticast mode [ 2175.975006][T25220] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12986'. [ 2176.038298][T25223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.077880][T25228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.079959][T25223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.125654][T25228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.345158][T25412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.356481][T25412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.395606][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12984'. [ 2176.417329][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12984'. [ 2176.725901][T25542] netlink: 'syz.0.12993': attribute type 1 has an invalid length. [ 2176.838687][T25542] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2176.852629][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2176.852647][ T30] audit: type=1326 audit(1749930149.680:12060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.034206][ T30] audit: type=1326 audit(1749930149.680:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.090074][ T30] audit: type=1326 audit(1749930149.680:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.114095][ T30] audit: type=1326 audit(1749930149.680:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.136917][ T30] audit: type=1326 audit(1749930149.680:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.204289][T25762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.214551][T25762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.278263][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12997'. [ 2177.290595][ T30] audit: type=1326 audit(1749930149.720:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.385920][T25765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.403731][T25765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.437098][ T30] audit: type=1326 audit(1749930149.720:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.466387][T25767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.500298][T25767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.523484][ T30] audit: type=1326 audit(1749930149.720:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.549685][T25767] input: syz0 as /devices/virtual/input/input89 [ 2177.557579][ T30] audit: type=1326 audit(1749930149.720:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2177.583359][ T30] audit: type=1326 audit(1749930149.720:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25587 comm="syz.4.12996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 2178.491101][T26097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.495803][T26101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13009'. [ 2178.518864][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13010'. [ 2178.521252][T22849] Bluetooth: hci4: command 0x0405 tx timeout [ 2178.530265][T26097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.676926][T26108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.685800][T26108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2179.667679][T26200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.677006][T26200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2179.903598][T26337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13022'. [ 2179.928221][T26337] openvswitch: netlink: Missing key (keys=40, expected=80) [ 2180.010701][T26340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2180.143116][ T7529] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2180.309923][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2180.332653][ T7529] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2180.345406][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2180.355967][ T7529] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2180.372537][ T7529] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 2180.391930][ T7529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.403391][T26355] netlink: 'syz.5.13028': attribute type 10 has an invalid length. [ 2180.410661][ T7529] usb 3-1: Product: syz [ 2180.420770][ T7529] usb 3-1: Manufacturer: syz [ 2180.430886][ T7529] usb 3-1: SerialNumber: syz [ 2180.451768][ T7529] usb 3-1: config 0 descriptor?? [ 2180.470513][ T7529] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 2180.502750][ T7529] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 2180.699552][T26318] netlink: 'syz.2.13021': attribute type 2 has an invalid length. [ 2180.723000][T26318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13021'. [ 2180.795005][ T6184] usb 3-1: USB disconnect, device number 124 [ 2180.870816][ T6184] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 2180.921872][ T6184] ti_usb_3410_5052 3-1:0.0: device disconnected [ 2181.249152][T26770] input: syz1 as /devices/virtual/input/input90 [ 2181.702312][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13039'. [ 2181.750625][T26880] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13037'. [ 2182.080214][T27205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.096895][T27205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.348313][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13044'. [ 2182.366570][T27312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.370318][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13044'. [ 2182.383518][T27312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.400497][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13044'. [ 2182.412817][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13044'. [ 2182.523545][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13046'. [ 2182.669902][T27423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.710297][T27423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.756999][T27427] fuse: Bad value for 'rootmode' [ 2182.787653][T27428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13050'. [ 2183.039295][T27719] FAULT_INJECTION: forcing a failure. [ 2183.039295][T27719] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.055446][T27719] CPU: 0 UID: 0 PID: 27719 Comm: syz.2.13055 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2183.055475][T27719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2183.055487][T27719] Call Trace: [ 2183.055495][T27719] [ 2183.055502][T27719] dump_stack_lvl+0x189/0x250 [ 2183.055532][T27719] ? __pfx____ratelimit+0x10/0x10 [ 2183.055557][T27719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2183.055582][T27719] ? __pfx__printk+0x10/0x10 [ 2183.055612][T27719] should_fail_ex+0x414/0x560 [ 2183.055653][T27719] should_failslab+0xa8/0x100 [ 2183.055676][T27719] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2183.055708][T27719] ? skb_clone+0x212/0x3a0 [ 2183.055740][T27719] skb_clone+0x212/0x3a0 [ 2183.055770][T27719] __netlink_deliver_tap+0x404/0x850 [ 2183.055807][T27719] ? netlink_deliver_tap+0x2e/0x1b0 [ 2183.055832][T27719] netlink_deliver_tap+0x19c/0x1b0 [ 2183.055857][T27719] netlink_sendskb+0x68/0x140 [ 2183.055880][T27719] netlink_rcv_skb+0x28c/0x470 [ 2183.055904][T27719] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2183.055931][T27719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2183.055968][T27719] ? netlink_deliver_tap+0x2e/0x1b0 [ 2183.055991][T27719] ? netlink_deliver_tap+0x2e/0x1b0 [ 2183.056016][T27719] xfrm_netlink_rcv+0x79/0x90 [ 2183.056040][T27719] netlink_unicast+0x758/0x8d0 [ 2183.056072][T27719] netlink_sendmsg+0x805/0xb30 [ 2183.056106][T27719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2183.056133][T27719] ? __import_iovec+0x5d4/0x7f0 [ 2183.056151][T27719] ? aa_sock_msg_perm+0x94/0x160 [ 2183.056179][T27719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2183.056204][T27719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2183.056228][T27719] __sock_sendmsg+0x21c/0x270 [ 2183.056262][T27719] ____sys_sendmsg+0x505/0x830 [ 2183.056294][T27719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2183.056334][T27719] ___sys_sendmsg+0x21f/0x2a0 [ 2183.056361][T27719] ? __pfx____sys_sendmsg+0x10/0x10 [ 2183.056423][T27719] ? __fget_files+0x2a/0x420 [ 2183.056444][T27719] ? __fget_files+0x3a0/0x420 [ 2183.056478][T27719] __sys_sendmsg+0x164/0x220 [ 2183.056505][T27719] ? __pfx___sys_sendmsg+0x10/0x10 [ 2183.056545][T27719] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2183.056578][T27719] ? lockdep_hardirqs_on+0x9c/0x150 [ 2183.056610][T27719] __do_fast_syscall_32+0xb6/0x2b0 [ 2183.056638][T27719] ? lockdep_hardirqs_on+0x9c/0x150 [ 2183.056671][T27719] do_fast_syscall_32+0x34/0x80 [ 2183.056689][T27719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2183.056712][T27719] RIP: 0023:0xf708e539 [ 2183.056728][T27719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2183.056744][T27719] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2183.056763][T27719] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 2183.056777][T27719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2183.056788][T27719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2183.056801][T27719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2183.056813][T27719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2183.056843][T27719] [ 2184.753129][T20241] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2184.946863][T20241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.947023][T28104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.994577][T20241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.018801][T20241] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 2185.048614][T20241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.075151][T20241] usb 3-1: config 0 descriptor?? [ 2185.110682][T28104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.435818][T28312] __nla_validate_parse: 1 callbacks suppressed [ 2185.435841][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13081'. [ 2185.455856][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13081'. [ 2186.134553][T20241] usbhid 3-1:0.0: can't add hid device: -71 [ 2186.173101][T20241] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2186.228030][T20241] usb 3-1: USB disconnect, device number 125 [ 2186.720361][T28630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13089'. [ 2186.723540][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13089'. [ 2186.768846][T28629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.811156][T28629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.875214][T28633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.925638][T28633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.030996][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13092'. [ 2187.065141][T28644] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13095'. [ 2187.793059][ T5795] Bluetooth: hci4: command 0x0405 tx timeout [ 2187.928900][T28659] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13100'. [ 2188.070227][T28667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.090021][T28667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.325031][T28778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.337016][T28778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.356505][T28778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.367688][T28778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2189.185943][T20241] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2189.342159][T28996] fuseblk: Unknown parameter '<0x0000000000000005' [ 2189.363599][T20241] usb 3-1: Using ep0 maxpacket: 32 [ 2189.377309][T20241] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2189.392276][T20241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.400824][T20241] usb 3-1: Product: syz [ 2189.411120][T20241] usb 3-1: Manufacturer: syz [ 2189.419704][T20241] usb 3-1: SerialNumber: syz [ 2189.428531][T28998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13115'. [ 2189.431957][T20241] usb 3-1: config 0 descriptor?? [ 2189.456226][T28998] openvswitch: netlink: Missing key (keys=40, expected=80) [ 2189.466700][T20241] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2189.556744][T29010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2190.209235][T29114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13120'. [ 2190.492735][T20241] gspca_ov534_9: reg_w failed -71 [ 2190.517948][T29119] netlink: 'syz.0.13122': attribute type 10 has an invalid length. [ 2190.546362][T29119] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 2190.555023][T29119] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 2190.568557][T29119] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2190.592188][T29121] [U] #! ./file0 [ 2190.616206][T29121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.636735][T29121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.662918][T29120] [U] ¥ [ 2190.722538][T29118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2190.819165][T29225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13124'. [ 2190.830980][T20241] gspca_ov534_9: Unknown sensor 0000 [ 2190.831217][T20241] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2190.886582][T20241] usb 3-1: USB disconnect, device number 126 [ 2191.193769][T29233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13127'. [ 2191.216919][T29232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13128'. [ 2191.227390][T29235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.237747][T29235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.254743][T29235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.264011][T29235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.477986][T29243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.487655][T29243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.095623][T29462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2192.119347][T29462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.264374][T29468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13143'. [ 