last executing test programs: 5m54.618970753s ago: executing program 0 (id=26): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) utime(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mq_open(0x0, 0x42, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r2, 0x4, 0x2400) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x6, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x6, 0x2, 0xee1, 0x4], [0x2, 0x3, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x5, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x2, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x1, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0x1, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x6, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0xfffffffc, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x8, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x4, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 5m53.651539427s ago: executing program 0 (id=32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c25000000000020202006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x18}, 0x19}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-', 0x1}], 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x10) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x1b, "fd5a44512b7e1b0020ed2abb4301002700"}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083e1ad40402000726b5b010203010902240001010740000904bcd1010101", @ANYRESHEX=r7, @ANYRES64=r7], 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1300000001000000040000000500000000350000", @ANYRES32=r4, @ANYBLOB="ff00100000008000"/20, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="00000000050000000200"/28], 0x50) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$inet6(0xa, 0x2, 0x10000004) 5m50.058396941s ago: executing program 0 (id=43): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x60, @local, 0x3}, 0x80, 0x0}, 0x41) 5m49.752511804s ago: executing program 0 (id=46): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1000, 0x1, 0x2}, 0x18, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x48, 0x1ffffe, 0x10, 0xffff, 0x1, 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r7 = socket(0x2a, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="52a6e677", @ANYRES16=r9, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x214) socket$inet_sctp(0x2, 0x4, 0x84) chroot(&(0x7f0000001740)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) r11 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fchdir(r12) socket$key(0xf, 0x3, 0x2) 5m49.002808954s ago: executing program 0 (id=50): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000014000000000000034000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) 5m48.732396106s ago: executing program 0 (id=51): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) utime(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mq_open(0x0, 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 5m48.103957098s ago: executing program 32 (id=51): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) utime(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mq_open(0x0, 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 5m35.546791309s ago: executing program 2 (id=99): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x23c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 5m32.399243047s ago: executing program 2 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9bX\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r0, 0x409, 0x7) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, 0x0) 5m31.487631511s ago: executing program 2 (id=115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m30.44623091s ago: executing program 2 (id=123): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000001740)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a320000000005000400002000001400078005001500080000000800114000000002050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}}, 0x84000) fchdir(r3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r5, &(0x7f00000102c0)={0x2020}, 0x7) 5m30.235261251s ago: executing program 2 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000002c0)={0x2, @meta={0x52e15931c602b3da, 0x2d7fa877, 0xc3df, 0xdee4, 0x77afcc66}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x50001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0xfd}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=0x28, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m29.920975938s ago: executing program 2 (id=126): r0 = socket(0x11, 0x3, 0x1) rmdir(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x27}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'wlan1\x00', {0x2, 0x4e28, @empty=0xcf05fdfd}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f00000000c0)) 5m29.208009558s ago: executing program 33 (id=126): r0 = socket(0x11, 0x3, 0x1) rmdir(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x27}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'wlan1\x00', {0x2, 0x4e28, @empty=0xcf05fdfd}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f00000000c0)) 2m48.896772714s ago: executing program 1 (id=1103): socket$netlink(0x10, 0x3, 0x14) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0xc2) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x100) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x8c00, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) (async) connect$inet(r1, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000003200)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x3, &(0x7f0000003240)=""/185, 0xb9}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000003300)=""/115, 0x73}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/21, 0x15}, {&(0x7f00000043c0)=""/187, 0xbb}, {&(0x7f0000004480)=""/219, 0xdb}], 0x5, &(0x7f0000004600)=""/148, 0x94}, 0x401}, {{&(0x7f00000046c0)=@ax25={{0x3, @rose}, [@bcast, @rose, @bcast, @netrom, @bcast, @netrom, @rose, @default]}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/4, 0x4}, {&(0x7f0000004780)=""/104, 0x68}, {&(0x7f0000004800)=""/182, 0xb6}, {&(0x7f0000000240)=""/61, 0x3d}], 0x4, &(0x7f0000004940)=""/244, 0xf4}, 0x2}, {{&(0x7f0000004a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000004ac0)=""/197, 0xc5}, {&(0x7f0000004bc0)=""/17, 0x11}, {&(0x7f0000004c00)=""/61, 0x3d}, {&(0x7f0000004c40)=""/107, 0x6b}, {&(0x7f0000004cc0)=""/67, 0x43}, {&(0x7f0000004d40)=""/186, 0xba}, {&(0x7f0000004e00)=""/103, 0x67}, {&(0x7f0000004e80)=""/28, 0x1c}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x9, &(0x7f0000005f80)=""/30, 0x1e}, 0x5}, {{&(0x7f0000005fc0)=@caif, 0x80, &(0x7f0000006180)=[{&(0x7f0000006040)=""/251, 0xfb}, {&(0x7f00000001c0)=""/45, 0x2d}], 0x2}, 0x101}, {{&(0x7f00000061c0)=@phonet, 0x80, &(0x7f0000007400)=[{&(0x7f0000006240)=""/124, 0x7c}, {&(0x7f00000062c0)=""/206, 0xce}, {&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/40, 0x28}], 0x4, &(0x7f0000007440)=""/85, 0x55}, 0x2}], 0x6, 0x102, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40041) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000340)={{0x2, 0x8}, {0x8, 0xff}, 0x7, 0x4, 0x52}) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00008c6000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000040000000009, 0xffffffff, 0x1}], 0x1, 0x7, 0x0, 0x0, 0x0, 0x36}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20a3c0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x800, 0x9, 0x7}, 0xb, 0x9, &(0x7f0000000680)={{0x0, 0x2, 0x9, 0x2}, &(0x7f0000000640)={{0x10, 0x10001, 0x0, 0xfffffff7}, &(0x7f0000000600)={{0x8, 0xd, 0x213d524b, 0x2}, &(0x7f00000005c0)={{0x6, 0xfcd1, 0x0, 0x8000}}}}}, 0xffff9c38, &(0x7f0000007640)="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", 0x3}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m48.537241618s ago: executing program 1 (id=1105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x1000000) 2m48.289525465s ago: executing program 1 (id=1107): prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x87) syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x5c, 0xa, 0x68, 0x10, 0x17ef, 0x3098, 0x6c41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x9, 0xb0, 0x5, "", [{{0x9, 0x4, 0xbe, 0x6, 0x1, 0xff, 0xff, 0xff, 0x2, [], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x8, 0x95}}]}}]}}]}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) 2m45.144187147s ago: executing program 1 (id=1122): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000001740)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) fchdir(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r4, &(0x7f00000102c0)={0x2020}, 0x7) 2m44.813364166s ago: executing program 1 (id=1124): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005e40700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 2m44.46046242s ago: executing program 1 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d00)="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", 0x497}], 0x1}}], 0x1, 0x48841) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m44.045919729s ago: executing program 34 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000d00)="0a90c2b11081e14926d4e5cdfa803795c37b08f319738ca85d6b974cb8b376ff561f809c530b6f14310459b74d840fa32c14472d6db505e30863759bde693c8c73480583be8d2388273561bc6ef7dc4ba26dfec50031153f0ca992f12114af6b18d767e049924fa976c8bb6602ed8934bd757a5733adddac6228dd94dccd89664ed5b934b1c26af09839177082c36f389b9d486f9249012f9d01a2ae847d9c8aa7c673217e202b10a8d9c7dae0d371f99a66bc8a93298f014d9eb5a03e4fcd9888cd865488ffe6225629d249a03e9e992c405488deb3207f2a81681c870e7802b8c1a2cb850ff793448bdcf3aac015eccb2d6bd7e9542d0f10ec2aae30c03fc48e70e3f2f250e00c31c12927ef2edbb258c4c51b54d381dc04277b975481bbd40c12a5d17f495c0d5925d12980b732e94d989ed255254648701c1ae42648fc12df2ce08bfa4e4142a78e83f2e9b424d2ef3e6963c725684321709d008b7ea82bcbb04aa98b58bfb99932425edea2d50ca9f535942fcd3b37af02c121f16d5ee0d6ceab6b1de40b63142fc23e942f574c6ea54fd407977e6f8ad3f1fb81ce1aff28e89856e10d0426616c59cca687b28cdb329df64c8196aa81f4979a1c8007beb84969159fc56290a9c46343aa5391e14d0221d3e4a8e08b9e4b9c852601a56b898d2eef05c500d8bdb5a5af2862ff6c07e74c1da939c2657fd13ae2290dcd57013ba2e454ec6bd58780cc825cabf51908b4db5877dd431c0a9baa0765eb690e8e793fa1896bae56b85e3be7a40e8aebf9b1c125dd5dda61ccb5edcaea29c87cd80f05e435638c45b8e9e8e7af379166c70da210f8253e35ce8900aa68beb22f63b1f079e5a86f8e18073e9781c2146ba7d3a4641c17011c24307efb1154a22b2c2992899f9ee26c3b08ba0fa601118bf41dfb192023c714c68acaa1a8d1bccb9473290e612a20a6a5ec8f5ff25e1abd6c27ad9987f64c11cff35d7be056f3ca634213e6889c2b0c733c5b9988a5b5c43432a19cc27c71c5b886593f1033bae0b70636d3954e9979c4b5bb1f48963a4109d2fcc03907f49eda5f632a2dc4eda6337a09cb3dd44a6a3f46ac1ab69a0668bdbdc5360ee4eeb8743c200bd229447de78f0964575e009946dde54a460485964fe2021d55a9ead8d8207bc2f51d1142ad9c7d4635d5f11feda8a9988aff1694a944e6ef3962729d31e39718a8effb20d6ab009460d8326ff6f8b0efd944710bf329cc454d678573b6939e92193c96207e4ca423ad78245b42f659ffb3433ef0c4cbfbe7aee6e6528956ede057a214f1b7d4a9f66862656ea24a7cb456cca4ab0afdd7f034ca6e421742ec1bdd9b8ae56db7d038f147b0e54312513c1db5639cc099d642b4c3d3da0f345e4d06e6858b93df9ebf81cde086f47bc4ed6f687f288607da3e6b14be234cb6b13dee63966329a228decd3d2e550b332c0ab1e050c8d8d170554dd37fcb5ed6e1c89bbd59bfb226d264fb7174977dd77fcb5e630b91800863ed0c38e99ee4e3620c4bec6f0f237dd207e25582a88e7dd0a425f48a192af9ba2680f73a70f0278bd3a6585718cf4b283bdca437f91efe66f4c49d0804d5b2037772a3f53c0ba00016db4353ff8432ca56b0fcbd3dd2f17b42a1a32890d24072818087da", 0x497}], 0x1}}], 0x1, 0x48841) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.774158764s ago: executing program 4 (id=2190): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f3330102030109021200010000000009"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff0304060902210725", @ANYRESOCT=0x0], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000000c0)) 7.342391167s ago: executing program 4 (id=2202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x2400, 0x4000050}, 0x20008040) 7.280280493s ago: executing program 4 (id=2203): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca24ffffff556ea6e500"/26, 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0xffffffffffffff2a, 0x0, 0x2, 0xedd}}], 0x18}}], 0x2, 0x4800) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)='\r', 0x1}, {&(0x7f0000000100)="6bb78afd", 0x4}], 0x2, 0x0) tee(r0, r3, 0xfffffffffffffffd, 0x0) close(r0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x80, 0x700, 0x5, 0x10000, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x67, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@end, @noop, @ssrr={0x89, 0x23, 0xb2, [@multicast2, @empty, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010100, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000100)='PV', 0x2}], 0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x101, 0x1, 0x2}) syz_usb_control_io(r7, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.801504178s ago: executing program 3 (id=2215): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "397fea7946ae48816b657c5bb5ca9e10"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b189e1d8c50"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ifreq(r6, 0x8921, &(0x7f0000000140)={'erspan0\x00', @ifru_flags=0x800}) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 4.549419624s ago: executing program 3 (id=2217): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) io_setup(0x2ae1, &(0x7f0000000180)=0x0) io_submit(r1, 0x3, &(0x7f0000000980)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x40, r0, &(0x7f00000001c0)="20520fdd26bf4a7ce6cdcbc4af395590c42900eee3a1669387719013b2b2a3b4", 0x20, 0x0, 0x0, 0x2}, 0x0, 0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.330619661s ago: executing program 7 (id=2219): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x15) 4.169125618s ago: executing program 4 (id=2220): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x15) 3.564550674s ago: executing program 3 (id=2222): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x4000, 0x0, @local}, 0x10) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x69, 0x0, 0x8, [0x7, 0x5b, 0x4, 0x2, 0x4, 0x8d]}) close(0x3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) 3.397044682s ago: executing program 3 (id=2223): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 3.19952447s ago: executing program 5 (id=2224): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.987775233s ago: executing program 5 (id=2225): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x7, 0x0, @thr={&(0x7f0000000000)="a8000ac7800f4e553081311e802710c8377933b323669eee1c2bc4e0c1b2f5f507c56f381ae13cba62a49dea5dbbd03498b934681ac5ece17cd69ccd834a17a37b4f324630eea222989b5682709ec1a5bc6ce194aaf77692374af3d3c17f3b431425f0dea5c208a38c4d3a055817cacfb03120d71b493e2819945299b3cca9b5705051a75115ebfed2b51ad5d22453a843b28563d90ab4f2e35fb8fe2120a5a5ba78e519df83733dd6d6111c564aa9bafb53177bfaa554153bbf1bfe40bffdc8", &(0x7f0000000100)="ee85d16880228310f97f22da9b994b87a94032c4e21a7bb7e7f2b6cd5b87934fefb629a60f58f55bb215e567b3c1601ef6cc6b8905da7355913b5b8ef00e34c64983383be8e3b2a62f500cf9cd965042ddec99844627147660be26832ec1844fc6ac7ea7e937590050c3137ed232228c5ab93dd75ff353b19113f23b47938520d178a44d1189791aa9771389b430d9361353b86041ccab44d521881ed86712a03a656c48348a7d4e76d00de2b48a00986c97e595efee51"}}, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) 2.785484958s ago: executing program 5 (id=2226): unshare(0x28000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1000000000000, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0xa00, 0x0, 0x0, 0x4000000, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.581290612s ago: executing program 7 (id=2227): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "397fea7946ae48816b657c5bb5ca9e10"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b189e1d8c50"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ifreq(r6, 0x8921, &(0x7f0000000140)={'erspan0\x00', @ifru_flags=0x800}) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 2.390616454s ago: executing program 7 (id=2228): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, 0x0, 0x19}, 0x0) 2.189053727s ago: executing program 7 (id=2229): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x24}], 0x1, 0x0, 0x0, 0x40404c4}, 0x4014) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa241, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000f00)={0x1, 0x0, [{0x3c5, 0x0, 0x2}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f24b005f438b70e98fc500b1ecae5d16ee4bf7a55a094c19269685bb978bcdd6734c2aa6c911516b8efc976872a97858e46052735d5b872f35e7393c67d722e89a0a9ab6d3aa0ba889012fffb2c5828b37ef71e9f6fd08e5df9429e8b86c0828ec40c17cf34e1b8f7de07ff095ea27fd67dc4e7938bb45e9be26e67ee7d49312b07ae1b0234062d733b5c022926e44f7db37f076f8b"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r4], 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000003c0)) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x5) 2.175260392s ago: executing program 5 (id=2230): unshare(0x6020400) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff2, 0x4000010, r0, 0xfffff000) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$tipc(r1, &(0x7f0000000240)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) r2 = userfaultfd(0x80001) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x7, 0x6) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000000c0)={0xa, [0x8, 0x81, 0xe, 0x4, 0x6, 0x8, 0xc3, 0x1, 0x6, 0xb, 0xe, 0x2, 0x8000, 0x3, 0x200, 0x6, 0x2, 0x7, 0xc, 0x1, 0x9, 0x6, 0x3, 0x3, 0x0, 0x3, 0x6, 0x6, 0x2, 0x81, 0xa3, 0x8001, 0xc79, 0x0, 0x304c, 0xb, 0x3, 0x1000, 0x9, 0xf, 0x8, 0xfffa, 0x1400, 0x9, 0x40, 0x9, 0x7f, 0xa823], 0x4}) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27d3d93ca504bdd0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIC(r4, 0x5417, 0x0) ioctl$FIOCLEX(r2, 0x5451) getpid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r5, 0x90000000000002, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1, 0x2}) 2.132991464s ago: executing program 6 (id=2231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x1000000}}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 1.884651984s ago: executing program 6 (id=2232): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0xd00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x2040400) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 