last executing test programs: 14.860530924s ago: executing program 3 (id=788): fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) flock(0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r1, &(0x7f0000000000)=""/196, 0xc4) 14.718830916s ago: executing program 3 (id=790): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x102, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r4, 0x0, 0x6, 0x9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r4, 0x0, 0x2, 0x6dd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) 13.412470159s ago: executing program 3 (id=796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB]) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa4c81, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000700)) syz_fuse_handle_req(r2, &(0x7f000000a3c0)="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", 0x2000, 0x0) dup3(r3, r2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback, 0xffffffffffffffff, 0x34, 0x0, 0x0, @void, @value}, 0x20) r6 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) preadv(r6, &(0x7f0000000400)=[{&(0x7f00000031c0)=""/207, 0xcf}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, 0x6, 0x0) 12.310650305s ago: executing program 2 (id=798): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge_slave_1\x00', {0x2, 0x4e21, @multicast2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/62, 0x3e}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, 0x0, 0x0) 10.454420564s ago: executing program 0 (id=803): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a55619caa822fc962ed1e43359ea70d878036600405037a8ec6fea7af38fb0529ebcb16986858e0928fd0e235af"], 0xd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000500", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0xc}, 0xc001) 9.555158691s ago: executing program 1 (id=804): r0 = socket$key(0xf, 0x3, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00c5a6d4c6bf57ecb272e94f56a0a70037", @ANYRES16=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ppoll(&(0x7f0000002280)=[{0xffffffffffffffff, 0x800}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, 0x0, 0x0) socket(0x1e, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x79ad, 0x1000, 0x8000, 0xd9}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$NBD_SET_SOCK(r10, 0xab00, 0xffffffffffffffff) pread64(r8, &(0x7f00000001c0)=""/136, 0x88, 0x29) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r11 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000300)=r11, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 9.37270651s ago: executing program 0 (id=805): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaab9aaaaaa0000000000000004aa001f4ee3a40000", @ANYRES8=r5, @ANYBLOB="7bc72e6e52e7ef80b957b9ead8261a9ddbfbf7be0b4011a6294fd5c92aa392db06003872f5f12c8fc64b", @ANYRES64=r2], 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r8, 0x84, 0x7d, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1416, 0xe50814127a83d959}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r10}) 8.908280477s ago: executing program 2 (id=806): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) write$smackfs_access(r0, 0x0, 0x0) 8.681247616s ago: executing program 1 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) mknodat$loop(r6, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x8040) uname(0x0) 8.392594591s ago: executing program 3 (id=809): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6(0xa, 0x1, 0x84) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fd", 0xa4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8.344507047s ago: executing program 2 (id=810): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x4619, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socket$rxrpc(0x21, 0x2, 0xa) read$midi(0xffffffffffffffff, 0x0, 0x43) socket$inet6(0xa, 0x2, 0x0) 7.266866454s ago: executing program 1 (id=811): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r2, &(0x7f0000000000)=""/196, 0xc4) 6.589054694s ago: executing program 1 (id=812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@local, 0x1}) (fail_nth: 5) 6.503883859s ago: executing program 4 (id=813): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x1}, 0x58) io_uring_setup(0x3eae, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="1436c99f"}]}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, &(0x7f0000000040)={0x0, 0x2c, 0x905408904a759ad1, @tid=0xffffffffffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x870, 0x65, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x624, 0x2, [@TCA_BPF_ACT={0x39c, 0x1, [@m_ct={0x1a0, 0x11, 0x0, 0x0, {{0x7}, {0x94, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_ACTION={0x6, 0x3, 0xe1d3886eaee48e21}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x6, 0x1, 0x6d0000}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x11}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "39d851b029845f01078805e4cfd5b99c"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "723935a873d11eac0b4fbcc3b45f5f9d"}]}, {0xe8, 0x6, "7d246bf90e471c37e0c7cb216da61aaeb619f1e154380f9af08badcdab7fbbe31a605c94430aef77f2c2814fdf8dc9dc4313b7348f6f1f440d0f2c5d1848e45a1e3e294ac6ed09a5e804e851c50ce6d935e003c9c26e7c444ef3e71bc3371024a246fe59e794afa795a4283c514d4049abe3e3cad3685d00dc0001563b3bd5a3e0188e1b50dd0db33adebea62a45fcbdd06eea3cce561a8448836ec1e36391fb44988767183deb7a6e693969d866df57b94affb9405b617d1b80910ae4961333337566889f0fba9a5400623ac7eac9dff297c18bb26568c68de380889fc2934fafe0ead5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x140, 0x0, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x2, 0x3af, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x13d, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x39c7e499f57b8edc, 0x1673, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe9ec, 0x5, 0x2, 0x0, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x5, 0x2, 0xffffffff, 0x9db}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x13, 0x2, 0x9a58, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1db, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x80000001, 0x2, 0x8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffc, 0x4, 0x6, 0x8001, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x615, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2f3, 0x4, 0x3, 0xed, 0x40000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d88, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xfffffffa, 0x2, 0x707, 0xe}}]}, {0x15, 0x6, "2d1cbf81533e79532c232876d7cc7ba3b7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0xb8, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0xffffffffffffffff, 0x4, 0x1ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xd, 0x3, 0x3, 0x1000}, 0x3}}]}, {0x4b, 0x6, "c7955f96d57e79e383a918bb1576c715b97d18a4b1139f2c32ef6ca09b2bb1d3f3b6482cd5d9bcbf4e1e5fc806b565a2e4b9aabc7ea00ac43a8031cfdb2ad3b21e5b908f61ce96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x264, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x80, 0x1000000c, 0x0, 0xffff7fff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x10000000, 0x1, 0xffffffc0}, 0x47a}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1c4, 0x13, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd4, 0x6, {0x7, 'raw\x00', 0x1, 0x8, "5ebcdb84daba70a50c9462c986f664b9a34149e034a2d5e32588a996efd8c376a0d325cf040c785439d6a2ba05eeb42a69b607e12af08167d4c4d018955acc788d1cc3a7c9dfacc17d23c609291a480e92d47433b11aaa62f1c889cdff4c4e2e45f614c7f978b24763c7236bffdb5af89fe5cd4a634b3197e5ec29682453f165a6147a7b7af044922570e701d755e7b8c570e04d848afec98bee31639cdadbbf993cac003063ad86132a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0xbf, 0x6, "f44b59e90a948a2b0f1eeaaec3b452de12738607d3e9a50edec26a65d90afdca0ab4764a86941105ddbd6386f823692f470899315bb9dab0b2cef87ce677a2aea40303bb98c6ea1569a934e53f7b8cfbbf2b8129c04e07275394461eb813f67edfe7654fab6e388a76babf03d7114b0dc6031803b981ef4aa2e0d4e469c82c7fe1eed82ab404fe47f4f1ff3b8b2de440d1a7ce387a64e76438a1e8b7492a61f6d78227b4d9f925935f7c841d95c0a2a8135d48704074ceed4fe011"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_matchall={{0xd}, {0x1f8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x1}}, @TCA_MATCHALL_ACT={0x1ec, 0x2, [@m_mirred={0x114, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x714ea43c, 0x20000000, 0x4, 0xfffffff7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x23, 0x5, 0xd9, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x7, 0x1ff, 0x9}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x7, 0x3, 0x9}, 0x2}}]}, {0x67, 0x6, "91ba8e12effe7c239aa95d62cdee2c08924685519aea81f763ac5e4452e3e53a44d2a3798b188a8e42dcf0bad0a837f4066ec6de3fac2a85f76e515b1a2364e32c3036a0b529016cae1a34989bff8438ab0481d89821cc499c469ef1c7790362399505"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xd4, 0x1f, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}]}, {0x99, 0x6, "98db8d6b32b1e6b3cdac9e13f0e009ede547bf85f076996d5f6a5e5898c3811dca80e61592af2284e80b164610ec3b9326ec3de45567f60197cd049de5c567e187e866ef9d2b6335f9efd7f3d72710ba6cf2740d4fdf41feb3da0af85253acaa7d995282b280eba80cd82b694b75a8e36a4a5ddff692af6a4e4780b38d84707c867313cd53d2fc2f6868c82015be2ff922a3bad3bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x870}, 0x1, 0x0, 0x0, 0x81}, 0x8010) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/175) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 6.442440555s ago: executing program 2 (id=814): r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x43000) r4 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x80000001, r4, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) close(r6) sysinfo(&(0x7f0000000000)=""/196) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x891e, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x6) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0xa0}, 'port0\x00', 0x62, 0x0, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r1, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) fchdir(r9) 5.57793308s ago: executing program 1 (id=815): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a55619caa822fc962ed1e43359ea70d878036600405037a8ec6fea7af38fb0529ebcb16986858e0928fd0e235af"], 0xd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000500", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0xc}, 0xc001) 4.836087543s ago: executing program 2 (id=816): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge_slave_1\x00', {0x2, 0x4e21, @multicast2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/62, 0x3e}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, 0x0, 0x0) 4.165149356s ago: executing program 3 (id=817): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008002c0007000200060006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000001600)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="21ecc697ead797a2967c61be65be3254e0fbead6a058e96ba6b4acf5abc6", @ANYRESDEC=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @var={0x9, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x30, 0x1e, 0x5f, 0x0, 0x2e, 0x2e, 0x0, 0x6f]}}, &(0x7f0000000540)=""/4096, 0x3e, 0x1000, 0x1, 0x8, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0xb, 0x0, 0xb, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x32}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x1, 0x2, 0x6, 0x0, 0x1}, @ldst={0x3, 0x3, 0x2, 0xa, 0x3, 0x1, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x3c, &(0x7f0000000200)=""/60, 0x40f00, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x0, 0x4, 0x8, 0x8}, {0x1, 0x4, 0x5, 0x6}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x2, 0x8}, {0x0, 0x1, 0xa}, {0x5, 0x5, 0x7, 0x5}], 0x10, 0x4, @void, @value}, 0x94) 4.15085183s ago: executing program 1 (id=818): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}, {0x0, 0x2e}], 0x2, 0x0, 0x0, 0x20000}}], 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000a0001000003d68c5ee17688a200320828030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff591008c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115bb25b64e39003901000000000000ea000000", 0x8a) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x80, 0x100800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r3, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x200000d0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) setfsuid(0xee00) r6 = io_uring_setup(0x592, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x1, 0x3d7}) r7 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r8 = fanotify_init(0x200, 0x0) r9 = dup(r7) fanotify_mark(r8, 0x201, 0x48001038, r9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.037049786s ago: executing program 0 (id=819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.85411436s ago: executing program 4 (id=820): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) io_setup(0x5, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) setregid(0xffffffffffffffff, r1) socket$inet(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f00000005c0)=@raw=[@alu={0x7, 0x0, 0x6, 0x4, 0x2, 0xfffffffffffffffc, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0xb, 0x7, 0x1, 0x80}, @ldst={0x1, 0x0, 0x1, 0x9, 0x4, 0x2, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0xd, 0x7, 0x8, 0x10, 0xffffffffffffffff}, @exit, @generic={0xfb, 0x0, 0x9, 0xe559, 0x8}], &(0x7f0000000000)='GPL\x00', 0x7, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) 3.59750967s ago: executing program 0 (id=821): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001380)=0x0, &(0x7f00000013c0)=0x4) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000002f80)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @mcast1, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="068a3d1373ddfe0ddd91e992b1437a8c3b28b9842f80dc1297fb81c53c7cb2937d5df974b142bbcd5d7ac69a26b3d205a16b9c817614f83451fb02868e947bf909", 0x41}, {&(0x7f0000000200)="84ebd80b7246ff37b544658e5a01fe8ec1acae25243ae79ea4dc6285953f886c66093e8dceb6da25c9efff8eef025e884cdb31feb840e241a8f433b10dedf2822dc9432355d93ca9408aaf6ce08237c53ecccce0eea35a46999ea6aba765dca86f2b8bcf1bde5989ebb74ea0b064f1a56cc23a4af2055576f1f53f16c6e6c7c8997b95a96a25593a3cb18f9eb0b50d4c3e254c8cfe99b06a52c5e6099c9edf2b0ed5e4384a2988418bb8dc44cb8e2cf05d", 0xb1}, {&(0x7f00000002c0)="9a9cfb895f421f06f6177da1388be2eb63703e66b1512266f0fa22af9cb3bfcd2f238f2a2b89aa83c75c238db97a4dd6c74ce6bce899f4924105ac1567007d2a0e1848ba89b85e3ae5f66c46e239a77253b018936392adcbc564", 0x5a}, {&(0x7f0000000340)="740062d673831ae083899e2e8060ca86a9b892eb74b889072e4338c3eb55895004788db201704042de469f57a7e5cebe12ed5b4804540b41509ab6e2c37f827e1b8d0e71ee1a0789539a", 0x4a}, {&(0x7f0000000080)="27fc5d970b8c5f817a1f15d1f348215fba8bf367df0369a344d714fc4b228c47373227d9c619900886e17ffa4b3d", 0x2e}], 0x5, &(0x7f0000000440)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x5e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x101}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x11}}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3b, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0xbc, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x10}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffc}}], 0x118}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x11, @mcast1, 0x4}, 0x1c, &(0x7f0000001140)=[{&(0x7f00000005c0)="bb145cc295982aabdb9a071076752422e403d3b3560278f0454982ddf3bf06355e5b10c5c6e705904a63bc508e6c39f505b9c1c096bd5f06cc0bd2d507799b97f314e3e70bf3285ce2b7463e564a8ae39fbd4aa350af74036d5727ff557026cf4beee2f43c8cbce8a90bbc30c7471f1efb77568987a9cb209432f5adb944c80dc7138a3b24ebcf840e58d87e59724a2fd5b2ac592bedbf77525cc88f9b34ed9c319c2084b37f681da36b675fc0264445f03f4d315a51", 0xb6}, {&(0x7f0000000680)="d5399222e80e7763c14557cd4c02332fb15350c76dc3f389ea38acb476a5632f86b4cc62a55660be1b7bc1f0463c125234a5dd286efd6290a9626f5e6bf07cbf738ba59d8ce3fe0977c2da9298370469a7dc9e15dbe193f8da1a53da133a6336be856a80b5dcd5740769c4ae78b215a40517b20183ea31be08ded721ea74be0a", 0x80}, {&(0x7f0000000700)="9c7428228efa4c03c542d2c7064a36e0ee50332550524ec8de783a0b96892a9aef6fdeee754c890f08ce17bf786db9fe72d98b0752d58d10759d574392629ea7a480d1264d3fb01974dc331b250dbfa8af2a840aec0db3e2e209b98e96fcb42083ad7d8b8070698e1caa703d93df6b397db53b77f0cbd7aeb3da7cc6b4aef8c7e03a45", 0x83}, {&(0x7f00000007c0)="876e9014dd14195fd8a33566bf2273aee3d19e047f290cf5cae3584e4e42edd42833e8feffbd076948ac11be4c4214634cc465cf1dda99c25171dbd4c096041a9ed7e8a0bf39e736b61a2a283756a3afdf1e365905ae0dc669f3eb176f8cb5dea8ca30a4c72c6e99fad186a4c168b38542a3b382a59a2e8393d445104dad8a91c86a9b90d40212650c3d2510c5c4a09dfeb84a6c9186490bc316382306ee3aac15e461092316a59d99a00f1391c2f24800df1181bf5c08fb4badbe790fe962639a54f77a2ea1a64eb22c14de75d7e00fff46d6d4e3ff27f7e3c7214bc1781fd0f5bed60a", 0xe4}, {&(0x7f00000008c0)="dd3a0a6a0e901d49ca13ba3e90aedd95bbdec0aaa4858766d2c0143b70c225d170dfbf0f005941d16d6d0f185c3571470e0d92e7fe748635fee908bd6e888e82e5742355a37d", 0x46}, {&(0x7f0000000940)="2d5321a775511acff8e3e0ff5b7dde34e8ff43ceecc04601211297201ab0d6514cf8280952400f20c8d902389f9b18e806ad6b398d355f60163060af0af977ee8a5c41d608f7b222655d76dc0480842f4633e9f094f7cfd361bb434373de56ec0127d68b0d93769d0baac9080fce3b637790518271fa2d26a9d9f219b7ffc95400f0f79c6c59d42b081a55ebe905c95c0caf58c49663611fae", 0x99}, {&(0x7f0000000a00)="abcdf1403abc3e6c393939e0d24fa13d0103d12c13c589a99cea495ed8d117547011cb6e98d4361016fc2570772a7a49fc066ad2d91c88554f274b4eb9519a35abd75cf3e335b292b455877017843fe026a7808287e2eb4b785b7e06b6bcbc6b096094e8e0cb1276fc1f8a3605f7d1d32efe935f284afe91e50931850976991c764b49b6e39bd9c094a06f3ec9024ddd7a31945ec0dd0d051e6b9fe8c4fe3fc25a1349fbbaa5b1ea", 0xa8}, {&(0x7f0000000ac0)="29436e7faef2f8cda022735a41940f60fbcf761cc31f18e3d0f3ac0307cb2eb920443c9003da77f9f5c3", 0x2a}, {&(0x7f0000000f80)="c5f4ca2db835d2015fb37e1b81aeea57307ec0961995f162a66cde711f3194bfc8dbf2cffd8fbe17549c8b0cffc031fd5ec4e7f5f4f35d7e55355fbaabd64c126f4b9e461ef8606601a2a0cfe55d321b2fe5f50d7510f41d43aabee052fadd5927bb99bf10873e0b0bee4e6bb1eb9d47b2582296fc77caa91e0d3af747dbb0e0345ba43a9d2b62b4b807b780c85eb6cf4ba05361cdd7", 0x96}, {&(0x7f0000001040)="28308aa7b7d6781343fcc541700562f177c8a71966daac6f7ac40f45b31a1ea4dc1e0acb1e0c9ce566104efdd802a71e4c9f026dd83943776579ad7aabfcb4499011320477133a79e47f9e4d9911fdd2e892fbf4431bd093aedf58dfb0767740fe4dcbd0377aefc7112fdb33dc5daab3b0c945edecf41ad6d5159306bb6d729c779c84c8ece7778c8fded6c77a45fc5b1e5b68ce61089cb77bfe582c746cc397d8cbd240e9b0c6f42d9748b03737d05cab2261e2816259a6e5e9a9f0e7016f343c05185f37dfa3155d0b9fe7672aab1c0dffbfd04a964ab3fbe7a2da66732711d54a5b", 0xe3}], 0xa}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x3, @private2, 0xe}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000001240)="45510852b995fe2c33e42c7990af96c95eddc7ec7439b374f0bbb901685c4aa2c4a1bc2ad3bbc97d61e0e9c5f601d002407eb1c0f16dd628d23cb9294e9fce27e45924b19ef66c306937170514de79f2fe16ee0f59031a84951f6d40fb6647ba45f2d500d9c433e9ce78cdecc38ab53067a9f70e90374ff9de80b9d7dc480f8922faf1128575bdd991457ec886e573572979d74912b6b92245462937f428be7ddc29a39cac1777cdcf49378bdc7ba9be7e43f07cf4ae4edc85413b124855a0e54baa17284d7012a2dfc3", 