2192.313672][T29471] veth1_to_bond: entered allmulticast mode [ 2192.339884][T29471] veth1_to_bond: left allmulticast mode [ 2192.367133][T29471] lo: left promiscuous mode [ 2192.382263][T29471] lo: left allmulticast mode [ 2192.400358][T29471] tunl0: left promiscuous mode [ 2192.407735][T29471] tunl0: left allmulticast mode [ 2192.415463][T29471] gre0: left promiscuous mode [ 2192.425689][T29476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13145'. [ 2192.430974][T29471] gre0: left allmulticast mode [ 2192.455212][T29471] gretap0: left promiscuous mode [ 2192.474247][T29471] erspan0: left promiscuous mode [ 2192.488996][T29471] erspan0: left allmulticast mode [ 2192.506822][T29471] ip_vti0: left promiscuous mode [ 2192.523182][T29471] ip_vti0: left allmulticast mode [ 2192.537787][T29471] ip6_vti0: left promiscuous mode [ 2192.549800][T29471] ip6_vti0: left allmulticast mode [ 2192.562696][T29471] sit0: left promiscuous mode [ 2192.575388][T29471] sit0: left allmulticast mode [ 2192.587549][T29471] ip6tnl0: left promiscuous mode [ 2192.602883][T29471] ip6tnl0: left allmulticast mode [ 2192.616028][T29471] ip6gre0: left promiscuous mode [ 2192.626253][T29471] ip6gre0: left allmulticast mode [ 2192.632213][T29462] could not allocate digest TFM handle hmac(sha256-avx2) [ 2192.632674][T29471] syz_tun: left promiscuous mode [ 2192.645638][T29471] syz_tun: left allmulticast mode [ 2192.651444][T29471] ip6gretap0: left promiscuous mode [ 2192.657547][T29471] ip6gretap0: left allmulticast mode [ 2192.674805][T29471] vcan0: left promiscuous mode [ 2192.681516][T29471] vcan0: left allmulticast mode [ 2192.692593][T29471] nlmon0: left promiscuous mode [ 2192.701446][T29471] nlmon0: left allmulticast mode [ 2192.706950][ T6184] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2192.716858][T29471] caif0: left promiscuous mode [ 2192.721757][T29471] caif0: left allmulticast mode [ 2192.731620][T29471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2192.753306][T20241] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2192.933246][T20241] usb 3-1: Using ep0 maxpacket: 16 [ 2192.940583][T20241] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2192.972140][T20241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2192.989408][T20241] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2192.998724][T29689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.013293][T20241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.021333][T20241] usb 3-1: Product: syz [ 2193.023602][T29689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.043174][T20241] usb 3-1: Manufacturer: syz [ 2193.048155][T20241] usb 3-1: SerialNumber: syz [ 2193.073285][T20241] usb 3-1: config 0 descriptor?? [ 2193.082171][T20241] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2193.101856][T20241] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2193.262319][T29476] syz.3.13145: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2193.263915][ T6184] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2193.284754][T29476] CPU: 0 UID: 0 PID: 29476 Comm: syz.3.13145 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2193.284796][T29476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2193.284811][T29476] Call Trace: [ 2193.284820][T29476] [ 2193.284831][T29476] dump_stack_lvl+0x189/0x250 [ 2193.284871][T29476] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2193.284903][T29476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2193.284938][T29476] ? __pfx__printk+0x10/0x10 [ 2193.284962][T29476] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2193.284987][T29476] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2193.285019][T29476] warn_alloc+0x214/0x310 [ 2193.285051][T29476] ? __pfx_warn_alloc+0x10/0x10 [ 2193.285086][T29476] ? __get_vm_area_node+0x28f/0x300 [ 2193.285109][T29476] ? nf_tables_newset+0x132b/0x2530 [ 2193.285143][T29476] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2193.285198][T29476] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2193.285228][T29476] ? rcu_is_watching+0x15/0xb0 [ 2193.285264][T29476] ? nf_tables_newset+0x132b/0x2530 [ 2193.285291][T29476] ? nf_tables_newset+0x132b/0x2530 [ 2193.285318][T29476] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 2193.285341][T29476] ? nf_tables_newset+0x132b/0x2530 [ 2193.285371][T29476] ? nft_table_lookup+0x211/0x230 [ 2193.285419][T29476] ? nft_set_lookup+0x128/0x150 [ 2193.285453][T29476] ? nft_hash_privsize+0x7f/0xf0 [ 2193.285484][T29476] nf_tables_newset+0x132b/0x2530 [ 2193.285529][T29476] ? __pfx_nf_tables_newset+0x10/0x10 [ 2193.285585][T29476] ? __nla_parse+0x40/0x60 [ 2193.285633][T29476] nfnetlink_rcv+0x1132/0x2520 [ 2193.285704][T29476] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2193.285752][T29476] ? __lock_acquire+0xab9/0xd20 [ 2193.285837][T29476] ? netlink_deliver_tap+0x2e/0x1b0 [ 2193.285865][T29476] ? netlink_deliver_tap+0x2e/0x1b0 [ 2193.285899][T29476] netlink_unicast+0x758/0x8d0 [ 2193.285936][T29476] netlink_sendmsg+0x805/0xb30 [ 2193.285977][T29476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.286009][T29476] ? __import_iovec+0x5d4/0x7f0 [ 2193.286030][T29476] ? aa_sock_msg_perm+0x94/0x160 [ 2193.286063][T29476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2193.286093][T29476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.286123][T29476] __sock_sendmsg+0x21c/0x270 [ 2193.286164][T29476] ____sys_sendmsg+0x505/0x830 [ 2193.286199][T29476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2193.286248][T29476] ___sys_sendmsg+0x21f/0x2a0 [ 2193.286281][T29476] ? __pfx____sys_sendmsg+0x10/0x10 [ 2193.286351][T29476] ? __fget_files+0x2a/0x420 [ 2193.286376][T29476] ? __fget_files+0x3a0/0x420 [ 2193.286413][T29476] __sys_sendmsg+0x164/0x220 [ 2193.286445][T29476] ? __pfx___sys_sendmsg+0x10/0x10 [ 2193.286484][T29476] ? rcu_is_watching+0x15/0xb0 [ 2193.286523][T29476] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2193.286562][T29476] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.286621][T29476] __do_fast_syscall_32+0xb6/0x2b0 [ 2193.286647][T29476] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.286685][T29476] do_fast_syscall_32+0x34/0x80 [ 2193.286708][T29476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2193.286738][T29476] RIP: 0023:0xf708e539 [ 2193.286757][T29476] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2193.286778][T29476] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2193.286801][T29476] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 