last executing test programs: 7.971005328s ago: executing program 1 (id=5622): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000007e40)={'wpan0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf040000e3ffffffffff1200000008000300", @ANYRES32=r5, @ANYBLOB="040013000600b500850100000a000600080211000001000006001200040000000600120108"], 0x44}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000004) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r2, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0), 0x8) sendmmsg$alg(r6, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 7.959149884s ago: executing program 2 (id=5624): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x8000) syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x642) 7.075834376s ago: executing program 1 (id=5625): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x10000, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1a, 0x6007, @fd_index, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x13, 0x8, 0x1, 0x2, @mcast2, @loopback, 0x8000, 0x10, 0x6, 0x6}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe25, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000000006008580000f0000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xf, 0x2, 0xad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8], 0x0, 0x10, 0x9}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r9 = dup(r0) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) 5.931585301s ago: executing program 3 (id=5629): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002b"], 0x24}, 0x1, 0x0, 0x0, 0x2404c804}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) sendmsg$IPVS_CMD_ZERO(r4, 0x0, 0x8000) 5.516456396s ago: executing program 1 (id=5631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f, 0x10}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000001f40)={0x2020}, 0x2020) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000000)=0x3, 0x8) pread64(r9, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 5.50337432s ago: executing program 2 (id=5632): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000200)=[{0x2, 0x0, 0x40, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x30000000, 0x0, 0xfffffffffffffef5) 5.413776125s ago: executing program 2 (id=5633): unshare(0x22020600) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x80000001) unshare(0x20000400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4800) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.963177241s ago: executing program 2 (id=5634): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (fail_nth: 5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) fsmount(r1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0xf00}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x44}}, 0x4004850) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r8, 0x101) connect$bt_sco(r8, &(0x7f0000000100)={0x1f, @none}, 0x8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000002d000100000000090000000004000080350011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7000000"], 0x4c}], 0x1}, 0x20004840) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x2f, @empty, 0x5}, {0xa, 0x4e24, 0xfffff801, @local, 0x4}, 0x1, {[0x3, 0x9, 0xbf41, 0x6, 0x100, 0xcdd, 0xff, 0xd]}}, 0x5c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000080)=""/141) 4.546123605s ago: executing program 3 (id=5635): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7, 0x0, 0x300}, 0x38) 4.178989716s ago: executing program 2 (id=5637): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000003ffffffffffffe8000000040000430000195cdfc19558098f7e29ccf8e7c90ce594b929c90c438aa7402798751413e7df1eb03f4b4aeb8811dfdfc53836055bbadc4575ec5559fc41dbcd", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRES64=0x0, @ANYRES8=0x0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000bc0)={0x7d, "9984a69e26edfdb7000300000000000000ff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876adcaa1a9beb8d03de6dfcfdaecb9d67597e890bc9dd646e82aa45e00"}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/66, 0x42}, {0x0}], 0x2, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x2, 0x20000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5c08cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891f648bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) 3.863356095s ago: executing program 0 (id=5638): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x25}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x24000010) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0xa}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0xfff1}, {0xf, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008090) 3.798565784s ago: executing program 4 (id=5639): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 3.640676028s ago: executing program 0 (id=5640): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='@\x00', 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3.639957812s ago: executing program 4 (id=5641): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r3 = socket$kcm(0x10, 0x2, 0x4) close(r2) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000120097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 3.308378712s ago: executing program 3 (id=5642): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4480, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x20, 0x0, @void}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x3, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x5, 0x0, 0xffffff80, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0xfffffffc, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003e000701fefffffffcffffff017c0000040042800800018004001e80040002"], 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 3.239814676s ago: executing program 0 (id=5643): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x401}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000240)="6fb225e0199d655e3d8ebc5f877f6107b61e190e6b6856f10a8b4e17f8a593ed1cae8bc9bc434ab1caed7e2efa7b682176d2af343d0929184c31", 0x3a) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000500), &(0x7f0000000600)=r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffb}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r4 = socket$alg(0x26, 0x5, 0x0) accept$alg(r4, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x6, 0xff}, {0x80000006, 0x0, 0x12, 0xf6}]}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000440)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.079198584s ago: executing program 3 (id=5644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x20004000) 3.064073544s ago: executing program 3 (id=5645): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002b"], 0x24}, 0x1, 0x0, 0x0, 0x2404c804}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) sendmsg$IPVS_CMD_ZERO(r4, 0x0, 0x8000) 2.689688447s ago: executing program 0 (id=5646): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000400)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x0) 2.031106167s ago: executing program 1 (id=5647): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x10, 0xfffffff5, 0x3}, 0x10) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000001, 0x10010, r0, 0x38235000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18500000000000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000004085000000b000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4) 1.982171615s ago: executing program 4 (id=5648): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x26, &(0x7f0000000a40)=ANY=[@ANYBLOB="aac0aaaaaaaaaaaaaaaaaabb0018c0"], 0x0) 1.878885182s ago: executing program 4 (id=5649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) write$dsp(r4, &(0x7f0000000440)="024922acde319b3a7cac20447312ad1f7c62000000090000c83b899897a7ef9ccb3e45e10e93ded8367d55f030e634d42bc8b951c7b7fcbb7ef4041ad10b0b", 0x3f) close(r4) 1.717709941s ago: executing program 0 (id=5650): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x10}]}}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r9 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf25060000000500050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1, 0x7, 0x0, 0x7fff, {{0x22, 0x4, 0x0, 0x34, 0x88, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2f, 0x0, [{0x1, 0xf, "b07f6e0bbafe95464cdcf2e80b"}, {0x2, 0xb, "9939f9c81b785f1e5c"}, {0x6, 0xf, "ef58c12de013a4ae089d9bc7ee"}]}, @timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x6, [{@loopback, 0x200000}, {@local, 0x5}]}, @end, @rr={0x7, 0xf, 0xa6, [@rand_addr=0x64010100, @loopback, @remote]}, @ssrr={0x89, 0x13, 0x19, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @empty]}, @ssrr={0x89, 0xb, 0x94, [@multicast2, @local]}]}}}}}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=r13], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x840}, 0x10d0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r14 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000004780)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff]}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r15, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xb6, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x1b, 0x4, 0x3, 0x9, 0xa8, 0x65, 0x0, 0x9, 0xd0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x67, 0x1, 0x1, [{@rand_addr=0x64010102, 0x6}, {@empty, 0x38}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xf}, {@local, 0x9}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x8}, {@multicast1, 0xfe7}]}, @ssrr={0x89, 0x13, 0xde, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @broadcast, @loopback]}]}}, "3291158ed1cbb9c0c3b9b8697a1c62dd88d2d89aaf5404adeefe4016ada3931c5dd5ee703e209add15509781bf9dda2acd8d586c016e3222f71c2e2c"}}}}, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 1.650923769s ago: executing program 1 (id=5651): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) close(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="d330c07aa2d31e34c6a9bffbcaf230682a703afbd8e529286ce3c4047bac87d933ff8a07ba4ba2b695478c9fb4cbf20d25478b97e775c1c4ab486ad8f8cd5df7d618d869", 0x44}, {&(0x7f0000000180)="6c6517b10248b071b71d017249ac8c6c4e3e1f6e0306efd337baf02d672b9949df42d2f9c2af3d828eb8a2584bbc8e0d514009dd645dcc5dc9ba027a602ee01f34a608d07518410c572287dd4246802a67af1f13194547e3bf151c7322dc2a85f33831fdd2d85d4ab8f8bc2b6892a24cf169158daf012a23dc6539c5e89d6fa4fe34790605bedec86c05d7db8f545ece9d337a7b817b72facbac0eb1852342fbd78f94da92f6a63e3c762102c550322e8751ad2ef68ce7b92d75862067bc05f2fadc79a99a", 0xc5}], 0x2}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="b551ea06309366758b21c647bd68123acdc0ff02584334e58dd7c1c8b3bacc26bb9a41c0992896d66de2426e6f69e348cd94c4dd7ebf3bea0210cb14cb362952735a0ecaece33d48bcddd7b1e83da2e8a23f85289a", 0x55}, {&(0x7f0000000500)="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", 0x1000}], 0x2}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001500)="f6032a7a0335ebea8b5ff1c3b2e8a578cf6a3e37597df4f1016a85e56ae7c7671ab7ab543df7edd9e2b566e6111792b16d98ac0c1b12f53293317023962eedbf6acf33045c87157d6b1555439c7dd87ab0fd22506d5dc6aa1a76b40686fdbb6ad1aa2b7af964be00d130f329afd2ae450e9c5d8a430a92efd9121b2e701ab47bec1c58fdf97db5ca67e04b9c893a39c6b9cb98e8e12b2e211629534ad91b2377cfcb0d37d7864a315ec451e249bbd822acf84bfd077051724215c915f25d4f412f6a8e1f6d6a019d01c0b21e7cbcd02b03310562ddbc62cf6d3031e9ca067bd75f75d98f867bc4dd54f13d049d130e2bfa7e9fa6", 0xf4}, {&(0x7f0000000400)="93e10c21240df690b96557c0091dd524c0e0dd7ce9916bff943926bdde3c3146b8be0425b9304a49a35e", 0x2a}], 0x2, &(0x7f00000018c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x4c, [@multicast2, @private=0xa010100, @multicast2, @local, @broadcast]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0xb5, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010101, @multicast2, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @rr={0x7, 0x7, 0xb9, [@rand_addr=0x64010102]}, @end]}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@cipso={0x86, 0x5e, 0x0, [{0x1, 0xb, "bd63b3d04c06453690"}, {0x2, 0x3, "01"}, {0x7, 0xb, "3903469e928c6b9f59"}, {0x0, 0x8, "c9ed54c493ee"}, {0x7, 0xf, "0815cdc1a727d459aace74fbac"}, {0x0, 0x5, "c68582"}, {0x6, 0x12, "50f3ccf1e74fb9fd456ca7c3b28b6d26"}, {0x6, 0xc, "36379b844bbe255cdf06"}, {0x6, 0x5, "c40db0"}]}, @timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0x8, [{@rand_addr=0x64010100, 0x2}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x24, 0x83, 0x1, 0xe, [{@multicast1, 0x2}, {@broadcast, 0x7}, {@private=0xa010102, 0x7fff}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x13, 0x3, 0xc, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc09f}, {@local, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9b}}], 0x1d8}}], 0x3, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x190, 0x178, 0x178, 0x190, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0xffffffff, 0x0, 'veth0_to_hsr\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9, 0x3}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x3, 0xc, {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x28, 0x4, 0x0, 0x49a4, '\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000001600)=""/11, 0xb}, {&(0x7f0000000600)=""/222, 0xde}], 0x5, &(0x7f0000000700)=""/191, 0xbf}, 0x80}], 0x1, 0x42, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x1b, 0x26, 0x12, 0xf, 0xb, 0x64, 0x4, 0x89}}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 947.538802ms ago: executing program 4 (id=5652): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6, 0x0, 0x300}, 0x38) 943.290794ms ago: executing program 3 (id=5653): connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000002080)='net/ip_vs_stats\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffc7a) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "06df0e096d83165084099951ac11e63c7e258e643b0a50d881022b6e613aa481", "bbbbeea26a922d289646657815e4c99de4f88864de1d51ffb9f8a6d050aea182c46422ddd47508547519c1d44f75bf86", "1f12cda0e48c248534c0c0e365cce1ce4ccef4fc6d66a24c71fc7923", {"fa2fca6e83b1159c3aa224e3b95e80db", "34027322ca86d1def1c758c8eea5d64c"}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) r7 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x25c5, {{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1, @empty, 0x7}}, {{0xa, 0x4e24, 0x81, @empty, 0xff}}, {{0xa, 0x4e20, 0x80000000, @private0, 0xffffff01}}]}, 0x210) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa7d756f451a0c57a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) sched_setscheduler(r3, 0x1, &(0x7f0000002040)=0x5f7) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket(0xa, 0x3, 0x3a) 835.487258ms ago: executing program 1 (id=5654): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) rt_sigaction(0x39, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00"], 0xd) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 658.948062ms ago: executing program 2 (id=5655): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0xd) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r4, 0xc080}], 0x1, 0xffffffff) sendmmsg$alg(r4, &(0x7f0000005e00)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)="f5", 0x1}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x355, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0xd3) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x100000, 0x9, 0x49, 0x0, 0x80000001}, 0xc15e, 0x0, 0x0, 0x0, 0x973d, 0xc, 0xe, 0x13, 0x4, 0x6, {0x7, 0x4, 0xfe12, 0x5, 0x5021, 0x8000000f}}}}]}, 0x78}}, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000200)=0x7ff) linkat(r6, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) 610.925084ms ago: executing program 0 (id=5656): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x0, 0x2, 0x7, 0x3, 0x3, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x3, 0x653, 0xd9c, 0x0, 0x1d0, 0x6, 0x6000, 0x8, 0x0, 0x0, 0x5, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0x5, {0x1000000000006, 0x0, 0x40000000000, 0xc, 0x9, 0x3, {0xfffffffffffffffd, 0x11, 0x1, 0x80009, 0x6, 0x9, 0x9, 0x80, 0xc, 0x4000, 0x6, 0x0, 0x0, 0x9, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240), 0x51b0235b91d414d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1, &(0x7f00000010c0)=@raw=[@ldst={0x1, 0x1, 0x6, 0x3, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}], &(0x7f0000001100)='syzkaller\x00', 0x7, 0x8, &(0x7f0000001140)=""/8, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001280)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f00000012c0)=[{0x3, 0x4, 0x10, 0xa}], 0x10, 0xff}, 0x94) read$dsp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/75, 0x4b}, {0x0}], 0x2, 0xbaf, 0x1) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000001040)=""/57, &(0x7f0000001080)=0x39) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffff001, 0x2, {0xb, @pix_mp={0x19, 0x1, 0x7079781c, 0x1, 0x2, [{0xd, 0x1}, {0x1b, 0xff}, {0x10001, 0x2}, {0x204, 0x7}, {0x101, 0x1}, {0x9, 0x5}, {0x5, 0x80000000}, {0x80000001, 0x8001}], 0xa, 0x1, 0x3, 0x0, 0x7}}}) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 0s ago: executing program 4 (id=5657): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) io_setup(0xbed3, &(0x7f00000003c0)) chdir(&(0x7f0000000080)='./file1\x00') semop(0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0x2000}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x2, 0x10, 0x1000}], 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getpid() symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') truncate(0x0, 0x7) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) kernel console output (not intermixed with test programs): e 0, times 0 [ 1695.119776][T25496] CPU: 0 UID: 0 PID: 25496 Comm: syz.1.5063 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1695.119800][T25496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1695.119812][T25496] Call Trace: [ 1695.119818][T25496] [ 1695.119825][T25496] dump_stack_lvl+0x16c/0x1f0 [ 1695.119859][T25496] should_fail_ex+0x512/0x640 [ 1695.119886][T25496] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1695.119921][T25496] should_failslab+0xc2/0x120 [ 1695.119939][T25496] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1695.119964][T25496] ? __might_fault+0xe3/0x190 [ 1695.119988][T25496] ? __might_fault+0x13b/0x190 [ 1695.120013][T25496] ? getname_flags.part.0+0x4c/0x550 [ 1695.120040][T25496] getname_flags.part.0+0x4c/0x550 [ 1695.120065][T25496] getname_flags+0x93/0xf0 [ 1695.120091][T25496] user_path_at+0x24/0x60 [ 1695.120118][T25496] __x64_sys_mount+0x1fc/0x310 [ 1695.120139][T25496] ? __pfx___x64_sys_mount+0x10/0x10 [ 1695.120166][T25496] do_syscall_64+0xcd/0x4c0 [ 1695.120186][T25496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.120204][T25496] RIP: 0033:0x7f0d32b8e9a9 [ 1695.120219][T25496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.120236][T25496] RSP: 002b:00007f0d33a8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1695.120253][T25496] RAX: ffffffffffffffda RBX: 00007f0d32db6160 RCX: 00007f0d32b8e9a9 [ 1695.120265][T25496] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000000 [ 1695.120277][T25496] RBP: 00007f0d33a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.120288][T25496] R10: 0000000000208402 R11: 0000000000000246 