0xca}], 0x1, &(0x7f0000001400)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r2}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x73, 0x8, 0x0, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts={{0x190, 0x29, 0x37, {0x3c, 0x2f, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @pad1, @generic={0x1, 0x3c, "280170234f8fe9c33b37efa80ef8c4fb2ec7c5f0b7c7fb8e61e96e82f652c5f52b8907d330f818ddf05ee51c96a8735435f17130061f97869a286f51"}, @padn={0x1, 0x1, [0x0]}, @pad1, @generic={0x1, 0xa9, "d48e015255c95cf59a815fb8c40e6121209f457b9ed4799ce99671c8e195804f7446dc74a1864cd1e027d8247c4a7c625c3e6878ff2338858ef9c859981877ce3cb3502e915407bc5743fb1f8724b2c0f7f9364a8c70567d45c0788a294679f6f833b78d248a82b9e2ebeec2129b8ed23fc5eefd6204185d4d3585d8c0371f74adc11a9f00adbba07ad424ef73634d81f902c1da23fef7589d5c14a08f6e2333cd11fb3b8fdbb9a4fb"}, @generic={0x6, 0x7b, "ae593f9c1f62a3417159d9a60c70b950081b8295444e89db67d31e7d230e60345a86eaea8fb0d32a6e56d89a3b12e1053d959482fac734f215a1011821a6ab9e25db7853580c32b2bd9aa9fb65d165e88eede204501e8b1e35eb46aac50fc6fd71c1023b06cab917ae9ceabb0266d203de4a7300441c355985ae8c"}]}}}, @hopopts_2292={{0x1e0, 0x29, 0x36, {0x89, 0x39, '\x00', [@generic={0x3, 0x8b, "0a7678f3a32fd6860edc5ee42f8c6f9c930ea6d28a168dbd4c0d544916ea262a973f6267426aa596f7d3fb7e753fcf4b3184023f5aae23ed06c3efdc1d680273bac837d29cbe89c3524a64bb3c955edb16bc6a4c1761994bf7d3d15923f302c9b2c94daef040762495afd951f1cd418f293890494eed66234906aa8a6c60fae00e595ec1b3845893d7a7b0"}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x30, {0x2, 0xa, 0xb, 0x7fff, [0x400, 0x8000000000000001, 0x3, 0x9, 0x0]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0xdb, "113106b27c1b5627a002547ff9dd55c62592a7c45ab320a50f9639afd3023561691033cac5e8de738ca183fef434ec4ccd69520a1161e38d81bd6bb1c1c65de651cef2be1e8e7afc3a7c978a2acafff660ceb61e37ff2597c2540ff234eb1cbf9f631ea50b85a88a500370c8648a44db7272d0f7122866bcfa6697c0a92269ca7b657528ef492a4cde45824efe1ac72ccb4a87f3c12358a36f5483c3e69e4d9c26652660e04a45c5d2507261b137705be03b4aa86f130108b362d6c244e59adbd62a340c2643e6cfd16bf95085c31d81d50ab4c71f8f9cafaa3dc3"}]}}}], 0x3f0}}, {{&(0x7f0000001800)={0xa, 0x4e22, 0x200, @remote}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001840)="cc7fc8bcd6a9e4a0b9fc3f08871c02450c8786a5ab1a109197a10576783093aaf3ed7530cdad720dd002f8d85c6ae131a0c2873e2232a59ae32d881f4bf8c107f5343eb70ec8b4650432c981cfc73087fc2603e4a6a364174fe6a1d639a9db2470db2824f8a04dfd72b8b7e1fbb0ec423c6cea6c428764d6f0a6ac1ffaa62dd8bcb9219245536942cb42d5b7dbb78e065098d7f22f934a6dbea957a214c62eceb27a53a1c4d1e9b1258528a48b", 0xad}, {&(0x7f0000001900)="635db7674a41df9a51a3eb5af16f7b10860ae2", 0x13}, {&(0x7f0000001940)="92dc06472f44575eb18977ba44850bf2bc85e631ec5ecab2479d0f99fdaf06a308b7d9491668e590464a26faa5581af75425b753dc99cb1161", 0x39}, {&(0x7f0000001980)="b1ff18d750bcc1e98e77d9e5c05dee5ca8014d20f7d207dc4645b212896340ec95df036dce94ea2b79ad2726f2d5111dc0f2bccc41a911af1b3631e6d4659345fb73571f76a56022e634b0016ba3739d6b582d8b4ee492107e56a85b2fbcfc99b050bc8abe57c387c2b207405b5740c703c9264c1f47dac87fdd74a27547f65c12f9027b3637d92508152f2e71f2c09a2dae34c8515e76b88ea2212dc1a068342659b09a440b331c8fa87007844d5c2d778e1e5c5b137c247c887342cdb11288f579bb5a3414856d628bbd0f1586952f95328898", 0xd4}, {&(0x7f0000001a80)="4b22a2b62755c4b2dd773feba2b265a750fc67c33fdb36e63ae5dcf589f207d1a175e1b26c84076d7e9e15ad9dba3ac304f002fef27141458d9983508b3801f432446eb3238d2f70f0645b6423e33cb7a1b81c70e71fafa727bb664bfdbd535807ac4eb7dbee11", 0x67}, {&(0x7f0000001b00)="6b3080e9488ed6a9d373392bde63c91024d3d4693a9e29227a043faf37223b5a4102112b07e0d2190673aba13b43823f5c6bcd1c56f9c9fd3ae39beb4e45b6f7d176995aef4ad3a0db4755d3150a7d9a352ca7161a656244540df1356627ff523b76e92d5691403a5e6a52b5bdc66b18ccfc14b294f2d4f2c9514c2cf52885516f2e6c59cecb330577395f840a1efdf537011f3024bb328d5d31eae7d140b7c2da85f2dace383c02fe59452da65c8ad0a6d23610710ffef2102ef20d8db139dbaaaede3b178dfa4500912b80", 0xcc}, {&(0x7f0000001c00)="e5e9568c370cddaf5fe1717903f84c2812c1bde2673e4823769bcd64ad04e9b4766f4e20a8", 0x25}, {&(0x7f0000001c40)="ff82cfb7842f49a5d7c20953b4979c6e7092dffd25140c0b07e66284a5a19c6a6f75e4d53372b215c928fb23912a242da0fc5fc49c9e94cb3da762fae333e42717cb19fc0fe228d96243c93961068172762461d570fc6c05a9b49db8426b9e6509d2c21bba675b06f1f254a24d773c4b96f5557994a80492577fc7c5cdc0661096e2b9990eb15777bcd557bb6b751bb487f909aca46dbd2b4f77bb4db333974b117a1a", 0xa3}], 0x8, &(0x7f0000001d80)=[@hopopts={{0x78, 0x29, 0x36, {0x2f, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x5, 0x51, "86c7df242c1ae595da82e480411741438d9fa66318b33f6abb28c7f90609f2b73b0982b8425fdd9370599fa1438aa1bd7a403a1cf187009927e15b9a59bfd9cf896bc52dc3222860e260f4621200865019"}, @pad1, @ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @hoplimit={{0x14, 0x29, 0x34, 0x9b}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x29, 0xe, 0x1, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @ipv4={'\x00', '\xff\xff', @local}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dstopts={{0x110, 0x29, 0x37, {0x2e, 0x1e, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0xfd, 0xd9, "348700d14248387d0bedfa1e306b2ac4c7beddeba05ec69a3405b1b6e45ed45a91f3ccae938017098e5bd5523496d327a27311653e19ee6a94f4fbe923b5fdc611163cfd06372759cfeec3b2f80165229fc951bc6b8e1755adc00904a7bfa9dce0d12de291c1264976e1d8ac01f34fe195f4ab33188068f8af44a868f00c97f5655fd8bdeb4180bb18c769fb906591a0c174af5cef079d6b07d9594050e9bce08c348d120c8c6a1f72f1c885ebb307c7982271964e0c7a39b5cf399fa445d92fab8612e8817d13e14e804a69b878947741bb299d18056ddee7"}, @ra={0x5, 0x2, 0x9}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x6b, 0x4, 0x2, 0xff, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x290}}, {{&(0x7f0000002040)={0xa, 0x4e20, 0x6, @private0, 0x9}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000002080)="30059e3dfd2b96d99c61047993d7b43e504005f168efcc699a7e5482db620f09e97589551eb8e9f4b9c4ed408e0802836dcf41690d97ff3e70a1ad9294f328a3e0e284932f23bdc8a69c01", 0x4b}], 0x1, &(0x7f0000002140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x3c, 0x7, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x8, 0x8, "cf3349deda65ff35"}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0xa6eabd934f56cbd5, 0xa, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts={{0xd0, 0x29, 0x37, {0x0, 0x16, '\x00', [@generic={0x0, 0xb5, "68797549c4290e4b97e0be2ea1d124ddadf1455c7c563c79a0bf032fb9f79e0167a3ef1d44ce29a820257369b861f9cb1348590ddd456ab5947b1253dd343ea8c3d17c8b10fb4d1933fe69b15447e16b441a23eebe87c198e23ea028db9da160a69e217f25c4239b8c14d76fa88689e2aebb78a1d8e0edce9db87380f84d6c6b59cf636e5c25140a31323bb8d6c7c6f7e56b19ae66a7e0d70a0e67a03ed51b910695697f1799a730568a892d7139d191a9fd0d2ad5"}]}}}], 0x1e8}}, {{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000002440)="1e274a1458082da1842b85e9eb5a7aa9b019cb14df4b2923c54b6eeb4eb8deec0aa55cb352258127c3c8336ec47bb44079e117ab0b42284660fe4dcaa751f61df91192748afbf06b85b2a5bed18164254a0d2a0d5f79532c7f98d2f4", 0x5c}, {&(0x7f00000024c0)="9e6ea4cc0db985d70b3f61961722b8c3e239dac8cc40f86fe9bb905bdb01e61509a51c7141ebeb95b255dd46f6b4a6350109a69b1a54095cca8a0c7b8cd8bb97aff5f6edef95381057216f36e54fc855f61a37aa2f77d87055a21f93cf0ab4", 0x5f}, {&(0x7f0000002540)="4deaa0d7a3cb8ed678faa18b97555fa6413c3d1dfcbbbfb8642221bd18450997062c480c9915a8946662a5f1a70da7b6c30650674c042233451e3a55846c4b035ea4e925c0976da2bab7352d1b02d63f5dc872f0f6a98e48234c040fb07d1535", 0x60}, {&(0x7f00000025c0)="10c32fa5ac8ac218ddaca092ec81932ca1caea90be71ac1dcf82d3081f2bcb18fb314f32cd27087833b25f1681721a1b24d56a28947bd597577f984be4d57da6fccab531962be08ee4f7e10a2f9dff937dd83b8ec4166052dbd0c98fc79a84cee5e97f66b4f7c5f4069d16ecf414fa1c5851dd35a8c257c34542f82ab1c366592dcb4066136e1e2eac18ea9711355b0cd9ce475099848ff0ff97925fb6d1a4bb7aaf1eeac720b4fee26e1dbac99b2fef53e6896aa5ba95818ad68f6dee3861c43bdb1a", 0xc3}, {&(0x7f00000026c0)="9f97ef14670d1dc9a4ca2e2078c07cc6030c09810686aa40ba8ba96aa554d87776947690d5e91e23e7c9f94e1421840f4cc2cd8fad466ac14c9c962170275ece1519295799e6f315699424b3b550eda0874c30a3260f058e30d7b6c0fcbbf0f9a87c96858531a9b4723bab3d6fab51f5711dd13ce0019bacf704067f5013d9ae47e976a3a9bc102f4468f5b5a8a23c", 0x8f}, {&(0x7f0000002780)="097809cdf7d16d57f88c7b07a52d0c5e1ef90fefc5e74e7537e09c5fc58a3a7e028e8171a6b9b8edd9b50280b5ec6522bf9525a94a955b24d72bdfd4b83a2ce731f0f5d772cb732e9191298a734d5b31f7067b1a462d80bd60c4278fe391f5e9ce04d00fa6e125a4fa1c8a744b55b0d594335af7fab4ed9cf673cae0d37d8f2c2725be2e8c008a1af7766edbb3703384e2f15b29cad389965ea941bc2662176b195b64bf961e895590a374c8c64c89dfc94a6dfecfe46d5aae6779bf65fa5d26c36d417b59770e85cbc15d06b1a6d7b47ca849434aad6a2d3a2d47be4f", 0xdd}], 0x7, &(0x7f0000002900)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x62, 0xb, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7f, 0x101, [0x7, 0x8, 0x8]}}, @jumbo={0xc2, 0x4, 0xfffffffe}, @ra={0x5, 0x2, 0x700}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @mcast2}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x2b, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0xbf, [0x11, 0x7, 0x9, 0x10]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x38, {0x4d21d98b60ccf17, 0xc, 0x6a, 0x9, [0xa6ff, 0x3, 0x1, 0x3, 0x4, 0xfff]}}, @enc_lim={0x4, 0x1, 0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x140}}, {{&(0x7f0000002a40)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000002a80)="5f931f487599440a5efde9728dd08a0b1f24a62efe8c3d230abdb059ba035389fdd556d5d28f06be35e3142277403b16bb2c65f57de8c45637708a73bb0d5030955c8f1d84de5b345fb8c9d940c26ccbf7251808e17448f6b44b84086790a2f4bb38da3434fd7944953059821463d0cdadf68921ef70bba235850ef9cddfb4bceb91c95dde6bdaf9c53fc3e78e771baa3f8ee547cf7c45fd924926289cd3091764445d41d8", 0xa5}], 0x1, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0x1c8}}], 0x7, 0x4001c20) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.586758123s ago: executing program 4 (id=822): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r2, &(0x7f0000000000)=""/196, 0xc4) 2.176612503s ago: executing program 0 (id=823): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) (fail_nth: 5) 1.248958317s ago: executing program 4 (id=824): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) fallocate(r1, 0x1000f4, 0x0, 0x1000f4) 1.160009843s ago: executing program 0 (id=825): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d0000000800000000000000", @ANYRES32, @ANYBLOB="a69f20c6f78e26d1069cfd8ec2c3241c722f14141c67ed9351e0bd31e8d46259596d45478ad3063f0ca47a2822aedb026da901606f238ea51c3fa62ce01c9fdeba7c55ff4cc40f6c871a82506fdb367046116b38011d5975a8b6acf89b80", @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x400000000000000, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105a000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x80000000, 0x0, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x7f, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406070000005c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x88, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private, 0xffffffff}, {@broadcast}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000eea00000000000000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) syz_usb_control_io$uac1(r3, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x3, 0x40000) ioctl$I2C_PEC(r5, 0x708, 0x1) 1.077935594s ago: executing program 2 (id=826): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102df"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x5, 0x1, 0x5}}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf036}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x3) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 191.695018ms ago: executing program 3 (id=827): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000072403"], 0x0) 191.155982ms ago: executing program 4 (id=828): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x8, 0xfffff6d4, 0x5, 0x4, 0x5, 0x0, 0x12, 0xc}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@local, 0x1}) 0s ago: executing program 4 (id=829): r0 = semget$private(0x0, 0x0, 0x627) semctl$IPC_RMID(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000d40)={0x48, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000fcffffff000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@broadcast, {0x9, 0x3}}, 0x8, 0x2d, @random, @void, @void, [{0xdd, 0x60, "d0be83cafbae48cfc332213ea70d3158464bc9b59e441ce1fdf4c80ada0ed04002597917345a8d5a63aa5f9b80539c4542b63d1a1d0581bd276dd75c7c6f40036c2c7048fd2c452b276c65b9a17e9247cef3e870e12f3808fcd3e604cfe25043"}]}, 0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) kernel console output (not intermixed with test programs): 3c0 [ 231.477834][ T7488] ? __alloc_skb+0x112/0x2d0 [ 231.477859][ T7488] __alloc_skb+0x112/0x2d0 [ 231.477884][ T7488] tcp_stream_alloc_skb+0x3d/0x340 [ 231.477916][ T7488] tcp_sendmsg_locked+0x1fa8/0x56f0 [ 231.477944][ T7488] ? __lock_acquire+0xab9/0xd20 [ 231.478000][ T7488] ? register_lock_class+0x51/0x320 [ 231.478051][ T7488] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 231.478076][ T7488] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.478106][ T7488] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.478146][ T7488] tcp_sendmsg+0x2f/0x50 [ 231.478164][ T7488] __sock_sendmsg+0x19c/0x270 [ 231.478196][ T7488] sock_sendmsg+0x158/0x230 [ 231.478222][ T7488] ? __pfx_sock_sendmsg+0x10/0x10 [ 231.478264][ T7488] ? __asan_memset+0x22/0x50 [ 231.478282][ T7488] ? iov_iter_bvec+0xb8/0x180 [ 231.478313][ T7488] splice_to_socket+0x8ff/0xf10 [ 231.478363][ T7488] ? __pfx_splice_to_socket+0x10/0x10 [ 231.478383][ T7488] ? current_time+0x222/0x370 [ 231.478459][ T7488] ? touch_atime+0xf1/0x6d0 [ 231.478512][ T7488] ? __pfx_splice_to_socket+0x10/0x10 [ 231.478535][ T7488] direct_splice_actor+0xfe/0x160 [ 231.478562][ T7488] splice_direct_to_actor+0x5a8/0xcc0 [ 231.478608][ T7488] ? __pfx_direct_splice_actor+0x10/0x10 [ 231.478630][ T7488] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 231.478665][ T7488] do_splice_direct+0x181/0x270 [ 231.478687][ T7488] ? __pfx_do_splice_direct+0x10/0x10 [ 231.478711][ T7488] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 231.478738][ T7488] ? bpf_lsm_file_permission+0x9/0x20 [ 231.478760][ T7488] ? security_file_permission+0x75/0x290 [ 231.478785][ T7488] ? rw_verify_area+0x258/0x650 [ 231.478810][ T7488] do_sendfile+0x4da/0x7e0 [ 231.478835][ T7488] ? __pfx_vfs_write+0x10/0x10 [ 231.478864][ T7488] ? __pfx_do_sendfile+0x10/0x10 [ 231.478890][ T7488] ? __fget_files+0x3a0/0x420 [ 231.478927][ T7488] __se_sys_sendfile64+0x13e/0x190 [ 231.478956][ T7488] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 231.478989][ T7488] ? do_syscall_64+0xbe/0x3b0 [ 231.479020][ T7488] do_syscall_64+0xfa/0x3b0 [ 231.479045][ T7488] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.479071][ T7488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.479090][ T7488] ? clear_bhb_loop+0x60/0xb0 [ 231.479114][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.479131][ T7488] RIP: 0033:0x7fa4d4d8e929 [ 231.479150][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.479166][ T7488] RSP: 002b:00007fa4d5bed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 231.479188][ T7488] RAX: ffffffffffffffda RBX: 00007fa4d4fb5fa0 RCX: 00007fa4d4d8e929 [ 231.479202][ T7488] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 231.479213][ T7488] RBP: 00007fa4d5bed090 R08: 0000000000000000 R09: 0000000000000000 [ 231.479238][ T7488] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 231.479249][ T7488] R13: 0000000000000000 R14: 00007fa4d4fb5fa0 R15: 00007ffc42c65e58 [ 231.479282][ T7488] [ 232.070606][ T7494] overlayfs: failed to resolve './file1': -2 [ 235.149961][ T9] usb 4-1: USB disconnect, device number 10 [ 235.871762][ T7538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.393'. [ 236.519398][ T7548] fuse: Bad value for 'rootmode' [ 237.486767][ T977] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 237.710136][ T7569] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 237.726880][ T977] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 237.735940][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.770508][ T977] usb 2-1: Product: syz [ 237.778619][ T977] usb 2-1: Manufacturer: syz [ 237.793841][ T977] usb 2-1: SerialNumber: syz [ 238.215573][ T977] usb 2-1: config 0 descriptor?? [ 238.420847][ T7576] fuse: Unknown parameter 'use00000000000000000000' [ 239.716285][ T5835] Bluetooth: hci0: command tx timeout [ 239.728720][ T977] airspy 2-1:0.0: Board ID: 00 [ 239.733673][ T977] airspy 2-1:0.0: Firmware version: [ 239.933224][ T977] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 239.954222][ T977] airspy 2-1:0.0: Registered as swradio24 [ 239.996443][ T977] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 240.347386][ T5946] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 240.498553][ T977] usb 2-1: USB disconnect, device number 9 [ 240.728013][ T5946] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 240.822835][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.880477][ T5946] usb 4-1: Product: syz [ 241.008706][ T5946] usb 4-1: Manufacturer: syz [ 241.245285][ T5946] usb 4-1: SerialNumber: syz [ 241.410517][ T5946] usb 4-1: config 0 descriptor?? [ 241.762144][ T5946] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 241.806294][ T5946] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 241.829740][ T5946] usb-storage 4-1:0.0: USB Mass Storage device detected [ 241.870336][ T5946] usb-storage 4-1:0.0: device ignored [ 242.721923][ T5946] usb 4-1: USB disconnect, device number 11 [ 242.748905][ T7622] netlink: 'syz.4.415': attribute type 12 has an invalid length. [ 242.945108][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.097955][ T7632] fuse: Unknown parameter 'use00000000000000000000' [ 243.227636][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.746719][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.878343][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 243.887916][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.900278][ T10] usb 3-1: config 0 descriptor?? [ 244.327758][ T10] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 244.395590][ T10] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 244.523962][ T10] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 245.462621][ T10] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 245.505412][ T10] usb 3-1: USB disconnect, device number 6 [ 245.551160][ T7659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.641206][ T7660] FAULT_INJECTION: forcing a failure. [ 245.641206][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 245.715851][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.4.423 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 245.715882][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.715893][ T7660] Call Trace: [ 245.715902][ T7660] [ 245.715911][ T7660] dump_stack_lvl+0x189/0x250 [ 245.715943][ T7660] ? __pfx____ratelimit+0x10/0x10 [ 245.715971][ T7660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.715998][ T7660] ? __pfx__printk+0x10/0x10 [ 245.716025][ T7660] ? ref_tracker_alloc+0x318/0x460 [ 245.716053][ T7660] should_fail_ex+0x414/0x560 [ 245.716082][ T7660] should_failslab+0xa8/0x100 [ 245.716109][ T7660] kmem_cache_alloc_noprof+0x73/0x3c0 [ 245.716135][ T7660] ? skb_clone+0x212/0x3a0 [ 245.716163][ T7660] skb_clone+0x212/0x3a0 [ 245.716189][ T7660] __netlink_deliver_tap+0x404/0x850 [ 245.716226][ T7660] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.716250][ T7660] netlink_deliver_tap+0x19c/0x1b0 [ 245.716273][ T7660] netlink_unicast+0x72f/0x8d0 [ 245.716305][ T7660] netlink_sendmsg+0x805/0xb30 [ 245.716345][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.716386][ T7660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.716408][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.716430][ T7660] __sock_sendmsg+0x21c/0x270 [ 245.716461][ T7660] ____sys_sendmsg+0x505/0x830 [ 245.716491][ T7660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.716525][ T7660] ? import_iovec+0x74/0xa0 [ 245.716547][ T7660] ___sys_sendmsg+0x21f/0x2a0 [ 245.716573][ T7660] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.716637][ T7660] ? __fget_files+0x2a/0x420 [ 245.716661][ T7660] ? __fget_files+0x3a0/0x420 [ 245.716697][ T7660] __x64_sys_sendmsg+0x19b/0x260 [ 245.716723][ T7660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.716757][ T7660] ? __pfx_ksys_write+0x10/0x10 [ 245.716777][ T7660] ? rcu_is_watching+0x15/0xb0 [ 245.716810][ T7660] ? do_syscall_64+0xbe/0x3b0 [ 245.716841][ T7660] do_syscall_64+0xfa/0x3b0 [ 245.716865][ T7660] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.716891][ T7660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.716910][ T7660] ? clear_bhb_loop+0x60/0xb0 [ 245.716933][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.716950][ T7660] RIP: 0033:0x7fa66038e929 [ 245.716968][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.716984][ T7660] RSP: 002b:00007fa6612a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.717005][ T7660] RAX: ffffffffffffffda RBX: 00007fa6605b5fa0 RCX: 00007fa66038e929 [ 245.717019][ T7660] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 245.717030][ T7660] RBP: 00007fa6612a9090 R08: 0000000000000000 R09: 0000000000000000 [ 245.717042][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.717053][ T7660] R13: 0000000000000000 R14: 00007fa6605b5fa0 R15: 00007fffb4e0edb8 [ 245.717085][ T7660] [ 247.116354][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 247.276622][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 247.299663][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.317471][ T10] usb 4-1: config 0 has no interface number 0 [ 247.337070][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.356811][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.378986][ T10] usb 4-1: Product: syz [ 247.392489][ T10] usb 4-1: Manufacturer: syz [ 247.418324][ T10] usb 4-1: SerialNumber: syz [ 247.439342][ T10] usb 4-1: config 0 descriptor?? [ 247.465769][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.704484][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 247.772216][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 248.351778][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.363194][ T5946] usb 4-1: USB disconnect, device number 12 [ 248.774720][ T5946] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.942038][ T5946] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 249.025248][ T5946] quatech2 4-1:0.51: device disconnected [ 249.946570][ T5884] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 249.986448][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.056518][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 250.096480][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 250.105527][ T5884] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 250.120266][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 250.135437][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 250.146409][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 250.152919][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 250.170477][ T10] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 250.182108][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 250.194579][ T5884] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 250.212695][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 250.224298][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.233790][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 250.244296][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 250.249577][ T5884] usb 4-1: Product: syz [ 250.253872][ T5884] usb 4-1: Manufacturer: syz [ 250.262407][ T5884] usb 4-1: SerialNumber: syz [ 250.279650][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 250.309799][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.360897][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.379061][ T5884] usb 4-1: config 0 descriptor?? [ 250.396792][ T9] usb 3-1: config 0 has no interface number 0 [ 250.424571][ T7696] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.441095][ T10] usb 2-1: Product: syz [ 250.474777][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 250.491078][ T10] usb 2-1: Manufacturer: syz [ 250.501198][ T7696] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.511700][ T10] usb 2-1: SerialNumber: syz [ 250.516574][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.845463][ T9] usb 3-1: Product: syz [ 250.857460][ T10] usb 2-1: config 0 descriptor?? [ 250.868083][ T7699] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 250.927426][ T7699] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.017317][ T9] usb 3-1: Manufacturer: syz [ 251.022017][ T9] usb 3-1: SerialNumber: syz [ 251.032993][ T5884] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 251.033122][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 251.033265][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 251.056492][ T9] usb 3-1: config 0 descriptor?? [ 251.065212][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 251.092918][ T9] usb 3-1: selecting invalid altsetting 1 [ 251.098768][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 251.114427][ T10] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 251.114541][ C0] mcba_usb 2-1:0.0 can1: Tx URB aborted (-71) [ 251.127905][ C0] mcba_usb 2-1:0.0 can1: Tx URB aborted (-71) [ 251.165485][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.426559][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 251.427096][ T9] usb 3-1: media controller created [ 251.495102][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 251.675482][ T7714] pim6reg1: entered promiscuous mode [ 251.681650][ T7714] pim6reg1: entered allmulticast mode [ 252.443696][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.676545][ T7726] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 254.847681][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 254.854764][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 254.863651][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 254.953623][ T9] usb 3-1: USB disconnect, device number 7 [ 255.161810][ T7726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.806072][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816007][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.830356][ T7727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.837569][ T7727] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 255.849268][ T7727] bond2: (slave ipip0): Error -95 calling set_mac_address [ 255.856430][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.994912][ T7729] bond2: (slave ip6erspan0): making interface the new active one [ 256.007788][ T7729] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 256.016390][ T9] usb 1-1: device descriptor read/64, error -71 [ 256.082977][ T10] usb 2-1: USB disconnect, device number 10 [ 256.143216][ T10] mcba_usb 2-1:0.0 can1: device disconnected [ 256.210938][ T5904] usb 4-1: USB disconnect, device number 13 [ 256.218506][ T5904] mcba_usb 4-1:0.0 can0: device disconnected [ 256.556571][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 257.036819][ T9] usb 1-1: device descriptor read/64, error -71 [ 257.436994][ T9] usb usb1-port1: attempt power cycle [ 257.669319][ T7754] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2056266096 (32900257536 ns) > initial count (5491407760 ns). Using initial count to start timer. [ 257.730252][ T7756] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1452577714 (5810310856 ns) > initial count (2407295108 ns). Using initial count to start timer. [ 257.786363][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.817225][ T9] usb 1-1: device descriptor read/8, error -71 [ 257.886297][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 259.236280][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 259.247592][ T10] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 259.257577][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 259.270297][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 259.281142][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 259.294823][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 259.308871][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.317404][ T10] usb 2-1: Product: syz [ 259.321619][ T10] usb 2-1: Manufacturer: syz [ 259.326915][ T10] usb 2-1: SerialNumber: syz [ 259.347348][ T10] usb 2-1: config 0 descriptor?? [ 259.353697][ T7757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.361931][ T7757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.435695][ T10] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 259.435809][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 259.449096][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 259.726329][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.828825][ T7773] pim6reg1: entered promiscuous mode [ 259.835200][ T7773] pim6reg1: entered allmulticast mode [ 260.971261][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 260.985463][ T30] audit: type=1326 audit(1750658438.541:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66038e929 code=0x7ffc0000 [ 261.209758][ T30] audit: type=1326 audit(1750658438.551:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66038e929 code=0x7ffc0000 [ 261.451531][ T30] audit: type=1326 audit(1750658438.641:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa66038e929 code=0x7ffc0000 [ 261.670309][ T30] audit: type=1326 audit(1750658438.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66038e929 code=0x7ffc0000 [ 261.933519][ T30] audit: type=1326 audit(1750658438.681:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66038e929 code=0x7ffc0000 [ 262.024160][ T977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.835424][ T977] usb 3-1: config 0 has no interface number 0 [ 262.844008][ T977] usb 3-1: string descriptor 0 read error: -71 [ 262.850611][ T977] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 262.860466][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.874430][ T977] usb 3-1: config 0 descriptor?? [ 262.885294][ T977] usb 3-1: can't set config #0, error -71 [ 262.900466][ T977] usb 3-1: USB disconnect, device number 8 [ 263.086529][ T5823] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 263.246618][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 263.271486][ T5823] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 263.300262][ T7788] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 263.330683][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 263.356326][ T5823] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 263.369488][ T5823] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 263.387144][ T5823] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 263.396613][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.404646][ T5823] usb 5-1: Product: syz [ 263.412393][ T5946] usb 2-1: USB disconnect, device number 11 [ 263.430068][ T5946] mcba_usb 2-1:0.0 can0: device disconnected [ 263.436674][ T5823] usb 5-1: Manufacturer: syz [ 263.441314][ T5823] usb 5-1: SerialNumber: syz [ 263.795939][ T5823] usb 5-1: config 0 descriptor?? [ 263.832927][ T7779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 263.950550][ T7779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.016551][ T5925] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.118741][ T7788] bond1: entered promiscuous mode [ 264.134959][ T7788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.193264][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 264.201149][ T5823] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 264.208559][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 264.217158][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 264.240270][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 264.305312][ T5925] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 264.319898][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.331483][ T5925] usb 4-1: Product: syz [ 264.335771][ T5925] usb 4-1: Manufacturer: syz [ 264.345876][ T5925] usb 4-1: SerialNumber: syz [ 264.586849][ T5925] usb 4-1: config 0 descriptor?? [ 264.623153][ T5925] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 266.826825][ T5925] gspca_zc3xx: reg_w_i err -110 [ 267.676404][ T5925] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 267.690474][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 267.730825][ T5925] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 267.835894][ T5925] usb 4-1: USB disconnect, device number 14 [ 269.069295][ T977] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 269.134921][ T5904] usb 5-1: USB disconnect, device number 13 [ 269.163188][ T5904] mcba_usb 5-1:0.0 can0: device disconnected [ 269.256587][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 269.287442][ T977] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.307613][ T7846] fuse: Unknown parameter 'user_i00000000000000000000' [ 269.313714][ T977] usb 4-1: config 0 has no interface number 0 [ 269.354637][ T977] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 269.377002][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.500348][ T977] usb 4-1: Product: syz [ 269.597932][ T977] usb 4-1: Manufacturer: syz [ 269.761619][ T977] usb 4-1: SerialNumber: syz [ 269.981450][ T977] usb 4-1: config 0 descriptor?? [ 270.000891][ T977] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 270.069710][ T977] usb 4-1: selecting invalid altsetting 1 [ 270.075610][ T977] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 270.591720][ T977] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 270.629792][ T7837] 9pnet_fd: Insufficient options for proto=fd [ 270.636591][ T977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 270.644957][ T977] usb 4-1: media controller created [ 270.787624][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.948689][ T977] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 270.980210][ T977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 270.994888][ T977] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 271.855478][ T977] usb 4-1: USB disconnect, device number 15 [ 273.569223][ T7898] loop8: detected capacity change from 0 to 16384 [ 274.927894][ T7907] : entered promiscuous mode [ 275.247315][ T7901] loop8: detected capacity change from 16384 to 0 [ 276.119937][ T7921] loop2: detected capacity change from 0 to 7 [ 276.149959][ T7921] Dev loop2: unable to read RDB block 7 [ 276.155858][ T7921] loop2: AHDI p2 p3 [ 276.160024][ T7921] loop2: partition table partially beyond EOD, truncated [ 276.168770][ T7921] loop2: p2 start 1702059890 is beyond EOD, truncated [ 277.967764][ T5925] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 278.344602][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 278.403445][ T5925] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 278.411220][ T5823] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 278.424839][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 278.438325][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 278.519124][ T7950] loop6: detected capacity change from 0 to 524287999 [ 278.861397][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 278.936398][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 279.210178][ T7955] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.487'. [ 279.271661][ T7955] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 279.283686][ T5823] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.292973][ T5925] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 279.302339][ T5823] usb 4-1: config 0 has no interface number 0 [ 279.308509][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.325953][ T5823] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 279.336198][ T5925] usb 3-1: Product: syz [ 279.340413][ T5925] usb 3-1: Manufacturer: syz [ 279.345047][ T5925] usb 3-1: SerialNumber: syz [ 279.360070][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.411473][ T5823] usb 4-1: Product: syz [ 279.415798][ T5823] usb 4-1: Manufacturer: syz [ 279.424023][ T5925] usb 3-1: config 0 descriptor?? [ 279.453665][ T7935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.461243][ T5823] usb 4-1: SerialNumber: syz [ 279.488823][ T7935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.518733][ T5823] usb 4-1: config 0 descriptor?? [ 279.572606][ T5823] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 279.628460][ T5823] usb 4-1: selecting invalid altsetting 1 [ 279.673736][ T5925] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 279.673853][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 279.687196][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 279.703885][ T5823] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 279.731204][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 279.831957][ T7962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.371308][ T7938] 9pnet_fd: Insufficient options for proto=fd [ 280.380157][ T5823] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.414493][ T5823] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 280.440310][ T5904] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 280.446326][ T5823] usb 4-1: media controller created [ 280.710068][ T5904] usb 1-1: device descriptor read/64, error -71 [ 280.776867][ T7965] dlm: no local IP address has been set [ 280.788323][ T7965] dlm: cannot start dlm midcomms -107 [ 280.887499][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.074863][ T5823] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 281.139168][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 281.151905][ T5823] zl10353_read_register: readreg error (reg=127, ret==-71) [ 281.226787][ T5823] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 281.336735][ T5904] usb 1-1: device descriptor read/64, error -71 [ 281.350593][ T7972] pim6reg1: entered promiscuous mode [ 281.356181][ T7972] pim6reg1: entered