last executing test programs: 7m45.175812989s ago: executing program 3 (id=287): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_test={0x26, 0x5, 0x4}}) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='[:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) recvmmsg(r6, &(0x7f0000000180), 0x0, 0x40002040, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaab9aaaaaa0000000000000004aa001f4ee3", @ANYRES8=r6, @ANYBLOB="7bc72e6e52e7ef80b957b9ead8261a9ddbfbf7be0b4011a6294fd5c92aa392db06003872f5f12c8f", @ANYRES64=r1], 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r9, 0x84, 0x7d, &(0x7f00000022c0)=""/4104, 0x0) r10 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b}) io_uring_register$IORING_REGISTER_CLOCK(r10, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r10, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x20008004) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) 7m39.428394567s ago: executing program 3 (id=304): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd26, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) socket$inet6(0xa, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xe6fbcd972c9ce799) 7m36.186270076s ago: executing program 3 (id=310): r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020050bbe1a00000000000109022400010000000009040000fe03000000092105000000000000000581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3e) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x60, 0x0, 0x0, 0x8000000}]}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x67fc, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1c, 0x18, 0x8, 0x7, 0xd3, "f82ce3a87a7c160c8ecdf4ae1b10480e8ee06d116a417111f21ca707479410b2fd112234c1728578d900e7c9dc9ea4225553fff89feb33a6b69a9bee7fdfa7e9e89b7c7333a7f76833ebfdb32b0a6dfd40bc659642d1fca45d6501ce685356404c9c94e6754ba703085f88f2738b11d70cea53849e83b90ae8c32c6aeb72663be8f59cb15c69bf451e192ecda57b2782bb5bf4bddb44871a7fb2c321ef95cc21c23c2d3d41d60b5c23e92f1d5b51e88b2bda148f4b76727f58046f344bd2670c00422c1f1269095c28811bb1dea74e88d9d9e6"}, @sadb_address={0x5, 0x7, 0x17, 0x60, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_key={0x60c7c3689fb5b474, 0x8, 0x380, 0x0, "ebd6c23fe81599b7a61f0fb467bdbada31c5063c14656a1efd668bbd6faed7ae339f77e31568c6a9f6cb5e595bc0f4f55edcdc96f43b56328cd939bc8efa82946746555bf72226d94c6ca96078007797ff9aadb079926903e278b26348bb2adfd3dd3431b61c64dcf702381883abb7d1"}]}, 0x33fe0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x121540, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x82, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000040)=0x7) 7m20.646084272s ago: executing program 32 (id=310): r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020050bbe1a00000000000109022400010000000009040000fe03000000092105000000000000000581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3e) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x60, 0x0, 0x0, 0x8000000}]}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x67fc, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1c, 0x18, 0x8, 0x7, 0xd3, "f82ce3a87a7c160c8ecdf4ae1b10480e8ee06d116a417111f21ca707479410b2fd112234c1728578d900e7c9dc9ea4225553fff89feb33a6b69a9bee7fdfa7e9e89b7c7333a7f76833ebfdb32b0a6dfd40bc659642d1fca45d6501ce685356404c9c94e6754ba703085f88f2738b11d70cea53849e83b90ae8c32c6aeb72663be8f59cb15c69bf451e192ecda57b2782bb5bf4bddb44871a7fb2c321ef95cc21c23c2d3d41d60b5c23e92f1d5b51e88b2bda148f4b76727f58046f344bd2670c00422c1f1269095c28811bb1dea74e88d9d9e6"}, @sadb_address={0x5, 0x7, 0x17, 0x60, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_key={0x60c7c3689fb5b474, 0x8, 0x380, 0x0, "ebd6c23fe81599b7a61f0fb467bdbada31c5063c14656a1efd668bbd6faed7ae339f77e31568c6a9f6cb5e595bc0f4f55edcdc96f43b56328cd939bc8efa82946746555bf72226d94c6ca96078007797ff9aadb079926903e278b26348bb2adfd3dd3431b61c64dcf702381883abb7d1"}]}, 0x33fe0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x121540, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x82, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000040)=0x7) 6m39.982336922s ago: executing program 5 (id=447): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c0100001900010025bd7000ffdbdf251d01020008000500f9f7fdfe15000300000000c005030000a4887e803004673603000000150002"], 0x19c}}, 0x0) (fail_nth: 7) 6m39.586830343s ago: executing program 5 (id=451): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xffff, 0x5, @local, 0x8}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 6m39.389602308s ago: executing program 5 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './cgroup\x00'}) mount$fuse(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x20008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 6m38.326286272s ago: executing program 5 (id=454): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0xb00, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 6m38.091115148s ago: executing program 5 (id=456): bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m37.825762929s ago: executing program 5 (id=457): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x3309, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="c754481a2b41f332ebd0aea09c98864b5e1db571f6c8363793e563b2ec69a9decf92aca42f9a51959d423459970ff894c1c29d975766a1f5dcf27d59d2881d73e62b145431218f371e309119dfe3a3fb4c85ab70f75eede08362d1eee6f28d83e9064888c9d8a2fae27e338cea2b9f02aef3db97fff09b1e5552be542ec0f1ea3694afefceb992a3523ee03532", @ANYRESHEX=r0], 0x48) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r5, @ANYBLOB="1a0000000000000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x4, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f00000000c0)=0x1) pread64(r7, &(0x7f0000000100)=""/163, 0xa3, 0x1) 6m21.873405673s ago: executing program 33 (id=457): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x3309, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="c754481a2b41f332ebd0aea09c98864b5e1db571f6c8363793e563b2ec69a9decf92aca42f9a51959d423459970ff894c1c29d975766a1f5dcf27d59d2881d73e62b145431218f371e309119dfe3a3fb4c85ab70f75eede08362d1eee6f28d83e9064888c9d8a2fae27e338cea2b9f02aef3db97fff09b1e5552be542ec0f1ea3694afefceb992a3523ee03532", @ANYRESHEX=r0], 0x48) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r5, @ANYBLOB="1a0000000000000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x4, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f00000000c0)=0x1) pread64(r7, &(0x7f0000000100)=""/163, 0xa3, 0x1) 15.63587587s ago: executing program 4 (id=1420): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 15.377720886s ago: executing program 6 (id=1421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) getrlimit(0xd, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) listen(r0, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) 14.534897324s ago: executing program 4 (id=1423): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x350, 0xc0, 0x198, 0xffffffff, 0x0, 0x2a8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffff00, 0xff, 'macvtap0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x89, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x6}, {0x4, 0x6, 0x3}}}}, {{@ip={@multicast2, @remote, 0xff000000, 0xff, 'ipvlan0\x00', 'vlan0\x00', {0xff}, {}, 0x4, 0x6, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @dev={0xac, 0x14, 0x14, 0x20}, @local, @icmp_id=0x66, @port=0x4e20}}}}, {{@ip={@multicast2, @remote, 0xff000000, 0xff000000, 'virt_wifi0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x6, 0x3, 0x24}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0xd, [0x10, 0x5, 0x17, 0x3f, 0x17, 0x38, 0x34, 0x3c, 0x2b, 0x2b, 0x3e, 0x21, 0x1b, 0x28, 0x19, 0x16], 0x2, 0x3}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @local, @icmp_id=0x66, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32], 0x23c}}, 0x0) 14.343061672s ago: executing program 4 (id=1424): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r3 = socket(0x22, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) lseek(r1, 0x6, 0x4) 11.118932284s ago: executing program 2 (id=1430): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@ip_ttl={{0x18, 0x0, 0x2, 0x43a}}], 0x18}}], 0x2, 0x82) (fail_nth: 1) 10.887237291s ago: executing program 6 (id=1431): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x7, 0x51, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @loopback={0x0, 0x460c6}, 0x7, 0x7, 0x1}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000022c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x43a}}], 0x18}}], 0x2, 0x82) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9a, 0x95, 0x52, 0x20, 0x100d, 0xcb01, 0x2741, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0xfc, 0x7a, 0x45, 0x0, [], [{{0x9, 0x5, 0xe, 0xc, 0x20, 0x12, 0x5, 0x9, [@generic={0x7, 0x5, "f19949c7df"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xb, 0x3, 0x7e}}]}}]}}]}}, 0x0) close(r1) 10.254511769s ago: executing program 2 (id=1432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) getrlimit(0xd, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) listen(r0, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 9.075707095s ago: executing program 1 (id=1434): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@delchain={0xe8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x44, 0x3, [@m_ife={0x40, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "7dea7fdc03dc266b4394d770e179d0165e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') setreuid(0xee01, 0xee01) utimensat(r2, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 8.719733291s ago: executing program 0 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = syz_open_procfs(0x0, 0x0) fchdir(r3) getdents64(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) add_key$keyring(&(0x7f0000000280), &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x42, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x26, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r5 = add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000c40)="28515f2403", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) 8.620120514s ago: executing program 1 (id=1436): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x21, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/295, @ANYRES32=r0, @ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000004f2d0005500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018170000", @ANYRES32=r2, @ANYBLOB="000000000000000085200000030000008520000004000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010, &(0x7f0000000000)={0xa, 0x0, 0x20880, @remote, 0x800006}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20680, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f000b660ff49400003e0f01c20fc72b3e66653e660f38824d00d9fdf3a6ba200066ed0f01f3f36f", 0x28}], 0x1, 0x5, &(0x7f00000001c0)=[@dstype0={0x6, 0xc}, @cstype3={0x5, 0xa}], 0x2) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000190001000000000000000000ac14143b000000000000000000000000ac1e0001000000000000000000000000000000004e230000020080002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000400000000f2ff00000000000000000000040000000000000000000000000000000100000000000000060000000000000000000000000000000800000001000000010100000000000008001e0003000000"], 0xc0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.572439652s ago: executing program 0 (id=1437): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x1, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x1, [0x0]}, @pad1]}, 0x28) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x697ed80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 7.307729141s ago: executing program 6 (id=1438): r0 = io_uring_setup(0xf07, &(0x7f000000c480)={0x0, 0xd1ec, 0x400, 0x3, 0x5}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a8", 0x0, 0x0, 0x34, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) dup3(r3, r4, 0x80000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x3c9}}, 0x1006) syz_emit_ethernet(0x66, &(0x7f00000010c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa00080045030058ffff0000800000780000000010000800000086dd88a888be86ddffff10fe00000100000000000000080022eb00000000200000000200000000000009000000000826cda63a7fdbb314c2af6500655800000000d078d40f6af34e05c2e9b2410054d796c6522e96518e15aa59284026fa7ec42b906f5a454cdf379459211ec47df0c9ab5cfa2e03f3ed9804d02a6275ae22209bda0050852aa4decb7a0c6974074f12f1b1f89ef1b5e066fd7458f8d3bcbd1b8423b200"/211], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4001) 7.058361983s ago: executing program 2 (id=1439): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000001000000000011000000000085000000a0000000850000000e0000009500000000000000f6daf7d11bb275479989bd1e1baba44a1fef55ccd0855b5cbf825ede0518d10d34e0fcac47f86476519e4b4241ea4863e49f74057958dd98cebf69"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x3, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x2, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x80000, 0x0, 0x180d, 0xda92, 0xae4d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3ff], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x6, 0x42c, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xd, 0x0, 0x7, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x101, 0xfffffffe]}, 0x45c) unshare(0x20000400) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x3, 0x1ff, 0xfff, 0x0, 0x6, 0xa}) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x101800) socket$tipc(0x1e, 0x2, 0x0) unshare(0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000003, 0x800, 0x20000}, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x14, 0x40}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x200000, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="04002cbd7000fddbdf2503000000e0000580070001006962000008000100657468002c0002800800020003000000080002000800000008000100ff0f000008000200faffffff08000300050000000800010065746800440002800800020005000000080001001e0000000800010014000000080002000500000008000200196800000800040005000000080001000b00000008000200ff0700001c000280080002000200000008000400f7ffffff08000300400000002c000280080002000700000008000400018000000800040001040000080004000200000008000200ff0000000c0002800800020007000000"], 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x80, 0x40, 0x439e, 0x101, {{0x14, 0x4, 0x0, 0x32, 0x50, 0x67, 0x0, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local, {[@generic={0x7, 0x9, "0605efbda05b21"}, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x3, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101, 0x7}]}, @noop, @generic={0x88, 0x12, "20efb525c9454c53a2d46d705cdfe5e6"}, @end]}}}}}) connect$can_bcm(r4, &(0x7f0000000900)={0x1d, r8}, 0x10) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r9 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r9}) 4.852082352s ago: executing program 4 (id=1440): syz_usb_connect$cdc_ncm(0x52186fd03167f32, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a2a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010500000001000000000624fdee7c1b0905810308000300000904010000020d00000904010102020d000009058202000200"], 0x0) 4.811652451s ago: executing program 1 (id=1441): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x620b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.587905884s ago: executing program 1 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "ac5dad16eee4cd09"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.133914025s ago: executing program 6 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xce20) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, 0x0, 0x40084) io_uring_setup(0x28f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000300010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) pipe(0x0) 3.783713253s ago: executing program 0 (id=1444): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) connect$inet6(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 2.247703468s ago: executing program 4 (id=1445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000009500000000100000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)={{0xfffffd95}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(&(0x7f0000000080), &(0x7f0000000240), 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x18) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r5, 0x1, 0x0) msgsnd(r5, 0x0, 0x0, 0x800) msgsnd(r5, 0x0, 0x0, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000440), 0x4) close(r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(r5, 0x1, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) shutdown(r4, 0x0) 2.189595376s ago: executing program 1 (id=1446): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x511840, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES32=r1, @ANYRES16=r2], 0x0) 1.350637249s ago: executing program 6 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x15, 0x3, [{0x1, 0xa, "ac5dad16eee4cd09"}, {0x1, 0x5, "596913"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.333831026s ago: executing program 0 (id=1448): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x19, 