R12: 0000000000000001 [ 1695.120299][T25496] R13: 0000000000000000 R14: 00007f0d32db6160 R15: 00007ffc994e1268 [ 1695.120323][T25496] [ 1696.911099][T25509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5067'. [ 1696.920992][T25509] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1697.049421][T25512] FAULT_INJECTION: forcing a failure. [ 1697.049421][T25512] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.062058][T25512] CPU: 0 UID: 0 PID: 25512 Comm: syz.0.5070 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1697.062073][T25512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1697.062080][T25512] Call Trace: [ 1697.062084][T25512] [ 1697.062088][T25512] dump_stack_lvl+0x16c/0x1f0 [ 1697.062109][T25512] should_fail_ex+0x512/0x640 [ 1697.062126][T25512] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1697.062143][T25512] should_failslab+0xc2/0x120 [ 1697.062154][T25512] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1697.062169][T25512] ? cgw_create_job+0x21c/0xe80 [ 1697.062189][T25512] cgw_create_job+0x21c/0xe80 [ 1697.062206][T25512] ? __pfx_cgw_create_job+0x10/0x10 [ 1697.062227][T25512] ? __pfx_cgw_create_job+0x10/0x10 [ 1697.062243][T25512] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1697.062257][T25512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1697.062272][T25512] ? ref_tracker_free+0x37c/0x830 [ 1697.062284][T25512] netlink_rcv_skb+0x155/0x420 [ 1697.062297][T25512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1697.062309][T25512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1697.062326][T25512] ? netlink_deliver_tap+0x1ae/0xd30 [ 1697.062341][T25512] netlink_unicast+0x58d/0x850 [ 1697.062355][T25512] ? __pfx_netlink_unicast+0x10/0x10 [ 1697.062367][T25512] ? __build_skb_around+0x278/0x3b0 [ 1697.062384][T25512] netlink_sendmsg+0x8d1/0xdd0 [ 1697.062399][T25512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1697.062417][T25512] sock_write_iter+0x4ff/0x5b0 [ 1697.062431][T25512] ? __pfx_sock_write_iter+0x10/0x10 [ 1697.062450][T25512] ? bpf_lsm_file_permission+0x9/0x10 [ 1697.062462][T25512] ? security_file_permission+0x71/0x210 [ 1697.062474][T25512] ? rw_verify_area+0xcf/0x680 [ 1697.062490][T25512] vfs_write+0x6c4/0x1150 [ 1697.062506][T25512] ? __pfx_sock_write_iter+0x10/0x10 [ 1697.062521][T25512] ? __pfx_vfs_write+0x10/0x10 [ 1697.062535][T25512] ? find_held_lock+0x2b/0x80 [ 1697.062559][T25512] ksys_write+0x1f8/0x250 [ 1697.062574][T25512] ? __pfx_ksys_write+0x10/0x10 [ 1697.062594][T25512] do_syscall_64+0xcd/0x4c0 [ 1697.062606][T25512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.062617][T25512] RIP: 0033:0x7fb60278e9a9 [ 1697.062626][T25512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.062641][T25512] RSP: 002b:00007fb6035fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1697.062651][T25512] RAX: ffffffffffffffda RBX: 00007fb6029b5fa0 RCX: 00007fb60278e9a9 [ 1697.062658][T25512] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000005 [ 1697.062664][T25512] RBP: 00007fb6035fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.062671][T25512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.062677][T25512] R13: 0000000000000000 R14: 00007fb6029b5fa0 R15: 00007ffea8061a28 [ 1697.062691][T25512] [ 1697.369400][T25516] fuse: Unknown parameter 'group_id00000000000000000000' [ 1697.634183][T25524] openvswitch: netlink: Message has 24 unknown bytes. [ 1697.659093][T25524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1698.150620][T25531] No buffer was provided with the request [ 1698.995971][T25542] openvswitch: netlink: Message has 16 unknown bytes. [ 1700.806640][T25555] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 1700.927532][ T30] audit: type=1400 audit(1753267482.832:1570): avc: denied { accept } for pid=25554 comm="syz.1.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1701.036651][T25562] openvswitch: netlink: Message has 16 unknown bytes. [ 1702.052515][T25573] openvswitch: netlink: Message has 24 unknown bytes. [ 1702.059611][T25573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1703.455884][T25596] FAULT_INJECTION: forcing a failure. [ 1703.455884][T25596] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.471066][T25596] CPU: 1 UID: 0 PID: 25596 Comm: syz.4.5092 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1703.471089][T25596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1703.471097][T25596] Call Trace: [ 1703.471101][T25596] [ 1703.471105][T25596] dump_stack_lvl+0x16c/0x1f0 [ 1703.471127][T25596] should_fail_ex+0x512/0x640 [ 1703.471144][T25596] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1703.471161][T25596] should_failslab+0xc2/0x120 [ 1703.471172][T25596] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1703.471187][T25596] ? __request_region+0x5c/0xf0 [ 1703.471206][T25596] __request_region+0x5c/0xf0 [ 1703.471223][T25596] comedi_request_region+0x6d/0x1c0 [ 1703.471242][T25596] pcl818_attach+0xe9/0x1660 [ 1703.471257][T25596] comedi_device_attach+0x3b0/0x900 [ 1703.471277][T25596] do_devconfig_ioctl+0x1a7/0x580 [ 1703.471290][T25596] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1703.471311][T25596] ? find_held_lock+0x2b/0x80 [ 1703.471328][T25596] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1703.471346][T25596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1703.471359][T25596] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1703.471373][T25596] ? do_vfs_ioctl+0x523/0x1a60 [ 1703.471389][T25596] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1703.471406][T25596] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1703.471418][T25596] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1703.471430][T25596] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1703.471446][T25596] ? hook_file_ioctl_common+0x145/0x410 [ 1703.471463][T25596] ? selinux_file_ioctl+0x180/0x270 [ 1703.471473][T25596] ? selinux_file_ioctl+0xb4/0x270 [ 1703.471484][T25596] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1703.471499][T25596] __x64_sys_ioctl+0x18e/0x210 [ 1703.471514][T25596] do_syscall_64+0xcd/0x4c0 [ 1703.471526][T25596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.471538][T25596] RIP: 0033:0x7f037f38e9a9 [ 1703.471547][T25596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1703.471558][T25596] RSP: 002b:00007f0380174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1703.471569][T25596] RAX: ffffffffffffffda RBX: 00007f037f5b5fa0 RCX: 00007f037f38e9a9 [ 1703.471577][T25596] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 1703.471584][T25596] RBP: 00007f0380174090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.471590][T25596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.471596][T25596] R13: 0000000000000000 R14: 00007f037f5b5fa0 R15: 00007fff9259bbc8 [ 1703.471611][T25596] [ 1703.471640][T25596] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 1703.795533][T25599] 9pnet_fd: Insufficient options for proto=fd [ 1706.951872][T25639] syz.2.5102: attempt to access beyond end of device [ 1706.951872][T25639] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1706.967077][T25639] syz.2.5102: attempt to access beyond end of device [ 1706.967077][T25639] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1706.980480][T25639] Mount JFS Failure: -5 [ 1708.041872][T25652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1708.302138][ T5911] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1708.459150][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 1708.467505][ T5911] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1708.481649][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.500850][ T5911] usb 4-1: config 0 descriptor?? [ 1708.532451][ T5911] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1708.583514][ T5911] usb 4-1: Detected FT4232H [ 1708.826514][T25667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.836750][T25667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.159298][ T5911] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1709.188666][ T5911] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1709.197893][ T5911] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1709.249560][ T5911] usb 4-1: USB disconnect, device number 94 [ 1709.285437][ T5911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1709.609647][ T5911] ftdi_sio 4-1:0.0: device disconnected [ 1709.946189][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5113'. [ 1709.964265][T25675] tmpfs: Unknown parameter 'grpquota_block_h2s V' [ 1710.877651][T25678] block nbd0: server does not support multiple connections per device. [ 1711.284592][T25678] block nbd0: shutting down sockets [ 1711.749858][T25690] FAULT_INJECTION: forcing a failure. [ 1711.749858][T25690] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.798978][T25690] CPU: 1 UID: 0 PID: 25690 Comm: syz.3.5118 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1711.799006][T25690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1711.799016][T25690] Call Trace: [ 1711.799023][T25690] [ 1711.799030][T25690] dump_stack_lvl+0x16c/0x1f0 [ 1711.799062][T25690] should_fail_ex+0x512/0x640 [ 1711.799094][T25690] should_failslab+0xc2/0x120 [ 1711.799114][T25690] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1711.799141][T25690] ? skb_clone+0x190/0x3f0 [ 1711.799164][T25690] skb_clone+0x190/0x3f0 [ 1711.799184][T25690] netlink_deliver_tap+0xabd/0xd30 [ 1711.799210][T25690] netlink_unicast+0x62f/0x850 [ 1711.799234][T25690] ? __pfx_netlink_unicast+0x10/0x10 [ 1711.799262][T25690] netlink_sendmsg+0x8d1/0xdd0 [ 1711.799288][T25690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.799319][T25690] ____sys_sendmsg+0xa95/0xc70 [ 1711.799342][T25690] ? copy_msghdr_from_user+0x10a/0x160 [ 1711.799369][T25690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.799400][T25690] ___sys_sendmsg+0x134/0x1d0 [ 1711.799428][T25690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.799464][T25690] ? __lock_acquire+0x622/0x1c90 [ 1711.799512][T25690] __sys_sendmsg+0x16d/0x220 [ 1711.799531][T25690] ? __pfx___sys_sendmsg+0x10/0x10 [ 1711.799565][T25690] do_syscall_64+0xcd/0x4c0 [ 1711.799586][T25690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.799604][T25690] RIP: 0033:0x7f7b6e78e9a9 [ 1711.799624][T25690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.799642][T25690] RSP: 002b:00007f7b6f6a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.799659][T25690] RAX: ffffffffffffffda RBX: 00007f7b6e9b5fa0 RCX: 00007f7b6e78e9a9 [ 1711.799672][T25690] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1711.799683][T25690] RBP: 00007f7b6f6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.799694][T25690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.799705][T25690] R13: 0000000000000000 R14: 00007f7b6e9b5fa0 R15: 00007ffe81fbd8c8 [ 1711.799735][T25690] [ 1712.175721][T25692] block nbd2: not configured, cannot reconfigure [ 1712.339265][ T5896] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1712.769596][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 1712.811308][ T5896] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1712.826420][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.044759][ T5896] usb 4-1: config 0 descriptor?? [ 1713.076101][ T5896] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1713.116477][ T5896] usb 4-1: Detected FT4232H [ 1713.273159][ T30] audit: type=1800 audit(1753267495.182:1571): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5121" name="/" dev="9p" ino=2 res=0 errno=0 [ 1713.683990][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.695066][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.922473][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1713.929668][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1713.948644][ T5896] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1713.966393][ T5896] usb 4-1: USB disconnect, device number 95 [ 1714.017851][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1714.096231][ T5896] ftdi_sio 4-1:0.0: device disconnected [ 1714.483807][T25727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5127'. [ 1716.890602][T25741] FAULT_INJECTION: forcing a failure. [ 1716.890602][T25741] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.029116][T25741] CPU: 0 UID: 0 PID: 25741 Comm: syz.4.5131 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1717.029144][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1717.029155][T25741] Call Trace: [ 1717.029162][T25741] [ 1717.029169][T25741] dump_stack_lvl+0x16c/0x1f0 [ 1717.029201][T25741] should_fail_ex+0x512/0x640 [ 1717.029231][T25741] should_failslab+0xc2/0x120 [ 1717.029248][T25741] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1717.029265][T25741] ? skb_clone+0x190/0x3f0 [ 1717.029278][T25741] skb_clone+0x190/0x3f0 [ 1717.029289][T25741] netlink_deliver_tap+0xabd/0xd30 [ 1717.029305][T25741] netlink_unicast+0x62f/0x850 [ 1717.029320][T25741] ? __pfx_netlink_unicast+0x10/0x10 [ 1717.029337][T25741] netlink_sendmsg+0x8d1/0xdd0 [ 1717.029351][T25741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.029369][T25741] ____sys_sendmsg+0xa95/0xc70 [ 1717.029390][T25741] ? copy_msghdr_from_user+0x10a/0x160 [ 1717.029423][T25741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1717.029456][T25741] ___sys_sendmsg+0x134/0x1d0 [ 1717.029482][T25741] ? __pfx____sys_sendmsg+0x10/0x10 [ 1717.029498][T25741] ? __lock_acquire+0x622/0x1c90 [ 1717.029526][T25741] __sys_sendmsg+0x16d/0x220 [ 1717.029536][T25741] ? __pfx___sys_sendmsg+0x10/0x10 [ 1717.029555][T25741] do_syscall_64+0xcd/0x4c0 [ 1717.029567][T25741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.029579][T25741] RIP: 0033:0x7f037f38e9a9 [ 1717.029588][T25741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1717.029600][T25741] RSP: 002b:00007f0380174038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1717.029611][T25741] RAX: ffffffffffffffda RBX: 00007f037f5b5fa0 RCX: 00007f037f38e9a9 [ 1717.029619][T25741] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1717.029625][T25741] RBP: 00007f0380174090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.029632][T25741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.029638][T25741] R13: 0000000000000000 R14: 00007f037f5b5fa0 R15: 00007fff9259bbc8 [ 1717.029652][T25741] [ 1717.243339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1718.139358][ T5896] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1718.440565][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 1718.447461][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1718.459394][ T5896] usb 5-1: config 155 has an invalid interface number: 79 but max is 0 [ 1718.467775][ T5896] usb 5-1: config 155 has no interface number 0 [ 1718.474102][ T5896] usb 5-1: config 155 interface 79 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1718.507862][ T5896] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=b5.15 [ 1718.518889][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.549427][ T5896] usb 5-1: Product: syz [ 1718.556321][ T5896] usb 5-1: Manufacturer: syz [ 1718.581332][ T5896] usb 5-1: SerialNumber: syz [ 1718.591094][T25747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1718.603350][T25761] FAULT_INJECTION: forcing a failure. [ 1718.603350][T25761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1718.732448][T25761] CPU: 1 UID: 0 PID: 25761 Comm: syz.1.5138 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1718.732474][T25761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1718.732486][T25761] Call Trace: [ 1718.732492][T25761] [ 1718.732500][T25761] dump_stack_lvl+0x16c/0x1f0 [ 1718.732532][T25761] should_fail_ex+0x512/0x640 [ 1718.732564][T25761] _copy_from_user+0x2e/0xd0 [ 1718.732583][T25761] memdup_user+0x6b/0xe0 [ 1718.732610][T25761] __comedi_get_user_chanlist+0xc1/0x200 [ 1718.732632][T25761] do_cmd_ioctl.constprop.0+0x325/0xa40 [ 1718.732660][T25761] comedi_unlocked_ioctl+0x2211/0x2f00 [ 1718.732688][T25761] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1718.732707][T25761] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1718.732729][T25761] ? do_vfs_ioctl+0x523/0x1a60 [ 1718.732752][T25761] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1718.732780][T25761] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1718.732798][T25761] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1718.732816][T25761] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1718.732841][T25761] ? hook_file_ioctl_common+0x145/0x410 [ 1718.732867][T25761] ? selinux_file_ioctl+0x180/0x270 [ 1718.732882][T25761] ? selinux_file_ioctl+0xb4/0x270 [ 1718.732899][T25761] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1718.732922][T25761] __x64_sys_ioctl+0x18e/0x210 [ 1718.732945][T25761] do_syscall_64+0xcd/0x4c0 [ 1718.732963][T25761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.732980][T25761] RIP: 0033:0x7f0d32b8e9a9 [ 1718.732994][T25761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.733010][T25761] RSP: 002b:00007f0d33ace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1718.733028][T25761] RAX: ffffffffffffffda RBX: 00007f0d32db5fa0 RCX: 00007f0d32b8e9a9 [ 1718.733040][T25761] RDX: 0000200000001140 RSI: 0000000080506409 RDI: 0000000000000003 [ 1718.733050][T25761] RBP: 00007f0d33ace090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.733060][T25761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.733070][T25761] R13: 0000000000000000 R14: 00007f0d32db5fa0 R15: 00007ffc994e1268 [ 1718.733094][T25761] [ 1719.384345][T25770] 9pnet_fd: Insufficient options for proto=fd [ 1719.443751][ T5896] s2255 5-1:155.79: Could not find bulk-in endpoint [ 1719.452458][ T5896] Sensoray 2255 driver load failed: 0xfffffff4 [ 1719.459223][T23926] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1719.472195][ T5896] s2255 5-1:155.79: probe with driver s2255 failed with error -12 [ 1719.487915][ T5896] usb 5-1: USB disconnect, device number 80 [ 1719.629042][T23926] usb 4-1: Using ep0 maxpacket: 16 [ 1719.640970][T23926] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1719.669746][T23926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.688769][T23926] usb 4-1: config 0 descriptor?? [ 1719.709316][T23926] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1719.717232][T23926] usb 4-1: Detected FT4232H [ 1719.826863][T25774] netlink: 'syz.0.5142': attribute type 1 has an invalid length. [ 1719.834814][T25774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5142'. [ 1720.075261][T25777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.085080][T25777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.247403][T23926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1720.256337][T23926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1720.265806][T23926] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1720.271356][ T5896] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1720.283491][T23926] usb 4-1: USB disconnect, device number 96 [ 1720.302384][T23926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1720.313155][T23926] ftdi_sio 4-1:0.0: device disconnected [ 1720.477718][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 