last executing test programs: 21m46.072511462s ago: executing program 3 (id=715): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000940)=ANY=[], 0x38) sendto$inet6(r0, 0x0, 0x6000, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) 21m45.466159794s ago: executing program 3 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000000000013e002500000000009500000000050000"], &(0x7f0000000140)='GPL\x00', 0xe, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0xea, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r2 = accept4$unix(r1, &(0x7f0000000440), &(0x7f0000000240)=0x6e, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='objagg_create\x00'}, 0x18) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x2a, 0x0, 0x88) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = epoll_create(0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3507}]}, 0x70}, 0x1, 0x7}, 0x0) epoll_wait(r7, 0x0, 0x0, 0x800009) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r9, 0xc048aeca, &(0x7f0000000200)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 21m44.036808325s ago: executing program 3 (id=726): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 21m43.24486889s ago: executing program 3 (id=729): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x80) r1 = socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x4890, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="837bfa88e3b700000000000086dd609e560000103aff00000000000000000000000809000000ff02000000000000000000000000000186009078000009000000000000000000"], 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0088471327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 21m40.995134261s ago: executing program 3 (id=733): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0xc008aec1, &(0x7f0000000f80)=ANY=[@ANYRES16]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x109301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000ff0200020000000008000f0001000000", 0x24) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000003c0)=0x2) 21m40.504442805s ago: executing program 3 (id=737): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1800004, 0x20010, r0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) timerfd_settime(r2, 0x2, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/16, 0x2e, 0x10, 0x1, 0x10}, 0x28) 21m39.932512066s ago: executing program 32 (id=737): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1800004, 0x20010, r0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) timerfd_settime(r2, 0x2, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/16, 0x2e, 0x10, 0x1, 0x10}, 0x28) 19m1.611366776s ago: executing program 0 (id=1300): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000050000782e040018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000001040000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfe0, &(0x7f0000001e00)=""/4064, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 19m1.386357898s ago: executing program 0 (id=1304): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) (async) fchown(0xffffffffffffffff, 0xee01, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000740)=@urb_type_iso={0x0, {0x0, 0x1}, 0x9503, 0xc4, &(0x7f0000000440)="37acb49ddd8d700b4c2915a525c02290f99b12801353086624c5c1aceb93311a38ca0424d18bca11a0e5d5d3eaac3ab669f331802530631d1c6f777de50923d770f7e711e48cea79223f0ae926d9a4c6758c26e0d0b10ce95da2cc89b7e7979e2915f399db06a70f3cd8177684ff773f41b1a04ea816a164e6af623b7a4c2194f83cfe2f8559a7443bec647c186db7bfe5ff3ff0bcbf7bbccbb154651d6e1775cdcf1fa8a0a9dec794", 0xa9, 0x1, 0xc, 0x58, 0x0, 0x8, &(0x7f0000000640)="9ee50be7fa5d587e3871af6c9ecea0d83e38f5a536ed5006e2fad2e96e33110a830f0ae632ed71e5db9aa1465201f141f8be32563771a1ce9543f2e6ccae5d491048fb75dffc2d1e7224232fe8d354870f608ccf137270d33f28acf6b3aa0e2a6fdd7ed196a94e5990025e26f9f28e81243c0e350db581fc8cc260f1f548ee625f579f3b6b025c09cefbeec7258d39d7e2f99606814398474da0a700743a82e6e3d1806c586a5386671bcd68e3a4de5f81a63e30bb2159c1326d639601437c9084cc7e4191542949a453342eb5adfa75c7deb3f962aead", [{0x1, 0x4d65ad2d, 0x9}, {0x1, 0x3, 0xb}, {0xfffffff1, 0x44, 0xc}, {0xb16, 0x7, 0x6}, {0x7fffffff, 0x7ff, 0x1}, {0x7, 0x4, 0x800}, {0x8, 0x80000001, 0x400}, {0x9, 0x7, 0x8000}, {0x9, 0x5, 0x3}, {0x4, 0x4, 0xe}, {0xfa2, 0x10, 0x1}, {0xfc4c, 0x8, 0x3}, {0x48ae, 0xfb, 0xb}, {0x1ff}, {0x21, 0x5, 0x9}, {0x1, 0x3, 0x5}, {0xe, 0x9}, {0x3, 0x4, 0xfffffc01}, {0x0, 0x81, 0x6}, {0x7}, {0x818, 0x7, 0x200}, {0x4547, 0x5, 0x6}, {0x8, 0xc, 0x7f}, {0x7ffffffc, 0x5}, {0x100, 0x6, 0x1c2f}, {0x5, 0x3c8, 0x7f}, {0x2, 0x5, 0x6}, {0x8, 0x3daf, 0x3}, {0x43d, 0x6, 0x1}, {0xfffffe00, 0x0, 0x2}, {0x6d2, 0x4, 0x83}, {0x8, 0x9, 0xffffff0b}, {0x7, 0x10000, 0x5}, {0x2, 0x3, 0xe14}, {0x0, 0x8, 0xdb09}, {0x3, 0x2, 0x80000001}, {0x3, 0x101, 0x4}, {0x0, 0xfff, 0x7fff}, {0x5, 0x5, 0x18}, {0x4, 0x3ff, 0x9}, {0x2, 0xfffffff5, 0x480000}, {0x7f, 0xa, 0x1}, {0x1, 0x5, 0x5}, {0x8, 0x8, 0x1}, {0x7, 0x7, 0x5}, {0xc, 0x6, 0x8}, {0x100, 0x10000, 0xc0}, {0xfffffffc, 0x2, 0xd8}, {0x1, 0x4, 0x6}, {0x10000002, 0xffff, 0x10001}, {0x1, 0xf7ec, 0x7}, {0x3, 0x800}, {0x7, 0x7, 0x5}, {0x5, 0x5, 0x81}, {0x17, 0x40b4, 0x10}, {0x113, 0x6, 0x54}, {0x9, 0x257, 0x7}, {0x7, 0x1, 0x6}, {0x0, 0xade, 0x8}, {0xffff99af, 0x2, 0xd6}, {0x834, 0x2, 0x1ff}, {0x4, 0x2, 0x400}, {0x6d, 0x3, 0x6}, {0x5, 0x7, 0x5}, {0x5, 0xf, 0x100}, {0x7, 0x8, 0x2}, {0x4, 0x69f6, 0x1}, {0x1, 0xffffffff, 0x40}, {0xf186, 0xd, 0x100}, {0x6, 0x2629669b, 0xfffffc00}, {0x5, 0x6, 0x1ff}, {0x2, 0x0, 0x7}, {0xd3cf, 0x930c, 0x5}, {0x6, 0x2}, {0x80000001, 0xd0d, 0x3}, {0xfffffffd, 0x0, 0x2}, {0x8c49, 0x7fffffff}, {0x6, 0x74, 0x400}, {0xffff, 0x5, 0x4}, {0x1, 0x8001, 0x2}, {0x6, 0x1ff, 0x9}, {0x5, 0x8, 0x5}, {0x9, 0x5}, {0xca7, 0x9, 0x8}, {0xc, 0xffffff92, 0x2}, {0x8001, 0x2, 0x1bee9fe}, {0xffff, 0x5, 0x7}, {0x400, 0x0, 0xfffffff4}]}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) timerfd_settime(r6, 0x41e6fe2adb1805fd, &(0x7f00000005c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000600)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x42000c4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r8, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r8, 0x7}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000047543de63e46753c36add096cd180012800e00010077697265677561726400000004000280080003005d603cdd5a0549be5f0fd8f0a50e7e917fe8b45a7d7ceb0eb1cbb3cc3c1189a8d14549b5440701f73cb25cb5d452d53aac6a13e3672d678b5f5ff285fc37cd19693cfbc9daf4", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000085000000560000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) io_setup(0x8, &(0x7f0000004200)) (async) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) 19m0.039839253s ago: executing program 0 (id=1308): socket$inet6(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380), 0x8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x26, 0x1, 0xfffffffffffffe5e}) 18m58.858465163s ago: executing program 0 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0082a84f6e7d4dbaa08eee743dc9123b9b294d4c261890af06e4cf36f5ce5a480d52ee45b8ad37ff16dddfdd89dc352d78edfd82fc2c7f257507ac7eb1f502af418a3830185c89a2fac685ff9dba569240c71159d22b9024283683744b5a7c85a22222f302a7b6ac98111ce73708da9e184e8e85838eeacbac1c9bde6faafee3462395f5f1a2925deffeb994fff0fe30c4"]) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000240)={{0x80, 0xfc}, 'port1\x00', 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x151, 0x0, 0x86c4, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x4800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$setopts(0x4206, 0x0, 0x9, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) 18m58.339882598s ago: executing program 0 (id=1317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 18m58.008257885s ago: executing program 0 (id=1322): socket$inet6(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380), 0x8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x26, 0x1, 0xfffffffffffffe5e}) 18m56.570006943s ago: executing program 33 (id=1322): socket$inet6(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000380), 0x8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x26, 0x1, 0xfffffffffffffe5e}) 5m21.278600429s ago: executing program 1 (id=4371): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000900), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x1c4) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x2818405, &(0x7f0000001980)='dax\x00\x00lwayc') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)={0x4, 0x26, 0x0, 0x8, 0x1, 0xa7f}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x9a1241, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x1, 0x0, 0x80, {0xffffffffffffffff, 0xdddd0000}}, "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", "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"}) 5m19.34945345s ago: executing program 1 (id=4377): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\v\x00K\x00\x00\x00']) 5m19.33086261s ago: executing program 1 (id=4379): socket(0x2, 0x80805, 0x0) syz_open_dev$dri(0x0, 0x1, 0x11f1c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) 5m17.77325622s ago: executing program 1 (id=4389): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c19009571c9952060b1bf00330007010000000000000000017c00005c00018004000600ef4f989bab0b2b8decad849e39b23ef59d"], 0x1c}, 0x1, 0x0, 0x0, 0xc091}, 0xc010) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000400)={0x80, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) chown(0x0, 0x0, 0xee01) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0x1265, &(0x7f0000000240)={'\x00', 0x3, 0xa, 0xaba, 0x40000000, 0x10, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000000000020000000000001103000000ffffffff000000000000000200000000020000000000000802000000005f00"/67], 0x0, 0x43}, 0x28) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x24050040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r8, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) 5m11.859606268s ago: executing program 1 (id=4406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5000000}, {0x1, 0x0, 0x80, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@local, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty, 0x800000, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x3ff}]}]}, 0x1fc}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000faffffffb70200000800ffffb70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) 5m10.570355384s ago: executing program 1 (id=4410): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r0, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000280)=0x10, &(0x7f0000000300)=0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) signalfd(r6, &(0x7f0000000240)={[0x2]}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') unshare(0x6a040000) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svc_xprt_accept\x00', r8, 0x0, 0x3ff}, 0x18) 4m55.163195192s ago: executing program 34 (id=4410): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r0, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000280)=0x10, &(0x7f0000000300)=0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) signalfd(r6, &(0x7f0000000240)={[0x2]}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') unshare(0x6a040000) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='svc_xprt_accept\x00', r8, 0x0, 0x3ff}, 0x18) 7.078687104s ago: executing program 7 (id=5549): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc02007800"], 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 6.894375106s ago: executing program 7 (id=5551): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x40045402, 0xfffffffffffffffe) 6.363748818s ago: executing program 7 (id=5554): r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180252a2100d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 5.153709394s ago: executing program 7 (id=5559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8926, 0x4000000000000) 4.978268201s ago: executing program 5 (id=5563): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xd}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 4.84668696s ago: executing program 5 (id=5566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 4.303962763s ago: executing program 7 (id=5569): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d932bbd7000000000000100000008"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.140155127s ago: executing program 4 (id=5570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) 3.282147029s ago: executing program 5 (id=5572): r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000003a0007cfb1d62e960ef83800037c"], 0x1c}}, 0x0) 2.375892958s ago: executing program 6 (id=5576): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@multicast, @random="2dc6b006cfa0", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7f}}}}}}}}}, 0x0) 2.375555108s ago: executing program 4 (id=5577): msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) 2.305059331s ago: executing program 7 (id=5578): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x14c824a0, 0x71b6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x130, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 2.263981437s ago: executing program 4 (id=5579): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x9, 0x7, 0x8, 0x10001, 0x0, 0xfffffffffffffffd, 0x7fff, 0x7, 0x0, 0xe, 0x0, 0x5}) 2.167972922s ago: executing program 6 (id=5580): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x40000101, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x0) io_uring_setup(0x3c9b, &(0x7f0000000200)={0x0, 0x8ad5, 0x40, 0x0, 0x18e}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r3, 0x80047455, &(0x7f0000000000)=0xfffffff7) 2.10735935s ago: executing program 6 (id=5581): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$media(&(0x7f0000000500), 0x2, 0x800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x2aaaaaaaaaaad9e, 0x0, &(0x7f0000000ac0), 0x10, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.027011821s ago: executing program 6 (id=5582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.940084529s ago: executing program 2 (id=5583): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x8008550e, &(0x7f0000000200)) 1.853240208s ago: executing program 2 (id=5584): r0 = syz_open_dev$video(&(0x7f0000000000), 0x800000000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34325852, 0x2, @stepwise={0xb, 0x74, 0x41e5, 0xc, 0xca, 0x3}}) 1.681522597s ago: executing program 2 (id=5585): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000000)) 1.555968665s ago: executing program 2 (id=5586): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e1000"}}}]}, 0x48}}, 0x0) 1.555728032s ago: executing program 6 (id=5587): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x955d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.4805764s ago: executing program 6 (id=5588): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) lseek(r3, 0xc6c3, 0x0) 1.471993008s ago: executing program 2 (id=5589): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x9, 0x0, 0x48, @empty, @remote, 0x0, 0x0, 0x0, 0x8000000}}) 1.372028218s ago: executing program 5 (id=5590): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c0002800800", @ANYBLOB='\b\x00'], 0x4c}}, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.359807505s ago: executing program 4 (id=5591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 208.95657ms ago: executing program 2 (id=5592): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x300, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 208.615975ms ago: executing program 5 (id=5593): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0xffffffffffffffff) 0s ago: executing program 4 (id=5594): r0 = socket(0x1e, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) listen(r0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 21850] ? lockdep_hardirqs_on+0x9c/0x150 [ 1339.947801][T21850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.947818][T21850] ? clear_bhb_loop+0x60/0xb0 [ 1339.947839][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.947855][T21850] RIP: 0033:0x7f5bd478e929 [ 1339.947871][T21850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.947886][T21850] RSP: 002b:00007f5bd56cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.947905][T21850] RAX: ffffffffffffffda RBX: 00007f5bd49b5fa0 RCX: 00007f5bd478e929 [ 1339.947918][T21850] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1339.947929][T21850] RBP: 