0xd, "89753015418ab0df6afb245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b13ecab66c7d257a037d0f08e8ad896ba67a07696defa", "8b609009aaa722687f3f2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fce40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1b97448abe996b48e2b870128218930e2915216fddb100", [0x7, 0x7]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x1, 0xbc, 0x9}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.254997077s ago: executing program 2 (id=1449): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="200005000020"}) 1.054435671s ago: executing program 6 (id=1450): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r3 = socket(0x22, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) lseek(r1, 0x6, 0x4) 1.047980175s ago: executing program 2 (id=1451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 967.753813ms ago: executing program 0 (id=1452): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x620b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 869.551954ms ago: executing program 0 (id=1453): r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x2}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x3) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010a2dbd1683c257716736b0000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) listen(r6, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(r0, &(0x7f00000033c0), 0x0, 0x1, 0x0) 853.942148ms ago: executing program 2 (id=1454): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x1, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}]}, 0x28) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x697ed80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 11.608391ms ago: executing program 4 (id=1455): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x3f, &(0x7f0000000440)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000580)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000390400000000000000000000000086d7766b92557a088b68e220bf19bda670f3efd0b7bc65e1c7acd5dc4a6a60646db9f5955715f9", @ANYRES32=0x0, @ANYRESDEC=r3], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES16=r4, @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r7], 0x24}}, 0x4000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000600)="009f891290aefe09d6b4e051ad07e76313391efb4e50752d2212a34ffd1e700d9a3243e04fa59f5199fdd9b38b02f1b513bba14fd7f28217eb4ae3246eaf33a98e5530ba7d88aeac6295acc2f557d5b185e0782cb8af58cffecb3a8e6d482ca1104f7edc6d16d42a017664f110000000", 0x70, 0x1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000340), &(0x7f00000003c0)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000380), 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6ae", 0x20) r9 = accept4(r8, 0x0, 0x0, 0x80000) recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/105, 0x69}], 0x1}, 0x40011122) recvmsg$can_raw(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1}, 0x10001) 0s ago: executing program 1 (id=1456): socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/mcfilter\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): e_measurement+0x10/0x10 [ 356.649067][T11468] ? ima_d_path+0x1f1/0x250 [ 356.649117][T11468] process_measurement+0x11eb/0x1a40 [ 356.649164][T11468] ? __pfx_process_measurement+0x10/0x10 [ 356.649229][T11468] ? __pfx_migrate_enable+0x10/0x10 [ 356.649249][T11468] ? rcu_read_lock_any_held+0xb3/0x120 [ 356.649294][T11468] ima_file_mmap+0x1a2/0x1f0 [ 356.649322][T11468] ? __pfx_ima_file_mmap+0x10/0x10 [ 356.649362][T11468] security_mmap_file+0x7a4/0xa60 [ 356.649393][T11468] vm_mmap_pgoff+0x12c/0x4c0 [ 356.649420][T11468] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 356.649443][T11468] ? __fget_files+0x2a/0x420 [ 356.649475][T11468] ? __fget_files+0x3a0/0x420 [ 356.649501][T11468] ? __fget_files+0x2a/0x420 [ 356.649532][T11468] ksys_mmap_pgoff+0x51f/0x760 [ 356.649565][T11468] do_syscall_64+0xfa/0x3b0 [ 356.649583][T11468] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.649612][T11468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.649632][T11468] ? clear_bhb_loop+0x60/0xb0 [ 356.649656][T11468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.649675][T11468] RIP: 0033:0x7f5c9138e929 [ 356.649725][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.649744][T11468] RSP: 002b:00007f5c921ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 356.649767][T11468] RAX: ffffffffffffffda RBX: 00007f5c915b5fa0 RCX: 00007f5c9138e929 [ 356.649783][T11468] RDX: 0000000000000004 RSI: 0000000000001000 RDI: 0000200000fff000 [ 356.649797][T11468] RBP: 00007f5c921ae090 R08: 0000000000000004 R09: 0000000000002000 [ 356.649810][T11468] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 356.649823][T11468] R13: 0000000000000000 R14: 00007f5c915b5fa0 R15: 00007ffe441ae1d8 [ 356.649857][T11468] [ 356.933039][ T30] audit: type=1804 audit(1749488919.386:350): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=add_template_measure cause=ENOMEM comm="syz.2.704" name="dmabuf" dev="dmabuf" ino=2 res=0 errno=0 [ 356.976708][T11448] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 357.018599][T11448] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 357.025968][T11448] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 357.064824][T11473] vlan0: entered promiscuous mode [ 357.104690][T11448] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 357.181590][T11448] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 357.215272][T11448] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 357.261196][T11448] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 76001867 [ 357.311165][T11448] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 357.334262][T11469] ubi31: background thread "ubi_bgt31d" started, PID 11469 [ 357.533479][T11479] FAULT_INJECTION: forcing a failure. [ 357.533479][T11479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.549986][T11479] CPU: 1 UID: 0 PID: 11479 Comm: syz.2.706 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 357.550015][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.550029][T11479] Call Trace: [ 357.550038][T11479] [ 357.550047][T11479] dump_stack_lvl+0x189/0x250 [ 357.550085][T11479] ? __pfx____ratelimit+0x10/0x10 [ 357.550117][T11479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.550150][T11479] ? __pfx__printk+0x10/0x10 [ 357.550171][T11479] ? __might_fault+0xb0/0x130 [ 357.550209][T11479] should_fail_ex+0x414/0x560 [ 357.550241][T11479] _copy_from_user+0x2d/0xb0 [ 357.550263][T11479] __se_sys_mount+0x18a/0x410 [ 357.550300][T11479] ? __pfx___se_sys_mount+0x10/0x10 [ 357.550326][T11479] ? rcu_is_watching+0x15/0xb0 [ 357.550363][T11479] ? do_syscall_64+0xbe/0x3b0 [ 357.550381][T11479] ? __x64_sys_mount+0x20/0xc0 [ 357.550413][T11479] do_syscall_64+0xfa/0x3b0 [ 357.550431][T11479] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.550462][T11479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.550483][T11479] ? clear_bhb_loop+0x60/0xb0 [ 357.550509][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.550530][T11479] RIP: 0033:0x7f5c9138e929 [ 357.550548][T11479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.550567][T11479] RSP: 002b:00007f5c9218d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.550590][T11479] RAX: ffffffffffffffda RBX: 00007f5c915b6080 RCX: 00007f5c9138e929 [ 357.550606][T11479] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 357.550627][T11479] RBP: 00007f5c9218d090 R08: 0000200000000040 R09: 0000000000000000 [ 357.550641][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.550654][T11479] R13: 0000000000000000 R14: 00007f5c915b6080 R15: 00007ffe441ae1d8 [ 357.550686][T11479] [ 357.553301][T11479] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 357.722334][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'. [ 357.932171][T11485] block nbd4: NBD_DISCONNECT [ 359.438010][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 359.456423][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 359.486373][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 359.608204][ T5926] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 359.789064][ T5926] usb 3-1: string descriptor 0 read error: -71 [ 359.805768][ T5926] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.825334][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.931021][ T5926] usb 3-1: can't set config #1, error -71 [ 359.981382][ T5926] usb 3-1: USB disconnect, device number 16 [ 360.544471][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 362.081851][T11540] 9pnet_fd: Insufficient options for proto=fd [ 363.408281][T11545] sch_tbf: peakrate 8 is lower than or equals to rate 17303471801994176436 ! [ 363.819533][T11549] overlayfs: failed to resolve './file0:/': -2 [ 364.128730][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 364.666111][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 364.697817][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 364.766667][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.804580][ T10] usb 7-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 364.834233][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.863287][ T10] usb 7-1: config 0 descriptor?? [ 364.902211][T11550] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 364.946519][ T5873] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 365.140721][ T5873] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 365.168231][ T5873] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 365.181711][ T5873] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 365.190672][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.205086][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 365.225393][ T5873] usb 3-1: config 0 has no interface number 0 [ 365.235834][ T5873] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.314382][ T5873] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.341156][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 365.352343][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.355931][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 365.387651][ T5873] usb 3-1: Product: syz [ 365.402207][T11565] syzkaller0: entered promiscuous mode [ 365.407979][T11565] syzkaller0: entered allmulticast mode [ 365.414663][ T5873] usb 3-1: Manufacturer: syz [ 365.414826][ T5873] usb 3-1: SerialNumber: syz [ 365.451726][ T10] usb 7-1: USB disconnect, device number 4 [ 365.472884][ T5873] usb 3-1: config 0 descriptor?? [ 365.733133][ T5873] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 365.745825][ T5873] usb 3-1: MIDIStreaming interface descriptor not found [ 365.902990][ T5873] usb 3-1: USB disconnect, device number 17 [ 366.282885][ T6340] udevd[6340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.231628][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 367.295485][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 370.120498][T11582] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 370.135626][T11582] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 370.806320][ T5926] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 371.037819][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.096459][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 371.116722][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.171826][ T5926] usb 7-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 371.176615][ T7916] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 371.221417][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.263340][ T5926] usb 7-1: config 0 descriptor?? [ 371.295323][T11617] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 371.380277][ T7916] usb 3-1: device descriptor read/64, error -71 [ 371.778213][ T5926] usbhid 7-1:0.0: can't add hid device: -71 [ 371.810111][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 371.902059][ T5926] usb 7-1: USB disconnect, device number 5 [ 371.977982][ T7916] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 372.126378][ T7916] usb 3-1: device descriptor read/64, error -71 [ 372.380217][ T7916] usb usb3-port1: attempt power cycle [ 372.482897][T11649] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 373.260059][ T7916] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 373.816934][ T7916] usb 3-1: device descriptor read/8, error -71 [ 374.307592][ T7916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 374.361436][ T7916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.384529][ T7916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.447221][ T7916] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.476545][ T7916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.818499][T11677] delete_channel: no stack [ 374.916243][ T7916] usb 3-1: SerialNumber: syz [ 375.115194][T11652] syz.4.747 (11652): drop_caches: 2 [ 375.402926][T11690] cgroup: fork rejected by pids controller in /syz6 [ 376.351880][ T7916] usb 3-1: 0:2 : does not exist [ 376.386880][ T7916] usb 3-1: unit 5 not found! [ 376.442967][ T7916] usb 3-1: USB disconnect, device number 21 [ 376.531934][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.416337][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 377.957015][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.004040][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 378.053343][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.262131][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 378.271978][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.297090][ T10] usb 5-1: config 0 descriptor?? [ 378.313902][T11857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.568221][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574856][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.349669][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 379.362567][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 379.395668][ T10] usb 5-1: USB disconnect, device number 24 [ 379.576468][ T5827] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 379.736386][ T5827] usb 7-1: Using ep0 maxpacket: 16 [ 379.765248][ T5827] usb 7-1: config 3 has an invalid interface number: 155 but max is 0 [ 379.786280][ T5827] usb 7-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 379.799974][ T5827] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 379.812463][ T5827] usb 7-1: config 3 has no interface number 0 [ 379.826862][ T5827] usb 7-1: config 3 interface 155 has no altsetting 0 [ 379.843834][ T5827] usb 7-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 379.875745][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.890849][ T5827] usb 7-1: Product: syz [ 379.910048][ T5827] usb 7-1: Manufacturer: syz [ 379.934144][ T5827] usb 7-1: SerialNumber: syz [ 380.483732][ T5827] usb 7-1: USB disconnect, device number 6 [ 380.903121][T11908] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 384.215772][T11938] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 384.587060][T11938] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 386.647580][T11972] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20001 [ 387.353479][ T30] audit: type=1800 audit(1749488950.056:351): pid=11975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.782" name="bus" dev="tmpfs" ino=847 res=0 errno=0 [ 389.807996][T12029] netlink: 108 bytes leftover after parsing attributes in process `syz.6.796'. [ 389.850390][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 389.998033][ T43] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 390.019611][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 390.046143][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.114144][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.142833][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 390.196305][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 390.224623][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40 [ 390.236125][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 390.342433][ T10] usb 2-1: SerialNumber: syz [ 390.376473][ T43] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 390.608337][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 390.649096][ T43] usb usb1-port1: attempt power cycle [ 391.036443][ T43] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 391.489405][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 391.896356][ T43] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 391.960959][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 391.993304][ T43] usb usb1-port1: unable to enumerate USB device [ 392.391323][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 392.440960][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 392.522720][ T10] usb 2-1: USB disconnect, device number 10 [ 395.796536][ T5873] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 396.057849][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.076366][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 396.116281][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.175260][ T5873] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 396.215074][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.289829][ T5873] usb 2-1: config 0 descriptor?? [ 396.306298][T12089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 397.477501][T12267] Invalid ELF header type: 0 != 1 [ 398.266234][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 398.350627][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.491516][T12271] 9pnet_fd: Insufficient options for proto=fd [ 398.561171][T12272] Cannot find del_set index 3 as target [ 398.572040][ T5873] usb 2-1: USB disconnect, device number 11 [ 402.506598][ T5926] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 402.728763][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.217212][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.317100][ T5926] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 403.402878][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.487339][ T5926] usb 7-1: config 0 descriptor?? [ 403.926165][ T5926] usbhid 7-1:0.0: can't add hid device: -71 [ 403.982007][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 404.036745][ T5926] usb 7-1: USB disconnect, device number 7 [ 405.095614][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 405.202219][T12351] lo speed is unknown, defaulting to 1000 [ 405.208367][T12351] lo speed is unknown, defaulting to 1000 [ 405.217873][T12351] lo speed is unknown, defaulting to 1000 [ 405.257646][T12351] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 405.335014][T12351] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 405.558466][T12351] lo speed is unknown, defaulting to 1000 [ 405.609245][T12351] lo speed is unknown, defaulting to 1000 [ 405.628307][T12351] lo speed is unknown, defaulting to 1000 [ 405.647215][T12351] lo speed is unknown, defaulting to 1000 [ 405.665386][T12351] lo speed is unknown, defaulting to 1000 [ 405.808673][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 405.822648][ T5873] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 405.836225][ T5873] usb 1-1: config 0 has no interface number 0 [ 405.848787][ T5873] usb 1-1: config 0 interface 12 has no altsetting 0 [ 405.876683][ T5873] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 406.082895][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.105898][ T5873] usb 1-1: Product: syz [ 406.124640][ T5873] usb 1-1: Manufacturer: syz [ 406.152656][ T5873] usb 1-1: SerialNumber: syz [ 406.201304][ T5873] usb 1-1: config 0 descriptor?? [ 406.591889][T11998] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 407.881668][T11998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 407.931240][T11998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 407.983711][T11998] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.041849][T11998] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 408.076002][T11998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.127610][T11998] usb 5-1: config 0 descriptor?? [ 408.139025][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.823'. [ 408.307279][T12368] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 408.893267][T12382] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 408.906388][ T5873] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 408.913967][ T5873] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 408.941709][ T5873] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 408.951029][ T5873] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 408.999440][ T5873] usb 1-1: USB disconnect, device number 17 [ 409.197626][T11998] usbhid 5-1:0.0: can't add hid device: -71 [ 409.205134][T11998] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 409.258234][T11998] usb 5-1: USB disconnect, device number 25 [ 409.491928][T12393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.827'. [ 409.519659][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.827'. [ 409.643234][T12393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.827'. [ 409.710248][T12393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.827'. [ 410.307507][T12406] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 410.315224][T12406] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 410.342489][T12404] vivid-002: disconnect [ 410.465205][T12410] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 410.517849][T12403] vivid-002: reconnect [ 410.545031][T12406] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.829'. [ 410.554511][T12410] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 410.562309][T12410] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.829'. [ 411.831441][T12426] netlink: 104 bytes leftover after parsing attributes in process `syz.1.832'. [ 413.706281][ T5827] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 413.926358][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 413.938501][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.118714][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.613862][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 414.781291][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 414.790615][ T5827] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.803714][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.811927][ T5827] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 414.822927][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.901376][ T10] usb 5-1: config 0 descriptor?? [ 414.937386][ T5827] usb 3-1: config 0 descriptor?? [ 414.954550][T12447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 415.394070][ T5827] usbhid 3-1:0.0: can't add hid device: -71 [ 415.424295][ T5827] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 415.471695][ T5827] usb 3-1: USB disconnect, device number 22 [ 415.676051][ T10] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 415.740840][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.146890][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.338904][T11998] usb 5-1: USB disconnect, device number 26 [ 416.620053][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 416.621153][ T30] audit: type=1326 audit(1749488979.356:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 416.668569][ T30] audit: type=1326 audit(1749488979.356:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 416.692370][ T30] audit: type=1326 audit(1749488979.356:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 416.852482][ T5873] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 417.244093][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.275602][ T30] audit: type=1326 audit(1749488979.356:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 417.306465][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 417.325499][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 417.365276][ T30] audit: type=1326 audit(1749488979.366:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 417.406329][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 417.433780][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.450476][ T30] audit: type=1326 audit(1749488979.366:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 417.519054][ T5873] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 417.529581][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.560564][ T30] audit: type=1326 audit(1749488979.366:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 417.588218][ T5873] usb 3-1: Product: syz [ 417.592450][ T5873] usb 3-1: Manufacturer: syz [ 417.603008][ T5873] usb 3-1: SerialNumber: syz [ 417.642235][ T5873] usb 3-1: config 0 descriptor?? [ 417.656359][ T30] audit: type=1326 audit(1749488979.366:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 417.704414][ T5873] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 417.779094][ T30] audit: type=1326 audit(1749488979.366:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 417.843189][ T30] audit: type=1326 audit(1749488979.366:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12480 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fc99718e929 code=0x7ffc0000 [ 418.209945][ T5827] usb 3-1: USB disconnect, device number 23 [ 419.860122][ T5827] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 420.118614][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.776253][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 420.800850][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.846273][ T5827] usb 1-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 420.878281][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.906998][ T5827] usb 1-1: config 0 descriptor?? [ 420.914194][T12529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.952638][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'. [ 421.491684][T12542] netlink: 'syz.2.861': attribute type 12 has an invalid length. [ 421.517258][T12542] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.861'. [ 421.663357][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 421.663377][ T30] audit: type=1326 audit(1749488984.396:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12541 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 421.770888][ T5827] usbhid 1-1:0.0: can't add hid device: -71 [ 421.798895][ T5827] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.826441][ T30] audit: type=1326 audit(1749488984.446:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12541 comm="syz.2.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 421.906398][ T5827] usb 1-1: USB disconnect, device number 18 [ 423.581928][T12584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.529721][ T30] audit: type=1326 audit(1749488990.266:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 427.532236][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 427.561985][ T30] audit: type=1326 audit(1749488990.266:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 427.658660][T12615] netlink: 'syz.2.876': attribute type 12 has an invalid length. [ 427.684834][T12615] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.876'. [ 427.685316][ T30] audit: type=1326 audit(1749488990.266:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 427.811552][ T30] audit: type=1326 audit(1749488990.266:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 427.890154][ T30] audit: type=1326 audit(1749488990.266:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 427.911662][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.965572][ T30] audit: type=1326 audit(1749488990.266:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 427.987549][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 428.066614][ T30] audit: type=1326 audit(1749488990.266:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 428.145663][ T30] audit: type=1326 audit(1749488990.266:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 428.167630][ T30] audit: type=1326 audit(1749488990.416:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 428.189798][ T30] audit: type=1326 audit(1749488990.416:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12609 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 428.423644][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.444877][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 428.475016][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.489474][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 428.498976][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.513258][ T10] usb 5-1: config 0 descriptor?? [ 428.528004][T12618] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.706585][T12631] netlink: 48 bytes leftover after parsing attributes in process `syz.6.881'. [ 428.830354][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 428.889073][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 428.928969][ T10] usb 5-1: USB disconnect, device number 27 [ 431.316425][ T5827] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 431.892711][ T5893] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 431.915426][ T5827] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 431.947469][T12676] syz.2.891: attempt to access beyond end of device [ 431.947469][T12676] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 431.960607][T12676] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 431.972002][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.198603][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 432.326325][ T5893] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 432.360933][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.418720][ T5893] usb 2-1: config 0 descriptor?? [ 432.461963][ T5893] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 432.527881][ T5827] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 432.544602][ T5827] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 432.553039][ T5827] usb 1-1: Manufacturer: syz [ 432.586601][ T5827] usb 1-1: config 0 descriptor?? [ 432.896395][ T5827] rc_core: IR keymap rc-hauppauge not found [ 432.902438][ T5827] Registered IR keymap rc-empty [ 432.925017][T12684] syzkaller0: entered promiscuous mode [ 432.939685][ T5827] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 432.946429][T12684] syzkaller0: entered allmulticast mode [ 432.970379][ T5827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 433.038951][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 433.172323][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.232393][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.242103][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.303277][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.322445][ T5827] usb 1-1: USB disconnect, device number 19 [ 433.546510][ T5893] gspca_nw80x: reg_r err -71 [ 433.551286][ T5893] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 433.597551][ T5893] usb 2-1: USB disconnect, device number 12 [ 435.512155][T12712] netlink: 44 bytes leftover after parsing attributes in process `syz.6.898'. [ 435.855439][ T5827] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 436.641824][ T5827] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 436.677169][ T5827] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 436.688602][ T5827] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.701113][ T5827] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.711325][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.720201][ T5827] usb 7-1: Product: syz [ 436.724575][ T5827] usb 7-1: Manufacturer: ц [ 436.732657][ T5827] usb 7-1: SerialNumber: syz [ 436.866448][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 436.958818][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.903'. [ 436.970285][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 436.981507][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.903'. [ 436.999269][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.903'. [ 437.049528][ T43] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.061433][ T43] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 437.078914][ T43] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.101675][ T43] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 437.112196][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.141677][T12724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 437.163866][ T5827] usb 7-1: 0:2 : does not exist [ 437.192205][ T5827] usb 7-1: USB disconnect, device number 8 [ 437.229298][T12513] udevd[12513]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.442017][T12736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.130578][T12737] lo speed is unknown, defaulting to 1000 [ 439.325548][T12747] ucma_write: process 944 (syz.2.908) changed security contexts after opening file descriptor, this is not allowed. [ 439.761127][ T43] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 439.829201][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 439.829222][ T30] audit: type=1326 audit(1749489002.566:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12752 comm="syz.0.909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc99718e929 code=0x0 [ 439.894538][ T43] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13 [ 440.025624][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.033193][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.107271][T12759] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 440.116665][T12759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 440.127141][T12759] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 440.135029][T12759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 440.601626][ T43] usb 2-1: USB disconnect, device number 13 [ 440.607839][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 440.626257][ T5926] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 441.520185][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 441.540269][ T5926] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 441.986316][ T43] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 442.007360][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.015887][ T5926] usb 3-1: Product: syz [ 442.020990][ T5926] usb 3-1: Manufacturer: syz [ 442.025634][ T5926] usb 