1720.532828][ T5896] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1720.542094][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.717204][ T5896] usb 3-1: config 0 descriptor?? [ 1720.738703][ T5896] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1720.754085][ T5896] usb 3-1: Detected FT4232H [ 1721.203493][T25789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.214219][T25789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.466875][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1721.492228][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1721.502377][T25791] random: crng reseeded on system resumption [ 1721.518813][ T5896] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1721.533152][ T5896] usb 3-1: USB disconnect, device number 84 [ 1721.544049][T25798] input: syz1 as /devices/virtual/input/input35 [ 1721.560824][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1721.580453][ T5896] ftdi_sio 3-1:0.0: device disconnected [ 1721.589515][T25798] netlink: 'syz.0.5147': attribute type 8 has an invalid length. [ 1721.610402][T25798] netem: change failed [ 1722.797241][ T30] audit: type=1400 audit(1753267503.812:1572): avc: denied { mounton } for pid=25801 comm="syz.0.5149" path="/file0" dev="tmpfs" ino=2263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1724.329877][T25820] No buffer was provided with the request [ 1725.869354][ T5896] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1726.306859][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 1726.314840][ T5896] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1726.327397][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.342091][ T5896] usb 5-1: config 0 descriptor?? [ 1726.890161][ T5896] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1726.954365][ T5896] usb 5-1: Detected FT4232H [ 1727.003782][T25846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.015690][T25846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.419914][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1727.546203][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1727.572177][ T5896] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1728.027442][ T5896] usb 5-1: USB disconnect, device number 81 [ 1728.044144][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1728.064786][ T5896] ftdi_sio 5-1:0.0: device disconnected [ 1728.920821][T25870] openvswitch: netlink: Message has 16 unknown bytes. [ 1728.927808][T25870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.182793][T25873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5166'. [ 1730.619771][T25778] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1730.925294][T25778] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1730.957627][T25778] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 1730.970205][T25778] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1730.981313][T25778] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1730.993169][T25778] usb 3-1: config 1 has no interface number 1 [ 1731.000447][T25778] usb 3-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1731.015783][T25778] usb 3-1: config 1 interface 6 has no altsetting 0 [ 1731.029131][T25778] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1731.046241][T25778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.054980][T25778] usb 3-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1731.075884][T25778] usb 3-1: Manufacturer: 숯侭ᯒ涸 [ 1732.001686][T25882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.026047][T25882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.193427][T25778] usb 3-1: 0:2 : does not exist [ 1732.211382][T25778] usb 3-1: USB disconnect, device number 85 [ 1733.477582][T25922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1733.716136][T25924] input: syz1 as /devices/virtual/input/input36 [ 1734.266753][T25933] 9pnet_fd: Insufficient options for proto=fd [ 1735.093482][T25941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1735.102468][T25941] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1735.419586][T25948] vxfs: WRONG superblock magic 00000000 at 1 [ 1735.429816][T25948] vxfs: WRONG superblock magic 00000000 at 8 [ 1735.435955][T25948] vxfs: can't find superblock. [ 1735.973337][T25950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.029590][T25950] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1736.093954][T25964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5189'. [ 1736.103009][T25964] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1736.914622][T25984] bridge0: port 3(batadv1) entered blocking state [ 1736.942308][T25984] bridge0: port 3(batadv1) entered disabled state [ 1736.990402][T25984] batadv1: entered allmulticast mode [ 1737.028304][T25984] batadv1: entered promiscuous mode [ 1737.559376][ T6233] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1737.568824][ T6233] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1737.690374][T25992] tipc: Started in network mode [ 1737.698428][T25992] tipc: Node identity ac1414aa, cluster identity 4711 [ 1737.716920][T25992] tipc: Enabled bearer , priority 10 [ 1737.798485][T25994] netlink: 'syz.1.5195': attribute type 21 has an invalid length. [ 1737.806483][T25994] netlink: 'syz.1.5195': attribute type 2 has an invalid length. [ 1737.814268][T25994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5195'. [ 1737.834173][ T30] audit: type=1400 audit(1753267519.732:1573): avc: denied { read } for pid=25993 comm="syz.1.5195" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1738.007461][ T30] audit: type=1400 audit(1753267519.732:1574): avc: denied { open } for pid=25993 comm="syz.1.5195" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1738.197458][ T30] audit: type=1400 audit(1753267519.732:1575): avc: denied { ioctl } for pid=25993 comm="syz.1.5195" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1738.413448][T26011] FAULT_INJECTION: forcing a failure. [ 1738.413448][T26011] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.426124][T26011] CPU: 0 UID: 0 PID: 26011 Comm: syz.0.5198 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1738.426139][T26011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1738.426151][T26011] Call Trace: [ 1738.426155][T26011] [ 1738.426159][T26011] dump_stack_lvl+0x16c/0x1f0 [ 1738.426180][T26011] should_fail_ex+0x512/0x640 [ 1738.426197][T26011] ? fs_reclaim_acquire+0xae/0x150 [ 1738.426212][T26011] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1738.426223][T26011] should_failslab+0xc2/0x120 [ 1738.426234][T26011] __kmalloc_noprof+0xd2/0x510 [ 1738.426253][T26011] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1738.426265][T26011] ? tomoyo_profile+0x47/0x60 [ 1738.426279][T26011] tomoyo_path_number_perm+0x245/0x580 [ 1738.426294][T26011] ? tomoyo_path_number_perm+0x237/0x580 [ 1738.426311][T26011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1738.426327][T26011] ? find_held_lock+0x2b/0x80 [ 1738.426353][T26011] ? find_held_lock+0x2b/0x80 [ 1738.426366][T26011] ? hook_file_ioctl_common+0x145/0x410 [ 1738.426382][T26011] ? __fget_files+0x20e/0x3c0 [ 1738.426395][T26011] security_file_ioctl+0x9b/0x240 [ 1738.426407][T26011] __x64_sys_ioctl+0xb7/0x210 [ 1738.426423][T26011] do_syscall_64+0xcd/0x4c0 [ 1738.426435][T26011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.426446][T26011] RIP: 0033:0x7fb60278e9a9 [ 1738.426455][T26011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.426467][T26011] RSP: 002b:00007fb6035da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.426477][T26011] RAX: ffffffffffffffda RBX: 00007fb6029b6080 RCX: 00007fb60278e9a9 [ 1738.426484][T26011] RDX: 00002000000008c0 RSI: 00000000401c5820 RDI: 0000000000000006 [ 1738.426491][T26011] RBP: 00007fb6035da090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.426497][T26011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.426503][T26011] R13: 0000000000000000 R14: 00007fb6029b6080 R15: 00007ffea8061a28 [ 1738.426517][T26011] [ 1738.426522][T26011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1738.904718][ T5876] tipc: Node number set to 2886997162 [ 1740.675251][T26048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5204'. [ 1740.686126][T26048] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1740.969185][ T5911] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1741.320395][ T5911] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1741.335891][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.428944][ T5911] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1741.462537][ T5911] usb 4-1: config 1 has no interface number 1 [ 1741.477887][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1741.540043][ T5876] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1741.661129][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1741.670986][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.699415][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 1741.719757][ T5911] usb 4-1: Product: syz [ 1741.725955][ T5876] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1741.745417][ T5911] usb 4-1: Manufacturer: syz [ 1741.752336][T26073] tipc: Enabled bearer , priority 10 [ 1741.759486][T26073] lo speed is unknown, defaulting to 1000 [ 1741.765212][T26073] lo speed is unknown, defaulting to 1000 [ 1741.772473][T26073] lo speed is unknown, defaulting to 1000 [ 1741.782627][T26073] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1741.798345][T26073] lo speed is unknown, defaulting to 1000 [ 1741.804826][T26073] lo speed is unknown, defaulting to 1000 [ 1741.811899][T26073] lo speed is unknown, defaulting to 1000 [ 1741.817820][T26074] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1741.819055][T26073] lo speed is unknown, defaulting to 1000 [ 1741.833302][T26073] lo speed is unknown, defaulting to 1000 [ 1741.863355][ T5911] usb 4-1: SerialNumber: syz [ 1741.864236][ T5876] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 41130, setting to 1024 [ 1741.899801][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1741.917141][ T5876] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1741.930331][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.943884][ T5876] usb 3-1: config 0 descriptor?? [ 1742.107531][ T5911] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1742.143009][ T5911] usb 4-1: MIDIStreaming interface descriptor not found [ 1742.158567][T26064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.238358][T26064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.329458][ T5911] usb 4-1: USB disconnect, device number 97 [ 1742.487486][ T5876] hid (null): bogus close delimiter [ 1742.501131][ T5876] hid (null): global environment stack overflow [ 1742.968403][ T5876] hid (null): invalid report_count 18947 [ 1742.974182][ T5876] hid (null): report_id 0 is invalid [ 1743.357685][ T30] audit: type=1400 audit(1753267525.262:1576): avc: denied { connect } for pid=26081 comm="syz.0.5212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.408539][T26087] /dev/nullb0: Can't open blockdev [ 1744.501506][ T5876] usb 3-1: USB disconnect, device number 86 [ 1745.360058][T26115] FAULT_INJECTION: forcing a failure. [ 1745.360058][T26115] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.390522][T26115] CPU: 1 UID: 0 PID: 26115 Comm: syz.2.5221 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1745.390539][T26115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1745.390547][T26115] Call Trace: [ 1745.390551][T26115] [ 1745.390555][T26115] dump_stack_lvl+0x16c/0x1f0 [ 1745.390578][T26115] should_fail_ex+0x512/0x640 [ 1745.390597][T26115] should_failslab+0xc2/0x120 [ 1745.390609][T26115] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1745.390626][T26115] ? skb_clone+0x190/0x3f0 [ 1745.390639][T26115] skb_clone+0x190/0x3f0 [ 1745.390650][T26115] netlink_deliver_tap+0xabd/0xd30 [ 1745.390666][T26115] netlink_unicast+0x62f/0x850 [ 1745.390680][T26115] ? __pfx_netlink_unicast+0x10/0x10 [ 1745.390697][T26115] netlink_sendmsg+0x8d1/0xdd0 [ 1745.390712][T26115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1745.390730][T26115] ____sys_sendmsg+0xa95/0xc70 [ 1745.390744][T26115] ? copy_msghdr_from_user+0x10a/0x160 [ 1745.390761][T26115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1745.390781][T26115] ___sys_sendmsg+0x134/0x1d0 [ 1745.390799][T26115] ? __pfx____sys_sendmsg+0x10/0x10 [ 1745.390815][T26115] ? __lock_acquire+0x622/0x1c90 [ 1745.390842][T26115] __sys_sendmsg+0x16d/0x220 [ 1745.390853][T26115] ? __pfx___sys_sendmsg+0x10/0x10 [ 1745.390872][T26115] do_syscall_64+0xcd/0x4c0 [ 1745.390884][T26115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.390896][T26115] RIP: 0033:0x7f8737b8e9a9 [ 1745.390905][T26115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1745.390916][T26115] RSP: 002b:00007f8738aba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.390927][T26115] RAX: ffffffffffffffda RBX: 00007f8737db5fa0 RCX: 00007f8737b8e9a9 [ 1745.390934][T26115] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1745.390941][T26115] RBP: 00007f8738aba090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.390947][T26115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.390954][T26115] R13: 0000000000000000 R14: 00007f8737db5fa0 R15: 00007ffdd462f518 [ 1745.390968][T26115] [ 1745.641533][T26119] fuse: Bad value for 'rootmode' [ 1746.821404][T26137] netlink: 'syz.4.5228': attribute type 4 has an invalid length. [ 1746.912265][T26139] 9pnet_fd: Insufficient options for proto=fd [ 1748.167852][T26156] fuse: Bad value for 'rootmode' [ 1751.695958][T26191] FAULT_INJECTION: forcing a failure. [ 1751.695958][T26191] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.709146][T26191] CPU: 0 UID: 0 PID: 26191 Comm: syz.3.5242 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1751.709170][T26191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1751.709181][T26191] Call Trace: [ 1751.709188][T26191] [ 1751.709195][T26191] dump_stack_lvl+0x16c/0x1f0 [ 1751.709227][T26191] should_fail_ex+0x512/0x640 [ 1751.709254][T26191] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1751.709283][T26191] should_failslab+0xc2/0x120 [ 1751.709301][T26191] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1751.709329][T26191] ? security_file_alloc+0x34/0x2b0 [ 1751.709353][T26191] security_file_alloc+0x34/0x2b0 [ 1751.709371][T26191] init_file+0x93/0x4c0 [ 1751.709392][T26191] alloc_empty_file+0x73/0x1e0 [ 1751.709414][T26191] alloc_file_pseudo+0x13a/0x230 [ 1751.709436][T26191] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1751.709464][T26191] sock_alloc_file+0x50/0x210 [ 1751.709485][T26191] do_accept+0x240/0x530 [ 1751.709509][T26191] ? do_raw_spin_lock+0x12c/0x2b0 [ 1751.709530][T26191] ? __pfx_do_accept+0x10/0x10 [ 1751.709571][T26191] __sys_accept4+0x100/0x1c0 [ 1751.709594][T26191] ? __pfx___sys_accept4+0x10/0x10 [ 1751.709616][T26191] ? ksys_write+0x1ac/0x250 [ 1751.709648][T26191] __x64_sys_accept+0x74/0xb0 [ 1751.709670][T26191] ? lockdep_hardirqs_on+0x7c/0x110 [ 1751.709697][T26191] do_syscall_64+0xcd/0x4c0 [ 1751.709716][T26191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.709735][T26191] RIP: 0033:0x7f7b6e78e9a9 [ 1751.709749][T26191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1751.709767][T26191] RSP: 002b:00007f7b6f661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1751.709784][T26191] RAX: ffffffffffffffda RBX: 00007f7b6e9b6160 RCX: 00007f7b6e78e9a9 [ 1751.709797][T26191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1751.709808][T26191] RBP: 00007f7b6f661090 R08: 0000000000000000 R09: 0000000000000000 [ 1751.709819][T26191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.709829][T26191] R13: 0000000000000000 R14: 00007f7b6e9b6160 R15: 00007ffe81fbd8c8 [ 1751.709854][T26191] [ 1751.933466][T23926] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1752.111081][T23926] usb 5-1: Using ep0 maxpacket: 16 [ 1752.134768][T23926] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1752.165222][T23926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.198332][T23926] usb 5-1: config 0 descriptor?? [ 1752.312875][T23926] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1752.365839][ T5876] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1752.391769][T23926] usb 5-1: Detected FT4232H [ 1752.421479][T26199] fuse: Bad value for 'rootmode' [ 1752.571017][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.996247][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.037445][ T5876] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1753.128621][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.155561][ T5876] usb 3-1: config 0 descriptor?? [ 1753.541706][ T30] audit: type=1326 audit(1753267535.382:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1753.743676][T23926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1753.769869][T23926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1753.783935][ T30] audit: type=1326 audit(1753267535.382:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1753.789571][T23926] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1753.808251][ T30] audit: type=1326 audit(1753267535.382:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1753.912923][ T5876] hid (null): global environment stack underflow [ 1754.427388][T23926] usb 5-1: USB disconnect, device number 82 [ 1754.429115][ T5876] hid-steam 0003:28DE:1142.0030: global environment stack underflow [ 1754.435638][T23926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1754.441470][ T30] audit: type=1326 audit(1753267535.382:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1754.474724][ T5876] hid-steam 0003:28DE:1142.0030: item 0 4 1 11 parsing failed [ 1754.484093][ T5876] hid-steam 0003:28DE:1142.0030: steam_probe:parse of hid interface failed [ 1754.497054][ T5876] hid-steam 0003:28DE:1142.0030: probe with driver hid-steam failed with error -22 [ 1754.575422][T23926] ftdi_sio 5-1:0.0: device disconnected [ 1754.639121][ T30] audit: type=1326 audit(1753267535.382:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1754.670866][ T5876] usb 3-1: USB disconnect, device number 87 [ 1754.947487][ T30] audit: type=1326 audit(1753267535.382:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1755.165474][ T30] audit: type=1326 audit(1753267535.382:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1755.192603][ T30] audit: type=1326 audit(1753267535.382:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1755.261536][ T30] audit: type=1326 audit(1753267535.382:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1755.314878][ T30] audit: type=1326 audit(1753267535.382:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26207 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0d32b8e9a9 code=0x7ffc0000 [ 1757.700155][T26261] netlink: 'syz.2.5260': attribute type 1 has an invalid length. [ 1757.707922][T26261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1758.723492][T26278] 9pnet_fd: Insufficient options for proto=fd [ 1758.855333][T26283] autofs: Unknown parameter '/' [ 1758.861512][T26282] fuse: Unknown parameter 'use00000000000000000000' [ 1759.609003][ T5845] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1759.748983][ T5845] usb 3-1: device descriptor read/64, error -71 [ 1760.159052][ T5845] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1760.323805][ T5845] usb 3-1: device descriptor read/64, error -71 [ 1760.640357][ T5845] usb usb3-port1: attempt power cycle [ 1760.999071][ T5845] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1761.030561][ T5845] usb 3-1: device descriptor read/8, error -71 [ 1761.268975][ T5845] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1761.330412][ T5845] usb 3-1: device descriptor read/8, error -71 [ 1761.439237][ T5845] usb usb3-port1: unable to enumerate USB device [ 1762.309018][T26323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1762.489199][ T5896] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1762.587886][T26325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5280'. [ 1762.896978][ T5896] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1762.942256][ T5896] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1762.982951][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1763.006898][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.196664][T26320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1763.208577][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1763.664799][T26339] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1763.676126][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1763.682240][ T30] audit: type=1400 audit(1753267545.562:1589): avc: denied { watch } for pid=26319 comm="syz.4.5279" path="/435" dev="tmpfs" ino=2336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1764.363208][ T30] audit: type=1400 audit(1753267545.562:1590): avc: denied { watch_sb } for pid=26319 comm="syz.4.5279" path="/435" dev="tmpfs" ino=2336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1765.533664][T23926] usb 5-1: USB disconnect, device number 83 [ 1767.479048][T23926] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1767.744161][T26382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1767.753391][T26382] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1767.909021][T23926] usb 4-1: Using ep0 maxpacket: 16 [ 1767.915417][T23926] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1767.924533][T23926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.968845][T23926] usb 4-1: config 0 descriptor?? [ 1768.039441][T23926] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1768.073013][T23926] usb 4-1: Detected FT4232H [ 1768.116486][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1768.131908][ T30] audit: type=1400 audit(1753267550.032:1591): avc: denied { write } for pid=26391 comm="syz.2.5298" path="socket:[87932]" dev="sockfs" ino=87932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1768.617398][T26395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.617551][T26395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.703670][ T5876] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1768.754152][T23926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1768.796766][T23926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1768.807537][T23926] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1768.819328][T23926] usb 4-1: USB disconnect, device number 98 [ 1768.827807][T23926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1768.840978][T23926] ftdi_sio 4-1:0.0: device disconnected [ 1768.854920][T26388] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1768.907599][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 1768.913961][ T5876] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 1768.923582][ T5876] usb 3-1: config 4 has no interface number 0 [ 1768.938507][ T5876] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 1768.979061][ T5876] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1768.999002][ T5876] usb 3-1: config 4 interface 51 has no altsetting 0 [ 1769.018176][ T5876] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1769.029053][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.046118][ T5876] usb 3-1: Product: syz [ 1769.056228][ T5876] usb 3-1: Manufacturer: syz [ 1769.061953][ T5876] usb 3-1: SerialNumber: syz [ 1769.071122][T26393] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1769.082692][T26393] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1769.305251][T26393] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1769.335254][T26393] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1769.468697][ T5876] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, e2:9b:c4:5d:56:84 [ 1769.816170][T26408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.870048][T26408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.139238][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1770.818334][T23926] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1771.280543][T23926] usb 4-1: Using ep0 maxpacket: 16 [ 1771.378761][T23926] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1771.428697][T23926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.446185][ T5910] usb 3-1: USB disconnect, device number 92 [ 1771.453102][ T5910] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 1771.469750][T23926] usb 4-1: config 0 descriptor?? [ 1771.486106][T23926] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1771.497335][T23926] usb 4-1: Detected FT4232H [ 1771.917228][T26430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.926197][T26430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.241068][T23926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1772.249027][T23926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1772.265931][T23926] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1772.382207][T23926] usb 4-1: USB disconnect, device number 99 [ 1772.395960][T23926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1772.409622][T23926] ftdi_sio 4-1:0.0: device disconnected [ 1772.523898][T26436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1773.609650][T26453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5312'. [ 1773.609705][T26453] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1774.283869][T21784] Bluetooth: hci0: connection err: -111 [ 1774.924812][T26471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1774.924866][T26471] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1775.268009][T26472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5316'. [ 1775.268043][T26472] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1775.999215][ T30] audit: type=1400 audit(1753267557.862:1592): avc: denied { listen } for pid=26479 comm="syz.1.5319" lport=44409 faddr=fc01::1 fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1776.310753][T26483] tipc: Started in network mode [ 1776.329093][T26483] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1776.351132][T26483] tipc: Enabled bearer , priority 10 [ 1777.469074][ T5910] tipc: Node number set to 4269801488 [ 1777.828962][ T5911] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1777.979043][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 1777.985652][ T5911] usb 3-1: config 2 has an invalid interface number: 226 but max is 0 [ 1777.993917][ T5911] usb 3-1: config 2 has no interface number 0 [ 1778.000086][ T5911] usb 3-1: config 2 interface 226 has no altsetting 0 [ 1778.009139][ T5911] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff4c, bcdDevice=2d.46 [ 1778.018313][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.027207][ T5911] usb 3-1: Product: syz [ 1778.031478][ T5911] usb 3-1: Manufacturer: syz [ 1778.036070][ T5911] usb 3-1: SerialNumber: syz [ 1778.054205][ T5911] option 3-1:2.226: GSM modem (1-port) converter detected [ 1778.064822][ T5911] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1778.850748][T26520] 9pnet_fd: Insufficient options for proto=fd [ 1779.804975][ T30] audit: type=1400 audit(1753267561.712:1593): avc: denied { write } for pid=26527 comm="syz.4.5333" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1780.239495][T26539] FAULT_INJECTION: forcing a failure. [ 1780.239495][T26539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.239538][T26539] CPU: 0 UID: 0 PID: 26539 Comm: syz.4.5335 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1780.239559][T26539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1780.239570][T26539] Call Trace: [ 1780.239575][T26539] [ 1780.239582][T26539] dump_stack_lvl+0x16c/0x1f0 [ 1780.239615][T26539] should_fail_ex+0x512/0x640 [ 1780.239653][T26539] _copy_to_user+0x32/0xd0 [ 1780.239673][T26539] simple_read_from_buffer+0xcb/0x170 [ 1780.239706][T26539] proc_fail_nth_read+0x197/0x270 [ 1780.239733][T26539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.239760][T26539] ? rw_verify_area+0xcf/0x680 [ 1780.239781][T26539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.239806][T26539] vfs_read+0x1e1/0xc60 [ 1780.239836][T26539] ? __pfx___mutex_lock+0x10/0x10 [ 1780.239854][T26539] ? __pfx_vfs_read+0x10/0x10 [ 1780.239885][T26539] ? __fget_files+0x20e/0x3c0 [ 1780.239909][T26539] ksys_read+0x12a/0x250 [ 1780.239933][T26539] ? __pfx_ksys_read+0x10/0x10 [ 1780.239959][T26539] ? fput+0x70/0xf0 [ 1780.239982][T26539] do_syscall_64+0xcd/0x4c0 [ 1780.240002][T26539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.240020][T26539] RIP: 0033:0x7f037f38d3bc [ 1780.240034][T26539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1780.240052][T26539] RSP: 002b:00007f0380174030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1780.240068][T26539] RAX: ffffffffffffffda RBX: 00007f037f5b5fa0 RCX: 00007f037f38d3bc [ 1780.240079][T26539] RDX: 000000000000000f RSI: 00007f03801740a0 RDI: 0000000000000006 [ 1780.240090][T26539] RBP: 00007f0380174090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.240101][T26539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.240114][T26539] R13: 0000000000000000 R14: 00007f037f5b5fa0 R15: 00007fff9259bbc8 [ 1780.240140][T26539] [ 1780.593396][ T5911] usb 3-1: USB disconnect, device number 93 [ 1780.629816][ T5911] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1780.630241][ T5911] option 3-1:2.226: device disconnected [ 1781.249105][ T5845] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1781.281205][T26553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5340'. [ 1781.507233][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 1781.550848][ T5845] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1781.550869][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.552280][ T5845] usb 5-1: config 0 descriptor?? [ 1781.553522][ T5845] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1781.553957][ T5845] usb 5-1: Detected FT4232H [ 1781.912212][T26555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.923577][T26555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.157311][ T5845] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1782.184068][ T5845] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1782.193978][ T5845] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1782.203016][T26557] FAULT_INJECTION: forcing a failure. [ 1782.203016][T26557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.243692][T26557] CPU: 1 UID: 0 PID: 26557 Comm: syz.2.5341 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1782.243718][T26557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1782.243729][T26557] Call Trace: [ 1782.243735][T26557] [ 1782.243742][T26557] dump_stack_lvl+0x16c/0x1f0 [ 1782.243775][T26557] should_fail_ex+0x512/0x640 [ 1782.243805][T26557] _copy_from_user+0x2e/0xd0 [ 1782.243824][T26557] __x64_sys_timer_create+0x10d/0x1d0 [ 1782.243843][T26557] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 1782.243859][T26557] ? fput+0x70/0xf0 [ 1782.243891][T26557] do_syscall_64+0xcd/0x4c0 [ 1782.243910][T26557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.243927][T26557] RIP: 0033:0x7f8737b8e9a9 [ 1782.243942][T26557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1782.243958][T26557] RSP: 002b:00007f8738aba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1782.243974][T26557] RAX: ffffffffffffffda RBX: 00007f8737db5fa0 RCX: 00007f8737b8e9a9 [ 1782.243985][T26557] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000003 [ 1782.243995][T26557] RBP: 00007f8738aba090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.244006][T26557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.244017][T26557] R13: 0000000000000000 R14: 00007f8737db5fa0 R15: 00007ffdd462f518 [ 1782.244040][T26557] [ 1782.389520][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.419596][ T5845] usb 5-1: USB disconnect, device number 84 [ 1782.594869][ T5845] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1782.819920][ T5845] ftdi_sio 5-1:0.0: device disconnected [ 1782.826481][T26561] netlink: 'syz.0.5342': attribute type 1 has an invalid length. [ 1782.886670][T26561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5342'. [ 1785.396546][T26590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5352'. [ 1785.405573][T26590] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1785.928977][ T5911] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1786.091476][ T30] audit: type=1800 audit(1753267567.992:1594): pid=26613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5357" name="SYSV00000000" dev="tmpfs" ino=18 res=0 errno=0 [ 1786.529003][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 1786.541704][ T5911] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1786.579533][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.652088][ T5911] usb 5-1: config 0 descriptor?? [ 1786.839552][ T5911] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1786.899032][ T5911] usb 5-1: Detected FT4232H [ 1787.091477][T26630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.101524][T26630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.509266][ T5911] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1787.516506][ T5911] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1787.548409][ T5911] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1787.551537][T26633] FAULT_INJECTION: forcing a failure. [ 1787.551537][T26633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.783408][T26633] CPU: 1 UID: 0 PID: 26633 Comm: syz.2.5362 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1787.783435][T26633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1787.783445][T26633] Call Trace: [ 1787.783451][T26633] [ 1787.783459][T26633] dump_stack_lvl+0x16c/0x1f0 [ 1787.783492][T26633] should_fail_ex+0x512/0x640 [ 1787.783523][T26633] _copy_to_iter+0x29f/0x16f0 [ 1787.783553][T26633] ? __pfx__copy_to_iter+0x10/0x10 [ 1787.783569][T26633] ? find_held_lock+0x2b/0x80 [ 1787.783592][T26633] ? is_bpf_text_address+0x8a/0x1a0 [ 1787.783613][T26633] ? bpf_ksym_find+0x127/0x1c0 [ 1787.783638][T26633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1787.783664][T26633] ? is_bpf_text_address+0x94/0x1a0 [ 1787.783687][T26633] simple_copy_to_iter+0x46/0x90 [ 1787.783711][T26633] __skb_datagram_iter+0x5af/0x900 [ 1787.783732][T26633] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1787.783763][T26633] skb_copy_datagram_iter+0x40/0x50 [ 1787.783789][T26633] tcp_recvmsg_locked+0x1b31/0x2880 [ 1787.783828][T26633] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1787.783859][T26633] ? import_ubuf+0x1b6/0x220 [ 1787.783878][T26633] tcp_zerocopy_receive+0x12db/0x20f0 [ 1787.783911][T26633] ? __pfx___might_resched+0x10/0x10 [ 1787.783937][T26633] ? __pfx_tcp_zerocopy_receive+0x10/0x10 [ 1787.783963][T26633] ? process_measurement+0x4a6/0x23e0 [ 1787.783990][T26633] ? down_write+0x14d/0x200 [ 1787.784013][T26633] ? __lock_acquire+0xb8a/0x1c90 [ 1787.784039][T26633] ? __lock_acquire+0xb8a/0x1c90 [ 1787.784073][T26633] ? __local_bh_enable_ip+0xa4/0x120 [ 1787.784092][T26633] ? lockdep_hardirqs_on+0x7c/0x110 [ 1787.784122][T26633] do_tcp_getsockopt+0x10ee/0x2670 [ 1787.784143][T26633] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1787.784159][T26633] ? arch_stack_walk+0xa6/0x100 [ 1787.784183][T26633] ? __lock_acquire+0x622/0x1c90 [ 1787.784211][T26633] ? find_held_lock+0x2b/0x80 [ 1787.784233][T26633] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1787.784261][T26633] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1787.784284][T26633] ? avc_has_perm+0x11a/0x1c0 [ 1787.784305][T26633] ? __pfx_avc_has_perm+0x10/0x10 [ 1787.784330][T26633] ? __lock_acquire+0xb8a/0x1c90 [ 1787.784350][T26633] ? sock_has_perm+0x259/0x2f0 [ 1787.784382][T26633] ? find_held_lock+0x2b/0x80 [ 1787.784403][T26633] ? __might_fault+0xe3/0x190 [ 1787.784428][T26633] ? __might_fault+0xe3/0x190 [ 1787.784452][T26633] ? __might_fault+0x13b/0x190 [ 1787.784481][T26633] tcp_getsockopt+0xdf/0x100 [ 1787.784501][T26633] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1787.784522][T26633] do_sock_getsockopt+0x34d/0x440 [ 1787.784544][T26633] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1787.784568][T26633] ? __fget_files+0x204/0x3c0 [ 1787.784601][T26633] __sys_getsockopt+0x12f/0x260 [ 1787.784636][T26633] __x64_sys_getsockopt+0xbd/0x160 [ 1787.784661][T26633] ? do_syscall_64+0x91/0x4c0 [ 1787.784677][T26633] ? lockdep_hardirqs_on+0x7c/0x110 [ 1787.784702][T26633] do_syscall_64+0xcd/0x4c0 [ 1787.784722][T26633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.784739][T26633] RIP: 0033:0x7f8737b8e9a9 [ 1787.784754][T26633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.784771][T26633] RSP: 002b:00007f8738aba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1787.784789][T26633] RAX: ffffffffffffffda RBX: 00007f8737db5fa0 RCX: 00007f8737b8e9a9 [ 1787.784800][T26633] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1787.784810][T26633] RBP: 00007f8738aba090 R08: 00002000000002c0 R09: 0000000000000000 [ 1787.784821][T26633] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1787.784832][T26633] R13: 0000000000000000 R14: 00007f8737db5fa0 R15: 00007ffdd462f518 [ 1787.784857][T26633] [ 1787.785140][ T5911] usb 5-1: USB disconnect, device number 85 [ 1788.095595][ C1] vkms_vblank_simulate: vblank timer overrun [ 1788.282652][ T5911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1788.319306][ T5911] ftdi_sio 5-1:0.0: device disconnected [ 1789.006854][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5365'. [ 1789.015979][T26646] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1789.369371][T26649] autofs: Unknown parameter '/' [ 1789.480399][T26657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1789.489978][T26657] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1790.207114][T26665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5370'. [ 1790.216565][T26665] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1791.909003][ T5845] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1793.208995][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 1793.217498][ T5845] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1793.233802][T26698] FAULT_INJECTION: forcing a failure. [ 1793.233802][T26698] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.246497][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.265222][T26699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1793.274291][T26699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1793.494281][T26698] CPU: 