2193.286817][T29476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.286831][T29476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.286845][T29476] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2193.286860][T29476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.286893][T29476] [ 2193.286994][T29476] Mem-Info: [ 2193.883158][T29476] active_anon:13780 inactive_anon:0 isolated_anon:0 [ 2193.883158][T29476] active_file:25657 inactive_file:5170 isolated_file:0 [ 2193.883158][T29476] unevictable:768 dirty:390 writeback:0 [ 2193.883158][T29476] slab_reclaimable:9362 slab_unreclaimable:183099 [ 2193.883158][T29476] mapped:34522 shmem:4789 pagetables:3938 [ 2193.883158][T29476] sec_pagetables:0 bounce:0 [ 2193.883158][T29476] kernel_misc_reclaimable:0 [ 2193.883158][T29476] free:1213729 free_pcp:11314 free_cma:0 [ 2193.931554][T29476] Node 0 active_anon:54720kB inactive_anon:0kB active_file:102520kB inactive_file:20544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137984kB dirty:1556kB writeback:0kB shmem:17620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16172kB pagetables:15524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2193.972271][T29476] Node 1 active_anon:400kB inactive_anon:0kB active_file:108kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2194.005587][T29476] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2194.047058][T29476] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 2194.055190][T29476] Node 0 DMA32 free:916220kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54664kB inactive_anon:0kB active_file:102440kB inactive_file:19060kB unevictable:1536kB writepending:1556kB present:3129332kB managed:2561028kB mlocked:0kB bounce:0kB free_pcp:44304kB local_pcp:20832kB free_cma:0kB [ 2194.093407][T29476] lowmem_reserve[]: 0 0 1 1 1 [ 2194.101587][T29476] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:0kB active_file:80kB inactive_file:1484kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:28kB free_cma:0kB [ 2194.135599][T29476] lowmem_reserve[]: 0 0 0 0 0 [ 2194.141111][T29476] Node 1 Normal free:3923312kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:400kB inactive_anon:0kB active_file:108kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:428kB local_pcp:428kB free_cma:0kB [ 2194.175025][T29476] lowmem_reserve[]: 0 0 0 0 0 [ 2194.181264][T29476] Node 0 DMA: 0*4kB 0*8kB 0*16kB [ 2194.182731][T29996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.206549][T29996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.206591][T20241] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2194.215600][T29476] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2194.225614][T20241] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 2194.232506][T29476] Node 0 DMA32: 1513*4kB (UM) 499*8kB (UME) 1582*16kB (UME) 1423*32kB (UME) 409*64kB (UME) 218*128kB (UME) 132*256kB (UME) 62*512kB (UME) 57*1024kB (UM) 11*2048kB (UM) 155*4096kB (UM) = 916284kB [ 2194.258040][T29476] Node 0 Normal: 2*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 2194.271157][T29476] Node 1 Normal: 130*4kB (UM) 41*8kB (UME) 38*16kB (UME) 216*32kB (UME) 77*64kB (UME) 33*128kB (UME) 13*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 948*4096kB (M) = 3923312kB [ 2194.291153][T29476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2194.301637][T29476] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2194.311636][T29476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2194.322218][T29476] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2194.332174][T29476] 35613 total pagecache pages [ 2194.337237][T29476] 1 pages in swap cache [ 2194.341479][T29476] Free swap = 124992kB [ 2194.346250][T29476] Total swap = 124996kB [ 2194.350505][T29476] 2097051 pages RAM [ 2194.354851][T29476] 0 pages HighMem/MovableOnly [ 2194.359749][T29476] 424688 pages reserved [ 2194.365171][T29476] 0 pages cma reserved [ 2194.515384][T30004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.533513][T30004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.828872][T30112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13156'. [ 2194.854948][T20241] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 2194.865859][T20241] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 2194.917842][T30114] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2195.209424][T30324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.220614][T30324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.073804][T30649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13169'. [ 2196.156309][T30653] fuseblk: Unknown parameter '<0x0000000000000005' [ 2196.163798][T30654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.172876][T30654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.236856][T30656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.248045][T30656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.285770][T30656] sctp: [Deprecated]: syz.3.13172 (pid 30656) Use of int in maxseg socket option. [ 2196.285770][T30656] Use struct sctp_assoc_value instead [ 2196.302520][T30660] fuse: Bad value for 'fd' [ 2196.317886][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2196.317903][ T30] audit: type=1326 audit(1749930169.150:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.348092][ T30] audit: type=1326 audit(1749930169.160:12132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.377892][ T30] audit: type=1326 audit(1749930169.160:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.403489][ T30] audit: type=1326 audit(1749930169.160:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.429016][ T30] audit: type=1326 audit(1749930169.160:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.457071][ T30] audit: type=1326 audit(1749930169.160:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.485732][ T30] audit: type=1326 audit(1749930169.160:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.526932][T20241] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 2196.541895][T20241] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 2196.550480][ T30] audit: type=1326 audit(1749930169.160:12138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.575348][T20241] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 2196.582103][ T30] audit: type=1326 audit(1749930169.160:12139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.666743][ T30] audit: type=1326 audit(1749930169.160:12140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.0.13174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2196.840090][ T6184] usb 3-1: USB disconnect, device number 127 [ 2197.110967][T30975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13180'. [ 