3-1: SerialNumber: syz [ 442.077443][ T5926] usb 3-1: config 0 descriptor?? [ 442.124110][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 442.196553][ T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 442.225394][ T43] usb 2-1: config 0 has no interface number 0 [ 442.262442][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 442.301725][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.367472][ T43] usb 2-1: Product: syz [ 442.371710][ T43] usb 2-1: Manufacturer: syz [ 442.411928][ T43] usb 2-1: SerialNumber: syz [ 442.451349][ T43] usb 2-1: config 0 descriptor?? [ 442.495011][ T43] hub 2-1:0.132: bad descriptor, ignoring hub [ 442.514526][ T43] hub 2-1:0.132: probe with driver hub failed with error -5 [ 442.547884][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input15 [ 442.557531][ T5178] bcm5974 3-1:0.0: could not read from device [ 442.583948][ T5926] usb 3-1: USB disconnect, device number 24 [ 442.600354][ T5178] bcm5974 3-1:0.0: could not read from device [ 442.874750][T11980] udevd[11980]: Error opening device "/dev/input/event4": No such file or directory [ 442.889062][ T43] usb 2-1: USB disconnect, device number 14 [ 443.090543][T11980] udevd[11980]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.098788][T11980] udevd[11980]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.106625][T11980] udevd[11980]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.114362][T11980] udevd[11980]: Unable to EVIOCGABS device "/dev/input/event4" [ 444.563010][T12817] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 444.570379][T12817] overlayfs: failed to set xattr on upper [ 444.576401][T12817] overlayfs: ...falling back to redirect_dir=nofollow. [ 444.583497][T12817] overlayfs: ...falling back to index=off. [ 444.589607][T12817] overlayfs: ...falling back to uuid=null. [ 444.595786][T12817] overlayfs: maximum fs stacking depth exceeded [ 445.405882][ T30] audit: type=1400 audit(1749489008.136:422): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12821 comm="syz.6.924" dest=20002 netif=wpan0 [ 449.459068][T12874] syz.6.933: attempt to access beyond end of device [ 449.459068][T12874] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 449.471808][T12874] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 451.915811][T12905] block nbd1: NBD_DISCONNECT [ 452.003672][T12894] warn_alloc: 1 callbacks suppressed [ 452.003715][T12894] syz.6.938: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.136508][T12894] CPU: 0 UID: 0 PID: 12894 Comm: syz.6.938 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 452.136541][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.136559][T12894] Call Trace: [ 452.136572][T12894] [ 452.136583][T12894] dump_stack_lvl+0x189/0x250 [ 452.136627][T12894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.136661][T12894] ? __pfx__printk+0x10/0x10 [ 452.136684][T12894] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.136720][T12894] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.136759][T12894] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 452.136798][T12894] warn_alloc+0x214/0x310 [ 452.136834][T12894] ? __pfx_warn_alloc+0x10/0x10 [ 452.136879][T12894] ? vb2_vmalloc_alloc+0xef/0x340 [ 452.136907][T12894] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 452.136971][T12894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.137007][T12894] ? __kasan_kmalloc+0x93/0xb0 [ 452.137037][T12894] vmalloc_user_noprof+0xad/0xf0 [ 452.137066][T12894] ? vb2_vmalloc_alloc+0xef/0x340 [ 452.137090][T12894] vb2_vmalloc_alloc+0xef/0x340 [ 452.137113][T12894] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 452.137137][T12894] __vb2_queue_alloc+0x9bf/0x15a0 [ 452.137216][T12894] vb2_core_reqbufs+0xc31/0x1420 [ 452.137274][T12894] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 452.137318][T12894] ? __vb2_init_fileio+0x1e8/0xff0 [ 452.137346][T12894] __vb2_init_fileio+0x318/0xff0 [ 452.137368][T12894] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.137402][T12894] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 452.137439][T12894] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.137481][T12894] vb2_core_poll+0x4c1/0x840 [ 452.137511][T12894] vb2_fop_poll+0x168/0x380 [ 452.137536][T12894] ? __pfx_vb2_fop_poll+0x10/0x10 [ 452.137559][T12894] v4l2_poll+0x144/0x2c0 [ 452.137581][T12894] ? __pfx_v4l2_poll+0x10/0x10 [ 452.137602][T12894] do_sys_poll+0x8c6/0x1070 [ 452.137649][T12894] ? __pfx_do_sys_poll+0x10/0x10 [ 452.137678][T12894] ? futex_unqueue+0x22/0x240 [ 452.137704][T12894] ? __pfx___pollwait+0x10/0x10 [ 452.137735][T12894] ? __pfx_pollwake+0x10/0x10 [ 452.137821][T12894] ? ktime_get_ts64+0xa2/0x3d0 [ 452.137852][T12894] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 452.137908][T12894] ? __pfx_timespec64_add_safe+0x10/0x10 [ 452.137948][T12894] __se_sys_poll+0x128/0x320 [ 452.137979][T12894] ? __pfx___se_sys_poll+0x10/0x10 [ 452.138003][T12894] ? rcu_is_watching+0x15/0xb0 [ 452.138039][T12894] ? do_syscall_64+0xbe/0x3b0 [ 452.138063][T12894] do_syscall_64+0xfa/0x3b0 [ 452.138082][T12894] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.138113][T12894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.138134][T12894] ? clear_bhb_loop+0x60/0xb0 [ 452.138161][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.138182][T12894] RIP: 0033:0x7ff91978e929 [ 452.138202][T12894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.138222][T12894] RSP: 002b:00007ff9175d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 452.138246][T12894] RAX: ffffffffffffffda RBX: 00007ff9199b6080 RCX: 00007ff91978e929 [ 452.138270][T12894] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000200000000380 [ 452.138284][T12894] RBP: 00007ff919810b39 R08: 0000000000000000 R09: 0000000000000000 [ 452.138298][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.138311][T12894] R13: 0000000000000000 R14: 00007ff9199b6080 R15: 00007ffd586d9398 [ 452.138344][T12894] [ 452.138384][T12894] Mem-Info: [ 452.750575][T12894] active_anon:307 inactive_anon:7397 isolated_anon:0 [ 452.750575][T12894] active_file:7974 inactive_file:38851 isolated_file:0 [ 452.750575][T12894] unevictable:12703 dirty:104 writeback:0 [ 452.750575][T12894] slab_reclaimable:10963 slab_unreclaimable:103678 [ 452.750575][T12894] mapped:41119 shmem:2407 pagetables:1529 [ 452.750575][T12894] sec_pagetables:0 bounce:0 [ 452.750575][T12894] kernel_misc_reclaimable:0 [ 452.750575][T12894] free:1299328 free_pcp:11162 free_cma:0 [ 452.796458][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.066451][T12894] Node 0 active_anon:1204kB inactive_anon:30440kB active_file:31556kB inactive_file:155404kB unevictable:51116kB isolated(anon):0kB isolated(file):0kB mapped:165296kB dirty:412kB writeback:0kB shmem:9004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12748kB pagetables:6084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.100192][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.168362][T12894] Node 1 active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.487248][T12894] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.517493][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.724991][T12894] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 453.786406][T12894] Node 0 DMA32 free:1266788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1200kB inactive_anon:32200kB active_file:29800kB inactive_file:155336kB unevictable:57416kB writepending:412kB present:3129332kB managed:2561508kB mlocked:57720kB bounce:0kB free_pcp:27256kB local_pcp:15724kB free_cma:0kB [ 453.966497][T12894] lowmem_reserve[]: 0 0 1 1 1 [ 453.982833][T12894] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 454.012116][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.074930][T12894] lowmem_reserve[]: 0 0 0 0 0 [ 454.079959][T12894] Node 1 Normal free:3911136kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:340kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10752kB local_pcp:8832kB free_cma:0kB [ 454.115735][T12894] lowmem_reserve[]: 0 0 0 0 0 [ 454.121293][T12894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.216558][T12894] Node 0 DMA32: 4*4kB (UE) 3*8kB (ME) 69*16kB (UME) 358*32kB (UME) 395*64kB (UME) 162*128kB (UME) 80*256kB (UME) 58*512kB (UME) 49*1024kB (UME) 4*2048kB (UM) 266*4096kB (M) = 1256696kB [ 454.306345][T12894] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 454.324666][T12894] Node 1 Normal: 206*4kB (UME) 43*8kB (UME) 47*16kB (UME) 231*32kB (UME) 78*64kB (UME) 22*128kB (UME) 3*256kB (UE) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3911136kB [ 454.418346][T12894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.489747][T12894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.549037][T12894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.585139][T12894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.677840][T12894] 65013 total pagecache pages [ 454.713209][T12894] 0 pages in swap cache [ 454.782000][T12894] Free swap = 124996kB [ 454.798557][T12931] syz.1.948: attempt to access beyond end of device [ 454.798557][T12931] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 454.812086][T12931] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 454.819179][T12894] Total swap = 124996kB [ 454.853419][T12894] 2097051 pages RAM [ 454.989695][T12894] 0 pages HighMem/MovableOnly [ 455.117090][T12894] 424567 pages reserved [ 455.234139][T12894] 0 pages cma reserved [ 457.926350][T12960] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22) [ 458.439315][T12967] netlink: 27 bytes leftover after parsing attributes in process `syz.6.955'. [ 462.908531][T13010] binder: 13007:13010 ioctl c0306201 2000000026c0 returned -14 [ 463.357612][ T10] IPVS: starting estimator thread 0... [ 463.487577][T13023] IPVS: using max 36 ests per chain, 86400 per kthread [ 463.742401][T13026] netlink: 68 bytes leftover after parsing attributes in process `syz.0.971'. [ 465.645842][T13036] macsec1: entered allmulticast mode [ 468.619995][T13072] syz.4.981: attempt to access beyond end of device [ 468.619995][T13072] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 468.632819][T13072] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 469.393093][T13075] sctp: [Deprecated]: syz.6.982 (pid 13075) Use of int in max_burst socket option deprecated. [ 469.393093][T13075] Use struct sctp_assoc_value instead [ 469.408157][T13077] Bluetooth: hci0: unsupported parameter 2327 [ 469.433962][T13077] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 469.891920][T13092] binder: 13088:13092 ioctl c0306201 200000000540 returned -22 [ 471.166413][ T5926] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 471.888200][T13103] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 471.896038][T13103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.988'. [ 471.955757][T13107] FAULT_INJECTION: forcing a failure. [ 471.955757][T13107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.035163][ T5926] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 472.036353][T13107] CPU: 1 UID: 0 PID: 13107 Comm: syz.4.992 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 472.036381][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.036394][T13107] Call Trace: [ 472.036403][T13107] [ 472.036412][T13107] dump_stack_lvl+0x189/0x250 [ 472.036448][T13107] ? __pfx____ratelimit+0x10/0x10 [ 472.036486][T13107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.036524][T13107] ? __pfx__printk+0x10/0x10 [ 472.036549][T13107] ? __might_fault+0xb0/0x130 [ 472.036594][T13107] should_fail_ex+0x414/0x560 [ 472.036631][T13107] _copy_from_iter+0x1db/0x16f0 [ 472.036681][T13107] ? rcu_is_watching+0x15/0xb0 [ 472.036718][T13107] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 472.036752][T13107] ? __pfx__copy_from_iter+0x10/0x10 [ 472.036789][T13107] ? __build_skb_around+0x257/0x3e0 [ 472.036823][T13107] ? netlink_sendmsg+0x642/0xb30 [ 472.036851][T13107] ? skb_put+0x11b/0x210 [ 472.036883][T13107] netlink_sendmsg+0x6b2/0xb30 [ 472.036930][T13107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.036969][T13107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.036997][T13107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.037034][T13107] __sock_sendmsg+0x219/0x270 [ 472.037077][T13107] ____sys_sendmsg+0x505/0x830 [ 472.037113][T13107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.037156][T13107] ? import_iovec+0x74/0xa0 [ 472.037184][T13107] ___sys_sendmsg+0x21f/0x2a0 [ 472.037230][T13107] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.037302][T13107] ? __fget_files+0x2a/0x420 [ 472.037332][T13107] ? __fget_files+0x3a0/0x420 [ 472.037375][T13107] __x64_sys_sendmsg+0x19b/0x260 [ 472.037413][T13107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.037453][T13107] ? __pfx_ksys_write+0x10/0x10 [ 472.037488][T13107] ? rcu_is_watching+0x15/0xb0 [ 472.037525][T13107] ? do_syscall_64+0xbe/0x3b0 [ 472.037549][T13107] do_syscall_64+0xfa/0x3b0 [ 472.037568][T13107] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.037599][T13107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.037622][T13107] ? clear_bhb_loop+0x60/0xb0 [ 472.037648][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.037675][T13107] RIP: 0033:0x7fb766b8e929 [ 472.037696][T13107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.037715][T13107] RSP: 002b:00007fb767a62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.037739][T13107] RAX: ffffffffffffffda RBX: 00007fb766db5fa0 RCX: 00007fb766b8e929 [ 472.037755][T13107] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 472.037768][T13107] RBP: 00007fb767a62090 R08: 0000000000000000 R09: 0000000000000000 [ 472.037783][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.037795][T13107] R13: 0000000000000000 R14: 00007fb766db5fa0 R15: 00007ffc9ce4c9c8 [ 472.037828][T13107] [ 472.339449][T13112] set match dimension is over the limit! [ 472.825489][ T5926] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 472.878463][ T5926] usb 2-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=b5.17 [ 472.887836][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.895829][ T5926] usb 2-1: Product: syz [ 472.943249][ T5926] usb 2-1: Manufacturer: syz [ 472.955132][ T5926] usb 2-1: SerialNumber: syz [ 473.338541][T13116] syzkaller0: entered promiscuous mode [ 473.344785][T13116] syzkaller0: entered allmulticast mode [ 474.667694][ T5926] usb 2-1: active config #6 != 1 ?? [ 474.676865][ T5926] usb 2-1: USB disconnect, device number 15 [ 478.428321][T13677] FAULT_INJECTION: forcing a failure. [ 478.428321][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.441659][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.4.1003 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 478.441688][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.441702][T13677] Call Trace: [ 478.441709][T13677] [ 478.441716][T13677] dump_stack_lvl+0x189/0x250 [ 478.441742][T13677] ? __pfx____ratelimit+0x10/0x10 [ 478.441764][T13677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.441785][T13677] ? __pfx__printk+0x10/0x10 [ 478.441800][T13677] ? __might_fault+0xb0/0x130 [ 478.441825][T13677] should_fail_ex+0x414/0x560 [ 478.441848][T13677] _copy_from_user+0x2d/0xb0 [ 478.441881][T13677] ___sys_recvmsg+0x12e/0x510 [ 478.441907][T13677] ? __pfx____sys_recvmsg+0x10/0x10 [ 478.441952][T13677] ? __fget_files+0x3a0/0x420 [ 478.441980][T13677] __x64_sys_recvmsg+0x198/0x260 [ 478.442002][T13677] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 478.442040][T13677] do_syscall_64+0xfa/0x3b0 [ 478.442055][T13677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.442069][T13677] ? asm_sysvec_call_function_single+0x1a/0x20 [ 478.442085][T13677] ? clear_bhb_loop+0x60/0xb0 [ 478.442103][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.442118][T13677] RIP: 0033:0x7fb766b8e929 [ 478.442131][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.442144][T13677] RSP: 002b:00007fb767a41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 478.442159][T13677] RAX: ffffffffffffffda RBX: 00007fb766db6080 RCX: 00007fb766b8e929 [ 478.442171][T13677] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 478.442180][T13677] RBP: 00007fb767a41090 R08: 0000000000000000 R09: 0000000000000000 [ 478.442190][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.442198][T13677] R13: 0000000000000000 R14: 00007fb766db6080 R15: 00007ffc9ce4c9c8 [ 478.442220][T13677] [ 478.974280][T13680] smk_cipso_doi:679 remove rc = -2 [ 481.688714][T13698] 9pnet_fd: Insufficient options for proto=fd [ 488.647877][T13749] syzkaller0: entered promiscuous mode [ 488.672167][T13749] syzkaller0: entered allmulticast mode [ 492.033338][T13775] loop6: detected capacity change from 0 to 524287999 [ 492.050017][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.059525][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.069958][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.079211][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.088825][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.100228][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.110101][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.119717][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.128710][T13775] ldm_validate_partition_table(): Disk