1 UID: 0 PID: 26698 Comm: syz.2.5379 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1793.494306][T26698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1793.494316][T26698] Call Trace: [ 1793.494322][T26698] [ 1793.494330][T26698] dump_stack_lvl+0x16c/0x1f0 [ 1793.494363][T26698] should_fail_ex+0x512/0x640 [ 1793.494390][T26698] ? __kmalloc_noprof+0xbf/0x510 [ 1793.494417][T26698] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1793.494441][T26698] should_failslab+0xc2/0x120 [ 1793.494459][T26698] __kmalloc_noprof+0xd2/0x510 [ 1793.494488][T26698] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1793.494517][T26698] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1793.494541][T26698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1793.494573][T26698] ? bpf_lsm_capable+0x9/0x10 [ 1793.494594][T26698] ? security_capable+0x7e/0x260 [ 1793.494618][T26698] ? ns_capable+0xd7/0x110 [ 1793.494641][T26698] genl_rcv_msg+0x55c/0x800 [ 1793.494667][T26698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1793.494689][T26698] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1793.494715][T26698] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1793.494744][T26698] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1793.494774][T26698] ? __lock_acquire+0x622/0x1c90 [ 1793.494795][T26698] netlink_rcv_skb+0x155/0x420 [ 1793.494815][T26698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1793.494838][T26698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1793.494868][T26698] ? netlink_deliver_tap+0x1ae/0xd30 [ 1793.494887][T26698] ? is_vmalloc_addr+0x86/0xa0 [ 1793.494915][T26698] genl_rcv+0x28/0x40 [ 1793.494935][T26698] netlink_unicast+0x58d/0x850 [ 1793.494958][T26698] ? __pfx_netlink_unicast+0x10/0x10 [ 1793.494986][T26698] netlink_sendmsg+0x8d1/0xdd0 [ 1793.495010][T26698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.495038][T26698] ____sys_sendmsg+0xa95/0xc70 [ 1793.495061][T26698] ? copy_msghdr_from_user+0x10a/0x160 [ 1793.495088][T26698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1793.495120][T26698] ___sys_sendmsg+0x134/0x1d0 [ 1793.495149][T26698] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.495174][T26698] ? __lock_acquire+0x622/0x1c90 [ 1793.495219][T26698] __sys_sendmsg+0x16d/0x220 [ 1793.495240][T26698] ? __pfx___sys_sendmsg+0x10/0x10 [ 1793.495275][T26698] do_syscall_64+0xcd/0x4c0 [ 1793.495295][T26698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.495313][T26698] RIP: 0033:0x7f8737b8e9a9 [ 1793.495328][T26698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.495346][T26698] RSP: 002b:00007f8738aba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.495363][T26698] RAX: ffffffffffffffda RBX: 00007f8737db5fa0 RCX: 00007f8737b8e9a9 [ 1793.495376][T26698] RDX: 0000000024040890 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1793.495386][T26698] RBP: 00007f8738aba090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.495396][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.495407][T26698] R13: 0000000000000000 R14: 00007f8737db5fa0 R15: 00007ffdd462f518 [ 1793.495431][T26698] [ 1793.560190][ T5845] usb 5-1: config 0 descriptor?? [ 1793.857955][ T5845] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1793.865973][ T5845] usb 5-1: Detected FT4232H [ 1794.226304][T26708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.235801][T26708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.468403][T23926] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1794.643417][ T5845] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1794.650533][ T5845] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1794.658151][ T5845] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1794.659070][T23926] usb 3-1: Using ep0 maxpacket: 16 [ 1794.668527][ T5845] usb 5-1: USB disconnect, device number 86 [ 1794.675975][T23926] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1794.679873][ T5845] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1795.150656][T23926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.180410][ T5845] ftdi_sio 5-1:0.0: device disconnected [ 1795.189078][T23926] usb 3-1: config 0 descriptor?? [ 1795.216746][T23926] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1795.239775][T23926] usb 3-1: Detected FT4232H [ 1795.356028][T26718] autofs: Unknown parameter '/' [ 1795.451761][T26703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.460355][T26703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.487429][T23926] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1795.502939][T23926] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1795.518309][ T30] audit: type=1400 audit(1753267577.422:1595): avc: denied { ioctl } for pid=26719 comm="syz.1.5385" path="socket:[89564]" dev="sockfs" ino=89564 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1795.551330][T23926] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1795.567521][T23926] usb 3-1: USB disconnect, device number 94 [ 1795.573413][T23926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1795.573673][T23926] ftdi_sio 3-1:0.0: device disconnected [ 1796.011621][ T5845] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1796.420177][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 1796.435248][ T5845] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1796.482018][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.495828][ T5845] usb 4-1: config 0 descriptor?? [ 1796.526201][ T5845] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1796.546958][ T5845] usb 4-1: Detected FT4232H [ 1796.735824][T26722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.744450][T26722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.757980][ T5845] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1796.784368][ T5845] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1796.811658][ T5845] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1796.861975][ T5845] usb 4-1: USB disconnect, device number 100 [ 1796.871983][ T5845] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1796.884578][ T5845] ftdi_sio 4-1:0.0: device disconnected [ 1797.265251][T26745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5392'. [ 1797.276613][T26745] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1799.435746][T26768] tipc: Enabled bearer , priority 10 [ 1799.442229][ T30] audit: type=1400 audit(1753267581.332:1596): avc: denied { setopt } for pid=26765 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1800.115528][T26777] fuse: Unknown parameter '0x0000000000000005' [ 1800.589054][ T30] audit: type=1400 audit(1753267582.392:1597): avc: denied { mounton } for pid=26778 comm="syz.3.5402" path="/264/file0" dev="tmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1800.612277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.194008][T26826] FAULT_INJECTION: forcing a failure. [ 1803.194008][T26826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1803.359192][T26826] CPU: 1 UID: 0 PID: 26826 Comm: syz.4.5413 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1803.359219][T26826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1803.359230][T26826] Call Trace: [ 1803.359237][T26826] [ 1803.359244][T26826] dump_stack_lvl+0x16c/0x1f0 [ 1803.359279][T26826] should_fail_ex+0x512/0x640 [ 1803.359312][T26826] should_fail_alloc_page+0xe7/0x130 [ 1803.359333][T26826] prepare_alloc_pages+0x3c2/0x610 [ 1803.359402][T26826] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1803.359438][T26826] ? __pfx_stack_trace_save+0x10/0x10 [ 1803.359462][T26826] ? stack_depot_save_flags+0x28/0xa40 [ 1803.359492][T26826] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1803.359521][T26826] ? kasan_save_stack+0x42/0x60 [ 1803.359546][T26826] ? kasan_save_stack+0x33/0x60 [ 1803.359572][T26826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1803.359598][T26826] ? __pmd_alloc+0xbf/0x930 [ 1803.359627][T26826] ? handle_mm_fault+0x589/0xd10 [ 1803.359651][T26826] ? exc_page_fault+0x5c/0xb0 [ 1803.359676][T26826] ? asm_exc_page_fault+0x26/0x30 [ 1803.359693][T26826] ? rep_movs_alternative+0xf/0x90 [ 1803.359714][T26826] ? _copy_from_user+0x98/0xd0 [ 1803.359730][T26826] ? do_sock_getsockopt+0x3ca/0x440 [ 1803.359751][T26826] ? __sys_getsockopt+0x12f/0x260 [ 1803.359776][T26826] ? __x64_sys_getsockopt+0xbd/0x160 [ 1803.359813][T26826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1803.359837][T26826] ? policy_nodemask+0xea/0x4e0 [ 1803.359857][T26826] alloc_pages_mpol+0x1fb/0x550 [ 1803.359877][T26826] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1803.359893][T26826] ? css_rstat_updated+0x9d/0xd30 [ 1803.359924][T26826] alloc_pages_noprof+0x131/0x390 [ 1803.359943][T26826] pte_alloc_one+0x1c/0x3a0 [ 1803.359963][T26826] __pte_alloc+0x6d/0x3c0 [ 1803.359981][T26826] ? __pfx___pte_alloc+0x10/0x10 [ 1803.359999][T26826] ? _raw_spin_unlock+0x28/0x50 [ 1803.360023][T26826] ? __pmd_alloc+0x3fb/0x930 [ 1803.360052][T26826] __handle_mm_fault+0x4358/0x5490 [ 1803.360083][T26826] ? __pfx___handle_mm_fault+0x10/0x10 [ 1803.360105][T26826] ? __pfx_mt_find+0x10/0x10 [ 1803.360140][T26826] ? find_vma+0xbf/0x140 [ 1803.360159][T26826] ? __pfx_find_vma+0x10/0x10 [ 1803.360181][T26826] handle_mm_fault+0x589/0xd10 [ 1803.360207][T26826] ? __pkru_allows_pkey+0x51/0xb0 [ 1803.360235][T26826] do_user_addr_fault+0x7a6/0x1370 [ 1803.360264][T26826] ? rcu_is_watching+0x12/0xc0 [ 1803.360291][T26826] exc_page_fault+0x5c/0xb0 [ 1803.360319][T26826] asm_exc_page_fault+0x26/0x30 [ 1803.360336][T26826] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1803.360359][T26826] Code: c4 10 e9 84 11 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 [ 1803.360376][T26826] RSP: 0018:ffffc9000c33fd70 EFLAGS: 00050202 [ 1803.360392][T26826] RAX: 0000000000000001 RBX: 0000200000000740 RCX: 0000000000000004 [ 1803.360404][T26826] RDX: fffff52001867fbc RSI: 0000200000000740 RDI: ffffc9000c33fde0 [ 1803.360416][T26826] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52001867fbc [ 1803.360427][T26826] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 1803.360437][T26826] R13: ffffc9000c33fde0 R14: 0000000000000000 R15: 0000000000000000 [ 1803.360463][T26826] _copy_from_user+0x98/0xd0 [ 1803.360483][T26826] do_sock_getsockopt+0x3ca/0x440 [ 1803.360505][T26826] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1803.360525][T26826] ? __fget_files+0x204/0x3c0 [ 1803.360556][T26826] __sys_getsockopt+0x12f/0x260 [ 1803.360590][T26826] __x64_sys_getsockopt+0xbd/0x160 [ 1803.360621][T26826] ? do_syscall_64+0x91/0x4c0 [ 1803.360638][T26826] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.360665][T26826] do_syscall_64+0xcd/0x4c0 [ 1803.360685][T26826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.360703][T26826] RIP: 0033:0x7f037f38e9a9 [ 1803.360718][T26826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1803.360735][T26826] RSP: 002b:00007f0380174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1803.360751][T26826] RAX: ffffffffffffffda RBX: 00007f037f5b5fa0 RCX: 00007f037f38e9a9 [ 1803.360763][T26826] RDX: 0000000000000001 RSI: 000000000000011e RDI: 0000000000000003 [ 1803.360774][T26826] RBP: 00007f0380174090 R08: 0000200000000740 R09: 0000000000000000 [ 1803.360785][T26826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.360796][T26826] R13: 0000000000000000 R14: 00007f037f5b5fa0 R15: 00007fff9259bbc8 [ 1803.360821][T26826] [ 1804.887043][T26838] FAULT_INJECTION: forcing a failure. [ 1804.887043][T26838] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.918986][T26838] CPU: 0 UID: 0 PID: 26838 Comm: syz.4.5416 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1804.919003][T26838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1804.919010][T26838] Call Trace: [ 1804.919014][T26838] [ 1804.919018][T26838] dump_stack_lvl+0x16c/0x1f0 [ 1804.919040][T26838] should_fail_ex+0x512/0x640 [ 1804.919061][T26838] should_failslab+0xc2/0x120 [ 1804.919073][T26838] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1804.919090][T26838] ? skb_clone+0x190/0x3f0 [ 1804.919103][T26838] skb_clone+0x190/0x3f0 [ 1804.919114][T26838] netlink_deliver_tap+0xabd/0xd30 [ 1804.919130][T26838] netlink_unicast+0x62f/0x850 [ 1804.919144][T26838] ? __pfx_netlink_unicast+0x10/0x10 [ 1804.919161][T26838] netlink_sendmsg+0x8d1/0xdd0 [ 1804.919175][T26838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1804.919193][T26838] ____sys_sendmsg+0xa95/0xc70 [ 1804.919207][T26838] ? copy_msghdr_from_user+0x10a/0x160 [ 1804.919225][T26838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1804.919245][T26838] ___sys_sendmsg+0x134/0x1d0 [ 1804.919262][T26838] ? __pfx____sys_sendmsg+0x10/0x10 [ 1804.919278][T26838] ? __lock_acquire+0x622/0x1c90 [ 1804.919306][T26838] __sys_sendmsg+0x16d/0x220 [ 1804.919316][T26838] ? __pfx___sys_sendmsg+0x10/0x10 [ 1804.919339][T26838] do_syscall_64+0xcd/0x4c0 [ 1804.919351][T26838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.919363][T26838] RIP: 0033:0x7f037f38e9a9 [ 1804.919372][T26838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.919383][T26838] RSP: 002b:00007f0380174038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1804.919394][T26838] RAX: ffffffffffffffda RBX: 00007f037f5b5fa0 RCX: 00007f037f38e9a9 [ 1804.919401][T26838] RDX: 0000000000020000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1804.919407][T26838] RBP: 00007f0380174090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.919414][T26838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.919420][T26838] R13: 0000000000000000 R14: 00007f037f5b5fa0 R15: 00007fff9259bbc8 [ 1804.919434][T26838] [ 1805.527373][T26846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1805.536616][T26846] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1805.881023][T26849] tipc: Started in network mode [ 1805.885952][T26849] tipc: Node identity 4, cluster identity 4711 [ 1805.892196][T26849] tipc: Node number set to 4 [ 1806.676151][ T30] audit: type=1400 audit(1753267588.582:1598): avc: denied { setopt } for pid=26858 comm="syz.0.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1807.149624][T26864] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1807.156230][T26864] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1807.163968][T26864] vhci_hcd vhci_hcd.0: Device attached [ 1807.497290][ T5911] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1807.839787][T26880] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1807.905101][T26866] vhci_hcd: connection reset by peer [ 1807.923700][T26885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1807.933477][ T3480] vhci_hcd: stop threads [ 1807.938287][ T3480] vhci_hcd: release socket [ 1807.963067][ T3480] vhci_hcd: disconnect device [ 1808.248579][T26889] FAULT_INJECTION: forcing a failure. [ 1808.248579][T26889] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.264856][T26889] CPU: 1 UID: 0 PID: 26889 Comm: syz.3.5431 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1808.264880][T26889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1808.264890][T26889] Call Trace: [ 1808.264897][T26889] [ 1808.264904][T26889] dump_stack_lvl+0x16c/0x1f0 [ 1808.264938][T26889] should_fail_ex+0x512/0x640 [ 1808.264969][T26889] should_failslab+0xc2/0x120 [ 1808.264987][T26889] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1808.265013][T26889] ? skb_clone+0x190/0x3f0 [ 1808.265035][T26889] skb_clone+0x190/0x3f0 [ 1808.265052][T26889] netlink_deliver_tap+0xabd/0xd30 [ 1808.265079][T26889] netlink_unicast+0x62f/0x850 [ 1808.265102][T26889] ? __pfx_netlink_unicast+0x10/0x10 [ 1808.265129][T26889] netlink_sendmsg+0x8d1/0xdd0 [ 1808.265155][T26889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.265186][T26889] ____sys_sendmsg+0xa95/0xc70 [ 1808.265208][T26889] ? copy_msghdr_from_user+0x10a/0x160 [ 1808.265234][T26889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1808.265266][T26889] ___sys_sendmsg+0x134/0x1d0 [ 1808.265296][T26889] ? __pfx____sys_sendmsg+0x10/0x10 [ 1808.265359][T26889] ? __lock_acquire+0x622/0x1c90 [ 1808.265407][T26889] __sys_sendmsg+0x16d/0x220 [ 1808.265426][T26889] ? __pfx___sys_sendmsg+0x10/0x10 [ 1808.265459][T26889] do_syscall_64+0xcd/0x4c0 [ 1808.265480][T26889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.265497][T26889] RIP: 0033:0x7f7b6e78e9a9 [ 1808.265512][T26889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1808.265528][T26889] RSP: 002b:00007f7b6f6a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1808.265545][T26889] RAX: ffffffffffffffda RBX: 00007f7b6e9b5fa0 RCX: 00007f7b6e78e9a9 [ 1808.265557][T26889] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1808.265581][T26889] RBP: 00007f7b6f6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.265592][T26889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.265603][T26889] R13: 0000000000000000 R14: 00007f7b6e9b5fa0 R15: 00007ffe81fbd8c8 [ 1808.265626][T26889] [ 1808.598957][T17616] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1808.704885][ T30] audit: type=1400 audit(1753267590.612:1599): avc: denied { setattr } for pid=26895 comm="syz.1.5434" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1808.759026][T17616] usb 3-1: Using ep0 maxpacket: 16 [ 1808.766220][T17616] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1808.777444][T17616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.787813][T17616] usb 3-1: config 0 descriptor?? [ 1808.796240][T17616] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1808.804316][T17616] usb 3-1: Detected FT4232H [ 1808.902911][T26900] input: syz1 as /devices/virtual/input/input37 [ 1809.004375][T26891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.012895][T26891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.021029][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1809.041319][T17616] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1809.050552][T17616] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1809.058436][T17616] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1809.071728][T17616] usb 3-1: USB disconnect, device number 95 [ 1809.080926][T17616] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1809.091076][T17616] ftdi_sio 3-1:0.0: device disconnected [ 1810.225612][T26911] tmpfs: Unknown parameter 'grpquKta_block_hardlim' [ 1810.361965][T26911] netlink: 'syz.2.5438': attribute type 10 has an invalid length. [ 1810.442941][T26917] FAULT_INJECTION: forcing a failure. [ 1810.442941][T26917] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.455633][T26917] CPU: 0 UID: 0 PID: 26917 Comm: syz.4.5439 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1810.455656][T26917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1810.455667][T26917] Call Trace: [ 1810.455674][T26917] [ 1810.455681][T26917] dump_stack_lvl+0x16c/0x1f0 [ 1810.455713][T26917] should_fail_ex+0x512/0x640 [ 1810.455740][T26917] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1810.455770][T26917] should_failslab+0xc2/0x120 [ 1810.455788][T26917] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1810.455813][T26917] ? __might_fault+0xe3/0x190 [ 1810.455837][T26917] ? __might_fault+0x13b/0x190 [ 1810.455861][T26917] ? getname_flags.part.0+0x4c/0x550 [ 1810.455888][T26917] getname_flags.part.0+0x4c/0x550 [ 1810.455914][T26917] getname_flags+0x93/0xf0 [ 1810.455940][T26917] user_path_at+0x24/0x60 [ 1810.455966][T26917] __x64_sys_mount+0x1fc/0x310 [ 1810.455986][T26917] ? __pfx___x64_sys_mount+0x10/0x10 [ 1810.456014][T26917] do_syscall_64+0xcd/0x4c0 [ 1810.456034][T26917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.456053][T26917] RIP: 0033:0x7f037f38e9a9 [ 1810.456068][T26917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1810.456086][T26917] RSP: 002b:00007f0380132038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1810.456104][T26917] RAX: ffffffffffffffda RBX: 00007f037f5b6160 RCX: 00007f037f38e9a9 [ 1810.456116][T26917] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 00002000000000c0 [ 1810.456127][T26917] RBP: 00007f0380132090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.456139][T26917] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000000000001 [ 1810.456150][T26917] R13: 0000000000000000 R14: 00007f037f5b6160 R15: 00007fff9259bbc8 [ 1810.456178][T26917] [ 1810.634023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1810.648337][T26911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.680327][T26911] bond0: (slave team0): Enslaving as an active interface with an up link [ 1811.769300][T26927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1811.775283][T26926] FAULT_INJECTION: forcing a failure. [ 1811.775283][T26926] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.054701][T26926] CPU: 1 UID: 0 PID: 26926 Comm: syz.0.5443 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1812.054730][T26926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1812.054741][T26926] Call Trace: [ 1812.054746][T26926] [ 1812.054755][T26926] dump_stack_lvl+0x16c/0x1f0 [ 1812.054786][T26926] should_fail_ex+0x512/0x640 [ 1812.054814][T26926] should_failslab+0xc2/0x120 [ 1812.054831][T26926] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1812.054856][T26926] ? skb_clone+0x190/0x3f0 [ 1812.054875][T26926] skb_clone+0x190/0x3f0 [ 1812.054892][T26926] netlink_deliver_tap+0xabd/0xd30 [ 1812.054915][T26926] netlink_unicast+0x62f/0x850 [ 1812.054938][T26926] ? __pfx_netlink_unicast+0x10/0x10 [ 1812.054963][T26926] netlink_sendmsg+0x8d1/0xdd0 [ 1812.054987][T26926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1812.055015][T26926] ____sys_sendmsg+0xa95/0xc70 [ 1812.055036][T26926] ? copy_msghdr_from_user+0x10a/0x160 [ 1812.055062][T26926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1812.055093][T26926] ___sys_sendmsg+0x134/0x1d0 [ 1812.055121][T26926] ? __pfx____sys_sendmsg+0x10/0x10 [ 1812.055145][T26926] ? __lock_acquire+0x622/0x1c90 [ 1812.055190][T26926] __sys_sendmsg+0x16d/0x220 [ 1812.055206][T26926] ? __pfx___sys_sendmsg+0x10/0x10 [ 1812.055237][T26926] do_syscall_64+0xcd/0x4c0 [ 1812.055262][T26926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.055279][T26926] RIP: 0033:0x7fb60278e9a9 [ 1812.055291][T26926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1812.055307][T26926] RSP: 002b:00007fb6035fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1812.055323][T26926] RAX: ffffffffffffffda RBX: 00007fb6029b5fa0 RCX: 00007fb60278e9a9 [ 1812.055334][T26926] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1812.055344][T26926] RBP: 00007fb6035fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.055354][T26926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.055364][T26926] R13: 0000000000000000 R14: 00007fb6029b5fa0 R15: 00007ffea8061a28 [ 1812.055386][T26926] [ 1812.609547][ T5911] vhci_hcd: vhci_device speed not set [ 1813.021212][T26935] netlink: 'syz.2.5447': attribute type 1 has an invalid length. [ 1813.032763][T26935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1813.590346][T26938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5446'. [ 1813.606252][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5446'. [ 1813.717425][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5449'. [ 1813.728307][ T30] audit: type=1400 audit(1753267595.632:1600): avc: denied { name_connect } for pid=26947 comm="syz.4.5449" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1813.781657][T26948] block nbd4: NBD_DISCONNECT [ 1813.868976][ T30] audit: type=1400 audit(1753267595.702:1601): avc: denied { write } for pid=26947 comm="syz.4.5449" name="file0" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1813.891489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1813.984354][ T30] audit: type=1400 audit(1753267595.702:1602): avc: denied { open } for pid=26947 comm="syz.4.5449" path="/467/file0" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1814.007249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1814.027801][ T30] audit: type=1400 audit(1753267595.702:1603): avc: denied { ioctl } for pid=26947 comm="syz.4.5449" path="/467/file0" dev="tmpfs" ino=2508 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1814.038639][T26947] block nbd4: Disconnected due to user request. [ 1814.573155][T26947] block nbd4: shutting down sockets [ 1815.199003][ T5896] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 1815.380417][ T5896] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1815.389282][ T5896] usb 3-1: config 1 has an invalid interface number: 6 but max is 2 [ 1815.398568][ T5896] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1815.410430][ T5896] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1815.441076][ T5896] usb 3-1: config 1 has no interface number 1 [ 1815.459784][ T5896] usb 3-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1815.570734][ T5896] usb 3-1: config 1 interface 6 has no altsetting 0 [ 1815.846361][ T5896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1815.858829][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.881486][ T5896] usb 3-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1815.906453][ T5896] usb 3-1: Manufacturer: 숯侭ᯒ涸 [ 1815.915077][ T30] audit: type=1400 audit(1753267597.822:1604): avc: denied { ioctl } for pid=26976 comm="syz.4.5458" path="socket:[90409]" dev="sockfs" ino=90409 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1815.939828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.146474][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 1816.152692][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1816.227666][T26977] ceph: No mds server is up or the cluster is laggy [ 1816.439546][T26966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.448078][T26966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.500482][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 1816.565671][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 1816.593537][ T5896] usb 3-1: 0:2 : does not exist [ 1816.693648][T26341] Bluetooth: hci5: Frame reassembly failed (-84) [ 1816.693700][T26341] Bluetooth: hci5: Frame reassembly failed (-84) [ 1816.693739][T26341] Bluetooth: hci5: Frame reassembly failed (-84) [ 1816.693777][T26341] Bluetooth: hci5: Frame reassembly failed (-84) [ 1816.694765][T26341] Bluetooth: hci5: Frame reassembly failed (-84) [ 1816.706045][ T5896] usb 3-1: USB disconnect, device number 96 [ 1817.392308][ T30] audit: type=1400 audit(1753267599.292:1605): avc: denied { bind } for pid=26976 comm="syz.4.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1818.340812][T27005] netlink: 'syz.0.5463': attribute type 1 has an invalid length. [ 1818.340835][T27005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1818.711830][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1818.712591][T21784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1819.132477][T27022] ipvlan2: entered promiscuous mode [ 1819.555972][T27026] FAULT_INJECTION: forcing a failure. [ 1819.555972][T27026] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.556001][T27026] CPU: 0 UID: 0 PID: 27026 Comm: syz.0.5469 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1819.556023][T27026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1819.556033][T27026] Call Trace: [ 1819.556039][T27026] [ 1819.556046][T27026] dump_stack_lvl+0x16c/0x1f0 [ 1819.556076][T27026] should_fail_ex+0x512/0x640 [ 1819.556107][T27026] should_failslab+0xc2/0x120 [ 1819.556124][T27026] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1819.556150][T27026] ? skb_clone+0x190/0x3f0 [ 1819.556170][T27026] skb_clone+0x190/0x3f0 [ 1819.556186][T27026] netlink_deliver_tap+0xabd/0xd30 [ 1819.556211][T27026] netlink_unicast+0x62f/0x850 [ 1819.556235][T27026] ? __pfx_netlink_unicast+0x10/0x10 [ 1819.556263][T27026] netlink_sendmsg+0x8d1/0xdd0 [ 1819.556284][T27026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1819.556311][T27026] ____sys_sendmsg+0xa95/0xc70 [ 1819.556330][T27026] ? copy_msghdr_from_user+0x10a/0x160 [ 1819.556354][T27026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1819.556383][T27026] ___sys_sendmsg+0x134/0x1d0 [ 1819.556409][T27026] ? __pfx____sys_sendmsg+0x10/0x10 [ 1819.556431][T27026] ? __lock_acquire+0x622/0x1c90 [ 1819.556485][T27026] __sys_sendmsg+0x16d/0x220 [ 1819.556501][T27026] ? __pfx___sys_sendmsg+0x10/0x10 [ 1819.556534][T27026] do_syscall_64+0xcd/0x4c0 [ 1819.556552][T27026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.556569][T27026] RIP: 0033:0x7fb60278e9a9 [ 1819.556582][T27026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.556597][T27026] RSP: 002b:00007fb6035fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1819.556612][T27026] RAX: ffffffffffffffda RBX: 00007fb6029b5fa0 RCX: 00007fb60278e9a9 [ 1819.556623][T27026] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 1819.556632][T27026] RBP: 00007fb6035fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.556642][T27026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.556651][T27026] R13: 0000000000000000 R14: 00007fb6029b5fa0 R15: 00007ffea8061a28 [ 1819.556673][T27026] [ 1820.629116][ T5896] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 1820.920441][ T5896] usb 5-1: No LPM exit latency info found, disabling LPM. [ 1820.921544][ T5896] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 1820.921561][ T5896] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1820.921571][ T5896] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1820.921583][ T5896] usb 5-1: config 1 has no interface number 1 [ 1820.921606][ T5896] usb 5-1: config 1 interface 6 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1820.921621][ T5896] usb 5-1: config 1 interface 6 has no altsetting 0 [ 1820.925151][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1821.159794][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.169741][ T5896] usb 5-1: Product: Ɠ蓋⤤욝⧠α綡ॿ奟䗘舂ৰ䀔兑庰誒쮪鸴퉒ໜ鮵诏綨澾ᡅ嶘᪓駿ፄ懕鏾„ẁ顩෠㐽✼ [ 1821.184805][ T5896] usb 5-1: Manufacturer: 숯侭ᯒ涸 [ 1821.706184][T27034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.806616][T27034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.132786][ T5896] usb 5-1: 0:2 : does not exist [ 1822.148452][ T5896] usb 5-1: USB disconnect, device number 87 [ 1822.824717][T27071] FAULT_INJECTION: forcing a failure. [ 1822.824717][T27071] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.837484][T27071] CPU: 0 UID: 0 PID: 27071 Comm: syz.1.5481 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1822.837508][T27071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1822.837519][T27071] Call Trace: [ 1822.837525][T27071] [ 1822.837532][T27071] dump_stack_lvl+0x16c/0x1f0 [ 1822.837566][T27071] should_fail_ex+0x512/0x640 [ 1822.837596][T27071] should_failslab+0xc2/0x120 [ 1822.837614][T27071] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1822.837642][T27071] ? skb_clone+0x190/0x3f0 [ 1822.837663][T27071] skb_clone+0x190/0x3f0 [ 1822.837680][T27071] netlink_deliver_tap+0xabd/0xd30 [ 1822.837706][T27071] netlink_unicast+0x62f/0x850 [ 1822.837730][T27071] ? __pfx_netlink_unicast+0x10/0x10 [ 1822.837758][T27071] netlink_sendmsg+0x8d1/0xdd0 [ 1822.837782][T27071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1822.837813][T27071] ____sys_sendmsg+0xa95/0xc70 [ 1822.837835][T27071] ? copy_msghdr_from_user+0x10a/0x160 [ 1822.837862][T27071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1822.837896][T27071] ___sys_sendmsg+0x134/0x1d0 [ 1822.837924][T27071] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.837949][T27071] ? __lock_acquire+0x622/0x1c90 [ 1822.838000][T27071] __sys_sendmsg+0x16d/0x220 [ 1822.838017][T27071] ? __pfx___sys_sendmsg+0x10/0x10 [ 1822.838051][T27071] do_syscall_64+0xcd/0x4c0 [ 1822.838071][T27071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.838089][T27071] RIP: 0033:0x7f0d32b8e9a9 [ 1822.838104][T27071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1822.838131][T27071] RSP: 002b:00007f0d33ace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1822.838149][T27071] RAX: ffffffffffffffda RBX: 00007f0d32db5fa0 RCX: 00007f0d32b8e9a9 [ 1822.838160][T27071] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1822.838172][T27071] RBP: 00007f0d33ace090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.838182][T27071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1822.838193][T27071] R13: 0000000000000000 R14: 00007f0d32db5fa0 R15: 00007ffc994e1268 [ 1822.838218][T27071] [ 1823.589981][T27083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1823.599113][T27083] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1824.172984][T27094] fuse: Bad value for 'fd' [ 1825.145398][T27111] netlink: 'syz.4.5490': attribute type 12 has an invalid length. [ 1825.629157][T27119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5494'. [ 1825.643238][T27119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5494'. [ 1825.981585][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1825.989423][T21784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1827.819112][T25167] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1828.515913][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1828.639391][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1828.639700][T21784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1828.860107][T27149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1828.869078][T27149] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1829.154899][ T30] audit: type=1400 audit(1753267611.062:1606): avc: denied { write } for pid=27156 comm="syz.0.5504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1829.294201][ T5889] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1829.957627][ T5889] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1829.972928][ T5889] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1829.982644][ T5889] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.004187][ T5889] usb 3-1: config 220 has no interface number 2 [ 1830.295226][T27173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1830.460370][ T5889] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1830.514093][ T5889] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1830.648034][T27175] lo speed is unknown, defaulting to 1000 [ 1830.675956][ T5889] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1830.682980][ T5889] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1830.868339][ T5889] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1830.882164][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.891644][ T5889] usb 3-1: Product: syz [ 1830.895830][ T5889] usb 3-1: Manufacturer: syz [ 1830.903072][ T5889] usb 3-1: SerialNumber: syz [ 1831.422961][T21784] Bluetooth: hci0: connection err: -111 [ 1833.107605][T27175] syz.4.5509: attempt to access beyond end of device [ 1833.107605][T27175] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1833.133139][T27175] MINIX-fs: unable to read superblock [ 1833.149410][ T5889] usb 3-1: selecting invalid altsetting 0 [ 1833.155545][ T5889] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1833.161983][ T5889] usb 3-1: No valid video chain found. [ 1833.171443][ T5889] usb 3-1: selecting invalid altsetting 0 [ 1833.177220][ T5889] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1833.189625][ T5889] usb 3-1: USB disconnect, device number 97 [ 1833.228929][ T5910] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1833.430370][ T5910] usb 4-1: config 0 has an invalid interface number: 248 but max is 0 [ 1833.438570][ T5910] usb 4-1: config 0 has no interface number 0 [ 1833.620059][ T5910] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=c4.ff [ 1833.978311][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.305115][ T5910] usb 4-1: Product: syz [ 1834.424284][ T5910] usb 4-1: Manufacturer: syz [ 1834.429251][ T5910] usb 4-1: SerialNumber: syz [ 1834.455197][ T5910] usb 4-1: config 0 descriptor?? [ 1834.465613][ T5910] hub 4-1:0.248: bad descriptor, ignoring hub [ 1834.474122][ T5910] hub 4-1:0.248: probe with driver hub failed with error -5 [ 1835.080080][ T5910] usb 4-1: USB disconnect, device number 101 [ 1835.889128][ T5845] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1836.183482][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 1836.519087][ T5845] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1836.622222][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.637584][ T5845] usb 5-1: config 0 descriptor?? [ 1836.651412][ T5845] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1836.778353][ T5845] usb 5-1: Detected FT4232H [ 1837.216028][T27250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.341476][T27250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.464005][ T5845] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1837.487364][ T5845] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1837.513921][ T5845] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1837.629804][T27256] vlan2: entered promiscuous mode [ 1838.158235][ T5845] usb 5-1: USB disconnect, device number 88 [ 1838.187479][T27256] vlan2: entered allmulticast mode [ 1838.216800][T27262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1838.217476][ T5845] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1838.235831][T27256] hsr_slave_1: entered allmulticast mode [ 1838.429716][ T5845] ftdi_sio 5-1:0.0: device disconnected [ 1840.696060][ T30] audit: type=1400 audit(1753267622.602:1607): avc: denied { ioctl } for pid=27292 comm="syz.3.5540" path="socket:[91858]" dev="sockfs" ino=91858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1841.103511][ T5911] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1842.076333][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.183152][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.193403][ T5911] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1842.203415][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.227892][ T5911] usb 5-1: config 0 descriptor?? [ 1842.420247][T27314] random: crng reseeded on system resumption [ 1842.765623][ T5911] sony 0003:054C:024B.0031: unexpected long global item [ 1842.786586][ T5911] sony 0003:054C:024B.0031: parse failed [ 1842.796322][ T5911] sony 0003:054C:024B.0031: probe with driver sony failed with error -22 [ 