1.853341295s ago: executing program 4 (id=2233): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setns(r6, 0x24020000) r7 = syz_clone3(&(0x7f00000008c0)={0x117249580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0xe060400) r8 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r8, 0x0, &(0x7f00000001c0)=ANY=[], 0x24, 0x3) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"}) gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) rt_sigqueueinfo(r7, 0x20, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x909980000000000, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) pread64(r1, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 1.60667512s ago: executing program 7 (id=2234): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000080)=0xfffffffeffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0xfd, 0xf5, 0x800, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x40, 0x80, 0x800, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x80, 0x4, 0x4a, @private1, @rand_addr=' \x01\x00', 0x700, 0x7, 0x8, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @dev}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd2d, 0x25dfdbfb, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x2, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@empty, 0xb7e5c521993639aa}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x0, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x1, {@ip4=@remote, 0x800}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4040080) syz_emit_ethernet(0xa6, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc={0x4, {@snap={0x0, 0x0, "e8a7", "b295de", 0xf6, "2a39b2d4c5e5dd98b1d68ea1167f5f50a9ae3b754e26185d5ed27c7c0ba4c2d13b1173a95c2aa87c62f28ba8d6e263c7a2885605001b14c82e3fc2a95d0048f4fceb8687d9817ef0ebb909d2904142331f5e511d1b5496d567b15e8d2650e6076ef34a164e8aa2299136a3b576fa7569eac124ff411cfc0f3301fc9e0b67dabe2ec461b2e8cebccf60fa7b7209720b"}}}}}, &(0x7f00000005c0)={0x1, 0x2, [0x242, 0x3a2, 0xf33, 0xe27]}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$can_j1939(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x1d, r2, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18, &(0x7f00000006c0)={&(0x7f0000000680)}, 0x1, 0x0, 0x0, 0x8080}, 0x40010) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[{}, {}, {}], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x3, 0xa, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000980)={r7}) accept(r6, &(0x7f00000009c0)=@rc, &(0x7f0000000a40)=0x80) r8 = syz_open_dev$dri(&(0x7f0000000a80), 0xfff, 0x700c0) ioctl$DRM_IOCTL_AGP_INFO(r8, 0x80386433, &(0x7f0000000ac0)=""/4096) sendmsg$nl_route(r6, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@RTM_NEWNSID={0x1c, 0x58, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_NSID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2004c807) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000001bc0)={0xf000, 0x101000}) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, &(0x7f0000001c00)={r6}) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000500, 0xee01, &(0x7f0000001c40)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001c80)={0x0, 0x0, 0x8}, 0x8) write$cgroup_int(r6, &(0x7f0000001cc0)=0x8000000000000000, 0x12) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001d00), 0x200040, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@newqdisc={0x34, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x2}, {0xffff, 0x9}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xf2}}, @TCA_RATE={0x6, 0x5, {0x5, 0xef}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044080}, 0x8) r10 = syz_mount_image$fuse(&(0x7f0000001e40), &(0x7f0000001e80)='./file0\x00', 0x88008, &(0x7f0000001ec0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}, 0x1, 0x0, &(0x7f0000001f80)="9ade20c82baa79714737200c22317fb421db9b5f907e21e135a1c26b8051495b0aca87e493c6e2d49169be169bc226e81ff376827614e0cbd5882dcc78a77c933edd9372dec88d98494400a26c72f5ee1c5d00ffabf401559b99526d614aae74570ad67409c87a893585ead676745d53a8bc10981856d9fa357383b3242f6df0e5d966449624484c6d6b80b9ef65e2abed078670f6d16bd057f47fac") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x40106614, &(0x7f0000002040)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000002080)=0x3) ioctl$SNDCTL_DSP_GETFMTS(r9, 0x8004500b, &(0x7f00000020c0)=0x2bdb0bfb) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000002100)=0x4) 1.468747404s ago: executing program 5 (id=2235): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80940, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01'], 0xf4ffffff}) 1.468172733s ago: executing program 7 (id=2236): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x8004b709, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x10000022, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x210, 0x0, 0xfeffffff, 0x2e0, 0x0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'wg0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f0000000140)="c4", 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xd, 0x7}, {0xa, 0x10}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x104, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}, 0x1, 0x0, 0x0, 0x4001}, 0x4000810) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x6, 0x1, 0x0, 0x3e, 0x110}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.232367367s ago: executing program 5 (id=2237): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x15) 1.107957976s ago: executing program 6 (id=2238): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "397fea7946ae48816b657c5bb5ca9e10"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b189e1d8c50"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ifreq(r6, 0x8921, &(0x7f0000000140)={'erspan0\x00', @ifru_flags=0x800}) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 936.774516ms ago: executing program 6 (id=2239): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, 0x0, 0x19}, 0x0) 862.232578ms ago: executing program 6 (id=2240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000f80)={0x2, 0x2}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="400a0700000001a374"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x2e) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x800000, 0xffffffffffffffff, 0x5, 0xfffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="e8ffffffffffffffb7080000080000007b8af8ff00000020bfa200000000000007020000f8ffffffb703000008000000b70400001a0000e884000400820000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) 726.232683ms ago: executing program 3 (id=2241): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0xa220, 0xc11}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x8}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40805}, 0x4000010) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mincore(&(0x7f00000ee000/0x4000)=nil, 0x4000, &(0x7f0000000300)=""/211) 105.078329ms ago: executing program 4 (id=2242): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x1c, 0x1ffe, 0x0, 0x5, 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) syz_clone(0x100c0600, &(0x7f0000000140)="3c0574ad10127e877a55a3a73d0c1910baf48dba686a695de3544a8ad7b998a67dc8bdccefe0995cba3eee3256daea89445ee3fdbb3cba81bcf2acdf27139ddec28d7fb018a452050c0c38eefd5cbfdb777556275ae9b2b8c0eb7c1a4cdd98daae5fd4293ab475d896d8dc8b1b4fe9922f5f2bd295495c1a2c8e42f21eb8f76be235c5687f4b819c319e5d5e0e74edc2769c420078e981360853520b011be1fc213a9b2bde3f3d8ece9e7edac8e7ab721fe61f9ed568149f75a855c9", 0xbc, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 104.776785ms ago: executing program 3 (id=2243): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000380)={0x0, 0x0, 0x1, 0xfffffffffffffff7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000002) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000280)="1510dee780008e8084e0e6c9db04d24bdfdb8dd86bfc8849472b67a3dc4c56c54bd37758bb962003fb510dc7ef01bc7ca9cb9de13723dad5f799573474d1e9fd24ccc24e895a8b36c55b14b2e180184d3b96ba78556fcff2fae21e5f803910095b5e26813bac6da3b3dbd6da0c651d019da1fb0ac8a4108b4c733bc9288e8d940bdde88c168901f601b973a17f0ec3dce82adde6f68093757dec52f15f4a315c722cbf2d9e660b849ea4e5d642be9cf435f361bd4a767da581494e4584be897c1f8bb0ce684004f111edb4d705fbb148c3b2f3c18be3df25e988110fa63b6a4e51dd7ca289722df3d456d322cd0307fdcd598789504f0dfa8f", 0xf9}, {&(0x7f0000000c80)="224de3693d11eb5eecd7e3e6efeb76fc60ca231a7393035a5c34b78c9726ac4e3ef695a5fa8dd06c708b6b1570416b07726a1b6efc3c0d7ab7112a38999957257e36d76b0e62b71810523bbb7cac674ade0018f94a521443961c86f0188c859661c61e9ed5b710baf5c80aa43581bdb86c2c3cdbc5672e70d6b86fa4551a44713cb9ba73747c339a", 0x88}], 0x2}}], 0x1, 0x24040005) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)="0a3654caa054f0b362fcfa360636f0b3d653e8321291c92e7799ee8eaf5cabe7b6ebbe951b5e348dd7ba6ff8ce58346e7cf5f4f53d9b837a91150aa46f6b", 0x3e}, {&(0x7f00000007c0)="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", 0xfffffffffffffd84}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001540)="b0", 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e1f, 0x0, @mcast1, 0x4}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000600)="6ece796697c6f7d73ac938fcc8032a54f06e2a69c93ec7defd50847221090d9f2c21ef3cd50ebb5f0f4f11fa3e0ba83638f77054a6dd9a87c2e8d6140bde33c9dbcee7241c7f6ebb4e1d6461f2698458cc5a8967f4b7354ae3383c421767bd", 0x5f}], 0x1, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}], 0x3, 0x804) getsockname$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000844) 0s ago: executing program 6 (id=2244): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x24}], 0x1, 0x0, 0x0, 0x40404c4}, 0x4014) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa241, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000f00)={0x1, 0x0, [{0x3c5, 0x0, 0x2}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f24b005f438b70e98fc500b1ecae5d16ee4bf7a55a094c19269685bb978bcdd6734c2aa6c911516b8efc976872a97858e46052735d5b872f35e7393c67d722e89a0a9ab6d3aa0ba889012fffb2c5828b37ef71e9f6fd08e5df9429e8b86c0828ec40c17cf34e1b8f7de07ff095ea27fd67dc4e7938bb45e9be26e67ee7d49312b07ae1b0234062d733b5c022926e44f7db37f076f8b"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r4], 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000003c0)) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x5) kernel console output (not intermixed with test programs): [ 343.400952][T11087] mfill_atomic_copy+0x491/0x1590 [ 343.400978][T11087] ? __kernel_text_address+0xd/0x30 [ 343.401003][T11087] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.401032][T11087] ? __might_fault+0xaf/0x130 [ 343.401055][T11087] ? __might_fault+0xaf/0x130 [ 343.401084][T11087] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 343.401118][T11087] userfaultfd_ioctl+0x28d1/0x49d0 [ 343.401141][T11087] ? __kasan_slab_free+0x5c/0x80 [ 343.401168][T11087] ? kfree+0x1c5/0x640 [ 343.401186][T11087] ? tomoyo_path_number_perm+0x501/0x630 [ 343.401219][T11087] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 343.401270][T11087] ? kasan_quarantine_put+0xbb/0x1f0 [ 343.401302][T11087] ? tomoyo_path_number_perm+0x219/0x630 [ 343.401323][T11087] ? tomoyo_path_number_perm+0x219/0x630 [ 343.401346][T11087] ? do_vfs_ioctl+0x1166/0x1530 [ 343.401374][T11087] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 343.401411][T11087] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 343.401455][T11087] ? __fget_files+0x2a/0x420 [ 343.401478][T11087] ? __fget_files+0x2a/0x420 [ 343.401497][T11087] ? __fget_files+0x3a0/0x420 [ 343.401516][T11087] ? __fget_files+0x2a/0x420 [ 343.401539][T11087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 343.401564][T11087] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 343.401586][T11087] __se_sys_ioctl+0xfc/0x170 [ 343.401610][T11087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.401630][T11087] do_syscall_64+0x15f/0xf80 [ 343.401652][T11087] ? trace_irq_disable+0x3b/0x140 [ 343.401677][T11087] ? clear_bhb_loop+0x40/0x90 [ 343.401698][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.401716][T11087] RIP: 0033:0x7fbd42f9cdd9 [ 343.401731][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.401746][T11087] RSP: 002b:00007fbd43edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.401765][T11087] RAX: ffffffffffffffda RBX: 00007fbd43215fa0 RCX: 00007fbd42f9cdd9 [ 343.401777][T11087] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 343.401789][T11087] RBP: 00007fbd43edf090 R08: 0000000000000000 R09: 0000000000000000 [ 343.401800][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.401811][T11087] R13: 00007fbd43216038 R14: 00007fbd43215fa0 R15: 00007fbd4333fa48 [ 343.401840][T11087] [ 343.984135][ T5701] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 344.095431][T11092] x_tables: duplicate underflow at hook 1 [ 344.134314][ T5701] usb 5-1: device descriptor read/64, error -71 [ 344.383356][ T5701] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 344.499666][T11110] fuse: Unknown parameter 'smackfsdef' [ 344.513815][ T5701] usb 5-1: device descriptor read/64, error -71 [ 344.634442][ T5701] usb usb5-port1: attempt power cycle [ 344.773614][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 344.933507][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 344.949680][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.974451][ T5701] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 344.987745][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.993492][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.023358][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.034256][ T5701] usb 5-1: device descriptor read/8, error -71 [ 345.055589][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 345.082478][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.114857][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 345.129135][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 345.137421][ T24] usb 4-1: Manufacturer: syz [ 345.152099][ T24] usb 4-1: config 0 descriptor?? [ 345.189354][T11123] FAULT_INJECTION: forcing a failure. [ 345.189354][T11123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.202562][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.5.1658 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.202592][T11123] Tainted: [L]=SOFTLOCKUP [ 345.202598][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.202609][T11123] Call Trace: [ 345.202616][T11123] [ 345.202625][T11123] dump_stack_lvl+0xe8/0x150 [ 345.202650][T11123] should_fail_ex+0x412/0x560 [ 345.202698][T11123] _copy_to_user+0x31/0xb0 [ 345.202726][T11123] simple_read_from_buffer+0xe1/0x170 [ 345.202753][T11123] proc_fail_nth_read+0x1bb/0x230 [ 345.202779][T11123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.202805][T11123] ? rw_verify_area+0x2a6/0x4d0 [ 345.202827][T11123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.202851][T11123] vfs_read+0x20c/0xa70 [ 345.202879][T11123] ? __pfx___mutex_lock+0x10/0x10 [ 345.202904][T11123] ? __pfx_vfs_read+0x10/0x10 [ 345.202928][T11123] ? __fget_files+0x2a/0x420 [ 345.202953][T11123] ? __fget_files+0x3a0/0x420 [ 345.202971][T11123] ? __fget_files+0x2a/0x420 [ 345.202999][T11123] ksys_read+0x150/0x270 [ 345.203025][T11123] ? __pfx_ksys_read+0x10/0x10 [ 345.203056][T11123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.203076][T11123] do_syscall_64+0x15f/0xf80 [ 345.203099][T11123] ? trace_irq_disable+0x3b/0x140 [ 345.203124][T11123] ? clear_bhb_loop+0x40/0x90 [ 345.203146][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.203164][T11123] RIP: 0033:0x7ff92795d60e [ 345.203181][T11123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.203195][T11123] RSP: 002b:00007ff9288c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.203214][T11123] RAX: ffffffffffffffda RBX: 00007ff9288c26c0 RCX: 00007ff92795d60e [ 345.203228][T11123] RDX: 000000000000000f RSI: 00007ff9288c20a0 RDI: 0000000000000004 [ 345.203239][T11123] RBP: 00007ff9288c2090 R08: 0000000000000000 R09: 0000000000000000 [ 345.203250][T11123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.203261][T11123] R13: 00007ff927c16038 R14: 00007ff927c15fa0 R15: 00007ff927d3fa48 [ 345.203288][T11123] [ 345.283677][ T5701] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 345.493979][ T5701] usb 5-1: device descriptor read/8, error -71 [ 345.506530][ T24] rc_core: IR keymap rc-hauppauge not found [ 345.546487][ T24] Registered IR keymap rc-empty [ 345.556409][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.581477][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.590419][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.599165][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.616279][ T5701] usb usb5-port1: unable to enumerate USB device [ 345.618906][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 345.648296][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 345.668674][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.703843][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.733683][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.773493][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.803427][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.823458][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.843442][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.863582][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.893638][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.913374][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 345.948961][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 345.968279][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 345.982328][ T24] usb 4-1: USB disconnect, device number 72 [ 346.580990][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 346.622119][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 347.020480][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 347.089387][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 347.364463][T11189] netlink: 'syz.4.1678': attribute type 10 has an invalid length. [ 347.644844][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.673891][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.693952][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.708167][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.781682][T11200] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:19999 [ 347.815798][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.833840][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.939669][T11203] netlink: 264 bytes leftover after parsing attributes in process `syz.7.1684'. [ 348.089580][T11206] Option ' ' to dns_resolver key: bad/missing value [ 348.472640][T11218] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1690'. [ 348.483147][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.495130][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.893761][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.905289][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.045062][T11234] geneve2: entered promiscuous mode [ 349.050388][T11234] geneve2: entered allmulticast mode [ 350.032132][T11275] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1709'. [ 350.122420][T11277] fuse: Unknown parameter 'grnupd' [ 350.293679][ T5701] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 350.456676][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.491453][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.531267][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 350.547241][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.595282][ T5701] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.616158][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.650244][ T5701] usb 5-1: config 0 descriptor?? [ 350.919424][ T5688] IPVS: starting estimator thread 0... [ 351.033623][T11299] IPVS: using max 30 ests per chain, 72000 per kthread [ 351.101672][ T5701] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 351.686035][T11333] FAULT_INJECTION: forcing a failure. [ 351.686035][T11333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.708554][ T5701] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 351.725386][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.6.