last executing test programs: 15.484069153s ago: executing program 3 (id=1101): syz_io_uring_setup(0x3a65, 0x0, &(0x7f0000000100), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 13.194967238s ago: executing program 3 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 9.652116577s ago: executing program 0 (id=1112): r0 = socket$tipc(0x1e, 0x5, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) dup(r0) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) creat(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8004}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xd}, 0x94) mount$fuseblk(&(0x7f0000000140), 0x0, 0x0, 0x2000000, 0x0) 8.554229249s ago: executing program 2 (id=1115): socket$inet6_mptcp(0xa, 0x1, 0x106) lseek(0xffffffffffffffff, 0xff, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x8, &(0x7f0000000900)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet(0x2, 0x6, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x1, 0x0, &(0x7f0000000880)=[{}], 0x0, 0x0, &(0x7f0000000340), 0x4, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0)}) getpid() setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={@remote, @local}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x200}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) prlimit64(0x0, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x110, 0x150, 0x150, 0x110, 0xf8010000, 0x430, 0x238, 0x238, 0x430, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0x0, 0xff000000], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x8, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x30, 0x0, [{0x1, 0xf0, 0x4, 0x2ea}, {0x5b4f, 0xba, 0x0, 0x1}, {0x2, 0x9, 0xb, 0x7fffffff}, {0xd0b0, 0x7, 0x10, 0x81}, {0x8000, 0xb7, 0x50, 0x5}, {0x3, 0x0, 0x3, 0xf}, {0x0, 0xfb, 0x50, 0x801}, {0x3ff, 0xfb, 0xd, 0xfffff000}, {0x6, 0x6, 0x80, 0x3}, {0x3, 0xe, 0x9, 0x4}, {0x9, 0x14, 0x0, 0x18}, {0x4, 0x1, 0xa, 0xa4}, {0x500, 0xa0, 0xfc, 0x80000000}, {0x4, 0x7, 0x5, 0x5c43}, {0x0, 0x8, 0x5, 0x3}, {0x8dc, 0x1, 0x7f, 0xffffffa2}, {0x7, 0x84, 0x7f, 0x7}, {0x400, 0xa7, 0x40}, {0x7, 0x3, 0x65, 0x5}, {0x800, 0x4, 0x6, 0xb}, {0x7e3, 0x5, 0x16, 0x5}, {0x1, 0x40, 0x71, 0x73}, {0x7f, 0x80, 0x8, 0x166}, {0x29, 0xd3, 0x3e, 0xf}, {0x8000, 0x9, 0x89, 0x81}, {0x0, 0xc, 0x3a, 0x3}, {0x6f3, 0x8d, 0x2d, 0xff3}, {0x2, 0xd, 0x6, 0x2}, {0x9, 0x96, 0x5, 0x400}, {0xcc5e, 0x5, 0xa8, 0x8}, {0xfe01, 0xf, 0x7, 0x7fff}, {0x1, 0x6, 0x63, 0x5}, {0x4, 0xf1, 0x9, 0x40}, {0x2, 0x81, 0x9, 0x70}, {0xa, 0x45, 0xe, 0x7ff}, {0x1, 0x7, 0xb, 0xbd16}, {0x4, 0x1, 0x7, 0x1}, {0x2, 0x0, 0x7, 0x8000}, {0xf3f, 0x2, 0x6, 0x1}, {0x7, 0x5c, 0x2, 0x2}, {0xe9, 0x4e, 0x4, 0xc00}, {0x0, 0x5, 0xff, 0x9}, {0xf, 0xe2, 0x40, 0x7fffffff}, {0xc, 0x5, 0x8, 0x5}, {0xfff, 0xc4, 0x0, 0xefc}, {0xc2f, 0xfb, 0x4c, 0x3}, {0xd8, 0x6, 0x8, 0x7}, {0x7, 0xf4, 0x2, 0x73faed7e}, {0x6, 0x4, 0x2d, 0x3c}, {0x5, 0x80, 0x9, 0x8}, {0x1, 0x10, 0x1, 0x9}, {0xfff7, 0xff, 0x2a, 0xfffffffc}, {0x595, 0x1, 0xb, 0xffffffff}, {0xa, 0x6, 0x7, 0x5}, {0x3, 0x5, 0x6}, {0x8, 0x4, 0x2, 0xee4}, {0x7, 0x1, 0x9, 0x7cb7}, {0x7, 0x2, 0xff, 0xdd}, {0x8001, 0x8, 0x3, 0x2}, {0x101, 0x2, 0xd, 0x3}, {0x0, 0xf7, 0x12, 0x8001}, {0x4, 0x80, 0x8, 0x2}, {0x4, 0x40, 0x1, 0x1}, {0x7f, 0xb, 0x4, 0x8}], {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 7.540319763s ago: executing program 4 (id=1116): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x8, 0x80000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 6.958056024s ago: executing program 1 (id=1117): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 6.895002977s ago: executing program 0 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, 0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x15, 0x5, 0x0) 6.457032599s ago: executing program 2 (id=1119): syz_io_uring_setup(0x3a65, 0x0, &(0x7f0000000100), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 6.34027159s ago: executing program 1 (id=1120): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x3, 0xc, 0x2, 0x0, 0x5}}) ioctl$sock_ifreq(r4, 0x8910, 0x0) ioctl$sock_netdev_private(r4, 0x8949, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x10000000}, 0x20000000) 6.141529841s ago: executing program 4 (id=1121): ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x10001}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x454080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='fuseblk\x00', 0x1000000, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4, 0x0, 0x0, 0x400], [0xfb, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x1}, {0x0, 0xffffffff}, {}, {0x0, 0x1, 0x0, 0x1}, {0x0, 0x3}, {}, {0x10001}, {}, {}, {0xfffffffd}, {0x0, 0x4000000}]}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4, 0x0, 0x0, 0x400], [0xfb, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x1}, {0x0, 0xffffffff}, {}, {0x0, 0x1, 0x0, 0x1}, {0x0, 0x3}, {}, {0x10001}, {}, {}, {0xfffffffd}, {0x0, 0x4000000}]}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$xdp(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, 0x2, r3, 0x40}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="ad8b9bf40f1342f1f1466edd5f336a75dce84e5181456cffe9e6a5388547d5d4d60c95ba692fed950f5dc26bdd2b16716566a23c55e7f8107f4f9448648a603b4542d477b0183cf10293ed51d8c6caeee372c7182667bd87370c6db4690681aa5b5baaf65ba8b810028f07714831098fc479069cf4c3c8f0c7c35f3a1db74b857caa8d9afe6b1ca19606fdab0f128af56e157a660ac66f45defc3c54923e4030a302c5c8f237e06c3636cd0c731215e9703d4e9eae894f6ebbd9081ef45ec5dbd827b352032a88b07657cfb404fb11e52ef2af82b9235907025624d21f8527f91d58d494bb8e3742116d9bfdf66767", 0xef}, {&(0x7f0000000400)="f38e014d504a79e79d1178d6ee307c97c346dc7d776df14f3c410bda0767547a68f7a5f3ec9ae637e2c947a60de686ee38d633f00037924debf2c5c24d7b40444313067f313be63dbb5e2b8c8ae0966e6ab791349ab5babb5c25c4f291d719c80d15300262f45aed24f5e8aac2104dd273d78c2d0c3a6a99ec20da86ed3e1ecb055614e0e1f32501ab2d5f698486c4b52f3aa61b5576bed8013a72227a7dacca7c351ddaa747ee87d0919492a0e3705fde4caf8c059a143c4e5cfd07", 0xbc}], 0x2, 0x0, 0x0, 0x40002}, 0x0) (async) sendmsg$xdp(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, 0x2, r3, 0x40}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="ad8b9bf40f1342f1f1466edd5f336a75dce84e5181456cffe9e6a5388547d5d4d60c95ba692fed950f5dc26bdd2b16716566a23c55e7f8107f4f9448648a603b4542d477b0183cf10293ed51d8c6caeee372c7182667bd87370c6db4690681aa5b5baaf65ba8b810028f07714831098fc479069cf4c3c8f0c7c35f3a1db74b857caa8d9afe6b1ca19606fdab0f128af56e157a660ac66f45defc3c54923e4030a302c5c8f237e06c3636cd0c731215e9703d4e9eae894f6ebbd9081ef45ec5dbd827b352032a88b07657cfb404fb11e52ef2af82b9235907025624d21f8527f91d58d494bb8e3742116d9bfdf66767", 