00007f5bd56cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.947939][T21850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.947949][T21850] R13: 0000000000000000 R14: 00007f5bd49b5fa0 R15: 00007ffffc11f988 [ 1339.947978][T21850] [ 1340.346761][T15438] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1340.520051][T15438] usb 3-1: config 0 has an invalid interface number: 50 but max is 2 [ 1340.529991][T15438] usb 3-1: config 0 has an invalid interface number: 92 but max is 2 [ 1340.540315][T15438] usb 3-1: config 0 has an invalid interface number: 8 but max is 2 [ 1340.551609][T15438] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1340.563188][T15438] usb 3-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 1340.574226][T15438] usb 3-1: config 0 has no interface number 1 [ 1340.580482][T15438] usb 3-1: config 0 has no interface number 2 [ 1340.587171][T15438] usb 3-1: config 0 has no interface number 3 [ 1340.594873][T15438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1340.605933][T15438] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1340.624391][T15438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1340.636933][T15438] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1340.647534][T15438] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1340.657802][T15438] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1340.668434][T15438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 528, setting to 64 [ 1340.679219][T15438] usb 3-1: config 0 interface 50 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1340.692436][T15438] usb 3-1: too many endpoints for config 0 interface 92 altsetting 125: 89, using maximum allowed: 30 [ 1340.704060][T15438] usb 3-1: config 0 interface 92 altsetting 125 has a duplicate endpoint with address 0x5, skipping [ 1340.714921][T15438] usb 3-1: config 0 interface 92 altsetting 125 has a duplicate endpoint with address 0xA, skipping [ 1340.725773][T15438] usb 3-1: config 0 interface 92 altsetting 125 has 4 endpoint descriptors, different from the interface descriptor's value: 89 [ 1340.740992][T15438] usb 3-1: config 0 interface 8 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1340.754179][T15438] usb 3-1: config 0 interface 50 has no altsetting 0 [ 1340.760923][T15438] usb 3-1: config 0 interface 92 has no altsetting 0 [ 1340.767677][T15438] usb 3-1: config 0 interface 8 has no altsetting 0 [ 1340.774611][T15438] usb 3-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=74.6f [ 1340.790107][T15438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.790758][T15837] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1340.811790][T15438] usb 3-1: config 0 descriptor?? [ 1340.819215][T21841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1341.060820][T15438] usb 3-1: string descriptor 0 read error: -71 [ 1341.064213][T15837] usb 6-1: config 0 has an invalid interface number: 138 but max is 0 [ 1341.126698][T15837] usb 6-1: config 0 has no interface number 0 [ 1341.377355][T15837] usb 6-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1341.381029][T15438] usb 3-1: USB disconnect, device number 102 [ 1341.409750][T15837] usb 6-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1341.434304][T15837] usb 6-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 4 [ 1341.466570][T15837] usb 6-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1152, setting to 1023 [ 1341.483924][T15837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 1341.507739][T15837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.538470][T15837] usb 6-1: config 0 descriptor?? [ 1341.671731][T21879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1342.261124][T15837] usb 6-1: string descriptor 0 read error: -71 [ 1342.349651][T15837] usbtest 6-1:0.138: Linux gadget zero [ 1342.355168][T15837] usbtest 6-1:0.138: full-speed {control in/out bulk-out iso-in} tests (+alt) [ 1342.398509][T15837] usb 6-1: USB disconnect, device number 67 [ 1342.526795][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1342.526815][ T30] audit: type=1804 audit(2000000651.920:1146): pid=21894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.4589" name="/newroot/233/file0" dev="tmpfs" ino=1302 res=1 errno=0 [ 1343.273569][T21910] /dev/sg0: Can't lookup blockdev [ 1343.317292][T21912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.424082][T21917] loop9: detected capacity change from 0 to 8 [ 1343.446234][T21917] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1343.446439][T21918] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4595'. [ 1343.463985][T21917] loop9: partition table partially beyond EOD, truncated [ 1343.473745][T21917] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1343.506771][ T5955] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1343.666717][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 1344.537292][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1344.558948][ T5955] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1344.577732][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.610087][ T5955] usb 3-1: Product: syz [ 1344.614402][ T5955] usb 3-1: Manufacturer: syz [ 1344.635659][ T5955] usb 3-1: SerialNumber: syz [ 1344.657322][ T5955] usb 3-1: config 0 descriptor?? [ 1344.679795][ T5955] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1344.740732][T21935] netlink: 'syz.7.4602': attribute type 1 has an invalid length. [ 1344.820630][T21935] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1345.213008][ T5955] usb 3-1: USB disconnect, device number 103 [ 1346.744992][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1347.668998][T21975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4614'. [ 1347.778812][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1348.037608][T21976] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4612'. [ 1348.345008][T21982] loop6: detected capacity change from 0 to 524287999 [ 1349.756804][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1349.769850][T21994] xt_recent: Unsupported userspace flags (000000de) [ 1349.939576][T21998] loop2: detected capacity change from 0 to 7 [ 1349.947054][T21998] Dev loop2: unable to read RDB block 7 [ 1349.954108][T21998] loop2: unable to read partition table [ 1349.983468][T22002] FAULT_INJECTION: forcing a failure. [ 1349.983468][T22002] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.991656][T21998] loop2: partition table beyond EOD, truncated [ 1350.007519][T21998] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1350.016925][T22002] CPU: 0 UID: 0 PID: 22002 Comm: syz.2.4625 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1350.016951][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1350.016962][T22002] Call Trace: [ 1350.016970][T22002] [ 1350.016977][T22002] dump_stack_lvl+0x189/0x250 [ 1350.017000][T22002] ? __pfx____ratelimit+0x10/0x10 [ 1350.017024][T22002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1350.017042][T22002] ? __pfx__printk+0x10/0x10 [ 1350.017066][T22002] ? __pfx___might_resched+0x10/0x10 [ 1350.017082][T22002] ? fs_reclaim_acquire+0x7d/0x100 [ 1350.017103][T22002] should_fail_ex+0x414/0x560 [ 1350.017130][T22002] should_failslab+0xa8/0x100 [ 1350.017161][T22002] __kmalloc_noprof+0xcb/0x4f0 [ 1350.017182][T22002] ? bpf_test_init+0xc2/0x170 [ 1350.017204][T22002] bpf_test_init+0xc2/0x170 [ 1350.017226][T22002] bpf_prog_test_run_xdp+0x37c/0x1000 [ 1350.017260][T22002] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1350.017284][T22002] ? __fget_files+0x2a/0x420 [ 1350.017305][T22002] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1350.017325][T22002] bpf_prog_test_run+0x2c4/0x340 [ 1350.017354][T22002] __sys_bpf+0x4a4/0x860 [ 1350.017377][T22002] ? __pfx___sys_bpf+0x10/0x10 [ 1350.017412][T22002] ? ksys_write+0x22a/0x250 [ 1350.017436][T22002] ? __pfx_ksys_write+0x10/0x10 [ 1350.017454][T22002] ? rcu_is_watching+0x15/0xb0 [ 1350.017478][T22002] __x64_sys_bpf+0x7c/0x90 [ 1350.017500][T22002] do_syscall_64+0xfa/0x3b0 [ 1350.017515][T22002] ? lockdep_hardirqs_on+0x9c/0x150 [ 1350.017536][T22002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.017553][T22002] ? clear_bhb_loop+0x60/0xb0 [ 1350.017573][T22002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.017588][T22002] RIP: 0033:0x7efc9338e929 [ 1350.017604][T22002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.017619][T22002] RSP: 002b:00007efc94130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.017637][T22002] RAX: ffffffffffffffda RBX: 00007efc935b5fa0 RCX: 00007efc9338e929 [ 1350.017650][T22002] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1350.017660][T22002] RBP: 00007efc94130090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.017671][T22002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.017681][T22002] R13: 0000000000000000 R14: 00007efc935b5fa0 R15: 00007fff33b3fa08 [ 1350.017709][T22002] [ 1350.145125][T22009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1350.692731][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4629'. [ 1352.616907][ T51] Bluetooth: hci3: command tx timeout [ 1358.166240][T22069] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1360.282501][T22091] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1360.298818][T22091] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1360.333339][T22091] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1360.506698][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1360.950496][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1361.148036][ T1036] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1361.172838][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.185310][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.186391][T22117] FAULT_INJECTION: forcing a failure. [ 1361.186391][T22117] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.198914][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1361.222344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.222845][T22117] CPU: 1 UID: 0 PID: 22117 Comm: syz.4.4659 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1361.222868][T22117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1361.222879][T22117] Call Trace: [ 1361.222887][T22117] [ 1361.222896][T22117] dump_stack_lvl+0x189/0x250 [ 1361.222918][T22117] ? __pfx____ratelimit+0x10/0x10 [ 1361.222943][T22117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1361.222962][T22117] ? __pfx__printk+0x10/0x10 [ 1361.222989][T22117] ? ref_tracker_alloc+0x318/0x460 [ 1361.223016][T22117] should_fail_ex+0x414/0x560 [ 1361.223043][T22117] should_failslab+0xa8/0x100 [ 1361.223068][T22117] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1361.223090][T22117] ? skb_clone+0x212/0x3a0 [ 1361.223115][T22117] skb_clone+0x212/0x3a0 [ 1361.223149][T22117] __netlink_deliver_tap+0x404/0x850 [ 1361.223189][T22117] ? netlink_deliver_tap+0x2e/0x1b0 [ 1361.223216][T22117] netlink_deliver_tap+0x19c/0x1b0 [ 1361.223236][T22117] netlink_unicast+0x72f/0x8d0 [ 1361.223265][T22117] netlink_sendmsg+0x805/0xb30 [ 1361.223294][T22117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.223321][T22117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1361.223344][T22117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1361.223364][T22117] __sock_sendmsg+0x21c/0x270 [ 1361.223391][T22117] ____sys_sendmsg+0x505/0x830 [ 1361.223416][T22117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1361.223446][T22117] ? import_iovec+0x74/0xa0 [ 1361.223473][T22117] ___sys_sendmsg+0x21f/0x2a0 [ 1361.223495][T22117] ? __pfx____sys_sendmsg+0x10/0x10 [ 1361.223551][T22117] ? __fget_files+0x2a/0x420 [ 1361.223565][T22117] ? __fget_files+0x3a0/0x420 [ 1361.223597][T22117] __x64_sys_sendmsg+0x19b/0x260 [ 1361.223619][T22117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1361.223650][T22117] ? __pfx_ksys_write+0x10/0x10 [ 1361.223668][T22117] ? rcu_is_watching+0x15/0xb0 [ 1361.223692][T22117] ? do_syscall_64+0xbe/0x3b0 [ 1361.223712][T22117] do_syscall_64+0xfa/0x3b0 [ 1361.223726][T22117] ? lockdep_hardirqs_on+0x9c/0x150 [ 1361.223748][T22117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.223764][T22117] ? clear_bhb_loop+0x60/0xb0 [ 1361.223785][T22117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.223800][T22117] RIP: 0033:0x7f5bd478e929 [ 1361.223816][T22117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.223830][T22117] RSP: 002b:00007f5bd56cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.223849][T22117] RAX: ffffffffffffffda RBX: 00007f5bd49b5fa0 RCX: 00007f5bd478e929 [ 1361.223861][T22117] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1361.223872][T22117] RBP: 00007f5bd56cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.223882][T22117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.223892][T22117] R13: 0000000000000000 R14: 00007f5bd49b5fa0 R15: 00007ffffc11f988 [ 1361.223920][T22117] [ 1361.539971][ T10] usb 6-1: config 0 descriptor?? [ 1361.596624][T15837] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1361.669799][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.682624][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.756993][T15837] usb 7-1: device descriptor read/64, error -71 [ 1361.962864][T22122] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4660'. [ 1362.047330][T15837] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1362.257024][T15837] usb 7-1: device descriptor read/64, error -71 [ 1362.417443][T15837] usb usb7-port1: attempt power cycle [ 1362.432290][ T10] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1362.568309][ T5917] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1362.823271][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 1362.930976][T15837] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1363.049454][ T5917] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1363.118890][T15837] usb 7-1: device descriptor read/8, error -71 [ 1363.142420][ T5917] usb 3-1: config 0 has no interface number 0 [ 1363.187957][ T5917] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.217746][ T5917] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.231593][ T5917] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1363.242667][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.294851][ T5917] usb 3-1: config 0 descriptor?? [ 1363.387063][T15837] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1363.477642][T15837] usb 7-1: device descriptor read/8, error -71 [ 1363.952151][T15837] usb usb7-port1: unable to enumerate USB device [ 1364.027945][ T5845] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1364.222859][ T5917] usbhid 3-1:0.1: can't add hid device: -71 [ 1364.243704][ T5917] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1364.295851][ T5917] usb 3-1: USB disconnect, device number 104 [ 1365.693561][ T10] usb 6-1: USB disconnect, device number 68 [ 1365.866951][T22176] openvswitch: netlink: nsh attribute has 99 unknown bytes. [ 1365.993114][T22178] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4675'. [ 1367.886926][T22197] openvswitch: netlink: Flow actions attr not present in new flow. [ 1368.140859][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4687'. [ 1368.361253][T22215] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4691'. [ 1368.372384][T22215] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4691'. [ 1368.383987][T22215] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4691'. [ 1368.591427][ T5955] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1369.206585][ T5955] usb 5-1: device descriptor read/64, error -71 [ 1369.640925][ T5955] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1369.679357][T22236] loop6: detected capacity change from 0 to 524287999 [ 1369.714454][ T5845] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1369.985095][ T5955] usb 5-1: device descriptor read/64, error -71 [ 1369.996621][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 1370.104031][ T5845] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1370.165666][ T5845] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 1370.252866][ T5955] usb usb5-port1: attempt power cycle [ 1370.590825][ T5845] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1370.613336][ T5955] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1370.614144][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.629151][ T5845] usb 3-1: Product: syz [ 1370.634678][ T5845] usb 3-1: Manufacturer: syz [ 1370.640366][ T5845] usb 3-1: SerialNumber: syz [ 1370.641116][T22239] fuse: Bad value for 'fd' [ 1370.693636][ T5955] usb 5-1: device descriptor read/8, error -71 [ 1370.711118][T22241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4701'. [ 1370.737623][T22239] FAULT_INJECTION: forcing a failure. [ 1370.737623][T22239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.751793][T22239] CPU: 1 UID: 0 PID: 22239 Comm: syz.7.4700 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1370.751819][T22239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1370.751826][T22239] Call Trace: [ 1370.751832][T22239] [ 1370.751840][T22239] dump_stack_lvl+0x189/0x250 [ 1370.751865][T22239] ? __pfx____ratelimit+0x10/0x10 [ 1370.751907][T22239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1370.751926][T22239] ? __pfx__printk+0x10/0x10 [ 1370.751949][T22239] should_fail_ex+0x414/0x560 [ 1370.751966][T22239] _copy_to_user+0x31/0xb0 [ 1370.751980][T22239] simple_read_from_buffer+0xe1/0x170 [ 1370.752005][T22239] proc_fail_nth_read+0x1df/0x250 [ 1370.752027][T22239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.752048][T22239] ? rw_verify_area+0x258/0x650 [ 1370.752076][T22239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.752087][T22239] vfs_read+0x1fd/0x980 [ 1370.752103][T22239] ? __pfx___mutex_lock+0x10/0x10 [ 1370.752113][T22239] ? __pfx_vfs_read+0x10/0x10 [ 1370.752126][T22239] ? __fget_files+0x2a/0x420 [ 1370.752142][T22239] ? __fget_files+0x3a0/0x420 [ 1370.752157][T22239] ? __fget_files+0x2a/0x420 [ 1370.752182][T22239] ksys_read+0x145/0x250 [ 1370.752206][T22239] ? __pfx_ksys_read+0x10/0x10 [ 1370.752224][T22239] ? rcu_is_watching+0x15/0xb0 [ 1370.752238][T22239] ? do_syscall_64+0xbe/0x3b0 [ 1370.752249][T22239] do_syscall_64+0xfa/0x3b0 [ 1370.752258][T22239] ? lockdep_hardirqs_on+0x9c/0x150 [ 1370.752272][T22239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.752289][T22239] ? clear_bhb_loop+0x60/0xb0 [ 1370.752311][T22239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.752328][T22239] RIP: 0033:0x7ff6d6b8d33c [ 1370.752344][T22239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1370.752359][T22239] RSP: 002b:00007ff6d79a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1370.752376][T22239] RAX: ffffffffffffffda RBX: 00007ff6d6db5fa0 RCX: 00007ff6d6b8d33c [ 1370.752383][T22239] RDX: 000000000000000f RSI: 00007ff6d79a60a0 RDI: 0000000000000006 [ 1370.752389][T22239] RBP: 00007ff6d79a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.752395][T22239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.752401][T22239] R13: 0000000000000000 R14: 00007ff6d6db5fa0 R15: 00007ffd76304e18 [ 1370.752417][T22239] [ 1370.991409][T22248] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4702'. [ 1371.087468][ T5845] usb 3-1: 2:1 : unsupported format bits 0x80 [ 1371.152142][T22258] xt_recent: Unsupported userspace flags (000000de) [ 1371.159110][ T5955] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1371.170720][ T5845] usb 3-1: USB disconnect, device number 105 [ 1371.187936][ T5955] usb 5-1: device descriptor read/8, error -71 [ 1371.527607][ T5955] usb usb5-port1: unable to enumerate USB device [ 1371.936652][ T30] audit: type=1326 audit(2000000681.320:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1372.024484][ T30] audit: type=1326 audit(2000000681.320:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1372.851331][ T30] audit: type=1326 audit(2000000681.320:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1372.923855][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1373.096591][ T30] audit: type=1326 audit(2000000681.320:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1373.136848][ T30] audit: type=1326 audit(2000000681.320:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1373.957564][ T30] audit: type=1326 audit(2000000681.320:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1373.985541][ T30] audit: type=1326 audit(2000000681.320:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1374.007697][ T30] audit: type=1326 audit(2000000681.320:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1374.030793][ T30] audit: type=1326 audit(2000000681.320:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1374.052534][ T30] audit: type=1326 audit(2000000681.320:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22262 comm="syz.2.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1374.263386][T22291] IPv6: sit1: Disabled Multicast RS [ 1374.921214][T22295] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1375.315669][T22312] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4724'. [ 1375.326778][T15438] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1375.359006][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4725'. [ 1375.570808][T15438] usb 5-1: Using ep0 maxpacket: 16 [ 1375.707235][T15438] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1375.786095][T15438] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1375.801016][T15438] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1375.811330][T15438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.964843][T15438] usb 5-1: config 0 descriptor?? [ 1376.104743][T22320] smc: net device bond0 applied user defined pnetid SYZ2 [ 1376.116076][T22320] smc: net device bond0 erased user defined pnetid SYZ2 [ 1377.154494][T22321] pim6reg: entered allmulticast mode [ 1377.438473][T15438] usbhid 5-1:0.0: can't add hid device: -71 [ 1377.444549][T15438] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1377.454780][T22327] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4730'. [ 1377.635340][T22327] netlink: 'syz.6.4730': attribute type 9 has an invalid length. [ 1378.316794][T22327] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4730'. [ 1378.325890][T22327] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4730'. [ 1378.345303][T15438] usb 5-1: USB disconnect, device number 94 [ 1379.004682][T22343] netlink: 'syz.5.4733': attribute type 10 has an invalid length. [ 1379.039490][T22341] tmpfs: Unknown parameter 'ucrquo4a8Íâ+¦MŸÇþí.¡™' [ 1379.703418][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4739'. [ 1380.363391][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4741'. [ 1380.828961][ T5845] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1381.689470][ T5845] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.885183][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4745'. [ 1381.958128][ T5845] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1381.967124][ T5845] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.977089][ T5845] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1381.986285][ T5845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1381.996369][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.006790][ T5845] usb 7-1: Product: syz [ 1382.010986][ T5845] usb 7-1: Manufacturer: syz [ 1382.015592][ T5845] usb 7-1: SerialNumber: syz [ 1382.577476][T22393] loop8: detected capacity change from 0 to 6 [ 1382.958320][T22398] fuse: Unknown parameter 'grou00000000000000000000' [ 1383.160435][T22402] autofs: Unknown parameter './file0' [ 1383.225484][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1383.225503][ T30] audit: type=1804 audit(2000000692.620:1187): pid=22408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.4753" name="/newroot/269/file0" dev="tmpfs" ino=1505 res=1 errno=0 [ 1383.273996][T22408] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4753'. [ 1384.330194][ T5924] usb 7-1: USB disconnect, device number 62 [ 1384.417636][T22423] FAULT_INJECTION: forcing a failure. [ 1384.417636][T22423] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.608577][T22423] CPU: 0 UID: 0 PID: 22423 Comm: syz.5.4756 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1384.608606][T22423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1384.608617][T22423] Call Trace: [ 1384.608626][T22423] [ 1384.608636][T22423] dump_stack_lvl+0x189/0x250 [ 1384.608662][T22423] ? __pfx____ratelimit+0x10/0x10 [ 1384.608687][T22423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.608707][T22423] ? __pfx__printk+0x10/0x10 [ 1384.608731][T22423] ? __pfx___might_resched+0x10/0x10 [ 1384.608750][T22423] ? fs_reclaim_acquire+0x7d/0x100 [ 1384.608773][T22423] should_fail_ex+0x414/0x560 [ 1384.608802][T22423] should_failslab+0xa8/0x100 [ 1384.608828][T22423] __kmalloc_noprof+0xcb/0x4f0 [ 1384.608849][T22423] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1384.608880][T22423] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1384.608911][T22423] genl_family_rcv_msg_doit+0xb8/0x300 [ 1384.608942][T22423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1384.608968][T22423] ? rcu_is_watching+0x15/0xb0 [ 1384.608987][T22423] ? cap_capable+0x11f/0x460 [ 1384.609010][T22423] ? safesetid_security_capable+0xa9/0x1a0 [ 1384.609035][T22423] ? bpf_lsm_capable+0x9/0x20 [ 1384.609052][T22423] ? security_capable+0x7e/0x2e0 [ 1384.609077][T22423] genl_rcv_msg+0x60e/0x790 [ 1384.609107][T22423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1384.609127][T22423] ? ref_tracker_free+0x63a/0x7d0 [ 1384.609148][T22423] ? __pfx_fou_nl_del_doit+0x10/0x10 [ 1384.609169][T22423] ? __pfx_ref_tracker_free+0x10/0x10 [ 1384.609203][T22423] netlink_rcv_skb+0x208/0x470 [ 1384.609224][T22423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1384.609249][T22423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1384.609285][T22423] ? down_read+0x1ad/0x2e0 [ 1384.609306][T22423] genl_rcv+0x28/0x40 [ 1384.609327][T22423] netlink_unicast+0x75b/0x8d0 [ 1384.609357][T22423] netlink_sendmsg+0x805/0xb30 [ 1384.609386][T22423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.609414][T22423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1384.609436][T22423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.609456][T22423] __sock_sendmsg+0x21c/0x270 [ 1384.609484][T22423] ____sys_sendmsg+0x505/0x830 [ 1384.609511][T22423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.609553][T22423] ? import_iovec+0x74/0xa0 [ 1384.609576][T22423] ___sys_sendmsg+0x21f/0x2a0 [ 1384.609598][T22423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.609658][T22423] ? __fget_files+0x2a/0x420 [ 1384.609673][T22423] ? __fget_files+0x3a0/0x420 [ 1384.609701][T22423] __x64_sys_sendmsg+0x19b/0x260 [ 1384.609725][T22423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1384.609757][T22423] ? __pfx_ksys_write+0x10/0x10 [ 1384.609776][T22423] ? rcu_is_watching+0x15/0xb0 [ 1384.609800][T22423] ? do_syscall_64+0xbe/0x3b0 [ 1384.609820][T22423] do_syscall_64+0xfa/0x3b0 [ 1384.609835][T22423] ? lockdep_hardirqs_on+0x9c/0x150 [ 1384.609857][T22423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.609874][T22423] ? clear_bhb_loop+0x60/0xb0 [ 1384.609895][T22423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.609912][T22423] RIP: 0033:0x7f8eb9d8e929 [ 1384.609928][T22423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.609943][T22423] RSP: 002b:00007f8ebab5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.609962][T22423] RAX: ffffffffffffffda RBX: 00007f8eb9fb5fa0 RCX: 00007f8eb9d8e929 [ 1384.609975][T22423] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1384.609987][T22423] RBP: 00007f8ebab5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.609998][T22423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.610008][T22423] R13: 0000000000000000 R14: 00007f8eb9fb5fa0 R15: 00007fffed4fd798 [ 1384.610038][T22423] [ 1386.608978][T22441] fuse: Unknown parameter 'grou00000000000000000000' [ 1386.862087][T22446] 9pnet_fd: Insufficient options for proto=fd [ 1388.301997][T22465] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1389.640323][T22476] fuse: Unknown parameter 'group_i00000000000000000000' [ 1391.497864][T22504] TCP: out of memory -- consider tuning tcp_mem [ 1391.506901][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1393.200376][T22513] fuse: Unknown parameter 'group_i00000000000000000000' [ 1393.482883][T15438] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1393.633578][T22520] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1393.778284][T15438] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.827141][T15438] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1393.836204][T15438] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 1393.846634][T15438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.854755][T15438] usb 3-1: Product: syz [ 1393.866682][T15438] usb 3-1: Manufacturer: syz [ 1393.894772][T15438] usb 3-1: SerialNumber: syz [ 1393.951887][T22529] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4794'. [ 1394.038124][ T5987] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1394.173388][T22514] netlink: 'syz.2.4786': attribute type 6 has an invalid length. [ 1394.192381][T15438] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input55 [ 1394.204749][ T5193] bcm5974 3-1:1.0: could not read from device [ 1394.270841][ T5193] bcm5974 3-1:1.0: could not read from device [ 1394.299346][T15438] usb 3-1: USB disconnect, device number 106 [ 1394.527099][ T5193] bcm5974 3-1:1.0: could not read from device [ 1394.687719][ T5957] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1396.155388][ T5957] usb 7-1: Using ep0 maxpacket: 16 [ 1396.189960][ T5957] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.219485][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1396.235137][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1396.256925][ T5957] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1396.288046][ T5957] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1396.518396][ T5957] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1396.556608][ T5957] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1396.598765][ T5957] usb 7-1: Manufacturer: syz [ 1396.635787][ T5957] usb 7-1: config 0 descriptor?? [ 1396.697094][T22565] IPv6: sit1: Disabled Multicast RS [ 1397.396601][ T5957] rc_core: IR keymap rc-hauppauge not found [ 1397.402622][ T5957] Registered IR keymap rc-empty [ 1397.517025][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.546647][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.570354][ T5957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1397.669867][ T5957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input56 [ 1397.702292][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.726920][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.841792][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.868822][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.898890][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.931797][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1397.999892][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1398.026681][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1398.070969][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1398.129815][ T5957] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1398.160635][ T5957] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1398.170373][ T5957] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1398.191423][ T5957] usb 7-1: USB disconnect, device number 63 [ 1401.269278][T22611] netlink: 'syz.5.4819': attribute type 1 has an invalid length. [ 1401.284207][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1401.313392][T22608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1402.759293][T22623] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4822'. [ 1403.977186][T22636] binder: 22628:22636 ioctl c0306201 2000000001c0 returned -14 [ 1404.985063][T21647] Bluetooth: hci5: Frame reassembly failed (-84) [ 1405.025277][T22644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4830'. [ 1405.083124][T22651] sctp: [Deprecated]: syz.4.4827 (pid 22651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1405.083124][T22651] Use struct sctp_sack_info instead [ 1405.146944][T22655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4832'. [ 1407.018117][T10053] Bluetooth: hci5: command 0x1003 tx timeout [ 1407.028516][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1408.942547][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'. [ 1409.820812][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1411.175094][T22702] bridge0: entered promiscuous mode [ 1411.180631][T22702] macsec1: entered allmulticast mode [ 1411.186894][T22702] bridge0: entered allmulticast mode [ 1411.697005][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1411.836632][ T10] usb 5-1: device descriptor read/64, error -71 [ 1412.086702][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1412.754975][ T10] usb 5-1: device descriptor read/64, error -71 [ 1412.983463][ T10] usb usb5-port1: attempt power cycle [ 1413.556617][ T10] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1414.120948][ T10] usb 5-1: device descriptor read/8, error -71 [ 1414.248136][T22745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4863'. [ 1414.406584][ T10] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1414.773693][ T10] usb 5-1: device descriptor read/8, error -71 [ 1414.891609][ T10] usb usb5-port1: unable to enumerate USB device [ 1416.464515][T22776] loop6: detected capacity change from 0 to 524287999 [ 1418.182463][ T30] audit: type=1326 audit(2000000727.570:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1418.696829][ T30] audit: type=1326 audit(2000000727.570:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1418.791988][ T30] audit: type=1326 audit(2000000727.570:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1418.861041][ T30] audit: type=1326 audit(2000000727.570:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1419.137530][ T30] audit: type=1326 audit(2000000727.570:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1419.356749][ T30] audit: type=1326 audit(2000000727.570:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1419.379969][ T30] audit: type=1326 audit(2000000727.570:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1419.606392][T22812] netlink: 'syz.6.4880': attribute type 4 has an invalid length. [ 1420.180408][ T30] audit: type=1326 audit(2000000727.570:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1420.203147][ T30] audit: type=1326 audit(2000000727.570:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1420.280888][ T30] audit: type=1326 audit(2000000727.580:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22794 comm="syz.5.