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.725412][T11333] Tainted: [L]=SOFTLOCKUP [ 351.725419][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.725430][T11333] Call Trace: [ 351.725438][T11333] [ 351.725446][T11333] dump_stack_lvl+0xe8/0x150 [ 351.725471][T11333] should_fail_ex+0x412/0x560 [ 351.725500][T11333] _copy_from_user+0x2d/0xb0 [ 351.725529][T11333] generic_map_update_batch+0x69a/0x990 [ 351.725558][T11333] ? __pfx_generic_map_update_batch+0x10/0x10 [ 351.725579][T11333] ? __fget_files+0x2a/0x420 [ 351.725606][T11333] ? __pfx_generic_map_update_batch+0x10/0x10 [ 351.725627][T11333] bpf_map_do_batch+0x39b/0x630 [ 351.725651][T11333] __sys_bpf+0x7c1/0x950 [ 351.725678][T11333] ? __pfx___sys_bpf+0x10/0x10 [ 351.725716][T11333] ? ksys_write+0x242/0x270 [ 351.725741][T11333] ? __pfx_ksys_write+0x10/0x10 [ 351.725769][T11333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.725789][T11333] __x64_sys_bpf+0x7c/0x90 [ 351.725813][T11333] do_syscall_64+0x15f/0xf80 [ 351.725836][T11333] ? trace_irq_disable+0x3b/0x140 [ 351.725860][T11333] ? clear_bhb_loop+0x40/0x90 [ 351.725882][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.725901][T11333] RIP: 0033:0x7efdf039cdd9 [ 351.725917][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.725932][T11333] RSP: 002b:00007efdf1187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.725951][T11333] RAX: ffffffffffffffda RBX: 00007efdf0615fa0 RCX: 00007efdf039cdd9 [ 351.725964][T11333] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 351.725975][T11333] RBP: 00007efdf1187090 R08: 0000000000000000 R09: 0000000000000000 [ 351.725986][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.725996][T11333] R13: 00007efdf0616038 R14: 00007efdf0615fa0 R15: 00007efdf073fa48 [ 351.726024][T11333] [ 351.951680][ T5717] usb 5-1: USB disconnect, device number 66 [ 352.023165][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 352.047286][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.058266][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.068911][ T5701] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 352.080390][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.142193][ T5701] usb 4-1: config 0 descriptor?? [ 352.193549][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.273003][T11357] x_tables: unsorted underflow at hook 3 [ 352.580833][ T5701] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 352.761915][T11378] FAULT_INJECTION: forcing a failure. [ 352.761915][T11378] name failslab, interval 1, probability 0, space 0, times 0 [ 352.810847][T11378] CPU: 0 UID: 0 PID: 11378 Comm: syz.7.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.810866][T11378] Tainted: [L]=SOFTLOCKUP [ 352.810870][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.810877][T11378] Call Trace: [ 352.810882][T11378] [ 352.810887][T11378] dump_stack_lvl+0xe8/0x150 [ 352.810905][T11378] should_fail_ex+0x412/0x560 [ 352.810921][T11378] should_failslab+0xa8/0x100 [ 352.810937][T11378] ? skb_clone+0x212/0x3a0 [ 352.810952][T11378] kmem_cache_alloc_noprof+0x87/0x650 [ 352.810965][T11378] ? apparmor_capable+0x126/0x170 [ 352.810984][T11378] skb_clone+0x212/0x3a0 [ 352.810998][T11378] ? nfnetlink_rcv+0x4b0/0x27b0 [ 352.811012][T11378] nfnetlink_rcv+0x4de/0x27b0 [ 352.811035][T11378] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.811050][T11378] ? __local_bh_enable_ip+0xd0/0x130 [ 352.811060][T11378] ? __dev_queue_xmit+0x2b6/0x3950 [ 352.811076][T11378] ? __dev_queue_xmit+0x1fe5/0x3950 [ 352.811089][T11378] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 352.811107][T11378] ? __dev_queue_xmit+0x2b6/0x3950 [ 352.811124][T11378] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 352.811143][T11378] ? ref_tracker_free+0x693/0x840 [ 352.811158][T11378] ? __pfx_ref_tracker_free+0x10/0x10 [ 352.811179][T11378] ? skb_clone+0x246/0x3a0 [ 352.811195][T11378] ? __netlink_deliver_tap+0x807/0x850 [ 352.811209][T11378] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.811225][T11378] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.811237][T11378] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.811253][T11378] netlink_unicast+0x75c/0x8e0 [ 352.811270][T11378] netlink_sendmsg+0x813/0xb40 [ 352.811293][T11378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.811308][T11378] ? aa_sock_msg_perm+0xf1/0x1b0 [ 352.811322][T11378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.811337][T11378] ____sys_sendmsg+0x972/0x9f0 [ 352.811351][T11378] ? __might_fault+0xaf/0x130 [ 352.811367][T11378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.811384][T11378] ? import_iovec+0x73/0xa0 [ 352.811401][T11378] ___sys_sendmsg+0x2a5/0x360 [ 352.811414][T11378] ? __lock_acquire+0x6b5/0x2cf0 [ 352.811427][T11378] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.811457][T11378] ? __fget_files+0x2a/0x420 [ 352.811469][T11378] ? __fget_files+0x3a0/0x420 [ 352.811485][T11378] __x64_sys_sendmsg+0x1bd/0x2a0 [ 352.811500][T11378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.811529][T11378] ? __pfx_ksys_write+0x10/0x10 [ 352.811559][T11378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.811579][T11378] do_syscall_64+0x15f/0xf80 [ 352.811601][T11378] ? trace_irq_disable+0x3b/0x140 [ 352.811625][T11378] ? clear_bhb_loop+0x40/0x90 [ 352.811647][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.811664][T11378] RIP: 0033:0x7f629b19cdd9 [ 352.811682][T11378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.811697][T11378] RSP: 002b:00007f629c076028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.811716][T11378] RAX: ffffffffffffffda RBX: 00007f629b415fa0 RCX: 00007f629b19cdd9 [ 352.811729][T11378] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 352.811740][T11378] RBP: 00007f629c076090 R08: 0000000000000000 R09: 0000000000000000 [ 352.811751][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.811762][T11378] R13: 00007f629b416038 R14: 00007f629b415fa0 R15: 00007f629b53fa48 [ 352.811790][T11378] [ 353.532394][ T24] usb 4-1: USB disconnect, device number 73 [ 353.650153][T11386] FAULT_INJECTION: forcing a failure. [ 353.650153][T11386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.704906][T11386] CPU: 0 UID: 0 PID: 11386 Comm: syz.7.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.704935][T11386] Tainted: [L]=SOFTLOCKUP [ 353.704942][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.704952][T11386] Call Trace: [ 353.704960][T11386] [ 353.704968][T11386] dump_stack_lvl+0xe8/0x150 [ 353.704993][T11386] should_fail_ex+0x412/0x560 [ 353.705024][T11386] _copy_from_user+0x2d/0xb0 [ 353.705043][T11386] generic_map_update_batch+0x648/0x990 [ 353.705062][T11386] ? __pfx_generic_map_update_batch+0x10/0x10 [ 353.705079][T11386] ? __pfx_generic_map_update_batch+0x10/0x10 [ 353.705091][T11386] bpf_map_do_batch+0x39b/0x630 [ 353.705104][T11386] __sys_bpf+0x7c1/0x950 [ 353.705122][T11386] ? __pfx___sys_bpf+0x10/0x10 [ 353.705136][T11386] ? kmem_cache_free+0x182/0x650 [ 353.705157][T11386] ? ksys_write+0x1fc/0x270 [ 353.705173][T11386] ? __pfx_ksys_write+0x10/0x10 [ 353.705189][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.705200][T11386] __x64_sys_bpf+0x7c/0x90 [ 353.705214][T11386] do_syscall_64+0x15f/0xf80 [ 353.705229][T11386] ? trace_irq_disable+0x3b/0x140 [ 353.705244][T11386] ? clear_bhb_loop+0x40/0x90 [ 353.705257][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.705267][T11386] RIP: 0033:0x7f629b19cdd9 [ 353.705277][T11386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.705285][T11386] RSP: 002b:00007f629c076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.705297][T11386] RAX: ffffffffffffffda RBX: 00007f629b415fa0 RCX: 00007f629b19cdd9 [ 353.705304][T11386] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 353.705311][T11386] RBP: 00007f629c076090 R08: 0000000000000000 R09: 0000000000000000 [ 353.705317][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.705323][T11386] R13: 00007f629b416038 R14: 00007f629b415fa0 R15: 00007f629b53fa48 [ 353.705337][T11386] [ 354.205399][T11398] FAULT_INJECTION: forcing a failure. [ 354.205399][T11398] name failslab, interval 1, probability 0, space 0, times 0 [ 354.248207][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.7.1739 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.248235][T11398] Tainted: [L]=SOFTLOCKUP [ 354.248242][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.248252][T11398] Call Trace: [ 354.248260][T11398] [ 354.248271][T11398] dump_stack_lvl+0xe8/0x150 [ 354.248296][T11398] should_fail_ex+0x412/0x560 [ 354.248323][T11398] should_failslab+0xa8/0x100 [ 354.248354][T11398] __kmalloc_noprof+0xe8/0x760 [ 354.248376][T11398] ? usb_hcd_submit_urb+0x790/0x1b70 [ 354.248399][T11398] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.248421][T11398] usb_hcd_submit_urb+0x790/0x1b70 [ 354.248441][T11398] usbfs_start_wait_urb+0x166/0x470 [ 354.248453][T11398] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 354.248469][T11398] ? snoop_urb+0x32/0x200 [ 354.248481][T11398] do_proc_control+0x7d6/0xe40 [ 354.248498][T11398] proc_control+0xd6/0x130 [ 354.248512][T11398] ? __pfx_proc_control+0x10/0x10 [ 354.248532][T11398] usbdev_ioctl+0xc3d/0x2120 [ 354.248551][T11398] ? __pfx_usbdev_ioctl+0x10/0x10 [ 354.248563][T11398] ? __fget_files+0x2a/0x420 [ 354.248575][T11398] ? __fget_files+0x3a0/0x420 [ 354.248586][T11398] ? __fget_files+0x2a/0x420 [ 354.248600][T11398] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.248615][T11398] ? __pfx_usbdev_ioctl+0x10/0x10 [ 354.248629][T11398] __se_sys_ioctl+0xfc/0x170 [ 354.248644][T11398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.248656][T11398] do_syscall_64+0x15f/0xf80 [ 354.248676][T11398] ? trace_irq_disable+0x3b/0x140 [ 354.248699][T11398] ? clear_bhb_loop+0x40/0x90 [ 354.248712][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.248722][T11398] RIP: 0033:0x7f629b19cdd9 [ 354.248732][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.248741][T11398] RSP: 002b:00007f629c076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.248752][T11398] RAX: ffffffffffffffda RBX: 00007f629b415fa0 RCX: 00007f629b19cdd9 [ 354.248759][T11398] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 354.248765][T11398] RBP: 00007f629c076090 R08: 0000000000000000 R09: 0000000000000000 [ 354.248771][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.248777][T11398] R13: 00007f629b416038 R14: 00007f629b415fa0 R15: 00007f629b53fa48 [ 354.248792][T11398] [ 354.855310][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.877570][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.051193][T11414] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1745'. [ 355.318390][T11422] FAULT_INJECTION: forcing a failure. [ 355.318390][T11422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.341120][T11422] CPU: 1 UID: 0 PID: 11422 Comm: syz.6.1748 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.341151][T11422] Tainted: [L]=SOFTLOCKUP [ 355.341158][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.341171][T11422] Call Trace: [ 355.341178][T11422] [ 355.341187][T11422] dump_stack_lvl+0xe8/0x150 [ 355.341215][T11422] should_fail_ex+0x412/0x560 [ 355.341245][T11422] _copy_from_user+0x2d/0xb0 [ 355.341273][T11422] ___sys_sendmsg+0x1c6/0x360 [ 355.341309][T11422] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.341332][T11422] ? __lock_acquire+0x6b5/0x2cf0 [ 355.341395][T11422] __sys_sendmmsg+0x27c/0x4e0 [ 355.341427][T11422] ? __pfx___sys_sendmmsg+0x10/0x10 [ 355.341450][T11422] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 355.341500][T11422] ? ksys_write+0x242/0x270 [ 355.341529][T11422] ? __pfx_ksys_write+0x10/0x10 [ 355.341561][T11422] __x64_sys_sendmmsg+0xa0/0xc0 [ 355.341587][T11422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.341608][T11422] do_syscall_64+0x15f/0xf80 [ 355.341632][T11422] ? trace_irq_disable+0x3b/0x140 [ 355.341658][T11422] ? clear_bhb_loop+0x40/0x90 [ 355.341681][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.341708][T11422] RIP: 0033:0x7efdf039cdd9 [ 355.341727][T11422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.341743][T11422] RSP: 002b:00007efdf1187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.341764][T11422] RAX: ffffffffffffffda RBX: 00007efdf0615fa0 RCX: 00007efdf039cdd9 [ 355.341777][T11422] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 355.341791][T11422] RBP: 00007efdf1187090 R08: 0000000000000000 R09: 0000000000000000 [ 355.341802][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.341814][T11422] R13: 00007efdf0616038 R14: 00007efdf0615fa0 R15: 00007efdf073fa48 [ 355.341843][T11422] [ 356.593531][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 356.621103][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.638159][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.684320][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 356.743689][ T5701] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 356.757011][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 356.765600][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 356.833540][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 356.896664][ T5701] usb 7-1: device descriptor read/64, error -32 [ 357.014050][ T5701] raw-gadget.0 gadget.6: failed to queue suspend event [ 357.038222][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 357.133908][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 357.214628][ T5701] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 357.230284][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 357.237697][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 357.314196][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 357.384472][ T5701] usb 7-1: device descriptor read/64, error -32 [ 357.514207][ T5701] raw-gadget.0 gadget.6: failed to queue suspend event [ 357.530118][ T5701] usb usb7-port1: attempt power cycle [ 357.544176][ T5701] raw-gadget.0 gadget.6: failed to queue disconnect event [ 357.560769][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 357.644720][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 357.659722][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 357.884284][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 357.967368][ T5701] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 358.003600][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 358.010770][ T5701] usb 7-1: device descriptor read/8, error -32 [ 358.124738][ T5701] raw-gadget.0 gadget.6: failed to queue suspend event [ 358.149779][ T5701] raw-gadget.0 gadget.6: failed to queue reset event [ 358.163439][ T5688] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 358.243778][ T5701] raw-gadget.0 gadget.6: failed to queue resume event [ 358.303437][ T5701] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 358.324300][ T5688] usb 5-1: device descriptor read/64, error -71 [ 358.344491][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 358.351725][ T5701] usb 7-1: device descriptor read/8, error -32 [ 358.463610][ T5701] raw-gadget.0 gadget.6: failed to queue suspend event [ 358.473902][ T5701] usb usb7-port1: unable to enumerate USB device [ 358.573524][ T5688] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 358.733650][ T5688] usb 5-1: device descriptor read/64, error -71 [ 358.854209][ T5688] usb usb5-port1: attempt power cycle [ 359.226712][ T5688] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 359.241347][T11502] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 359.262963][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.273874][ T5688] usb 5-1: device descriptor read/8, error -71 [ 359.280940][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.298211][T11502] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1772'. [ 359.309572][T11502] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 359.533634][ T5688] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 359.555247][ T5688] usb 5-1: device descriptor read/8, error -71 [ 359.673882][ T5688] usb usb5-port1: unable to enumerate USB device [ 360.001557][T11525] trusted_key: encrypted_key: master key parameter '' is invalid [ 360.466465][T11532] syzkaller0: entered promiscuous mode [ 360.467725][T11541] netlink: 'syz.7.1785': attribute type 1 has an invalid length. [ 360.472047][T11532] syzkaller0: entered allmulticast mode [ 360.498457][T11526] tipc: Started in network mode [ 360.515386][T11526] tipc: Node identity 6af1e2b8695b, cluster identity 9 [ 360.523873][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1785'. [ 360.547623][T11526] tipc: Enabled bearer , priority 0 [ 360.567501][T11533] syzkaller0: entered promiscuous mode [ 360.577322][T11533] syzkaller0: entered allmulticast mode [ 360.981589][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 361.599892][T11561] netlink: 212356 bytes leftover after parsing attributes in process `syz.7.1788'. [ 361.823011][T11561] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 363.992221][T11542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.011866][T11533] tipc: Resetting bearer [ 364.041254][T11521] tipc: Resetting bearer [ 364.120965][T11521] tipc: Disabling bearer [ 364.141021][ T5708] tipc: Node number set to 61530808 [ 364.151672][T11575] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1792'. [ 364.454911][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.477082][T11583] FAULT_INJECTION: forcing a failure. [ 364.477082][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.511107][T11586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 364.520478][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.3.