read failed. [ 492.136473][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.145952][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 492.157496][T13775] Dev loop6: unable to read RDB block 0 [ 492.171408][T13775] loop6: unable to read partition table [ 492.179952][T13775] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 494.028267][T13789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 494.035257][T13789] overlayfs: failed to set xattr on upper [ 494.041423][T13789] overlayfs: ...falling back to redirect_dir=nofollow. [ 494.048380][T13789] overlayfs: ...falling back to index=off. [ 494.054188][T13789] overlayfs: ...falling back to uuid=null. [ 494.060513][T13789] overlayfs: maximum fs stacking depth exceeded [ 495.821295][T13804] 9pnet_fd: Insufficient options for proto=fd [ 495.847473][T13803] syz.6.1037: attempt to access beyond end of device [ 495.847473][T13803] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 495.860364][T13803] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 496.121161][T13808] syz.2.1040: attempt to access beyond end of device [ 496.121161][T13808] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 496.134077][T13808] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 497.806551][ T7916] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 497.880220][T13827] syzkaller0: entered promiscuous mode [ 497.885922][T13827] syzkaller0: entered allmulticast mode [ 498.759831][ T7916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.806247][ T7916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.880974][ T7916] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 498.898431][ T7916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.926229][ T7916] usb 3-1: Product: syz [ 498.930471][ T7916] usb 3-1: Manufacturer: syz [ 498.935107][ T7916] usb 3-1: SerialNumber: syz [ 498.960793][ T7916] usb 3-1: config 0 descriptor?? [ 501.431520][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.746371][ T43] usb 3-1: USB disconnect, device number 25 [ 506.356327][ T5926] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 506.526561][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 506.561402][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 506.587668][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.332199][ T5926] usb 2-1: config 0 descriptor?? [ 507.388754][ T5926] pwc: Logitech QuickCam Zoom USB webcam detected. [ 507.395336][ T5926] pwc: Warning: more than 1 configuration available. [ 507.802736][T13911] sp0: Synchronizing with TNC [ 510.724942][T13906] syz.4.1065: attempt to access beyond end of device [ 510.724942][T13906] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 510.739202][T13906] gfs2: error -5 reading superblock [ 511.956659][ T5926] pwc: Failed to set LED on/off time (-71) [ 511.977969][ T5926] pwc: send_video_command error -71 [ 511.985610][ T5926] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 512.041060][T13932] FAULT_INJECTION: forcing a failure. [ 512.041060][T13932] name failslab, interval 1, probability 0, space 0, times 0 [ 512.054217][ T5926] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 512.124374][T13932] CPU: 0 UID: 0 PID: 13932 Comm: syz.4.1069 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 512.124407][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.124420][T13932] Call Trace: [ 512.124429][T13932] [ 512.124438][T13932] dump_stack_lvl+0x189/0x250 [ 512.124475][T13932] ? __pfx____ratelimit+0x10/0x10 [ 512.124508][T13932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.124540][T13932] ? __pfx__printk+0x10/0x10 [ 512.124565][T13932] ? __pfx___might_resched+0x10/0x10 [ 512.124596][T13932] ? fs_reclaim_acquire+0x7d/0x100 [ 512.124631][T13932] should_fail_ex+0x414/0x560 [ 512.124664][T13932] should_failslab+0xa8/0x100 [ 512.124694][T13932] __kmalloc_noprof+0xcb/0x4f0 [ 512.124718][T13932] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 512.124747][T13932] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 512.124786][T13932] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 512.124827][T13932] genl_family_rcv_msg_doit+0xb8/0x300 [ 512.124878][T13932] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.124913][T13932] ? rcu_is_watching+0x15/0xb0 [ 512.124945][T13932] ? cap_capable+0x11f/0x460 [ 512.124972][T13932] ? safesetid_security_capable+0xa9/0x1a0 [ 512.125002][T13932] ? bpf_lsm_capable+0x9/0x20 [ 512.125033][T13932] ? security_capable+0x7e/0x2e0 [ 512.125071][T13932] genl_rcv_msg+0x60e/0x790 [ 512.125111][T13932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.125139][T13932] ? ref_tracker_free+0x63a/0x7d0 [ 512.125165][T13932] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 512.125193][T13932] ? __pfx_nl80211_del_pmksa+0x10/0x10 [ 512.125213][T13932] ? __pfx_nl80211_post_doit+0x10/0x10 [ 512.125244][T13932] ? __pfx_ref_tracker_free+0x10/0x10 [ 512.125285][T13932] netlink_rcv_skb+0x208/0x470 [ 512.125311][T13932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.125356][T13932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.125399][T13932] ? down_read+0x1ad/0x2e0 [ 512.125422][T13932] genl_rcv+0x28/0x40 [ 512.125450][T13932] netlink_unicast+0x75b/0x8d0 [ 512.125483][T13932] netlink_sendmsg+0x805/0xb30 [ 512.125518][T13932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.125552][T13932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.125576][T13932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.125601][T13932] __sock_sendmsg+0x219/0x270 [ 512.125637][T13932] ____sys_sendmsg+0x505/0x830 [ 512.125669][T13932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.125707][T13932] ? import_iovec+0x74/0xa0 [ 512.125731][T13932] ___sys_sendmsg+0x21f/0x2a0 [ 512.125760][T13932] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.125826][T13932] ? __fget_files+0x2a/0x420 [ 512.125859][T13932] ? __fget_files+0x3a0/0x420 [ 512.125899][T13932] __x64_sys_sendmsg+0x19b/0x260 [ 512.125928][T13932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.125965][T13932] ? __pfx_ksys_write+0x10/0x10 [ 512.125986][T13932] ? rcu_is_watching+0x15/0xb0 [ 512.126021][T13932] ? do_syscall_64+0xbe/0x3b0 [ 512.126044][T13932] do_syscall_64+0xfa/0x3b0 [ 512.126061][T13932] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.126090][T13932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.126111][T13932] ? clear_bhb_loop+0x60/0xb0 [ 512.126140][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.126159][T13932] RIP: 0033:0x7fb766b8e929 [ 512.126177][T13932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.126195][T13932] RSP: 002b:00007fb767a62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.126216][T13932] RAX: ffffffffffffffda RBX: 00007fb766db5fa0 RCX: 00007fb766b8e929 [ 512.126230][T13932] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000003 [ 512.126242][T13932] RBP: 00007fb767a62090 R08: 0000000000000000 R09: 0000000000000000 [ 512.126254][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.126266][T13932] R13: 0000000000000000 R14: 00007fb766db5fa0 R15: 00007ffc9ce4c9c8 [ 512.126296][T13932] [ 512.516598][ T5926] usb 2-1: USB disconnect, device number 16 [ 512.622312][ T30] audit: type=1800 audit(1749489075.356:423): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1073" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 514.063207][T13968] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 514.063207][T13968] The task syz.0.1077 (13968) triggered the difference, watch for misbehavior. [ 514.086418][ T5873] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 514.302693][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1080'. [ 514.316240][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 514.329110][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.599280][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 514.611224][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 514.622715][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 514.632055][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.643965][ T5873] usb 5-1: config 0 descriptor?? [ 514.651970][T13956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 514.766519][ T5873] hub 5-1:0.0: USB hub found [ 514.781066][T13975] syz.2.1081: attempt to access beyond end of device [ 514.781066][T13975] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 514.793930][T13975] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 515.567095][ T5873] hub 5-1:0.0: 2 ports detected [ 515.572063][ T5873] usb 5-1: selecting invalid altsetting 1 [ 515.578524][ T5873] hub 5-1:0.0: Using single TT (err -22) [ 515.972648][ T5873] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 515.980112][ T5873] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 515.997612][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 516.003670][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 516.069835][T13985] syz.6.1082: attempt to access beyond end of device [ 516.069835][T13985] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 516.082835][T13985] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 516.439185][ T5873] usb 5-1: USB disconnect, device number 28 [ 518.322812][T14021] syzkaller0: entered promiscuous mode [ 518.328763][T14021] syzkaller0: entered allmulticast mode [ 518.861837][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 520.137537][T14037] syz.6.1091: attempt to access beyond end of device [ 520.137537][T14037] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 520.150548][T14037] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 520.936956][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 521.075550][T14041] uprobe: syz.2.1093:14041 failed to unregister, leaking uprobe [ 521.120797][ T43] usb 5-1: device descriptor read/64, error -71 [ 521.396335][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 521.566535][ T43] usb 5-1: device descriptor read/64, error -71 [ 521.711964][ T43] usb usb5-port1: attempt power cycle [ 522.057862][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 522.089054][ T43] usb 5-1: device descriptor read/8, error -71 [ 522.340183][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 522.653640][ T43] usb 5-1: device not accepting address 32, error -71 [ 522.661022][ T43] usb usb5-port1: unable to enumerate USB device [ 528.191556][T14360] netlink: 'syz.6.1109': attribute type 1 has an invalid length. [ 528.258199][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1108'. [ 528.280003][T14360] bond1: entered promiscuous mode [ 528.289854][T14360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.327636][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 528.435692][T14368] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 528.448961][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1109'. [ 528.482154][T14358] bond1: (slave bridge2): making interface the new active one [ 528.524180][T14358] bridge2: entered promiscuous mode [ 528.576932][T14358] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 528.803519][T14360] bond1: left promiscuous mode [ 528.933453][T14360] bridge2: left promiscuous mode [ 529.149515][T14368] bridge0: port 3(team0) entered blocking state [ 529.239436][T14368] bridge0: port 3(team0) entered disabled state [ 529.325032][T14368] team0: entered allmulticast mode [ 529.392348][T14368] team_slave_0: entered allmulticast mode [ 529.451421][T14368] team_slave_1: entered allmulticast mode [ 529.509701][T14389] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 529.519868][T14389] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1115'. [ 529.525293][T14368] team0: entered promiscuous mode [ 529.597042][T14368] team_slave_0: entered promiscuous mode [ 529.620129][T14368] team_slave_1: entered promiscuous mode [ 529.672085][T14368] bridge0: port 3(team0) entered blocking state [ 529.678582][T14368] bridge0: port 3(team0) entered forwarding state [ 530.350838][T14394] syzkaller0: entered promiscuous mode [ 530.392708][T14394] syzkaller0: entered allmulticast mode [ 535.472775][T14475] syz.2.1128: attempt to access beyond end of device [ 535.472775][T14475] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 535.485640][T14475] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 541.062568][T14529] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1143'. [ 542.327548][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 542.366417][ T5873] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 544.050998][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 544.104134][ T5873] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.115706][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.125881][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.135900][ T5873] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.149047][ T5873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.158188][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.254832][ T5873] usb 2-1: usb_control_msg returned -71 [ 544.286265][ T5873] usbtmc 2-1:16.0: can't read capabilities [ 544.336626][ T5873] usb 2-1: USB disconnect, device number 17 [ 546.386347][T14579] sp0: Synchronizing with TNC [ 546.877899][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 547.475191][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 547.488608][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.500226][ T9] usb 1-1: config 1 has an invalid interface number: 99 but max is 0 [ 547.508410][ T9] usb 1-1: config 1 has no interface number 0 [ 547.564870][ T9] usb 1-1: string descriptor 0 read error: -22 [ 548.097132][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 548.106881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.249356][ T9] usb-storage 1-1:1.99: USB Mass Storage device detected [ 548.263688][ T9] usb-storage 1-1:1.99: Quirks match for vid 04b8 pid 0602: 1 [ 548.392951][T14599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.424823][T14599] Cannot find set identified by id 4 to match [ 548.491958][T14570] ALSA: mixer_oss: invalid OSS volume 'V3' [ 548.497968][T14570] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 548.504337][T14570] ALSA: mixer_oss: invalid OSS volume '11' [ 548.511017][T14570] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 548.526290][T14570] ALSA: mixer_oss: invalid OSS volume '12' [ 548.543721][T14570] ALSA: mixer_oss: invalid OSS volume '' [ 548.611085][ T9] usb 1-1: USB disconnect, device number 20 [ 549.540684][T14612] lo speed is unknown, defaulting to 1000 [ 549.716359][ T7916] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 550.988207][ T7916] usb 3-1: device descriptor read/all, error -71 [ 551.136488][ T5873] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 551.890446][T14631] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 551.966946][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 551.998382][ T5873] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 552.445591][ T5873] usb 5-1: config 0 has no interface number 0 [ 552.455978][ T5873] usb 5-1: config 0 interface 12 has no altsetting 0 [ 552.489465][ T5873] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 552.524378][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.541220][ T5873] usb 5-1: Product: syz [ 552.573328][ T5873] usb 5-1: Manufacturer: syz [ 552.580890][ T5873] usb 5-1: SerialNumber: syz [ 552.599112][ T5873] usb 5-1: config 0 descriptor?? [ 554.657411][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 554.663811][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 555.668367][ T5873] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 555.687778][ T5873] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 555.695203][ T5873] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 555.710579][ T5873] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 556.091455][ T5873] usb 5-1: USB disconnect, device number 33 [ 558.176571][ T10] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 558.559417][ T10] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 558.648739][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.026605][ T10] usb 3-1: Product: syz [ 559.044593][ T10] usb 3-1: Manufacturer: syz [ 559.063617][ T10] usb 3-1: SerialNumber: syz [ 559.101608][ T10] usb 3-1: config 0 descriptor?? [ 559.119468][ T10] usb 3-1: can't set config #0, error -71 [ 559.141462][T14689] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 559.189135][ T10] usb 3-1: USB disconnect, device number 28 [ 559.536945][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 560.106407][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 560.129242][ T10] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 560.157021][ T10] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 560.171138][ T10] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 