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x7ffc0000 [ 1420.338240][T22816] IPv6: sit1: Disabled Multicast RS [ 1420.645452][T22821] trusted_key: encrypted_key: insufficient parameters specified [ 1420.676824][T22821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4886'. [ 1420.916737][ T5924] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1421.240575][ T5845] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1421.509196][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1421.520774][T22826] vlan2: entered promiscuous mode [ 1422.075266][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1422.164210][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1422.204713][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1422.224689][ T5924] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1422.249996][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.341235][ T5924] usb 3-1: config 0 descriptor?? [ 1422.520883][ T5845] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1423.099989][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.106440][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.284581][ T5845] usb 5-1: no configurations [ 1423.300131][ T5845] usb 5-1: can't read configurations, error -22 [ 1423.414132][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.443245][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.464218][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.491386][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.519305][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.544308][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.564457][ T5924] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1423.565143][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.613382][ T5924] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1423.641109][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.651772][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.696374][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.940769][T22853] program syz.5.4897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1424.232987][ T5924] usb 3-1: USB disconnect, device number 107 [ 1425.454982][T22879] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1425.483974][T22879] overlayfs: failed to set xattr on upper [ 1425.496995][T22879] overlayfs: ...falling back to redirect_dir=nofollow. [ 1425.516573][T22879] overlayfs: ...falling back to metacopy=off. [ 1425.535126][T22881] fuse: Bad value for 'user_id' [ 1425.549528][T22881] fuse: Bad value for 'user_id' [ 1425.566753][T22879] overlayfs: ...falling back to index=off. [ 1425.596640][T22879] overlayfs: ...falling back to uuid=null. [ 1425.713543][T22885] netlink: 'syz.4.4907': attribute type 10 has an invalid length. [ 1425.726792][ T3572] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1425.799457][T22885] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1426.216178][T22885] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1426.234723][T22885] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1426.287509][T22885] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1426.360289][T22896] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4910'. [ 1426.374007][T22896] netlink: 'syz.5.4910': attribute type 9 has an invalid length. [ 1426.503582][T22896] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4910'. [ 1426.521161][T22896] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4910'. [ 1427.143062][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.161170][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.452663][T22914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'. [ 1428.473333][T22914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'. [ 1428.499167][T22914] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1428.512095][T22914] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1428.571124][T22913] overlayfs: failed to resolve './file0/file0': -2 [ 1428.666157][T22921] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1428.688025][T22921] bridge0: entered promiscuous mode [ 1428.701913][T22921] bridge0: port 3(macvlan0) entered blocking state [ 1428.711299][T22921] bridge0: port 3(macvlan0) entered disabled state [ 1428.727582][T22921] macvlan0: entered allmulticast mode [ 1428.735735][T22921] bridge0: entered allmulticast mode [ 1428.755687][T22925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4919'. [ 1428.816673][T22921] macvlan0: left allmulticast mode [ 1428.838559][T22921] bridge0: left allmulticast mode [ 1428.860572][T22921] bridge0: left promiscuous mode [ 1428.930368][T22928] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4919'. [ 1429.234105][T22925] gretap0: entered promiscuous mode [ 1429.339802][T22932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1429.347866][T22932] bond1: entered promiscuous mode [ 1429.353187][T22932] bond1: entered allmulticast mode [ 1429.359315][T22932] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1430.957354][T22969] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4933'. [ 1431.044558][T22974] loop6: detected capacity change from 0 to 7 [ 1431.058227][T22974] Dev loop6: unable to read RDB block 7 [ 1431.063830][T22974] loop6: AHDI p1 p2 p3 p4 [ 1431.076525][T22974] loop6: partition table partially beyond EOD, truncated [ 1431.084270][T22974] loop6: p1 start 926365495 is beyond EOD, truncated [ 1431.094573][T22974] loop6: p2 size 47 extends beyond EOD, truncated [ 1431.103324][T22974] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1431.230260][T22978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.485242][T22979] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4937'. [ 1432.869249][T22991] xt_connbytes: Forcing CT accounting to be enabled [ 1432.875985][T22991] set match dimension is over the limit! [ 1434.539098][T23003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1435.535042][T23015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.946741][T15438] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1436.381442][T23036] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4955'. [ 1436.465960][T23039] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1436.476138][T15438] usb 6-1: device descriptor read/64, error -71 [ 1436.733409][T23046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.770996][T23044] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 23044 comm: syz.4.4958) [ 1436.787000][T15438] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1437.249277][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1437.249297][ T30] audit: type=1800 audit(2000000746.190:1229): pid=23044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.4958" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=89085 res=0 errno=0 [ 1437.366723][T15438] usb 6-1: device descriptor read/64, error -71 [ 1437.494452][T15438] usb usb6-port1: attempt power cycle [ 1437.846581][T15438] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1438.477599][T23058] tmpfs: Bad value for 'mpol' [ 1438.604476][T15438] usb 6-1: device descriptor read/8, error -71 [ 1439.421739][T23072] FAULT_INJECTION: forcing a failure. [ 1439.421739][T23072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.435992][T23072] CPU: 1 UID: 0 PID: 23072 Comm: syz.5.4967 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1439.436016][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1439.436028][T23072] Call Trace: [ 1439.436036][T23072] [ 1439.436043][T23072] dump_stack_lvl+0x189/0x250 [ 1439.436068][T23072] ? __pfx____ratelimit+0x10/0x10 [ 1439.436092][T23072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1439.436112][T23072] ? __pfx__printk+0x10/0x10 [ 1439.436146][T23072] should_fail_ex+0x414/0x560 [ 1439.436175][T23072] _copy_from_user+0x2d/0xb0 [ 1439.436196][T23072] memdup_user_nul+0x66/0x110 [ 1439.436217][T23072] smk_write_rules_list+0xc5/0x370 [ 1439.436242][T23072] ? __pfx_smk_write_change_rule+0x10/0x10 [ 1439.436268][T23072] vfs_write+0x27b/0xa90 [ 1439.436311][T23072] ? __pfx_vfs_write+0x10/0x10 [ 1439.436335][T23072] ? __fget_files+0x2a/0x420 [ 1439.436356][T23072] ? __fget_files+0x3a0/0x420 [ 1439.436370][T23072] ? __fget_files+0x2a/0x420 [ 1439.436396][T23072] ksys_write+0x145/0x250 [ 1439.436421][T23072] ? __pfx_ksys_write+0x10/0x10 [ 1439.436440][T23072] ? rcu_is_watching+0x15/0xb0 [ 1439.436466][T23072] ? do_syscall_64+0xbe/0x3b0 [ 1439.436485][T23072] do_syscall_64+0xfa/0x3b0 [ 1439.436499][T23072] ? lockdep_hardirqs_on+0x9c/0x150 [ 1439.436521][T23072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.436537][T23072] ? clear_bhb_loop+0x60/0xb0 [ 1439.436556][T23072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.436572][T23072] RIP: 0033:0x7f8eb9d8e929 [ 1439.436588][T23072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.436602][T23072] RSP: 002b:00007f8ebab5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1439.436619][T23072] RAX: ffffffffffffffda RBX: 00007f8eb9fb5fa0 RCX: 00007f8eb9d8e929 [ 1439.436631][T23072] RDX: 000000000000001d RSI: 0000200000000880 RDI: 0000000000000003 [ 1439.436643][T23072] RBP: 00007f8ebab5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.436654][T23072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.436665][T23072] R13: 0000000000000000 R14: 00007f8eb9fb5fa0 R15: 00007fffed4fd798 [ 1439.436696][T23072] [ 1439.676199][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4968'. [ 1439.697160][T23077] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1440.109228][T23091] xt_hashlimit: invalid rate [ 1441.101828][T23104] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4981'. [ 1442.218978][ T5957] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1442.286605][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1443.278701][ T5957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1443.291262][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.349523][ T5957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 9 [ 1443.359982][ T10] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 1443.397583][ T10] usb 5-1: config 0 has no interface number 0 [ 1443.410431][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1443.423047][ T10] usb 5-1: config 0 interface 190 has no altsetting 0 [ 1443.442135][ T5957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1443.461625][ T10] usb 5-1: New USB device found, idVendor=0411, idProduct=017f, bcdDevice=85.ac [ 1443.516366][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.598131][ T5957] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1443.609587][T23121] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4985'. [ 1443.640082][ T10] usb 5-1: Product: syz [ 1443.676923][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.688089][ T10] usb 5-1: Manufacturer: syz [ 1443.717168][ T10] usb 5-1: SerialNumber: syz [ 1443.752524][ T5957] usb 3-1: Product: syz [ 1443.884464][ T5957] usb 3-1: Manufacturer: syz [ 1443.920226][ T10] usb 5-1: config 0 descriptor?? [ 1443.935004][ T5957] usb 3-1: SerialNumber: syz [ 1444.319454][ T5957] usb 3-1: config 0 descriptor?? [ 1444.340488][ T10] usb 5-1: can't set config #0, error -71 [ 1444.366762][ T5957] usb 3-1: can't set config #0, error -71 [ 1444.379747][ T10] usb 5-1: USB disconnect, device number 101 [ 1444.385684][T23127] fuse: Bad value for 'fd' [ 1444.408215][ T5957] usb 3-1: USB disconnect, device number 108 [ 1444.505924][T23134] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4988'. [ 1446.454351][T23151] xt_recent: Unsupported userspace flags (000000de) [ 1449.138701][T23219] FAULT_INJECTION: forcing a failure. [ 1449.138701][T23219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.197347][T23219] CPU: 0 UID: 0 PID: 23219 Comm: syz.7.5006 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1449.197375][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1449.197385][T23219] Call Trace: [ 1449.197393][T23219] [ 1449.197400][T23219] dump_stack_lvl+0x189/0x250 [ 1449.197425][T23219] ? __pfx____ratelimit+0x10/0x10 [ 1449.197450][T23219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1449.197467][T23219] ? __pfx__printk+0x10/0x10 [ 1449.197488][T23219] ? __might_fault+0xb0/0x130 [ 1449.197520][T23219] should_fail_ex+0x414/0x560 [ 1449.197544][T23219] _copy_from_user+0x2d/0xb0 [ 1449.197563][T23219] ___sys_sendmsg+0x158/0x2a0 [ 1449.197585][T23219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1449.197637][T23219] ? __fget_files+0x2a/0x420 [ 1449.197652][T23219] ? __fget_files+0x3a0/0x420 [ 1449.197676][T23219] __x64_sys_sendmsg+0x19b/0x260 [ 1449.197698][T23219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1449.197727][T23219] ? __pfx_ksys_write+0x10/0x10 [ 1449.197746][T23219] ? rcu_is_watching+0x15/0xb0 [ 1449.197769][T23219] ? do_syscall_64+0xbe/0x3b0 [ 1449.197788][T23219] do_syscall_64+0xfa/0x3b0 [ 1449.197803][T23219] ? lockdep_hardirqs_on+0x9c/0x150 [ 1449.197826][T23219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.197842][T23219] ? clear_bhb_loop+0x60/0xb0 [ 1449.197862][T23219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.197876][T23219] RIP: 0033:0x7ff6d6b8e929 [ 1449.197891][T23219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1449.197905][T23219] RSP: 002b:00007ff6d79a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1449.197924][T23219] RAX: ffffffffffffffda RBX: 00007ff6d6db5fa0 RCX: 00007ff6d6b8e929 [ 1449.197937][T23219] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1449.197948][T23219] RBP: 00007ff6d79a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.197959][T23219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.197969][T23219] R13: 0000000000000000 R14: 00007ff6d6db5fa0 R15: 00007ffd76304e18 [ 1449.197998][T23219] [ 1449.652508][T23227] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1449.664284][T23227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1451.147394][T23249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1451.163377][T23249] bridge0: entered promiscuous mode [ 1451.172411][T23249] bridge0: port 4(macvlan2) entered blocking state [ 1451.180531][T23249] bridge0: port 4(macvlan2) entered disabled state [ 1451.188352][T23249] macvlan2: entered allmulticast mode [ 1451.194663][T23249] bridge0: entered allmulticast mode [ 1451.204503][ T30] audit: type=1326 audit(2000000760.530:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23242 comm="syz.5.5012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eb9d8e929 code=0x0 [ 1451.266197][T23249] macvlan2: left allmulticast mode [ 1451.318503][T23249] bridge0: left allmulticast mode [ 1451.371492][T23249] bridge0: left promiscuous mode [ 1451.652936][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5016'. [ 1456.846607][T15438] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1457.444309][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1457.456562][T11791] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1457.671680][T15438] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1457.692026][T15438] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.721224][T15438] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1457.739935][T15438] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1457.760304][T15438] usb 7-1: Manufacturer: syz [ 1457.766746][ T10] usb 6-1: device descriptor read/64, error -71 [ 1457.776013][T15438] usb 7-1: config 0 descriptor?? [ 1457.896686][T15438] rc_core: IR keymap rc-hauppauge not found [ 1457.912482][T23308] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5031'. [ 1457.966603][ T5917] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1458.026541][ T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1458.029324][T15438] Registered IR keymap rc-empty [ 1458.166758][ T10] usb 6-1: device descriptor read/64, error -71 [ 1458.166872][T15438] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1458.212229][ T5917] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1458.214349][T15438] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input58 [ 1458.354761][ T5917] usb 5-1: config 0 has no interface number 0 [ 1458.362624][ T5917] usb 5-1: config 0 interface 51 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1458.398968][ T5917] usb 5-1: New USB device found, idVendor=12d1, idProduct=8869, bcdDevice=3b.15 [ 1458.412225][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.420674][ T5917] usb 5-1: Product: syz [ 1458.425026][ T5917] usb 5-1: Manufacturer: syz [ 1458.429974][ T5917] usb 5-1: SerialNumber: syz [ 1458.468021][ T10] usb usb6-port1: attempt power cycle [ 1458.557373][ T5917] usb 5-1: config 0 descriptor?? [ 1458.676914][ T5917] huawei_cdc_ncm 5-1:0.51: CDC Union missing and no IAD found [ 1458.684817][ T5917] huawei_cdc_ncm 5-1:0.51: bind() failure [ 1458.906843][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1458.969508][ T5924] usb 7-1: USB disconnect, device number 64 [ 1458.977343][ T10] usb 6-1: device descriptor read/8, error -71 [ 1459.025405][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5029'. [ 1459.298070][ T10] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1459.806651][ T10] usb 6-1: device descriptor read/8, error -71 [ 1459.942622][ T10] usb usb6-port1: unable to enumerate USB device [ 1460.156888][T23336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1460.421917][ T10] usb 5-1: USB disconnect, device number 102 [ 1461.106168][T23339] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5041'. [ 1461.266994][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1461.575970][T23343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.608240][T23343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.338617][ T5957] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1462.628539][ T5957] usb 6-1: Using ep0 maxpacket: 32 [ 1462.797018][ T5957] usb 6-1: config 0 has an invalid interface number: 36 but max is 0 [ 1462.805149][ T5957] usb 6-1: config 0 has no interface number 0 [ 1462.826122][ T5957] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 1462.835656][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.843872][ T5957] usb 6-1: Product: syz [ 1462.848310][ T5957] usb 6-1: Manufacturer: syz [ 1462.852926][ T5957] usb 6-1: SerialNumber: syz [ 1462.877281][ T5957] usb 6-1: config 0 descriptor?? [ 1462.999186][T23351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5044'. [ 1463.014317][T23351] openvswitch: netlink: Flow key attr not present in new flow. [ 1463.466636][T15438] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1463.686856][ T5957] cx82310_eth 6-1:0.36: probe with driver cx82310_eth failed with error -71 [ 1463.719738][ T5957] cxacru 6-1:0.36: usbatm_usb_probe: bind failed: -19! [ 1463.728567][T23366] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5050'. [ 1463.752814][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'. [ 1463.766242][T23366] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5050'. [ 1463.775674][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'. [ 1463.785114][ T5957] usb 6-1: USB disconnect, device number 77 [ 1463.796703][T23366] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5050'. [ 1464.006851][T15438] usb 7-1: Using ep0 maxpacket: 32 [ 1464.017226][T15438] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.029653][T15438] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.041556][T15438] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1464.062088][T15438] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1464.078215][T15438] usb 7-1: Product: syz [ 1464.084912][T15438] usb 7-1: Manufacturer: syz [ 1464.207592][T15438] hub 7-1:4.0: USB hub found [ 1464.401733][T15438] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 1465.389481][T23386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.336980][T23391] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5056'. [ 1466.461181][ T5924] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1466.518762][ T5845] usb 7-1: USB disconnect, device number 65 [ 1466.856816][ T5924] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 1466.994149][ T5924] usb 5-1: config 0 has no interface number 0 [ 1467.026547][ T5924] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1467.144808][ T5924] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1467.162496][ T5924] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1467.171926][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.196034][ T5924] usb 5-1: Product: syz [ 1467.214137][ T5924] usb 5-1: Manufacturer: syz [ 1467.233095][ T5924] usb 5-1: SerialNumber: syz [ 1467.237570][T23405] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1467.256051][ T5924] usb 5-1: config 0 descriptor?? [ 1467.265398][ T5924] ums-karma 5-1:0.46: USB Mass Storage device detected [ 1467.325407][T23410] netlink: 'syz.7.5063': attribute type 1 has an invalid length. [ 1467.341602][ T5924] ums-karma 5-1:0.46: probe with driver ums-karma failed with error -5 [ 1467.552539][T23420] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5066'. [ 1468.407041][T23432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1468.837051][ T5924] usb 5-1: USB disconnect, device number 103 [ 1469.292669][T23441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1469.316544][ T5910] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1469.613486][T16736] Bluetooth: hci5: Frame reassembly failed (-84) [ 1469.660621][T23442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5075'. [ 1470.043940][T23451] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5074'. [ 1470.103115][ T5910] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1470.113536][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.136011][ T5910] usb 7-1: config 0 descriptor?? [ 1470.489270][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.620425][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.924864][ T5957] usb 7-1: USB disconnect, device number 66 [ 1470.958462][T23459] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5078'. [ 1471.013232][T23462] netlink: 'syz.5.5079': attribute type 10 has an invalid length. [ 1471.154896][T23467] netlink: 332 bytes leftover after parsing attributes in process `syz.7.5082'. [ 1471.184369][T23467] netlink: 'syz.7.5082': attribute type 9 has an invalid length. [ 1471.195337][T23467] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5082'. [ 1471.207670][T23467] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5082'. [ 1471.383000][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5085'. [ 1471.467170][ T5957] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1471.656784][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1471.694553][ T5957] usb 6-1: device descriptor read/64, error -71 [ 1471.760434][T10053] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1472.981382][ T5957] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1473.060474][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5089'. [ 1473.079790][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5089'. [ 1473.140543][ T5957] usb 6-1: device descriptor read/64, error -71 [ 1473.169079][T23488] netlink: 'syz.4.5088': attribute type 1 has an invalid length. [ 1473.257073][ T5957] usb usb6-port1: attempt power cycle [ 1473.306593][ T5972] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1473.383683][T23499] syzkaller0: entered promiscuous mode [ 1473.406797][T23499] syzkaller0: entered allmulticast mode [ 1473.486616][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 1473.501749][ T5972] usb 5-1: config 8 has an invalid interface number: 28 but max is 0 [ 1473.526569][ T5972] usb 5-1: config 8 has no interface number 0 [ 1473.543527][ T5972] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 1473.566616][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.574655][ T5972] usb 5-1: Product: syz [ 1473.586529][ T5972] usb 5-1: Manufacturer: syz [ 1473.591270][ T5972] usb 5-1: SerialNumber: syz [ 1473.610891][ T5972] go7007 5-1:8.28: probe with driver go7007 failed with error -12 [ 1473.635242][ T5957] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1473.831623][ T5972] usb 5-1: USB disconnect, device number 104 [ 1473.988922][ T5957] usb 6-1: device descriptor read/8, error -71 [ 1474.230271][ T5957] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1474.499730][ T5957] usb 6-1: device not accepting address 81, error -71 [ 1474.519319][ T5957] usb usb6-port1: unable to enumerate USB device [ 1476.261289][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1476.379683][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1476.523263][ T5972] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1476.692427][ T5972] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1476.720484][ T5972] usb 5-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 1476.733818][ T5972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1476.747172][ T5972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1476.766556][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.774909][ T5972] usb 5-1: Product: ṱ밋픚鑓呫á§ä“±ì䉶⌱敹䱲å¦ì§‡Ë¯ì°¹ï´¦Ñžî ‚ì¼æ´¢ì¥–ë¿ç¥¨áŽ’䉑墀鹻윤땛зꦤ啠ᄫ頦䦖葜餆䎦ш羑悿呋㑉淋너쥑ë‰áŒê”¯è”¿í‡£ë‰–לּ룠ç“푞㿡౪궪質íŸê‘¦é’딟ﺀ觧礎庤ꨲ駟᳥瑫輪紊㭑頥뗕゛晃ê¦à±æ¥˜ã†¬ [ 1476.816065][ T5972] usb 5-1: Manufacturer: 胛澀粊῕લæºåž¡Ù—鯨쮾儔땟å³í–ᴠ둛쑳　局ꇳ뗖⊪蜭䌸켛㋨嘓ãˆä¿²ë¶¾îž—ã é¨¶â¬£âƒä±° [ 1476.832489][ T5972] usb 5-1: SerialNumber: Л [ 1476.912196][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5104'. [ 1476.921674][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5104'. [ 1477.067087][T23529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.075820][T23529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.111448][ T5972] usb 5-1: 0:2 : does not exist [ 1477.134088][ T5972] usb 5-1: USB disconnect, device number 105 [ 1477.718443][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5105'. [ 1480.847578][T23554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.516895][ T5972] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1481.570359][T23581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1481.581355][T23581] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1481.594074][T23581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1481.687444][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 1481.720066][ T5972] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1481.758242][ T5972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1482.165757][ T5972] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1482.183407][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.200981][ T5972] usb 5-1: config 0 descriptor?? [ 1482.360072][T23591] xt_connbytes: Forcing CT accounting to be enabled [ 1482.367094][T23591] Cannot find set identified by id 0 to match [ 1483.085965][T23570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.276209][T23570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.413559][T23601] netlink: 'syz.2.5123': attribute type 15 has an invalid length. [ 1483.446247][T23601] 8021q: VLANs not supported on ip6_vti0 [ 1483.459190][T23601] netlink: 'syz.2.5123': attribute type 10 has an invalid length. [ 1483.895681][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5122'. [ 1483.908522][T23602] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5122'. [ 1483.931500][T23600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1484.495872][ T5972] logitech 0003:046D:C286.0018: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.4-1/input0 [ 1484.530809][ T5972] logitech 0003:046D:C286.0018: no inputs found [ 1484.578016][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.584785][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.587047][ T5957] usb 5-1: USB disconnect, device number 106 [ 1484.634537][T23600] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5124'. [ 1485.918374][ T30] audit: type=1804 audit(2000000795.320:1231): pid=23621 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.5130" name="/newroot/368/file0" dev="tmpfs" ino=1979 res=1 errno=0 [ 1485.939090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.955219][T23621] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5130'. [ 1486.335545][T23627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1486.362151][T23627] netlink: 120 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1486.390410][T23627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1486.448443][T23629] fuse: Unknown parameter 'user_i00000000000000000000' [ 1488.810789][T16736] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1489.542369][T23659] FAULT_INJECTION: forcing a failure. [ 1489.542369][T23659] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.643471][T23659] CPU: 0 UID: 0 PID: 23659 Comm: syz.2.5141 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1489.643499][T23659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1489.643511][T23659] Call Trace: [ 1489.643520][T23659] [ 1489.643529][T23659] dump_stack_lvl+0x189/0x250 [ 1489.643560][T23659] ? __pfx____ratelimit+0x10/0x10 [ 1489.643585][T23659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.643604][T23659] ? __pfx__printk+0x10/0x10 [ 1489.643632][T23659] ? __pfx___might_resched+0x10/0x10 [ 1489.643656][T23659] should_fail_ex+0x414/0x560 [ 1489.643685][T23659] should_failslab+0xa8/0x100 [ 1489.643712][T23659] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1489.643737][T23659] ? smk_parse_smack+0x1b1/0x1f0 [ 1489.643755][T23659] ? lockdep_hardirqs_on+0x9c/0x150 [ 1489.643784][T23659] kstrndup+0x80/0x160 [ 1489.643805][T23659] smk_parse_smack+0x1b1/0x1f0 [ 1489.643828][T23659] smk_import_entry+0x20/0x1d0 [ 1489.643850][T23659] smk_fill_rule+0xb6/0x630 [ 1489.643876][T23659] smk_parse_long_rule+0xbc3/0xee0 [ 1489.643905][T23659] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 1489.643943][T23659] smk_write_rules_list+0x239/0x370 [ 1489.643969][T23659] ? __pfx_smk_write_change_rule+0x10/0x10 [ 1489.643996][T23659] vfs_write+0x27b/0xa90 [ 1489.644028][T23659] ? __pfx_vfs_write+0x10/0x10 [ 1489.644052][T23659] ? __fget_files+0x2a/0x420 [ 1489.644074][T23659] ? __fget_files+0x3a0/0x420 [ 1489.644088][T23659] ? __fget_files+0x2a/0x420 [ 1489.644114][T23659] ksys_write+0x145/0x250 [ 1489.644139][T23659] ? __pfx_ksys_write+0x10/0x10 [ 1489.644158][T23659] ? rcu_is_watching+0x15/0xb0 [ 1489.644183][T23659] ? do_syscall_64+0xbe/0x3b0 [ 1489.644203][T23659] do_syscall_64+0xfa/0x3b0 [ 1489.644218][T23659] ? lockdep_hardirqs_on+0x9c/0x150 [ 1489.644241][T23659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.644258][T23659] ? clear_bhb_loop+0x60/0xb0 [ 1489.644279][T23659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.644296][T23659] RIP: 0033:0x7efc9338e929 [ 1489.644309][T23659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1489.644321][T23659] RSP: 002b:00007efc94130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1489.644336][T23659] RAX: ffffffffffffffda RBX: 00007efc935b5fa0 RCX: 00007efc9338e929 [ 1489.644345][T23659] RDX: 