1842.971167][T27295] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1844.771789][T27342] lo speed is unknown, defaulting to 1000 [ 1845.170419][ T30] audit: type=1800 audit(1753267627.002:1608): pid=27340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5552" name="/" dev="9p" ino=2 res=0 errno=0 [ 1845.536895][ T30] audit: type=1800 audit(1753267627.442:1609): pid=27341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5551" name="/" dev="9p" ino=2 res=0 errno=0 [ 1845.557309][ T5845] usb 5-1: USB disconnect, device number 89 [ 1847.070694][T27366] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1847.077297][T27366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1847.084879][T27366] vhci_hcd vhci_hcd.0: Device attached [ 1847.094230][T27367] vhci_hcd: connection closed [ 1847.097439][T19471] vhci_hcd: stop threads [ 1847.122274][T19471] vhci_hcd: release socket [ 1847.126824][T19471] vhci_hcd: disconnect device [ 1847.996049][ T6251] Bluetooth: hci5: Frame reassembly failed (-84) [ 1848.928972][ T5896] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1849.078914][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 1849.085364][ T5896] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1849.095231][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.105321][ T5896] usb 5-1: config 0 descriptor?? [ 1849.114175][ T5896] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1849.122524][ T5896] usb 5-1: Detected FT4232H [ 1849.413550][T27394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.423236][T27394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.605158][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1849.612443][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1849.629586][ T5896] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1849.639583][ T5896] usb 5-1: USB disconnect, device number 90 [ 1849.647774][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1849.657389][ T5896] ftdi_sio 5-1:0.0: device disconnected [ 1849.908961][T25778] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1850.059103][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1850.059373][T21784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1850.150014][T25778] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1850.171811][T25778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.298657][T25778] usb 3-1: config 0 descriptor?? [ 1850.333805][T25778] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1850.401511][T27405] autofs: Unknown parameter '/' [ 1850.719300][T27408] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.5570'. [ 1850.759716][ T5911] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1851.097727][T25778] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1851.499025][ T5911] usb 5-1: device descriptor read/64, error -71 [ 1851.548543][T25778] gspca_cpia1: usb_control_msg 01, error -71 [ 1851.557991][T27415] ipvlan2: entered promiscuous mode [ 1851.567125][T25778] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1851.585433][T25778] usb 3-1: USB disconnect, device number 98 [ 1851.680077][T27417] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1851.686669][T27417] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1851.694269][T27417] vhci_hcd vhci_hcd.0: Device attached [ 1851.799039][ T5911] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1852.048998][T25778] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1852.062829][ T5911] usb 5-1: device descriptor read/64, error -71 [ 1852.156611][T27427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1852.167527][T27427] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1852.402335][ T5911] usb usb5-port1: attempt power cycle [ 1852.664769][T27418] vhci_hcd: connection reset by peer [ 1852.680914][ T6251] vhci_hcd: stop threads [ 1852.685423][ T6251] vhci_hcd: release socket [ 1852.765772][ T6251] vhci_hcd: disconnect device [ 1852.798974][ T5911] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1852.829397][ T5911] usb 5-1: device descriptor read/8, error -71 [ 1853.078936][ T5911] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1853.110430][ T5911] usb 5-1: device descriptor read/8, error -71 [ 1853.219092][ T5911] usb usb5-port1: unable to enumerate USB device [ 1853.742527][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1853.760803][T27441] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1854.704960][T27461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5584'. [ 1854.929370][ T30] audit: type=1800 audit(1753267636.742:1610): pid=27453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5582" name="/" dev="9p" ino=2 res=0 errno=0 [ 1855.326325][T27466] veth0_to_bond: entered allmulticast mode [ 1856.126469][ T6251] Bluetooth: hci5: Frame reassembly failed (-84) [ 1856.140038][T27480] trusted_key: syz.4.5589 sent an empty control message without MSG_MORE. [ 1856.151376][T27478] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1856.157960][T27478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1856.166262][T27478] vhci_hcd vhci_hcd.0: Device attached [ 1856.192044][T27486] autofs: Unknown parameter '/' [ 1856.208007][T27485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1856.224678][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1856.545501][ T5910] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1856.553378][ T5911] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 1856.800977][T27482] vhci_hcd: connection reset by peer [ 1856.801144][ T6251] vhci_hcd: stop threads [ 1856.801159][ T6251] vhci_hcd: release socket [ 1856.801193][ T6251] vhci_hcd: disconnect device [ 1856.821581][T27494] netlink: 'syz.2.5594': attribute type 1 has an invalid length. [ 1856.821600][T27494] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1856.898224][ T5910] usb 5-1: device descriptor read/64, error -71 [ 1857.199294][T25778] vhci_hcd: vhci_device speed not set [ 1857.258953][ T5910] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1857.518910][ T5910] usb 5-1: device descriptor read/64, error -71 [ 1857.629335][ T5910] usb usb5-port1: attempt power cycle [ 1857.935565][T27497] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1857.978958][ T5910] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1858.019618][ T5910] usb 5-1: device descriptor read/8, error -71 [ 1858.139332][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1858.145847][T21784] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1858.379232][ T5910] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1858.438075][T27517] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1858.968971][ T5910] usb 5-1: device descriptor read/8, error -71 [ 1859.408900][ T5889] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1859.549336][ T5910] usb usb5-port1: unable to enumerate USB device [ 1859.640259][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1859.652103][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1859.973643][ T5889] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1859.985210][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1859.993265][ T5889] usb 3-1: Product: syz [ 1860.025692][T27513] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1860.038967][ T5910] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1860.309062][T27513] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1860.321432][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1860.343459][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1860.353652][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.373639][ T5910] usb 5-1: New USB device found, idVendor=0404, idProduct=4e72, bcdDevice= 0.40 [ 1860.416758][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.441670][ T5910] usb 5-1: config 0 descriptor?? [ 1860.481306][ T5910] usbhid 5-1:0.0: can't add hid device: -22 [ 1860.500832][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 1860.564575][ T5910] usb 3-1: USB disconnect, device number 99 [ 1861.937019][ T30] audit: type=1400 audit(1753267643.842:1611): avc: denied { bind } for pid=27541 comm="syz.0.5607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1861.999102][ T5911] vhci_hcd: vhci_device speed not set [ 1862.735101][T27562] autofs: Unknown parameter '/' [ 1863.051506][ T5896] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1863.168257][T27569] FAULT_INJECTION: forcing a failure. [ 1863.168257][T27569] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.179171][ T5911] usb 5-1: USB disconnect, device number 99 [ 1863.193183][T27569] CPU: 0 UID: 0 PID: 27569 Comm: syz.0.5613 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1863.193206][T27569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1863.193217][T27569] Call Trace: [ 1863.193223][T27569] [ 1863.193231][T27569] dump_stack_lvl+0x16c/0x1f0 [ 1863.193263][T27569] should_fail_ex+0x512/0x640 [ 1863.193291][T27569] ? __kvmalloc_node_noprof+0x124/0x620 [ 1863.193320][T27569] should_failslab+0xc2/0x120 [ 1863.193338][T27569] __kvmalloc_node_noprof+0x137/0x620 [ 1863.193363][T27569] ? io_schedule_timeout+0xd1/0x150 [ 1863.193387][T27569] ? bpf_test_run_xdp_live+0x16b/0x500 [ 1863.193410][T27569] ? bpf_test_run_xdp_live+0x16b/0x500 [ 1863.193426][T27569] bpf_test_run_xdp_live+0x16b/0x500 [ 1863.193446][T27569] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1863.193467][T27569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1863.193492][T27569] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1863.193510][T27569] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1863.193550][T27569] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1863.193572][T27569] ? 0xffffffffa0205540 [ 1863.193588][T27569] ? 0xffffffffa0205540 [ 1863.193603][T27569] ? 0xffffffffa0205540 [ 1863.193623][T27569] bpf_prog_test_run_xdp+0x824/0x1590 [ 1863.193650][T27569] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1863.193671][T27569] ? __might_fault+0x40/0x190 [ 1863.193699][T27569] ? fput+0x70/0xf0 [ 1863.193717][T27569] ? __bpf_prog_get+0x97/0x2a0 [ 1863.193737][T27569] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1863.193755][T27569] __sys_bpf+0x1707/0x4ea0 [ 1863.193783][T27569] ? __pfx___sys_bpf+0x10/0x10 [ 1863.193807][T27569] ? ksys_write+0x190/0x250 [ 1863.193836][T27569] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1863.193868][T27569] ? fput+0x70/0xf0 [ 1863.193892][T27569] ? ksys_write+0x1ac/0x250 [ 1863.193918][T27569] ? __pfx_ksys_write+0x10/0x10 [ 1863.193949][T27569] __x64_sys_bpf+0x78/0xc0 [ 1863.193973][T27569] ? lockdep_hardirqs_on+0x7c/0x110 [ 1863.194000][T27569] do_syscall_64+0xcd/0x4c0 [ 1863.194019][T27569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.194036][T27569] RIP: 0033:0x7fb60278e9a9 [ 1863.194051][T27569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1863.194068][T27569] RSP: 002b:00007fb6035fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1863.194085][T27569] RAX: ffffffffffffffda RBX: 00007fb6029b5fa0 RCX: 00007fb60278e9a9 [ 1863.194097][T27569] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1863.194108][T27569] RBP: 00007fb6035fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.194118][T27569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.194129][T27569] R13: 0000000000000000 R14: 00007fb6029b5fa0 R15: 00007ffea8061a28 [ 1863.194151][T27569] [ 1863.569888][ T5896] usb 4-1: device descriptor read/64, error -71 [ 1864.085827][ T5896] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1864.309014][ T5896] usb 4-1: device descriptor read/64, error -71 [ 1864.365641][ T30] audit: type=1400 audit(1753267646.272:1612): avc: denied { write } for pid=27579 comm="syz.1.5617" path="socket:[93342]" dev="sockfs" ino=93342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1864.391133][ T30] audit: type=1326 audit(1753267646.272:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="syz.1.5617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d32b8e9a9 code=0x0 [ 1864.419434][ T5896] usb usb4-port1: attempt power cycle [ 1865.078946][ T5896] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1865.185144][T27597] netlink: 'syz.2.5621': attribute type 5 has an invalid length. [ 1865.196668][T27597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5621'. [ 1865.520204][ T5896] usb 4-1: device not accepting address 104, error -71 [ 1866.652546][T27589] Process accounting resumed [ 1868.346141][T27635] autofs: Unknown parameter '/' [ 1868.578956][ T30] audit: type=1400 audit(1753267650.322:1614): avc: denied { listen } for pid=27631 comm="syz.2.5633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1868.904383][T27646] FAULT_INJECTION: forcing a failure. [ 1868.904383][T27646] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.917252][T27646] CPU: 0 UID: 0 PID: 27646 Comm: syz.2.5634 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1868.917275][T27646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1868.917286][T27646] Call Trace: [ 1868.917292][T27646] [ 1868.917300][T27646] dump_stack_lvl+0x16c/0x1f0 [ 1868.917334][T27646] should_fail_ex+0x512/0x640 [ 1868.917361][T27646] ? __kmalloc_noprof+0xbf/0x510 [ 1868.917390][T27646] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1868.917415][T27646] should_failslab+0xc2/0x120 [ 1868.917434][T27646] __kmalloc_noprof+0xd2/0x510 [ 1868.917466][T27646] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1868.917497][T27646] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1868.917523][T27646] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1868.917565][T27646] ? bpf_lsm_capable+0x9/0x10 [ 1868.917586][T27646] ? security_capable+0x7e/0x260 [ 1868.917618][T27646] genl_rcv_msg+0x55c/0x800 [ 1868.917645][T27646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1868.917666][T27646] ? __pfx___schedule+0x10/0x10 [ 1868.917691][T27646] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1868.917716][T27646] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 1868.917738][T27646] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1868.917760][T27646] ? mark_held_locks+0x49/0x80 [ 1868.917787][T27646] ? irqentry_exit+0x3b/0x90 [ 1868.917802][T27646] ? lockdep_hardirqs_on+0x7c/0x110 [ 1868.917837][T27646] netlink_rcv_skb+0x155/0x420 [ 1868.917859][T27646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1868.917883][T27646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1868.917902][T27646] ? preempt_schedule_thunk+0x16/0x30 [ 1868.917938][T27646] ? __pfx_genl_rcv+0x10/0x10 [ 1868.917963][T27646] genl_rcv+0x28/0x40 [ 1868.917983][T27646] netlink_unicast+0x58d/0x850 [ 1868.918008][T27646] ? __pfx_netlink_unicast+0x10/0x10 [ 1868.918037][T27646] netlink_sendmsg+0x8d1/0xdd0 [ 1868.918062][T27646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1868.918087][T27646] ? ____sys_sendmsg+0x871/0xc70 [ 1868.918112][T27646] ____sys_sendmsg+0xa95/0xc70 [ 1868.918135][T27646] ? copy_msghdr_from_user+0x10a/0x160 [ 1868.918162][T27646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1868.918187][T27646] ? sched_clock_cpu+0x6c/0x530 [ 1868.918221][T27646] ___sys_sendmsg+0x134/0x1d0 [ 1868.918250][T27646] ? __pfx____sys_sendmsg+0x10/0x10 [ 1868.918276][T27646] ? __lock_acquire+0x622/0x1c90 [ 1868.918317][T27646] ? warn_bogus_irq_restore+0x20/0x30 [ 1868.918350][T27646] __sys_sendmsg+0x16d/0x220 [ 1868.918368][T27646] ? __pfx___sys_sendmsg+0x10/0x10 [ 1868.918383][T27646] ? rcu_is_watching+0x12/0xc0 [ 1868.918418][T27646] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1868.918444][T27646] do_syscall_64+0xcd/0x4c0 [ 1868.918464][T27646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.918483][T27646] RIP: 0033:0x7f8737b8e9a9 [ 1868.918498][T27646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1868.918515][T27646] RSP: 002b:00007f8738a78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1868.918533][T27646] RAX: ffffffffffffffda RBX: 00007f8737db6160 RCX: 00007f8737b8e9a9 [ 1868.918545][T27646] RDX: 0000000000040000 RSI: 0000200000007f80 RDI: 0000000000000008 [ 1868.918556][T27646] RBP: 00007f8738a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.918567][T27646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.918577][T27646] R13: 0000000000000001 R14: 00007f8737db6160 R15: 00007ffdd462f518 [ 1868.918603][T27646] [ 1870.443134][ T30] audit: type=1400 audit(1753267652.352:1615): avc: denied { append } for pid=27672 comm="syz.3.5642" name="pfkey" dev="proc" ino=4026533261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1870.466898][T27673] openvswitch: netlink: Key type 30 is not supported [ 1871.756963][ T30] audit: type=1400 audit(1753267653.662:1616): avc: denied { map } for pid=27687 comm="syz.1.5647" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1872.553395][T27695] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1872.656045][T27698] syz_tun: entered allmulticast mode [ 1872.670709][T27698] syz_tun: left allmulticast mode [ 1978.692919][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1978.699899][ C1] rcu: 0-...!: (0 ticks this GP) idle=c254/1/0x4000000000000000 softirq=166244/166246 fqs=1 [ 1978.711052][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27715 P26341/1:b..l [ 1978.719666][ C1] rcu: (detected by 1, t=10502 jiffies, g=126729, q=203 ncpus=2) [ 1978.727469][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1978.727494][ C0] NMI backtrace for cpu 0 [ 1978.727506][ C0] CPU: 0 UID: 0 PID: 27715 Comm: syz.0.5656 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1978.727527][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1978.727536][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x2c/0x80 [ 1978.727562][ C0] Code: 1e fa 55 48 89 f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 5c 0f f6 48 89 df e8 8e b0 0f f6 f7 c5 00 02 00 00 75 23 9c 58 c4 02 75 37 bf 01 00 00 00 e8 f5 d2 ff f5 65 8b 05 8e d9 46 08 [ 1978.727576][ C0] RSP: 0000:ffffc90000007e28 EFLAGS: 00000046 [ 1978.727588][ C0] RAX: 0000000000000046 RBX: ffff8880b8427c80 RCX: ffffffff8198d763 [ 1978.727598][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff8880b8427c80 [ 1978.727608][ C0] RBP: 0000000000000046 R08: 0000000000000000 R09: ffffed1017084f90 [ 1978.727617][ C0] R10: ffff8880b8427c83 R11: 0000000000000001 R12: ffff8880b8427c80 [ 1978.727627][ C0] R13: 1861c02d9c000000 R14: ffff888064fb9340 R15: ffffffff89994ed0 [ 1978.727637][ C0] FS: 00007fb6035da6c0(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 1978.727652][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1978.727663][ C0] CR2: 0000001b2c40cff8 CR3: 0000000057a1d000 CR4: 00000000003526f0 [ 1978.727672][ C0] DR0: 0000000061812e20 DR1: 0000000000000000 DR2: 0000000000000000 [ 1978.727682][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1978.727691][ C0] Call Trace: [ 1978.727697][ C0] [ 1978.727703][ C0] __hrtimer_run_queues+0x529/0xad0 [ 1978.727725][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1978.727741][ C0] ? read_tsc+0x9/0x20 [ 1978.727760][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1978.727781][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1978.727804][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1978.727825][ C0] [ 1978.727830][ C0] [ 