last executing test programs: 9.376643056s ago: executing program 4 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b5de1522d3"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x40}}, 0x40) (fail_nth: 3) 8.827050673s ago: executing program 4 (id=596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14010000160001000000000000000000fc010000000000000000000000000002ac1414bb000000000000000000000000000000ff000000000000200004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004c36c000000ac1414bb0000000000000000000000000200000000000000ffffffffffffffff0000000000000000fbffffffffffffff000000000000000000000000000000000300000040000000000000000000000009000000000000000000000000000000000000000000000001000000000000000000000000000000000000f54ca5a80002000010020000000000000004000000050000000c000800080022000017000008000b00040000000c0008f1"], 0x114}}, 0x0) 8.567827175s ago: executing program 4 (id=599): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x64, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) syz_usb_connect(0x0, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100125bc8620e80430ffac3401020301090288cb318306cb83a6abdb24432d0001014000140904e9fa03f7efb40509050d0040000f0409090501dbff03"], 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) 7.23013552s ago: executing program 0 (id=603): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x347, 0x80000001, 0xb, 0x100, 0x9}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0xe00, 0x0, 0x0, r2, 0x0}]) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001008fcb5143610705ad800000000000109022400010003000000092100100001220b00000081030000000000"], 0x0) r5 = socket$inet6(0xa, 0x6, 0x1) gettid() dup(r5) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_connect(0x2, 0xa4f, &(0x7f0000000c00)={{0x12, 0x1, 0x188, 0xb3, 0x19, 0xa7, 0x10, 0x41e, 0x4028, 0xe563, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3d, 0x4, 0x9b, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0x17, 0x80, 0x1, 0xb7, 0x5c, 0x65, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf4, 0x3, 0x1, 0x6, "d39d24b98f00"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x3, 0x57, 0x9, "8d9645646a4a10b993"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1004}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0xcc, 0x8, "461ce8", 'v'}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e69e36e03e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x4, 0x400, 0x2}, {0x6, 0x24, 0x1a, 0x4, 0x40}, [@mdlm_detail={0xbd, 0x24, 0x13, 0x7, "84163ed367cf1a7614cfcbe0294afe814560bc1c2369efd689226a713ac3df87e0c64f71991ed97e89e5ed68cf83f022b31de1c69808bdf26e98ed4e52b5883de0c59990b09e930a99d195d3df9b6a778c09029488bbb26e2125bf1cf881195e9c8de74512ea7995c842428ac1543a150fd3a2f53bce72305c341ad691178550668c6fdc5824a9b0726ab845ab63ab4e7c1de52c1d5fc148a5188482d476c54a5563b4805e5c4546dab324ab03dc7d2a6e89b2cfff39c56fbe"}, @obex={0x5, 0x24, 0x15, 0xf61}, @mdlm_detail={0x97, 0x24, 0x13, 0xf9, "ab58bbb30256287d7cd5d1309c07ed41575ac230fd7ab2a5e932daf788736f4585d8d3ccb5d3c8a985b3da128e960cf92751377c4508b60cb00667984453b05da96bd6f08a88c9d4dbd48cefd2ec897f3eeae575f6aa528ff313f8309b9a11cfeaa7d06c66eaff2df39fff114930e7462a1c13e1ccd23b35abac5da9962ee24552321cf7b9206dd256bd6e0046764619f71725"}, @mbim_extended={0x8, 0x24, 0x1c, 0xe284, 0xd8, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x39, 0xf0}}]}}, {{0x9, 0x4, 0xdb, 0x7, 0x4, 0xb5, 0x30, 0xf6, 0xb7, [@uac_control={{0xa, 0x24, 0x1, 0xfffe, 0x6d}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x1, 0x2, 0x4c}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x6, "20a0"}]}, @generic={0xac, 0x6, "6d1f9c4ff7f8600338d992c67ca5aae0b14976d5e9ab68ac8fd3fc3f8c4dc660f1dbeb5172543bf8b2f2d981eafa4b40d6d251b98bbf607dbbc9f1bd76c0f8654e7d216fb77565bca9d75f018db0e99a572487ff13d4d27b9a4df2279e3a1c9c08530b2c123cf552f18df63e37aca6bd8d88775b4611fa216223d273fc209450dd28da3c1d2aea12d9ce0c619f3f8d57406a006e5809c95ebea73bda64f93d540cd73ece4e1f86926108"}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}, @generic={0x46, 0x7064c75f4615cd33, "095d64fe08d10b29dcf6c6b391b02a99b1dabad16b89014ad1a87a6edec217b37681829be54c46c1eb93ecdeee158a3556f517be460b06c1a5b4ffb36676031ca463e0b6"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0xe, 0x3, 0xff}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x2e, 0x2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0x4, 0x7, [@generic={0x9c, 0x25, "78c2eb0b07d1bb7e40b90c8f93de8d68899be7b48326dd408a79770f10a69bfda2062113a151a2891a2909cb2eec4ee01846524c2a51eda43a0af11f31acd53d69429a36a21321682399dbbe112ed2d549d2e5245521c0768b452148c72df641266ac3e869453138d4e401da317e0ca913d082b68b247a979e951c53f6bd81ff87842c2b7656fd831d846c06473c8be7fa360af59e2c6857a2ee"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x6}]}}]}}, {{0x9, 0x4, 0x8, 0xd0, 0xd, 0x7a, 0xca, 0x29, 0x5f, [], [{{0x9, 0x5, 0x7, 0x0, 0x450, 0x6, 0x6, 0x4, [@generic={0x1c, 0x8, "5e525804fe1900c13a01b7a9881544e6fb55820aa2e77a6171c3"}, @generic={0xe8, 0x23, "36b1ef89afbc86fec02a33b218b12bacafee09ce185d08f3422f805860b572ec79d758738c63464cb31177ad0712b48289fe17a55fc421b5edef7585391a4c686e3cd5b82beeedb4e067b166aa1a861b3acd80f4b8e26efca739d3cebc30ba1050dcb54603bc7fde30e824459955f03074c9da454f295d5af9be6fbfd779479aa0eab0bdfcf1fefb90666073fab5c401ed6a9e1f97d2c1c8b2887538176a6c78f8b3b062f9291f3bc03974c823e7ac08dfcbb1f670c169119ad1656f62146f6d0114586f2a042e78203c171d765541010e8dc65762f9a94e7255219b9f0a759ffe66da978136"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x9, 0xa4, 0xe8}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0xfc, 0x7, 0xc, [@generic={0xc, 0x6, "6b7237a499da4c594d10"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1a, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x3df, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0xb, 0x7}}, {{0x9, 0x5, 0x8a, 0x0, 0x400, 0x7b, 0x2, 0xb}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x4, 0xa, 0x5, [@generic={0xa0, 0x2, "0d7cfaff6750f16058216b41367089ba719e474f403b735b4ddced2de0705a783da3b16a503166ef7b13cb40f732a73ac2ac7fe3bdb1f735be680064d2434d3549fed912c2e3d2966debc062d3e117230f019aadd71f88609254ba45fbc9c58fa897f34d1a881216cf6c212383ac4dc94da5ea3b63232a106f126ff03d8efa2f8bc1818779f3add5f5281df9daa166700f23abecff114d7640061ac3920c"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x5, 0x7f, 0x3, [@generic={0xdf, 0x5, "45a2e784cf07f3252382569c42dc1d88c3098d4475febf2dd55529a6cd593955d85288f098637e83f8a368e70d4a19f7e2ad9f077f41112504772d4bbd44f1e405b9475463c4c1fd30362557c9826b63ac9b92d22919a4e9cd5982aca3e8816e210041795f773395c2a511158d783a44ee9a212bb94200c0e1832e54669fa94f1a1baae8ec2a1872d58577ba14445bc210563b0c6c3145eb8e865f6d4980158ae9981be396dce8709a73b5ad8744885b87d40930f6e5c286bd9a9ac85d7b002349d986f313ce76eaac185d495dcad54cf84403715a83a47676050361cc"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0x7, 0xe, 0x200, 0x2f, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x9, 0x400, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x9, 0x8, 0x60}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x0, 0x5, 0x15, [@generic={0x63, 0x7, "b816b2f9d8a460f4a59a7e80721883fadb9d778af8370d52d8bd10bd8cfdcd896656d0bdcff603f1b3d239d85657f22ac45dc7542607ff822c0df1253a96e660d651fd91cc6f973daca32c9638ea488cdfeb11eba0969214d3260b06e643f0f18f"}, @generic={0x94, 0x0, "60490651c123496478d9eecb4250fc5a5908647bbdb2d1e1cfcbee811a763e3aaaf579c1eb56fce0e9eec808f746578f2fe390b57c02436f90267c00279977cd7319a548632235efc68a9c5444fcea5ab8947e264bbf32c083e0017138228175973c796f91c7396f6d3dd10eb6c068092cfa7e881f6aa25b475a60004e35c3570c8888c5531892aa4af08180ea3825cf72e3"}]}}]}}, {{0x9, 0x4, 0x8f, 0x4, 0xb, 0xb6, 0xa0, 0x18, 0x9, [], [{{0x9, 0x5, 0xe, 0x1, 0x20, 0xc, 0xf, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x8, 0x0, 0x5}}, {{0x9, 0x5, 0x1e, 0x4, 0x10, 0x5, 0xe, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x54b4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x78, 0x7f, 0xfe, [@generic={0xd6, 0x31, "8d1fb8059fba4ea75811ab99b95168ed9aadcc9e172cdaa17194ae0f7071eac3c53242b80f2ff4523d0023a12dcab7b978c41a394f83c32d255af18ed271e594f97c3b056eb72bdc05a909d74022a90c17e3ce04c0cd0e9a2ba4127dc4056567cfda7932191deb3f2c9a979d1de5d83e82376000554fbdf45358f75760bd81d747c02e065cde59daef5b040e37ca1136e7ee153fa2ee3250d4663c2556424d83ba798d492af632daa1ca80c917b1c2d302a8429af869b98af656b80f2fea002066379f47b252b7a8f2c6e9e6250002342f7969c8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x0, 0x48, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xfe, 0xfe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x101}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x9, 0x0, 0x1, [@generic={0x38, 0x21, "e4e6c2fbbbccf06eb3641e974dc8182c2b3a6d61e3c9ab6e5f2f76794eb04e8e8464c9e2f0a7e5e1ab8203bfaf5c52b879fb106a517f"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0xf8, 0x9f, 0x8, [@generic={0x8f, 0x31, "9869f66035f34718d11660a1b78368c30e8878f1f0e125d9413ac339ddeec2d1f688b24d35e999a20314b71974f2abdb3b4b2a644ba192f2a4f78eb22525ca675f95eb639f1bcd84a293e0b791de080b1ee8409d0eaaf34a5f1cc106ac0833e0411c967d91ae29b10ec10ab4e142e2f081bd973c3650174b0c9cf1b7b0c3dc49b426d5a0bab9c59cdfb273ebb9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x76, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x9, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xee}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x0, 0x10, 0xf9, [@generic={0x46, 0x21, "af256035bc568d3c4e2086a8e7c7fa2950e17a28ff2f1791d445228f775ff90d63f0f6815ceea7747800e2a54d81115361e134e1d7486219614b21a9ac18a6dc2c65f87a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf2, 0x1}]}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x300, 0x1, 0x1d, 0x8, 0x20, 0x1}, 0x4c, &(0x7f00000016c0)={0x5, 0xf, 0x4c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "33ddf3a7efac16e0bc72b1019fe0bdbd"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x4, 0x2e1d}, @wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0xff, 0x7, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0xfb, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4db97206ddf3dab8ab0627ada7002122"}, @ptm_cap={0x3}]}}) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220b000000a2de83a550c11747742c8847a549"], 0x0}, 0x0) r6 = syz_usb_connect$uac1(0x6, 0xef, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x8, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x6, 0x5}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x2, 0x1, "ad6d"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x2, 0x1, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x2, 0x5, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x7, 'U/'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0xf7, 0x1001}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x8, 0x8, "3983d8b335eb963b1e"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xfd, 0x2, {0x7, 0x25, 0x1, 0x83, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xd, 0x6, 0x1001}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0x5d, 0x7, "c8e6121c9e337ffe"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0xfff1, 0x4, "47a19940ce"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xde, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xee, 0x2, 0x8, {0x7, 0x25, 0x1, 0x3, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x97, 0x3, 0x8, 0x7}, 0x1d, &(0x7f0000000200)={0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x3, 0x6, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x6}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0a}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "414d345846efaf3fcbac09339c386eb4a5fe3c9763f836cfcc47dd9fcd6846ae9b64bda46326928102ab78f2343b9a125b1432a8778dffcc9c58f15eb0a6b2622d950a0a70a3f997fb81ff45dcd1497b88eab6ccf3d45a781d88db4fc72c104bc163e4fe51d44cc4f757b30fb19c95deac76f5b93969f28d384c308d5763b4da119db94b6bca2f30712f833808337a920b5c44d99c4ff952508ebd99947493b00772143d9e"}}, {0xef, &(0x7f0000000340)=@string={0xef, 0x3, "a8e9be1a4c91e787744f257b5749a2022a57ec19835ce8322657a0831a45cc0057b6065bb2b049d84094d31fce25f9d80ae5afbc2864893b779c4685d1fa5f0dc7f1ebdf2357232941778cd19e4cbdc09b5310fab5bcc4c8956a8df98a5f0c5394e6505ee33f8361831b2fe95ebd07ff830aa491769096881b85d04854c62b0e97da808148f39f2c5a8840dec83f68dcf29d0c9655d59d5e5fd8e55697d599b34cb83a4d12ac9ff7db5f1a8235dce2090d162266454a0bb5a90da377eb71fd47340f9e4d817a0e4d72db20a0dada6fb5f6d92b319d0703066e7289f81537ba734b69cec1d762cbc15557378dab"}}, {0xbf, &(0x7f0000000440)=@string={0xbf, 0x3, "5759e4b7288c3635784d213de83921d88a795afbd76a114b9c1ba1601ac098bb0054d8fbec42c227a2b486b36e52ca95c3e3a325ed21995cdfdf2146fe9fc34fcd7ddc04e2a03db506f8e8ac7206a7ee1898a4b0d740d9e7a716dfe693c43cd280c3b5e2d3b808a25f39757c4d7626001fdf8af0dbd30fb8d8419beebebca2c8dd901b65011a770ce0cd888d070d82a5dd5ced76f5fad546a095216bdfaab242cb167fc09b2ed08875de1d2c1da27c0cad514d7f6a049cfaf728c28938"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40b}}, {0x4d, &(0x7f00000005c0)=@string={0x4d, 0x3, "40b35ad4f9f009f140709caeba3d4424d4dd07942f15720b163e47335cdd1b2ee90d67cbb062183817e917f8e2d41265aa1a7573398f60cb60c7da8642485bd23d342a2e33b177ec026b21"}}, {0xf3, &(0x7f0000000640)=@string={0xf3, 0x3, "fc2851a56b4799cef54aedf0ed2511184ccab1f16dda99b9b7e1db1d7840a69ffb221b4758fffebf52a74baa51766fcf4787d6b15696edfd828fa247e2ffc3956588ac0d3760deb3ee2446a836fe7c6c25909b1047c95b2d58c7db90bf1e4fa17dec3962e6d80df966585b5ce0babf1358cf3843ccaed95a0ce0ff9cad86e01767559a8451ff3171718d26671bcaec71a42eab3ad6e3c56f4814477d69eade3ed01ca7060944339a0688f0b321958bc87bbfce600aa19471085b1e04c739742b9ab7d22aeb6b820b8fc289c462d9c9d41ea45526fb335b6ffb4bf507879c38d0b83b80633c680fc2f01e6d81ec929621ca"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc0d}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000980)={0xc, &(0x7f0000000800)={0x0, 0x23, 0x96, {0x96, 0x8, "fc3bd19b76d21f79950ba916ebc8cb5ddb08f177fb4ff870e0082b41daf15533b4f108cae3f2a924c154168935f6f72b486626a06c8edae3cc2276d0b1e0301c209c1fdee3a8e4a272294f0ac5a7c2f796386d7a6997fd8a8b83cf0c4e8efe11e9e46561905e5008726ad9467aa25a807d0ee1d6ac3c256dec8f6104c9ac0eb42ecf2ffff94a5b92d91819886c0dfbe007bef268"}}, &(0x7f00000008c0)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "67cf818ac3cae010de5eafa698e2dc53eb724723de71de3854a60cda34622419a152d6e3ab0cd4bb1a09f6a5491fe640c9ac25e4f4a40d8c0ca0352415c12904e4e5da6822242918457d0988ffce41040ab918e0f7b921270491476a165f10005ca065f014735ff85e96244f79736543da9bf42c2711d0bd210faea30a0235eca022e85e1e24a8780af2fedec7005a88191f1558d2d42945199b233f572b39858cb4dd"}}}, &(0x7f0000000bc0)={0x24, &(0x7f00000009c0)={0x0, 0x6, 0x1e, "8b5ab824e2f12c9636de1dc471844eef7d7167743dfab3ccd40fe3021f6b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9f}, &(0x7f0000000a80)={0x20, 0x81, 0x2, "4fc7"}, &(0x7f0000000ac0)={0x20, 0x82, 0x1, "cb"}, &(0x7f0000000b00)={0x20, 0x83, 0x3, "95b887"}, &(0x7f0000000b40)={0x20, 0x84, 0x3, "6e1f04"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "499357"}}) 7.206124607s ago: executing program 1 (id=604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000006c0)={r6, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000dc0)="388ba770da93fd1a3ee15ea38a0697d02259057b8d2dac7e26b78fa9a3916297f8313f09bcd7061d32fd51e6261e2512ea759f45755ec05df8a5dfb62ec2f15bd719c17da4628b1b2f2dee7cb2e089f9ebb19bfa282765eb4f06a5be3d4cbcee3dd7e50ef31f4bd7cb7c8c9797c3810e7d6f2af380622795817d0938d68025979d0267fdb5ce13c5b52f4a2ccdbd815d6c3f32d383e2326835d7bbba1fceebbc33c4527f007732ec2bbf0947452ec138dac5c4862da1487114118613d41b8fc103eed5bc4dd9055ba74cba38", &(0x7f0000000ec0)="7a1b44af124c37685c7a780930efb403eb940d9074b2d1aff4356dcf89d0885654"}}, &(0x7f00000002c0)) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r3, r7, r8}, 0xc) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x7, 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 6.080195297s ago: executing program 2 (id=611): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/220, 0xdc}], 0x1}}], 0x1, 0x40010180, 0x0) (fail_nth: 3) close(r1) 5.654673216s ago: executing program 2 (id=613): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r1 = openat$bsg(0xffffff9c, &(0x7f0000000100), 0xa0101, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0xc22, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file2\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f00000004c0)={0x18, r4, 0x3, 0x0, &(0x7f0000000480)=[{0xf276, 0x5c5}, {0x9}, {0x7, 0x59d}]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ce3576e1f9107887007901", @ANYRES16=r5, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) execve(&(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000440)={[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/net/tun\x00']}) 5.5559497s ago: executing program 0 (id=614): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xe8a, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80000001, 0x2}, 0x20) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_disconnect(r4) getresuid(&(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000180)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000106d047019df6600000001090224000100000000090400fdf8e24c32ac3c179dd1970303000000092113040c012205"], 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r10, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, 0x0}}], 0x1, 0x24000045) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x90, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x54, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0xfffffffd}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1000}, @TCA_RED_MAX_P={0x8, 0x3, 0x1a}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x241}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x2, 0x5, 0x3, 0xb, 0x19, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x10}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}]}, 0x90}}, 0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1c, r2, 0x1, 0x4, 0x6, @local}, 0x14) 5.395841577s ago: executing program 2 (id=615): syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xc1, 0xc8, 0x2}}}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_PRIORITY={0x6}]}}}]}, 0x44}}, 0x0) 5.087827701s ago: executing program 4 (id=617): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x4, r4, r5, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) r7 = dup(r1) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) write$char_usb(r0, 0x0, 0x0) 4.450812585s ago: executing program 2 (id=618): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005480)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x100}) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, &(0x7f0000002100)=0x40) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0xe, 0xe7, {0xe7, 0x21, "3c763b0f695bdd321655a92872fdc8ac8436903e8131b70d0a4f8b52fa2282abdccfa0db2a481274d34207910a0a43165a330fdadfb18ef31674c895444540c739a776c1ed08bc1c92f445ef73e7da115d35c22307a51427499e7935f7e3933b7da02f13975c8b9c8aeb42911b699d76966059bdd298aaf007c7341c7209666c46625f39be0f6577883a5e1e92cddbe45966c7dafe30a0d9e0b923f53773f7ec5f798413be098c5d674621148fa4bd8d91a896106d607484b521370d00e67eaba5176aa08e14d877444c5b648588ac902f6acdcdb05d18dbbe393650b4095d46b2d33db635"}}, &(0x7f0000000040)={0x0, 0x3, 0x5, @string={0x5, 0x3, "07e3b6"}}, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x9, 'Z'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5a1}}}}, &(0x7f0000000480)={0x18, &(0x7f0000000280)={0x0, 0xa, 