0xef}, {&(0x7f0000000400)="f38e014d504a79e79d1178d6ee307c97c346dc7d776df14f3c410bda0767547a68f7a5f3ec9ae637e2c947a60de686ee38d633f00037924debf2c5c24d7b40444313067f313be63dbb5e2b8c8ae0966e6ab791349ab5babb5c25c4f291d719c80d15300262f45aed24f5e8aac2104dd273d78c2d0c3a6a99ec20da86ed3e1ecb055614e0e1f32501ab2d5f698486c4b52f3aa61b5576bed8013a72227a7dacca7c351ddaa747ee87d0919492a0e3705fde4caf8c059a143c4e5cfd07", 0xbc}], 0x2, 0x0, 0x0, 0x40002}, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x1001f400004, 0x8, 0x13}}) 5.127244357s ago: executing program 3 (id=1122): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pread64(r0, &(0x7f0000003940)=""/162, 0xa2, 0x5) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830272440b95c66d0aa091c738b41f76df43c9498d47f3d35a56205f4c1050cabb8cfd44814884bee33f0131915ac98d983f3cf39715100f932bc657d764c61dd2bb28be0b1a88aa08d2d0bc3d7347506ac629d201098307f21becdf4d9010a4cf9e378b4395a6ca9d83f6a4736351addb590ae9d0ef3fd92ee454850d4a696df0d89ac33d168e985397049904e345d3858d002c5aeee3158fe9936f57a3977b528cd8869848842ef4d398e440c7e37d02c183e3721d261476ea0ef14a39e8853f6826e505d18395f39819d216899ecfea721f134e735d02b1c1951aea0e16f633806c068ced90983f356a50fa23f3402c7abd4a776983880ffd711e9973c7b286c208d59ba5d46132d73a68c135ffe894d36f04c80b7ef620f952d80d189e02b2365cb3abeacf4c767b26d2594fd3be7fe78de02163a9d3633f0eeaa47018f3203a256eb8fb1e56f2159c839964bc178fe2003bbed31ae0efcbb565f62512880ed2837e74b8226060e6a79c0bfe7390af286c902209556a971b3c1b7687a16be5684b209b9a766da9e2b9b6f72215d3ff3f91794b1787332679fe9da9d85cc419e8ad8ecab8812f1c467", 0x26e}], 0x1}}], 0x1, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003f00)=0x14) sendmmsg$inet(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000000c0)="60032f320822", 0x6}, {&(0x7f0000000180)="d08df74414f911844744d177bb4ffe4ceae88685a74ef9d923d8d11d0948c4642f807fa3fd0118decc60bd1aac0d4d53a5c118408fff9a33e4449eeb661a560d0ac8ac65c653d21f62b0d6e6a43324abb44b001b3a50ffe072bc0106008f730bece57b9b9a864623cfd227c1d6220c789299f80a06c0ac78d8770fb7a5c7cd2c1e8d81137cd54d72d11798850714c1b89589b67e91e808ffdf8f8a8059e0047d7cb5b6082adbd3195a249653caef52b4ff6eabbc092ea150119adcd2dfd7288a010d490f5d0144f752690586d6d0b03aa75f1346d7ce", 0xd6}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000002c0)="fab1b93db92c4b8d1fcc1f96d93136c247491a79fa7917f78720afa45d26cd471e600a4de6d0cc1e979488ab82608896f3f917ae8c74fc62200c2ff39231913d55833a7a827f5cf6fe5b92077cf21835613d779b0d302bb672494dc38a335b78f8bff73694de719b49d8736ed557f148d5e46fee140ef24fcc22ce93e6a215ba281a77d6066a562215c5dbb00b6f3699ed7dc43c6dffc940c65cbee7d3c50313935400a0a4fc1ee8a70422feb02172d65406e6dc94da0bad07499954f11f35ab86ab", 0xc2}, {&(0x7f0000000100)="06aa34a7bdf9de939a818c62fcce8a371980dbf505cfafac8d42af06f67d", 0x1e}, {&(0x7f00000003c0)="5eed83a6eee8d099b62f9110d49a0f04aadf915f11a5cb32f2d88787c0059880c7feed415e27f2dd09e067475558298892b2705bfab151dd4fc0b89ab87a950f3765e48cc79b8f6ab51642a9eb5987c28c73bc21a47a37e75550b42d3aae972910272a1cabb81f535d86d3b94db9a22ca17088071da80aa3de798e685edb1175573c858cfdd95d1bcc49013b0c423bfd", 0x90}, {&(0x7f0000000540)="fb2a766f9f82f0b2c10d021fda7db335df00928c7721fcb10d5d621ff3e44e0208f5d60f442a39fe6bc73b7dc7baa3ab2c4ae9d724d34aa2ff38e9041487789cd6c15c29a561", 0x46}, {&(0x7f0000000480)="deab37a166a2c6b7b2dc72b21f2b83c6526fbc4a632e3b4d8e80ed465c3bd83543c7624cd5534f79d8ad9179d443c119db", 