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.520505][T11583] Tainted: [L]=SOFTLOCKUP [ 364.520515][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.520525][T11583] Call Trace: [ 364.520532][T11583] [ 364.520545][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.520540][T11583] dump_stack_lvl+0xe8/0x150 [ 364.520568][T11583] should_fail_ex+0x412/0x560 [ 364.520591][T11583] _copy_from_user+0x2d/0xb0 [ 364.520614][T11583] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 364.520641][T11583] ? __lock_acquire+0x6b5/0x2cf0 [ 364.520666][T11583] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 364.520689][T11583] ? _raw_spin_unlock_irq+0x2e/0x50 [ 364.520733][T11583] ? __task_pid_nr_ns+0x28/0x470 [ 364.520760][T11583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.520779][T11583] do_syscall_64+0x15f/0xf80 [ 364.520810][T11583] ? clear_bhb_loop+0x40/0x90 [ 364.520830][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.520847][T11583] RIP: 0033:0x7fbd42f3e159 [ 364.520863][T11583] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 364.520878][T11583] RSP: 002b:00007fbd43edea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 364.520897][T11583] RAX: ffffffffffffffda RBX: 00007fbd43215fa0 RCX: 00007fbd42f3e159 [ 364.520910][T11583] RDX: 00007fbd43edea80 RSI: 00007fbd43edebb0 RDI: 0000000000000021 [ 364.520921][T11583] RBP: 00007fbd43edf090 R08: 0000000000000000 R09: 0000000000000000 [ 364.520932][T11583] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 364.520942][T11583] R13: 00007fbd43216038 R14: 00007fbd43215fa0 R15: 00007fbd4333fa48 [ 364.520969][T11583] [ 364.845739][ T5688] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 364.962923][T11591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.971733][T11591] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.013860][ T5688] usb 5-1: Using ep0 maxpacket: 8 [ 365.021495][ T5688] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 365.041037][ T5688] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 365.050818][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.059321][ T5688] usb 5-1: Product: syz [ 365.063745][ T5688] usb 5-1: Manufacturer: syz [ 365.068420][ T5688] usb 5-1: SerialNumber: syz [ 365.077635][ T5688] usb 5-1: config 0 descriptor?? [ 365.086139][ T5688] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 365.096715][T11591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.107206][T11591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.121400][T11591] veth1_vlan: left promiscuous mode [ 365.127973][T11591] veth0_vlan: left promiscuous mode [ 365.136416][T11591] veth0_vlan: entered promiscuous mode [ 365.144411][T11591] veth1_vlan: entered promiscuous mode [ 365.159037][T11591] veth1_macvtap: left promiscuous mode [ 365.166300][T11591] veth0_macvtap: left promiscuous mode [ 365.172660][T11591] veth0_macvtap: entered promiscuous mode [ 365.179835][T11591] veth1_macvtap: entered promiscuous mode [ 365.192556][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.200944][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.218359][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.282816][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.352926][T11591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.361778][T11591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.370240][T11591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.381578][T11591] bond3: entered allmulticast mode [ 365.386924][T11591] bridge0: entered allmulticast mode [ 365.394151][T11591] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 365.407776][T11591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.429374][ T12] bond4: (slave bridge1): link status up again after 0 ms [ 365.453447][ T12] bond4: (slave bridge1): link status up again after 0 ms [ 365.473105][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.482018][ T48] bond4: (slave bridge1): link status up again after 0 ms [ 365.492885][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.503863][ T48] bond4: (slave bridge1): link status up again after 0 ms [ 365.514752][ T48] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 365.532767][ T48] bond4: (slave bridge1): link status up again after 0 ms [ 365.548203][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.557920][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.564345][ T663] bond4: (slave bridge1): link status up again after 0 ms [ 365.575620][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.599065][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.612251][ T57] bond4: (slave bridge1): link status up again after 0 ms [ 365.625620][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 365.651294][ T663] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.672803][ T663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.776022][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 365.948220][T11609] sctp: [Deprecated]: syz.7.1803 (pid 11609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.948220][T11609] Use struct sctp_sack_info instead [ 365.995502][T11609] program syz.7.1803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.151776][T11618] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 366.474521][ T5632] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 366.796928][ T5688] gspca_zc3xx: reg_w_i err -71 [ 367.262183][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.297185][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.380098][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.413699][ T5688] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 367.421708][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.440482][ T5688] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 367.480230][ T5688] usb 5-1: USB disconnect, device number 71 [ 367.553654][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.569926][T11654] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.1818'. [ 367.607467][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.654258][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.775649][ T5620] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 367.836242][T11657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'. [ 367.953841][ T5620] usb 4-1: Using ep0 maxpacket: 16 [ 367.961011][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.982668][ T5620] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.000193][ T5620] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 368.013606][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.027766][ T5620] usb 4-1: Product: syz [ 368.036460][ T5620] usb 4-1: Manufacturer: syz [ 368.048797][ T5620] usb 4-1: SerialNumber: syz [ 368.067175][ T5620] usb 4-1: config 0 descriptor?? [ 368.459281][ T5708] usb 4-1: USB disconnect, device number 74 [ 369.202026][T11689] netlink: 'syz.3.1829': attribute type 13 has an invalid length. [ 369.233354][T11689] netlink: 'syz.3.1829': attribute type 17 has an invalid length. [ 369.827269][T11692] SET target dimension over the limit! [ 369.921339][T11694] FAULT_INJECTION: forcing a failure. [ 369.921339][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 369.939079][T11694] CPU: 0 UID: 0 PID: 11694 Comm: syz.3.1832 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.939105][T11694] Tainted: [L]=SOFTLOCKUP [ 369.939111][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.939122][T11694] Call Trace: [ 369.939129][T11694] [ 369.939137][T11694] dump_stack_lvl+0xe8/0x150 [ 369.939163][T11694] should_fail_ex+0x412/0x560 [ 369.939190][T11694] should_failslab+0xa8/0x100 [ 369.939216][T11694] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 369.939240][T11694] ? __alloc_skb+0x186/0x7d0 [ 369.939260][T11694] ? __alloc_skb+0x1d0/0x7d0 [ 369.939285][T11694] ? __local_bh_enable_ip+0xd0/0x130 [ 369.939307][T11694] __alloc_skb+0x1d0/0x7d0 [ 369.939332][T11694] alloc_skb_with_frags+0xc8/0x760 [ 369.939364][T11694] sock_alloc_send_pskb+0x878/0x990 [ 369.939404][T11694] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 369.939426][T11694] ? kasan_quarantine_put+0xbb/0x1f0 [ 369.939448][T11694] ? lockdep_hardirqs_on+0x7a/0x110 [ 369.939474][T11694] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 369.939493][T11694] ? kmem_cache_free+0x182/0x650 [ 369.939516][T11694] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 369.939544][T11694] unix_dgram_sendmsg+0x460/0x18d0 [ 369.939567][T11694] ? css_rstat_updated+0x23a/0x530 [ 369.939587][T11694] ? __pfx_css_rstat_updated+0x10/0x10 [ 369.939615][T11694] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 369.939638][T11694] ? count_memcg_event_mm+0x21/0x260 [ 369.939660][T11694] ? aa_sock_msg_perm+0xda/0x1b0 [ 369.939682][T11694] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 369.939705][T11694] ____sys_sendmsg+0x972/0x9f0 [ 369.939728][T11694] ? __might_fault+0xaf/0x130 [ 369.939753][T11694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.939783][T11694] ? import_iovec+0x73/0xa0 [ 369.939811][T11694] ___sys_sendmsg+0x2a5/0x360 [ 369.939839][T11694] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.939860][T11694] ? __lock_acquire+0x6b5/0x2cf0 [ 369.939923][T11694] __sys_sendmmsg+0x27c/0x4e0 [ 369.939951][T11694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 369.939972][T11694] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 369.940016][T11694] ? ksys_write+0x242/0x270 [ 369.940041][T11694] ? __pfx_ksys_write+0x10/0x10 [ 369.940069][T11694] __x64_sys_sendmmsg+0xa0/0xc0 [ 369.940092][T11694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.940110][T11694] do_syscall_64+0x15f/0xf80 [ 369.940133][T11694] ? trace_irq_disable+0x3b/0x140 [ 369.940158][T11694] ? clear_bhb_loop+0x40/0x90 [ 369.940173][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.940183][T11694] RIP: 0033:0x7fbd42f9cdd9 [ 369.940194][T11694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.940204][T11694] RSP: 002b:00007fbd43edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.940222][T11694] RAX: ffffffffffffffda RBX: 00007fbd43215fa0 RCX: 00007fbd42f9cdd9 [ 369.940235][T11694] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 369.940246][T11694] RBP: 00007fbd43edf090 R08: 0000000000000000 R09: 0000000000000000 [ 369.940257][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.940275][T11694] R13: 00007fbd43216038 R14: 00007fbd43215fa0 R15: 00007fbd4333fa48 [ 369.940304][T11694] [ 370.273073][T11696] xt_TPROXY: Can be used only with -p tcp or -p udp [ 370.333067][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.384738][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.483576][ T1126] net_ratelimit: 36 callbacks suppressed [ 370.483593][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 370.553384][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 370.615043][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 370.717581][ T24] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 370.735185][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 370.745147][ T24] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 370.776068][ T24] usb 5-1: config 171 has no interface number 0 [ 370.789199][ T24] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 370.812837][ T24] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 370.853464][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 370.853811][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 370.893352][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.912629][ T24] usb 5-1: Product: syz [ 370.927305][ T24] usb 5-1: Manufacturer: syz [ 370.941832][ T24] usb 5-1: SerialNumber: syz [ 370.965443][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 370.966974][T11698] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 371.103774][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 371.239293][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 371.309474][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 371.385096][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 371.398729][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 371.473464][ T5717] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 371.497913][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 371.511650][T11743] netlink: 'syz.7.1850': attribute type 4 has an invalid length. [ 371.523686][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 371.534800][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 371.584874][ T5708] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 371.613570][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 371.665299][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1844'. [ 371.680335][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 371.683441][ T5717] usb 7-1: device descriptor read/64, error -32 [ 371.778467][ T5708] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 371.787870][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.802608][ T5708] usb 4-1: Product: syz [ 371.812509][ T5708] usb 4-1: Manufacturer: syz [ 371.819476][ T5708] usb 4-1: SerialNumber: syz [ 371.830507][ T5717] raw-gadget.0 gadget.6: failed to queue suspend event [ 371.849244][ T5708] usb 4-1: config 0 descriptor?? [ 371.858838][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 371.878531][ T5708] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 075 [ 371.953578][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 372.023466][ T5717] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 372.032177][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 372.039511][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 372.113657][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 372.121536][ T24] ath6kl: Failed to submit usb control message: -110 [ 372.138453][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 372.156298][ T24] ath6kl: Unable to send get target info: -110 [ 372.173423][ T5717] usb 7-1: device descriptor read/64, error -32 [ 372.183896][ T24] ath6kl: Failed to init ath6kl core: -110 [ 372.203258][ T24] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 372.280491][ T5708] (null): failure reading functionality [ 372.286575][ T5717] raw-gadget.0 gadget.6: failed to queue suspend event [ 372.294883][ T5708] i2c i2c-1: failure reading functionality [ 372.301009][ T5717] usb usb7-port1: attempt power cycle [ 372.318157][ T5717] raw-gadget.0 gadget.6: failed to queue disconnect event [ 372.336663][ T5708] i2c i2c-1: connected i2c-tiny-usb device [ 372.349075][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 372.362196][ T5708] usb 4-1: USB disconnect, device number 75 [ 372.445116][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 372.476164][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 372.706105][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 372.784644][ T5717] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 372.823589][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 372.830823][ T5717] usb 7-1: device descriptor read/8, error -32 [ 372.920322][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.935919][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.944542][ T5717] raw-gadget.0 gadget.6: failed to queue suspend event [ 372.952838][ T5717] raw-gadget.0 gadget.6: failed to queue reset event [ 372.964335][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.974058][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.033601][ T5717] raw-gadget.0 gadget.6: failed to queue resume event [ 373.060231][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'. [ 373.092494][T11774] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1857'. [ 373.102283][ T5717] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 373.130152][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 373.137452][ T5717] usb 7-1: device descriptor read/8, error -32 [ 373.254274][ T5717] raw-gadget.0 gadget.6: failed to queue suspend event [ 373.266436][ T5717] usb usb7-port1: unable to enumerate USB device [ 373.467266][ T5688] usb 5-1: USB disconnect, device number 72 [ 373.650979][T11786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.713252][T11786] xt_CT: No such helper "netbios-ns" [ 374.163412][ T5688] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 374.346633][ T5688] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 374.367269][ T5688] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 374.392977][ T5688] usb 4-1: config 150 has no interface number 0 [ 374.409104][ T5688] usb 4-1: config 150 interface 204 has no altsetting 0 [ 374.431222][ T5688] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 374.460114][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.485787][ T5688] usb 4-1: Product: syz [ 374.499340][ T5688] usb 4-1: Manufacturer: syz [ 374.504555][ T5688] usb 4-1: SerialNumber: syz [ 374.736744][ T5688] xr_serial 4-1:150.204: skipping garbage [ 374.743593][ T5688] xr_serial 4-1:150.204: xr_serial converter detected [ 375.352883][ T5688] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 375.386007][ T5688] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 375.426475][ T5688] usb 4-1: USB disconnect, device number 76 [ 375.457385][ T5688] xr_serial 4-1:150.204: device disconnected [ 375.536433][ T663] net_ratelimit: 33 callbacks suppressed [ 