1978.727835][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1978.727850][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 1978.727870][ C0] Code: fb 09 00 00 44 8b 05 09 85 1f 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 cf cb 39 00 fb 65 48 8b 1d be 12 46 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 1978.727883][ C0] RSP: 0000:ffffc900048aec30 EFLAGS: 00000202 [ 1978.727894][ C0] RAX: 0000000000001257 RBX: ffff88802bd28000 RCX: 0000000000000007 [ 1978.727904][ C0] RDX: 0000000000000000 RSI: ffffffff8de2ff26 RDI: ffffffff8c1573e0 [ 1978.727913][ C0] RBP: ffffc900048aec78 R08: 0000000000000001 R09: 0000000000000001 [ 1978.727922][ C0] R10: ffffffff90a94057 R11: 0000000000000001 R12: ffff8880b843a2c0 [ 1978.727932][ C0] R13: ffff888058cf2440 R14: 0000000000000001 R15: ffff8880b843b130 [ 1978.727948][ C0] ? __switch_to+0x783/0x1170 [ 1978.727965][ C0] __schedule+0x1172/0x5dd0 [ 1978.727991][ C0] ? __pfx___schedule+0x10/0x10 [ 1978.728010][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1978.728033][ C0] ? mark_held_locks+0x49/0x80 [ 1978.728055][ C0] preempt_schedule_irq+0x51/0x90 [ 1978.728074][ C0] irqentry_exit+0x36/0x90 [ 1978.728086][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1978.728101][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1978.728124][ C0] Code: 76 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 b6 10 0f 0f 82 74 02 00 00 8b 35 1a e8 10 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 c9 75 37 12 0f 85 c7 02 00 00 48 83 c4 [ 1978.728137][ C0] RSP: 0018:ffffc900048aef10 EFLAGS: 00000206 [ 1978.728149][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 000000004e00f4b7 [ 1978.728158][ C0] RDX: 0000000000000000 RSI: ffffffff8de0aca5 RDI: ffffffff8c1573e0 [ 1978.728168][ C0] RBP: 0000000000000002 R08: c5582be4a94f9ee0 R09: 0000000000000000 [ 1978.728178][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1978.728186][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1978.728205][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1978.728221][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1978.728241][ C0] unwind_next_frame+0xd1/0x20a0 [ 1978.728254][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1978.728267][ C0] ? post_alloc_hook+0x1c0/0x230 [ 1978.728289][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1978.728308][ C0] arch_stack_walk+0x94/0x100 [ 1978.728326][ C0] ? post_alloc_hook+0x1c0/0x230 [ 1978.728346][ C0] stack_trace_save+0x8e/0xc0 [ 1978.728364][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1978.728385][ C0] ? __lock_acquire+0x622/0x1c90 [ 1978.728398][ C0] save_stack+0x160/0x1f0 [ 1978.728418][ C0] ? __pfx_save_stack+0x10/0x10 [ 1978.728436][ C0] ? post_alloc_hook+0x1c0/0x230 [ 1978.728459][ C0] ? irqentry_exit+0x3b/0x90 [ 1978.728471][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1978.728494][ C0] __set_page_owner+0x91/0x550 [ 1978.728516][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1978.728541][ C0] ? bad_range+0x261/0x4c0 [ 1978.728555][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1978.728577][ C0] post_alloc_hook+0x1c0/0x230 [ 1978.728597][ C0] get_page_from_freelist+0x1321/0x3890 [ 1978.728621][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 1978.728638][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1978.728659][ C0] ? stack_trace_save+0x8e/0xc0 [ 1978.728677][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1978.728695][ C0] ? stack_depot_save_flags+0x28/0xa40 [ 1978.728719][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1978.728739][ C0] ? kasan_save_stack+0x33/0x60 [ 1978.728758][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1978.728778][ C0] ? security_inode_alloc+0x3b/0x2b0 [ 1978.728797][ C0] ? inode_init_always_gfp+0xce4/0x1030 [ 1978.728817][ C0] ? alloc_inode+0x86/0x240 [ 1978.728832][ C0] ? new_inode+0x22/0x1c0 [ 1978.728848][ C0] ? proc_get_inode+0x1d/0x780 [ 1978.728862][ C0] ? look_up_lock_class+0x6b/0x150 [ 1978.728881][ C0] ? proc_tgid_net_lookup+0x75/0x120 [ 1978.728899][ C0] ? register_lock_class+0x41/0x4c0 [ 1978.728912][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.728928][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1978.728939][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1978.728956][ C0] ? policy_nodemask+0xea/0x4e0 [ 1978.728970][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1978.728985][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1978.728999][ C0] ? find_held_lock+0x2b/0x80 [ 1978.729017][ C0] alloc_pages_noprof+0x131/0x390 [ 1978.729031][ C0] get_free_pages_noprof+0x10/0xb0 [ 1978.729046][ C0] inode_doinit_with_dentry+0x8d6/0x12e0 [ 1978.729069][ C0] ? mgts_show+0x1b0/0x480 [ 1978.729088][ C0] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 1978.729108][ C0] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1978.729123][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1978.729141][ C0] selinux_d_instantiate+0x26/0x30 [ 1978.729161][ C0] security_d_instantiate+0x142/0x1a0 [ 1978.729176][ C0] d_splice_alias+0x93/0xf80 [ 1978.729192][ C0] ? set_nlink+0x86/0x180 [ 1978.729207][ C0] proc_lookup_de+0x29e/0x320 [ 1978.729224][ C0] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 1978.729240][ C0] proc_tgid_net_lookup+0x75/0x120 [ 1978.729258][ C0] lookup_open.isra.0+0x4d7/0x1580 [ 1978.729279][ C0] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1978.729303][ C0] ? mnt_get_write_access+0x20c/0x300 [ 1978.729322][ C0] path_openat+0x893/0x2cb0 [ 1978.729345][ C0] ? __pfx_path_openat+0x10/0x10 [ 1978.729366][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1978.729379][ C0] do_filp_open+0x20b/0x470 [ 1978.729400][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1978.729423][ C0] ? __pfx_kfree_link+0x10/0x10 [ 1978.729444][ C0] ? alloc_fd+0x471/0x7d0 [ 1978.729466][ C0] do_sys_openat2+0x11b/0x1d0 [ 1978.729482][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1978.729502][ C0] __x64_sys_openat+0x174/0x210 [ 1978.729518][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1978.729542][ C0] do_syscall_64+0xcd/0x4c0 [ 1978.729556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.729570][ C0] RIP: 0033:0x7fb60278d310 [ 1978.729584][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1978.729597][ C0] RSP: 002b:00007fb6035d9f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1978.729610][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb60278d310 [ 1978.729619][ C0] RDX: 0000000000000002 RSI: 00007fb6035d9fa0 RDI: 00000000ffffff9c [ 1978.729629][ C0] RBP: 00007fb6035d9fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.729638][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1978.729646][ C0] R13: 0000000000000000 R14: 00007fb6029b6080 R15: 00007ffea8061a28 [ 1978.729661][ C0] [ 1978.730490][ C1] task:kworker/u8:9 state:R running task stack:24424 pid:26341 tgid:26341 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1979.571280][ C1] Workqueue: bat_events batadv_nc_worker [ 1979.576921][ C1] Call Trace: [ 1979.580194][ C1] [ 1979.583126][ C1] __schedule+0x116a/0x5dd0 [ 1979.587631][ C1] ? rcu_is_watching+0x12/0xc0 [ 1979.592392][ C1] ? trace_sched_exit_tp+0xde/0x130 [ 1979.597603][ C1] ? __pfx___schedule+0x10/0x10 [ 1979.602456][ C1] ? __pfx___schedule+0x10/0x10 [ 1979.607314][ C1] ? mark_held_locks+0x49/0x80 [ 1979.612083][ C1] preempt_schedule_irq+0x51/0x90 [ 1979.617112][ C1] irqentry_exit+0x36/0x90 [ 1979.621519][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1979.626973][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 1979.632249][ C1] Code: 0f c1 05 48 bd 37 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 5d 7b 37 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1979.651850][ C1] RSP: 0000:ffffc900043d7ae0 EFLAGS: 00000206 [ 1979.657912][ C1] RAX: c37f95ff9955fc00 RBX: ffffffff8e5c4e00 RCX: ffffc900043d7aec [ 1979.665878][ C1] RDX: 0000000000000002 RSI: ffffffff8de0aca5 RDI: ffffffff8c1573e0 [ 1979.673840][ C1] RBP: 000000000000023c R08: 0000000000000001 R09: 0000000000000000 [ 1979.681805][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8b53bf25 [ 1979.689775][ C1] R13: 0000000000000206 R14: ffff888058cf2440 R15: 0000000000000003 [ 1979.697739][ C1] ? batadv_nc_worker+0x895/0x1030 [ 1979.702868][ C1] batadv_nc_worker+0x89a/0x1030 [ 1979.707810][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1979.713621][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1979.719002][ C1] ? rcu_is_watching+0x12/0xc0 [ 1979.723770][ C1] process_one_work+0x9cf/0x1b70 [ 1979.728715][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1979.734089][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1979.739467][ C1] ? assign_work+0x1a0/0x250 [ 1979.744057][ C1] worker_thread+0x6c8/0xf10 [ 1979.748650][ C1] ? __kthread_parkme+0x19e/0x250 [ 1979.753676][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1979.758781][ C1] kthread+0x3c5/0x780 [ 1979.762844][ C1] ? __pfx_kthread+0x10/0x10 [ 1979.767428][ C1] ? rcu_is_watching+0x12/0xc0 [ 1979.772191][ C1] ? __pfx_kthread+0x10/0x10 [ 1979.776773][ C1] ret_from_fork+0x5d4/0x6f0 [ 1979.781362][ C1] ? __pfx_kthread+0x10/0x10 [ 1979.785944][ C1] ret_from_fork_asm+0x1a/0x30 [ 1979.790717][ C1] [ 1979.793726][ C1] task:syz.0.5656 state:R running task stack:27160 pid:27715 tgid:27711 ppid:17938 task_flags:0x400140 flags:0x00004008 [ 1979.807212][ C1] Call Trace: [ 1979.810480][ C1] [ 1979.813410][ C1] ? __schedule+0x1172/0x5dd0 [ 1979.818101][ C1] ? __pfx___schedule+0x10/0x10 [ 1979.822950][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1979.828157][ C1] ? mark_held_locks+0x49/0x80 [ 1979.832924][ C1] ? preempt_schedule_irq+0x51/0x90 [ 1979.838125][ C1] ? irqentry_exit+0x36/0x90 [ 1979.842704][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1979.848863][ C1] ? lock_acquire+0x62/0x350 [ 1979.853450][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1979.858645][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1979.864797][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 1979.869897][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1979.875003][ C1] ? post_alloc_hook+0x1c0/0x230 [ 1979.879944][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1979.886098][ C1] ? arch_stack_walk+0x94/0x100 [ 1979.890949][ C1] ? post_alloc_hook+0x1c0/0x230 [ 1979.895888][ C1] ? stack_trace_save+0x8e/0xc0 [ 1979.900739][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1979.906114][ C1] ? __lock_acquire+0x622/0x1c90 [ 1979.911045][ C1] ? save_stack+0x160/0x1f0 [ 1979.915550][ C1] ? __pfx_save_stack+0x10/0x10 [ 1979.920397][ C1] ? post_alloc_hook+0x1c0/0x230 [ 1979.925343][ C1] ? irqentry_exit+0x3b/0x90 [ 1979.929926][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1979.935128][ C1] ? __set_page_owner+0x91/0x550 [ 1979.940068][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1979.945443][ C1] ? bad_range+0x261/0x4c0 [ 1979.949851][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1979.955059][ C1] ? post_alloc_hook+0x1c0/0x230 [ 1979.960001][ C1] ? get_page_from_freelist+0x1321/0x3890 [ 1979.965735][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 1979.971019][ C1] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1979.977087][ C1] ? stack_trace_save+0x8e/0xc0 [ 1979.981935][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1979.987306][ C1] ? stack_depot_save_flags+0x28/0xa40 [ 1979.992771][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1979.999101][ C1] ? kasan_save_stack+0x33/0x60 [ 1980.003954][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1980.008980][ C1] ? security_inode_alloc+0x3b/0x2b0 [ 1980.014262][ C1] ? inode_init_always_gfp+0xce4/0x1030 [ 1980.019812][ C1] ? alloc_inode+0x86/0x240 [ 1980.024309][ C1] ? new_inode+0x22/0x1c0 [ 1980.028633][ C1] ? proc_get_inode+0x1d/0x780 [ 1980.033392][ C1] ? look_up_lock_class+0x6b/0x150 [ 1980.038506][ C1] ? proc_tgid_net_lookup+0x75/0x120 [ 1980.043788][ C1] ? register_lock_class+0x41/0x4c0 [ 1980.048979][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.055044][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1980.059973][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1980.065863][ C1] ? policy_nodemask+0xea/0x4e0 [ 1980.070711][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 1980.075728][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1980.081096][ C1] ? find_held_lock+0x2b/0x80 [ 1980.085772][ C1] ? alloc_pages_noprof+0x131/0x390 [ 1980.090963][ C1] ? get_free_pages_noprof+0x10/0xb0 [ 1980.096251][ C1] ? inode_doinit_with_dentry+0x8d6/0x12e0 [ 1980.102061][ C1] ? mgts_show+0x1b0/0x480 [ 1980.106478][ C1] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 1980.112550][ C1] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1980.118526][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1980.123550][ C1] ? selinux_d_instantiate+0x26/0x30 [ 1980.128835][ C1] ? security_d_instantiate+0x142/0x1a0 [ 1980.134373][ C1] ? d_splice_alias+0x93/0xf80 [ 1980.139134][ C1] ? set_nlink+0x86/0x180 [ 1980.143464][ C1] ? proc_lookup_de+0x29e/0x320 [ 1980.148317][ C1] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 1980.154034][ C1] ? proc_tgid_net_lookup+0x75/0x120 [ 1980.159319][ C1] ? lookup_open.isra.0+0x4d7/0x1580 [ 1980.164609][ C1] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1980.170169][ C1] ? mnt_get_write_access+0x20c/0x300 [ 1980.175543][ C1] ? path_openat+0x893/0x2cb0 [ 1980.180233][ C1] ? __pfx_path_openat+0x10/0x10 [ 1980.185172][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1980.190103][ C1] ? do_filp_open+0x20b/0x470 [ 1980.194781][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 1980.199815][ C1] ? __pfx_kfree_link+0x10/0x10 [ 1980.204675][ C1] ? alloc_fd+0x471/0x7d0 [ 1980.209015][ C1] ? do_sys_openat2+0x11b/0x1d0 [ 1980.213863][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1980.219068][ C1] ? __x64_sys_openat+0x174/0x210 [ 1980.224087][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 1980.229465][ C1] ? do_syscall_64+0xcd/0x4c0 [ 1980.234143][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.240217][ C1] [ 1980.243228][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g126729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1980.254502][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1980.264459][ C1] rcu: RCU grace-period kthread stack dump: [ 1980.270347][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1980.283836][ C1] Call Trace: [ 1980.287105][ C1] [ 1980.290033][ C1] __schedule+0x116a/0x5dd0 [ 1980.294549][ C1] ? __lock_acquire+0x622/0x1c90 [ 1980.299484][ C1] ? __pfx___schedule+0x10/0x10 [ 1980.304348][ C1] ? find_held_lock+0x2b/0x80 [ 1980.309024][ C1] ? schedule+0x2d7/0x3a0 [ 1980.313357][ C1] schedule+0xe7/0x3a0 [ 1980.317428][ C1] schedule_timeout+0x123/0x290 [ 1980.322292][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1980.327665][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1980.332963][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1980.338859][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1980.344324][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1980.349084][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1980.354364][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1980.359562][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1980.364498][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1980.369347][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1980.375158][ C1] rcu_gp_kthread+0x270/0x380 [ 1980.379831][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1980.385020][ C1] ? rcu_is_watching+0x12/0xc0 [ 1980.389780][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1980.394983][ C1] ? __kthread_parkme+0x19e/0x250 [ 1980.400006][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1980.405196][ C1] kthread+0x3c5/0x780 [ 1980.409257][ C1] ? __pfx_kthread+0x10/0x10 [ 1980.413840][ C1] ? rcu_is_watching+0x12/0xc0 [ 1980.418602][ C1] ? __pfx_kthread+0x10/0x10 [ 1980.423202][ C1] ret_from_fork+0x5d4/0x6f0 [ 1980.427809][ C1] ? __pfx_kthread+0x10/0x10 [ 1980.432403][ C1] ret_from_fork_asm+0x1a/0x30 [ 1980.437188][ C1] [ 1980.440201][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1980.446519][ C1] CPU: 1 UID: 0 PID: 17268 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1980.457009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1980.467056][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 1980.473815][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 1980.493430][ C1] RSP: 0018:ffffc9000f137748 EFLAGS: 00000202 [ 1980.499498][ C1] RAX: 0000000000000001 RBX: ffff8880b84421e0 RCX: ffffffff81afd3cd [ 1980.507469][ C1] RDX: ffff88805edca440 RSI: 0000000000000001 RDI: 0000000000000000 [ 1980.515440][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1980.523413][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1980.531395][ C1] R13: 0000000000000003 R14: ffffed101708843d R15: ffff8880b853b580 [ 1980.539366][ C1] FS: 000055555f4cf500(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 1980.548299][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1980.554878][ C1] CR2: 00007f03800e56c0 CR3: 000000005166b000 CR4: 00000000003526f0 [ 1980.562849][ C1] Call Trace: [ 1980.566120][ C1] [ 1980.569047][ C1] smp_call_function_many_cond+0xd9d/0x1510 [ 1980.574945][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1980.580151][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1980.586477][ C1] ? ldt_dup_context+0x1a2/0x300 [ 1980.591418][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1980.596613][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1980.601726][ C1] flush_tlb_mm_range+0x4a0/0x1790 [ 1980.606835][ C1] ? find_held_lock+0x2b/0x80 [ 1980.611513][ C1] ? dup_mmap+0xf88/0x21d0 [ 1980.615929][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1980.621475][ C1] ? up_write+0x1b2/0x520 [ 1980.625803][ C1] dup_mmap+0xfa2/0x21d0 [ 1980.630054][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1980.634743][ C1] copy_process+0x4081/0x7650 [ 1980.639418][ C1] ? do_wp_page+0x1aa7/0x4f20 [ 1980.644105][ C1] ? __pfx_copy_process+0x10/0x10 [ 1980.649145][ C1] kernel_clone+0xfc/0x960 [ 1980.653563][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1980.658600][ C1] ? css_rstat_updated+0x9d/0xd30 [ 1980.663627][ C1] __do_sys_clone+0xce/0x120 [ 1980.668219][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1980.673417][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 1980.678370][ C1] ? do_user_addr_fault+0x843/0x1370 [ 1980.683677][ C1] do_syscall_64+0xcd/0x4c0 [ 1980.688178][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.694068][ C1] RIP: 0033:0x7f037f385213 [ 1980.698477][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1980.718083][ C1] RSP: 002b:00007fff9259be48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1980.726506][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f037f385213 [ 1980.734488][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1980.742470][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1980.750445][ C1] R10: 000055555f4cf7d0 R11: 0000000000000246 R12: 0000000000000000 [ 1980.758414][ C1] R13: 00000000000927c0 R14: 00000000001c96b6 R15: 00007fff9259bfe0 [ 1980.766419][ C1]