0x33, "0a7d581c897bba3c4fc085af4f24d81b819d27c05bfb670131271871734304d1b1cb4b1719e1d70b452de04d890c933381f5ae"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x98}, &(0x7f0000000380)={0x20, 0x1, 0xa0, "aacc520085805cc87002ba2e1d50a78ea9dc4b188358ea7f1f192a683cb3e9f9f582168b216c575a70a18b3a8f7c547fef732f242708e0baa97232168e6bf1c9c2c791a638e67e475ccee1a2f24bccfdb6d765738e151d486108321eb36f4e643a87fa9e69ee2bd409db45723991b7e018657eb516822f5be76b70b49f29bb7ef356894c55154cc4478dadecdff9900dd70ab5f77b22275d3deff25221157d79"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) 4.308432948s ago: executing program 0 (id=619): syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = eventfd2(0x7ff, 0x80801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b9000/0x1000)=nil, &(0x7f00004b9000/0x2000)=nil, &(0x7f0000405000/0x2000)=nil, &(0x7f00002bf000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006de000/0x2000)=nil, &(0x7f00002bd000/0x1000)=nil, &(0x7f00007c9000/0x12000)=nil, &(0x7f0000574000/0x2000)=nil, &(0x7f000041e000/0x2000)=nil, &(0x7f0000000100)="6cf1a5cc11a60a506a36353c8b6d11211cf6c04870f6d8f712df2f595309427493500c3b9f6e97c3859ef03a2e5ec0254b720eb914cadc2dd2ce9791e839d3ed9970fcb316d1c658e0b31aa6f316ff03e8ef99e61c1ff63ba2579c9b49095c6fef9a316f1be1be0a75fd889e10f2bc7e34b69f62dff13c3e1a5c319d66aed36101dad3d50134385a708259e3f371e61a", 0x90, r0}, 0x64) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xb615}]}, 0x2c}}, 0x20008841) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0186405, &(0x7f0000000140)={0x5, 0x100, {}, {0xee00}, 0x0, 0x10}) r8 = fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000100)="23d06400081a44e5d1e85ff22e7d0caf3c23c58a013a0a371952827dea4cc91cd81172c9678f4c887813273f6aa9c5a31377", 0x0}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r7, r8, 0x1d, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000800) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/74, 0x328000}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000600)={r10, 0x9}, 0x8) socket$kcm(0x1e, 0x1, 0x0) r12 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r12, 0x48e9, 0x0, 0x2, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88000) 3.990092138s ago: executing program 1 (id=620): unshare(0x20000400) r0 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2140}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) 3.921961258s ago: executing program 1 (id=621): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0xfffffffe, 0x2) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 3.679747309s ago: executing program 2 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xffff17a8) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xfff, 0x10000, 0x0, r2, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usbip_server_init(0x6ad5158a42b9cee1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x1) syz_clone(0xc244080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x7, 0x4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8880, 0x0) getdents(r7, 0x0, 0xffffff8d) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0xfffffffd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x4040090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x960, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x934, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x724, 0x1, [@m_ctinfo={0x144, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4cf4, 0x4, 0x4, 0xffff, 0xb}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}]}, {0xe5, 0x6, "6a349612ab112c5ea221b34f3813117784c00ae5da968d20b9ff5c5b7681685bf4fc893482d1fbd0cc585262752ba905521496d72d1a6018ae815a3b8e8d3520a854c6f4f776cf2b186f6bdf5bfd62ac7458c7f242ed9297366fe3d92e9731c29b2e46af76d3380a13db309972b8ca480747ac98b94b9b7020919750135e0aa1d4db07f0a2f0da32e6df6e6003bac26b841234d39a1ab87b7fd5cb049ed4bd3ab92a12472bbc25c6fd8b5192d1de3fdff6b2e3d5bf1db42b67ec0a4f60a28014602518c91870cc88febeb52b183039c8592b650a4a3d4d838a70f0faab8a3186ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x104, 0xf, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x894}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x36d}]}, {0xc0, 0x6, "1eedf9681407a60437e600d7d43b753d8e4579a777605914336cd75bd763bcc0712662d6465aa0b31f3f505db30037dfc9aaf3d22ddf6d7e0ae58b91ca5e34670edf1329f00859d0723c3f2af9f51c91e6fd5150afc68452debf3529cdb946b9fba224173f6599bc6f145644ae3d100cf2715aab17034c9cb90dc926c51b509c9dc7672e10a951fa93d644cb4b1eb6e54d4f4013cfe90a9a1c5eda5a36bf607bfbd09ea06e20092c99459cbb4e86c63192add11a8972191d959b7151"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x120, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0xe2, 0x6, "6a730bee684e3524139815399d60e2401f3a0c4a7e3c3c17e3f72c36765c298dc6588a1ffc2163fa0e03647b9062191ce7a8cb313b5629e7a1104c2d7f5989423fd69dd880f304563800ecaa79df8ea39c6d484a985d1fc569b20e561164887042fbb4fd231e4b4421adc7c1032829922a3955dada94e06ce5e88e4ec11940a5642a24f41e4af93472586497e5ade8edb02572cfe48458eb36c61ffd31fe2545500a027e53fc3f6eb77893d5b5952c8099a45cdb284a1b74c501c2824b1217c4638c10f98025fcf355b9267c1287bda71c7bed0ef671539c650e3ce9979a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xd4, 0x10, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x6, 0x7, 0xb, 0x7fff}, @multicast1, @private=0xa010100, 0xff000000}}]}, {0x81, 0x6, "21067091d498fc7060b48b5135fe7b9d058150f09d9506c541864acb4ff2cdeaea7314563852b81c7c852b7ec39a50f40180af7a8db31fbc439b8f85a0e2eb99375803629d55dec00323c3cb4dbbc700d9167a29b5f7942a60c0141ac2e42397a0bac903a5dbffa3e0454c1b6e91cea4b1e4c274e4ba30ca09af009258"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x168, 0xd, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfffffffc, 0x5, 0xfe4a, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x5f8c, 0x4, 0x6, 0x800}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x8, 0xf9, 0xc}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x2, 0x1, 0x2}, 0x8}}]}, {0xc5, 0x6, "3610d9f667f48edfacad9da359f158354924afd7487a614738b6d279a233261e4b9ddee74eeafdac6ba149754501bb07fa8bbe5654519f1859587019d3fe6ab44203c35e3e515162211264efb59cd6ab811a6f1bb7db3bf0002e8b59c5c23739e0ee740fffad5a08cdc503d79bbcb314116749ccc888c440f40e95b49ac004997d339d0e2b3956d55a46c5e3fcf1710e664cd611f7eb16ca43009510288eecfc2380e4a20527994773a1c103607e1cd169abc847c3294414debb8e6a03781fa226"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_csum={0x17c, 0xd, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0xc, 0x0, 0x6, 0x7}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xff, 0x8, 0xffffffff, 0x8}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x87ee, 0x0, 0x1, 0x2}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x1, 0x8, 0x1, 0x166}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x88, 0x10001, 0x8, 0x8, 0x4b11}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x7, 0x2, 0x8}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffffd, 0x8, 0x0, 0x401}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0x5, 0x100, 0x5}, 0x14}}]}, {0x6e, 0x6, "e506dfc117d31d28feaf5a9ab33d84dc0b00d8a367243fe853376569a63af7ea88e6233249c08b38adb6254001e54c331bcb2977fe2596941a0196af4b9bc288734724b6ed928eb6ef43b0aac15ea41754d0d2edf31e7fceb1e63ccc5442fdbd03238837a303b2e7d470"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x1fc, 0x1, [@m_sample={0x1f8, 0x10, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x1ff, 0x10000000, 0x8c1, 0x63f4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x674, 0x20000000, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x161, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x960}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000000), 0x5d, 0x12000, &(0x7f0000003700)={0x77359400}) 3.399358626s ago: executing program 0 (id=623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="34bf67ec57726e4a66bd0ff5b2a9a7686c4e9a9c8b57a6e0c2", 0x19}], 0x1, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x24048001}, 0x800) recvmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1}, 0xe}], 0x1, 0x40000042, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0), 0x0, 0x44, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000300), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r7 = epoll_create1(0x80000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) read$FUSE(r8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)={0x2000000}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r9, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0xa3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 3.301723167s ago: executing program 1 (id=624): mlockall(0x2) io_setup(0x6, &(0x7f0000002140)) (async) io_setup(0x6, &(0x7f0000002140)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x1}}]}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet6(r4, &(0x7f00000002c0)="f6584496", 0x4, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000002300)=[{&(0x7f0000001200)='\x00', 0x1}, {&(0x7f0000001300)="d38faaeed3fa28ce08ab1d7d724a6a101595303dbf77cc54227335299858ec7b3ad93d10c8ea778d8081353dab08388463581bbb74b8fbf57d0ca10c694510fa5d8b255597c074a40fc5abaa5436248c18658bcb41593333e71eb646063aa6cd8a29c9ced1752f1a82948afcd7b3ba6b1b8eb90fc70020f55ada764310ca7474fe0e636ea5ed07448c82e1716a4002ff7895ec49087f90c1b42084af159e4bc67fe80d335d2d45710a85ecde0d251daf505bef9be5099c52bfc399c513cac606866193438af8a73d7d08781a0b2de378557b658bebbb0e01fa9c8c7fdcad2caf1cc7e3d269eda0ecebd36f9da4ae2f59053b1e1385cfa071f3fa4e997b48410c581ed1252cac345d070d2609922ecd4ef017b1ace905f95e4eceec3f74906d3c15be8d7c3cbccfb8d6f059b73d67ff1a7e170217039c91da6a0c8282bbfd4783bcf61f08c74141f64e9b94e5ce681b1712425cd41b088d80b80b2f696e0ed1fd354caf3520095cdbd60fbb5d8ef8638759e098407d17f12dfb5208c4fcd25c36d058c191d02229935580596f6bdb9aca4366ea163b4758f55fce8d4a43ff317b6177ae17941cc99cdeb4975f702eddbad1bda07820556519732920b1968d1460ff70a1f83c809a73faede16de5a4eda527ba9ee4e2009d41c0877de53ae852fcb7aa59295c75def5d7a9be891e955534d343456a0839bf71506793e704612f135f5f3dc69fd0f469cb673473092bebf638fbaafbbd513c7d211da83a87cde126b3649a9c7aeeac2bf3fa1b6bd6cb28ad12151075edfea063662e2077ce3b8dee34ad09765c122a65ff86112b2934694d90d1cd8e9347a6a03fdeebb36182edeea7bd3130cf44d7952cd589a1b4d81fe692658a6eadec5d7e4e0b3954b57a739d6097f1612bf4a571ae308fb4cd3457c08eeb133549cc17a79ff68dc2b47cd5f75668bb82d7b0ec68bb0b79e181678c49e1ed42ef70c74fb1bb94fa9e9a17fb68e49a8c71ed4f70e7adfd25f76551f930eeb88068f85c75f44e7030f1385a19ecb38b2844d2e9452ac3a2f8e7263de7cb91a4f362a8ec3793165c59d3276a5bd41de076a2974daac9f73d45a00d2210806e4ffa22cf3c22b42c642c483dcf317258cb3e34f3658fb9869a37b3686a4636a118f0865889f0a6c87f7af719027a4574f6e77a638eea8c36d6cbc425fd94932a52c08f45fc831e5f4e1f8d736a41c26c61f6fa3bc8a4adae65e87de12ed0dd06586a1b36c9a225641915fd32221435a420e2c72a7ca5346fa7c376bbb495f2b463aef4fdbccf0f7d30b34bb215b814b6aef4da768bc2654234dc5c2bd094e83ab23dd78a6430a473ea75e7f05264c196902363f8cca326c177f18997fe9e55487cdb0a89de7c6b39b6c222cac287c989b049508a21efcb75a8e09ccdd2245c529ea2648c2adea4f951ec3ce757b949423fbb887e72891547aebcc90205242c92bd5897f8fc661df218efdb2e21820ff00f4736a269b01da10ed212ec2b75592cf6b0203591a64f410380719cba66fde0fb424dfb367ec84f8608998d6e374d88b960efb322ff3af3cabdd0255510f4f26719605f3a664f8594c128b95f617abd165cb44b7746c6ca579f6f4bc2558442a0f5e40ae2f595207f84ecc85acf274ab596cfc5cae00c628f1f91b149a3c9a0bed90a072822ce958f5bdc801c6348e5843c87221d2c01442de73dde18bf3ba56be20c1b61fa5d7afd8c29bf0f38f72720ffd050564bf131facca7030b9bffec39de06fe2e4f2b9bc96b8f56218216b59ce5931ca1c98fc1026a9518a2c97bc40e20791479929aaf72326da373a19a37852f2b50ce2445a9424c57e1fd6e08c71f2f45e668e3141a1810552c275271c770783f93185efe8dd2000b6c051828e5553b820a7abc6af13aeba6af8386f8a2d45dea3932ca9524a85a3004e843542eff5cf73c5eecf678386acaf236d57f43ec8ae89c81ef92b4b1dcfff8ead1b946fc4b5019da31cc61020a07da91f9f69d33264d6dfa88be159b779dee43a0431d312ff95daf5716e22d53458e46dccd1c604d1e078b46811cb41dcf47c1decfaadc7e7750c6cbda672caac96caff6c6930f8718d6be875f768ffbbe4bd445dc1809e7294cf58aba99f570885b98fd50629b2edcc2ce3dcd5c4f141da50f3539c4a9775c1edf070bc39e5e9666ac8b032d01e5aade451d0684255922bf0834372b5ae928f8f3f4e5bc9bcbe4557f53b785a229b82462d31dcbdc3ada17b4f1db2111c1026183e4d3a66e6ecdde91616bc787b9c8ade91eb5bbde76d2fd68cdc8385d5cdc5dc3481143e0725c352815d612869654f3a37bdf0e671499ec7545c68f8a232d524c9e91a086c3c82a6e44feb0f61c81e2c02a72cfe174a6c2418fdaf2df802284ecc2d8441d34050c269128fd7d21e31c5dea4ae19ffe799a9f3ace3535c1ac596ddacc16deddd62ea83b9be60790caee968d9631079cf68cc133396788f391fbcb54a7defb7bc4191bfb8f92aed8acf42c02ed49b88622d1ff629d0f3ba63505e59cd25db82b953908581abd013199794be14b38abdc3daf25e8306f100e010cd9a29804114e1832f8005b582a2a397e43e426df8842cfeff17e40f064a928e6748d6fe6376c91fc9acba67807a4dea42a12a6d61103876fa70c2679e801cd414083ce27ed4b1a469f03054e6789acaa8108f2549037535aa331dcf541cc7cbcd7b896f81fbc41c13ee70d3707cab746b14b2c63a09230ce43972a53eb7926fb9e2a1cadba87232a483931af4fcaba554e81e7809e4d38ed507bbf2859755e41095462834b69f1af701f7dbbbf1e5e2e49008e7df2ddd5c1ff6281973157aaa52062ee983c0f778786b8d06c8ed6618b8389694256996a07b95e18c1c2a8365c4b43e41b9dfd1568adcd7efe5d5aadc04c67b9877a87735618d802f73c79816044254878e37548eca5eb7b40f728e4bf93381827ffcf9aec78d519643f53772f09fe7e1b4f109e68ec41e0db1f406cf62441eabefb5512a032d3904fef63c3bdac35d64434a86934faab39275f93e0125f4607f380100b237ad72e5f378f82a09f66c48d1f748dd2ad5ab77e1ff9f1df90f4847332f9d4f5b21a091ff80a2b3a2a84f29ad26d70c130ae5eb20cb4260f1a54e5fa238d858cf811718f0c2c277d9d60c4c8f3fb836102268d46bead6802bde863c997e55666f536ae08deec70abcddaa01541bb074306fe1278b4b3396bcf9232d00ce2d2b81661aaafedb05a4d4e5cce86775ba59199e15c96e2a5c59446962483191698b5a37b02b3c00ab41b9b187d976451b51c92b3be0987066818eeda575015d9020a1fdf5304348824af143b1713a3c3e9b6e70767c73dec48a431f64836a272e29dca8a511c8255465193f79fa2ea918e1bf84d91918189dd0e9ff76e812071578f1c2b1b4936609fb9b5f74a194299430323d62f588a700ec684c6454dd0ef637e51ed4b1c2747e0656d00dbbbdfc4f66ec1589210c4d7af564cd05b049e5add18ce562846b3daf66693e97bd3463ed3248ffd60d819b9d6a98590b4550046552693df1bce133b6a40ba53e08286d9a6944e036db6d2953222f7fa3e41a7728a4ada3051fef1dbaed895ec3fed572f0d1af24811fa7aa706a9ce35dd6cd4b049f50c590ab60b40e7cee9a81a70ed0ac608d42136c2d21e38fd1b2a9570743a12b57e144bf06132ab887add72935f8c6089c2ef4ce1db9514a7397d7e6ead0ecba21400c92970744894e81511e534b8db8f6b4989ae76301692b84d7e1a295ee7a6f3fb44cd0a02ea2134e77052f6695efd7b986c12721a2033f2cd1f4ae8dd86bcd83c3b6eac01a017c403e1955e6e5750c031c96b5c933e04a657bfd711f265284251a8827487945b8c231490ac088ed8c3077e87d994ed55ad9bddfce451614efcbd5c97689b59760f4a1dd4c98d1902814b5e3ac8041bfb343fc6137c5ace58ae572266c0fed05ca6e99511af1833baf939e25eb317ebc92c7be6637addbc052c63d81d26a124a40993fdd06757124c1b999fc9647342a4b74c72b1564371bb3f822a15af42c906d7bc40d72c7c7e18b3918cffa39b9d7a1badad7e76314577ea6d9f399135e363040704f5c9529f65847196accf35088e2a0d992bfccc6d7e0a6dfd49b82a4bb1aa35e5e36bde7b7a5ab104ccd3721bd8fc8b38852bf9737ddcce9da09a96ca346e09e1c30ed1936ec43f04795bf4a6d10e0c398407400c22db114d4bc0a3e5d2fc46f9aa689f0d5e75d3e32a0c51963452faa435020497ab04de51b4e7794ea24cf8b42096285585242b16e7087662de3c5598edc32d0b6af0cd678682a86989fb10fba6d872c990b14168e63d6f541d2d02ee336b8d30021021809639a97e7eb2a84e2da14d024b028c3cf1d6fd4baa34bee8fd17bd7ea52b3768b305ceb4fdf798cff88afcd8bfbeac38fcabe265c00116fde749b6c7594805907edb517333665a9a04ae834c37c0fb6719e198deb198e174d9a61348abbe8e27a1ecb604f237447d8735c3d542a0412fcf67f12767dc40a65a1d7e94fa8fa6a165fe7efb96b56e1e97128c82356d28af7836af3e03b1ed778ed1da74a86e8d6974eda3898ee71ff26e3de3d0776b65c0c47bd6359d1f7a60230850460159baa0ee2cf673ca1bc34d9b9e6001124471f1c4cf08ac40706c429dfd1ce42dc2609ac2e8a88e26e11eebf65c1a7ecb9cb938c41ac0ad10e0bbe70c983d9b0be25ac4dc6ed2cae14041929b3cfa66f30a8ea95a2a27fe2b1990a4337f029bfe095f24a58d30735bf45192b28a30bf00f0897230b720cae93dbeac4b5359558717e113f9fb7b3f0baa9627ad007d71c1922a644395c61ba0ae4dbe14e26a89789b98198ebb063ce84596b1dc30b85f64455d578b152f5abc3eaaf6d4cba77e14c4ca57de1231f7ff231c17d2d69b96478b1ba544009bf9164362ed94c857046ca20d6241ae1a12420ab6e241e1703ff819043938aaf632b49b804bef3bab61dae568ae78eec788dfd3055dcc0284caa1b25d86746148cf6f555348789411dddee1e1128b5b993c1b4a522f506f918aa86dc6d9f5b78f7a9c331ba2f337683d5adde904f867ff92a956da654faca69c11dfc584d02e04061ddce476949fd3a66ad25b4390d378c94b24cdb03b5bd487c0291f462d1cef0eb0b18c3f56e0969bafcd5810f4d921a9c5f9386485be1cea06c97fc7516850986c0e98ca933a307f81e213c19dec1444ce48fd7b5f61e4b68c05d88aef8c07b070a62d94c899af5d8b9bae115d5ac92d52550ea281d0a3663dc1fdc702c077f2f916210461899ef5df4d1b99819674ce6070dd679c18158fc4680a2643d98dcbab247e8f8954291cfd8741a626efafe869f8190881b210ed021c14371669162e6420795f7b4a967e594754c384f35cde84de73eb5b0517474b06905a483b9a9cee08c2e0002ae339f935d73bc799401e61bc2689e0d607e0a8bf9dad80cf9c9cb224b7fd6ea0f3a7f5cb80b3b1c7a1ce22e0298014f4a1e6eadbc320129980b93ab7666aad573f024a20c4e22fd5aa16f0ce9c839b715f613769051c2ab586318a80e145fdc35927cc608d5c35233331d8ada033068ea02389108b6debc4ea405e5eed30fa62fde2bfeb297e18200062a5c239e01ff958af4e150ddec97d24b26b10015af6db252b7e1ed4f7c27eff839d8f3ece04defa5f870ab15e2f47b1147dae2ff24a06a18d2b5c8199e24916751141d55ac041b48e625bdfccbb56496b2714efedd3283125b1cc73f3", 0x1000}], 0x2) 3.039115928s ago: executing program 1 (id=625): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x4) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000500)) (async) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200), 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000280)={@my=0x1}) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) shutdown(r4, 0x0) (async) connect$can_j1939(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60044090) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000010201f4470000000000000002000001"], 0x38}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000180)=0x5, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x80, 0x5, 0x10009}) (async) mmap(&(0x7f00003d2000/0x4000)=nil, 0x4000, 0x0, 0x11, r6, 0x56d31000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000001c0)=0xfffffffc, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffbffffaaaaaaaaaaaa86dd6001010000108800fe8000000000000000000000000000bbfe8000000000b28c48f1bd1d6824f9000000000000000000aa00000000000290780200000000000000"], 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.919711386s ago: executing program 3 (id=626): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bond0\x00', 0x10b}) 2.785890057s ago: executing program 3 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xff, 0x1, 0x401}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x2, r0}) recvfrom$inet6(r2, &(0x7f0000000240)=""/124, 0x7c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={r4, 0x20000004, 0xffffffffffff0001, 0x8040000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20a040) fcntl$dupfd(r6, 0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES64=r3, @ANYBLOB="ed"], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$kcm(0xa, 0x7, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x825, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = epoll_create1(0x0) read(r10, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0xa, "0f"}, @global=@item_012={0x2, 0x1, 0x9, '+\x00'}]}}, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$inet(r11, &(0x7f0000000180)=""/126, 0x7e, 0x2102, 0x0, 0x0) 2.736165051s ago: executing program 1 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) creat(&(0x7f0000000040)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800044001be000408000240000000040900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 2.2309224s ago: executing program 32 