375.536449][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 375.627792][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.645716][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.668209][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.686574][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.697019][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 375.727463][T11818] netlink: 'syz.5.1873': attribute type 13 has an invalid length. [ 375.737329][T11817] netlink: 'syz.5.1873': attribute type 13 has an invalid length. [ 375.941890][T11824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.028724][T11824] xt_CT: No such helper "netbios-ns" [ 376.036020][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1876'. [ 376.120060][T11831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'. [ 376.150746][T11829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.160072][T11831] bond2: entered promiscuous mode [ 376.173622][T11831] bond2: entered allmulticast mode [ 376.368492][T11841] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1881'. [ 376.485808][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 376.923567][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 378.437050][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.446465][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.636641][T11829] dummy0: entered promiscuous mode [ 378.641947][T11829] dummy0: entered allmulticast mode [ 378.647928][T11829] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 378.666958][T11854] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1885'. [ 378.683711][T11854] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 378.743855][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 378.782218][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.872072][T11859] xt_CT: No such helper "netbios-ns" [ 378.879419][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 378.906624][T11865] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1889'. [ 379.004738][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 379.029418][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1891'. [ 379.030420][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1891'. [ 379.123904][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 379.144596][ T5717] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 379.152857][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.179712][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.303509][ T5717] usb 5-1: device descriptor read/64, error -71 [ 379.309806][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 379.434407][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 379.543756][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 379.563429][ T5717] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 379.703404][ T5717] usb 5-1: device descriptor read/64, error -71 [ 379.783973][T11893] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1896'. [ 379.816463][ T5717] usb usb5-port1: attempt power cycle [ 379.982635][T11897] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 380.104968][T11901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.120105][T11903] FAULT_INJECTION: forcing a failure. [ 380.120105][T11903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.142513][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.169910][T11903] CPU: 0 UID: 0 PID: 11903 Comm: syz.7.1901 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.169941][T11903] Tainted: [L]=SOFTLOCKUP [ 380.169948][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.169958][T11903] Call Trace: [ 380.169966][T11903] [ 380.169973][T11903] dump_stack_lvl+0xe8/0x150 [ 380.169999][T11903] should_fail_ex+0x412/0x560 [ 380.170027][T11903] _copy_from_user+0x2d/0xb0 [ 380.170053][T11903] generic_map_update_batch+0x69a/0x990 [ 380.170082][T11903] ? __pfx_generic_map_update_batch+0x10/0x10 [ 380.170104][T11903] ? __fget_files+0x2a/0x420 [ 380.170130][T11903] ? __pfx_generic_map_update_batch+0x10/0x10 [ 380.170152][T11903] bpf_map_do_batch+0x39b/0x630 [ 380.170176][T11903] __sys_bpf+0x7c1/0x950 [ 380.170203][T11903] ? __pfx___sys_bpf+0x10/0x10 [ 380.170242][T11903] ? ksys_write+0x242/0x270 [ 380.170268][T11903] ? __pfx_ksys_write+0x10/0x10 [ 380.170294][T11903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.170314][T11903] __x64_sys_bpf+0x7c/0x90 [ 380.170337][T11903] do_syscall_64+0x15f/0xf80 [ 380.170369][T11903] ? trace_irq_disable+0x3b/0x140 [ 380.170394][T11903] ? clear_bhb_loop+0x40/0x90 [ 380.170415][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.170433][T11903] RIP: 0033:0x7f629b19cdd9 [ 380.170450][T11903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.170465][T11903] RSP: 002b:00007f629c076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.170484][T11903] RAX: ffffffffffffffda RBX: 00007f629b415fa0 RCX: 00007f629b19cdd9 [ 380.170497][T11903] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 380.170508][T11903] RBP: 00007f629c076090 R08: 0000000000000000 R09: 0000000000000000 [ 380.170517][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.170527][T11903] R13: 00007f629b416038 R14: 00007f629b415fa0 R15: 00007f629b53fa48 [ 380.170556][T11903] [ 380.194424][T11901] xt_CT: No such helper "netbios-ns" [ 380.376484][ T5717] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 380.403211][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.425515][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.426423][ T5717] usb 5-1: device descriptor read/8, error -71 [ 380.468808][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.509360][T11908] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.1904'. [ 380.574952][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.592809][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.607181][ T57] net_ratelimit: 8 callbacks suppressed [ 380.607196][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 380.640005][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.656997][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.693368][ T5717] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 380.727457][ T5717] usb 5-1: device descriptor read/8, error -71 [ 380.764144][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 380.864445][ T5717] usb usb5-port1: unable to enumerate USB device [ 380.883870][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 381.003820][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 381.113488][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 381.223358][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 381.344765][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 381.473519][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 381.589433][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 381.703532][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 382.035027][T11943] bond3: option packets_per_slave: invalid value (2147483647) [ 382.073408][T11943] bond3: option packets_per_slave: allowed values 0 - 65535 [ 382.098149][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.107062][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.118848][T11943] bond3 (unregistering): Released all slaves [ 382.299202][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 382.375749][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 382.444676][ T5688] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 382.457962][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 382.465504][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 382.536242][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 382.605244][ T5688] usb 7-1: device descriptor read/64, error -32 [ 382.713802][ T5688] raw-gadget.0 gadget.6: failed to queue suspend event [ 382.740200][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 382.822978][T11972] FAULT_INJECTION: forcing a failure. [ 382.822978][T11972] name failslab, interval 1, probability 0, space 0, times 0 [ 382.836164][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 382.846284][T11972] CPU: 0 UID: 0 PID: 11972 Comm: syz.5.1929 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.846302][T11972] Tainted: [L]=SOFTLOCKUP [ 382.846307][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.846313][T11972] Call Trace: [ 382.846317][T11972] [ 382.846322][T11972] dump_stack_lvl+0xe8/0x150 [ 382.846341][T11972] should_fail_ex+0x412/0x560 [ 382.846368][T11972] should_failslab+0xa8/0x100 [ 382.846396][T11972] __kmalloc_noprof+0xe8/0x760 [ 382.846412][T11972] ? tomoyo_encode+0x28b/0x550 [ 382.846429][T11972] tomoyo_encode+0x28b/0x550 [ 382.846445][T11972] tomoyo_realpath_from_path+0x58d/0x5d0 [ 382.846464][T11972] ? tomoyo_path_number_perm+0x219/0x630 [ 382.846476][T11972] tomoyo_path_number_perm+0x246/0x630 [ 382.846489][T11972] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 382.846502][T11972] ? sb_end_write+0xe9/0x1c0 [ 382.846514][T11972] ? vfs_write+0x9bc/0xb90 [ 382.846544][T11972] ? ksys_write+0x1fc/0x270 [ 382.846561][T11972] security_file_ioctl+0xc3/0x2a0 [ 382.846573][T11972] __se_sys_ioctl+0x47/0x170 [ 382.846589][T11972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.846600][T11972] do_syscall_64+0x15f/0xf80 [ 382.846615][T11972] ? trace_irq_disable+0x3b/0x140 [ 382.846630][T11972] ? clear_bhb_loop+0x40/0x90 [ 382.846643][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.846653][T11972] RIP: 0033:0x7ff92799cdd9 [ 382.846663][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.846672][T11972] RSP: 002b:00007ff9288c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.846684][T11972] RAX: ffffffffffffffda RBX: 00007ff927c15fa0 RCX: 00007ff92799cdd9 [ 382.846691][T11972] RDX: 00000000000000bb RSI: 000000000000ae03 RDI: 0000000000000003 [ 382.846697][T11972] RBP: 00007ff9288c2090 R08: 0000000000000000 R09: 0000000000000000 [ 382.846704][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.846710][T11972] R13: 00007ff927c16038 R14: 00007ff927c15fa0 R15: 00007ff927d3fa48 [ 382.846725][T11972] [ 382.846740][T11972] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.123869][ T5688] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 383.131561][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 383.146858][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 383.169981][T11974] netlink: 'syz.3.1930': attribute type 4 has an invalid length. [ 383.237745][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 383.323454][ T5688] usb 7-1: device descriptor read/64, error -32 [ 383.338190][T11980] netlink: 'syz.5.1932': attribute type 4 has an invalid length. [ 383.434151][ T5688] raw-gadget.0 gadget.6: failed to queue suspend event [ 383.442243][ T5688] usb usb7-port1: attempt power cycle [ 383.448479][ T5688] raw-gadget.0 gadget.6: failed to queue disconnect event [ 383.456104][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 383.533450][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 383.549063][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 383.764535][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 383.833535][ T5688] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 383.873629][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 383.880776][ T5688] usb 7-1: device descriptor read/8, error -32 [ 383.993503][ T5688] raw-gadget.0 gadget.6: failed to queue suspend event [ 384.010895][ T5688] raw-gadget.0 gadget.6: failed to queue reset event [ 384.093657][ T5688] raw-gadget.0 gadget.6: failed to queue resume event [ 384.152849][T11993] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1937'. [ 384.166860][ T5688] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 384.215978][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 384.223166][ T5688] usb 7-1: device descriptor read/8, error -32 [ 384.333184][ T29] audit: type=1326 audit(1778379038.965:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 384.363916][ T5688] raw-gadget.0 gadget.6: failed to queue suspend event [ 384.389875][ T5688] usb usb7-port1: unable to enumerate USB device [ 384.411778][ T29] audit: type=1326 audit(1778379039.025:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 384.508669][ T29] audit: type=1326 audit(1778379039.025:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 384.717059][ T29] audit: type=1326 audit(1778379039.025:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 384.754056][ T29] audit: type=1326 audit(1778379039.025:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 384.915546][ T29] audit: type=1326 audit(1778379039.025:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 385.156684][ T29] audit: type=1326 audit(1778379039.795:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 385.222752][ T29] audit: type=1326 audit(1778379039.795:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 385.297293][ T29] audit: type=1326 audit(1778379039.835:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 385.360642][ T29] audit: type=1326 audit(1778379039.835:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11994 comm="syz.6.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf039cdd9 code=0x7ffc0000 [ 385.685928][ T663] net_ratelimit: 33 callbacks suppressed [ 385.685942][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 385.823532][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 385.955020][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 386.083600][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 386.203520][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 386.211347][T12040] syzkaller0: entered promiscuous mode [ 386.218122][T12040] syzkaller0: entered allmulticast mode [ 386.290606][T12042] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 386.323495][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 386.459046][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 386.595363][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 386.713594][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 386.975338][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1960'. [ 387.252305][T12075] netlink: 'syz.6.1964': attribute type 1 has an invalid length. [ 387.415392][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.429168][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.429325][T12080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1965'. [ 387.471114][T12079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.484367][T12079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.989437][T12085] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1968'. [ 388.192114][T12088] xt_hashlimit: size too large, truncated to 1048576 [ 388.585643][ T5744] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 388.634440][ T5688] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 388.753526][ T5744] usb 4-1: Using ep0 maxpacket: 32 [ 388.769372][ T5744] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 388.793900][ T5744] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 388.808754][ T5688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.820933][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 388.835962][ T5688] usb 5-1: config 0 has no interfaces? [ 388.847019][ T5744] usb 4-1: Product: syz [ 388.858811][ T5688] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.870200][ T5744] usb 4-1: Manufacturer: syz [ 388.883330][ T5744] usb 4-1: SerialNumber: syz [ 388.891930][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.911188][ T5744] usb 4-1: config 0 descriptor?? [ 388.933591][T12094] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 388.954754][ T5688] usb 5-1: config 0 descriptor?? [ 388.964823][ T5744] hub 4-1:0.0: bad descriptor, ignoring hub [ 388.977156][ T5744] hub 4-1:0.0: probe with driver hub failed with error -5 [ 389.182838][ T5620] usb 5-1: USB disconnect, device number 77 [ 389.678236][T12114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.690688][T12114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.805000][T12082] usb 4-1: reset high-speed USB device number 77 using dummy_hcd [ 390.009036][T12083] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 390.174177][T12132] KVM: debugfs: duplicate directory 12132-4 [ 390.186073][ T5744] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 390.196217][T12132] FAULT_INJECTION: forcing a failure. [ 390.196217][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 390.209662][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.5.