560.185951][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.206798][ T10] usb 3-1: Product: syz [ 560.211203][ T10] usb 3-1: Manufacturer: syz [ 560.215998][ T10] usb 3-1: SerialNumber: syz [ 560.300625][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 560.450554][T14713] 9pnet_fd: Insufficient options for proto=fd [ 560.526422][ T10] usb 3-1: USB disconnect, device number 29 [ 560.661160][T14725] syz.1.1195: attempt to access beyond end of device [ 560.661160][T14725] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 560.674150][T14725] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 562.195126][T14741] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 562.876807][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.318463][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 563.511475][T14748] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1201'. [ 563.525938][T14748] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 563.553119][T14735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1197'. [ 564.752285][T14773] sp0: Synchronizing with TNC [ 565.232002][T14778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1209'. [ 565.757702][T14785] Bluetooth: hci0: unsupported parameter 2327 [ 565.763864][T14785] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 570.493666][T14820] Bluetooth: hci0: unsupported parameter 2327 [ 570.501377][T14820] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 570.686967][T14827] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 570.707758][T14827] cramfs: wrong magic [ 570.716919][T14827] FAULT_INJECTION: forcing a failure. [ 570.716919][T14827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.730327][T14827] CPU: 0 UID: 0 PID: 14827 Comm: syz.1.1225 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 570.730357][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.730372][T14827] Call Trace: [ 570.730380][T14827] [ 570.730390][T14827] dump_stack_lvl+0x189/0x250 [ 570.730428][T14827] ? __pfx____ratelimit+0x10/0x10 [ 570.730461][T14827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.730494][T14827] ? __pfx__printk+0x10/0x10 [ 570.730516][T14827] ? __might_fault+0xb0/0x130 [ 570.730556][T14827] should_fail_ex+0x414/0x560 [ 570.730589][T14827] _copy_from_user+0x2d/0xb0 [ 570.730612][T14827] ___sys_sendmsg+0x158/0x2a0 [ 570.730643][T14827] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.730712][T14827] ? __fget_files+0x2a/0x420 [ 570.730740][T14827] ? __fget_files+0x3a0/0x420 [ 570.730781][T14827] __x64_sys_sendmsg+0x19b/0x260 [ 570.730812][T14827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.730852][T14827] ? __pfx_ksys_write+0x10/0x10 [ 570.730874][T14827] ? rcu_is_watching+0x15/0xb0 [ 570.730912][T14827] ? do_syscall_64+0xbe/0x3b0 [ 570.730944][T14827] do_syscall_64+0xfa/0x3b0 [ 570.730962][T14827] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.730994][T14827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.731015][T14827] ? clear_bhb_loop+0x60/0xb0 [ 570.731042][T14827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.731064][T14827] RIP: 0033:0x7fca6a18e929 [ 570.731090][T14827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.731109][T14827] RSP: 002b:00007fca6af55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.731132][T14827] RAX: ffffffffffffffda RBX: 00007fca6a3b6080 RCX: 00007fca6a18e929 [ 570.731147][T14827] RDX: 0000000004004090 RSI: 0000200000000400 RDI: 0000000000000007 [ 570.731162][T14827] RBP: 00007fca6af55090 R08: 0000000000000000 R09: 0000000000000000 [ 570.731175][T14827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.731188][T14827] R13: 0000000000000000 R14: 00007fca6a3b6080 R15: 00007fff2df434c8 [ 570.731222][T14827] [ 572.039695][T14835] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 572.112878][T14840] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 572.125738][T14840] cramfs: wrong magic [ 574.711267][T14849] netlink: 'syz.4.1231': attribute type 2 has an invalid length. [ 574.720488][T14849] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1231'. [ 574.882443][T14857] Bluetooth: hci0: unsupported parameter 2327 [ 574.889717][T14857] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 576.038187][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 576.521925][ T30] audit: type=1326 audit(1749489139.256:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 576.755904][ T30] audit: type=1326 audit(1749489139.256:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 576.780631][ T30] audit: type=1326 audit(1749489139.256:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 576.802383][ T30] audit: type=1326 audit(1749489139.256:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 577.494993][ T30] audit: type=1326 audit(1749489139.256:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 577.516588][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.614310][ T30] audit: type=1326 audit(1749489139.256:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 577.636765][ T30] audit: type=1326 audit(1749489139.256:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 577.659503][ T30] audit: type=1326 audit(1749489139.256:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c9138d290 code=0x7ffc0000 [ 577.681501][ T30] audit: type=1326 audit(1749489139.256:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c9138d3df code=0x7ffc0000 [ 577.731725][ T30] audit: type=1326 audit(1749489139.256:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5c9138e929 code=0x7ffc0000 [ 578.416829][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 578.777764][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 578.804726][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 579.028473][ T9] usb 2-1: config 255 has an invalid interface number: 47 but max is 0 [ 579.052118][ T9] usb 2-1: config 255 has no interface number 0 [ 579.096365][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 579.166693][ T9] usb 2-1: config 255 interface 47 has no altsetting 0 [ 579.184277][ T10] usb 1-1: config 0 has no interfaces? [ 579.320734][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.335583][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.400142][ T9] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 579.647284][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.655358][ T9] usb 2-1: Product: syz [ 579.669961][ T10] usb 1-1: Product: syz [ 579.674277][ T10] usb 1-1: Manufacturer: syz [ 579.696184][ T10] usb 1-1: SerialNumber: syz [ 579.700917][ T9] usb 2-1: Manufacturer: syz [ 579.705946][ T9] usb 2-1: SerialNumber: syz [ 579.721734][ T10] usb 1-1: config 0 descriptor?? [ 579.821086][T14904] netlink: 'syz.2.1250': attribute type 8 has an invalid length. [ 580.135912][ T10] usb 1-1: USB disconnect, device number 21 [ 582.202433][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 582.206778][ T9] legousbtower 2-1:255.47: interrupt endpoints not found [ 582.252684][ T9] usb 2-1: USB disconnect, device number 19 [ 583.186551][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 583.470057][T14948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.001812][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 586.156327][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 586.185201][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.206344][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 586.218984][T14981] overlayfs: failed to resolve './file1': -2 [ 586.228573][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.364801][ T9] usb 5-1: config 0 descriptor?? [ 590.201259][ T980] usb 5-1: USB disconnect, device number 34 [ 591.036843][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 591.115673][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 591.189228][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 592.643715][T15033] xt_hashlimit: max too large, truncated to 1048576 [ 593.951495][T15054] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 594.042708][T15054] overlayfs: failed to set xattr on upper [ 594.109231][T15054] overlayfs: ...falling back to redirect_dir=nofollow. [ 594.136358][T15054] overlayfs: ...falling back to index=off. [ 594.203949][T15054] overlayfs: ...falling back to uuid=null. [ 594.217365][T15054] overlayfs: maximum fs stacking depth exceeded [ 594.352573][T15062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.489081][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 594.489102][ T30] audit: type=1326 audit(1749489157.226:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 594.525008][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.534875][T15066] netlink: 'syz.6.1294': attribute type 12 has an invalid length. [ 594.546332][T15066] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.1294'. [ 594.580821][ T30] audit: type=1326 audit(1749489157.266:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 594.615621][ T30] audit: type=1326 audit(1749489157.266:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 594.641750][ T30] audit: type=1326 audit(1749489157.266:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 594.819346][ T30] audit: type=1326 audit(1749489157.266:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 594.845000][ T30] audit: type=1326 audit(1749489157.266:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 595.562866][ T30] audit: type=1326 audit(1749489157.266:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 595.584770][ T30] audit: type=1326 audit(1749489157.266:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 595.616257][ T30] audit: type=1326 audit(1749489157.266:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 595.655152][ T30] audit: type=1326 audit(1749489157.266:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 595.799543][T15075] overlayfs: workdir and upperdir must be separate subtrees [ 595.966384][ T980] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 596.365678][ T980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.145283][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.157744][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 597.167770][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.181012][ T980] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.190375][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.227569][ T980] usb 2-1: config 0 descriptor?? [ 597.289861][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 597.643286][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.674472][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.692307][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.705157][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.723749][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.736326][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.743802][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.766233][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.784155][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.796194][ T980] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 597.804729][ T980] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 597.852049][ T980] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 598.329302][T15101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 598.403939][T15101] 9pnet_fd: Insufficient options for proto=fd [ 598.585401][T15109] netlink: 'syz.4.1307': attribute type 12 has an invalid length. [ 598.613415][T15109] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1307'. [ 599.450509][ T7916] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 602.661078][ T5873] usb 2-1: USB disconnect, device number 21 [ 602.786305][ T5912] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 603.056985][ T5912] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 603.108380][ T5912] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 603.124080][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.156223][ T5912] usb 3-1: Product: syz [ 603.166197][ T5912] usb 3-1: Manufacturer: syz [ 603.178679][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 603.178696][ T30] audit: type=1326 audit(1749489165.916:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.178698][ T5912] usb 3-1: SerialNumber: syz [ 603.178748][ T30] audit: type=1326 audit(1749489165.916:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.217990][ T5912] usb 3-1: config 0 descriptor?? [ 603.259141][T15149] netlink: 'syz.6.1319': attribute type 12 has an invalid length. [ 603.267418][T15149] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.1319'. [ 603.287363][ T5912] go7007-loader 3-1:0.0: can't handle multiple config [ 603.294190][ T5912] go7007-loader 3-1:0.0: probe failed [ 603.371092][ T30] audit: type=1326 audit(1749489165.976:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.426423][ T30] audit: type=1326 audit(1749489165.976:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.504714][ T30] audit: type=1326 audit(1749489165.976:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.612829][ T30] audit: type=1326 audit(1749489165.986:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.643821][ T30] audit: type=1326 audit(1749489165.986:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.670479][ T30] audit: type=1326 audit(1749489165.986:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.785850][T15144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1317'. [ 603.795943][ T30] audit: type=1326 audit(1749489165.996:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 603.866018][T15144] loop2: detected capacity change from 0 to 7 [ 603.894028][T14491] Dev loop2: unable to read RDB block 7 [ 603.911429][T14491] loop2: AHDI p1 p2 p3 [ 604.019827][T14491] loop2: partition table partially beyond EOD, truncated [ 604.091464][ T30] audit: type=1326 audit(1749489165.996:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.6.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91978e929 code=0x7ffc0000 [ 604.163346][T14491] loop2: p1 start 1601398130 is beyond EOD, truncated [ 604.264206][T14491] loop2: p2 start 1702059890 is beyond EOD, truncated [ 604.619502][T15144] Dev loop2: unable to read RDB block 7 [ 604.702020][T15144] loop2: AHDI p1 p2 p3 [ 604.829009][T15144] loop2: partition table partially beyond EOD, truncated [ 606.098607][T15144] loop2: p1 start 1601398130 is beyond EOD, truncated [ 606.215071][T15144] loop2: p2 start 1702059890 is beyond EOD, truncated [ 606.268566][ T9] usb 3-1: USB disconnect, device number 30 [ 606.642571][T15178] vlan2: entered allmulticast mode [ 606.673425][T15178] macvtap0: entered allmulticast mode [ 606.704067][T15178] veth0_macvtap: entered allmulticast mode [ 607.317230][T15188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 608.616438][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 608.616460][ T30] audit: type=1326 audit(1749489171.306:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 608.646777][T15193] netlink: 'syz.1.1330': attribute type 12 has an invalid length. [ 608.699730][T15193] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1330'. [ 609.502955][ T30] audit: type=1326 audit(1749489171.306:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 609.532257][ T7916] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 610.137122][ T30] audit: type=1326 audit(1749489171.306:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.218589][ T7916] usb 5-1: Using ep0 maxpacket: 8 [ 610.236504][ T30] audit: type=1326 audit(1749489171.346:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.259325][ T30] audit: type=1326 audit(1749489171.346:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.345776][ T30] audit: type=1326 audit(1749489171.346:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.367899][ T30] audit: type=1326 audit(1749489171.346:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.597055][ T7916] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 610.608537][ T30] audit: type=1326 audit(1749489171.346:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.610097][ T7916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.666817][ T7916] usb 5-1: config 0 descriptor?? [ 610.708747][ T30] audit: type=1326 audit(1749489171.346:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 610.731486][T15211] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 610.755538][ T7916] pwc: Logitech QuickCam Zoom USB webcam detected. [ 610.783135][ T7916] pwc: Warning: more than 1 configuration available. [ 610.803557][ T30] audit: type=1326 audit(1749489171.346:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15192 comm="syz.1.