allmulticast mode [ 281.727366][ T5904] usb usb1-port1: attempt power cycle [ 282.926461][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 283.274771][ T5904] usb 1-1: device descriptor read/8, error -71 [ 284.339090][ T5823] usb 4-1: USB disconnect, device number 16 [ 286.879447][ T5823] usb 3-1: USB disconnect, device number 9 [ 286.907159][ T5823] mcba_usb 3-1:0.0 can0: device disconnected [ 288.176298][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 288.377387][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.404397][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.652619][ T5823] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 288.676794][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.686303][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 288.992943][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.006207][ T5823] usb 3-1: SerialNumber: syz [ 289.132944][ T9] usb 2-1: config 9 has an invalid interface number: 32 but max is 0 [ 289.142130][ T9] usb 2-1: config 9 has no interface number 0 [ 289.163546][ T9] usb 2-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 289.176061][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 289.201545][ T9] usb 2-1: config 9 interface 32 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 289.204316][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.240256][ T9] usb 2-1: config 9 interface 32 has no altsetting 0 [ 289.259884][ T5823] usb 3-1: 0:2 : does not exist [ 289.272485][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 289.283621][ T24] usb 5-1: config 0 has no interface number 0 [ 289.297909][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 289.311085][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.338633][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.352102][ T9] usb 2-1: Product: syz [ 289.364969][ T9] usb 2-1: Manufacturer: syz [ 289.366971][ T5823] usb 3-1: USB disconnect, device number 10 [ 289.375747][ T24] usb 5-1: Product: syz [ 289.382283][ T9] usb 2-1: SerialNumber: syz [ 289.397423][ T24] usb 5-1: Manufacturer: syz [ 289.402096][ T24] usb 5-1: SerialNumber: syz [ 289.442454][ T24] usb 5-1: config 0 descriptor?? [ 289.470738][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 289.491409][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.494430][ T24] usb 5-1: selecting invalid altsetting 1 [ 289.526853][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 289.556754][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.574999][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 289.596259][ T24] usb 5-1: media controller created [ 289.636334][ T30] audit: type=1326 audit(1750658467.301:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 289.676326][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.501'. [ 289.690957][ T9] usb 2-1: USB disconnect, device number 12 [ 289.700723][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.722684][ T8068] 9pnet_fd: Insufficient options for proto=fd [ 289.748333][ T30] audit: type=1326 audit(1750658467.301:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 289.849457][ T30] audit: type=1326 audit(1750658467.301:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 289.871441][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 289.878541][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 289.887441][ T30] audit: type=1326 audit(1750658467.301:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 289.911840][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 289.981125][ T30] audit: type=1326 audit(1750658467.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 290.082149][ T30] audit: type=1326 audit(1750658467.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 290.114551][ T24] usb 5-1: USB disconnect, device number 14 [ 290.270285][ T30] audit: type=1326 audit(1750658467.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8062 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d4d8e929 code=0x7ffc0000 [ 291.949598][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 292.128696][ T5823] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 292.166680][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 292.180582][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 292.214297][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.277524][ T24] usb 5-1: config 0 descriptor?? [ 292.306521][ T5823] usb 3-1: device descriptor read/64, error -71 [ 292.494621][ T8101] capability: warning: `syz.4.507' uses deprecated v2 capabilities in a way that may be insecure [ 292.563954][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 292.594789][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.604395][ T5823] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 292.637805][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 292.655449][ T24] usb 5-1: media controller created [ 292.746438][ T5823] usb 3-1: device descriptor read/64, error -71 [ 292.858110][ T5823] usb usb3-port1: attempt power cycle [ 292.880636][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.170871][ T24] az6027: usb out operation failed. (-71) [ 293.252274][ T24] az6027: usb out operation failed. (-71) [ 293.262955][ T24] stb0899_attach: Driver disabled by Kconfig [ 293.281116][ T24] az6027: no front-end attached [ 293.281116][ T24] [ 293.301062][ T24] az6027: usb out operation failed. (-71) [ 293.316463][ T5823] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 293.324263][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 293.369736][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 293.390425][ T5823] usb 3-1: device descriptor read/8, error -71 [ 293.553352][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 294.293778][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 294.373252][ T5823] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 294.392244][ T24] usb 5-1: USB disconnect, device number 15 [ 294.407856][ T5823] usb 3-1: device descriptor read/8, error -71 [ 294.656902][ T5823] usb usb3-port1: unable to enumerate USB device [ 294.688632][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 297.386247][ T977] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 297.536325][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 297.576254][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 297.666367][ T8156] FAULT_INJECTION: forcing a failure. [ 297.666367][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 297.696358][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 297.733903][ T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.764988][ T24] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 297.801106][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 297.804389][ T977] usb 2-1: config 0 has no interface number 0 [ 297.854164][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.0.521 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 297.854194][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.854206][ T8156] Call Trace: [ 297.854214][ T8156] [ 297.854223][ T8156] dump_stack_lvl+0x189/0x250 [ 297.854255][ T8156] ? __pfx____ratelimit+0x10/0x10 [ 297.854282][ T8156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.854307][ T8156] ? __pfx__printk+0x10/0x10 [ 297.854333][ T8156] ? __pfx___might_resched+0x10/0x10 [ 297.854365][ T8156] should_fail_ex+0x414/0x560 [ 297.854394][ T8156] should_failslab+0xa8/0x100 [ 297.854420][ T8156] __kmalloc_noprof+0xcb/0x4f0 [ 297.854442][ T8156] ? security_sk_alloc+0x52/0x390 [ 297.854468][ T8156] security_sk_alloc+0x52/0x390 [ 297.854493][ T8156] sk_prot_alloc+0x101/0x220 [ 297.854519][ T8156] sk_alloc+0x3a/0x370 [ 297.854545][ T8156] inet6_create+0x7fd/0x12a0 [ 297.854563][ T8156] ? inet6_create+0x71/0x12a0 [ 297.854588][ T8156] __sock_create+0x4b0/0x9f0 [ 297.854627][ T8156] mptcp_subflow_create_socket+0xfd/0xb40 [ 297.854650][ T8156] ? irqentry_exit+0x74/0x90 [ 297.854676][ T8156] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.854703][ T8156] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 297.854724][ T8156] ? mptcp_bind+0xa3/0x1d0 [ 297.854759][ T8156] __mptcp_nmpc_sk+0x148/0x750 [ 297.854783][ T8156] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 297.854814][ T8156] mptcp_bind+0xab/0x1d0 [ 297.854845][ T8156] __sys_bind+0x2c6/0x3e0 [ 297.854866][ T8156] ? __pfx___sys_bind+0x10/0x10 [ 297.854900][ T8156] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 297.854929][ T8156] __x64_sys_bind+0x7a/0x90 [ 297.854948][ T8156] do_syscall_64+0xfa/0x3b0 [ 297.854976][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.854993][ T8156] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 297.855010][ T8156] ? clear_bhb_loop+0x60/0xb0 [ 297.855033][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.855050][ T8156] RIP: 0033:0x7fa72498e929 [ 297.855067][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.855083][ T8156] RSP: 002b:00007fa7257d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 297.855104][ T8156] RAX: ffffffffffffffda RBX: 00007fa724bb5fa0 RCX: 00007fa72498e929 [ 297.855118][ T8156] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 297.855130][ T8156] RBP: 00007fa7257d3090 R08: 0000000000000000 R09: 0000000000000000 [ 297.855141][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.855161][ T8156] R13: 0000000000000000 R14: 00007fa724bb5fa0 R15: 00007ffe90755718 [ 297.855197][ T8156] [ 297.888228][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 297.889231][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.927424][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 297.928605][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.150361][ C0] hrtimer: interrupt took 294247374 ns [ 298.250404][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.279910][ T977] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 298.441041][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 298.456723][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.475118][ T977] usb 2-1: Product: syz [ 298.476213][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.485231][ T977] usb 2-1: Manufacturer: syz [ 298.517770][ T977] usb 2-1: SerialNumber: syz [ 298.538027][ T977] usb 2-1: config 0 descriptor?? [ 298.540098][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 298.566327][ T977] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 298.575143][ T24] usb 4-1: Product: syz [ 298.575173][ T24] usb 4-1: Manufacturer: syz [ 298.575188][ T24] usb 4-1: SerialNumber: syz [ 298.594189][ T24] usb 4-1: config 0 descriptor?? [ 298.651646][ T8146] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.674681][ T977] usb 2-1: selecting invalid altsetting 1 [ 298.692432][ T8146] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.713181][ T977] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 298.734834][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 298.866778][ T24] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 298.874083][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 298.917297][ T977] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.917340][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.517'. [ 299.682536][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 299.771994][ T977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 299.780391][ T977] usb 2-1: media controller created [ 299.797635][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.856749][ T977] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 299.879261][ T977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 299.903766][ T977] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 300.139835][ T8173] pim6reg1: entered promiscuous mode [ 300.145188][ T8173] pim6reg1: entered allmulticast mode [ 302.053187][ T977] usb 2-1: USB disconnect, device number 13 [ 302.833224][ T5904] usb 4-1: USB disconnect, device number 17 [ 302.854782][ T8205] netlink: 116 bytes leftover after parsing attributes in process `syz.4.532'. [ 302.867190][ T5904] mcba_usb 4-1:0.0 can0: device disconnected [ 302.926227][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 302.968493][ T8213] netlink: 'syz.0.533': attribute type 11 has an invalid length. [ 302.969119][ T8213] Bluetooth: MGMT ver 1.23 [ 303.088478][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 303.098324][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.110766][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 303.140887][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.168208][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.190413][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.212564][ T24] usb 3-1: config 0 descriptor?? [ 303.226013][ T8199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.278618][ T24] hub 3-1:0.0: USB hub found [ 303.316865][ T8221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.536'. [ 303.476325][ T5904] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 304.450913][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 304.709425][ T5904] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 304.846386][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 304.848536][ T24] hub 3-1:0.0: 2 ports detected [ 304.897236][ T5904] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 304.955057][ T5904] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 305.030926][ T5904] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 305.050911][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.066584][ T5904] usb 4-1: Product: syz [ 305.079612][ T5904] usb 4-1: Manufacturer: syz [ 305.087929][ T5904] usb 4-1: SerialNumber: syz [ 305.106263][ T5904] usb 4-1: config 0 descriptor?? [ 305.114489][ T8211] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 305.126441][ T8211] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 305.181421][ T5904] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 305.181531][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 305.181649][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 305.547029][ T5823] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 305.745112][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 306.000657][ T5823] usb 2-1: config 2 has an invalid interface number: 32 but max is 1 [ 306.104473][ T5823] usb 2-1: config 2 has no interface number 1 [ 306.193308][ T5823] usb 2-1: config 2 interface 32 has no altsetting 0 [ 306.342434][ T5823] usb 2-1: config 2 interface 0 has no altsetting 0 [ 306.638854][ T5823] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 306.843453][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.001974][ T5823] usb 2-1: Product: syz [ 307.097627][ T5823] usb 2-1: Manufacturer: syz [ 307.189143][ T5823] usb 2-1: SerialNumber: syz [ 307.272157][ T5925] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 308.675709][ T5911] usb 3-1: USB disconnect, device number 15 [ 309.343470][ T5925] usb 4-1: USB disconnect, device number 18 [ 309.846949][ T5925] mcba_usb 4-1:0.0 can0: device disconnected [ 309.906333][ T5911] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 309.981989][ T8264] loop6: detected capacity change from 0 to 524287999 [ 310.076290][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 310.136977][ T5911] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 310.283136][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 310.731438][ T5911] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 310.766400][ T5911] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 310.784603][ T5911] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 310.814350][ T8266] netlink: 92 bytes leftover after parsing attributes in process `syz.4.546'. [ 310.863209][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.871458][ T5911] usb 1-1: Product: syz [ 310.875918][ T5911] usb 1-1: Manufacturer: syz [ 310.882014][ T5911] usb 1-1: SerialNumber: syz [ 310.948569][ T5911] usb 1-1: config 0 descriptor?? [ 310.954590][ T8256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.986650][ T8256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.007274][ T5823] usb 2-1: USB disconnect, device number 14 [ 311.041157][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 311.079989][ T5911] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 311.087222][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 312.263387][ T8282] pim6reg1: entered promiscuous mode [ 312.269071][ T8282] pim6reg1: entered allmulticast mode [ 312.407342][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 312.707968][ T6853] udevd[6853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.115755][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.551'. [ 315.362853][ T5911] usb 1-1: USB disconnect, device number 26 [ 315.387203][ T5911] mcba_usb 1-1:0.0 can0: device disconnected [ 317.272677][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.287933][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.822515][ T8331] fuse: Unknown parameter '0x0000000000000005' [ 318.533200][ T8340] No control pipe specified [ 318.836319][ T5904] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 319.476236][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 319.512678][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.525596][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 319.586303][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.643228][ T5904] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 319.689784][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.752137][ T5904] usb 1-1: config 0 descriptor?? [ 320.067116][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.126008][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.134060][ T5911] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 320.318519][ T5911] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 320.452509][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.743428][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.866168][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 320.921335][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 320.954219][ T5911] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 320.983009][ T5911] usb 3-1: Manufacturer: syz [ 321.005021][ T5904] hid (null): invalid report_count -1326111982 [ 321.034323][ T5904] wacom 0003:056A:0000.0006: invalid report_count -1326111982 [ 321.037308][ T5911] usb 3-1: config 0 descriptor?? [ 321.066242][ T5904] wacom 0003:056A:0000.0006: item 0 4 1 9 parsing failed [ 321.074278][ T5904] wacom 0003:056A:0000.0006: parse failed [ 321.105046][ T5904] wacom 0003:056A:0000.0006: probe with driver wacom failed with error -22 [ 321.148863][ T5904] usb 1-1: USB disconnect, device number 27 [ 321.416476][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 321.542181][ T5911] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 321.572040][ T5911] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 321.652516][ T5911] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 321.790178][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 