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.209687][T12132] Tainted: [L]=SOFTLOCKUP [ 390.209694][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.209704][T12132] Call Trace: [ 390.209711][T12132] [ 390.209718][T12132] dump_stack_lvl+0xe8/0x150 [ 390.209742][T12132] should_fail_ex+0x412/0x560 [ 390.209768][T12132] should_failslab+0xa8/0x100 [ 390.209795][T12132] __kmalloc_cache_noprof+0x88/0x660 [ 390.209820][T12132] ? kvm_arch_vcpu_create+0x2c8/0x920 [ 390.209843][T12132] kvm_arch_vcpu_create+0x2c8/0x920 [ 390.209868][T12132] kvm_vm_ioctl_create_vcpu+0x428/0x930 [ 390.209896][T12132] kvm_vm_ioctl+0x893/0xd50 [ 390.209917][T12132] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 390.209954][T12132] ? kasan_quarantine_put+0xbb/0x1f0 [ 390.209982][T12132] ? tomoyo_path_number_perm+0x219/0x630 [ 390.210004][T12132] ? tomoyo_path_number_perm+0x219/0x630 [ 390.210025][T12132] ? do_vfs_ioctl+0x1166/0x1530 [ 390.210052][T12132] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 390.210078][T12132] ? vfs_write+0x9bc/0xb90 [ 390.210131][T12132] ? ksys_write+0x1fc/0x270 [ 390.210159][T12132] ? bpf_lsm_file_ioctl+0x9/0x20 [ 390.210184][T12132] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 390.210204][T12132] __se_sys_ioctl+0xfc/0x170 [ 390.210227][T12132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.210251][T12132] do_syscall_64+0x15f/0xf80 [ 390.210275][T12132] ? trace_irq_disable+0x3b/0x140 [ 390.210299][T12132] ? clear_bhb_loop+0x40/0x90 [ 390.210320][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.210336][T12132] RIP: 0033:0x7ff92799cdd9 [ 390.210352][T12132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.210366][T12132] RSP: 002b:00007ff9288c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.210383][T12132] RAX: ffffffffffffffda RBX: 00007ff927c15fa0 RCX: 00007ff92799cdd9 [ 390.210396][T12132] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 390.210406][T12132] RBP: 00007ff9288c2090 R08: 0000000000000000 R09: 0000000000000000 [ 390.210416][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.210426][T12132] R13: 00007ff927c16038 R14: 00007ff927c15fa0 R15: 00007ff927d3fa48 [ 390.210451][T12132] [ 390.451692][ T5688] usb 4-1: USB disconnect, device number 77 [ 390.523407][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 390.530369][ T5744] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 390.539926][ T5744] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.569677][ T5744] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 390.598485][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.632715][ T5744] usb 5-1: Product: syz [ 390.647001][ T5744] usb 5-1: Manufacturer: syz [ 390.648712][ T5717] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 390.676671][ T5744] usb 5-1: SerialNumber: syz [ 390.676923][ T5717] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.711195][ T5744] usb 5-1: config 0 descriptor?? [ 390.735255][ T5744] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 390.784744][ T57] net_ratelimit: 30 callbacks suppressed [ 390.784760][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 390.856763][T12141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.876149][T12141] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 390.903348][ T5708] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 390.923971][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 390.932562][ T5744] gspca_sunplus: reg_r err -32 [ 391.022735][T12138] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1987'. [ 391.043152][T12138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.055815][T12138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.065113][T12138] bond0 (unregistering): Released all slaves [ 391.077747][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.087939][ T5708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 391.097050][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 391.104265][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.115050][ T5708] usb 4-1: config 0 descriptor?? [ 391.123103][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 391.203680][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 391.313404][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 391.323101][ T5708] pwc: send_video_command error -71 [ 391.332083][ T5708] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 391.339731][ T5708] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 391.354573][ T5708] usb 4-1: USB disconnect, device number 78 [ 391.423559][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 391.533859][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 391.663506][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 391.779131][T12160] netlink: 'syz.5.1996': attribute type 10 has an invalid length. [ 391.783787][ T5688] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 391.803680][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 391.913673][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 391.933407][ T5744] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 391.947284][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.974310][ T5688] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 391.994292][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.015378][ T5688] usb 4-1: config 0 descriptor?? [ 392.029458][ T5688] pwc: Askey VC010 type 2 USB webcam detected. [ 392.429382][ T5688] pwc: recv_control_msg error -32 req 02 val 2b00 [ 392.441627][ T5688] pwc: recv_control_msg error -32 req 02 val 2700 [ 392.461476][ T5688] pwc: recv_control_msg error -32 req 02 val 2c00 [ 392.477810][ T5688] pwc: recv_control_msg error -32 req 04 val 1000 [ 392.494399][ T5688] pwc: recv_control_msg error -32 req 04 val 1300 [ 392.506665][ T5688] pwc: recv_control_msg error -32 req 04 val 1400 [ 392.518834][ T5688] pwc: recv_control_msg error -32 req 02 val 2000 [ 392.531482][ T5688] pwc: recv_control_msg error -32 req 02 val 2100 [ 392.542095][ T5688] pwc: recv_control_msg error -32 req 04 val 1500 [ 392.550624][ T5688] pwc: recv_control_msg error -32 req 02 val 2500 [ 392.563071][ T5688] pwc: recv_control_msg error -71 req 02 val 2400 [ 392.578333][ T5688] pwc: recv_control_msg error -71 req 02 val 2600 [ 392.587450][ T5688] pwc: recv_control_msg error -71 req 02 val 2900 [ 392.594711][ T5688] pwc: recv_control_msg error -71 req 02 val 2800 [ 392.601944][ T5688] pwc: recv_control_msg error -71 req 04 val 1100 [ 392.609851][ T5688] pwc: recv_control_msg error -71 req 04 val 1200 [ 392.621723][ T5688] pwc: Registered as video103. [ 392.634899][ T5688] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 392.671146][ T5688] usb 4-1: USB disconnect, device number 79 [ 392.981541][ T24] usb 5-1: USB disconnect, device number 78 [ 393.266336][T12190] pim6reg: entered allmulticast mode [ 393.391115][T12190] pim6reg: left allmulticast mode [ 393.713519][ T5688] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 393.897053][ T5688] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 393.906411][ T5688] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 393.918441][ T5688] usb 5-1: config 1 has no interface number 0 [ 393.936770][ T5688] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.959191][ T5688] usb 5-1: config 1 interface 188 has no altsetting 0 [ 393.987886][ T5688] usb 5-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 393.997343][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.013125][ T5688] usb 5-1: Product: syz [ 394.020920][ T5688] usb 5-1: Manufacturer: syz [ 394.028768][ T5688] usb 5-1: SerialNumber: syz [ 394.091461][ T5688] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 394.134355][T12208] input: syz0 as /devices/virtual/input/input30 [ 394.348901][ T5688] snd-usb-audio 5-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 394.424618][ T6544] udevd[6544]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.374047][T12238] FAULT_INJECTION: forcing a failure. [ 395.374047][T12238] name failslab, interval 1, probability 0, space 0, times 0 [ 395.414166][T12238] CPU: 0 UID: 0 PID: 12238 Comm: syz.6.2015 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.414188][T12238] Tainted: [L]=SOFTLOCKUP [ 395.414192][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.414199][T12238] Call Trace: [ 395.414203][T12238] [ 395.414208][T12238] dump_stack_lvl+0xe8/0x150 [ 395.414225][T12238] should_fail_ex+0x412/0x560 [ 395.414247][T12238] should_failslab+0xa8/0x100 [ 395.414273][T12238] __kmalloc_noprof+0xe8/0x760 [ 395.414297][T12238] ? tomoyo_encode+0x28b/0x550 [ 395.414325][T12238] tomoyo_encode+0x28b/0x550 [ 395.414348][T12238] tomoyo_realpath_from_path+0x58d/0x5d0 [ 395.414367][T12238] ? tomoyo_path_number_perm+0x219/0x630 [ 395.414378][T12238] tomoyo_path_number_perm+0x246/0x630 [ 395.414391][T12238] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.414405][T12238] ? sb_end_write+0xe9/0x1c0 [ 395.414417][T12238] ? vfs_write+0x9bc/0xb90 [ 395.414447][T12238] ? ksys_write+0x1fc/0x270 [ 395.414464][T12238] security_file_ioctl+0xc3/0x2a0 [ 395.414476][T12238] __se_sys_ioctl+0x47/0x170 [ 395.414491][T12238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.414501][T12238] do_syscall_64+0x15f/0xf80 [ 395.414516][T12238] ? trace_irq_disable+0x3b/0x140 [ 395.414531][T12238] ? clear_bhb_loop+0x40/0x90 [ 395.414544][T12238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.414554][T12238] RIP: 0033:0x7efdf039cdd9 [ 395.414564][T12238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.414572][T12238] RSP: 002b:00007efdf1187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.414584][T12238] RAX: ffffffffffffffda RBX: 00007efdf0615fa0 RCX: 00007efdf039cdd9 [ 395.414591][T12238] RDX: 00000000000000bb RSI: 000000000000ae03 RDI: 0000000000000003 [ 395.414598][T12238] RBP: 00007efdf1187090 R08: 0000000000000000 R09: 0000000000000000 [ 395.414603][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.414609][T12238] R13: 00007efdf0616038 R14: 00007efdf0615fa0 R15: 00007efdf073fa48 [ 395.414625][T12238] [ 395.414975][T12238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.856890][ T12] net_ratelimit: 32 callbacks suppressed [ 395.856960][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 395.953124][T12246] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 396.003419][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 396.113833][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 396.243688][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 396.336302][T12253] FAULT_INJECTION: forcing a failure. [ 396.336302][T12253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.359603][T12253] CPU: 0 UID: 0 PID: 12253 Comm: syz.3.2020 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.359628][T12253] Tainted: [L]=SOFTLOCKUP [ 396.359633][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.359642][T12253] Call Trace: [ 396.359650][T12253] [ 396.359657][T12253] dump_stack_lvl+0xe8/0x150 [ 396.359681][T12253] should_fail_ex+0x412/0x560 [ 396.359715][T12253] _copy_from_user+0x2d/0xb0 [ 396.359737][T12253] generic_map_update_batch+0x69a/0x990 [ 396.359754][T12253] ? __pfx_generic_map_update_batch+0x10/0x10 [ 396.359771][T12253] ? __pfx_generic_map_update_batch+0x10/0x10 [ 396.359784][T12253] bpf_map_do_batch+0x39b/0x630 [ 396.359797][T12253] __sys_bpf+0x7c1/0x950 [ 396.359813][T12253] ? __pfx___sys_bpf+0x10/0x10 [ 396.359827][T12253] ? kmem_cache_free+0x182/0x650 [ 396.359848][T12253] ? ksys_write+0x1fc/0x270 [ 396.359864][T12253] ? __pfx_ksys_write+0x10/0x10 [ 396.359880][T12253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.359891][T12253] __x64_sys_bpf+0x7c/0x90 [ 396.359905][T12253] do_syscall_64+0x15f/0xf80 [ 396.359920][T12253] ? trace_irq_disable+0x3b/0x140 [ 396.359935][T12253] ? clear_bhb_loop+0x40/0x90 [ 396.359947][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.359959][T12253] RIP: 0033:0x7fbd42f9cdd9 [ 396.359969][T12253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.359978][T12253] RSP: 002b:00007fbd43edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.359990][T12253] RAX: ffffffffffffffda RBX: 00007fbd43215fa0 RCX: 00007fbd42f9cdd9 [ 396.359997][T12253] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 396.360003][T12253] RBP: 00007fbd43edf090 R08: 0000000000000000 R09: 0000000000000000 [ 396.360009][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.360016][T12253] R13: 00007fbd43216038 R14: 00007fbd43215fa0 R15: 00007fbd4333fa48 [ 396.360030][T12253] [ 396.560670][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 396.701939][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 396.934295][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 396.993862][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 397.131837][ T24] usb 5-1: USB disconnect, device number 79 [ 397.157325][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 397.202394][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 397.202404][ T29] audit: type=1326 audit(1778379051.835:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.285486][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 397.331583][ T29] audit: type=1326 audit(1778379051.835:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.402330][ T29] audit: type=1326 audit(1778379051.835:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.433736][ T1126] bond4: (slave bridge1): failed to get link speed/duplex [ 397.553718][ T29] audit: type=1326 audit(1778379051.835:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.598694][T12267] syzkaller0: entered promiscuous mode [ 397.606325][T12268] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.2025'. [ 397.620688][T12267] syzkaller0: entered allmulticast mode [ 397.678442][ T29] audit: type=1326 audit(1778379051.835:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.708998][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 397.749262][ T29] audit: type=1326 audit(1778379051.875:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.776109][ T29] audit: type=1326 audit(1778379051.875:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.807438][T12271] veth0_macvtap: left promiscuous mode [ 397.822427][ T29] audit: type=1326 audit(1778379051.875:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.869982][ T29] audit: type=1326 audit(1778379051.875:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 397.932670][ T29] audit: type=1326 audit(1778379051.885:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12257 comm="syz.3.2022" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbd42f9cdd9 code=0x7ffc0000 [ 398.315523][T12285] xt_hashlimit: size too large, truncated to 1048576 [ 398.503343][ T5744] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 398.665826][T12293] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2034'. [ 398.681730][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 398.692517][ T5744] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.703684][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.718433][ T5744] usb 5-1: config 0 descriptor?? [ 398.738901][ T5744] cp210x 5-1:0.0: cp210x converter detected [ 398.840913][T12297] loop9: detected capacity change from 0 to 2640 [ 398.856635][T12298] netlink: 'syz.3.2035': attribute type 62 has an invalid length. [ 398.871197][T12297] Buffer I/O error on dev loop9, logical block 0, async page read [ 398.889295][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.889785][T12300] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 398.908243][T12300] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 398.926686][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.941952][T12300] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 398.942030][T12300] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 398.942129][T12300] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 398.942214][T12300] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 398.942291][T12300] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 398.942370][T12300] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 398.942465][T12300] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 399.344035][ T5744] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 399.357519][ T5744] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 399.398303][ T5744] usb 5-1: cp210x converter now attached to ttyUSB0 [ 399.410632][ T5744] usb 5-1: USB disconnect, device number 80 [ 399.450031][ T5744] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 399.450340][ T5744] cp210x 5-1:0.0: device disconnected [ 399.822750][T12316] binder: 12315:12316 unknown command 0 [ 399.822765][T12316] binder: 12315:12316 ioctl c0306201 2000000001c0 returned -22 [ 400.759293][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.792721][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.878673][T12343] vivid-006: disconnect [ 400.976550][T12349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.344172][ T6251] net_ratelimit: 25 callbacks suppressed [ 401.344190][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 401.608846][T12338] vivid-006: reconnect [ 402.173786][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 403.218607][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 403.218623][ T29] audit: type=1326 audit(1778379057.855:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12396 comm="syz.4.2058" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06ee59cdd9 code=0x0 [ 403.243718][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 403.674737][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 403.863419][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 404.213701][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 404.357203][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 404.450749][T12435] netlink: 'syz.6.2065': attribute type 10 has an invalid length. [ 404.502059][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 404.636137][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 404.719031][T12448] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2070'. [ 404.776136][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 404.995307][T12456] netlink: 'syz.6.2072': attribute type 10 has an invalid length. [ 405.263760][ T993] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 405.301737][T12468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.332948][T12468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.424655][ T993] usb 4-1: device descriptor read/64, error -71 [ 405.467105][T12476] netlink: 212356 bytes leftover after parsing attributes in process `syz.7.2077'. [ 405.600189][T12476] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 405.693788][ T993] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 405.834144][ T993] usb 4-1: device descriptor read/64, error -71 [ 405.943712][ T993] usb usb4-port1: attempt power cycle [ 406.295572][ T993] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 406.334519][ T993] usb 4-1: device descriptor read/8, error -71 [ 406.366112][ T663] net_ratelimit: 13 callbacks suppressed [ 406.366128][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 406.526033][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 406.583385][ T993] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 406.624653][ T993] usb 4-1: device descriptor read/8, error -71 [ 406.663555][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 406.744390][ T993] usb usb4-port1: unable to enumerate USB device [ 406.784871][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 406.903589][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 406.953371][ T5744] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 407.025863][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 407.082507][T12531] FAULT_INJECTION: forcing a failure. [ 407.082507][T12531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.123335][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.7.2088 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.123363][T12531] Tainted: [L]=SOFTLOCKUP [ 407.123369][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.123380][T12531] Call Trace: [ 407.123387][T12531] [ 407.123395][T12531] dump_stack_lvl+0xe8/0x150 [ 407.123410][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 