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6a18e929 code=0x7ffc0000 [ 611.278650][T15218] 9pnet_fd: Insufficient options for proto=fd [ 612.184864][ T7916] pwc: Failed to set LED on/off time (-71) [ 612.193197][ T7916] pwc: send_video_command error -71 [ 612.199286][ T7916] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 612.239307][ T7916] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 612.330217][T15231] 9pnet_fd: Insufficient options for proto=fd [ 613.146586][ T7916] usb 5-1: USB disconnect, device number 35 [ 613.526284][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 614.879839][ T10] usb 2-1: config 64 has an invalid interface number: 184 but max is 0 [ 614.906174][ T10] usb 2-1: config 64 has no interface number 0 [ 614.918776][ T10] usb 2-1: config 64 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 615.018491][ T10] usb 2-1: config 64 interface 184 altsetting 6 endpoint 0x88 has invalid maxpacket 55457, setting to 64 [ 615.947439][ T10] usb 2-1: config 64 interface 184 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 615.961102][ T10] usb 2-1: config 64 interface 184 has no altsetting 0 [ 616.059343][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 616.389242][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 616.389262][ T30] audit: type=1326 audit(1749489179.116:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 616.452239][T15253] netlink: 'syz.4.1344': attribute type 12 has an invalid length. [ 616.460647][T15253] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1344'. [ 616.471390][ T30] audit: type=1326 audit(1749489179.116:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 616.551682][ T30] audit: type=1326 audit(1749489179.236:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 616.580679][ T30] audit: type=1326 audit(1749489179.236:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 616.606962][ T30] audit: type=1326 audit(1749489179.236:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 617.666550][ T30] audit: type=1326 audit(1749489179.236:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 617.688299][ T30] audit: type=1326 audit(1749489179.236:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 618.381827][ T30] audit: type=1326 audit(1749489179.236:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 618.403966][ T30] audit: type=1326 audit(1749489179.236:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 618.466351][ T30] audit: type=1326 audit(1749489179.246:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15250 comm="syz.4.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 618.493191][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 618.792797][ T10] usb 2-1: string descriptor 0 read error: -71 [ 618.801843][ T10] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=b2.a8 [ 618.813155][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.514304][ T10] usb 2-1: can't set config #64, error -71 [ 619.533742][ T10] usb 2-1: USB disconnect, device number 22 [ 619.906021][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 621.006272][ T980] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 621.126496][ T7916] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 621.304005][ T7916] usb 3-1: Using ep0 maxpacket: 32 [ 621.365587][ T980] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 621.393909][ T7916] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 621.402770][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.415264][ T7916] usb 3-1: config 0 has no interface number 0 [ 621.434380][ T980] usb 2-1: Product: syz [ 621.470498][ T980] usb 2-1: Manufacturer: syz [ 621.512560][ T980] usb 2-1: SerialNumber: syz [ 621.537025][ T7916] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 621.573014][ T980] usb 2-1: config 0 descriptor?? [ 621.579159][ T7916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.590526][ T7916] usb 3-1: Product: syz [ 621.594885][ T7916] usb 3-1: Manufacturer: syz [ 621.604552][ T7916] usb 3-1: SerialNumber: syz [ 621.621342][ T7916] usb 3-1: config 0 descriptor?? [ 621.637587][ T7916] smsc95xx v2.0.0 [ 621.893591][T15315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.912913][T15315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.952184][ T980] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 621.977398][ T980] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 621.997111][ T980] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 622.038619][ T980] usb 2-1: USB disconnect, device number 23 [ 622.070344][T15303] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.130632][ T7916] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 622.175773][ T7916] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 624.008962][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 624.096331][ T7916] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 624.292891][ T7916] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 624.312375][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.641212][ T7916] usb 3-1: USB disconnect, device number 31 [ 624.791990][T15351] random: crng reseeded on system resumption [ 625.738875][T15354] lo speed is unknown, defaulting to 1000 [ 625.801319][T15361] FAULT_INJECTION: forcing a failure. [ 625.801319][T15361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.818457][T15361] CPU: 0 UID: 0 PID: 15361 Comm: syz.6.1376 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 625.818488][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.818501][T15361] Call Trace: [ 625.818509][T15361] [ 625.818517][T15361] dump_stack_lvl+0x189/0x250 [ 625.818554][T15361] ? __pfx____ratelimit+0x10/0x10 [ 625.818586][T15361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.818616][T15361] ? __pfx__printk+0x10/0x10 [ 625.818636][T15361] ? __might_fault+0xb0/0x130 [ 625.818672][T15361] should_fail_ex+0x414/0x560 [ 625.818703][T15361] _copy_from_iter+0x1db/0x16f0 [ 625.818746][T15361] ? rcu_is_watching+0x15/0xb0 [ 625.818778][T15361] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 625.818805][T15361] ? __pfx__copy_from_iter+0x10/0x10 [ 625.818838][T15361] ? __build_skb_around+0x257/0x3e0 [ 625.818866][T15361] ? netlink_sendmsg+0x642/0xb30 [ 625.818888][T15361] ? skb_put+0x11b/0x210 [ 625.818917][T15361] netlink_sendmsg+0x6b2/0xb30 [ 625.818951][T15361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.818985][T15361] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.819010][T15361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.819036][T15361] __sock_sendmsg+0x219/0x270 [ 625.819070][T15361] __sys_sendto+0x3bd/0x520 [ 625.819096][T15361] ? __pfx___sys_sendto+0x10/0x10 [ 625.819148][T15361] ? count_memcg_event_mm+0x21/0x260 [ 625.819184][T15361] ? exc_page_fault+0x76/0xf0 [ 625.819220][T15361] ? do_user_addr_fault+0xc8a/0x1390 [ 625.819251][T15361] __x64_sys_sendto+0xde/0x100 [ 625.819279][T15361] do_syscall_64+0xfa/0x3b0 [ 625.819297][T15361] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.819328][T15361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.819348][T15361] ? clear_bhb_loop+0x60/0xb0 [ 625.819375][T15361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.819394][T15361] RIP: 0033:0x7ff9197907bc [ 625.819414][T15361] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 625.819432][T15361] RSP: 002b:00007ff9175f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 625.819454][T15361] RAX: ffffffffffffffda RBX: 00007ff9175f4fc0 RCX: 00007ff9197907bc [ 625.819470][T15361] RDX: 0000000000000020 RSI: 00007ff9175f5010 RDI: 0000000000000003 [ 625.819483][T15361] RBP: 0000000000000000 R08: 00007ff9175f4f14 R09: 000000000000000c [ 625.819495][T15361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 625.819507][T15361] R13: 00007ff9175f4f68 R14: 00007ff9175f5010 R15: 0000000000000000 [ 625.819540][T15361] [ 626.115581][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1377'. [ 626.406352][ T7916] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 626.576439][ T7916] usb 2-1: Using ep0 maxpacket: 32 [ 627.505408][ T7916] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 627.513911][ T7916] usb 2-1: config 1 has no interface number 0 [ 627.544019][ T7916] usb 2-1: config 1 interface 242 has no altsetting 0 [ 627.564152][ T7916] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 627.592609][ T7916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.642583][ T7916] usb 2-1: Product: syz [ 628.583356][ T7916] usb 2-1: Manufacturer: syz [ 628.621841][ T7916] usb 2-1: SerialNumber: syz [ 628.908208][ T43] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 629.872477][ T43] usb 7-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 629.977625][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.243455][ T43] usb 7-1: config 0 descriptor?? [ 630.450637][ T7916] aqc111 2-1:1.242: probe with driver aqc111 failed with error -71 [ 630.600393][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 630.652944][ T7916] usb 2-1: USB disconnect, device number 24 [ 630.787036][T15383] tc_dump_action: action bad kind [ 630.816857][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 630.885841][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 630.892002][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 630.942799][ T43] usb 7-1: USB disconnect, device number 9 [ 631.511420][T15398] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 631.518785][T15398] overlayfs: failed to set xattr on upper [ 631.524675][T15398] overlayfs: ...falling back to redirect_dir=nofollow. [ 631.531757][T15398] overlayfs: ...falling back to index=off. [ 631.537737][T15398] overlayfs: ...falling back to uuid=null. [ 631.543653][T15398] overlayfs: maximum fs stacking depth exceeded [ 634.135768][T15424] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 634.143139][T15424] overlayfs: failed to set xattr on upper [ 634.149156][T15424] overlayfs: ...falling back to redirect_dir=nofollow. [ 634.156195][T15424] overlayfs: ...falling back to index=off. [ 634.162168][T15424] overlayfs: ...falling back to uuid=null. [ 634.168280][T15424] overlayfs: maximum fs stacking depth exceeded [ 634.724061][T15403] tipc: Can't bind to reserved service type 2 [ 635.034136][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 635.524488][T15436] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1398'. [ 636.066687][ T43] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 636.587519][T15442] usb usb8: usbfs: process 15442 (syz.2.1400) did not claim interface 9 before use [ 636.637769][ T43] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 636.754615][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.998033][ T43] usb 1-1: config 0 descriptor?? [ 637.186275][ T5873] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 637.506516][ T5873] usb 3-1: device descriptor read/64, error -71 [ 637.951275][ T5873] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 638.196518][ T5873] usb 3-1: device descriptor read/64, error -71 [ 638.449289][ T5873] usb usb3-port1: attempt power cycle [ 638.986453][ T5873] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 639.134989][ T5873] usb 3-1: device descriptor read/8, error -71 [ 639.306481][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 639.312611][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 639.350259][ T43] usb 1-1: USB disconnect, device number 22 [ 642.628321][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1409'. [ 644.251685][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1416'. [ 644.356283][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 644.486509][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 645.593396][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 645.851261][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 646.253174][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 646.273531][ T43] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.282887][ T10] usb 3-1: config 0 has no interface number 0 [ 646.295006][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 646.297174][ T43] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.320833][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 646.330352][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.338449][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 646.345248][ T10] usb 3-1: Product: syz [ 646.349779][ T10] usb 3-1: Manufacturer: syz [ 646.353707][ T43] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 646.354502][ T10] usb 3-1: SerialNumber: syz [ 646.375402][ T10] usb 3-1: config 0 descriptor?? [ 646.382084][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.759368][ T43] usb 1-1: config 0 descriptor?? [ 646.870757][T15516] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1423'. [ 649.241804][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 649.353389][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 649.355766][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 649.372307][ T43] usb 1-1: USB disconnect, device number 23 [ 649.416259][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 649.423622][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 649.544876][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 649.930179][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 649.969408][ T10] usb 3-1: USB disconnect, device number 36 [ 650.385919][T15539] FAULT_INJECTION: forcing a failure. [ 650.385919][T15539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.401000][T15536] syz.1.1429: attempt to access beyond end of device [ 650.401000][T15536] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 650.413884][T15536] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 650.598137][T15539] CPU: 1 UID: 0 PID: 15539 Comm: syz.2.1430 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 650.598169][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.598182][T15539] Call Trace: [ 650.598191][T15539] [ 650.598200][T15539] dump_stack_lvl+0x189/0x250 [ 650.598237][T15539] ? __pfx____ratelimit+0x10/0x10 [ 650.598269][T15539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.598301][T15539] ? __pfx__printk+0x10/0x10 [ 650.598322][T15539] ? __might_fault+0xb0/0x130 [ 650.598364][T15539] should_fail_ex+0x414/0x560 [ 650.598397][T15539] _copy_from_user+0x2d/0xb0 [ 650.598419][T15539] ___sys_sendmsg+0x158/0x2a0 [ 650.598450][T15539] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.598517][T15539] ? __fget_files+0x2a/0x420 [ 650.598544][T15539] ? __fget_files+0x3a0/0x420 [ 650.598590][T15539] __sys_sendmmsg+0x227/0x430 [ 650.598624][T15539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 650.598647][T15539] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 650.598710][T15539] ? ksys_write+0x22a/0x250 [ 650.598736][T15539] ? __pfx_ksys_write+0x10/0x10 [ 650.598757][T15539] ? rcu_is_watching+0x15/0xb0 [ 650.598796][T15539] __x64_sys_sendmmsg+0xa0/0xc0 [ 650.598826][T15539] do_syscall_64+0xfa/0x3b0 [ 650.598844][T15539] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.598874][T15539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.598895][T15539] ? clear_bhb_loop+0x60/0xb0 [ 650.598921][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.598941][T15539] RIP: 0033:0x7f5c9138e929 [ 650.598960][T15539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.598978][T15539] RSP: 002b:00007f5c921ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 650.599000][T15539] RAX: ffffffffffffffda RBX: 00007f5c915b5fa0 RCX: 00007f5c9138e929 [ 650.599016][T15539] RDX: 0000000000000002 RSI: 00002000000022c0 RDI: 0000000000000003 [ 650.599030][T15539] RBP: 00007f5c921ae090 R08: 0000000000000000 R09: 0000000000000000 [ 650.599043][T15539] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001 [ 650.599056][T15539] R13: 0000000000000000 R14: 00007f5c915b5fa0 R15: 00007ffe441ae1d8 [ 650.599088][T15539] [ 652.376312][ T43] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 652.495997][T15558] input: syz1 as /devices/virtual/input/input17 [ 652.592943][ T43] usb 7-1: device descriptor read/64, error -71 [ 653.636336][ T43] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 653.787100][ T43] usb 7-1: device descriptor read/64, error -71 [ 653.922725][T15572] netlink: 'syz.1.1436': attribute type 21 has an invalid length. [ 653.932474][T15572] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 653.956630][ T43] usb usb7-port1: attempt power cycle [ 654.226535][T11998] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 654.247465][ T5873] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 654.456218][T11998] usb 2-1: Using ep0 maxpacket: 8 [ 654.469887][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 654.506302][T11998] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.538604][T11998] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 654.619920][ T5873] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 654.641076][ T5873] usb 1-1: config 0 has no interface number 0 [ 654.656410][T11998] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 654.674984][ T5873] usb 1-1: config 0 interface 12 has no altsetting 0 [ 654.686301][T11998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.707791][ T5873] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 654.720711][T11998] usb 2-1: Product: syz [ 654.724924][T11998] usb 2-1: Manufacturer: syz [ 654.740049][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.773871][T11998] usb 2-1: SerialNumber: syz [ 