000000000000001d RSI: 0000200000000880 RDI: 0000000000000003 [ 1489.644354][T23659] RBP: 00007efc94130090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.644361][T23659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.644371][T23659] R13: 0000000000000000 R14: 00007efc935b5fa0 R15: 00007fff33b3fa08 [ 1489.644401][T23659] [ 1490.935824][T23673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1491.206665][ T5957] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1491.651898][T23680] __nla_validate_parse: 1 callbacks suppressed [ 1491.651917][T23680] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5148'. [ 1491.900540][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 1491.907953][ T5957] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1491.922227][ T5957] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1491.933093][ T5957] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1491.942368][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 1491.953696][ T5957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1491.964152][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1491.978566][ T5957] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1491.987998][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.543703][ T5957] usb 3-1: config 0 descriptor?? [ 1492.551323][T23668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1492.765259][T23696] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1492.779765][T23668] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1492.792306][ T5957] usb 3-1: USB disconnect, device number 109 [ 1494.130389][ T5910] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1494.564613][ T5910] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1494.638028][ T5910] usb 6-1: config 0 has no interface number 0 [ 1494.663041][T23706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1494.885408][ T5910] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1495.019625][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.040336][ T5910] usb 6-1: config 0 descriptor?? [ 1495.105621][ T5910] cp210x 6-1:0.1: cp210x converter detected [ 1495.386823][ T5910] cp210x 6-1:0.1: failed to get vendor val 0x370b size 1: -32 [ 1495.414487][ T5910] cp210x 6-1:0.1: querying part number failed [ 1495.577861][ T5910] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1496.851192][T23731] netlink: 'syz.2.5164': attribute type 10 has an invalid length. [ 1496.865916][T23732] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1496.884147][T23731] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1496.895947][T23732] netlink: 'syz.6.5165': attribute type 2 has an invalid length. [ 1496.906049][T23732] netlink: 'syz.6.5165': attribute type 1 has an invalid length. [ 1496.926924][T23732] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1496.973236][T23732] netlink: 'syz.6.5165': attribute type 16 has an invalid length. [ 1496.981702][T23732] netlink: 'syz.6.5165': attribute type 3 has an invalid length. [ 1496.990479][T23732] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1497.001841][T23734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.154723][T23738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5160'. [ 1497.253665][T23739] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1497.376920][ T5845] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1497.760576][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 1497.986482][ T5845] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1498.023811][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1498.026266][ T5924] usb 6-1: USB disconnect, device number 82 [ 1498.172405][ T5845] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1498.185741][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.204265][ T5845] usb 7-1: Product: syz [ 1498.204314][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1498.214420][ T5845] usb 7-1: Manufacturer: syz [ 1498.228656][ T5845] usb 7-1: SerialNumber: syz [ 1498.242694][ T5845] usb 7-1: config 0 descriptor?? [ 1498.250110][ T5845] usb 7-1: no audio or video endpoints found [ 1498.264588][ T5924] cp210x 6-1:0.1: device disconnected [ 1500.099005][ T5845] usb 7-1: USB disconnect, device number 67 [ 1500.446076][T23767] loop6: detected capacity change from 0 to 7 [ 1500.454726][T23767] Dev loop6: unable to read RDB block 7 [ 1500.686790][T23767] loop6: AHDI p1 p2 p3 p4 [ 1501.027435][T23767] loop6: partition table partially beyond EOD, truncated [ 1501.042329][T23767] loop6: p1 start 926365495 is beyond EOD, truncated [ 1501.050215][T23767] loop6: p2 size 47 extends beyond EOD, truncated [ 1501.061887][T23767] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1501.169301][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1501.350402][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031556000: rx timeout, send abort [ 1501.746667][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1501.753641][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1501.771849][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1501.781212][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.789305][ T10] usb 6-1: Product: syz [ 1501.793592][ T10] usb 6-1: Manufacturer: syz [ 1501.798432][ T10] usb 6-1: SerialNumber: syz [ 1501.808716][ T10] usb 6-1: config 0 descriptor?? [ 1501.823300][ T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1501.851581][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031554800: rx timeout, send abort [ 1501.860149][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031556000: abort rx timeout. Force session deactivation [ 1501.896631][ T5845] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1502.359900][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031554800: abort rx timeout. Force session deactivation [ 1502.868435][T23192] usb 6-1: Failed to submit usb control message: -110 [ 1502.875984][T23192] usb 6-1: unable to send the bmi data to the device: -110 [ 1502.896252][T23192] usb 6-1: unable to get target info from device [ 1502.897259][ T5845] usb 7-1: Using ep0 maxpacket: 16 [ 1502.905229][T23192] usb 6-1: could not get target info (-110) [ 1502.916035][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.934923][T23192] usb 6-1: could not probe fw (-110) [ 1503.052385][T23192] Bluetooth: hci5: Frame reassembly failed (-84) [ 1503.074129][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.096350][ T5845] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1503.109708][ T5845] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1503.118922][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.130043][ T5845] usb 7-1: config 0 descriptor?? [ 1503.211139][T23806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1503.287283][T23808] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5185'. [ 1503.647431][T23781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.698773][T23781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.789195][ T5972] usb 6-1: USB disconnect, device number 83 [ 1504.823422][ T5845] usbhid 7-1:0.0: can't add hid device: -71 [ 1504.841392][ T5845] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1505.072033][ T5845] usb 7-1: USB disconnect, device number 68 [ 1505.106519][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1505.114925][T10053] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1506.009721][T23836] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1506.667745][ T5972] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1507.117772][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 1507.126127][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.150940][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.174793][ T5972] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1507.207320][ T5972] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1507.225779][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.243754][ T5972] usb 5-1: config 0 descriptor?? [ 1507.300524][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5196'. [ 1507.459232][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5195'. [ 1507.964856][ T5972] microsoft 0003:045E:07DA.0019: report_id 0 is invalid [ 1507.973228][ T5972] microsoft 0003:045E:07DA.0019: item 0 4 1 8 parsing failed [ 1507.981592][ T5972] microsoft 0003:045E:07DA.0019: parse failed [ 1507.988033][ T5972] microsoft 0003:045E:07DA.0019: probe with driver microsoft failed with error -22 [ 1508.086870][ T5924] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1508.342366][ T5845] usb 5-1: USB disconnect, device number 107 [ 1508.524947][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 1509.596551][ T5924] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 1509.613675][T23856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1509.616548][ T5924] usb 3-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 1509.646495][ T5924] usb 3-1: config 0 has no interface number 0 [ 1509.656526][ T5924] usb 3-1: config 0 interface 98 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1509.744251][ T5924] usb 3-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=27.80 [ 1509.759869][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.805100][T23859] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5199'. [ 1509.893162][ T5924] usb 3-1: Product: syz [ 1510.036132][ T5924] usb 3-1: Manufacturer: syz [ 1510.069117][ T5924] usb 3-1: SerialNumber: syz [ 1510.211752][ T5924] usb 3-1: config 0 descriptor?? [ 1510.229276][ T5924] pl2303 3-1:0.98: required endpoints missing [ 1510.341950][ T5924] usb 3-1: USB disconnect, device number 110 [ 1512.359396][ T5972] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1512.388552][ T5845] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1512.516660][ T5972] usb 7-1: Using ep0 maxpacket: 16 [ 1512.532493][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.544625][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.545399][T23890] netlink: 'syz.5.5208': attribute type 8 has an invalid length. [ 1512.555638][ T5972] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1512.555716][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.561092][ T5972] usb 7-1: config 0 descriptor?? [ 1512.721374][ T5845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1512.820488][ T5845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1512.872075][T23893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1512.881379][T23893] openvswitch: netlink: Flow key attr not present in new flow. [ 1513.366897][ T5845] usb 5-1: string descriptor 0 read error: -22 [ 1513.373417][ T5845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1513.394377][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.436211][ T5845] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1513.443630][ T5972] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 1513.466083][ T5845] cdc_ncm 5-1:1.0: bind() failure [ 1513.492416][ T5845] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1513.927904][ T5845] cdc_ncm 5-1:1.1: bind() failure [ 1514.008731][ T5845] usb 5-1: USB disconnect, device number 108 [ 1514.025221][T23901] FAULT_INJECTION: forcing a failure. [ 1514.025221][T23901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.047197][T23901] CPU: 0 UID: 0 PID: 23901 Comm: syz.2.5211 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1514.047224][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1514.047234][T23901] Call Trace: [ 1514.047242][T23901] [ 1514.047250][T23901] dump_stack_lvl+0x189/0x250 [ 1514.047274][T23901] ? __pfx____ratelimit+0x10/0x10 [ 1514.047297][T23901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.047315][T23901] ? __pfx__printk+0x10/0x10 [ 1514.047343][T23901] should_fail_ex+0x414/0x560 [ 1514.047371][T23901] _copy_to_user+0x31/0xb0 [ 1514.047392][T23901] simple_read_from_buffer+0xe1/0x170 [ 1514.047421][T23901] proc_fail_nth_read+0x1df/0x250 [ 1514.047441][T23901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.047462][T23901] ? rw_verify_area+0x258/0x650 [ 1514.047483][T23901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.047502][T23901] vfs_read+0x1fd/0x980 [ 1514.047529][T23901] ? __pfx___mutex_lock+0x10/0x10 [ 1514.047547][T23901] ? __pfx_vfs_read+0x10/0x10 [ 1514.047570][T23901] ? __fget_files+0x2a/0x420 [ 1514.047591][T23901] ? __fget_files+0x3a0/0x420 [ 1514.047606][T23901] ? __fget_files+0x2a/0x420 [ 1514.047631][T23901] ksys_read+0x145/0x250 [ 1514.047655][T23901] ? __pfx_ksys_read+0x10/0x10 [ 1514.047674][T23901] ? rcu_is_watching+0x15/0xb0 [ 1514.047699][T23901] ? do_syscall_64+0xbe/0x3b0 [ 1514.047718][T23901] do_syscall_64+0xfa/0x3b0 [ 1514.047732][T23901] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.047754][T23901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.047770][T23901] ? clear_bhb_loop+0x60/0xb0 [ 1514.047789][T23901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.047805][T23901] RIP: 0033:0x7efc9338d33c [ 1514.047823][T23901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1514.047838][T23901] RSP: 002b:00007efc94130030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1514.047858][T23901] RAX: ffffffffffffffda RBX: 00007efc935b5fa0 RCX: 00007efc9338d33c [ 1514.047870][T23901] RDX: 000000000000000f RSI: 00007efc941300a0 RDI: 0000000000000004 [ 1514.047881][T23901] RBP: 00007efc94130090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.047893][T23901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.047903][T23901] R13: 0000000000000000 R14: 00007efc935b5fa0 R15: 00007fff33b3fa08 [ 1514.047933][T23901] [ 1514.537069][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1514.882647][ T5845] usb 7-1: USB disconnect, device number 69 [ 1515.017742][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1515.123250][T23918] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1515.561433][ T30] audit: type=1326 audit(2000000824.960:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23924 comm="syz.4.5220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bd478e929 code=0x0 [ 1516.356825][T23933] netlink: 4452 bytes leftover after parsing attributes in process `syz.6.5221'. [ 1516.550314][T23940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1517.916284][T23946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1517.925618][T23946] openvswitch: netlink: Flow key attr not present in new flow. [ 1518.246031][T23952] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5225'. [ 1519.279066][T23964] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1519.286061][T23964] overlayfs: failed to set xattr on upper [ 1519.376980][T23964] overlayfs: ...falling back to redirect_dir=nofollow. [ 1519.427344][T23964] overlayfs: ...falling back to metacopy=off. [ 1519.578693][T23960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5229'. [ 1519.740020][T23964] overlayfs: ...falling back to index=off. [ 1519.767212][T23964] overlayfs: ...falling back to uuid=null. [ 1521.819529][ T1036] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1522.270473][T24004] syz.6.5239 uses old SIOCAX25GETINFO [ 1523.012638][T24011] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5240'. [ 1523.022217][T24011] openvswitch: netlink: Flow key attr not present in new flow. [ 1523.440460][T24017] x_tables: duplicate underflow at hook 3 [ 1524.160799][T24026] binder: BINDER_SET_CONTEXT_MGR already set [ 1524.166999][T24026] binder: 24025:24026 ioctl 4018620d 200000000040 returned -16 [ 1524.210740][T24028] netlink: 'syz.7.5247': attribute type 1 has an invalid length. [ 1524.218715][T24028] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5247'. [ 1526.427578][T24040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1526.717112][T24045] netlink: 720 bytes leftover after parsing attributes in process `syz.6.5253'. [ 1526.726325][T24045] netlink: 2616 bytes leftover after parsing attributes in process `syz.6.5253'. [ 1527.021745][T24055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5258'. [ 1527.216822][ T5845] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 1527.394861][ T5845] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1527.458888][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1527.572979][ T5845] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1527.687542][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1527.798428][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1527.899858][ T5845] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1527.943727][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1528.006544][ T5845] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1528.080958][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1528.160437][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1528.286259][ T5845] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.296623][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1528.312578][ T5845] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1528.324320][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1528.995967][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1529.011335][ T5845] usb 3-1: string descriptor 0 read error: -22 [ 1529.018103][ T5845] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1529.027231][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.043378][ T5845] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1529.315710][T24072] 9pnet: Found fid 0 not clunked [ 1529.926586][ T5845] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1530.441999][ T5924] usb 3-1: USB disconnect, device number 111 [ 1530.560483][T24069] vlan2: entered promiscuous mode [ 1530.735554][ T5845] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1530.749275][ T5845] usb 5-1: no configurations [ 1530.753939][ T5845] usb 5-1: can't read configurations, error -22 [ 1532.252447][T24107] loop9: detected capacity change from 0 to 8 [ 1532.278509][T24107] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1532.297530][T24107] loop9: partition table partially beyond EOD, truncated [ 1532.304706][T24107] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1532.864298][T24118] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5277'. [ 1533.741376][ T5972] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1534.085771][ T5972] usb 6-1: Using ep0 maxpacket: 32 [ 1534.321145][ T5972] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1534.330904][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.494047][ T5972] usb 6-1: config 0 descriptor?? [ 1534.512175][T24142] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5284'. [ 1534.521541][T24142] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5284'. [ 1534.530838][T24142] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5284'. [ 1534.590356][T24141] delete_channel: no stack [ 1534.717261][ T5972] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1534.752148][ T5972] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1534.776468][ T5972] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1535.771772][T24170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1536.544257][T24170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1536.756468][T24170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1536.794351][T24170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5296'. [ 1538.406565][ T5924] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1538.468246][ T30] audit: type=1326 audit(2000000847.870:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1538.614300][ T5924] usb 3-1: device descriptor read/64, error -71 [ 1538.626575][ T30] audit: type=1326 audit(2000000847.870:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1538.696646][ T30] audit: type=1326 audit(2000000847.870:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1539.364085][ T30] audit: type=1326 audit(2000000847.870:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1539.385766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.539477][ T5924] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1539.746818][ T30] audit: type=1326 audit(2000000847.870:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1539.768603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.889867][ T30] audit: type=1326 audit(2000000847.870:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1540.040302][ T5924] usb 3-1: device descriptor read/64, error -71 [ 1540.091979][ T30] audit: type=1326 audit(2000000847.870:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1540.148391][ T30] audit: type=1326 audit(2000000847.910:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1540.499380][ T5924] usb usb3-port1: attempt power cycle [ 1540.711041][ T30] audit: type=1326 audit(2000000847.910:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1540.732713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.909011][ T30] audit: type=1326 audit(2000000847.910:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24208 comm="syz.7.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff6d6b8e929 code=0x7ffc0000 [ 1541.062022][T24232] FAULT_INJECTION: forcing a failure. [ 1541.062022][T24232] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.154745][T24232] CPU: 0 UID: 0 PID: 24232 Comm: syz.6.5313 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1541.154772][T24232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1541.154781][T24232] Call Trace: [ 1541.154788][T24232] [ 1541.154796][T24232] dump_stack_lvl+0x189/0x250 [ 1541.154822][T24232] ? __pfx____ratelimit+0x10/0x10 [ 1541.154845][T24232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1541.154864][T24232] ? __pfx__printk+0x10/0x10 [ 1541.154892][T24232] ? ref_tracker_alloc+0x318/0x460 [ 1541.154919][T24232] should_fail_ex+0x414/0x560 [ 1541.154945][T24232] should_failslab+0xa8/0x100 [ 1541.154968][T24232] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1541.154987][T24232] ? skb_clone+0x212/0x3a0 [ 1541.155007][T24232] skb_clone+0x212/0x3a0 [ 1541.155026][T24232] __netlink_deliver_tap+0x404/0x850 [ 1541.155056][T24232] ? netlink_deliver_tap+0x2e/0x1b0 [ 1541.155083][T24232] netlink_deliver_tap+0x19c/0x1b0 [ 1541.155102][T24232] netlink_unicast+0x72f/0x8d0 [ 1541.155129][T24232] netlink_sendmsg+0x805/0xb30 [ 1541.155151][T24232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1541.155173][T24232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1541.155197][T24232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1541.155432][T24232] __sock_sendmsg+0x21c/0x270 [ 1541.155470][T24232] ____sys_sendmsg+0x505/0x830 [ 1541.155541][T24232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1541.155574][T24232] ? import_iovec+0x74/0xa0 [ 1541.155639][T24232] ___sys_sendmsg+0x21f/0x2a0 [ 1541.155662][T24232] ? __pfx____sys_sendmsg+0x10/0x10 [ 1541.155758][T24232] ? __fget_files+0x2a/0x420 [ 1541.155780][T24232] ? __fget_files+0x3a0/0x420 [ 1541.155804][T24232] __x64_sys_sendmsg+0x19b/0x260 [ 1541.155825][T24232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1541.155851][T24232] ? __pfx_ksys_write+0x10/0x10 [ 1541.155871][T24232] ? rcu_is_watching+0x15/0xb0 [ 1541.155894][T24232] ? do_syscall_64+0xbe/0x3b0 [ 1541.155915][T24232] do_syscall_64+0xfa/0x3b0 [ 1541.155929][T24232] ? lockdep_hardirqs_on+0x9c/0x150 [ 1541.155949][T24232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.155966][T24232] ? clear_bhb_loop+0x60/0xb0 [ 1541.155985][T24232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.156000][T24232] RIP: 0033:0x7fc38278e929 [ 1541.156016][T24232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.156030][T24232] RSP: 002b:00007fc383610038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1541.156047][T24232] RAX: ffffffffffffffda RBX: 00007fc3829b5fa0 RCX: 00007fc38278e929 [ 1541.156058][T24232] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1541.156068][T24232] RBP: 00007fc383610090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.156078][T24232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.156086][T24232] R13: 0000000000000000 R14: 00007fc3829b5fa0 R15: 00007fff9f8342f8 [ 1541.156111][T24232] [ 1541.161304][T24235] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1541.559005][T24239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1541.566361][T24239] IPv6: NLM_F_CREATE should be set when creating new route [ 1541.573736][T24239] IPv6: NLM_F_CREATE should be set when creating new route [ 1541.580992][T24239] IPv6: NLM_F_CREATE should be set when creating new route [ 1541.596679][T24235] overlayfs: failed to set xattr on upper [ 1541.606395][T24246] program syz.6.5318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1541.619786][T24235] overlayfs: ...falling back to redirect_dir=nofollow. [ 1541.772008][T24235] overlayfs: ...falling back to metacopy=off. [ 1541.841316][T24235] overlayfs: ...falling back to index=off. [ 1541.884145][T24235] overlayfs: ...falling back to uuid=null. [ 1542.078854][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5321'. [ 1542.147127][T24259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.204997][T24264] loop6: detected capacity change from 0 to 524287999 [ 1543.107089][T24273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.115790][T24273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.596725][ T5917] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1543.759326][ T5917] usb 7-1: device descriptor read/64, error -71 [ 1543.997321][ T5917] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1544.136709][ T5917] usb 7-1: device descriptor read/64, error -71 [ 1545.248749][ T5917] usb usb7-port1: attempt power cycle [ 1545.656815][ T5917] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1545.667063][ T5924] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1545.715401][ T5917] usb 7-1: device descriptor read/8, error -71 [ 1545.985872][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.363902][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 1546.615110][T24300] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x31384142, 8, 0, 0, 0) [ 1546.625662][ T5924] usb 5-1: config 254 has an invalid interface number: 167 but max is 0 [ 1546.771253][ T5924] usb 5-1: config 254 has no interface number 0 [ 1546.807854][ T5924] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1546.834519][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.865076][ T5924] usb 5-1: Product: syz [ 1546.873101][ T5924] usb 5-1: Manufacturer: syz [ 1546.892307][ T5924] usb 5-1: SerialNumber: syz [ 1546.992031][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5336'. [ 1547.036676][T24305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1548.073469][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5332'. [ 1548.311997][ T5924] mxuport 5-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1548.360637][ T5924] mxuport 5-1:254.167: probe with driver mxuport failed with error -5 [ 1548.461935][ T5924] usb 5-1: USB disconnect, device number 111 [ 1548.481438][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1548.481457][ T30] audit: type=1326 audit(2000000857.880:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.540984][ T30] audit: type=1326 audit(2000000857.880:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.574383][T24320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5341'. [ 1548.583911][T24320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1548.610438][ T30] audit: type=1326 audit(2000000857.880:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.634966][ T30] audit: type=1326 audit(2000000857.880:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.684282][ T30] audit: type=1326 audit(2000000857.880:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.708462][ T30] audit: type=1326 audit(2000000857.880:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.741129][ T30] audit: type=1326 audit(2000000857.890:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1548.939619][T24333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5344'. [ 1549.207301][T10053] Bluetooth: hci3: command 0x0405 tx timeout [ 1549.381286][ T30] audit: type=1326 audit(2000000857.890:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1549.405170][ T30] audit: type=1326 audit(2000000857.890:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1549.445564][ T30] audit: type=1326 audit(2000000857.890:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24317 comm="syz.2.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1549.544467][ T5955] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1549.746666][ T5955] usb 7-1: device descriptor read/64, error -71 [ 1549.917529][T24349] fuse: Bad value for 'fd' [ 1550.135553][ T5955] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1550.187697][ T5924] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1550.260631][T24356] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5353'. [ 1550.277048][ T5955] usb 7-1: device descriptor read/64, error -71 [ 1550.347391][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 1550.366145][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1550.381596][ T5924] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1550.401382][ T5955] usb usb7-port1: attempt power cycle [ 1550.426806][ T5924] usb 3-1: config 1 has no interface number 1 [ 1550.455849][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1550.487434][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.495476][ T5924] usb 3-1: Product: syz [ 1550.669485][T24370] Invalid source name [ 1550.689670][ T5924] usb 3-1: Manufacturer: syz [ 1550.694998][ T5924] usb 3-1: SerialNumber: syz [ 1550.766705][ T5955] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1550.810584][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5355'. [ 1551.372824][ T5955] usb 7-1: device descriptor read/8, error -71 [ 1551.461413][ T5924] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1551.552345][ T5924] usb 3-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 1551.589649][ T5924] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1551.636860][ T5955] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1551.935658][ T5924] usb 3-1: USB disconnect, device number 115 [ 1551.950599][ T5955] usb 7-1: device descriptor read/8, error -71 [ 1552.262271][ T5955] usb usb7-port1: unable to enumerate USB device [ 1553.122809][T23192] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1553.226159][T24392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5365'. [ 1553.872280][ T5955] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1554.393753][T24400] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1555.341465][T24379] bond_slave_0: entered promiscuous mode [ 1555.355627][T24379] bond_slave_1: entered promiscuous mode [ 1555.378416][T24379] vlan2: entered promiscuous mode [ 1555.383588][T24379] bond0: entered promiscuous mode [ 1556.444874][ T5955] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1556.476609][ T5955] usb 7-1: no configurations [ 1556.481278][ T5955] usb 7-1: can't read configurations, error -22 [ 1556.979784][T24430] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5375'. [ 1557.391849][T24434] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 1558.174762][T24446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1558.346501][ T5955] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1558.559157][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1559.281990][ T5955] usb 3-1: not running at top speed; connect to a high speed hub [ 1559.340977][ T5955] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1559.367529][ T5955] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1559.455921][ T5955] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 1559.490118][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.536703][ T5955] usb 3-1: Product: syz [ 1559.541163][ T5955] usb 3-1: Manufacturer: syz [ 1559.545897][ T5955] usb 3-1: SerialNumber: syz [ 1559.976667][T24390] Bluetooth: hci3: command 0x0405 tx timeout [ 1560.673335][ T5955] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input61 [ 1560.737709][ T5193] bcm5974 3-1:1.0: could not read from device [ 1560.766575][ T5193] bcm5974 3-1:1.0: could not read from device [ 1560.811729][ T5193] bcm5974 3-1:1.0: could not read from device [ 1560.823631][ T5955] usb 3-1: USB disconnect, device number 116 [ 1560.855050][ T5193] bcm5974 3-1:1.0: could not read from device [ 1561.335310][T24472] fuse: Bad value for 'fd' [ 1562.419468][T24481] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1562.431833][T24481] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1563.339026][T24493] netlink: 332 bytes leftover after parsing attributes in process `syz.7.5396'. [ 1563.348607][T24493] netlink: 'syz.7.5396': attribute type 9 has an invalid length. [ 1563.361494][T24493] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5396'. [ 1563.371915][T24493] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5396'. [ 