407.123422][T12531] should_fail_ex+0x412/0x560 [ 407.123448][T12531] _copy_from_iter+0x1d3/0x1670 [ 407.123470][T12531] ? rcu_is_watching+0x15/0xb0 [ 407.123496][T12531] ? __pfx__copy_from_iter+0x10/0x10 [ 407.123525][T12531] ? netlink_sendmsg+0x650/0xb40 [ 407.123550][T12531] ? skb_put+0x11b/0x210 [ 407.123574][T12531] netlink_sendmsg+0x6c0/0xb40 [ 407.123604][T12531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.123629][T12531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.123652][T12531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.123677][T12531] ____sys_sendmsg+0x972/0x9f0 [ 407.123699][T12531] ? __might_fault+0xaf/0x130 [ 407.123727][T12531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.123757][T12531] ? import_iovec+0x73/0xa0 [ 407.123783][T12531] ___sys_sendmsg+0x2a5/0x360 [ 407.123804][T12531] ? __lock_acquire+0x6b5/0x2cf0 [ 407.123826][T12531] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.123878][T12531] ? __fget_files+0x2a/0x420 [ 407.123896][T12531] ? __fget_files+0x3a0/0x420 [ 407.123931][T12531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 407.123957][T12531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.123988][T12531] ? __pfx_ksys_write+0x10/0x10 [ 407.124017][T12531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.124037][T12531] do_syscall_64+0x15f/0xf80 [ 407.124058][T12531] ? trace_irq_disable+0x3b/0x140 [ 407.124082][T12531] ? clear_bhb_loop+0x40/0x90 [ 407.124102][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.124119][T12531] RIP: 0033:0x7f629b19cdd9 [ 407.124137][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.124151][T12531] RSP: 002b:00007f629c076028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.124171][T12531] RAX: ffffffffffffffda RBX: 00007f629b415fa0 RCX: 00007f629b19cdd9 [ 407.124183][T12531] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 407.124195][T12531] RBP: 00007f629c076090 R08: 0000000000000000 R09: 0000000000000000 [ 407.124205][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.124215][T12531] R13: 00007f629b416038 R14: 00007f629b415fa0 R15: 00007f629b53fa48 [ 407.124243][T12531] [ 407.213681][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2089'. [ 407.240167][ T5744] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 407.400676][ T5744] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.421017][ T5744] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 407.430614][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.446471][ T5744] usb 5-1: Product: syz [ 407.466111][ T5744] usb 5-1: Manufacturer: syz [ 407.472856][ T5744] usb 5-1: SerialNumber: syz [ 407.479848][ T57] netdevsim netdevsim6 «Z: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.488697][ T57] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.497887][ T57] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.510520][ T5744] usb 5-1: config 0 descriptor?? [ 407.515874][ T57] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.528311][ T5744] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 407.545107][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 407.653354][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 407.763387][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 407.873653][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 408.313676][T12559] xt_TCPMSS: Only works on TCP SYN packets [ 408.381804][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.398639][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.943651][ T5744] gspca_sunplus: reg_w_1 err -71 [ 408.952388][ T5744] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 409.000513][ T5744] usb 5-1: USB disconnect, device number 81 [ 409.035387][T12568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.061232][T12568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.358118][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.370929][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.380401][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.380943][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.769815][T12593] syzkaller0: entered promiscuous mode [ 409.775821][T12593] syzkaller0: entered allmulticast mode [ 409.794351][T12593] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2110'. [ 410.059987][T12598] FAULT_INJECTION: forcing a failure. [ 410.059987][T12598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.074044][T12598] CPU: 1 UID: 0 PID: 12598 Comm: syz.6.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.074071][T12598] Tainted: [L]=SOFTLOCKUP [ 410.074078][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.074088][T12598] Call Trace: [ 410.074095][T12598] [ 410.074103][T12598] dump_stack_lvl+0xe8/0x150 [ 410.074128][T12598] should_fail_ex+0x412/0x560 [ 410.074155][T12598] _copy_from_user+0x2d/0xb0 [ 410.074178][T12598] generic_map_update_batch+0x648/0x990 [ 410.074208][T12598] ? __pfx_generic_map_update_batch+0x10/0x10 [ 410.074237][T12598] ? __pfx_generic_map_update_batch+0x10/0x10 [ 410.074257][T12598] bpf_map_do_batch+0x39b/0x630 [ 410.074278][T12598] __sys_bpf+0x7c1/0x950 [ 410.074301][T12598] ? __pfx___sys_bpf+0x10/0x10 [ 410.074324][T12598] ? kmem_cache_free+0x182/0x650 [ 410.074357][T12598] ? ksys_write+0x1fc/0x270 [ 410.074388][T12598] ? __pfx_ksys_write+0x10/0x10 [ 410.074411][T12598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.074427][T12598] __x64_sys_bpf+0x7c/0x90 [ 410.074447][T12598] do_syscall_64+0x15f/0xf80 [ 410.074465][T12598] ? trace_irq_disable+0x3b/0x140 [ 410.074487][T12598] ? clear_bhb_loop+0x40/0x90 [ 410.074505][T12598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.074520][T12598] RIP: 0033:0x7efdf039cdd9 [ 410.074534][T12598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.074547][T12598] RSP: 002b:00007efdf1187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.074563][T12598] RAX: ffffffffffffffda RBX: 00007efdf0615fa0 RCX: 00007efdf039cdd9 [ 410.074574][T12598] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 410.074583][T12598] RBP: 00007efdf1187090 R08: 0000000000000000 R09: 0000000000000000 [ 410.074592][T12598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.074601][T12598] R13: 00007efdf0616038 R14: 00007efdf0615fa0 R15: 00007efdf073fa48 [ 410.074625][T12598] [ 410.395425][T12601] netlink: 4975 bytes leftover after parsing attributes in process `syz.5.2113'. [ 410.416893][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.426043][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.656996][ T993] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 410.813587][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 410.830725][ T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.844651][ T993] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 410.856076][ T993] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 410.879980][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.895362][ T993] usb 4-1: Product: syz [ 410.899635][ T993] usb 4-1: Manufacturer: syz [ 410.911569][ T993] usb 4-1: SerialNumber: syz [ 410.930877][ T993] usb 4-1: config 0 descriptor?? [ 411.209290][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2118'. [ 411.240097][ T993] usb 4-1: USB disconnect, device number 84 [ 411.788071][T12633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.289531][ T5624] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 412.465266][ T5624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.477639][ T5624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.487500][ T5624] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.500462][ T5624] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.509583][ T5624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.529952][ T5624] usb 4-1: config 0 descriptor?? [ 413.034488][ T5624] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 413.227241][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.246472][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.257730][T12640] net_ratelimit: 19 callbacks suppressed [ 413.257748][T12640] openvswitch: netlink: Flow actions attr not present in new flow. [ 413.560021][T12626] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 413.576492][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 413.703881][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 413.785976][T12651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 413.823570][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 413.863387][ T5624] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 413.933988][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 414.025369][ T5624] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.046344][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 414.060123][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 414.078521][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.088585][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 414.099210][ T5624] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.112761][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.142306][ T5624] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.165713][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 414.166077][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.211793][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.226546][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.227495][ T5624] usb 5-1: config 0 descriptor?? [ 414.245292][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.248491][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.261611][T12663] syzkaller0: entered promiscuous mode [ 414.268681][T12663] syzkaller0: entered allmulticast mode [ 414.293968][ T57] bond4: (slave bridge1): failed to get link speed/duplex [ 414.403422][ T6251] bond4: (slave bridge1): failed to get link speed/duplex [ 414.513391][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 414.677931][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.685690][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.693107][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.701034][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.708591][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.716181][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.723951][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.731409][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.739115][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.746554][ T5624] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 414.763620][ T5624] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 415.055806][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2140'. [ 415.104591][ T5708] usb 4-1: USB disconnect, device number 85 [ 415.143597][T12680] fuse: Bad value for 'fd' [ 415.287500][T12687] FAULT_INJECTION: forcing a failure. [ 415.287500][T12687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.301550][T12687] CPU: 1 UID: 0 PID: 12687 Comm: syz.5.2144 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.301578][T12687] Tainted: [L]=SOFTLOCKUP [ 415.301584][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.301595][T12687] Call Trace: [ 415.301603][T12687] [ 415.301610][T12687] dump_stack_lvl+0xe8/0x150 [ 415.301636][T12687] should_fail_ex+0x412/0x560 [ 415.301663][T12687] _copy_from_user+0x2d/0xb0 [ 415.301689][T12687] __x64_sys_mq_notify+0xf8/0x190 [ 415.301710][T12687] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 415.301726][T12687] ? ksys_write+0x1fc/0x270 [ 415.301763][T12687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.301782][T12687] do_syscall_64+0x15f/0xf80 [ 415.301806][T12687] ? clear_bhb_loop+0x40/0x90 [ 415.301828][T12687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.301846][T12687] RIP: 0033:0x7ff92799cdd9 [ 415.301863][T12687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.301878][T12687] RSP: 002b:00007ff9288c2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 415.301897][T12687] RAX: ffffffffffffffda RBX: 00007ff927c15fa0 RCX: 00007ff92799cdd9 [ 415.301910][T12687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 415.301929][T12687] RBP: 00007ff9288c2090 R08: 0000000000000000 R09: 0000000000000000 [ 415.301940][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.301951][T12687] R13: 00007ff927c16038 R14: 00007ff927c15fa0 R15: 00007ff927d3fa48 [ 415.301980][T12687] [ 415.499572][T12688] netem: incorrect gi model size [ 415.510290][T12688] netem: change failed [ 415.696343][T12702] tipc: Invalid UDP bearer configuration [ 415.696396][T12702] tipc: Enabling of bearer rejected, failed to enable media [ 415.904823][T12707] FAULT_INJECTION: forcing a failure. [ 415.904823][T12707] name failslab, interval 1, probability 0, space 0, times 0 [ 415.930423][T12707] CPU: 1 UID: 0 PID: 12707 Comm: syz.3.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.930451][T12707] Tainted: [L]=SOFTLOCKUP [ 415.930458][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.930468][T12707] Call Trace: [ 415.930475][T12707] [ 415.930484][T12707] dump_stack_lvl+0xe8/0x150 [ 415.930509][T12707] should_fail_ex+0x412/0x560 [ 415.930535][T12707] ? __d_alloc+0x37/0x6f0 [ 415.930558][T12707] should_failslab+0xa8/0x100 [ 415.930586][T12707] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 415.930618][T12707] __d_alloc+0x37/0x6f0 [ 415.930646][T12707] d_alloc+0x4b/0x190 [ 415.930666][T12707] ? lookup_one_qstr_excl+0xc4/0x360 [ 415.930692][T12707] lookup_one_qstr_excl+0xd8/0x360 [ 415.930720][T12707] __start_renaming+0x1db/0x410 [ 415.930753][T12707] filename_renameat2+0x38c/0x9c0 [ 415.930771][T12707] ? __might_fault+0xaf/0x130 [ 415.930795][T12707] ? __might_fault+0xaf/0x130 [ 415.930826][T12707] ? __pfx_filename_renameat2+0x10/0x10 [ 415.930862][T12707] ? do_getname+0x151/0x250 [ 415.930884][T12707] __se_sys_renameat2+0x5a/0x2c0 [ 415.930911][T12707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.930931][T12707] do_syscall_64+0x15f/0xf80 [ 415.930954][T12707] ? clear_bhb_loop+0x40/0x90 [ 415.930974][T12707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.930990][T12707] RIP: 0033:0x7fbd42f9cdd9 [ 415.931007][T12707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.931022][T12707] RSP: 002b:00007fbd43ebe028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 415.931042][T12707] RAX: ffffffffffffffda RBX: 00007fbd43216090 RCX: 00007fbd42f9cdd9 [ 415.931055][T12707] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 415.931068][T12707] RBP: 00007fbd43ebe090 R08: 0000000000000004 R09: 0000000000000000 [ 415.931079][T12707] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000002 [ 415.931090][T12707] R13: 00007fbd43216128 R14: 00007fbd43216090 R15: 00007fbd4333fa48 [ 415.931118][T12707] [ 416.192514][T12710] xt_CT: No such helper "snmp_trap" [ 416.649416][ T5688] usb 5-1: USB disconnect, device number 82 [ 417.008332][T12733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.047913][T12742] FAULT_INJECTION: forcing a failure. [ 417.047913][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.087383][T12742] CPU: 0 UID: 0 PID: 12742 Comm: syz.4.2163 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.087412][T12742] Tainted: [L]=SOFTLOCKUP [ 417.087419][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.087429][T12742] Call Trace: [ 417.087436][T12742] [ 417.087444][T12742] dump_stack_lvl+0xe8/0x150 [ 417.087470][T12742] should_fail_ex+0x412/0x560 [ 417.087497][T12742] _copy_from_user+0x2d/0xb0 [ 417.087524][T12742] restore_altstack+0xab/0x4c0 [ 417.087552][T12742] ? __pfx_restore_altstack+0x10/0x10 [ 417.087579][T12742] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.087604][T12742] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 417.087631][T12742] ? __lock_acquire+0x6b5/0x2cf0 [ 417.087655][T12742] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 417.087678][T12742] ? _raw_spin_unlock_irq+0x2e/0x50 [ 417.087697][T12742] ? signal_setup_done+0x22f/0x310 [ 417.087719][T12742] ? arch_do_signal_or_restart+0x4e7/0x840 [ 417.087749][T12742] ? __task_pid_nr_ns+0x28/0x470 [ 417.087783][T12742] ? __task_pid_nr_ns+0x28/0x470 [ 417.087812][T12742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.087831][T12742] do_syscall_64+0x15f/0xf80 [ 417.087854][T12742] ? clear_bhb_loop+0x40/0x90 [ 417.087875][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.087893][T12742] RIP: 0033:0x7f06ee53e159 [ 417.087909][T12742] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 417.087923][T12742] RSP: 002b:00007f06ef399a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 417.087948][T12742] RAX: ffffffffffffffda RBX: 00007f06ee815fa0 RCX: 00007f06ee53e159 [ 417.087960][T12742] RDX: 00007f06ef399a80 RSI: 00007f06ef399bb0 RDI: 0000000000000021 [ 417.087971][T12742] RBP: 00007f06ef39a090 R08: 0000000000000000 R09: 0000000000000000 [ 417.087981][T12742] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 417.087992][T12742] R13: 00007f06ee816038 R14: 00007f06ee815fa0 R15: 00007f06ee93fa48 [ 417.088018][T12742] [ 417.409183][T12748] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2166'. [ 417.443396][ T5688] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 417.604351][ T5688] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 417.621200][ T5688] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 417.641273][ T5688] usb 4-1: can't read configurations, error -61 [ 417.682242][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.718017][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.749698][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 417.804460][ T5688] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 417.958023][ T5688] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 417.967590][ T5688] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 417.976246][ T5688] usb 4-1: can't read configurations, error -61 [ 417.982945][ T5688] usb usb4-port1: attempt power cycle [ 418.284246][ T12] net_ratelimit: 29 callbacks suppressed [ 418.284266][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 418.323426][ T5688] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 418.345166][ T5688] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 418.366302][ T5688] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 418.382677][ T5688] usb 4-1: can't read configurations, error -61 [ 418.403389][ T13] bond4: (slave bridge1): failed to get link speed/duplex [ 418.523779][ T5688] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 418.524301][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 418.554769][ T5688] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 418.564755][ T5688] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 418.572515][ T5688] usb 4-1: can't read configurations, error -61 [ 418.582901][ T5688] usb usb4-port1: unable to enumerate USB device [ 418.655653][ T12] bond4: (slave bridge1): failed to get link speed/duplex [ 418.777030][T12785] netlink: 'syz.5.2173': attribute type 10 has an invalid length. [ 418.786929][ T48] bond4: (slave bridge1): failed to get link speed/duplex [ 418.914872][T11345] bond4: (slave bridge1): failed to get link speed/duplex [ 419.033747][T12822] bond4: (slave bridge1): failed to get link speed/duplex [ 419.092718][T12824] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2177'. [ 419.217943][T12822] bond4: (slave bridge1): failed to get link speed/duplex [ 419.397022][T12820] bond4: (slave bridge1): failed to get link speed/duplex [ 419.523396][T12818] bond4: (slave bridge1): failed to get link speed/duplex [ 419.846711][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 420.023375][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 420.038641][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.050625][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.061482][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 420.071428][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.083951][ T24] usb 5-1: config 0 descriptor?? [ 420.480814][T12845] FAULT_INJECTION: forcing a failure. [ 420.480814][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.495522][T12845] CPU: 0 UID: 0 PID: 12845 Comm: syz.3.