321.822734][ T10] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 321.841092][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 321.871866][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 321.917237][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.941661][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 322.020601][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.022802][ T5904] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 322.062602][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 322.495391][ T5911] usb 3-1: USB disconnect, device number 16 [ 322.496516][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.525481][ T10] usb 4-1: Product: syz [ 322.565797][ T10] usb 4-1: Manufacturer: syz [ 322.577392][ T10] usb 4-1: SerialNumber: syz [ 322.586381][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 322.599415][ T5904] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 322.615734][ T10] usb 4-1: config 0 descriptor?? [ 322.631676][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 322.652974][ T8372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.678908][ T8372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.688059][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 322.717018][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 322.736356][ T10] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 322.736480][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 322.749733][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 322.755867][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.768205][ T5904] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 322.777875][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.785957][ T5904] usb 1-1: Product: syz [ 322.790463][ T5904] usb 1-1: Manufacturer: syz [ 322.795063][ T5904] usb 1-1: SerialNumber: syz [ 322.844585][ T5904] usb 1-1: config 0 descriptor?? [ 322.865242][ T8381] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 322.946454][ T8381] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 323.021999][ T5904] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 323.022125][ C0] mcba_usb 1-1:0.0 can1: Tx URB aborted (-71) [ 323.035387][ C0] mcba_usb 1-1:0.0 can1: Tx URB aborted (-71) [ 324.413710][ T8408] fuse: Unknown parameter '0x0000000000000005' [ 326.196493][ T8403] pim6reg1: entered promiscuous mode [ 326.202348][ T8403] pim6reg1: entered allmulticast mode [ 326.489551][ T10] usb 4-1: USB disconnect, device number 19 [ 327.460982][ T10] mcba_usb 4-1:0.0 can0: device disconnected [ 328.470429][ T5912] usb 1-1: USB disconnect, device number 28 [ 328.503839][ T5912] mcba_usb 1-1:0.0 can1: device disconnected [ 330.355314][ T8448] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 330.697132][ T8456] fuse: Unknown parameter '0x0000000000000005' [ 330.920321][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 331.898620][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 332.007558][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 332.034348][ T8448] bond1: entered promiscuous mode [ 332.047786][ T8448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.067719][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 332.111819][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.149478][ T9] usb 2-1: Product: syz [ 332.166428][ T9] usb 2-1: Manufacturer: syz [ 332.176768][ T9] usb 2-1: SerialNumber: syz [ 332.203942][ T9] usb 2-1: config 0 descriptor?? [ 332.224512][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 332.527294][ T8482] loop6: detected capacity change from 0 to 524287999 [ 335.209902][ T9] gspca_zc3xx: reg_w_i err -71 [ 335.790174][ T8506] delete_channel: no stack [ 335.848172][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 335.866296][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 335.936480][ T9] usb 2-1: USB disconnect, device number 15 [ 336.070865][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 337.733979][ T8533] loop6: detected capacity change from 0 to 524287999 [ 338.922877][ T3079] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 339.116246][ T3079] usb 3-1: Using ep0 maxpacket: 16 [ 339.203105][ T3079] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 339.377700][ T5823] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 339.396163][ T3079] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 339.410379][ T3079] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 340.195634][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 340.198439][ T8548] delete_channel: no stack [ 340.239741][ T3079] usb 3-1: config 0 interface 0 has no altsetting 0 [ 340.401775][ T5823] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.497331][ T3079] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 340.539866][ T5823] usb 2-1: config 0 has no interface number 0 [ 340.548331][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.601572][ T3079] usb 3-1: Product: syz [ 340.605896][ T3079] usb 3-1: Manufacturer: syz [ 340.611247][ T5823] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 340.643247][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.658406][ T3079] usb 3-1: SerialNumber: syz [ 340.680846][ T5823] usb 2-1: Product: syz [ 340.685103][ T5823] usb 2-1: Manufacturer: syz [ 340.707136][ T3079] usb 3-1: config 0 descriptor?? [ 340.721280][ T5823] usb 2-1: SerialNumber: syz [ 340.725845][ T8563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.613'. [ 340.740347][ T5823] usb 2-1: config 0 descriptor?? [ 340.776274][ T8542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.798268][ T5823] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 340.817295][ T5823] usb 2-1: selecting invalid altsetting 1 [ 340.823131][ T5823] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 340.873514][ T5823] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.052340][ T8546] 9pnet_fd: Insufficient options for proto=fd [ 341.376660][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 341.539886][ T5823] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 341.559538][ T8572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 341.566197][ T5823] usb 2-1: media controller created [ 341.632629][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.652359][ T3079] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 341.757093][ T5823] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 341.764371][ T5823] zl10353_read_register: readreg error (reg=127, ret==-71) [ 341.803020][ T5823] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 343.084032][ T3079] usb 3-1: USB disconnect, device number 17 [ 343.201884][ T5823] usb 2-1: USB disconnect, device number 16 [ 343.256720][ T6853] udevd[6853]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 343.320685][ T6853] udevd[6853]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 343.616193][ T8595] loop6: detected capacity change from 0 to 524287999 [ 346.919812][ T8604] delete_channel: no stack [ 347.220612][ T8614] loop6: detected capacity change from 0 to 524287999 [ 348.090328][ T8623] FAULT_INJECTION: forcing a failure. [ 348.090328][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.366689][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.0.627 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 348.366719][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.366730][ T8623] Call Trace: [ 348.366739][ T8623] [ 348.366748][ T8623] dump_stack_lvl+0x189/0x250 [ 348.366783][ T8623] ? __pfx____ratelimit+0x10/0x10 [ 348.366811][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.366840][ T8623] ? __pfx__printk+0x10/0x10 [ 348.366876][ T8623] should_fail_ex+0x414/0x560 [ 348.366907][ T8623] _copy_to_user+0x31/0xb0 [ 348.366930][ T8623] simple_read_from_buffer+0xe1/0x170 [ 348.366961][ T8623] proc_fail_nth_read+0x1df/0x250 [ 348.366992][ T8623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.367023][ T8623] ? rw_verify_area+0x258/0x650 [ 348.367045][ T8623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.367074][ T8623] vfs_read+0x200/0x980 [ 348.367103][ T8623] ? __pfx___mutex_lock+0x10/0x10 [ 348.367133][ T8623] ? __pfx_vfs_read+0x10/0x10 [ 348.367157][ T8623] ? __fget_files+0x2a/0x420 [ 348.367187][ T8623] ? __fget_files+0x3a0/0x420 [ 348.367209][ T8623] ? __fget_files+0x2a/0x420 [ 348.367243][ T8623] ksys_read+0x145/0x250 [ 348.367264][ T8623] ? __fget_files+0x3a0/0x420 [ 348.367289][ T8623] ? __pfx_ksys_read+0x10/0x10 [ 348.367316][ T8623] ? do_syscall_64+0xbe/0x3b0 [ 348.367347][ T8623] do_syscall_64+0xfa/0x3b0 [ 348.367375][ T8623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.367392][ T8623] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 348.367410][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 348.367433][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.367450][ T8623] RIP: 0033:0x7fa72498d33c [ 348.367467][ T8623] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 348.367484][ T8623] RSP: 002b:00007fa7257d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.367505][ T8623] RAX: ffffffffffffffda RBX: 00007fa724bb5fa0 RCX: 00007fa72498d33c [ 348.367519][ T8623] RDX: 000000000000000f RSI: 00007fa7257d30a0 RDI: 0000000000000003 [ 348.367531][ T8623] RBP: 00007fa7257d3090 R08: 0000000000000000 R09: 0000000000000000 [ 348.367542][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.367553][ T8623] R13: 0000000000000000 R14: 00007fa724bb5fa0 R15: 00007ffe90755718 [ 348.367597][ T8623] [ 348.608202][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.976437][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 349.226314][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 349.268763][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 349.448685][ T5912] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 350.248876][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 350.532486][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 350.560023][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 350.588331][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.608498][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 350.626488][ T9] usb 4-1: config 0 has no interface number 0 [ 350.641716][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 350.661155][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 350.699890][ T5912] usb 5-1: string descriptor 0 read error: -71 [ 350.711672][ T5912] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 350.720967][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.860054][ T9] usb 4-1: Product: syz [ 350.864322][ T9] usb 4-1: Manufacturer: syz [ 350.869410][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.878886][ T9] usb 4-1: SerialNumber: syz [ 350.902223][ T5912] usb 5-1: config 0 descriptor?? [ 350.908087][ T9] usb 4-1: config 0 descriptor?? [ 350.919238][ T5912] usb 5-1: can't set config #0, error -71 [ 351.753219][ T5912] usb 5-1: USB disconnect, device number 16 [ 351.787121][ T8648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.897092][ T8648] FAULT_INJECTION: forcing a failure. [ 351.897092][ T8648] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 352.040908][ T9] usb 4-1: can't set config #0, error -71 [ 352.041722][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.4.636 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 352.041746][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.041756][ T8648] Call Trace: [ 352.041763][ T8648] [ 352.041770][ T8648] dump_stack_lvl+0x189/0x250 [ 352.041800][ T8648] ? __pfx____ratelimit+0x10/0x10 [ 352.041824][ T8648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.041845][ T8648] ? __pfx__printk+0x10/0x10 [ 352.041877][ T8648] should_fail_ex+0x414/0x560 [ 352.041902][ T8648] iommufd_get_object+0x78/0x4b0 [ 352.041928][ T8648] ? __pfx_iommufd_get_object+0x10/0x10 [ 352.041959][ T8648] iommufd_hwpt_alloc+0x28d/0xb60 [ 352.041984][ T8648] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 352.042016][ T8648] iommufd_fops_ioctl+0x446/0x520 [ 352.042042][ T8648] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 352.042076][ T8648] ? __fget_files+0x3a0/0x420 [ 352.042096][ T8648] ? __fget_files+0x2a/0x420 [ 352.042119][ T8648] ? bpf_lsm_file_ioctl+0x9/0x20 [ 352.042140][ T8648] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 352.042162][ T8648] __se_sys_ioctl+0xfc/0x170 [ 352.042183][ T8648] do_syscall_64+0xfa/0x3b0 [ 352.042206][ T8648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.042221][ T8648] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.042236][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 352.042255][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.042271][ T8648] RIP: 0033:0x7fa66038e929 [ 352.042286][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.042299][ T8648] RSP: 002b:00007fa6612a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.042318][ T8648] RAX: ffffffffffffffda RBX: 00007fa6605b5fa0 RCX: 00007fa66038e929 [ 352.042330][ T8648] RDX: 0000200000000200 RSI: 0000000000003b89 RDI: 0000000000000003 [ 352.042340][ T8648] RBP: 00007fa6612a9090 R08: 0000000000000000 R09: 0000000000000000 [ 352.042350][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.042360][ T8648] R13: 0000000000000000 R14: 00007fa6605b5fa0 R15: 00007fffb4e0edb8 [ 352.042387][ T8648] [ 352.329950][ T9] usb 4-1: USB disconnect, device number 20 [ 353.200681][ T8653] delete_channel: no stack [ 354.024049][ T8684] loop6: detected capacity change from 0 to 524287999 [ 354.074688][ T5912] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 354.866576][ T5912] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 354.889149][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.930961][ T5912] usb 3-1: config 0 has no interface number 0 [ 354.951324][ T5912] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 354.991888][ T5912] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid wMaxPacketSize 0 [ 355.027515][ T5912] usb 3-1: config 0 interface 128 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 355.043393][ T5912] usb 3-1: config 0 interface 128 has no altsetting 0 [ 355.055134][ T5912] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 355.074757][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.099140][ T5912] usb 3-1: Product: syz [ 355.103387][ T5912] usb 3-1: Manufacturer: syz [ 355.112385][ T5912] usb 3-1: SerialNumber: syz [ 355.121310][ T5912] usb 3-1: config 0 descriptor?? [ 355.137134][ T5912] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 355.146419][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 355.158532][ T5912] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 355.169709][ T5912] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 355.179905][ T5904] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 355.396347][ T5904] usb 4-1: device descriptor read/64, error -71 [ 355.421754][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 355.436587][ T10] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 355.458562][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 355.496324][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 355.524785][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 355.556035][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 355.578033][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.596274][ T10] usb 1-1: Product: syz [ 355.600832][ T10] usb 1-1: Manufacturer: syz [ 355.605707][ T10] usb 1-1: SerialNumber: syz [ 355.724332][ T5904] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 356.167890][ T5904] usb 4-1: device descriptor read/64, error -71 [ 356.752237][ T10] usb 1-1: config 0 descriptor?? [ 356.765528][ T5946] usb 3-1: USB disconnect, device number 18 [ 356.779878][ T8690] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 356.824725][ T8690] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 356.857445][ T5904] usb usb4-port1: attempt power cycle [ 356.922603][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 356.936315][ T10] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 356.943535][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 357.270459][ T5904] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 357.317251][ T5904] usb 4-1: device descriptor read/8, error -71 [ 357.509698][ T8713] pim6reg1: entered promiscuous mode [ 357.516500][ T8713] pim6reg1: entered allmulticast mode [ 357.662787][ T5904] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 358.435454][ T5946] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 358.902790][ T5946] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 359.061824][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.225974][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.400740][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 359.639657][ T5946] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 359.666196][ T5904] usb 4-1: device not accepting address 24, error -71 [ 359.738941][ T5946] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 359.874873][ T5946] usb 2-1: Manufacturer: syz [ 360.118704][ T5946] usb 2-1: config 0 descriptor?? [ 360.969442][ T5904] usb usb4-port1: unable to enumerate USB device [ 361.623922][ T5946] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 361.661176][ T5946] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 361.717399][ T5946] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 361.793961][ T5904] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 361.886479][ T5946] usb 1-1: USB disconnect, device number 29 [ 362.035924][ T5946] mcba_usb 1-1:0.0 can0: device disconnected [ 362.116796][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 362.240465][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.453630][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.468151][ T5904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.470610][ T3079] usb 2-1: USB disconnect, device number 17 [ 362.496010][ T5904] usb 4-1: config 0 has no interface number 0 [ 362.543375][ T5904] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 362.580810][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.745277][ T5904] usb 4-1: Product: syz [ 362.858924][ T5904] usb 4-1: Manufacturer: syz [ 363.165228][ T5904] usb 4-1: SerialNumber: syz [ 363.173683][ T8735] fido_id[8735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 363.201595][ T5904] usb 4-1: config 0 descriptor?? [ 363.229876][ T5904] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 363.271412][ T5904] usb 4-1: selecting invalid altsetting 1 [ 363.297850][ T5904] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 363.365448][ T5904] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.402971][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 363.431166][ T8721] 9pnet_fd: Insufficient options for proto=fd [ 363.454872][ T5904] usb 4-1: media controller created [ 364.458295][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.586606][ T5904] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 364.616190][ T5904] zl10353_read_register: readreg error (reg=127, ret==-71) [ 365.176255][ T5904] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 365.791782][ T5904] usb 4-1: USB disconnect, device number 25 [ 365.827974][ T8770] fuse: Bad value for 'group_id' [ 365.833004][ T8770] fuse: Bad value for 'group_id' [ 366.135160][ T8776] overlayfs: failed to resolve './file1': -2 [ 367.676515][ T5904] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 367.878713][ T5904] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 367.952739][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 368.046595][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.193981][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.219881][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 368.292157][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 368.304811][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 368.335832][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.353623][ T5904] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 368.376779][ T8806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.393547][ T10] usb 1-1: config 0 has no interface number 0 [ 368.422586][ T5904] usb 3-1: Manufacturer: syz [ 368.448885][ T30] audit: type=1326 audit(1750658546.