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) creat(&(0x7f0000000040)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800044001be000408000240000000040900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 2.214909053s ago: executing program 0 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) (fail_nth: 3) 2.214339311s ago: executing program 2 (id=631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000006c0)={r6, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000dc0)="388ba770da93fd1a3ee15ea38a0697d02259057b8d2dac7e26b78fa9a3916297f8313f09bcd7061d32fd51e6261e2512ea759f45755ec05df8a5dfb62ec2f15bd719c17da4628b1b2f2dee7cb2e089f9ebb19bfa282765eb4f06a5be3d4cbcee3dd7e50ef31f4bd7cb7c8c9797c3810e7d6f2af380622795817d0938d68025979d0267fdb5ce13c5b52f4a2ccdbd815d6c3f32d383e2326835d7bbba1fceebbc33c4527f007732ec2bbf0947452ec138dac5c4862da1487114118613d41b8fc103eed5bc4dd9055ba74cba38", &(0x7f0000000ec0)="7a1b44af124c37685c7a780930efb403eb940d9074b2d1aff4356dcf89d0885654"}}, &(0x7f00000002c0)) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r3, r7, r8}, 0xc) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x7, 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2.206279605s ago: executing program 3 (id=632): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x10, 0x6, @link_local}, 0x14) 1.94911421s ago: executing program 0 (id=633): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000140)={0x3, @win={{0x1ff, 0xc636, 0x1b1, 0x4}, 0x2, 0x0, 0x0, 0xffff7fff, 0x0, 0xa6}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f00000000c0)=0xb997, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x3, 0xfff0}}}, 0x24}}, 0x40044) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r11, 0x40085112, &(0x7f0000000140)=@t={0x4, 0x2, 0xc4, 0x2}) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x20004855) recvmmsg(r10, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0xfd}], 0x1}}], 0x1, 0x0, 0x0) 1.931247762s ago: executing program 4 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) (fail_nth: 2) 767.864847ms ago: executing program 4 (id=635): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002222000000962313076a0b9767070c0000002a94111a663a836c"], 0x0}, 0x0) 684.928376ms ago: executing program 3 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$netlink(0x10, 0x3, 0x10) setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x77359400}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d9c009ac71e3547f2d820ef0253120100000000000003be0781324c25c34cc433cf08000000000000000064ed203fdcc3488047ab600d3118d3b4909fde1c3894c5f850b862956f62c08a15901ce855df1a743c5969bfcabd2cd8d7acee662b3e4ac761b679e43554020820af59b0086f6d0fc9622d158a0e3f0b41600dce326673e287f5d099266159cea890f86fe85da88abca88871df9a44cc073263621ad27e69f35188c5d9011dd44c9a7a589cd40eb8013f81b1f88b", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000400)='tunl0\x00', 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22000021}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1e653d3d9678c7173f267f207933bc6c74a4af2ffe22a18bc959e71c4ea8d37ac32604efee93a7df62d88fbc67b63d29845035290b503ced87", @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf251600000005000400000000000500020000000000200001801400020070696d72656731000000000000000000080003000100000005000400000000000500030001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40810) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) socket$netlink(0x10, 0x3, 0x10) (async) setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x77359400}}, 0x0) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d9c009ac71e3547f2d820ef0253120100000000000003be0781324c25c34cc433cf08000000000000000064ed203fdcc3488047ab600d3118d3b4909fde1c3894c5f850b862956f62c08a15901ce855df1a743c5969bfcabd2cd8d7acee662b3e4ac761b679e43554020820af59b0086f6d0fc9622d158a0e3f0b41600dce326673e287f5d099266159cea890f86fe85da88abca88871df9a44cc073263621ad27e69f35188c5d9011dd44c9a7a589cd40eb8013f81b1f88b", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000400)='tunl0\x00', 0x10) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22000021}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1e653d3d9678c7173f267f207933bc6c74a4af2ffe22a18bc959e71c4ea8d37ac32604efee93a7df62d88fbc67b63d29845035290b503ced87", @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf251600000005000400000000000500020000000000200001801400020070696d72656731000000000000000000080003000100000005000400000000000500030001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40810) (async) 155.890121ms ago: executing program 3 (id=637): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'bond0\x00', 0x10b}) 0s ago: executing program 3 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x74, 0x13, 0x53b, 0x1, 0x25dfdbfb, {}, [{0x60, 0x1, [@m_mirred={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x2c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c084}, 0x8000) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x29, 0x0, &(0x7f00000000c0)=0x11e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'ip6tnl0\x00', {0xce}, 0x7}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x28, r2, 0x483, 0x70bd25, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7b38f8f160870296}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x208c0}, 0x0) kernel console output (not intermixed with test programs): .595095][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.636012][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.726751][ T1055] usb 1-1: device descriptor read/64, error -32 [ 158.795705][ T5917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.892349][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.908790][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.960781][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.978255][ T1055] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 158.988875][ T5917] usb 2-1: config 0 has no interfaces? [ 158.997845][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.021458][ T5917] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.041465][ T1055] usb 1-1: device descriptor read/8, error -32 [ 159.102830][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.155206][ T5917] usb 2-1: Product: syz [ 159.216333][ T5917] usb 2-1: Manufacturer: syz [ 159.271956][ T5917] usb 2-1: SerialNumber: syz [ 159.292778][ T5917] usb 2-1: config 0 descriptor?? [ 159.415813][ T1055] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 159.461169][ T1055] usb 1-1: device descriptor read/8, error -32 [ 159.585689][ T1055] raw-gadget.5 gadget.0: failed to queue suspend event [ 159.681885][ T9] usb 1-1: USB disconnect, device number 7 [ 159.748446][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 159.845851][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 159.926440][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.955840][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 159.983426][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 160.095078][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 160.185681][ T9] usb 1-1: device descriptor read/64, error -32 [ 160.307874][ T9] raw-gadget.5 gadget.0: failed to queue suspend event [ 160.347168][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 160.465819][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 160.537226][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.545711][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 160.566011][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 160.662052][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 160.735682][ T9] usb 1-1: device descriptor read/64, error -32 [ 160.856750][ T9] raw-gadget.5 gadget.0: failed to queue suspend event [ 160.875956][ T9] usb usb1-port1: attempt power cycle [ 161.626464][ T9] raw-gadget.5 gadget.0: failed to queue disconnect event [ 161.684550][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.713654][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 161.743331][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.785670][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 161.795208][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 162.015662][ T1055] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.027298][ T47] usb 2-1: USB disconnect, device number 9 [ 162.077175][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 162.363499][ T1055] usb 4-1: device descriptor read/64, error -71 [ 162.382490][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.430627][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 162.439728][ T9] usb 1-1: device descriptor read/8, error -32 [ 162.566017][ T9] raw-gadget.5 gadget.0: failed to queue suspend event [ 162.574955][ T9] raw-gadget.5 gadget.0: failed to queue reset event [ 162.625682][ T1055] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.646693][ T9] raw-gadget.5 gadget.0: failed to queue resume event [ 162.700140][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 162.713439][ T6485] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 162.746205][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.765671][ T1055] usb 4-1: device descriptor read/64, error -71 [ 162.935954][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 162.944032][ T9] usb 1-1: device descriptor read/8, error -32 [ 162.978123][ T1055] usb usb4-port1: attempt power cycle [ 163.067040][ T9] raw-gadget.5 gadget.0: failed to queue suspend event [ 163.112877][ T9] usb usb1-port1: unable to enumerate USB device [ 163.452659][ T1055] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 163.476591][ T1055] usb 4-1: device descriptor read/8, error -71 [ 163.727434][ T1055] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.819076][ T1055] usb 4-1: device descriptor read/8, error -71 [ 163.965949][ T1055] usb usb4-port1: unable to enumerate USB device [ 164.415823][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.610899][ T5832] usb 2-1: config 0 has no interfaces? [ 164.617364][ T5832] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.648507][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.691680][ T5832] usb 2-1: config 0 descriptor?? [ 164.910621][ T5832] usb 2-1: USB disconnect, device number 10 [ 165.111833][ T6500] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 165.172438][ T6500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 165.195835][ T6500] batadv0: entered promiscuous mode [ 165.206648][ T6500] batadv0: entered allmulticast mode [ 165.221959][ T6500] bridge0: port 4(batadv0) entered blocking state [ 165.234425][ T6500] bridge0: port 4(batadv0) entered disabled state [ 165.261857][ T6500] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 165.279539][ T6500] bridge0: port 4(batadv0) entered blocking state [ 165.286442][ T6500] bridge0: port 4(batadv0) entered forwarding state [ 165.468295][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 165.478236][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 165.555811][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.664378][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.674609][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.795754][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 165.845821][ T47] usb 2-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config [ 165.921446][ T47] usb 2-1: too many endpoints for config 0 interface 0 altsetting 253: 248, using maximum allowed: 30 [ 166.007303][ T47] usb 2-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 166.047256][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.225875][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 166.270338][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=1970, bcdDevice=66.df [ 166.283457][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.303913][ T47] usb 2-1: config 0 descriptor?? [ 166.440568][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.452308][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.513628][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.920914][ T47] usb 2-1: string descriptor 0 read error: -71 [ 166.943102][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.972165][ T47] usb 2-1: USB disconnect, device number 11 [ 167.010211][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.104012][ T5893] usb 4-1: config 0 descriptor?? [ 167.527967][ T5893] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.566841][ T5893] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 167.607376][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 167.621322][ T6531] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 167.644791][ T5893] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 168.775867][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 169.002293][ T47] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 169.406126][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.417041][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.545002][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.556933][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.711714][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.722807][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.771213][ T6571] netlink: 'syz.2.181': attribute type 10 has an invalid length. [ 172.792107][ T6571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 172.809332][ T6571] batadv0: entered promiscuous mode [ 172.814643][ T6571] batadv0: entered allmulticast mode [ 172.835856][ T6571] bridge0: port 4(batadv0) entered blocking state [ 172.842653][ T6571] bridge0: port 4(batadv0) entered disabled state [ 172.853147][ T6571] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 172.869457][ T6571] bridge0: port 4(batadv0) entered blocking state [ 172.876174][ T6571] bridge0: port 4(batadv0) entered forwarding state [ 172.914860][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.926967][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.149324][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 173.158911][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 173.198589][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.217373][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.666668][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 173.732268][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.757331][ T6590] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.926947][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.273697][ T47] usb 4-1: device descriptor read/64, error -110 [ 174.590266][ T47] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 174.815799][ T47] usb 4-1: device descriptor read/64, error -32 [ 175.075659][ T47] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 175.121719][ T47] usb 4-1: device descriptor read/8, error -32 [ 175.231076][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.241183][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.418981][ T47] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 175.451176][ T47] usb 4-1: device descriptor read/8, error -32 [ 175.576570][ T47] raw-gadget.9 gadget.3: failed to queue suspend event [ 175.587870][ T5893] usb 4-1: USB disconnect, device number 15 [ 175.727930][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 175.844713][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 175.905795][ T5893] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.941145][ C1] raw-gadget.9 gadget.3: ignoring, device is not running [ 175.976918][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 176.076681][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 176.195786][ T5893] usb 4-1: device descriptor read/64, error -32 [ 176.305953][ T5893] raw-gadget.9 gadget.3: failed to queue suspend event [ 176.316261][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 176.387729][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 176.477931][ T5893] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 176.499745][ C1] raw-gadget.9 gadget.3: ignoring, device is not running [ 176.508839][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 176.585767][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 176.665837][ T5893] usb 4-1: device descriptor read/64, error -32 [ 176.796092][ T5893] raw-gadget.9 gadget.3: failed to queue suspend event [ 176.838703][ T5893] usb usb4-port1: attempt power cycle [ 176.871430][ T5893] raw-gadget.9 gadget.3: failed to queue disconnect event [ 176.906310][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 177.005794][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 177.061585][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 177.299289][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 177.375681][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 177.466401][ C1] raw-gadget.9 gadget.3: ignoring, device is not running [ 177.494862][ T5893] usb 4-1: device descriptor read/8, error -32 [ 177.589625][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.635260][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.686073][ T5893] raw-gadget.9 gadget.3: failed to queue suspend event [ 177.693667][ T5893] raw-gadget.9 gadget.3: failed to queue reset event [ 177.725982][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.738589][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.767010][ T5893] raw-gadget.9 gadget.3: failed to queue resume event [ 177.875908][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 178.039565][ C1] raw-gadget.9 gadget.3: ignoring, device is not running [ 178.052873][ T5893] usb 4-1: device descriptor read/8, error -32 [ 178.060059][ T6627] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 178.074040][ T6627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.199'. [ 178.185736][ T5893] raw-gadget.9 gadget.3: failed to queue suspend event [ 178.209231][ T5893] usb usb4-port1: unable to enumerate USB device [ 178.250302][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.260433][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.275967][ T6627] batadv0: entered promiscuous mode [ 178.285502][ T6627] batadv0: entered allmulticast mode [ 178.292864][ T6627] bridge0: port 4(batadv0) entered blocking state [ 178.301419][ T6627] bridge0: port 4(batadv0) entered disabled state [ 178.331790][ T6627] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 178.376308][ T6627] bridge0: port 4(batadv0) entered blocking state [ 178.382928][ T6627] bridge0: port 4(batadv0) entered forwarding state [ 178.429197][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 178.460285][ T6636] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.594751][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 178.604241][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 178.662006][ T6640] mmap: syz.3.202 (6640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.089280][ T6643] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 179.129032][ T6643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.188395][ T6643] bond1: (slave gretap1): making interface the new active one [ 179.204875][ T6643] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 179.310822][ T6643] syz.0.204 (6643) used greatest stack depth: 17720 bytes left [ 180.287342][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.296678][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.097571][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.108187][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.321674][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.342989][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.285138][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.313079][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.536272][ T6679] netlink: 'syz.4.214': attribute type 10 has an invalid length. [ 182.545682][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.214'. [ 182.562446][ T6679] batadv0: entered promiscuous mode [ 182.569607][ T6679] batadv0: entered allmulticast mode [ 182.591887][ T6679] bridge0: port 4(batadv0) entered blocking state [ 182.629570][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.689306][ T6679] bridge0: port 4(batadv0) entered disabled state [ 182.760653][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.766576][ T6679] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 182.883121][ T6679] bridge0: port 4(batadv0) entered blocking state [ 182.889845][ T6679] bridge0: port 4(batadv0) entered forwarding state [ 182.943860][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.953177][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.973927][ T1108] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 182.983632][ T1108] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 183.428713][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 183.445036][ T6687] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 184.747053][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.796043][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.185892][ T5893] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 185.492617][ T5893] usb 2-1: config 0 has no interfaces? [ 185.515016][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.529132][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.560213][ T5893] usb 2-1: Product: syz [ 185.565337][ T5893] usb 2-1: Manufacturer: syz [ 185.572158][ T5893] usb 2-1: SerialNumber: syz [ 185.586851][ T5893] usb 2-1: config 0 descriptor?? [ 186.498964][ T30] audit: type=1326 audit(1744619815.833:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 186.632618][ T30] audit: type=1326 audit(1744619815.833:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 186.666443][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.686795][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.709942][ T30] audit: type=1326 audit(1744619815.833:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 186.797116][ T30] audit: type=1326 audit(1744619815.863:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 186.883773][ T30] audit: type=1326 audit(1744619815.