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.495549][T12845] Tainted: [L]=SOFTLOCKUP [ 420.495556][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.495567][T12845] Call Trace: [ 420.495574][T12845] [ 420.495582][T12845] dump_stack_lvl+0xe8/0x150 [ 420.495607][T12845] should_fail_ex+0x412/0x560 [ 420.495635][T12845] _copy_from_user+0x2d/0xb0 [ 420.495660][T12845] generic_map_update_batch+0x648/0x990 [ 420.495690][T12845] ? __pfx_generic_map_update_batch+0x10/0x10 [ 420.495719][T12845] ? __fget_files+0x2a/0x420 [ 420.495746][T12845] ? __pfx_generic_map_update_batch+0x10/0x10 [ 420.495767][T12845] bpf_map_do_batch+0x39b/0x630 [ 420.495791][T12845] __sys_bpf+0x7c1/0x950 [ 420.495818][T12845] ? __pfx___sys_bpf+0x10/0x10 [ 420.495861][T12845] ? rcu_is_watching+0x15/0xb0 [ 420.495887][T12845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.495906][T12845] __x64_sys_bpf+0x7c/0x90 [ 420.495929][T12845] do_syscall_64+0x15f/0xf80 [ 420.495955][T12845] ? trace_irq_disable+0x3b/0x140 [ 420.495980][T12845] ? clear_bhb_loop+0x40/0x90 [ 420.496002][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.496019][T12845] RIP: 0033:0x7fbd42f9cdd9 [ 420.496036][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.496050][T12845] RSP: 002b:00007fbd43edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.496069][T12845] RAX: ffffffffffffffda RBX: 00007fbd43215fa0 RCX: 00007fbd42f9cdd9 [ 420.496081][T12845] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 420.496092][T12845] RBP: 00007fbd43edf090 R08: 0000000000000000 R09: 0000000000000000 [ 420.496103][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.496113][T12845] R13: 00007fbd43216038 R14: 00007fbd43215fa0 R15: 00007fbd4333fa48 [ 420.496140][T12845] [ 420.699555][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.708431][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.774237][ T24] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 420.855637][T12852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.865777][T12852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.878902][T12850] netlink: 'syz.3.2186': attribute type 4 has an invalid length. [ 420.985123][ T5632] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 421.167075][T12861] sg_read: process 1288 (syz.3.2189) changed security contexts after opening file descriptor, this is not allowed. [ 421.247855][ T5688] usb 5-1: USB disconnect, device number 83 [ 421.377881][T12865] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2191'. [ 421.487469][T12867] netlink: 'syz.5.2192': attribute type 13 has an invalid length. [ 421.497854][T12867] netlink: 'syz.5.2192': attribute type 17 has an invalid length. [ 421.623474][ T5688] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 421.748272][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2195'. [ 421.793427][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 421.802472][ T5688] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.820105][ T5688] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 421.833474][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.841705][ T5688] usb 5-1: Product: syz [ 421.848049][ T5688] usb 5-1: Manufacturer: syz [ 421.855128][ T5688] usb 5-1: SerialNumber: syz [ 421.876919][ T5688] usb 5-1: config 0 descriptor?? [ 422.098266][T12875] binder: 12874:12875 ioctl c0306201 2000000003c0 returned -14 [ 422.109990][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.135601][T12878] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 422.142124][T12878] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 422.152999][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.165009][ T24] usb 5-1: USB disconnect, device number 84 [ 422.172277][T12878] vhci_hcd vhci_hcd.0: Device attached [ 422.443373][ T5717] usb 44-1: SetAddress Request (2) to port 0 [ 422.455342][ T5717] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 422.549088][T12891] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2200'. [ 422.648610][T12879] vhci_hcd: connection reset by peer [ 422.656797][ T663] vhci_hcd vhci_hcd.5: stop threads [ 422.662838][ T663] vhci_hcd vhci_hcd.5: release socket [ 422.675528][ T663] vhci_hcd vhci_hcd.5: disconnect device [ 423.083357][ T5744] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 423.236681][ T5744] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 423.250457][ T5744] usb 5-1: config 0 has no interface number 0 [ 423.261187][ T5744] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 423.271595][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.280500][ T5744] usb 5-1: Product: syz [ 423.285126][ T5744] usb 5-1: Manufacturer: syz [ 423.290644][ T5744] usb 5-1: SerialNumber: syz [ 423.304856][ T5744] usb 5-1: config 0 descriptor?? [ 423.394715][T12808] net_ratelimit: 32 callbacks suppressed [ 423.394732][T12808] bond4: (slave bridge1): failed to get link speed/duplex [ 423.515348][T12808] bond4: (slave bridge1): failed to get link speed/duplex [ 423.634404][T12820] bond4: (slave bridge1): failed to get link speed/duplex [ 423.753374][T12808] bond4: (slave bridge1): failed to get link speed/duplex [ 423.874137][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 423.993676][ T35] bond4: (slave bridge1): failed to get link speed/duplex [ 424.125871][ T35] bond4: (slave bridge1): failed to get link speed/duplex [ 424.254959][T12820] bond4: (slave bridge1): failed to get link speed/duplex [ 424.384912][ T35] bond4: (slave bridge1): failed to get link speed/duplex [ 424.527915][T12820] bond4: (slave bridge1): failed to get link speed/duplex [ 425.816235][ T5744] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 425.852919][ T5744] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 425.881109][T12940] fuse: Bad value for 'user_id' [ 425.892065][ T5744] asix 5-1:0.251: probe with driver asix failed with error -71 [ 425.905115][T12940] fuse: Bad value for 'user_id' [ 425.928074][ T5744] usb 5-1: USB disconnect, device number 85 [ 426.917569][T12964] netlink: 'syz.5.2224': attribute type 4 has an invalid length. [ 427.299884][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.326724][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.554675][ T5717] usb 44-1: device descriptor read/8, error -110 [ 427.964318][ T5717] usb usb44-port1: attempt power cycle [ 427.985402][T12978] x_tables: duplicate underflow at hook 3 [ 428.221588][T12983] syzkaller0: entered promiscuous mode [ 428.232431][T12983] syzkaller0: entered allmulticast mode [ 428.503396][T11345] net_ratelimit: 34 callbacks suppressed [ 428.503413][T11345] bond4: (slave bridge1): failed to get link speed/duplex [ 428.544397][ T5717] usb usb44-port1: unable to enumerate USB device [ 428.643566][T12808] bond4: (slave bridge1): failed to get link speed/duplex [ 428.763555][T11345] bond4: (slave bridge1): failed to get link speed/duplex [ 428.897812][T13001] xt_TCPMSS: Only works on TCP SYN packets [ 428.913737][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 429.145382][T13001] sit1: entered allmulticast mode [ 429.606247][T13013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.754158][T12808] bond4: (slave bridge1): failed to get link speed/duplex [ 429.893439][ T663] bond4: (slave bridge1): failed to get link speed/duplex [ 430.024592][ T35] bond4: (slave bridge1): failed to get link speed/duplex [ 430.153353][T12820] bond4: (slave bridge1): failed to get link speed/duplex [ 430.283579][T12820] bond4: (slave bridge1): failed to get link speed/duplex [ 430.284670][ T30] INFO: task kworker/u8:5:87 blocked for more than 143 seconds. [ 430.294122][ T5744] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 430.337319][ T30] Tainted: G L syzkaller #0 [ 430.358341][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.392517][ T30] task:kworker/u8:5 state:D stack:22912 pid:87 tgid:87 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 430.432329][ T30] Workqueue: netns cleanup_net [ 430.441718][ T30] Call Trace: [ 430.452206][ T30] [ 430.460329][ T30] __schedule+0x1821/0x5740 [ 430.467855][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 430.474369][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.491294][ T30] ? __pfx___schedule+0x10/0x10 [ 430.496250][ T5744] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 430.496277][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.532557][ T30] ? schedule+0x90/0x360 [ 430.538742][ T5744] usb 5-1: Product: syz [ 430.538764][ T5744] usb 5-1: Manufacturer: syz [ 430.560113][ T30] schedule+0x164/0x360 [ 430.573916][ T30] afs_cell_purge+0x40d/0x580 [ 430.582003][ T5744] usb 5-1: SerialNumber: syz [ 430.588764][ T30] ? __pfx_afs_cell_purge+0x10/0x10 [ 430.604566][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 430.616554][ T5744] usb 5-1: config 0 descriptor?? [ 430.635465][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.638964][ T5744] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 430.667441][ T30] ? __timer_delete_sync+0x4a4/0x520 [ 430.679670][ T30] afs_net_exit+0x50/0x100 [ 430.687940][ T30] ops_undo_list+0x49f/0x940 [ 430.692631][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 430.698092][ T30] ? idr_destroy+0x218/0x290 [ 430.703233][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 430.710842][ T30] cleanup_net+0x56b/0x800 [ 430.718072][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 430.727607][ T30] ? process_scheduled_works+0xa70/0x1860 [ 430.736476][ T30] ? process_scheduled_works+0xa70/0x1860 [ 430.742294][ T30] process_scheduled_works+0xb5d/0x1860 [ 430.749162][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.755387][ T30] ? assign_work+0x3d5/0x5e0 [ 430.761405][ T30] worker_thread+0xa53/0xfc0 [ 430.770016][ T30] kthread+0x388/0x470 [ 430.775020][ T30] ? __pfx_worker_thread+0x10/0x10 [ 430.781640][ T30] ? __pfx_kthread+0x10/0x10 [ 430.786657][ T30] ret_from_fork+0x514/0xb70 [ 430.791786][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 430.797257][ T30] ? __switch_to+0xc79/0x1410 [ 430.802016][ T30] ? __pfx_kthread+0x10/0x10 [ 430.806908][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.812029][ T30] [ 430.816601][ T30] [ 430.816601][ T30] Showing all locks held in the system: [ 430.824841][ T30] 1 lock held by khungtaskd/30: [ 430.829774][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.845557][ T30] 3 locks held by kworker/u8:5/87: [ 430.852530][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 430.864639][ T30] #1: ffffc9000254fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 430.878589][ T30] #2: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 430.888952][ T30] 2 locks held by getty/5378: [ 430.893947][ T30] #0: ffff888032c990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.904045][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 430.916696][ T30] 4 locks held by udevd/5640: [ 430.924742][ T30] #0: ffff88807aede878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 430.933950][ T30] #1: ffff8880569f1880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 430.944059][ T30] #2: ffff88807a8ecb48 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 430.959091][ T30] #3: ffff88805589e1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 430.978656][ T30] 3 locks held by kworker/0:5/5688: [ 430.991847][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 431.020741][ T30] #1: ffffc90003eafc40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 431.035816][ T30] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 431.061904][ T30] 5 locks held by kworker/0:7/5744: [ 431.069857][ T30] #0: ffff8880226ff540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 431.095798][ T30] #1: ffffc9000458fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 431.117268][ T30] #2: ffff88802abc81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 431.126412][ T30] #3: ffff88805589e1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 431.135714][ T30] #4: ffff88805903b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 431.145011][ T30] 4 locks held by udevd/6544: [ 431.149689][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 431.160657][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 431.169653][ T30] #2: ffff8880b8628298 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xc3/0xed0 [ 431.180158][ T30] #3: ffffffff9a722758 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 431.190485][ T30] 1 lock held by syz.6.2244/13022: [ 431.195632][ T30] #0: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 431.207991][ T30] [ 431.210380][ T30] ============================================= [ 431.210380][ T30] [ 431.218874][ T30] NMI backtrace for cpu 1 [ 431.218897][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.218920][ T30] Tainted: [L]=SOFTLOCKUP [ 431.218927][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.218937][ T30] Call Trace: [ 431.218946][ T30] [ 431.218953][ T30] dump_stack_lvl+0xe8/0x150 [ 431.218978][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 431.218999][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.219020][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 431.219043][ T30] sys_info+0x135/0x170 [ 431.219059][ T30] watchdog+0xfd3/0x1030 [ 431.219090][ T30] ? watchdog+0x1c9/0x1030 [ 431.219118][ T30] kthread+0x388/0x470 [ 431.219141][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.219162][ T30] ? __pfx_kthread+0x10/0x10 [ 431.219184][ T30] ret_from_fork+0x514/0xb70 [ 431.219204][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 431.219222][ T30] ? __switch_to+0xc79/0x1410 [ 431.219248][ T30] ? __pfx_kthread+0x10/0x10 [ 431.219271][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.219307][ T30] [ 431.219313][ T30] Sending NMI from CPU 1 to CPUs 0: [ 431.340898][ C0] NMI backtrace for cpu 0 [ 431.340928][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.340950][ C0] Tainted: [L]=SOFTLOCKUP [ 431.340956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.340966][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 431.340991][ C0] Code: ab 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 431.341004][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 431.341019][ C0] RAX: 00000000006f6641 RBX: ffffffff819a93ba RCX: 0000000080000001 [ 431.341030][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa66cf RDI: ffffffff8c28af60 [ 431.341041][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 431.341052][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 431.341063][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 431.341074][ C0] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 431.341087][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.341097][ C0] CR2: 00007efdf05e8158 CR3: 00000000223e0000 CR4: 00000000003526f0 [ 431.341111][ C0] Call Trace: [ 431.341118][ C0] [ 431.341124][ C0] default_idle+0x9/0x20 [ 431.341138][ C0] default_idle_call+0x72/0xb0 [ 431.341153][ C0] do_idle+0x36a/0x5f0 [ 431.341170][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.341190][ C0] ? __pfx_do_idle+0x10/0x10 [ 431.341210][ C0] cpu_startup_entry+0x43/0x60 [ 431.341227][ C0] rest_init+0x2de/0x300 [ 431.341242][ C0] start_kernel+0x38a/0x3e0 [ 431.341260][ C0] x86_64_start_reservations+0x24/0x30 [ 431.341280][ C0] x86_64_start_kernel+0x143/0x1c0 [ 431.341299][ C0] common_startup_64+0x13e/0x147 [ 431.341325][ C0] [ 431.528737][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 431.535649][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.546330][ T30] Tainted: [L]=SOFTLOCKUP [ 431.550642][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.560690][ T30] Call Trace: [ 431.563962][ T30] [ 431.566892][ T30] vpanic+0x56c/0xa60 [ 431.570868][ T30] ? __pfx___schedule+0x10/0x10 [ 431.575710][ T30] ? __pfx_vpanic+0x10/0x10 [ 431.580202][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 431.586354][ T30] panic+0xc5/0xd0 [ 431.590078][ T30] ? __pfx_panic+0x10/0x10 [ 431.594489][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 431.599861][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 431.606009][ T30] watchdog+0x102c/0x1030 [ 431.610344][ T30] ? watchdog+0x1c9/0x1030 [ 431.614758][ T30] kthread+0x388/0x470 [ 431.618818][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.623486][ T30] ? __pfx_kthread+0x10/0x10 [ 431.628066][ T30] ret_from_fork+0x514/0xb70 [ 431.632646][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 431.637746][ T30] ? __switch_to+0xc79/0x1410 [ 431.642425][ T30] ? __pfx_kthread+0x10/0x10 [ 431.647007][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.651771][ T30] [ 431.655166][ T30] Kernel Offset: disabled [ 431.659481][ T30] Rebooting in 86400 seconds..