2197.207247][T30980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.313769][T30980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.453963][T30980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.476480][T30980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.663967][T31089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13182'. [ 2197.718037][T31093] input: syz1 as /devices/virtual/input/input91 [ 2198.193805][T31297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13188'. [ 2198.449870][T31303] sch_tbf: burst 7710 is lower than device lo mtu (11337746) ! [ 2198.670620][T31310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.687237][T31310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.819008][T31314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13196'. [ 2198.858054][T31314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13196'. [ 2199.045121][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13197'. [ 2199.197641][T31319] fuse: Unknown parameter '0x0000000000000005' [ 2199.305239][T31319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.314536][T31319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.505132][T31322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13200'. [ 2199.534991][T31324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.544350][T31324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.625779][T31328] batadv_slave_1: entered promiscuous mode [ 2199.643779][T31328] batadv_slave_1: left promiscuous mode [ 2199.791686][T31330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.824961][T31330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.895297][T31330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.914998][T31330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.933158][T20241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2200.106835][T20241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.148496][T20241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2200.234532][T20241] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2200.269767][T20241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.337115][T20241] usb 3-1: config 0 descriptor?? [ 2200.470264][T31514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.500957][T31514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.603380][T31514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.618094][T31514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.047619][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13204'. [ 2201.059098][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13204'. [ 2201.225197][T20241] usbhid 3-1:0.0: can't add hid device: -71 [ 2201.262542][T20241] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2201.275989][T31853] tipc: Enabled bearer , priority 10 [ 2201.335841][T20241] usb 3-1: USB disconnect, device number 2 [ 2202.036344][T32170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.067343][T32166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.067742][T32170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.092053][T32166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.326995][T32280] syzkaller1: entered promiscuous mode [ 2202.332891][T32280] syzkaller1: entered allmulticast mode [ 2202.354316][T32280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.370038][T32280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.447113][ T6184] tipc: Node number set to 4229354625 [ 2202.844697][T32389] netlink: 'syz.4.13225': attribute type 9 has an invalid length. [ 2202.856239][T32389] netlink: 'syz.4.13225': attribute type 6 has an invalid length. [ 2203.216616][T32597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13229'. [ 2203.707828][ T342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13234'. [ 2203.860588][ T350] fuse: Bad value for 'fd' [ 2203.909993][ T354] IPVS: length: 103 != 24 [ 2204.063317][ T361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.085495][ T361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2204.216827][ T476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.227449][ T476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2204.659745][ T774] netlink: 'syz.4.13246': attribute type 10 has an invalid length. [ 2204.697880][ T774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13246'. [ 2205.094736][ T1010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.103766][ T1012] fuse: Bad value for 'fd' [ 2205.111011][ T1010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.318000][ T1034] fuse: Unknown parameter 'gRkup_id' [ 2206.410524][ T1765] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13263'. [ 2206.427575][ T1765] 0ªî{X¹¦: renamed from gretap0 [ 2206.439124][ T1765] 0ªî{X¹¦: entered allmulticast mode [ 2206.460287][ T1765] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 2206.617716][ T1872] program syz.3.13266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2206.664562][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2206.664581][ T30] audit: type=1326 audit(1749930179.500:12152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2206.726588][ T30] audit: type=1326 audit(1749930179.500:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2206.767328][ T30] audit: type=1326 audit(1749930179.500:12154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2206.815610][ T30] audit: type=1326 audit(1749930179.500:12155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2206.872899][ T1883] [U] #! ./file0 [ 2206.890138][ T30] audit: type=1326 audit(1749930179.500:12156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2206.892657][ T1883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.975403][ T30] audit: type=1326 audit(1749930179.500:12157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2207.004768][ T1883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.024346][ T30] audit: type=1326 audit(1749930179.500:12158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2207.049195][ T30] audit: type=1326 audit(1749930179.500:12159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2207.092900][ T30] audit: type=1326 audit(1749930179.500:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2207.116570][ T1882] [U] ¥ [ 2207.130296][ T30] audit: type=1326 audit(1749930179.500:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.2.13267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2207.533622][T10831] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2207.603339][ T2107] loop2: detected capacity change from 0 to 7 [ 2207.616225][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.625409][ C0] buffer_io_error: 7 callbacks suppressed [ 2207.625420][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.653267][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.662509][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.673144][T10831] usb 3-1: device descriptor read/64, error -71 [ 