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 186.910723][ T6739] netlink: 'syz.4.231': attribute type 10 has an invalid length. [ 186.933686][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.231'. [ 186.974345][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.984758][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.007952][ T30] audit: type=1326 audit(1744619815.863:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 187.039076][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.053391][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.061705][ T30] audit: type=1326 audit(1744619815.863:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 187.134998][ T30] audit: type=1326 audit(1744619815.863:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 187.173411][ T30] audit: type=1326 audit(1744619815.863:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 187.213947][ T30] audit: type=1326 audit(1744619815.863:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 188.151299][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.176472][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.493721][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 188.507049][ T6752] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.590853][ T9] usb 2-1: USB disconnect, device number 12 [ 189.145642][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.327298][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.345323][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.372851][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.392863][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.402646][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.414140][ T9] usb 2-1: config 0 descriptor?? [ 189.830077][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 189.843528][ T9] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 189.879647][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 190.101560][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.195971][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.606841][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.625072][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.861684][ T6781] netlink: 'syz.3.244': attribute type 10 has an invalid length. [ 190.910181][ T6781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 190.924991][ T6781] batadv0: entered promiscuous mode [ 190.930722][ T6781] batadv0: entered allmulticast mode [ 190.950504][ T6781] bridge0: port 4(batadv0) entered blocking state [ 190.979450][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.018791][ T6781] bridge0: port 4(batadv0) entered disabled state [ 191.063649][ T6781] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 191.107094][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.120666][ T6781] bridge0: port 4(batadv0) entered blocking state [ 191.127331][ T6781] bridge0: port 4(batadv0) entered forwarding state [ 191.253253][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.327315][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 191.336766][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 191.356051][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.422241][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.431274][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.813026][ T6801] trusted_key: syz.2.250 sent an empty control message without MSG_MORE. [ 192.612829][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 192.662697][ T6809] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.435681][ T5894] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 194.003715][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.036030][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.382224][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388896][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.518997][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.535377][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.087341][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.258'. [ 195.852303][ T6846] FAULT_INJECTION: forcing a failure. [ 195.852303][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 195.905723][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.1.262 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 195.905754][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.905770][ T6846] Call Trace: [ 195.905779][ T6846] [ 195.905787][ T6846] dump_stack_lvl+0x241/0x360 [ 195.905840][ T6846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.905886][ T6846] ? __pfx__printk+0x10/0x10 [ 195.905914][ T6846] ? __lock_acquire+0xad5/0xd80 [ 195.905948][ T6846] should_fail_ex+0x424/0x570 [ 195.905976][ T6846] should_failslab+0xac/0x100 [ 195.906007][ T6846] kmem_cache_alloc_noprof+0x78/0x390 [ 195.906035][ T6846] ? skb_clone+0x20c/0x390 [ 195.906065][ T6846] skb_clone+0x20c/0x390 [ 195.906093][ T6846] __netlink_deliver_tap+0x3c4/0x7f0 [ 195.906137][ T6846] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.906165][ T6846] netlink_deliver_tap+0x19d/0x1b0 [ 195.906197][ T6846] netlink_unicast+0x7c6/0x9a0 [ 195.906234][ T6846] ? __pfx_netlink_unicast+0x10/0x10 [ 195.906264][ T6846] ? skb_put+0x114/0x1f0 [ 195.906290][ T6846] netlink_sendmsg+0x8c3/0xcd0 [ 195.906334][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.906369][ T6846] ? __import_iovec+0x585/0x830 [ 195.906397][ T6846] ? aa_sock_msg_perm+0x91/0x160 [ 195.906432][ T6846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.906460][ T6846] __sock_sendmsg+0x221/0x270 [ 195.906491][ T6846] ____sys_sendmsg+0x523/0x860 [ 195.906524][ T6846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.906563][ T6846] __sys_sendmsg+0x271/0x360 [ 195.906589][ T6846] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.906664][ T6846] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 195.906691][ T6846] ? lockdep_hardirqs_on+0x9d/0x150 [ 195.906720][ T6846] __do_fast_syscall_32+0xb4/0x110 [ 195.906746][ T6846] ? exc_page_fault+0x5f8/0x920 [ 195.906776][ T6846] do_fast_syscall_32+0x34/0x80 [ 195.906803][ T6846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.906829][ T6846] RIP: 0023:0xf748d579 [ 195.906863][ T6846] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.906879][ T6846] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 195.906909][ T6846] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 195.906923][ T6846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.906934][ T6846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.906945][ T6846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.906957][ T6846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.906987][ T6846] [ 195.969125][ T6846] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 196.240351][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.241835][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.258814][ T6853] xt_policy: neither incoming nor outgoing policy selected [ 196.453359][ T6855] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 196.453389][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.264'. [ 196.458328][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.458770][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.462910][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.463311][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.818835][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 196.821436][ T6860] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.370986][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.444755][ T6848] tty tty1: ldisc open failed (-12), clearing slot 0 [ 198.482763][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.689857][ T5894] usb 2-1: device descriptor read/64, error -110 [ 198.995929][ T5894] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 199.158994][ T5894] usb 2-1: device descriptor read/64, error -32 [ 199.455702][ T5894] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 199.498695][ T5894] usb 2-1: device descriptor read/8, error -32 [ 199.744456][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.771190][ T5894] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 199.793024][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.793922][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 199.817620][ T6894] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.844859][ T5894] usb 2-1: device descriptor read/8, error -32 [ 199.947245][ T6896] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 199.965120][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.973604][ T5894] raw-gadget.11 gadget.1: failed to queue suspend event [ 199.981814][ T5832] usb 2-1: USB disconnect, device number 13 [ 200.007411][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 200.022571][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.057664][ T6892] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 200.065711][ T6892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.277'. [ 200.080158][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.121774][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 200.160628][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.171526][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.180198][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.222092][ T5832] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.241250][ C1] raw-gadget.11 gadget.1: ignoring, device is not running [ 200.252486][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 200.336115][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 200.355878][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.374688][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.445708][ T5832] usb 2-1: device descriptor read/64, error -32 [ 200.565786][ T5832] raw-gadget.11 gadget.1: failed to queue suspend event [ 200.573765][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 200.647611][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 200.725885][ T5832] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 200.734502][ C1] raw-gadget.11 gadget.1: ignoring, device is not running [ 200.742384][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 200.815929][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 200.906027][ T5832] usb 2-1: device descriptor read/64, error -32 [ 201.045930][ T5832] raw-gadget.11 gadget.1: failed to queue suspend event [ 201.098429][ T5832] usb usb2-port1: attempt power cycle [ 201.144834][ T5832] raw-gadget.11 gadget.1: failed to queue disconnect event [ 201.170027][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 201.258393][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 201.322490][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 201.560537][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 201.675626][ T5832] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 201.694668][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.287'. [ 201.823569][ C1] raw-gadget.11 gadget.1: ignoring, device is not running [ 201.832111][ T5832] usb 2-1: device descriptor read/8, error -32 [ 202.021980][ T5832] raw-gadget.11 gadget.1: failed to queue suspend event [ 202.031105][ T5832] raw-gadget.11 gadget.1: failed to queue reset event [ 202.134546][ T5832] raw-gadget.11 gadget.1: failed to queue resume event [ 202.316646][ T5832] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.368677][ C1] raw-gadget.11 gadget.1: ignoring, device is not running [ 202.378318][ T5832] usb 2-1: device descriptor read/8, error -32 [ 202.500088][ T5832] raw-gadget.11 gadget.1: failed to queue suspend event [ 202.516993][ T5832] usb usb2-port1: unable to enumerate USB device [ 202.528932][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.538211][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.598656][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 202.656479][ T6934] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.720981][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 202.867507][ T6937] bond1: entered promiscuous mode [ 202.873078][ T6937] bond1: entered allmulticast mode [ 202.909395][ T6937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.174828][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.212072][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.498799][ T6946] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 203.520783][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.294'. [ 203.554942][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.609102][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.630600][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.644142][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 203.645871][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.663399][ T6952] netlink: 'syz.4.296': attribute type 30 has an invalid length. [ 203.703812][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 203.870037][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 204.579948][ T6968] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 205.328332][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 205.360443][ T6981] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 205.504240][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.513571][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.437722][ T6994] FAULT_INJECTION: forcing a failure. [ 206.437722][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 206.483803][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.0.312 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 206.483832][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.483845][ T6994] Call Trace: [ 206.483853][ T6994] [ 206.483863][ T6994] dump_stack_lvl+0x241/0x360 [ 206.483902][ T6994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.483932][ T6994] ? __pfx__printk+0x10/0x10 [ 206.483966][ T6994] ? __pfx___might_resched+0x10/0x10 [ 206.484002][ T6994] should_fail_ex+0x424/0x570 [ 206.484029][ T6994] should_failslab+0xac/0x100 [ 206.484060][ T6994] kmem_cache_alloc_noprof+0x78/0x390 [ 206.484088][ T6994] ? __pmd_alloc+0x118/0x440 [ 206.484123][ T6994] __pmd_alloc+0x118/0x440 [ 206.484155][ T6994] ? __pfx___pmd_alloc+0x10/0x10 [ 206.484197][ T6994] handle_mm_fault+0xf7a/0x1bf0 [ 206.484225][ T6994] ? mt_find+0x28a/0x8f0 [ 206.484280][ T6994] ? __pfx_handle_mm_fault+0x10/0x10 [ 206.484336][ T6994] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 206.484368][ T6994] exc_page_fault+0x2bb/0x920 [ 206.484402][ T6994] asm_exc_page_fault+0x26/0x30 [ 206.484422][ T6994] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 206.484442][ T6994] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 206.484458][ T6994] RSP: 0018:ffffc90003d8fa78 EFLAGS: 00050202 [ 206.484478][ T6994] RAX: 00007ffffffff001 RBX: 0000000080000000 RCX: 0000000000000044 [ 206.484492][ T6994] RDX: 0000000000000001 RSI: 0000000080000000 RDI: ffffc90003d8fb00 [ 206.484505][ T6994] RBP: ffffc90003d8fcf0 R08: 0000000000000003 R09: fffff520007b1f68 [ 206.484519][ T6994] R10: dffffc0000000000 R11: fffff520007b1f68 R12: 0000000000000487 [ 206.484532][ T6994] R13: dffffc0000000000 R14: ffffc90003d8fb00 R15: 0000000000000044 [ 206.484566][ T6994] _copy_from_user+0x7b/0xb0 [ 206.484601][ T6994] do_ip_vs_set_ctl+0x2dc/0xe50 [ 206.484630][ T6994] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 206.484669][ T6994] ? __mutex_unlock_slowpath+0x229/0x800 [ 206.484706][ T6994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.484732][ T6994] ? aa_sk_perm+0x96f/0xac0 [ 206.484762][ T6994] ? vfs_write+0xb29/0xd10 [ 206.484787][ T6994] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.484818][ T6994] nf_setsockopt+0x295/0x2c0 [ 206.484854][ T6994] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.484883][ T6994] do_sock_setsockopt+0x3b1/0x710 [ 206.484912][ T6994] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.484931][ T6994] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 206.484974][ T6994] ? ksys_write+0x266/0x2d0 [ 206.485005][ T6994] __ia32_sys_setsockopt+0x1f2/0x280 [ 206.485034][ T6994] __do_fast_syscall_32+0xb4/0x110 [ 206.485059][ T6994] ? exc_page_fault+0x5f8/0x920 [ 206.485089][ T6994] do_fast_syscall_32+0x34/0x80 [ 206.485116][ T6994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.485139][ T6994] RIP: 0023:0xf741d579 [ 206.485156][ T6994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.485172][ T6994] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 206.485191][ T6994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 206.485204][ T6994] RDX: 0000000000000487 RSI: 0000000080000000 RDI: 0000000000000044 [ 206.485217][ T6994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.485228][ T6994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.485239][ T6994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.485269][ T6994] [ 206.933192][ T6992] fuse: Bad value for 'fd' [ 206.938796][ T6992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.298953][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.315981][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.336006][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.345255][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.558262][ T7006] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 207.567775][ T6999] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 207.575825][ T6999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.313'. [ 207.613278][ T7006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.621104][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.633913][ T7008] batman_adv: batadv0: Interface deactivated: dummy0 [ 207.634486][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.650267][ T7008] batman_adv: batadv0: Removing interface: dummy0 [ 207.669815][ T7008] bond2: (slave dummy0): making interface the new active one [ 207.682349][ T7008] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 207.695164][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.707645][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.728938][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.750413][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.464306][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.475167][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.491220][ T7019] netlink: 728 bytes leftover after parsing attributes in process `syz.3.320'. [ 208.531205][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.547812][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.572890][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 208.572909][ T30] audit: type=1800 audit(1744619837.903:43): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="file2" dev="tmpfs" ino=326 res=0 errno=0 [ 208.672943][ T7021] netlink: 124 bytes leftover after parsing attributes in process `syz.0.321'. [ 208.684440][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.694671][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.706563][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 208.720409][ T7023] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 209.657910][ T7038] capability: warning: `syz.0.327' uses 32-bit capabilities (legacy support in use) [ 209.741598][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 209.741984][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 209.817981][ T7042] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 209.902565][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.106020][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.333155][ T7045] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 210.354727][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 210.402105][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.626064][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.787224][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.796318][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.814041][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.954564][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.037082][ T7059] netlink: zone id is out of range [ 211.043612][ T7059] netlink: zone id is out of range [ 211.049264][ T7059] netlink: zone id is out of range [ 211.054517][ T7059] netlink: zone id is out of range [ 211.059744][ T7059] netlink: zone id is out of range [ 211.066061][ T7059] netlink: zone id is out of range [ 211.072899][ T7059] netlink: zone id is out of range [ 211.872201][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 211.892575][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 211.898785][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 211.905794][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 211.911926][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 212.568951][ T7075] FAULT_INJECTION: forcing a failure. [ 212.568951][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.634879][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.1.334 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 212.634912][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.634924][ T7075] Call Trace: [ 212.634933][ T7075] [ 212.634942][ T7075] dump_stack_lvl+0x241/0x360 [ 212.634981][ T7075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.635012][ T7075] ? __pfx__printk+0x10/0x10 [ 212.635055][ T7075] should_fail_ex+0x424/0x570 [ 212.635083][ T7075] _copy_to_iter+0x43f/0x1c90 [ 212.635127][ T7075] ? __pfx__copy_to_iter+0x10/0x10 [ 212.635154][ T7075] ? __import_iovec+0x175/0x830 [ 212.635182][ T7075] ? import_iovec+0xeb/0x120 [ 212.635211][ T7075] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 212.635243][ T7075] ? skb_recv_datagram+0x26e/0x310 [ 212.635272][ T7075] __skb_datagram_iter+0x101/0x940 [ 212.635299][ T7075] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 212.635336][ T7075] skb_copy_datagram_iter+0xd1/0x250 [ 212.635365][ T7075] netlink_recvmsg+0x2d4/0x1180 [ 212.635408][ T7075] ? __pfx_netlink_recvmsg+0x10/0x10 [ 212.635449][ T7075] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.635474][ T7075] ? iovec_from_user+0x87/0x240 [ 212.635501][ T7075] ? copy_compat_iovec_from_user+0x114/0x160 [ 212.635534][ T7075] ? aa_sock_msg_perm+0x91/0x160 [ 212.635563][ T7075] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 212.635582][ T7075] ? __pfx_netlink_recvmsg+0x10/0x10 [ 212.635615][ T7075] sock_recvmsg+0x22f/0x280 [ 212.635648][ T7075] ____sys_recvmsg+0x1c8/0x480 [ 212.635681][ T7075] ? __pfx_____sys_recvmsg+0x10/0x10 [ 212.635702][ T7075] ? get_compat_msghdr+0x45e/0x730 [ 212.635759][ T7075] do_recvmmsg+0x53e/0xab0 [ 212.635795][ T7075] ? __pfx_do_recvmmsg+0x10/0x10 [ 212.635841][ T7075] ? __lock_acquire+0xad5/0xd80 [ 212.635899][ T7075] ? get_old_timespec32+0x18d/0x280 [ 212.635940][ T7075] __sys_recvmmsg+0x140/0x280 [ 212.635966][ T7075] ? __pfx___sys_recvmmsg+0x10/0x10 [ 212.635988][ T7075] ? ksys_write+0x275/0x2d0 [ 212.636022][ T7075] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 212.636048][ T7075] __do_fast_syscall_32+0xb4/0x110 [ 212.636075][ T7075] ? exc_page_fault+0x5f8/0x920 [ 212.636106][ T7075] do_fast_syscall_32+0x34/0x80 [ 212.636133][ T7075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.636158][ T7075] RIP: 0023:0xf748d579 [ 212.636176][ T7075] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 212.636193][ T7075] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 212.636215][ T7075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 212.636229][ T7075] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 212.636241][ T7075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.636253][ T7075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.636264][ T7075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.636294][ T7075] [ 212.925801][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.815959][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 213.830911][ T7085] net_ratelimit: 141 callbacks suppressed [ 213.830933][ T7085] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 214.128064][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.142627][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.354839][ T7099] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 214.375835][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 214.430150][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.506343][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.603636][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.636783][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.851888][ T7107] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 214.867804][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 214.882627][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 214.924643][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 214.988942][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.997782][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.014306][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.039020][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.312314][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.330830][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.472996][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.508640][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.677360][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.689787][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.073425][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.147204][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.302974][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.312599][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.343619][ T7126] Zero length message leads to an empty skb [ 216.363740][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 216.376516][ T7130] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 216.653512][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.662622][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.306327][ T7140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.335017][ T7140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.571450][ T7144] FAULT_INJECTION: forcing a failure. [ 217.571450][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 217.585888][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.2.358 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 217.585918][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.585942][ T7144] Call Trace: [ 217.585950][ T7144] [ 217.585958][ T7144] dump_stack_lvl+0x241/0x360 [ 217.585997][ T7144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.586025][ T7144] ? __pfx__printk+0x10/0x10 [ 217.586050][ T7144] ? __pfx___might_resched+0x10/0x10 [ 217.586071][ T7144] should_fail_ex+0x424/0x570 [ 217.586095][ T7144] should_failslab+0xac/0x100 [ 217.586118][ T7144] __kmalloc_noprof+0xdf/0x4d0 [ 217.586138][ T7144] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 217.586161][ T7144] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 217.586188][ T7144] tomoyo_realpath_from_path+0xcf/0x5e0 [ 217.586221][ T7144] tomoyo_path_number_perm+0x245/0x790 [ 217.586239][ T7144] ? __lock_acquire+0xad5/0xd80 [ 217.586256][ T7144] ? tomoyo_path_number_perm+0x215/0x790 [ 217.586277][ T7144] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.586324][ T7144] ? __fget_files+0x2a/0x420 [ 217.586337][ T7144] ? __fget_files+0x2a/0x420 [ 217.586352][ T7144] ? __fget_files+0x2a/0x420 [ 217.586369][ T7144] security_file_ioctl_compat+0xc6/0x2a0 [ 217.586389][ T7144] __se_compat_sys_ioctl+0xd8/0xc30 [ 217.586407][ T7144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.586428][ T7144] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 217.586447][ T7144] ? __fget_files+0x2a/0x420 [ 217.586464][ T7144] ? fput+0x9b/0xd0 [ 217.586477][ T7144] ? ksys_write+0x275/0x2d0 [ 217.586500][ T7144] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 217.586518][ T7144] ? lockdep_hardirqs_on+0x9d/0x150 [ 217.586538][ T7144] __do_fast_syscall_32+0xb4/0x110 [ 217.586557][ T7144] ? exc_page_fault+0x5f8/0x920 [ 217.586578][ T7144] do_fast_syscall_32+0x34/0x80 [ 217.586597][ T7144] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.586615][ T7144] RIP: 0023:0xf7f34579 [ 217.586628][ T7144] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 217.586640][ T7144] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 217.586656][ T7144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008991 [ 217.586666][ T7144] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.586677][ T7144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.586685][ T7144] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.586694][ T7144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.586715][ T7144] [ 217.586804][ T7144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.929653][ T7140] netlink: 'syz.0.357': attribute type 10 has an invalid length. [ 218.002386][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'. [ 218.003622][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.066409][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.115063][ T7140] bond2: (slave dummy0): Releasing active interface [ 218.268759][ T7140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.284518][ T7140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.446059][ T7154] sctp: [Deprecated]: syz.1.361 (pid 7154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.446059][ T7154] Use struct sctp_sack_info instead [ 218.520444][ T5832] IPVS: starting estimator thread 0... [ 218.562327][ T7154] IPVS: set_ctl: invalid protocol: 12 172.30.1.2:20001 [ 218.616871][ T7155] IPVS: using max 37 ests per chain, 88800 per kthread [ 218.802877][ T7161] Invalid logical block size (8224) [ 219.011273][ T30] audit: type=1326 audit(1744619848.343:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.0.366" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 219.908044][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.027179][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.193010][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 220.228983][ T7180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 220.259892][ T7182] process 'syz.2.370' launched '/dev/fd/3' with NULL argv: empty string added [ 220.315965][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 220.361010][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.448810][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.654129][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.756384][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.786324][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.825458][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.851164][ T7191] FAULT_INJECTION: forcing a failure. [ 220.851164][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.875244][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.905830][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.1.373 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 220.905862][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.905875][ T7191] Call Trace: [ 220.905884][ T7191] [ 220.905892][ T7191] dump_stack_lvl+0x241/0x360 [ 220.905932][ T7191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.905964][ T7191] ? __pfx__printk+0x10/0x10 [ 220.906008][ T7191] should_fail_ex+0x424/0x570 [ 220.906037][ T7191] _copy_to_user+0x31/0xb0 [ 220.906070][ T7191] simple_read_from_buffer+0xc4/0x170 [ 220.906106][ T7191] proc_fail_nth_read+0x1ef/0x260 [ 220.906131][ T7191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.906158][ T7191] ? rw_verify_area+0x246/0x630 [ 220.906180][ T7191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.906203][ T7191] vfs_read+0x21f/0xb90 [ 220.906232][ T7191] ? __pfx___mutex_lock+0x10/0x10 [ 220.906261][ T7191] ? __pfx_vfs_read+0x10/0x10 [ 220.906288][ T7191] ? __fget_files+0x2a/0x420 [ 220.906309][ T7191] ? __fget_files+0x39d/0x420 [ 220.906326][ T7191] ? __fget_files+0x2a/0x420 [ 220.906355][ T7191] ksys_read+0x19d/0x2d0 [ 220.906381][ T7191] ? __pfx_ksys_read+0x10/0x10 [ 220.906409][ T7191] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 220.906434][ T7191] ? lockdep_hardirqs_on+0x9d/0x150 [ 220.906463][ T7191] __do_fast_syscall_32+0xb4/0x110 [ 220.906489][ T7191] ? exc_page_fault+0x5f8/0x920 [ 220.906519][ T7191] do_fast_syscall_32+0x34/0x80 [ 220.906545][ T7191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.906567][ T7191] RIP: 0023:0xf748d579 [ 220.906581][ T7191] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 220.906596][ T7191] RSP: 002b:00000000f5116590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 220.906614][ T7191] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5116620 [ 220.906632][ T7191] RDX: 000000000000000f RSI: 00000000f747dff4 RDI: 0000000000000000 [ 220.906642][ T7191] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 220.906651][ T7191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.906661][ T7191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.906685][ T7191] [ 220.912463][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.184617][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.197211][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.439404][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.448819][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.610408][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.621403][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.662893][ T7225] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 223.074558][ T5832] IPVS: starting estimator thread 0... [ 223.168812][ T7235] IPVS: using max 26 ests per chain, 62400 per kthread [ 223.168876][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.386'. [ 223.623690][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.635603][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.759832][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 223.774804][ T7254] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.553169][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.393'. [ 225.105816][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 225.106150][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 225.121706][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 225.528673][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.026773][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.092674][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.104599][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.399673][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.440849][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.462142][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.497507][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.534337][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.570440][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.958714][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.969979][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.617489][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 229.658146][ T7308] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 230.222014][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 230.226463][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 230.251437][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 230.775417][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.803122][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.812609][ T7338] netlink: 'syz.2.411': attribute type 39 has an invalid length. [ 231.017892][ T7335] nvme_fabrics: missing parameter 'transport=%s' [ 231.026027][ T7335] nvme_fabrics: missing parameter 'nqn=%s' [ 231.644062][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.702405][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.200035][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 232.233152][ T7366] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 232.732776][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.748758][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.785163][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.966708][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.984255][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.058740][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.294610][ T7387] FAULT_INJECTION: forcing a