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.4.670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66038e929 code=0x0 [ 368.536621][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 368.567789][ T5904] usb 3-1: config 0 descriptor?? [ 368.645644][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.766148][ T10] usb 1-1: Product: syz [ 368.811637][ T10] usb 1-1: Manufacturer: syz [ 368.894019][ T10] usb 1-1: SerialNumber: syz [ 369.061880][ T10] usb 1-1: config 0 descriptor?? [ 369.143166][ T8794] binder: BINDER_SET_CONTEXT_MGR already set [ 369.227849][ T8794] binder: 8793:8794 ioctl 4018620d 200000000040 returned -16 [ 369.304649][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 369.341045][ T10] usb 1-1: selecting invalid altsetting 1 [ 369.367698][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 369.387144][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 369.398537][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 369.415449][ T10] usb 1-1: media controller created [ 369.464866][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.579586][ T8814] 9pnet_fd: Insufficient options for proto=fd [ 369.588841][ T5904] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 369.604541][ T5904] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 369.691822][ T5904] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 369.863763][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.897114][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.926868][ T3079] usb 3-1: USB disconnect, device number 19 [ 369.945385][ T8817] SET target dimension over the limit! [ 370.626723][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 370.656652][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 370.847707][ T8818] fido_id[8818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 371.669162][ T8827] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 371.710795][ T10] usb 1-1: USB disconnect, device number 30 [ 373.726314][ T5835] Bluetooth: hci0: command tx timeout [ 375.927797][ T3079] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 376.488247][ T3079] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 376.602349][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 376.634202][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.646286][ T3079] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.656922][ T3079] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 376.672395][ T3079] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 376.682719][ T3079] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 376.690968][ T3079] usb 2-1: Manufacturer: syz [ 376.718338][ T3079] usb 2-1: config 0 descriptor?? [ 376.798854][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 376.819918][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.844745][ T10] usb 5-1: config 0 has no interface number 0 [ 376.865598][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 376.885115][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.910622][ T8880] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 376.926775][ T10] usb 5-1: Product: syz [ 376.940384][ T10] usb 5-1: Manufacturer: syz [ 376.963990][ T10] usb 5-1: SerialNumber: syz [ 376.986667][ T10] usb 5-1: config 0 descriptor?? [ 377.024437][ T10] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 377.052334][ T10] usb 5-1: selecting invalid altsetting 1 [ 377.058918][ T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 377.079985][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 377.102096][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 377.112051][ T10] usb 5-1: media controller created [ 377.939155][ T3079] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 377.945235][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.970147][ T8875] 9pnet_fd: Insufficient options for proto=fd [ 377.971503][ T3079] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 378.021284][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.048788][ T3079] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 378.062343][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.108339][ T10] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 378.141430][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 378.156456][ T3079] usb 2-1: USB disconnect, device number 18 [ 378.167379][ T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 378.360717][ T10] usb 5-1: USB disconnect, device number 17 [ 378.471535][ T8888] fido_id[8888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 378.705815][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712320][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.872180][ T8897] FAULT_INJECTION: forcing a failure. [ 378.872180][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.899906][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.1.693 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 378.899926][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.899933][ T8897] Call Trace: [ 378.899938][ T8897] [ 378.899943][ T8897] dump_stack_lvl+0x189/0x250 [ 378.899964][ T8897] ? __pfx____ratelimit+0x10/0x10 [ 378.899981][ T8897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.899996][ T8897] ? __pfx__printk+0x10/0x10 [ 378.900016][ T8897] should_fail_ex+0x414/0x560 [ 378.900033][ T8897] _copy_to_user+0x31/0xb0 [ 378.900045][ T8897] simple_read_from_buffer+0xe1/0x170 [ 378.900063][ T8897] proc_fail_nth_read+0x1df/0x250 [ 378.900082][ T8897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.900099][ T8897] ? rw_verify_area+0x258/0x650 [ 378.900111][ T8897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.900127][ T8897] vfs_read+0x200/0x980 [ 378.900143][ T8897] ? __pfx___mutex_lock+0x10/0x10 [ 378.900160][ T8897] ? __pfx_vfs_read+0x10/0x10 [ 378.900173][ T8897] ? __fget_files+0x2a/0x420 [ 378.900189][ T8897] ? __fget_files+0x3a0/0x420 [ 378.900202][ T8897] ? __fget_files+0x2a/0x420 [ 378.900222][ T8897] ksys_read+0x145/0x250 [ 378.900236][ T8897] ? __pfx_ksys_read+0x10/0x10 [ 378.900247][ T8897] ? rcu_is_watching+0x15/0xb0 [ 378.900266][ T8897] ? do_syscall_64+0xbe/0x3b0 [ 378.900285][ T8897] do_syscall_64+0xfa/0x3b0 [ 378.900300][ T8897] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.900315][ T8897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.900325][ T8897] ? clear_bhb_loop+0x60/0xb0 [ 378.900346][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.900356][ T8897] RIP: 0033:0x7fa4d4d8d33c [ 378.900368][ T8897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 378.900377][ T8897] RSP: 002b:00007fa4d5bed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.900391][ T8897] RAX: ffffffffffffffda RBX: 00007fa4d4fb5fa0 RCX: 00007fa4d4d8d33c [ 378.900399][ T8897] RDX: 000000000000000f RSI: 00007fa4d5bed0a0 RDI: 0000000000000004 [ 378.900406][ T8897] RBP: 00007fa4d5bed090 R08: 0000000000000000 R09: 0000000000000000 [ 378.900412][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.900419][ T8897] R13: 0000000000000000 R14: 00007fa4d4fb5fa0 R15: 00007ffc42c65e58 [ 378.900437][ T8897] [ 379.138072][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.144699][ T5835] Bluetooth: hci0: command tx timeout [ 379.936220][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 380.502423][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 380.554158][ T10] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 380.586342][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 380.600812][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 380.611418][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 380.628837][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 380.647997][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.658115][ T10] usb 5-1: Product: syz [ 380.662304][ T10] usb 5-1: Manufacturer: syz [ 380.676942][ T10] usb 5-1: SerialNumber: syz [ 380.685365][ T10] usb 5-1: config 0 descriptor?? [ 380.693468][ T8904] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.722312][ T8904] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.946464][ T8915] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 380.985637][ T10] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 380.992944][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 380.993085][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 381.550645][ T8921] pim6reg1: entered promiscuous mode [ 381.557059][ T8921] pim6reg1: entered allmulticast mode [ 381.813502][ T8907] kexec: Could not allocate control_code_buffer [ 382.046257][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 383.014284][ T5835] Bluetooth: hci0: command tx timeout [ 384.526265][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 386.030351][ T10] usb 3-1: device descriptor read/all, error -71 [ 386.269536][ T5904] usb 5-1: USB disconnect, device number 18 [ 386.281350][ T5904] mcba_usb 5-1:0.0 can0: device disconnected [ 386.766273][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 387.217112][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 387.260725][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.396297][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.456203][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 388.039475][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 388.079645][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 388.167872][ T10] usb 3-1: Manufacturer: syz [ 388.628996][ T10] usb 3-1: config 0 descriptor?? [ 388.746046][ T8961] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 388.924914][ T8967] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 389.036600][ T8967] bond2: entered promiscuous mode [ 389.042219][ T8967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.100303][ T10] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 389.346706][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.466287][ T5911] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 389.630234][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.965256][ T10] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 389.978095][ T10] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 389.996459][ T10] usb 3-1: USB disconnect, device number 21 [ 390.067348][ T8971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.074552][ T8971] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 390.103052][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 390.156873][ T5911] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 390.198700][ T8971] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 390.203770][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 390.288853][ T8971] bond2: (slave ip6gre1): making interface the new active one [ 390.372994][ T8971] ip6gre1: entered promiscuous mode [ 390.448891][ T8971] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 390.480937][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.496159][ T5911] usb 4-1: Product: syz [ 390.500459][ T5911] usb 4-1: Manufacturer: syz [ 390.505096][ T5911] usb 4-1: SerialNumber: syz [ 390.526405][ T8976] fido_id[8976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 390.756428][ T5835] Bluetooth: hci0: command tx timeout [ 391.388534][ T5911] usb 4-1: config 0 descriptor?? [ 391.403012][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 392.176309][ T3079] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 392.387550][ T3079] usb 5-1: Using ep0 maxpacket: 8 [ 392.497837][ T3079] usb 5-1: config 0 interface 0 has no altsetting 0 [ 392.700836][ T3079] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 392.725073][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.758857][ T3079] usb 5-1: Product: syz [ 392.776273][ T3079] usb 5-1: Manufacturer: syz [ 392.936151][ T3079] usb 5-1: SerialNumber: syz [ 392.965248][ T3079] usb 5-1: config 0 descriptor?? [ 393.091061][ T9016] FAULT_INJECTION: forcing a failure. [ 393.091061][ T9016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.105097][ T9016] CPU: 1 UID: 0 PID: 9016 Comm: syz.0.720 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 393.105123][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.105134][ T9016] Call Trace: [ 393.105143][ T9016] [ 393.105156][ T9016] dump_stack_lvl+0x189/0x250 [ 393.105188][ T9016] ? __pfx____ratelimit+0x10/0x10 [ 393.105214][ T9016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.105239][ T9016] ? __pfx__printk+0x10/0x10 [ 393.105259][ T9016] ? __might_fault+0xb0/0x130 [ 393.105294][ T9016] should_fail_ex+0x414/0x560 [ 393.105323][ T9016] _copy_from_user+0x2d/0xb0 [ 393.105342][ T9016] btf_new_fd+0x33a/0xc90 [ 393.105373][ T9016] ? __pfx_btf_new_fd+0x10/0x10 [ 393.105393][ T9016] ? bpf_token_put+0x143/0x160 [ 393.105416][ T9016] ? bpf_btf_load+0x126/0x190 [ 393.105443][ T9016] __sys_bpf+0x635/0x860 [ 393.105469][ T9016] ? __pfx___sys_bpf+0x10/0x10 [ 393.105496][ T9016] ? preempt_schedule_irq+0xde/0x150 [ 393.105556][ T9016] __x64_sys_bpf+0x7c/0x90 [ 393.105577][ T9016] do_syscall_64+0xfa/0x3b0 [ 393.105606][ T9016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.105622][ T9016] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 393.105639][ T9016] ? clear_bhb_loop+0x60/0xb0 [ 393.105662][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.105679][ T9016] RIP: 0033:0x7fa72498e929 [ 393.105696][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.105713][ T9016] RSP: 002b:00007fa725791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.105733][ T9016] RAX: ffffffffffffffda RBX: 00007fa724bb6160 RCX: 00007fa72498e929 [ 393.105748][ T9016] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 393.105760][ T9016] RBP: 00007fa725791090 R08: 0000000000000000 R09: 0000000000000000 [ 393.105771][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.105781][ T9016] R13: 0000000000000000 R14: 00007fa724bb6160 R15: 00007ffe90755718 [ 393.105813][ T9016] [ 393.307662][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.386848][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 393.395945][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 393.434280][ T8997] xt_bpf: check failed: parse error [ 393.481293][ T3079] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 394.317529][ T5911] gspca_zc3xx: reg_r err -110 [ 394.916272][ T5911] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 394.923613][ T5911] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 395.066265][ T5911] usb 4-1: USB disconnect, device number 26 [ 395.093102][ T9025] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 395.099398][ T3079] snd_usb_toneport 5-1:0.0: set_interface failed [ 395.106653][ T3079] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 395.162647][ T3079] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 395.258448][ T3079] usb 5-1: USB disconnect, device number 19 [ 397.157150][ T5835] Bluetooth: hci0: command tx timeout [ 397.326188][ T5904] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 397.513477][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 397.526306][ T5904] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.564980][ T5904] usb 1-1: config 0 has no interface number 0 [ 397.597327][ T5904] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 397.623547][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.679560][ T5904] usb 1-1: Product: syz [ 397.720432][ T5904] usb 1-1: Manufacturer: syz [ 397.756000][ T5904] usb 1-1: SerialNumber: syz [ 397.827881][ T5904] usb 1-1: config 0 descriptor?? [ 398.839089][ T5904] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 398.956280][ T5904] usb 1-1: selecting invalid altsetting 1 [ 399.028716][ T5904] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 399.228100][ T9044] 9pnet_fd: Insufficient options for proto=fd [ 399.253214][ T5904] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 399.296664][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 399.305131][ T5904] usb 1-1: media controller created [ 399.329035][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.406895][ T5904] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 399.447294][ T5904] zl10353_read_register: readreg error (reg=127, ret==-71) [ 399.921668][ T5904] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 400.152204][ T9078] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 400.196252][ T5904] usb 1-1: USB disconnect, device number 31 [ 400.504600][ T9078] bond3: entered promiscuous mode [ 400.556725][ T9078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.672762][ T9083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.688989][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 400.706723][ T9083] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 401.008482][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 401.541590][ T9083] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 401.552834][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 401.614694][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 401.676200][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.093507][ T9083] bond3: (slave ip6gre1): making interface the new active one [ 402.126974][ T10] usb 5-1: Product: syz [ 402.127681][ T9083] ip6gre1: entered promiscuous mode [ 402.131213][ T10] usb 5-1: Manufacturer: syz [ 402.131233][ T10] usb 5-1: SerialNumber: syz [ 402.149248][ T9083] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 402.162055][ T10] usb 5-1: config 0 descriptor?? [ 402.240740][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 403.360653][ T9110] vivid-000: disconnect [ 403.616571][ T5946] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 403.862649][ T5946] usb 4-1: device descriptor read/64, error -71 [ 404.177166][ T5946] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 404.233022][ T9107] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 