654.798140][ T5873] usb 1-1: Product: syz [ 654.805563][T11998] usb 2-1: config 0 descriptor?? [ 654.811000][ T5873] usb 1-1: Manufacturer: syz [ 654.815634][ T5873] usb 1-1: SerialNumber: syz [ 654.823526][T11998] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 654.841864][ T5873] usb 1-1: config 0 descriptor?? [ 655.100381][ T9] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 655.121949][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 655.450936][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 655.462602][ T9] usb 3-1: config 179 has no interface number 0 [ 656.263384][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 656.274768][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 656.285847][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65314, setting to 8 [ 656.363249][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 656.411553][ T5926] usb 2-1: USB disconnect, device number 25 [ 656.450319][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 656.492659][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.551872][T15580] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 656.592265][T15586] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 656.594298][T15580] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 656.799558][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 656.799579][ T30] audit: type=1400 audit(1749489219.536:533): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15589 comm="syz.1.1442" dest=20002 [ 657.438348][ T5873] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 657.446671][ T5873] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 657.454226][ T5873] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 657.994339][ T5873] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 658.362146][ T5873] usb 1-1: USB disconnect, device number 24 [ 659.213469][ T43] usb 3-1: USB disconnect, device number 37 [ 659.213468][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 659.229000][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 660.034785][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 660.108036][ T30] audit: type=1400 audit(1749489222.846:534): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15613 comm="syz.6.1447" dest=20002 [ 660.263168][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.290730][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.295818][T15624] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 660.314233][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 660.323755][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 660.343964][ T9] usb 2-1: SerialNumber: syz [ 660.423578][T15627] vivid-000: ================= START STATUS ================= [ 660.455742][T15627] vivid-000: Radio HW Seek Mode: Bounded [ 660.470126][T15627] vivid-000: Radio Programmable HW Seek: false [ 660.477225][T15627] vivid-000: RDS Rx I/O Mode: Block I/O [ 660.482926][T15627] vivid-000: Generate RBDS Instead of RDS: false [ 660.492738][T15627] vivid-000: RDS Reception: true [ 660.498108][T15627] vivid-000: RDS Program Type: 0 inactive [ 660.504002][T15627] vivid-000: RDS PS Name: inactive [ 660.524110][T15627] vivid-000: RDS Radio Text: inactive [ 660.609255][ T9] usb 2-1: 0:2 : does not exist [ 660.614527][T15627] vivid-000: RDS Traffic Announcement: false inactive [ 660.629202][T15627] vivid-000: RDS Traffic Program: false inactive [ 660.635701][T15627] vivid-000: RDS Music: false inactive [ 660.642086][T15627] vivid-000: ================== END STATUS ================== [ 660.746291][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 660.747635][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 660.956405][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 660.971895][ T9] usb 2-1: USB disconnect, device number 26 [ 661.057511][ T43] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 661.158780][ T43] usb 3-1: config 0 has no interface number 0 [ 661.184369][ T43] usb 3-1: config 0 interface 12 has no altsetting 0 [ 661.247891][ T43] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 661.261592][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.274998][T14491] udevd[14491]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.319579][ T43] usb 3-1: Product: syz [ 661.328625][T15633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1455'. [ 661.344225][ T43] usb 3-1: Manufacturer: syz [ 661.377656][ T43] usb 3-1: SerialNumber: syz [ 661.386656][ T30] audit: type=1326 audit(1749489224.116:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15632 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 661.438410][ T30] audit: type=1326 audit(1749489224.116:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15632 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb766b8e929 code=0x7ffc0000 [ 766.456043][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 766.463061][ C0] rcu: 1-...!: (1 GPs behind) idle=51e4/0/0x1 softirq=58376/58377 fqs=0 [ 766.472665][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11416/1:b..l [ 766.480705][ C0] rcu: (detected by 0, t=10502 jiffies, g=50361, q=70 ncpus=2) [ 766.488370][ C0] Sending NMI from CPU 0 to CPUs 1: [ 766.488409][ C1] NMI backtrace for cpu 1 [ 766.488426][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 766.488446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 766.488457][ C1] RIP: 0010:__lock_acquire+0x332/0xd20 [ 766.488487][ C1] Code: e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 45 89 44 c7 24 4c 89 7c 24 10 4d 8d 34 c7 81 e5 ff 1f 00 00 48 0f a3 2d 0e 39 03 12 <73> 10 48 69 c5 c8 00 00 00 48 8d 80 30 63 42 93 eb 40 83 3d 55 c8 [ 766.488502][ C1] RSP: 0018:ffffc90000a08b70 EFLAGS: 00000003 [ 766.488518][ C1] RAX: 0000000000000000 RBX: ffff8880b8727ad8 RCX: 0000000000000070 [ 766.488530][ C1] RDX: 0000000000080000 RSI: 0000000000004000 RDI: ffff88801d2a5a00 [ 766.488541][ C1] RBP: 0000000000000070 R08: 0000000000000000 R09: ffffffff81ae63c2 [ 766.488552][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 0000000000004000 [ 766.488565][ C1] R13: 0000000000000000 R14: ffff88801d2a64f0 R15: ffff88801d2a64f0 [ 766.488577][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 766.488591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.488603][ C1] CR2: 0000001b2f90fff8 CR3: 000000005aa78000 CR4: 00000000003526f0 [ 766.488617][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 766.488627][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 766.488638][ C1] Call Trace: [ 766.488646][ C1] [ 766.488659][ C1] ? __hrtimer_run_queues+0x602/0xc60 [ 766.488685][ C1] lock_acquire+0x120/0x360 [ 766.488706][ C1] ? __hrtimer_run_queues+0x602/0xc60 [ 766.488733][ C1] ? advance_sched+0x9f8/0xc90 [ 766.488755][ C1] ? advance_sched+0x9f8/0xc90 [ 766.488775][ C1] ? advance_sched+0x9f8/0xc90 [ 766.488798][ C1] _raw_spin_lock_irq+0xa2/0xf0 [ 766.488822][ C1] ? __hrtimer_run_queues+0x602/0xc60 [ 766.488847][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 766.488875][ C1] __hrtimer_run_queues+0x602/0xc60 [ 766.488909][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 766.488933][ C1] ? read_tsc+0x9/0x20 [ 766.488957][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 766.488994][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 766.489022][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 766.489048][ C1] [ 766.489053][ C1] [ 766.489060][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 766.489078][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 766.489103][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 55 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 766.489119][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 766.489133][ C1] RAX: d3c66499fd2c0100 RBX: ffffffff81974f68 RCX: d3c66499fd2c0100 [ 766.489147][ C1] RDX: 0000000000000001 RSI: ffffffff8d96d7bc RDI: ffffffff8be1af40 [ 766.489159][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 766.489172][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fdef0 [ 766.489199][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a54b40 [ 766.489213][ C1] ? do_idle+0x1e8/0x510 [ 766.489243][ C1] default_idle+0x13/0x20 [ 766.489265][ C1] default_idle_call+0x74/0xb0 [ 766.489283][ C1] do_idle+0x1e8/0x510 [ 766.489311][ C1] ? __pfx_do_idle+0x10/0x10 [ 766.489345][ C1] cpu_startup_entry+0x44/0x60 [ 766.489371][ C1] start_secondary+0x101/0x110 [ 766.489391][ C1] common_startup_64+0x13e/0x147 [ 766.489417][ C1] [ 766.490397][ C0] task:kworker/u8:12 state:R running task stack:22792 pid:11416 tgid:11416 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 766.850165][ C0] Workqueue: bat_events batadv_nc_worker [ 766.855843][ C0] Call Trace: [ 766.859140][ C0] [ 766.862095][ C0] __schedule+0x16a2/0x4cb0 [ 766.866651][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 766.871978][ C0] ? __pfx___schedule+0x10/0x10 [ 766.876957][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 766.882195][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 766.887532][ C0] preempt_schedule_irq+0xb5/0x150 [ 766.892675][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 766.898443][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 766.904294][ C0] irqentry_exit+0x6f/0x90 [ 766.908748][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 766.914752][ C0] RIP: 0010:batadv_nc_worker+0x187/0x610 [ 766.920420][ C0] Code: 4b 03 00 00 48 c7 c2 60 40 b4 8c e8 93 a9 71 f6 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 ef e8 5d f5 f4 f6 48 8b 6d 00 <48> 85 ed 0f 94 c0 48 81 c5 38 fe ff ff 0f 94 c1 08 c1 74 07 e8 90 [ 766.940059][ C0] RSP: 0018:ffffc9000a9c7a20 EFLAGS: 00000246 [ 766.946150][ C0] RAX: 1ffff1100f59a1d0 RBX: 0000000000000001 RCX: ffff88807ef09e00 [ 766.954172][ C0] RDX: 0000000000000000 RSI: ffffffff8be1af20 RDI: ffffffff8be1aee0 [ 766.962165][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b2ca492 [ 766.970156][ C0] R10: dffffc0000000000 R11: ffffffff8b2ca3c0 R12: dffffc0000000000 [ 766.978148][ C0] R13: ffffffff8b2ca492 R14: ffff88805bef4d80 R15: 00000000000001d0 [ 766.986148][ C0] ? batadv_nc_worker+0xd2/0x610 [ 766.991129][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 766.996533][ C0] ? batadv_nc_worker+0xd2/0x610 [ 767.001519][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 767.007276][ C0] process_scheduled_works+0xade/0x17b0 [ 767.012913][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 767.018962][ C0] worker_thread+0x8a0/0xda0 [ 767.023592][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 767.029974][ C0] ? __kthread_parkme+0x7b/0x200 [ 767.034969][ C0] kthread+0x70e/0x8a0 [ 767.039072][ C0] ? __pfx_worker_thread+0x10/0x10 [ 767.044243][ C0] ? __pfx_kthread+0x10/0x10 [ 767.048863][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 767.054097][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.059340][ C0] ? __pfx_kthread+0x10/0x10 [ 767.063957][ C0] ret_from_fork+0x3fc/0x770 [ 767.068583][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 767.073732][ C0] ? __switch_to_asm+0x39/0x70 [ 767.078528][ C0] ? __switch_to_asm+0x33/0x70 [ 767.083314][ C0] ? __pfx_kthread+0x10/0x10 [ 767.087930][ C0] ret_from_fork_asm+0x1a/0x30 [ 767.092734][ C0] [ 767.095775][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g50361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 767.107077][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 767.117062][ C0] rcu: RCU grace-period kthread stack dump: [ 767.122966][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 767.136934][ C0] Call Trace: [ 767.140236][ C0] [ 767.143193][ C0] __schedule+0x16a2/0x4cb0 [ 767.147754][ C0] ? schedule+0x165/0x360 [ 767.152119][ C0] ? __pfx___schedule+0x10/0x10 [ 767.157027][ C0] ? schedule+0x91/0x360 [ 767.161306][ C0] schedule+0x165/0x360 [ 767.165498][ C0] schedule_timeout+0x12b/0x270 [ 767.170383][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 767.175785][ C0] ? __pfx_process_timeout+0x10/0x10 [ 767.181127][ C0] ? prepare_to_swait_event+0x341/0x380 [ 767.186732][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 767.191641][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 767.196613][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.201860][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 767.207189][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 767.212442][ C0] ? finish_swait+0xcd/0x1f0 [ 767.217080][ C0] rcu_gp_kthread+0x99/0x390 [ 767.221725][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 767.226978][ C0] ? __kthread_parkme+0x7b/0x200 [ 767.231965][ C0] ? __kthread_parkme+0x1a1/0x200 [ 767.237037][ C0] kthread+0x70e/0x8a0 [ 767.241191][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 767.246432][ C0] ? __pfx_kthread+0x10/0x10 [ 767.251068][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 767.256307][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.261543][ C0] ? __pfx_kthread+0x10/0x10 [ 767.266441][ C0] ret_from_fork+0x3fc/0x770 [ 767.271072][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 767.276228][ C0] ? __switch_to_asm+0x39/0x70 [ 767.281013][ C0] ? __switch_to_asm+0x33/0x70 [ 767.285801][ C0] ? __pfx_kthread+0x10/0x10 [ 767.290418][ C0] ret_from_fork_asm+0x1a/0x30 [ 767.295230][ C0] [ 767.298274][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 767.304620][ C0] CPU: 0 UID: 0 PID: 15626 Comm: syz.0.1453 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 767.314965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.325044][ C0] RIP: 0010:smp_call_function_many_cond+0xf6e/0x12d0 [ 767.331761][ C0] Code: 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 43 0f b6 04 2c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b 00 eb e5 44 89 [ 767.351505][ C0] RSP: 0018:ffffc9000b75f6e0 EFLAGS: 00000293 [ 767.357654][ C0] RAX: 0000000000000000 RBX: ffff8880b863c9c0 RCX: ffff88801e703c00 [ 767.365666][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 767.373661][ C0] RBP: ffffc9000b75f840 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 767.381665][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffff110170e825d [ 767.389676][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 767.397685][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 767.406659][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.413289][ C0] CR2: 0000200000003c80 CR3: 000000005aa78000 CR4: 00000000003526f0 [ 767.421297][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.429650][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 767.437656][ C0] Call Trace: [ 767.440980][ C0] [ 767.443959][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 767.450355][ C0] ? free_pgd_range+0x144b/0x14c0 [ 767.455540][ C0] ? rcu_is_watching+0x15/0xb0 [ 767.460365][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 767.465661][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 767.470827][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 767.475978][ C0] ? free_pgtables+0xa12/0xaf0 [ 767.480787][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 767.486391][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 767.491561][ C0] tlb_flush_mmu+0x1a7/0x680 [ 767.496212][ C0] ? __pfx_down_write+0x10/0x10 [ 767.501104][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 767.505747][ C0] exit_mmap+0x44c/0xb50 [ 767.510034][ C0] ? uprobe_clear_state+0x20f/0x290 [ 767.515279][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 767.520070][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 767.525848][ C0] ? __pfx_exit_aio+0x10/0x10 [ 767.530912][ C0] ? uprobe_clear_state+0x274/0x290 [ 767.536146][ C0] ? mm_update_next_owner+0xa7/0x870 [ 767.541462][ C0] __mmput+0x118/0x420 [ 767.545568][ C0] exit_mm+0x1da/0x2c0 [ 767.549664][ C0] ? __pfx_exit_mm+0x10/0x10 [ 767.554285][ C0] ? rcu_is_watching+0x15/0xb0 [ 767.559090][ C0] do_exit+0x640/0x22e0 [ 767.563280][ C0] ? preempt_schedule_common+0x83/0xd0 [ 767.568773][ C0] ? preempt_schedule+0xae/0xc0 [ 767.573660][ C0] ? __pfx_do_exit+0x10/0x10 [ 767.578287][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 767.583700][ C0] do_group_exit+0x21c/0x2d0 [ 767.588343][ C0] __x64_sys_exit_group+0x3f/0x40 [ 767.593422][ C0] x64_sys_call+0x21ba/0x21c0 [ 767.598131][ C0] do_syscall_64+0xfa/0x3b0 [ 767.602655][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.607881][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.613986][ C0] ? clear_bhb_loop+0x60/0xb0 [ 767.618707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.624619][ C0] RIP: 0033:0x7fc99718e929 [ 767.629054][ C0] Code: Unable to access opcode bytes at 0x7fc99718e8ff. [ 767.636135][ C0] RSP: 002b:00007fff7e112f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 767.644579][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc99718e929 [ 767.652578][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.660570][ C0] RBP: 00007fff7e112ffc R08: 000000187e11308f R09: 00000000000927c0 [ 767.668568][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000011f [ 767.676560][ C0] R13: 00000000000927c0 R14: 00000000000a1334 R15: 00007fff7e113050 [ 767.684567][ C0]