failure. [ 234.294610][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.343742][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.4.430 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 234.343775][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.343788][ T7387] Call Trace: [ 234.343797][ T7387] [ 234.343806][ T7387] dump_stack_lvl+0x241/0x360 [ 234.343847][ T7387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.343877][ T7387] ? __pfx__printk+0x10/0x10 [ 234.343923][ T7387] should_fail_ex+0x424/0x570 [ 234.343951][ T7387] _copy_to_user+0x31/0xb0 [ 234.343984][ T7387] copy_to_sockptr+0x57/0xb0 [ 234.344018][ T7387] do_tcp_getsockopt+0x2521/0x3850 [ 234.344049][ T7387] ? page_table_check_set+0x164/0x700 [ 234.344087][ T7387] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 234.344118][ T7387] ? _parse_integer_limit+0x1b4/0x200 [ 234.344174][ T7387] ? kstrtouint+0xfc/0x190 [ 234.344196][ T7387] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 234.344312][ T7387] ? __pfx___might_resched+0x10/0x10 [ 234.344357][ T7387] ? aa_sk_perm+0x96f/0xac0 [ 234.344389][ T7387] tcp_getsockopt+0x105/0x1d0 [ 234.344424][ T7387] ? __pfx_tcp_getsockopt+0x10/0x10 [ 234.344456][ T7387] ? aa_sock_opt_perm+0x79/0x120 [ 234.344487][ T7387] ? sock_common_getsockopt+0x2e/0xb0 [ 234.344516][ T7387] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 234.344548][ T7387] do_sock_getsockopt+0x391/0x740 [ 234.344577][ T7387] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 234.344597][ T7387] ? __fget_files+0x2a/0x420 [ 234.344619][ T7387] ? __fget_files+0x39d/0x420 [ 234.344636][ T7387] ? __fget_files+0x2a/0x420 [ 234.344663][ T7387] __ia32_sys_getsockopt+0x2a1/0x370 [ 234.344695][ T7387] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 234.344723][ T7387] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 234.344749][ T7387] ? lockdep_hardirqs_on+0x9d/0x150 [ 234.344778][ T7387] __do_fast_syscall_32+0xb4/0x110 [ 234.344805][ T7387] ? exc_page_fault+0x5f8/0x920 [ 234.344835][ T7387] do_fast_syscall_32+0x34/0x80 [ 234.344862][ T7387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.344887][ T7387] RIP: 0023:0xf73ed579 [ 234.344906][ T7387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 234.344924][ T7387] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 234.344947][ T7387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 234.344961][ T7387] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000080000040 [ 234.344973][ T7387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.344985][ T7387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 234.344997][ T7387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.345027][ T7387] [ 235.058976][ T7399] delete_channel: no stack [ 235.336062][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 235.399350][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.411795][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.437226][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.448746][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.992958][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 236.069616][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 237.034394][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 237.321766][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 238.772566][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.903216][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.701488][ T55] Bluetooth: hci3: Unexpected advertising set terminated event [ 239.703470][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.757861][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.983554][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.042671][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.154933][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.203206][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.216455][ T7506] pim6reg1: entered promiscuous mode [ 241.228930][ T7506] pim6reg1: entered allmulticast mode [ 241.707149][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.716238][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.727306][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.736439][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.140374][ T7525] netlink: 'syz.2.473': attribute type 10 has an invalid length. [ 242.150570][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.473'. [ 242.351693][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.438215][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.909101][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'. [ 243.184571][ T7540] FAULT_INJECTION: forcing a failure. [ 243.184571][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.224812][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: syz.2.477 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 243.224843][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.224869][ T7540] Call Trace: [ 243.224877][ T7540] [ 243.224886][ T7540] dump_stack_lvl+0x241/0x360 [ 243.224926][ T7540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.224956][ T7540] ? __pfx__printk+0x10/0x10 [ 243.224998][ T7540] should_fail_ex+0x424/0x570 [ 243.225025][ T7540] _copy_to_user+0x31/0xb0 [ 243.225057][ T7540] video_usercopy+0xf30/0x1330 [ 243.225090][ T7540] ? __pfx___video_do_ioctl+0x10/0x10 [ 243.225111][ T7540] ? __pfx_video_usercopy+0x10/0x10 [ 243.225150][ T7540] ? __fget_files+0x2a/0x420 [ 243.225174][ T7540] v4l2_ioctl+0x189/0x1e0 [ 243.225210][ T7540] v4l2_compat_ioctl32+0x1d7/0x260 [ 243.225245][ T7540] __se_compat_sys_ioctl+0x50e/0xc30 [ 243.225275][ T7540] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 243.225302][ T7540] ? __fget_files+0x2a/0x420 [ 243.225327][ T7540] ? fput+0x9b/0xd0 [ 243.225345][ T7540] ? ksys_write+0x275/0x2d0 [ 243.225377][ T7540] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 243.225412][ T7540] ? lockdep_hardirqs_on+0x9d/0x150 [ 243.225440][ T7540] __do_fast_syscall_32+0xb4/0x110 [ 243.225467][ T7540] ? exc_page_fault+0x5f8/0x920 [ 243.225498][ T7540] do_fast_syscall_32+0x34/0x80 [ 243.225524][ T7540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.225553][ T7540] RIP: 0023:0xf7f34579 [ 243.225570][ T7540] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 243.225586][ T7540] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 243.225608][ T7540] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0d05640 [ 243.225622][ T7540] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.225634][ T7540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.225645][ T7540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.225658][ T7540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.225687][ T7540] [ 243.451936][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.460764][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.853499][ T7548] loop6: detected capacity change from 0 to 524287999 [ 243.872248][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.881720][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.905302][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.914543][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.923653][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.932869][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.942891][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.952167][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.989207][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.998890][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.016751][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 244.021868][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.034962][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.053073][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.062763][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.072620][ T7553] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 244.073216][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.089642][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.097735][ T7548] ldm_validate_partition_table(): Disk read failed. [ 244.106035][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.115358][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.124511][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.133870][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.150091][ T7548] Dev loop6: unable to read RDB block 0 [ 244.186975][ T7548] loop6: unable to read partition table [ 244.192965][ T7548] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 244.225156][ T7553] FAULT_INJECTION: forcing a failure. [ 244.225156][ T7553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.291983][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.2.481 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 244.292016][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.292026][ T7553] Call Trace: [ 244.292033][ T7553] [ 244.292039][ T7553] dump_stack_lvl+0x241/0x360 [ 244.292069][ T7553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.292091][ T7553] ? __pfx__printk+0x10/0x10 [ 244.292122][ T7553] should_fail_ex+0x424/0x570 [ 244.292143][ T7553] _copy_from_user+0x2d/0xb0 [ 244.292166][ T7553] kstrtouint_from_user+0xce/0x1a0 [ 244.292186][ T7553] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 244.292207][ T7553] ? __lock_acquire+0xad5/0xd80 [ 244.292231][ T7553] proc_fail_nth_write+0xac/0x2d0 [ 244.292248][ T7553] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 244.292269][ T7553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.292289][ T7553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.292309][ T7553] vfs_write+0x2bc/0xd10 [ 244.292331][ T7553] ? fdget_pos+0x247/0x310 [ 244.292353][ T7553] ? __pfx_vfs_write+0x10/0x10 [ 244.292372][ T7553] ? __fget_files+0x2a/0x420 [ 244.292387][ T7553] ? __fget_files+0x39d/0x420 [ 244.292399][ T7553] ? __fget_files+0x2a/0x420 [ 244.292419][ T7553] ksys_write+0x19d/0x2d0 [ 244.292437][ T7553] ? __pfx_ksys_write+0x10/0x10 [ 244.292456][ T7553] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 244.292476][ T7553] ? lockdep_hardirqs_on+0x9d/0x150 [ 244.292496][ T7553] __do_fast_syscall_32+0xb4/0x110 [ 244.292515][ T7553] ? exc_page_fault+0x5f8/0x920 [ 244.292536][ T7553] do_fast_syscall_32+0x34/0x80 [ 244.292555][ T7553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.292573][ T7553] RIP: 0023:0xf7f34579 [ 244.292586][ T7553] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.292599][ T7553] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 244.292616][ T7553] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5056620 [ 244.292627][ T7553] RDX: 0000000000000001 RSI: 00000000f73bdff4 RDI: 0000000000000000 [ 244.292636][ T7553] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 244.292645][ T7553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.292653][ T7553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.292675][ T7553] [ 244.530256][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.667341][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.738161][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.832378][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.841941][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.948374][ T7558] netlink: 'syz.1.482': attribute type 10 has an invalid length. [ 244.956268][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.482'. [ 244.972534][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.983999][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.057645][ T7563] netlink: 'syz.3.483': attribute type 10 has an invalid length. [ 245.067291][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.483'. [ 245.094801][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.136425][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.144627][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.190099][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.204510][ T7570] FAULT_INJECTION: forcing a failure. [ 245.204510][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 245.234717][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.274657][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.2.485 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 245.274681][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.274691][ T7570] Call Trace: [ 245.274697][ T7570] [ 245.274703][ T7570] dump_stack_lvl+0x241/0x360 [ 245.274732][ T7570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.274754][ T7570] ? __pfx__printk+0x10/0x10 [ 245.274778][ T7570] ? __pfx___might_resched+0x10/0x10 [ 245.274801][ T7570] should_fail_ex+0x424/0x570 [ 245.274821][ T7570] should_failslab+0xac/0x100 [ 245.274844][ T7570] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 245.274865][ T7570] ? __d_alloc+0x31/0x740 [ 245.274884][ T7570] __d_alloc+0x31/0x740 [ 245.274904][ T7570] d_alloc_parallel+0xe9/0x1660 [ 245.274933][ T7570] ? __d_lookup+0x64/0x7b0 [ 245.274950][ T7570] ? __d_lookup+0x64/0x7b0 [ 245.274966][ T7570] ? __pfx_d_alloc_parallel+0x10/0x10 [ 245.274983][ T7570] ? __d_lookup+0x706/0x7b0 [ 245.275010][ T7570] path_openat+0x9fb/0x35d0 [ 245.275039][ T7570] ? stack_depot_save_flags+0x44/0x940 [ 245.275065][ T7570] ? __pfx_path_openat+0x10/0x10 [ 245.275080][ T7570] ? do_fast_syscall_32+0x34/0x80 [ 245.275115][ T7570] do_filp_open+0x284/0x4e0 [ 245.275133][ T7570] ? __pfx_do_filp_open+0x10/0x10 [ 245.275155][ T7570] ? do_raw_spin_lock+0x151/0x370 [ 245.275205][ T7570] do_sys_openat2+0x12b/0x1d0 [ 245.275230][ T7570] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.275251][ T7570] ? __fget_files+0x2a/0x420 [ 245.275266][ T7570] ? __fget_files+0x2a/0x420 [ 245.275284][ T7570] __ia32_compat_sys_openat+0x241/0x290 [ 245.275301][ T7570] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 245.275320][ T7570] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 245.275339][ T7570] ? lockdep_hardirqs_on+0x9d/0x150 [ 245.275359][ T7570] __do_fast_syscall_32+0xb4/0x110 [ 245.275377][ T7570] ? exc_page_fault+0x5f8/0x920 [ 245.275398][ T7570] do_fast_syscall_32+0x34/0x80 [ 245.275417][ T7570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.275435][ T7570] RIP: 0023:0xf7f34579 [ 245.275448][ T7570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.275460][ T7570] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 245.275481][ T7570] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 245.275495][ T7570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.275506][ T7570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.275518][ T7570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.275529][ T7570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.275557][ T7570] [ 245.543125][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.576055][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 245.611292][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.582575][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.685236][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.820435][ T7597] warning: `syz.1.494' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 247.776864][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.825073][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.960984][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.996573][ T7613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.999324][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.171015][ T7627] netlink: 'syz.3.502': attribute type 10 has an invalid length. [ 248.184385][ T7627] syz_tun: entered promiscuous mode [ 248.242475][ T7627] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 249.089235][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.506'. [ 249.123225][ T30] audit: type=1326 audit(1744619878.453:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.150312][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'. [ 249.195706][ T30] audit: type=1326 audit(1744619878.483:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.218135][ T30] audit: type=1326 audit(1744619878.483:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.241068][ T30] audit: type=1326 audit(1744619878.483:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.265737][ T30] audit: type=1326 audit(1744619878.483:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.288190][ T30] audit: type=1326 audit(1744619878.483:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.385777][ T30] audit: type=1326 audit(1744619878.483:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.482379][ T30] audit: type=1326 audit(1744619878.483:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.506872][ T30] audit: type=1326 audit(1744619878.483:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.538461][ T30] audit: type=1326 audit(1744619878.483:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 249.714376][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.723883][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.826839][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.866417][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.122592][ T7698] program syz.3.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.555648][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.704659][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.900750][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.936140][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.465171][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 253.580831][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.606012][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.707854][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 253.780854][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.824570][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 253.834405][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.052421][ T7742] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 254.065637][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.521'. [ 254.096777][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.119534][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.163648][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.174849][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.768479][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 254.834628][ T7760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.527'. [ 254.942678][ T7763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 255.064454][ T7769] loop6: detected capacity change from 0 to 524287999 [ 255.089051][ C0] blk_print_req_error: 7 callbacks suppressed [ 255.089068][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.104369][ C0] buffer_io_error: 7 callbacks suppressed [ 255.104384][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.191774][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.210565][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.235308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.278030][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.287357][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.298767][ T7776] program syz.2.