404.346482][ T5946] usb 4-1: device descriptor read/64, error -71 [ 404.484870][ T9116] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 404.576901][ T9107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.745'. [ 404.585975][ T9107] openvswitch: netlink: Flow key attr not present in new flow. [ 404.670572][ T5946] usb usb4-port1: attempt power cycle [ 404.711499][ T10] gspca_zc3xx: reg_r err -71 [ 404.986598][ T3079] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 405.076558][ T5946] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 405.178451][ T5946] usb 4-1: device descriptor read/8, error -71 [ 405.216315][ T3079] usb 1-1: Using ep0 maxpacket: 32 [ 405.249774][ T3079] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.321300][ T3079] usb 1-1: config 0 has no interface number 0 [ 405.350413][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 405.433684][ T3079] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 405.441055][ T10] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 405.455072][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.484839][ T5946] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 405.525594][ T3079] usb 1-1: Product: syz [ 405.537119][ T3079] usb 1-1: Manufacturer: syz [ 405.546422][ T10] usb 5-1: USB disconnect, device number 20 [ 405.549595][ T3079] usb 1-1: SerialNumber: syz [ 405.564081][ T5946] usb 4-1: device descriptor read/8, error -71 [ 405.593880][ T3079] usb 1-1: config 0 descriptor?? [ 405.622580][ T3079] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 405.635797][ T3079] usb 1-1: selecting invalid altsetting 1 [ 405.654089][ T3079] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 405.686820][ T5946] usb usb4-port1: unable to enumerate USB device [ 405.702911][ T3079] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.730170][ T3079] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 405.747043][ T3079] usb 1-1: media controller created [ 405.798024][ T3079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.812921][ T9118] 9pnet_fd: Insufficient options for proto=fd [ 405.846774][ T9129] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 405.876166][ T9110] vivid-000: reconnect [ 405.916591][ T9129] bond2: entered promiscuous mode [ 405.924189][ T9129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.015806][ T3079] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 406.045541][ T3079] zl10353_read_register: readreg error (reg=127, ret==-71) [ 406.060314][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 406.127387][ T3079] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 406.386493][ T5911] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 407.026578][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 407.109712][ T3079] usb 1-1: USB disconnect, device number 32 [ 407.116239][ T5911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 407.116515][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 407.159469][ T10] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 407.185657][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 407.338050][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 407.392362][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 407.455319][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 407.497554][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.543164][ T10] usb 3-1: Product: syz [ 407.567476][ T10] usb 3-1: Manufacturer: syz [ 407.588578][ T10] usb 3-1: SerialNumber: syz [ 407.646811][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 407.656009][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.667050][ T5911] usb 2-1: Product: syz [ 407.671281][ T5911] usb 2-1: Manufacturer: syz [ 407.675909][ T5911] usb 2-1: SerialNumber: syz [ 407.707392][ T10] usb 3-1: config 0 descriptor?? [ 407.738922][ T9127] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 407.748795][ T9127] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 407.762788][ T5911] usb 2-1: config 0 descriptor?? [ 407.824631][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 407.851016][ T10] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 407.851157][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 407.864829][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 408.253387][ T9153] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 408.301286][ T9154] pim6reg1: entered promiscuous mode [ 408.307070][ T9154] pim6reg1: entered allmulticast mode [ 408.746520][ T5911] gspca_zc3xx: reg_w_i err -110 [ 409.836163][ T5911] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 409.842731][ T5911] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 411.390931][ T9153] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 412.464933][ T9] usb 3-1: USB disconnect, device number 22 [ 412.601810][ T5911] usb 2-1: USB disconnect, device number 19 [ 412.658643][ T9160] Cannot find set identified by id 0 to match [ 412.666733][ T9160] netlink: 'syz.4.761': attribute type 4 has an invalid length. [ 412.688432][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 413.009785][ T9171] Cannot find add_set index 0 as target [ 414.346177][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 415.226203][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 415.256273][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.276111][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.313986][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 415.377501][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 415.396693][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 415.405422][ T10] usb 1-1: Manufacturer: syz [ 415.426028][ T10] usb 1-1: config 0 descriptor?? [ 415.889650][ T10] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 415.923691][ T10] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 416.014507][ T10] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 416.167098][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.699470][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.773553][ T5911] usb 1-1: USB disconnect, device number 33 [ 417.275806][ T9206] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 419.336496][ T5904] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 420.433266][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 420.487813][ T9236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.779'. [ 420.504542][ T5904] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 420.712474][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 421.165026][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 421.175282][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 421.189594][ T5904] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 421.198762][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.216185][ T5904] usb 2-1: Product: syz [ 421.220402][ T5904] usb 2-1: Manufacturer: syz [ 421.225065][ T5904] usb 2-1: SerialNumber: syz [ 421.264827][ T5904] usb 2-1: config 0 descriptor?? [ 421.419786][ T9220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.442758][ T9220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.580772][ T5904] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 421.588316][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 421.588456][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 421.950420][ T9260] FAULT_INJECTION: forcing a failure. [ 421.950420][ T9260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.021358][ T9260] CPU: 0 UID: 0 PID: 9260 Comm: syz.4.784 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 422.021388][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.021399][ T9260] Call Trace: [ 422.021406][ T9260] [ 422.021414][ T9260] dump_stack_lvl+0x189/0x250 [ 422.021446][ T9260] ? __pfx____ratelimit+0x10/0x10 [ 422.021472][ T9260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.021497][ T9260] ? __pfx__printk+0x10/0x10 [ 422.021529][ T9260] should_fail_ex+0x414/0x560 [ 422.021556][ T9260] _copy_to_user+0x31/0xb0 [ 422.021576][ T9260] bpf_test_finish+0x24e/0x700 [ 422.021607][ T9260] ? __pfx_bpf_test_finish+0x10/0x10 [ 422.021633][ T9260] ? bpf_test_init+0x133/0x170 [ 422.021652][ T9260] bpf_prog_test_run_xdp+0x79a/0x1000 [ 422.021691][ T9260] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.021714][ T9260] ? __fget_files+0x2a/0x420 [ 422.021743][ T9260] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.021764][ T9260] bpf_prog_test_run+0x2c7/0x340 [ 422.021793][ T9260] __sys_bpf+0x4a4/0x860 [ 422.021816][ T9260] ? __pfx___sys_bpf+0x10/0x10 [ 422.021854][ T9260] ? ksys_write+0x22a/0x250 [ 422.021879][ T9260] ? __pfx_ksys_write+0x10/0x10 [ 422.021903][ T9260] ? rcu_is_watching+0x15/0xb0 [ 422.021937][ T9260] __x64_sys_bpf+0x7c/0x90 [ 422.021959][ T9260] do_syscall_64+0xfa/0x3b0 [ 422.021984][ T9260] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.022009][ T9260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.022036][ T9260] ? clear_bhb_loop+0x60/0xb0 [ 422.022060][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.022077][ T9260] RIP: 0033:0x7fa66038e929 [ 422.022095][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.022110][ T9260] RSP: 002b:00007fa6612a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.022131][ T9260] RAX: ffffffffffffffda RBX: 00007fa6605b5fa0 RCX: 00007fa66038e929 [ 422.022144][ T9260] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 422.022156][ T9260] RBP: 00007fa6612a9090 R08: 0000000000000000 R09: 0000000000000000 [ 422.022167][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.022178][ T9260] R13: 0000000000000000 R14: 00007fa6605b5fa0 R15: 00007fffb4e0edb8 [ 422.022210][ T9260] [ 422.254097][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.388240][ T9263] pim6reg1: entered promiscuous mode [ 422.449033][ T9263] pim6reg1: entered allmulticast mode [ 424.009646][ T5911] usb 2-1: USB disconnect, device number 20 [ 424.020380][ T5911] mcba_usb 2-1:0.0 can0: device disconnected [ 424.050965][ T5985] Bluetooth: (null): Invalid header checksum [ 424.074448][ T5985] Bluetooth: (null): Invalid header checksum [ 424.165195][ T8039] Bluetooth: (null): Invalid header checksum [ 424.242024][ T8010] Bluetooth: (null): Invalid header checksum [ 424.392867][ T8010] Bluetooth: (null): Invalid header checksum [ 425.248411][ T8039] Bluetooth: (null): Invalid header checksum [ 425.254564][ T8039] Bluetooth: (null): Invalid header checksum [ 425.294207][ T8039] Bluetooth: (null): Invalid header checksum [ 425.338674][ T8039] Bluetooth: (null): Invalid header checksum [ 425.344832][ T8039] Bluetooth: (null): Invalid header checksum [ 425.396719][ T8039] Bluetooth: (null): Invalid header checksum [ 425.402870][ T8039] Bluetooth: (null): Invalid header checksum [ 425.447558][ T8039] Bluetooth: (null): Invalid header checksum [ 425.453702][ T8039] Bluetooth: (null): Invalid header checksum [ 425.541336][ T8039] Bluetooth: (null): Invalid header checksum [ 425.786172][ T8039] Bluetooth: (null): Invalid header checksum [ 425.795283][ T8039] Bluetooth: (null): Invalid header checksum [ 425.823750][ T8039] Bluetooth: (null): Invalid header checksum [ 426.188894][ T36] Bluetooth: (null): Invalid header checksum [ 426.236328][ T36] Bluetooth: (null): Invalid header checksum [ 426.243702][ T36] Bluetooth: (null): Invalid header checksum [ 426.263975][ T36] Bluetooth: (null): Invalid header checksum [ 426.347369][ T8039] Bluetooth: (null): Invalid header checksum [ 426.446818][ T5985] Bluetooth: (null): Invalid header checksum [ 426.610195][ T5985] Bluetooth: (null): Invalid header checksum [ 426.693699][ T5985] Bluetooth: (null): Invalid header checksum [ 426.770563][ T8039] Bluetooth: (null): Invalid header checksum [ 426.881136][ T8039] Bluetooth: (null): Invalid header checksum [ 426.999792][ T8039] Bluetooth: (null): Invalid header checksum [ 427.097238][ T8010] Bluetooth: (null): Invalid header checksum [ 427.257334][ T8039] Bluetooth: (null): Invalid header checksum [ 428.093580][ T8039] Bluetooth: (null): Invalid header checksum [ 428.243250][ T8039] Bluetooth: (null): Invalid header checksum [ 428.253774][ T8039] Bluetooth: (null): Invalid header checksum [ 428.264891][ T8039] Bluetooth: (null): Invalid header checksum [ 428.271149][ T8039] Bluetooth: (null): Invalid header checksum [ 428.278062][ T8039] Bluetooth: (null): Invalid header checksum [ 428.312802][ T8039] Bluetooth: (null): Invalid header checksum [ 428.319150][ T8039] Bluetooth: (null): Invalid header checksum [ 428.326350][ T8039] Bluetooth: (null): Invalid header checksum [ 428.332383][ T8039] Bluetooth: (null): Invalid header checksum [ 428.432297][ T8039] Bluetooth: (null): Invalid header checksum [ 428.680556][ T8005] Bluetooth: (null): Invalid header checksum [ 428.699482][ T8005] Bluetooth: (null): Invalid header checksum [ 428.756762][ T5985] Bluetooth: (null): Invalid header checksum [ 428.870720][ T8039] Bluetooth: (null): Invalid header checksum [ 428.984102][ T8039] Bluetooth: (null): Invalid header checksum [ 429.100919][ T5985] Bluetooth: (null): Invalid header checksum [ 429.200802][ T36] Bluetooth: (null): Invalid header checksum [ 429.331010][ T36] Bluetooth: (null): Invalid header checksum [ 429.446365][ T36] Bluetooth: (null): Invalid header checksum [ 429.680766][ T36] Bluetooth: (null): Invalid header checksum [ 429.716542][ T36] Bluetooth: (null): Invalid header checksum [ 429.777585][ T8039] Bluetooth: (null): Invalid header checksum [ 429.966733][ T8039] Bluetooth: (null): Invalid header checksum [ 430.012232][ T8039] Bluetooth: (null): Invalid header checksum [ 430.090934][ T8034] Bluetooth: (null): Invalid header checksum [ 430.261005][ T8034] Bluetooth: (null): Invalid header checksum [ 430.328445][ T8034] Bluetooth: (null): Invalid header checksum [ 430.416631][ T8010] Bluetooth: (null): Invalid header checksum [ 430.645253][ T8034] Bluetooth: (null): Invalid header checksum [ 430.656468][ T8007] Bluetooth: (null): Invalid header checksum [ 431.317664][ T8010] Bluetooth: (null): Invalid header checksum [ 431.317720][ T8010] Bluetooth: (null): Invalid header checksum [ 431.317799][ T8010] Bluetooth: (null): Invalid header checksum [ 431.317843][ T8010] Bluetooth: (null): Invalid header checksum [ 431.317904][ T8010] Bluetooth: (null): Invalid header checksum [ 431.327912][ T8034] Bluetooth: (null): Invalid header checksum [ 431.439669][ T8005] Bluetooth: (null): Invalid header checksum [ 431.579654][ T8034] Bluetooth: (null): Invalid header checksum [ 431.651637][ T9363] tty tty2: ldisc open failed (-12), clearing slot 1 [ 431.669341][ T8005] Bluetooth: (null): Invalid header checksum [ 431.804673][ T8034] Bluetooth: (null): Invalid header checksum [ 432.086237][ T8034] Bluetooth: (null): Invalid header checksum [ 432.102558][ T8034] Bluetooth: (null): Invalid header checksum [ 432.131197][ T8007] Bluetooth: (null): Invalid header checksum [ 432.236620][ T8034] Bluetooth: (null): Invalid header checksum [ 432.244939][ T9382] FAULT_INJECTION: forcing a failure. [ 432.244939][ T9382] name failslab, interval 1, probability 0, space 0, times 0 [ 432.323555][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.1.812 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 432.323583][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.323594][ T9382] Call Trace: [ 432.323601][ T9382] [ 432.323610][ T9382] dump_stack_lvl+0x189/0x250 [ 432.323641][ T9382] ? __pfx____ratelimit+0x10/0x10 [ 432.323666][ T9382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.323693][ T9382] ? __pfx__printk+0x10/0x10 [ 432.323727][ T9382] should_fail_ex+0x414/0x560 [ 432.323754][ T9382] should_failslab+0xa8/0x100 [ 432.323780][ T9382] __kmalloc_noprof+0xcb/0x4f0 [ 432.323800][ T9382] ? vmci_handle_arr_create+0x71/0x140 [ 432.323829][ T9382] ? __raw_spin_lock_init+0x45/0x100 [ 432.323853][ T9382] vmci_handle_arr_create+0x71/0x140 [ 432.323881][ T9382] vmci_ctx_create+0x1fe/0x650 [ 432.323913][ T9382] vmci_host_unlocked_ioctl+0x1a55/0x2650 [ 432.323947][ T9382] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 432.323991][ T9382] ? do_vfs_ioctl+0xf37/0x1990 [ 432.324015][ T9382] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 432.324043][ T9382] ? kasan_quarantine_put+0xdd/0x220 [ 432.324073][ T9382] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 432.324097][ T9382] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 432.324119][ T9382] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 432.324139][ T9382] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 432.324162][ T9382] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.324205][ T9382] ? __lock_acquire+0xab9/0xd20 [ 432.324231][ T9382] ? __asan_memset+0x22/0x50 [ 432.324248][ T9382] ? smack_file_ioctl+0x24a/0x340 [ 432.324272][ T9382] ? __pfx_smack_file_ioctl+0x10/0x10 [ 432.324301][ T9382] ? __fget_files+0x2a/0x420 [ 432.324324][ T9382] ? __fget_files+0x3a0/0x420 [ 432.324345][ T9382] ? __fget_files+0x2a/0x420 [ 432.324369][ T9382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 432.324393][ T9382] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 432.324418][ T9382] __se_sys_ioctl+0xfc/0x170 [ 432.324441][ T9382] do_syscall_64+0xfa/0x3b0 [ 432.324466][ T9382] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.324490][ T9382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.324508][ T9382] ? clear_bhb_loop+0x60/0xb0 [ 432.324531][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.324548][ T9382] RIP: 0033:0x7fa4d4d8e929 [ 432.324565][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.324581][ T9382] RSP: 002b:00007fa4d5bed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.324603][ T9382] RAX: ffffffffffffffda RBX: 00007fa4d4fb5fa0 RCX: 00007fa4d4d8e929 [ 432.324616][ T9382] RDX: 0000200000000180 RSI: 00000000000007a0 RDI: 0000000000000005 [ 432.324628][ T9382] RBP: 00007fa4d5bed090 R08: 0000000000000000 R09: 0000000000000000 [ 432.324639][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.324650][ T9382] R13: 0000000000000000 R14: 00007fa4d4fb5fa0 R15: 00007ffc42c65e58 [ 432.324683][ T9382] [ 432.620118][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.635640][ T8005] Bluetooth: (null): Invalid header checksum [ 432.641921][ T8005] Bluetooth: (null): Invalid header checksum [ 432.652254][ T8005] Bluetooth: (null): Invalid header checksum [ 432.838137][ T8007] Bluetooth: (null): Invalid header checksum [ 432.957176][ T8007] Bluetooth: (null): Invalid header checksum [ 433.074082][ T8007] Bluetooth: (null): Invalid header checksum [ 433.167434][ T8007] Bluetooth: (null): Invalid header checksum [ 433.246177][ T8007] Bluetooth: (null): Invalid header checksum [ 433.375031][ T8039] Bluetooth: (null): Invalid header checksum [ 433.538170][ T8039] Bluetooth: (null): Invalid header checksum [ 433.556410][ T8034] Bluetooth: (null): Invalid header checksum [ 433.666830][ T8039] Bluetooth: (null): Invalid header checksum [ 433.766469][ T8034] Bluetooth: (null): Invalid header checksum [ 433.882267][ T8034] Bluetooth: (null): Invalid header checksum [ 434.464198][ T8034] Bluetooth: (null): Invalid header checksum [ 434.480829][ T8034] Bluetooth: (null): Invalid header checksum [ 434.501947][ T8034] Bluetooth: (null): Invalid header checksum [ 434.525915][ T8034] Bluetooth: (null): Invalid header checksum [ 434.556578][ T8034] Bluetooth: (null): Invalid header checksum [ 434.594183][ T8034] Bluetooth: (null): Invalid header checksum [ 434.681542][ T8034] Bluetooth: (null): Invalid header checksum [ 434.780146][ T9399] mmap: syz.1.818 (9399): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 434.795656][ T8034] Bluetooth: (null): Invalid header checksum [ 434.877375][ T5911] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 434.909253][ T8005] Bluetooth: (null): Invalid header checksum [ 435.006642][ T8039] Bluetooth: (null): Invalid header checksum [ 435.038097][ T5911] usb 4-1: device descriptor read/64, error -71 [ 435.119291][ T8005] Bluetooth: (null): Invalid header checksum [ 435.962466][ T8005] Bluetooth: (null): Invalid header checksum [ 435.969392][ T8005] Bluetooth: (null): Invalid header checksum [ 435.975536][ T8005] Bluetooth: (null): Invalid header checksum [ 435.982000][ T8005] Bluetooth: (null): Invalid header checksum [ 435.990410][ T8005] Bluetooth: (null): Invalid header checksum [ 435.998206][ T8005] Bluetooth: (null): Invalid header checksum [ 436.004390][ T8005] Bluetooth: (null): Invalid header checksum [ 436.025494][ T8005] Bluetooth: (null): Invalid header checksum [ 436.038728][ T5911] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 436.396904][ T8039] Bluetooth: (null): Invalid header checksum [ 436.403265][ T8039] Bluetooth: (null): Invalid header checksum [ 436.410820][ T8039] Bluetooth: (null): Invalid header checksum [ 436.426220][ T5911] usb 4-1: device descriptor read/64, error -71 [ 436.528199][ T8007] Bluetooth: (null): Invalid header checksum [ 436.537988][ T5911] usb usb4-port1: attempt power cycle [ 436.655423][ T9419] FAULT_INJECTION: forcing a failure. [ 436.655423][ T9419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.669225][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.0.823 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 436.669253][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.669264][ T9419] Call Trace: [ 436.669274][ T9419] [ 436.669284][ T9419] dump_stack_lvl+0x189/0x250 [ 436.669317][ T9419] ? __pfx____ratelimit+0x10/0x10 [ 436.669345][ T9419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.669372][ T9419] ? __pfx__printk+0x10/0x10 [ 436.669395][ T9419] ? fs_reclaim_acquire+0x7d/0x100 [ 436.669431][ T9419] should_fail_ex+0x414/0x560 [ 436.669461][ T9419] prepare_alloc_pages+0x213/0x610 [ 436.669497][ T9419] __alloc_frozen_pages_noprof+0x123/0x370 [ 436.669530][ T9419] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.669567][ T9419] ? policy_nodemask+0x27c/0x720 [ 436.669598][ T9419] alloc_pages_mpol+0x232/0x4a0 [ 436.669627][ T9419] folio_alloc_mpol_noprof+0x39/0x70 [ 436.669653][ T9419] shmem_alloc_and_add_folio+0x447/0xf60 [ 436.669679][ T9419] ? filemap_get_entry+0xad/0x2f0 [ 436.669699][ T9419] ? filemap_get_entry+0xad/0x2f0 [ 436.669716][ T9419] ? filemap_get_entry+0xad/0x2f0 [ 436.669737][ T9419] ? filemap_get_entry+0x28f/0x2f0 [ 436.669760][ T9419] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 436.669789][ T9419] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 436.669817][ T9419] shmem_get_folio_gfp+0x59d/0x1660 [ 436.669860][ T9419] shmem_fallocate+0x80f/0xde0 [ 436.669915][ T9419] ? __pfx_shmem_fallocate+0x10/0x10 [ 436.669948][ T9419] ? rcu_read_lock_any_held+0xb3/0x120 [ 436.669976][ T9419] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 436.670021][ T9419] vfs_fallocate+0x6a0/0x830 [ 436.670042][ T9419] ? __fget_files+0x2a/0x420 [ 436.670073][ T9419] ? __pfx_vfs_fallocate+0x10/0x10 [ 436.670093][ T9419] ? __fget_files+0x2a/0x420 [ 436.670127][ T9419] __x64_sys_fallocate+0xc0/0x110 [ 436.670153][ T9419] do_syscall_64+0xfa/0x3b0 [ 436.670179][ T9419] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.670204][ T9419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.670222][ T9419] ? clear_bhb_loop+0x60/0xb0 [ 436.670246][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.670264][ T9419] RIP: 0033:0x7fa72498e929 [ 436.670283][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.670300][ T9419] RSP: 002b:00007fa7257b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 436.670320][ T9419] RAX: ffffffffffffffda RBX: 00007fa724bb6080 RCX: 00007fa72498e929 [ 436.670335][ T9419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 436.670346][ T9419] RBP: 00007fa7257b2090 R08: 0000000000000000 R09: 0000000000000000 [ 436.670357][ T9419] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 436.670368][ T9419] R13: 0000000000000000 R14: 00007fa724bb6080 R15: 00007ffe90755718 [ 436.670401][ T9419] [ 437.016427][ T5911] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 437.038923][ T5911] usb 4-1: device descriptor read/8, error -71 [ 437.276327][ T5911] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 437.439294][ T8034] Bluetooth: (null): Invalid header checksum [ 437.445625][ T8007] Bluetooth: (null): Invalid header checksum [ 437.453261][ T8007] Bluetooth: (null): Invalid header checksum [ 437.459570][ T8007] Bluetooth: (null): Invalid header checksum [ 437.466555][ T8007] Bluetooth: (null): Invalid header checksum [ 437.473497][ T5911] usb 4-1: device descriptor read/8, error -71 [ 437.473604][ T8007] Bluetooth: (null): Invalid header checksum [ 437.517303][ T8005] Bluetooth: (null): Invalid header checksum [ 437.597493][ T5911] usb usb4-port1: unable to enumerate USB device [ 437.655200][ T8034] Bluetooth: (null): Invalid header checksum [ 438.472732][ T8007] Bluetooth: (null): Invalid header checksum [ 438.479225][ T8007] Bluetooth: (null): Invalid header checksum [ 438.485545][ T8007] Bluetooth: (null): Invalid header checksum [ 438.491766][ T8007] Bluetooth: (null): Invalid header checksum [ 438.498017][ T8007] Bluetooth: (null): Invalid header checksum [ 438.504236][ T8007] Bluetooth: (null): Invalid header checksum [ 438.512110][ T8007] Bluetooth: (null): Invalid header checksum [ 438.530042][ T8010] Bluetooth: (null): Invalid header checksum [ 438.632575][ T8039] Bluetooth: (null): Invalid header checksum [ 438.762022][ T9431] usb usb8: usbfs: process 9431 (syz.3.827) did not claim interface 0 before use [ 438.772812][ T8039] Bluetooth: (null): Invalid header checksum [ 438.933554][ T8039] Bluetooth: (null): Invalid header checksum [ 438.947207][ T5904] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 438.958180][ T8010] Bluetooth: (null): Invalid header checksum [ 439.034418][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.176931][ T5911] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 439.177414][ T8010] Bluetooth: (null): Invalid header checksum [ 439.191462][ T8010] Bluetooth: (null): Invalid header checksum [ 439.226345][ T5912] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 439.296913][ T8034] Bluetooth: (null): Invalid header checksum [ 439.336237][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 439.346181][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 439.350573][ T5904] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 439.353357][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.359050][ T5912] usb 1-1: device descriptor read/64, error -71 [ 439.375618][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.379651][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 439.387933][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.402836][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 439.415153][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 439.428298][ T8010] Bluetooth: (null): Invalid header checksum [ 439.428635][ T5904] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 439.434914][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.447629][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.452355][ T5911] usb 4-1: Product: syz [ 439.461825][ T5904] usb 3-1: Product: syz [ 439.464583][ T5911] usb 4-1: Manufacturer: syz [ 439.470749][ T5904] usb 3-1: Manufacturer: syz [ 439.473489][ T5911] usb 4-1: SerialNumber: syz [ 439.479638][ T5904] usb 3-1: SerialNumber: syz [ 439.515433][ T5904] usb 3-1: config 0 descriptor?? [ 439.524948][ T9428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.533705][ T8034] Bluetooth: (null): Invalid header checksum [ 439.545280][ T9428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.588464][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 439.595636][ T5904] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 439.603175][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 439.626749][ T8005] Bluetooth: (null): Invalid header checksum [ 439.636170][ T5912] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 439.704031][ T5911] usb 4-1: 0:2 : does not exist [ 439.749283][ T8010] Bluetooth: (null): Invalid header checksum [ 439.786255][ T5912] usb 1-1: device descriptor read/64, error -71 [ 439.802186][ T5911] usb 4-1: USB disconnect, device number 35 [ 440.011326][ T5912] usb usb1-port1: attempt power cycle [ 441.422757][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.438543][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.186162][ T5912] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 574.514150][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 144s! [aoe_tx0:1298] [ 574.514168][ C1] Modules linked in: [ 574.514177][ C1] irq event stamp: 447598175 [ 574.514181][ C1] hardirqs last enabled at (447598174): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 574.514205][ C1] hardirqs last disabled at (447598175): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 574.514220][ C1] softirqs last enabled at (12506): [] __dev_queue_xmit+0x27e/0x3a70 [ 574.514236][ C1] softirqs last disabled at (12514): [] __dev_queue_xmit+0x27e/0x3a70 [ 574.514253][ C1] CPU: 1 UID: 0 PID: 1298 Comm: aoe_tx0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 574.514266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.514272][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 574.514285][ C1] Code: 74 05 e8 6b 13 66 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 33 fe 2e f6 65 8b 05 2c eb 37 07 85 c0 74 40 48 c7 04 24 0e 36 [ 574.514294][ C1] RSP: 0018:ffffc90004487680 EFLAGS: 00000206 [ 574.514303][ C1] RAX: 23b5f15a5f6b1500 RBX: 0000000000000a02 RCX: 23b5f15a5f6b1500 [ 574.514311][ C1] RDX: 0000000000000002 RSI: ffffffff8d96eae6 RDI: 0000000000000001 [ 574.514317][ C1] RBP: ffffc90004487708 R08: ffffffff8f9fe0f7 R09: 1ffffffff1f3fc1e [ 574.514325][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fc1f R12: dffffc0000000000 [ 574.514337][ C1] R13: dffffc0000000000 R14: ffffffff99d95020 R15: 1ffff92000890ed0 [ 574.514350][ C1] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 574.514364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.514375][ C1] CR2: 00007fffb4e0ef00 CR3: 0000000033b6c000 CR4: 00000000003526f0 [ 574.514386][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.514392][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.514399][ C1] Call Trace: [ 574.514406][ C1] [ 574.514413][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.514432][ C1] uart_port_unlock_deref+0x111/0x2f0 [ 574.514451][ C1] uart_write+0xc9/0x130 [ 574.514466][ C1] ? __pfx_uart_write+0x10/0x10 [ 574.514480][ C1] handle_tx+0x23f/0x610 [ 574.514499][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 574.514520][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 574.514535][ C1] ? rcu_is_watching+0x15/0xb0 [ 574.514551][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 574.514568][ C1] ? irqentry_exit+0x74/0x90 [ 574.514583][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 574.514600][ C1] ? do_raw_spin_lock+0x121/0x290 [ 574.514616][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 574.514628][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 574.514646][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.514657][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.514672][ C1] tx+0x6b/0x190 [ 574.514685][ C1] ? __pfx_tx+0x10/0x10 [ 574.514698][ C1] kthread+0x1d0/0x3e0 [ 574.514714][ C1] ? __pfx_kthread+0x10/0x10 [ 574.514726][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 574.514740][ C1] ? __kthread_parkme+0x7b/0x200 [ 574.514754][ C1] ? __kthread_parkme+0x1a1/0x200 [ 574.514772][ C1] kthread+0x70e/0x8a0 [ 574.514784][ C1] ? __pfx_kthread+0x10/0x10 [ 574.514795][ C1] ? __pfx_kthread+0x10/0x10 [ 574.514806][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.514817][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.514829][ C1] ? __pfx_kthread+0x10/0x10 [ 574.514840][ C1] ret_from_fork+0x3fc/0x770 [ 574.514855][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 574.514871][ C1] ? __switch_to_asm+0x39/0x70 [ 574.514880][ C1] ? __switch_to_asm+0x33/0x70 [ 574.514894][ C1] ? __pfx_kthread+0x10/0x10 [ 574.514905][ C1] ret_from_fork_asm+0x1a/0x30 [ 574.514923][ C1] [ 574.514928][ C1] Sending NMI from CPU 1 to CPUs 0: [ 574.891937][ C0] NMI backtrace for cpu 0 [ 574.891954][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 574.891971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.891980][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 574.892005][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 574.892018][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 574.892033][ C0] RAX: 541dc588ccf32a00 RBX: ffffffff81974c68 RCX: 541dc588ccf32a00 [ 574.892044][ C0] RDX: 0000000000000001 RSI: ffffffff8d96eae6 RDI: ffffffff8be1b8c0 [ 574.892054][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 574.892065][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fe0f0 [ 574.892075][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 574.892085][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 574.892097][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.892108][ C0] CR2: 00007f0735ceaf53 CR3: 00000000346a0000 CR4: 00000000003526f0 [ 574.892123][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.892132][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.892142][ C0] Call Trace: [ 574.892160][ C0] [ 574.892166][ C0] default_idle+0x13/0x20 [ 574.892180][ C0] default_idle_call+0x74/0xb0 [ 574.892196][ C0] do_idle+0x1e8/0x510 [ 574.892220][ C0] ? __pfx_do_idle+0x10/0x10 [ 574.892246][ C0] cpu_startup_entry+0x44/0x60 [ 574.892265][ C0] rest_init+0x2de/0x300 [ 574.892279][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 574.892296][ C0] start_kernel+0x47d/0x500 [ 574.892319][ C0] x86_64_start_reservations+0x24/0x30 [ 574.892341][ C0] x86_64_start_kernel+0x143/0x1c0 [ 574.892356][ C0] common_startup_64+0x13e/0x147 [ 574.892379][ C0] [ 574.892925][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 575.097868][ C1] CPU: 1 UID: 0 PID: 1298 Comm: aoe_tx0 Tainted: G L 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 575.111242][ C1] Tainted: [L]=SOFTLOCKUP [ 575.115562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.125668][ C1] Call Trace: [ 575.128954][ C1] [ 575.131803][ C1] dump_stack_lvl+0x99/0x250 [ 575.136410][ C1] ? __asan_memcpy+0x40/0x70 [ 575.141100][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.146334][ C1] ? __pfx__printk+0x10/0x10 [ 575.150952][ C1] panic+0x2db/0x790 [ 575.154848][ C1] ? __pfx_panic+0x10/0x10 [ 575.159263][ C1] ? nmi_backtrace_stall_check+0x433/0x440 [ 575.165081][ C1] watchdog_timer_fn+0x862/0x870 [ 575.170017][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 575.175478][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 575.181464][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.187801][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 575.193257][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 575.198903][ C1] __hrtimer_run_queues+0x4dd/0xc60 [ 575.204109][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 575.209824][ C1] ? read_tsc+0x9/0x20 [ 575.214067][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 575.219017][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 575.224996][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 575.230626][ C1] [ 575.233550][ C1] [ 575.236478][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.242471][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 575.248969][ C1] Code: 74 05 e8 6b 13 66 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 33 fe 2e f6 65 8b 05 2c eb 37 07 85 c0 74 40 48 c7 04 24 0e 36 [ 575.268569][ C1] RSP: 0018:ffffc90004487680 EFLAGS: 00000206 [ 575.274722][ C1] RAX: 23b5f15a5f6b1500 RBX: 0000000000000a02 RCX: 23b5f15a5f6b1500 [ 575.282698][ C1] RDX: 0000000000000002 RSI: ffffffff8d96eae6 RDI: 0000000000000001 [ 575.290663][ C1] RBP: ffffc90004487708 R08: ffffffff8f9fe0f7 R09: 1ffffffff1f3fc1e [ 575.298632][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fc1f R12: dffffc0000000000 [ 575.306626][ C1] R13: dffffc0000000000 R14: ffffffff99d95020 R15: 1ffff92000890ed0 [ 575.314616][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.321035][ C1] uart_port_unlock_deref+0x111/0x2f0 [ 575.326431][ C1] uart_write+0xc9/0x130 [ 575.330700][ C1] ? __pfx_uart_write+0x10/0x10 [ 575.335559][ C1] handle_tx+0x23f/0x610 [ 575.339832][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 575.344967][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 575.350009][ C1] ? rcu_is_watching+0x15/0xb0 [ 575.354780][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 575.359893][ C1] ? irqentry_exit+0x74/0x90 [ 575.364498][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 575.369877][ C1] ? do_raw_spin_lock+0x121/0x290 [ 575.375008][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 575.380203][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 575.386202][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.391448][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.396819][ C1] tx+0x6b/0x190 [ 575.400390][ C1] ? __pfx_tx+0x10/0x10 [ 575.404546][ C1] kthread+0x1d0/0x3e0 [ 575.408616][ C1] ? __pfx_kthread+0x10/0x10 [ 575.413209][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 575.419014][ C1] ? __kthread_parkme+0x7b/0x200 [ 575.424210][ C1] ? __kthread_parkme+0x1a1/0x200 [ 575.429233][ C1] kthread+0x70e/0x8a0 [ 575.433387][ C1] ? __pfx_kthread+0x10/0x10 [ 575.437974][ C1] ? __pfx_kthread+0x10/0x10 [ 575.442992][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.448277][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.453495][ C1] ? __pfx_kthread+0x10/0x10 [ 575.458093][ C1] ret_from_fork+0x3fc/0x770 [ 575.462692][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 575.467804][ C1] ? __switch_to_asm+0x39/0x70 [ 575.472561][ C1] ? __switch_to_asm+0x33/0x70 [ 575.477343][ C1] ? __pfx_kthread+0x10/0x10 [ 575.481944][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.486711][ C1] [ 575.490068][ C1] Kernel Offset: disabled [ 575.494390][ C1] Rebooting in 86400 seconds..