1565.365269][T24534] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5408'. [ 1566.496664][ T5917] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1567.046578][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 1567.056355][ T5917] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1567.069114][ T5917] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1567.078583][ T5917] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1567.088727][ T5917] usb 7-1: Product: syz [ 1567.093044][ T5917] usb 7-1: Manufacturer: syz [ 1567.100236][ T5917] usb 7-1: SerialNumber: syz [ 1567.311778][ T5917] usb 7-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1567.326818][ T5917] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1567.395481][ T5917] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1567.788423][T24546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5414'. [ 1567.815971][ T5917] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 1567.849208][ T5917] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1567.876708][ T5917] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1567.891256][ T5917] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1567.904186][ T5917] usb 7-1: USB disconnect, device number 80 [ 1567.913952][ T5917] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1567.932056][ T5917] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1567.944267][ T5917] visor 7-1:1.0: device disconnected [ 1567.945624][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5426'. [ 1567.983150][T24576] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1568.190411][T24581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.279857][T24583] FAULT_INJECTION: forcing a failure. [ 1568.279857][T24583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.317740][T24583] CPU: 1 UID: 0 PID: 24583 Comm: syz.4.5429 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1568.317768][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1568.317779][T24583] Call Trace: [ 1568.317787][T24583] [ 1568.317795][T24583] dump_stack_lvl+0x189/0x250 [ 1568.317818][T24583] ? __pfx____ratelimit+0x10/0x10 [ 1568.317835][T24583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.317845][T24583] ? __pfx__printk+0x10/0x10 [ 1568.317858][T24583] ? __might_fault+0xb0/0x130 [ 1568.317877][T24583] should_fail_ex+0x414/0x560 [ 1568.317893][T24583] _copy_from_user+0x2d/0xb0 [ 1568.317906][T24583] ___sys_sendmsg+0x158/0x2a0 [ 1568.317926][T24583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1568.317978][T24583] ? __fget_files+0x2a/0x420 [ 1568.317993][T24583] ? __fget_files+0x3a0/0x420 [ 1568.318018][T24583] __x64_sys_sendmsg+0x19b/0x260 [ 1568.318041][T24583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1568.318071][T24583] ? __pfx_ksys_write+0x10/0x10 [ 1568.318099][T24583] ? do_syscall_64+0xbe/0x3b0 [ 1568.318114][T24583] do_syscall_64+0xfa/0x3b0 [ 1568.318122][T24583] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.318136][T24583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.318145][T24583] ? clear_bhb_loop+0x60/0xb0 [ 1568.318157][T24583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.318166][T24583] RIP: 0033:0x7f5bd478e929 [ 1568.318176][T24583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.318185][T24583] RSP: 002b:00007f5bd56cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1568.318196][T24583] RAX: ffffffffffffffda RBX: 00007f5bd49b5fa0 RCX: 00007f5bd478e929 [ 1568.318204][T24583] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1568.318210][T24583] RBP: 00007f5bd56cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.318216][T24583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.318222][T24583] R13: 0000000000000000 R14: 00007f5bd49b5fa0 R15: 00007ffffc11f988 [ 1568.318238][T24583] [ 1568.980335][T24596] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5434'. [ 1569.001594][T24593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5435'. [ 1569.015021][T24596] overlay: Unknown parameter 'pcr' [ 1570.271964][T24622] veth1_macvtap: left promiscuous mode [ 1570.277747][T24622] macsec0: entered allmulticast mode [ 1570.288758][T24622] veth1_macvtap: entered promiscuous mode [ 1570.294655][T24622] veth1_macvtap: entered allmulticast mode [ 1570.301210][T24622] macsec0: left allmulticast mode [ 1570.306266][T24622] veth1_macvtap: left allmulticast mode [ 1571.694878][T24638] kAFS: No cell specified [ 1571.700182][T24639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1571.773799][T24643] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5452'. [ 1572.068285][T24645] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5449'. [ 1573.542193][T24673] could not allocate digest TFM handle poly1305-generic [ 1573.791056][T24695] xt_hashlimit: Unknown mode mask FF80, kernel too old? [ 1574.189735][T24704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1575.622775][T24711] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5471'. [ 1576.125328][T24718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1576.172058][T24720] netlink: 'syz.2.5478': attribute type 1 has an invalid length. [ 1576.181023][T24720] netlink: 'syz.2.5478': attribute type 3 has an invalid length. [ 1576.194632][T24720] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5478'. [ 1577.700354][T24731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1578.056906][T24735] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1579.676951][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1579.676970][ T30] audit: type=1804 audit(2000000889.070:1291): pid=24757 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.5488" name="/newroot/190/file0" dev="tmpfs" ino=1023 res=1 errno=0 [ 1580.216595][ T5955] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1580.357727][ T5955] usb 7-1: device descriptor read/64, error -71 [ 1581.014264][ T5955] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1581.326498][ T5955] usb 7-1: device descriptor read/64, error -71 [ 1581.475548][ T5955] usb usb7-port1: attempt power cycle [ 1581.478286][ T30] audit: type=1326 audit(2000000890.880:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.509462][ T30] audit: type=1326 audit(2000000890.900:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.531850][ T30] audit: type=1326 audit(2000000890.900:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.554296][ T30] audit: type=1326 audit(2000000890.900:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.577362][ T30] audit: type=1326 audit(2000000890.900:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.616576][ T30] audit: type=1326 audit(2000000890.900:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.658913][ T30] audit: type=1326 audit(2000000890.900:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.706557][ T30] audit: type=1326 audit(2000000890.900:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.755602][ T30] audit: type=1326 audit(2000000890.900:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24785 comm="syz.2.5498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc9338e929 code=0x7ffc0000 [ 1581.986984][ T5955] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1582.072762][ T5955] usb 7-1: device descriptor read/8, error -71 [ 1582.456695][ T5955] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1582.499727][ T5955] usb 7-1: device descriptor read/8, error -71 [ 1582.609999][ T5955] usb usb7-port1: unable to enumerate USB device [ 1583.265435][T24806] loop6: detected capacity change from 0 to 524287999 [ 1585.520986][T23187] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1586.642772][T24865] IPVS: Unknown mcast interface: pimreg1 [ 1587.978030][T24876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5531'. [ 1587.995912][T24883] mkiss: ax0: crc mode is auto. [ 1588.538501][ T5845] kernel write not supported for file /input/event0 (pid: 5845 comm: kworker/0:3) [ 1588.866770][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1588.866787][ T30] audit: type=1326 audit(2000000898.260:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24894 comm="syz.6.5538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc38278e929 code=0x0 [ 1590.135188][T24937] vlan2: entered allmulticast mode [ 1590.140658][T24937] bond0: entered allmulticast mode [ 1590.145805][T24937] bond_slave_0: entered allmulticast mode [ 1590.161614][T24937] bond_slave_1: entered allmulticast mode [ 1591.404521][T24954] sp0: Synchronizing with TNC [ 1593.649442][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5569'. [ 1595.235896][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5590'. [ 1596.446714][T16829] ------------[ cut here ]------------ [ 1596.452745][T16829] WARNING: CPU: 1 PID: 16829 at kernel/softirq.c:387 __local_bh_enable_ip+0x180/0x1c0 [ 1596.462321][T16829] Modules linked in: [ 1596.466678][T16829] CPU: 1 UID: 0 PID: 16829 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1596.477369][T16829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1596.487443][T16829] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1596.493473][T16829] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 ed a0 8f 80 e1 07 80 c1 03 38 [ 1596.513100][T16829] RSP: 0018:ffffc9000b6474c0 EFLAGS: 00010046 [ 1596.519172][T16829] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 1596.527133][T16829] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89d750a3 [ 1596.535093][T16829] RBP: ffffc9000b647548 R08: ffff8880b873bd83 R09: 1ffff110170e77b0 [ 1596.543065][T16829] R10: dffffc0000000000 R11: ffffed10170e77b1 R12: ffff8880b873bd80 [ 1596.551032][T16829] R13: ffff88804722df70 R14: dffffc0000000000 R15: 1ffff920016c8e98 [ 1596.559005][T16829] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1596.568017][T16829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1596.574678][T16829] CR2: 00007ffffffff000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1596.582645][T16829] Call Trace: [ 1596.585924][T16829] [ 1596.588849][T16829] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1596.594579][T16829] ? do_raw_spin_unlock+0x122/0x240 [ 1596.599860][T16829] ? rt_set_nexthop+0x693/0xa80 [ 1596.604759][T16829] rt_set_nexthop+0x693/0xa80 [ 1596.609432][T16829] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1596.615594][T16829] ? ip_route_output_key_hash+0xde/0x2e0 [ 1596.621220][T16829] ip_route_output_key_hash+0x1b9/0x2e0 [ 1596.626770][T16829] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1596.632839][T16829] ? make_kuid+0x1d9/0x680 [ 1596.637263][T16829] ? lockdep_unlock+0x89/0x120 [ 1596.642046][T16829] ? __pfx_make_kuid+0x10/0x10 [ 1596.646806][T16829] ip_route_output_flow+0x2a/0x150 [ 1596.651926][T16829] rxrpc_init_peer+0x50a/0xc60 [ 1596.656713][T16829] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1596.662008][T16829] ? __lock_acquire+0xab9/0xd20 [ 1596.666869][T16829] ? do_raw_spin_lock+0x121/0x290 [ 1596.671908][T16829] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1596.677283][T16829] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1596.682748][T16829] rxrpc_new_incoming_call+0x612/0x14f0 [ 1596.688307][T16829] rxrpc_io_thread+0x18b2/0x2cd0 [ 1596.693240][T16829] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1596.698368][T16829] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1596.703653][T16829] ? do_raw_spin_lock+0x121/0x290 [ 1596.708694][T16829] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1596.714608][T16829] ? __kthread_parkme+0x1a1/0x200 [ 1596.719637][T16829] kthread+0x711/0x8a0 [ 1596.723714][T16829] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1596.728995][T16829] ? __pfx_kthread+0x10/0x10 [ 1596.733583][T16829] ? _raw_spin_unlock_irq+0x23/0x50 [ 1596.738784][T16829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1596.743977][T16829] ? __pfx_kthread+0x10/0x10 [ 1596.748571][T16829] ret_from_fork+0x3fc/0x770 [ 1596.753180][T16829] ? __pfx_ret_from_fork+0x10/0x10 [ 1596.758315][T16829] ? __switch_to_asm+0x39/0x70 [ 1596.763176][T16829] ? __switch_to_asm+0x33/0x70 [ 1596.767941][T16829] ? __pfx_kthread+0x10/0x10 [ 1596.772551][T16829] ret_from_fork_asm+0x1a/0x30 [ 1596.777346][T16829] [ 1596.780388][T16829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1596.787671][T16829] CPU: 1 UID: 0 PID: 16829 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1596.798252][T16829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1596.808300][T16829] Call Trace: [ 1596.811579][T16829] [ 1596.814506][T16829] dump_stack_lvl+0x99/0x250 [ 1596.819134][T16829] ? __asan_memcpy+0x40/0x70 [ 1596.823812][T16829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1596.829000][T16829] ? __pfx__printk+0x10/0x10 [ 1596.833602][T16829] panic+0x2db/0x790 [ 1596.837506][T16829] ? __pfx_panic+0x10/0x10 [ 1596.842261][T16829] ? show_trace_log_lvl+0x4fb/0x550 [ 1596.847469][T16829] ? ret_from_fork_asm+0x1a/0x30 [ 1596.852409][T16829] __warn+0x31b/0x4b0 [ 1596.856382][T16829] ? __local_bh_enable_ip+0x180/0x1c0 [ 1596.861752][T16829] ? __local_bh_enable_ip+0x180/0x1c0 [ 1596.867120][T16829] report_bug+0x2be/0x4f0 [ 1596.871447][T16829] ? __local_bh_enable_ip+0x180/0x1c0 [ 1596.876812][T16829] ? __local_bh_enable_ip+0x180/0x1c0 [ 1596.882172][T16829] ? __local_bh_enable_ip+0x182/0x1c0 [ 1596.887551][T16829] handle_bug+0x84/0x160 [ 1596.891808][T16829] exc_invalid_op+0x1a/0x50 [ 1596.896318][T16829] asm_exc_invalid_op+0x1a/0x20 [ 1596.901169][T16829] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1596.907152][T16829] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 ed a0 8f 80 e1 07 80 c1 03 38 [ 1596.926770][T16829] RSP: 0018:ffffc9000b6474c0 EFLAGS: 00010046 [ 1596.932860][T16829] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001 [ 1596.940847][T16829] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89d750a3 [ 1596.948835][T16829] RBP: ffffc9000b647548 R08: ffff8880b873bd83 R09: 1ffff110170e77b0 [ 1596.956810][T16829] R10: dffffc0000000000 R11: ffffed10170e77b1 R12: ffff8880b873bd80 [ 1596.964777][T16829] R13: ffff88804722df70 R14: dffffc0000000000 R15: 1ffff920016c8e98 [ 1596.972758][T16829] ? rt_set_nexthop+0x693/0xa80 [ 1596.977612][T16829] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1596.983331][T16829] ? do_raw_spin_unlock+0x122/0x240 [ 1596.988529][T16829] ? rt_set_nexthop+0x693/0xa80 [ 1596.993371][T16829] rt_set_nexthop+0x693/0xa80 [ 1596.998047][T16829] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1597.004124][T16829] ? ip_route_output_key_hash+0xde/0x2e0 [ 1597.009764][T16829] ip_route_output_key_hash+0x1b9/0x2e0 [ 1597.015310][T16829] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1597.021375][T16829] ? make_kuid+0x1d9/0x680 [ 1597.025786][T16829] ? lockdep_unlock+0x89/0x120 [ 1597.030542][T16829] ? __pfx_make_kuid+0x10/0x10 [ 1597.035299][T16829] ip_route_output_flow+0x2a/0x150 [ 1597.040410][T16829] rxrpc_init_peer+0x50a/0xc60 [ 1597.045211][T16829] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1597.050498][T16829] ? __lock_acquire+0xab9/0xd20 [ 1597.055346][T16829] ? do_raw_spin_lock+0x121/0x290 [ 1597.060370][T16829] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1597.065734][T16829] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1597.071209][T16829] rxrpc_new_incoming_call+0x612/0x14f0 [ 1597.077308][T16829] rxrpc_io_thread+0x18b2/0x2cd0 [ 1597.082276][T16829] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1597.087421][T16829] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1597.092711][T16829] ? do_raw_spin_lock+0x121/0x290 [ 1597.097746][T16829] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1597.103653][T16829] ? __kthread_parkme+0x1a1/0x200 [ 1597.108676][T16829] kthread+0x711/0x8a0 [ 1597.112743][T16829] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1597.118023][T16829] ? __pfx_kthread+0x10/0x10 [ 1597.122611][T16829] ? _raw_spin_unlock_irq+0x23/0x50 [ 1597.127893][T16829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1597.133118][T16829] ? __pfx_kthread+0x10/0x10 [ 1597.137704][T16829] ret_from_fork+0x3fc/0x770 [ 1597.142290][T16829] ? __pfx_ret_from_fork+0x10/0x10 [ 1597.147490][T16829] ? __switch_to_asm+0x39/0x70 [ 1597.152250][T16829] ? __switch_to_asm+0x33/0x70 [ 1597.157005][T16829] ? __pfx_kthread+0x10/0x10 [ 1597.161645][T16829] ret_from_fork_asm+0x1a/0x30 [ 1597.166420][T16829] [ 1597.169680][T16829] Kernel Offset: disabled [ 1597.173997][T16829] Rebooting in 86400 seconds..