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.303580][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.317201][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.325274][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.334804][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.344556][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.353828][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.363148][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.372411][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.391938][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.401167][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.409645][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.418852][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.427588][ T7769] ldm_validate_partition_table(): Disk read failed. [ 255.448210][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.457625][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.493794][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 255.503044][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.521859][ T7769] Dev loop6: unable to read RDB block 0 [ 255.562738][ T7769] loop6: unable to read partition table [ 255.570953][ T7769] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 255.821188][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.836747][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.843534][ T7779] FAULT_INJECTION: forcing a failure. [ 255.843534][ T7779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.905742][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.2.532 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 255.905773][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.905787][ T7779] Call Trace: [ 255.905795][ T7779] [ 255.905804][ T7779] dump_stack_lvl+0x241/0x360 [ 255.905842][ T7779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.905872][ T7779] ? __pfx__printk+0x10/0x10 [ 255.905913][ T7779] should_fail_ex+0x424/0x570 [ 255.905942][ T7779] _copy_to_user+0x31/0xb0 [ 255.905976][ T7779] simple_read_from_buffer+0xc4/0x170 [ 255.906012][ T7779] proc_fail_nth_read+0x1ef/0x260 [ 255.906037][ T7779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.906062][ T7779] ? rw_verify_area+0x246/0x630 [ 255.906084][ T7779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.906108][ T7779] vfs_read+0x21f/0xb90 [ 255.906137][ T7779] ? __pfx___mutex_lock+0x10/0x10 [ 255.906165][ T7779] ? __pfx_vfs_read+0x10/0x10 [ 255.906192][ T7779] ? __fget_files+0x2a/0x420 [ 255.906213][ T7779] ? __fget_files+0x39d/0x420 [ 255.906230][ T7779] ? __fget_files+0x2a/0x420 [ 255.906259][ T7779] ksys_read+0x19d/0x2d0 [ 255.906293][ T7779] ? __pfx_ksys_read+0x10/0x10 [ 255.906320][ T7779] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 255.906345][ T7779] ? lockdep_hardirqs_on+0x9d/0x150 [ 255.906373][ T7779] __do_fast_syscall_32+0xb4/0x110 [ 255.906399][ T7779] ? exc_page_fault+0x5f8/0x920 [ 255.906429][ T7779] do_fast_syscall_32+0x34/0x80 [ 255.906456][ T7779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.906481][ T7779] RIP: 0023:0xf7f34579 [ 255.906498][ T7779] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 255.906516][ T7779] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 255.906539][ T7779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5056620 [ 255.906553][ T7779] RDX: 000000000000000f RSI: 00000000f73bdff4 RDI: 0000000000000000 [ 255.906565][ T7779] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 255.906577][ T7779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.906589][ T7779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.906619][ T7779] [ 256.155418][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.164544][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.322960][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.341345][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 256.489309][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.518540][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.611316][ T7787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.611606][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.666507][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.675441][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.683851][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.827203][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.857524][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.918730][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 256.932069][ T7791] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 256.948785][ T7791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.539'. [ 256.973661][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.004419][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.030220][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.039836][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.079646][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 257.092595][ T7806] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.331566][ T7828] tipc: Started in network mode [ 258.360242][ T7828] tipc: Node identity ac1414bb, cluster identity 4711 [ 258.382152][ T7828] FAULT_INJECTION: forcing a failure. [ 258.382152][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 258.444470][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.446872][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz.4.550 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 258.446906][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.446921][ T7828] Call Trace: [ 258.446930][ T7828] [ 258.446939][ T7828] dump_stack_lvl+0x241/0x360 [ 258.446982][ T7828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.447020][ T7828] ? __pfx__printk+0x10/0x10 [ 258.447066][ T7828] ? __pfx___might_resched+0x10/0x10 [ 258.447099][ T7828] should_fail_ex+0x424/0x570 [ 258.447132][ T7828] should_failslab+0xac/0x100 [ 258.447165][ T7828] kmem_cache_alloc_noprof+0x78/0x390 [ 258.447196][ T7828] ? sk_prot_alloc+0x58/0x210 [ 258.447225][ T7828] sk_prot_alloc+0x58/0x210 [ 258.447246][ T7828] ? sk_alloc+0x27/0x370 [ 258.447271][ T7828] sk_alloc+0x3e/0x370 [ 258.447298][ T7828] inet_create+0x648/0xea0 [ 258.447324][ T7828] ? inet_create+0x94/0xea0 [ 258.447358][ T7828] __sock_create+0x4c0/0xa30 [ 258.447403][ T7828] udp_sock_create4+0xdc/0x680 [ 258.447438][ T7828] ? __pfx_udp_sock_create4+0x10/0x10 [ 258.447466][ T7828] ? tipc_udp_media_addr_set+0x59/0x160 [ 258.447512][ T7828] tipc_udp_enable+0xde4/0x17f0 [ 258.447551][ T7828] ? __pfx_tipc_udp_enable+0x10/0x10 [ 258.447598][ T7828] ? kasan_save_track+0x51/0x80 [ 258.447621][ T7828] ? kasan_save_track+0x3f/0x80 [ 258.447644][ T7828] ? __kasan_kmalloc+0x9d/0xb0 [ 258.447736][ T7828] ? read_word_at_a_time+0xe/0x20 [ 258.447766][ T7828] ? sized_strscpy+0x9a/0x2b0 [ 258.447802][ T7828] __tipc_nl_bearer_enable+0xc64/0x14d0 [ 258.447845][ T7828] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 258.447873][ T7828] ? trace_contention_end+0x3c/0x120 [ 258.447926][ T7828] ? __pfx___mutex_lock+0x10/0x10 [ 258.447963][ T7828] ? __nla_parse+0x40/0x60 [ 258.447996][ T7828] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 258.448022][ T7828] ? genl_family_rcv_msg_attrs_parse+0x21e/0x290 [ 258.448061][ T7828] tipc_nl_bearer_enable+0x22/0x40 [ 258.448091][ T7828] genl_rcv_msg+0xb38/0xf00 [ 258.448127][ T7828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.448149][ T7828] ? __dev_queue_xmit+0x1780/0x3f60 [ 258.448173][ T7828] ? kasan_save_track+0x3f/0x80 [ 258.448196][ T7828] ? __kasan_slab_alloc+0x66/0x80 [ 258.448228][ T7828] ? __do_fast_syscall_32+0xb4/0x110 [ 258.448278][ T7828] ? __lock_acquire+0xad5/0xd80 [ 258.448304][ T7828] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 258.448353][ T7828] netlink_rcv_skb+0x208/0x480 [ 258.448386][ T7828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.448414][ T7828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.448470][ T7828] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.448511][ T7828] genl_rcv+0x28/0x40 [ 258.448533][ T7828] netlink_unicast+0x7f8/0x9a0 [ 258.448573][ T7828] ? __pfx_netlink_unicast+0x10/0x10 [ 258.448604][ T7828] ? skb_put+0x114/0x1f0 [ 258.448632][ T7828] netlink_sendmsg+0x8c3/0xcd0 [ 258.448680][ T7828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.448717][ T7828] ? __import_iovec+0x585/0x830 [ 258.448749][ T7828] ? aa_sock_msg_perm+0x91/0x160 [ 258.448788][ T7828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.448820][ T7828] __sock_sendmsg+0x221/0x270 [ 258.448855][ T7828] ____sys_sendmsg+0x523/0x860 [ 258.448892][ T7828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.448925][ T7828] ? __sys_sendmsg+0x229/0x360 [ 258.448956][ T7828] __sys_sendmsg+0x271/0x360 [ 258.448987][ T7828] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.449080][ T7828] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 258.449108][ T7828] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.449138][ T7828] __do_fast_syscall_32+0xb4/0x110 [ 258.449166][ T7828] ? exc_page_fault+0x5f8/0x920 [ 258.449199][ T7828] do_fast_syscall_32+0x34/0x80 [ 258.449227][ T7828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.449254][ T7828] RIP: 0023:0xf73ed579 [ 258.449273][ T7828] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 258.449292][ T7828] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 258.449317][ T7828] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 258.449333][ T7828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.449346][ T7828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.449358][ T7828] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 258.449372][ T7828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.449406][ T7828] [ 258.471434][ T7828] tipc: Enabling of bearer rejected, failed to enable media [ 258.494971][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.030858][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 259.083601][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.095131][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.125750][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 259.134676][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 259.189765][ T7847] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.191649][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.240082][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 259.247932][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 259.310086][ T7843] netlink: 'syz.4.555': attribute type 10 has an invalid length. [ 259.324903][ T7843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.555'. [ 259.335234][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 259.371973][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.384131][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.443522][ T7843] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.462526][ T5894] usb 5-1: device descriptor read/64, error -32 [ 259.469261][ T7843] batman_adv: batadv0: Removing interface: dummy0 [ 259.511490][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.544842][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.596296][ T5894] raw-gadget.0 gadget.4: failed to queue suspend event [ 259.611372][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 259.696263][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 259.824761][ T5894] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.861883][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 259.869695][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 259.955850][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 260.116028][ T5894] usb 5-1: device descriptor read/64, error -32 [ 260.174474][ T7873] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 260.271829][ T5894] raw-gadget.0 gadget.4: failed to queue suspend event [ 260.327120][ T5894] usb usb5-port1: attempt power cycle [ 260.334308][ T5894] raw-gadget.0 gadget.4: failed to queue disconnect event [ 260.344815][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 260.374372][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.401072][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.425796][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 260.439166][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 260.676141][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 260.746015][ T5894] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 260.778914][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 260.788560][ T5894] usb 5-1: device descriptor read/8, error -32 [ 260.896185][ T5894] raw-gadget.0 gadget.4: failed to queue suspend event [ 260.908028][ T5894] raw-gadget.0 gadget.4: failed to queue reset event [ 261.007622][ T5894] raw-gadget.0 gadget.4: failed to queue resume event [ 261.116179][ T5894] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 261.130710][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.151437][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.166090][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 261.173463][ T5894] usb 5-1: device descriptor read/8, error -32 [ 261.238399][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.258551][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.286102][ T5894] raw-gadget.0 gadget.4: failed to queue suspend event [ 261.297986][ T5894] usb usb5-port1: unable to enumerate USB device [ 261.385145][ T7901] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 261.393584][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.575'. [ 261.404907][ T7909] hub 9-0:1.0: USB hub found [ 261.414861][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.417630][ T7909] hub 9-0:1.0: 1 port detected [ 261.426013][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.458810][ T7901] batman_adv: batadv0: Interface deactivated: dummy0 [ 261.472585][ T7909] netlink: 36 bytes leftover after parsing attributes in process `syz.4.579'. [ 261.475954][ T7901] batman_adv: batadv0: Removing interface: dummy0 [ 261.507945][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.536011][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.832072][ T7920] FAULT_INJECTION: forcing a failure. [ 261.832072][ T7920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.865231][ T7920] CPU: 0 UID: 0 PID: 7920 Comm: syz.4.582 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 261.865263][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.865276][ T7920] Call Trace: [ 261.865284][ T7920] [ 261.865293][ T7920] dump_stack_lvl+0x241/0x360 [ 261.865332][ T7920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.865362][ T7920] ? __pfx__printk+0x10/0x10 [ 261.865403][ T7920] should_fail_ex+0x424/0x570 [ 261.865430][ T7920] _copy_to_user+0x31/0xb0 [ 261.865463][ T7920] simple_read_from_buffer+0xc4/0x170 [ 261.865501][ T7920] proc_fail_nth_read+0x1ef/0x260 [ 261.865526][ T7920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.865549][ T7920] ? rw_verify_area+0x246/0x630 [ 261.865571][ T7920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.865595][ T7920] vfs_read+0x21f/0xb90 [ 261.865623][ T7920] ? __pfx___mutex_lock+0x10/0x10 [ 261.865651][ T7920] ? __pfx_vfs_read+0x10/0x10 [ 261.865677][ T7920] ? __fget_files+0x2a/0x420 [ 261.865697][ T7920] ? __fget_files+0x39d/0x420 [ 261.865714][ T7920] ? __fget_files+0x2a/0x420 [ 261.865743][ T7920] ksys_read+0x19d/0x2d0 [ 261.865769][ T7920] ? __pfx_ksys_read+0x10/0x10 [ 261.865796][ T7920] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 261.865823][ T7920] ? lockdep_hardirqs_on+0x9d/0x150 [ 261.865859][ T7920] __do_fast_syscall_32+0xb4/0x110 [ 261.865886][ T7920] ? exc_page_fault+0x5f8/0x920 [ 261.865916][ T7920] do_fast_syscall_32+0x34/0x80 [ 261.865944][ T7920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.865968][ T7920] RIP: 0023:0xf73ed579 [ 261.865987][ T7920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.866004][ T7920] RSP: 002b:00000000f5076590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 261.866026][ T7920] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5076620 [ 261.866040][ T7920] RDX: 000000000000000f RSI: 00000000f73ddff4 RDI: 0000000000000000 [ 261.866052][ T7920] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 261.866064][ T7920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.866076][ T7920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.866107][ T7920] [ 262.090010][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.261411][ T7929] FAULT_INJECTION: forcing a failure. [ 262.261411][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 262.291182][ T7929] CPU: 0 UID: 0 PID: 7929 Comm: syz.2.586 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 262.291212][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.291226][ T7929] Call Trace: [ 262.291234][ T7929] [ 262.291250][ T7929] dump_stack_lvl+0x241/0x360 [ 262.291289][ T7929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.291320][ T7929] ? __pfx__printk+0x10/0x10 [ 262.291355][ T7929] ? __pfx___might_resched+0x10/0x10 [ 262.291387][ T7929] should_fail_ex+0x424/0x570 [ 262.291415][ T7929] should_failslab+0xac/0x100 [ 262.291446][ T7929] __kmalloc_cache_noprof+0x73/0x370 [ 262.291475][ T7929] ? sctp_association_new+0x8a/0x2540 [ 262.291502][ T7929] sctp_association_new+0x8a/0x2540 [ 262.291526][ T7929] ? sctp_has_association+0x1d4/0x1f0 [ 262.291550][ T7929] ? sctp_has_association+0x2f/0x1f0 [ 262.291576][ T7929] ? __ipv6_addr_type+0x23c/0x2f0 [ 262.291602][ T7929] sctp_connect_new_asoc+0x31c/0x700 [ 262.291629][ T7929] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 262.291652][ T7929] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 262.291677][ T7929] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 262.291696][ T7929] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 262.291716][ T7929] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 262.291750][ T7929] sctp_sendmsg+0x2009/0x3620 [ 262.291795][ T7929] ? __pfx_sctp_sendmsg+0x10/0x10 [ 262.291820][ T7929] ? aa_sk_perm+0x96f/0xac0 [ 262.291866][ T7929] ? inet_sendmsg+0x330/0x390 [ 262.291899][ T7929] __sock_sendmsg+0x1a6/0x270 [ 262.291933][ T7929] __sys_sendto+0x365/0x4c0 [ 262.291960][ T7929] ? __pfx___sys_sendto+0x10/0x10 [ 262.291995][ T7929] ? __fget_files+0x2a/0x420 [ 262.292025][ T7929] ? ksys_write+0x275/0x2d0 [ 262.292060][ T7929] __ia32_sys_sendto+0xdd/0x100 [ 262.292085][ T7929] __do_fast_syscall_32+0xb4/0x110 [ 262.292112][ T7929] ? exc_page_fault+0x5f8/0x920 [ 262.292141][ T7929] do_fast_syscall_32+0x34/0x80 [ 262.292168][ T7929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.292193][ T7929] RIP: 0023:0xf7f34579 [ 262.292210][ T7929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 262.292227][ T7929] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 262.292248][ T7929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 262.292261][ T7929] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000080000100 [ 262.292273][ T7929] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 262.292284][ T7929] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.292296][ T7929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.292325][ T7929] [ 262.561161][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.093601][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 263.287071][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 263.287092][ T30] audit: type=1804 audit(1744619892.623:119): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.584" name="/newroot/107/file1" dev="fuse" ino=1 res=1 errno=0 [ 263.762073][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.772200][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.443478][ T7971] unsupported nla_type 