2207.684693][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.693909][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.703232][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.712402][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.720577][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.729817][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.738906][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.748120][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.769848][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.779089][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.793216][ T2107] ldm_validate_partition_table(): Disk read failed. [ 2207.809456][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.818730][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.836408][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.845589][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.858624][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.867836][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2207.877348][ T2107] Dev loop2: unable to read RDB block 0 [ 2207.907158][ T2107] loop2: unable to read partition table [ 2207.935650][ T2107] loop2: partition table beyond EOD, truncated [ 2207.951476][ T2107] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2208.023601][T10831] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2208.098866][ T2215] netlink: 12824 bytes leftover after parsing attributes in process `syz.4.13281'. [ 2208.163262][T10831] usb 3-1: device descriptor read/64, error -71 [ 2208.294943][T10831] usb usb3-port1: attempt power cycle [ 2208.342497][ T5204] ldm_validate_partition_table(): Disk read failed. [ 2208.363777][ T5204] Dev loop2: unable to read RDB block 0 [ 2208.381488][ T5204] loop2: unable to read partition table [ 2208.398902][ T5204] loop2: partition table beyond EOD, truncated [ 2208.653087][T10831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2208.685700][T10831] usb 3-1: device descriptor read/8, error -71 [ 2208.717425][ T2225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.736258][ T2225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.923588][T10831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2208.973882][T10831] usb 3-1: device descriptor read/8, error -71 [ 2209.115437][T10831] usb usb3-port1: unable to enumerate USB device [ 2209.138274][ T2453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13291'. [ 2209.168347][ T2453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13291'. [ 2209.229216][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13293'. [ 2209.239305][ T2567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13293'. [ 2209.469283][ T2713] netlink: 'syz.4.13296': attribute type 9 has an invalid length. [ 2209.504884][ T2713] netlink: 'syz.4.13296': attribute type 6 has an invalid length. [ 2209.848122][ T2797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.867564][ T2797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.763228][ T2970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13305'. [ 2210.788583][ T2970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13305'. [ 2210.891743][ T2975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13307'. [ 2210.911098][ T2976] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13308'. [ 2210.926323][ T2975] netlink: 'syz.3.13307': attribute type 4 has an invalid length. [ 2210.935716][ T2972] batman_adv: batadv0: Adding interface: dummy0 [ 2210.942000][ T2972] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2210.970038][ T2972] batman_adv: batadv0: Interface activated: dummy0 [ 2211.503360][ T5958] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2211.559530][ T3405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.604082][ T3405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.663110][ T5958] usb 3-1: device descriptor read/64, error -71 [ 2211.913125][ T5958] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2211.928736][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13320'. [ 2212.084389][ T5958] usb 3-1: device descriptor read/64, error -71 [ 2212.206925][ T5958] usb usb3-port1: attempt power cycle [ 2212.586269][ T5958] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2212.611426][ T3803] netlink: 'syz.0.13319': attribute type 3 has an invalid length. [ 2212.646191][ T5958] usb 3-1: device descriptor read/8, error -71 [ 2212.652642][ T3803] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13319'. [ 2212.919846][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.933166][ T5958] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2212.967235][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.996513][ T5958] usb 3-1: device descriptor read/8, error -71 [ 2213.134784][ T5958] usb usb3-port1: unable to enumerate USB device [ 2213.671521][ T4135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.694581][ T4135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.727377][ T4135] netlink: 'syz.3.13328': attribute type 16 has an invalid length. [ 2213.942798][ T4143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.959806][ T4143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.139475][ T4248] netlink: 'syz.4.13333': attribute type 10 has an invalid length. [ 2214.149121][ T4248] __nla_validate_parse: 2 callbacks suppressed [ 2214.149134][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13333'. [ 2214.620744][ T4258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13336'. [ 2214.734887][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.748061][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.796995][ T4262] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13339'. [ 2214.827513][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13340'. [ 2214.878756][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13341'. [ 2215.323400][ T4539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13345'. [ 2215.494644][ T4583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.513587][ T4583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.544445][ T4585] fuse: Bad value for 'fd' [ 2216.513195][ T6184] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2216.663036][ T6184] usb 3-1: Using ep0 maxpacket: 8 [ 2216.675230][ T6184] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2216.700549][ T6184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2216.710047][ T5014] bond8: entered promiscuous mode [ 2216.730266][ T6184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2216.742505][ T5014] bond8: entered allmulticast mode [ 2216.758994][ T6184] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2216.774332][ T5014] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2216.838850][ T6184] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2216.863121][ T6184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.333831][ T6184] usb 3-1: GET_CAPABILITIES returned 0 [ 2217.370221][ T6184] usbtmc 3-1:16.0: can't read capabilities [ 2217.817338][T20241] usb 3-1: USB disconnect, device number 11 [ 2217.858732][ T5467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.869424][ T5368] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13374'. [ 2217.892883][ T5467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.029880][ T5671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.044762][ T5671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.766885][ T6135] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13383'. [ 2218.893128][T10831] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2218.962214][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.004759][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.042851][ T6174] fuseblk: Unknown parameter '<0x0000000000000005' [ 2219.058136][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13387'. [ 2219.073290][T10831] usb 3-1: Using ep0 maxpacket: 8 [ 2219.103114][T10831] usb 3-1: config 10 has an invalid interface number: 193 but max is 0 [ 2219.106555][ T6144] macvtap10: entered promiscuous mode [ 2219.132060][T10831] usb 3-1: config 10 has no interface number 0 [ 2219.155704][ T6144] team0: entered promiscuous mode [ 2219.165460][T10831] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 2219.171923][ T6144] macvtap10: entered allmulticast mode [ 2219.190906][ T6144] team0: entered allmulticast mode [ 2219.193226][T10831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.216943][ T6144] 8021q: adding VLAN 0 to HW filter on device macvtap10 [ 2219.250015][T10831] usb 3-1: Product: syz [ 2219.269805][T10831] usb 3-1: Manufacturer: syz [ 2219.273929][ T6280] team0: left allmulticast mode [ 2219.279325][ T6280] team0: left promiscuous mode [ 2219.283914][T10831] usb 3-1: SerialNumber: syz [ 2219.333200][ T6351] loop2: detected capacity change from 0 to 7 [ 2219.355601][ T6351] Dev loop2: unable to read RDB block 7 [ 2219.371614][ T6351] loop2: unable to read partition table [ 2219.394466][ T6351] loop2: partition table beyond EOD, truncated [ 2219.413066][ T6351] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2219.451677][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.491491][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.500246][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.543469][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.607538][ T6354] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2219.720584][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.738298][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.841356][T10831] rtsx_usb 3-1:10.193: probe with driver rtsx_usb failed with error -22 [ 2219.891409][T10831] usb 3-1: USB disconnect, device number 12 [ 2220.073183][ T6466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2220.787381][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13402'. [ 2220.809877][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.817708][ T6783] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 2220.828099][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.040511][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.066890][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.173140][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13404'. [ 2221.222008][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13404'. [ 2221.298223][ T6994] fuse: Unknown parameter '0x00000000000000060x0000000000000008' [ 2221.561254][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.567838][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.716299][ T7202] geneve3: entered promiscuous mode [ 2221.947412][ T7410] netlink: 84 bytes leftover after parsing attributes in process `syz.3.13412'. [ 2221.983361][ T5958] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2222.158093][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 2222.176297][ T5958] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.198302][ T5958] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2222.223544][ T5958] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 2222.232725][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.273468][ T5958] usb 3-1: config 0 descriptor?? [ 2222.303459][ T7617] loop8: detected capacity change from 16320 to 16383 [ 2222.314983][ T7617] [ 2222.317353][ T7617] ====================================================== [ 2222.324408][ T7617] WARNING: possible circular locking dependency detected [ 2222.331462][ T7617] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted [ 2222.338592][ T7617] ------------------------------------------------------ [ 2222.345616][ T7617] syz.4.13415/7617 is trying to acquire lock: [ 2222.351684][ T7617] ffffffff8f87a3e8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.362245][ T7617] [ 2222.362245][ T7617] but task is already holding lock: [ 2222.369622][ T7617] ffff888142b56c40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 2222.379851][ T7617] [ 2222.379851][ T7617] which lock already depends on the new lock. [ 2222.379851][ T7617] [ 2222.390262][ T7617] [ 2222.390262][ T7617] the existing dependency chain (in reverse order) is: [ 2222.399280][ T7617] [ 2222.399280][ T7617] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 2222.407909][ T7617] lock_acquire+0x120/0x360 [ 2222.412967][ T7617] blk_alloc_queue+0x538/0x620 [ 2222.418280][ T7617] __blk_mq_alloc_disk+0x162/0x340 [ 2222.423929][ T7617] loop_add+0x41b/0xad0 [ 2222.428633][ T7617] loop_init+0x173/0x230 [ 2222.433409][ T7617] do_one_initcall+0x233/0x820 [ 2222.438717][ T7617] do_initcall_level+0x137/0x1f0 [ 2222.444211][ T7617] do_initcalls+0x69/0xd0 [ 2222.449069][ T7617] kernel_init_freeable+0x3d9/0x570 [ 2222.454797][ T7617] kernel_init+0x1d/0x1d0 [ 2222.459670][ T7617] ret_from_fork+0x3fc/0x770 [ 2222.464800][ T7617] ret_from_fork_asm+0x1a/0x30 [ 2222.470093][ T7617] [ 2222.470093][ T7617] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2222.477420][ T7617] lock_acquire+0x120/0x360 [ 2222.482463][ T7617] fs_reclaim_acquire+0x72/0x100 [ 2222.487932][ T7617] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 2222.494278][ T7617] __alloc_skb+0x112/0x2d0 [ 2222.499223][ T7617] alloc_uevent_skb+0x7d/0x230 [ 2222.504518][ T7617] kobject_uevent_net_broadcast+0x2fa/0x560 [ 2222.510949][ T7617] kobject_uevent_env+0x55b/0x8c0 [ 2222.516510][ T7617] kobject_synth_uevent+0x527/0xb00 [ 2222.522247][ T7617] bus_uevent_store+0x115/0x170 [ 2222.527632][ T7617] kernfs_fop_write_iter+0x378/0x4f0 [ 2222.533453][ T7617] vfs_write+0x548/0xa90 [ 2222.538236][ T7617] ksys_write+0x145/0x250 [ 2222.543094][ T7617] do_syscall_64+0xfa/0x3b0 [ 2222.548130][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.554562][ T7617] [ 2222.554562][ T7617] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 2222.562408][ T7617] validate_chain+0xb9b/0x2140 [ 2222.567703][ T7617] __lock_acquire+0xab9/0xd20 [ 2222.572927][ T7617] lock_acquire+0x120/0x360 [ 2222.577983][ T7617] __mutex_lock+0x182/0xe80 [ 2222.583028][ T7617] kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.589446][ T7617] kobject_uevent_env+0x55b/0x8c0 [ 2222.595007][ T7617] set_capacity_and_notify+0x26d/0x2d0 [ 2222.601028][ T7617] loop_set_status+0x45b/0xaf0 [ 2222.606327][ T7617] lo_compat_ioctl+0x273/0x330 [ 2222.611622][ T7617] compat_blkdev_ioctl+0x5d1/0x780 [ 2222.617272][ T7617] __ia32_compat_sys_ioctl+0x543/0x840 [ 2222.623272][ T7617] __do_fast_syscall_32+0xb6/0x2b0 [ 2222.628915][ T7617] do_fast_syscall_32+0x34/0x80 [ 2222.634296][ T7617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2222.641168][ T7617] [ 2222.641168][ T7617] other info that might help us debug this: [ 2222.641168][ T7617] [ 2222.651414][ T7617] Chain exists of: [ 2222.651414][ T7617] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 2222.651414][ T7617] [ 2222.665190][ T7617] Possible unsafe locking scenario: [ 2222.665190][ T7617] [ 2222.672652][ T7617] CPU0 CPU1 [ 2222.678029][ T7617] ---- ---- [ 2222.683399][ T7617] lock(&q->q_usage_counter(io)#25); [ 2222.688794][ T7617] lock(fs_reclaim); [ 2222.695305][ T7617] lock(&q->q_usage_counter(io)#25); [ 2222.703218][ T7617] lock(uevent_sock_mutex); [ 2222.707829][ T7617] [ 2222.707829][ T7617] *** DEADLOCK *** [ 2222.707829][ T7617] [ 2222.715986][ T7617] 3 locks held by syz.4.13415/7617: [ 2222.721193][ T7617] #0: ffff888142f2d400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xaf0 [ 2222.730630][ T7617] #1: ffff888142b56c40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 2222.741293][ T7617] #2: ffff888142b56c78 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 2222.752215][ T7617] [ 2222.752215][ T7617] stack backtrace: [ 2222.758116][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.4.13415 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 2222.758139][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2222.758150][ T7617] Call Trace: [ 2222.758159][ T7617] [ 2222.758167][ T7617] dump_stack_lvl+0x189/0x250 [ 2222.758199][ T7617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2222.758231][ T7617] ? __pfx__printk+0x10/0x10 [ 2222.758250][ T7617] ? print_lock_name+0xde/0x100 [ 2222.758269][ T7617] print_circular_bug+0x2ee/0x310 [ 2222.758288][ T7617] check_noncircular+0x134/0x160 [ 2222.758307][ T7617] validate_chain+0xb9b/0x2140 [ 2222.758332][ T7617] __lock_acquire+0xab9/0xd20 [ 2222.758362][ T7617] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.758385][ T7617] lock_acquire+0x120/0x360 [ 2222.758409][ T7617] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.758435][ T7617] __mutex_lock+0x182/0xe80 [ 2222.758450][ T7617] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.758471][ T7617] ? vsnprintf+0xe11/0xf00 [ 2222.758496][ T7617] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.758520][ T7617] ? __pfx___mutex_lock+0x10/0x10 [ 2222.758534][ T7617] ? add_uevent_var+0x278/0x450 [ 2222.758555][ T7617] ? kobject_uevent_env+0x50a/0x8c0 [ 2222.758574][ T7617] ? __pfx_add_uevent_var+0x10/0x10 [ 2222.758595][ T7617] kobject_uevent_net_broadcast+0x27e/0x560 [ 2222.758617][ T7617] kobject_uevent_env+0x55b/0x8c0 [ 2222.758644][ T7617] set_capacity_and_notify+0x26d/0x2d0 [ 2222.758674][ T7617] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 2222.758702][ T7617] ? loop_set_status_from_info+0x185/0x250 [ 2222.758726][ T7617] loop_set_status+0x45b/0xaf0 [ 2222.758754][ T7617] lo_compat_ioctl+0x273/0x330 [ 2222.758787][ T7617] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 2222.758809][ T7617] ? kasan_quarantine_put+0xdd/0x220 [ 2222.758837][ T7617] ? blkdev_common_ioctl+0xfc3/0x2450 [ 2222.758863][ T7617] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2222.758884][ T7617] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2222.758913][ T7617] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2222.758933][ T7617] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 2222.758952][ T7617] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2222.758972][ T7617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2222.759005][ T7617] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 2222.759027][ T7617] compat_blkdev_ioctl+0x5d1/0x780 [ 2222.759057][ T7617] ? __fget_files+0x2a/0x420 [ 2222.759078][ T7617] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2222.759102][ T7617] ? __fget_files+0x2a/0x420 [ 2222.759122][ T7617] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2222.759149][ T7617] __ia32_compat_sys_ioctl+0x543/0x840 [ 2222.759180][ T7617] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2222.759211][ T7617] ? __se_sys_futex_time32+0x360/0x3e0 [ 2222.759237][ T7617] ? rcu_is_watching+0x15/0xb0 [ 2222.759265][ T7617] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2222.759293][ T7617] ? lockdep_hardirqs_on+0x9c/0x150 [ 2222.759323][ T7617] __do_fast_syscall_32+0xb6/0x2b0 [ 2222.759340][ T7617] ? lockdep_hardirqs_on+0x9c/0x150 [ 2222.759367][ T7617] do_fast_syscall_32+0x34/0x80 [ 2222.759383][ T7617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2222.759404][ T7617] RIP: 0023:0xf7f46539 [ 2222.759420][ T7617] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2222.759436][ T7617] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2222.759455][ T7617] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004c02 [ 2222.759469][ T7617] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2222.759480][ T7617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2222.759490][ T7617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2222.759500][ T7617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2222.759517][ T7617] [ 2223.155734][ T7659] netlink: zone id is out of range [ 2223.160980][ T7659] netlink: zone id is out of range [ 2223.167341][ T7659] netlink: zone id is out of range [ 2223.177386][ T7659] netlink: zone id is out of range [ 2223.186007][ T7659] netlink: zone id is out of range [ 2223.194636][ T7659] netlink: zone id is out of range [ 2223.210227][ T7659] netlink: zone id is out of range [ 2223.224915][ T7659] netlink: zone id is out of range [ 2223.245244][ T7659] netlink: zone id is out of range [ 2223.622294][ T7832] sctp: [Deprecated]: syz.2.13410 (pid 7832) Use of int in max_burst socket option deprecated. [ 2223.622294][ T7832] Use struct sctp_assoc_value instead [ 2223.640628][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.651722][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.435125][ T5958] usbhid 3-1:0.0: can't add hid device: -32 [ 2228.441123][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2228.546144][ T5958] usb 3-1: USB disconnect, device number 13