61704 [ 264.791135][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.872279][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.091656][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.101158][ T7973] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 265.126965][ T7973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.597'. [ 265.175353][ T7977] netlink: 'syz.4.599': attribute type 5 has an invalid length. [ 265.182402][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.215744][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.232155][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.271429][ T7973] batman_adv: batadv0: Interface deactivated: dummy0 [ 265.283197][ T7973] batman_adv: batadv0: Removing interface: dummy0 [ 265.351159][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.371145][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.421052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.133178][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.151078][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.288048][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.348554][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.205391][ T8012] FAULT_INJECTION: forcing a failure. [ 267.205391][ T8012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.231838][ T8012] CPU: 1 UID: 0 PID: 8012 Comm: syz.2.611 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 267.231870][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.231882][ T8012] Call Trace: [ 267.231890][ T8012] [ 267.231899][ T8012] dump_stack_lvl+0x241/0x360 [ 267.231938][ T8012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.231969][ T8012] ? __pfx__printk+0x10/0x10 [ 267.232011][ T8012] should_fail_ex+0x424/0x570 [ 267.232038][ T8012] _copy_to_user+0x31/0xb0 [ 267.232072][ T8012] simple_read_from_buffer+0xc4/0x170 [ 267.232110][ T8012] proc_fail_nth_read+0x1ef/0x260 [ 267.232134][ T8012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.232160][ T8012] ? rw_verify_area+0x246/0x630 [ 267.232182][ T8012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.232205][ T8012] vfs_read+0x21f/0xb90 [ 267.232233][ T8012] ? __pfx___mutex_lock+0x10/0x10 [ 267.232260][ T8012] ? __pfx_vfs_read+0x10/0x10 [ 267.232286][ T8012] ? __fget_files+0x2a/0x420 [ 267.232315][ T8012] ? __fget_files+0x39d/0x420 [ 267.232331][ T8012] ? __fget_files+0x2a/0x420 [ 267.232358][ T8012] ksys_read+0x19d/0x2d0 [ 267.232383][ T8012] ? __pfx_ksys_read+0x10/0x10 [ 267.232418][ T8012] __do_fast_syscall_32+0xb4/0x110 [ 267.232445][ T8012] ? exc_page_fault+0x5f8/0x920 [ 267.232475][ T8012] do_fast_syscall_32+0x34/0x80 [ 267.232501][ T8012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.232526][ T8012] RIP: 0023:0xf7f34579 [ 267.232545][ T8012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.232563][ T8012] RSP: 002b:00000000f5056590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 267.232586][ T8012] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5056620 [ 267.232601][ T8012] RDX: 000000000000000f RSI: 00000000f73bdff4 RDI: 0000000000000000 [ 267.232613][ T8012] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 267.232625][ T8012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.232637][ T8012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.232668][ T8012] [ 267.774316][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.810286][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.010643][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.058750][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 268.066408][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.074949][ T8021] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 268.091378][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 268.144783][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.155748][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 268.173060][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.225176][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.250512][ T5921] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 268.281704][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 268.292139][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.302636][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 268.406130][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 268.505723][ T5921] usb 3-1: device descriptor read/64, error -32 [ 268.686417][ T5921] raw-gadget.2 gadget.2: failed to queue suspend event [ 268.786794][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 268.866352][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.881477][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 268.907755][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.975638][ T5921] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 268.997851][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 269.054900][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 269.138525][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 269.215931][ T5921] usb 3-1: device descriptor read/64, error -32 [ 269.310092][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.319121][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.328234][ T5921] raw-gadget.2 gadget.2: failed to queue suspend event [ 269.340153][ T5921] usb usb3-port1: attempt power cycle [ 269.346367][ T5921] raw-gadget.2 gadget.2: failed to queue disconnect event [ 269.354620][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 269.425818][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 269.433125][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 269.549200][ T8046] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.646859][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 269.667311][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.677017][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.755743][ T5921] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 269.809468][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 269.817424][ T5921] usb 3-1: device descriptor read/8, error -32 [ 269.931049][ T5921] raw-gadget.2 gadget.2: failed to queue suspend event [ 269.949119][ T5921] raw-gadget.2 gadget.2: failed to queue reset event [ 269.962001][ T8053] fuse: blksize only supported for fuseblk [ 270.036853][ T5921] raw-gadget.2 gadget.2: failed to queue resume event [ 270.116089][ T5921] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 270.147624][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 270.158185][ T5921] usb 3-1: device descriptor read/8, error -32 [ 270.265837][ T5921] raw-gadget.2 gadget.2: failed to queue suspend event [ 270.275663][ T5921] usb usb3-port1: unable to enumerate USB device [ 270.381960][ T6775] raw-gadget.11 gadget.1: failed to queue disconnect event [ 270.623119][ T7666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.787622][ T7666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.924847][ T7666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.022283][ T7666] bridge0: port 3(netdevsim0) entered disabled state [ 271.081703][ T7666] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 271.106313][ T7666] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 271.140249][ T7666] bridge0: port 3(netdevsim0) entered disabled state [ 271.201201][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.210585][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.280147][ T7666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.703078][ T8086] FAULT_INJECTION: forcing a failure. [ 271.703078][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 271.772028][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.4.634 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 271.772058][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.772070][ T8086] Call Trace: [ 271.772078][ T8086] [ 271.772087][ T8086] dump_stack_lvl+0x241/0x360 [ 271.772126][ T8086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.772156][ T8086] ? __pfx__printk+0x10/0x10 [ 271.772189][ T8086] ? __pfx___might_resched+0x10/0x10 [ 271.772234][ T8086] should_fail_ex+0x424/0x570 [ 271.772261][ T8086] should_failslab+0xac/0x100 [ 271.772293][ T8086] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 271.772324][ T8086] ? __alloc_skb+0x1c2/0x480 [ 271.772349][ T8086] __alloc_skb+0x1c2/0x480 [ 271.772375][ T8086] ? __pfx___alloc_skb+0x10/0x10 [ 271.772406][ T8086] netlink_sendmsg+0x638/0xcd0 [ 271.772451][ T8086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.772486][ T8086] ? __import_iovec+0x585/0x830 [ 271.772514][ T8086] ? aa_sock_msg_perm+0x91/0x160 [ 271.772549][ T8086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.772578][ T8086] __sock_sendmsg+0x221/0x270 [ 271.772610][ T8086] ____sys_sendmsg+0x523/0x860 [ 271.772642][ T8086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.772682][ T8086] __sys_sendmsg+0x271/0x360 [ 271.772711][ T8086] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.772788][ T8086] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 271.772815][ T8086] ? lockdep_hardirqs_on+0x9d/0x150 [ 271.772842][ T8086] __do_fast_syscall_32+0xb4/0x110 [ 271.772869][ T8086] ? exc_page_fault+0x5f8/0x920 [ 271.772899][ T8086] do_fast_syscall_32+0x34/0x80 [ 271.772926][ T8086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.772952][ T8086] RIP: 0023:0xf73ed579 [ 271.772973][ T8086] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 271.772990][ T8086] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 271.773012][ T8086] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 271.773027][ T8086] RDX: 00000000000088c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.773039][ T8086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.773051][ T8086] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 271.773064][ T8086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.773093][ T8086] [ 271.791747][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 272.198740][ T7666] bridge0: port 4(batadv0) entered disabled state [ 272.294292][ T7666] bridge_slave_1: left allmulticast mode [ 272.326602][ T7666] bridge_slave_1: left promiscuous mode [ 272.352303][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.429248][ T7666] bridge_slave_0: left allmulticast mode [ 272.458645][ T7666] bridge_slave_0: left promiscuous mode [ 272.477923][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.489521][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.489521][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.530084][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.670016][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.681492][ T8096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.700031][ T8096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.718136][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.220789][ T8112] [ 273.223184][ T8112] ====================================================== [ 273.230233][ T8112] WARNING: possible circular locking dependency detected [ 273.237276][ T8112] 6.15.0-rc2-syzkaller #0 Not tainted [ 273.242664][ T8112] ------------------------------------------------------ [ 273.250117][ T8112] syz.3.638/8112 is trying to acquire lock: [ 273.256076][ T8112] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 273.265244][ T8112] [ 273.265244][ T8112] but task is already holding lock: [ 273.272618][ T8112] ffff888033fe1628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 273.282756][ T8112] [ 273.282756][ T8112] which lock already depends on the new lock. [ 273.282756][ T8112] [ 273.293161][ T8112] [ 273.293161][ T8112] the existing dependency chain (in reverse order) is: [ 273.302172][ T8112] [ 273.302172][ T8112] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 273.310788][ T8112] lock_acquire+0x116/0x2f0 [ 273.315819][ T8112] __mutex_lock+0x1a5/0x10c0 [ 273.320936][ T8112] smc_switch_to_fallback+0x35/0xda0 [ 273.326752][ T8112] smc_sendmsg+0x11f/0x530 [ 273.331722][ T8112] __sock_sendmsg+0x221/0x270 [ 273.336951][ T8112] __sys_sendto+0x365/0x4c0 [ 273.342086][ T8112] __ia32_sys_sendto+0xdd/0x100 [ 273.347463][ T8112] __do_fast_syscall_32+0xb4/0x110 [ 273.353105][ T8112] do_fast_syscall_32+0x34/0x80 [ 273.358485][ T8112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.365441][ T8112] [ 273.365441][ T8112] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 273.373538][ T8112] lock_acquire+0x116/0x2f0 [ 273.378568][ T8112] lock_sock_nested+0x48/0x100 [ 273.383874][ T8112] do_ip_setsockopt+0x17e9/0x39c0 [ 273.389425][ T8112] ip_setsockopt+0x63/0x100 [ 273.394472][ T8112] do_sock_setsockopt+0x3b1/0x710 [ 273.400055][ T8112] __ia32_sys_setsockopt+0x1f2/0x280 [ 273.405880][ T8112] __do_fast_syscall_32+0xb4/0x110 [ 273.411522][ T8112] do_fast_syscall_32+0x34/0x80 [ 273.416957][ T8112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.423922][ T8112] [ 273.423922][ T8112] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.431337][ T8112] validate_chain+0xa69/0x24e0 [ 273.436656][ T8112] __lock_acquire+0xad5/0xd80 [ 273.441901][ T8112] lock_acquire+0x116/0x2f0 [ 273.446943][ T8112] __mutex_lock+0x1a5/0x10c0 [ 273.452079][ T8112] do_ip_getsockopt+0x11ae/0x2ba0 [ 273.457758][ T8112] ip_getsockopt+0xef/0x2e0 [ 273.462812][ T8112] tcp_getsockopt+0x16f/0x1d0 [ 273.468056][ T8112] smc_getsockopt+0x1c6/0x400 [ 273.473282][ T8112] do_sock_getsockopt+0x391/0x740 [ 273.478843][ T8112] __ia32_sys_getsockopt+0x2a1/0x370 [ 273.484660][ T8112] __do_fast_syscall_32+0xb4/0x110 [ 273.490320][ T8112] do_fast_syscall_32+0x34/0x80 [ 273.495814][ T8112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.502679][ T8112] [ 273.502679][ T8112] other info that might help us debug this: [ 273.502679][ T8112] [ 273.512911][ T8112] Chain exists of: [ 273.512911][ T8112] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 273.512911][ T8112] [ 273.526495][ T8112] Possible unsafe locking scenario: [ 273.526495][ T8112] [ 273.533965][ T8112] CPU0 CPU1 [ 273.539351][ T8112] ---- ---- [ 273.544811][ T8112] lock(&smc->clcsock_release_lock); [ 273.550196][ T8112] lock(sk_lock-AF_INET); [ 273.557138][ T8112] lock(&smc->clcsock_release_lock); [ 273.565063][ T8112] lock(rtnl_mutex); [ 273.569066][ T8112] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.569066][ T8112] *** DEADLOCK *** [ 273.569066][ T8112] [ 273.577208][ T8112] 1 lock held by syz.3.638/8112: [ 273.582142][ T8112] #0: ffff888033fe1628 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 273.592799][ T8112] [ 273.592799][ T8112] stack backtrace: [ 273.598694][ T8112] CPU: 1 UID: 0 PID: 8112 Comm: syz.3.638 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 273.598714][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.598726][ T8112] Call Trace: [ 273.598734][ T8112] [ 273.598743][ T8112] dump_stack_lvl+0x241/0x360 [ 273.598772][ T8112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.598796][ T8112] ? __pfx__printk+0x10/0x10 [ 273.598820][ T8112] ? print_lock+0x171/0x1a0 [ 273.598841][ T8112] print_circular_bug+0x2e1/0x300 [ 273.598864][ T8112] check_noncircular+0x142/0x160 [ 273.598889][ T8112] validate_chain+0xa69/0x24e0 [ 273.598919][ T8112] __lock_acquire+0xad5/0xd80 [ 273.598939][ T8112] lock_acquire+0x116/0x2f0 [ 273.598955][ T8112] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 273.598981][ T8112] __mutex_lock+0x1a5/0x10c0 [ 273.599008][ T8112] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 273.599029][ T8112] ? __lock_acquire+0xad5/0xd80 [ 273.599048][ T8112] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 273.599068][ T8112] ? __pfx___mutex_lock+0x10/0x10 [ 273.599096][ T8112] do_ip_getsockopt+0x11ae/0x2ba0 [ 273.599119][ T8112] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 273.599143][ T8112] ? schedule+0x163/0x360 [ 273.599161][ T8112] ? look_up_lock_class+0x7b/0x170 [ 273.599181][ T8112] ? register_lock_class+0x54/0x330 [ 273.599199][ T8112] ? __lock_acquire+0xad5/0xd80 [ 273.599217][ T8112] ? __mutex_trylock_common+0x184/0x2e0 [ 273.599240][ T8112] ? __pfx___mutex_trylock_common+0x10/0x10 [ 273.599266][ T8112] ip_getsockopt+0xef/0x2e0 [ 273.599288][ T8112] ? __pfx_ip_getsockopt+0x10/0x10 [ 273.599311][ T8112] ? smc_getsockopt+0x131/0x400 [ 273.599332][ T8112] tcp_getsockopt+0x16f/0x1d0 [ 273.599357][ T8112] ? __pfx_tcp_getsockopt+0x10/0x10 [ 273.599382][ T8112] ? aa_sk_perm+0x96f/0xac0 [ 273.599403][ T8112] ? sock_common_getsockopt+0x2e/0xb0 [ 273.599428][ T8112] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 273.599451][ T8112] smc_getsockopt+0x1c6/0x400 [ 273.599471][ T8112] ? __pfx_smc_getsockopt+0x10/0x10 [ 273.599490][ T8112] ? aa_sock_opt_perm+0x79/0x120 [ 273.599514][ T8112] ? __pfx_smc_getsockopt+0x10/0x10 [ 273.599533][ T8112] do_sock_getsockopt+0x391/0x740 [ 273.599552][ T8112] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 273.599568][ T8112] ? __fget_files+0x2a/0x420 [ 273.599584][ T8112] ? __fget_files+0x39d/0x420 [ 273.599597][ T8112] ? __fget_files+0x2a/0x420 [ 273.599614][ T8112] __ia32_sys_getsockopt+0x2a1/0x370 [ 273.599634][ T8112] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 273.599653][ T8112] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.599673][ T8112] ? lockdep_hardirqs_on+0x9d/0x150 [ 273.599694][ T8112] __do_fast_syscall_32+0xb4/0x110 [ 273.599715][ T8112] ? exc_page_fault+0x5f8/0x920 [ 273.599737][ T8112] do_fast_syscall_32+0x34/0x80 [ 273.599759][ T8112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.599779][ T8112] RIP: 0023:0xf744d579 [ 273.599794][ T8112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.599809][ T8112] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 273.599827][ T8112] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 273.599838][ T8112] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 00000000800000c0 [ 273.599849][ T8112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.599858][ T8112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.599868][ T8112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.599884][ T8112] [ 274.036124][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 274.178306][ T6533] raw-gadget.9 gadget.3: failed to queue disconnect event [ 274.299987][ T6383] raw-gadget.5 gadget.0: failed to queue disconnect event [ 274.528990][ T5995] raw-gadget.2 gadget.2: failed to queue disconnect event [ 274.785567][ T5846] Bluetooth: hci0: command tx timeout [ 274.791431][ T7666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.801478][ T7666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.812067][ T7666] bond0 (unregistering): Released all slaves [ 274.889021][ T7666] bond1 (unregistering): Released all slaves [ 275.098911][ T6274] raw-gadget.0 gadget.4: failed to queue disconnect event [ 275.378077][ T8112] bond0: (slave syz_tun): Releasing backup interface [ 275.422803][ T7666] hsr_slave_0: left promiscuous mode [ 275.433644][ T7666] hsr_slave_1: left promiscuous mode [ 275.456326][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.463793][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.482411][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.490296][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.501625][ T7666] veth1_macvtap: left promiscuous mode [ 275.507298][ T7666] veth0_macvtap: left promiscuous mode [ 275.512915][ T7666] veth1_vlan: left promiscuous mode [ 275.519918][ T7666] veth0_vlan: left promiscuous mode [ 275.670073][ T7666] team0 (unregistering): Port device team_slave_0 removed