0x31}, {&(0x7f00000019c0)="ed5f4bbd6486604907e04fcfddf7213e68af164ee44933916c26141657388cf606e6eebac03ca89ef6d9416625c2a8e15854296cde5c35305aff2a62eba90b89f213081cbc1d983c3c19cf921d70874e0e65ae242d0e4ece10e5c61c5516c7f2a37c0d035bbeb2fb60401b3d571486df37692a223984cb8a44d607a542a8ce5b6829149b82c278835dd08e1e9640999475dfef955de1b9d5a20b982a2620ecffa73487136aef99af7ffc265dcdd344f35d6fa14f6f2494", 0xb7}], 0x9}}, {{&(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000680)="df17aef46b6eb99d81d561207471eee7cc6d1ee003dd6456aeb784a871ec5a996b91b3c60452b46b8bd59b48bb298486bcf609c81ae449bddf3435e7ae", 0x3d}, {&(0x7f0000001b40)="7f61a4dc77496db520fac7f10a2b4ec497061539d2275764b827d6e877143c25a85b834a2ff47d9f8de4208f78a12a1c3659f0d429011ec07b2377678b8e516a23d0c0c5b540a594956510b5a07cd8dec11274", 0x53}], 0x2, &(0x7f0000001c00)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x7, 0xa, "95d01d7e8c63db5b"}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xef, [@broadcast, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x88, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101]}, @rr={0x7, 0x13, 0x38, [@broadcast, @multicast1, @local, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x6e, 0x3, 0xd, [{@rand_addr=0x64010101, 0xf8c4}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x44, 0xd, "0fe4668165638bd8a85e67"}, @generic={0x7, 0x4, "ca5a"}, @end, @timestamp_prespec={0x44, 0x4, 0x3c}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x7, [{@private=0xa010102, 0xfffffffd}]}, @ssrr={0x89, 0x3, 0x33}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0xe, 0x0, [{0x1, 0x8, "eda8e65a3528"}]}, @timestamp_addr={0x44, 0x4, 0x30, 0x1, 0x2}]}}}], 0x138}}, {{&(0x7f0000001dc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000001e00)="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", 0xd38}], 0x1, &(0x7f0000002e40)}}, {{0x0, 0x0, &(0x7f0000003040)=[{0x0}], 0x1}}, {{&(0x7f0000003080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000036c0)=[{&(0x7f0000003180)="b6eaa9564d8b65d5c75b102cef8067b9b09b5df0a0c0da923b4866c3181a7776b32d33", 0x23}, {&(0x7f0000003200)="8018ea85cf92b9e8754949b4379c57ffa0556bab115f87464b9cee51b3eeaa66c0d3e2d191dff46928747f8b", 0x2c}, {&(0x7f0000003240)="c92430c409410dab69841c01ad5a34659ec8a55cd25173f7d75491fd9b0eff76ad1e66642e80c3d55887c46b9db35b802c79a33f488770ace64886f2d58069cba747a8fafece49e494fbb69fa9c08c57fb504f287d39b3f3e2021ff2b6b0649b5af9d65ce924d9a903d8e90c1fe1", 0x6e}, {0x0}, {&(0x7f0000003440)="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", 0xfc}, {0x0}], 0x6, &(0x7f0000003800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0x15, 0xffffffffffffffff, [{0x0, 0x2}, {0x5, 0x2}, {0x5, 0x9, "7e82db04fa4157"}, {0x5, 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xb8}}, {{&(0x7f0000003a00)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000003f80)=ANY=[], 0x1a8}}], 0x6, 0x20000004) 5.126637753s ago: executing program 1 (id=1123): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000050020000000000000020"]) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000040), 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r8, 0xd1017f9886ac4380, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x22020600) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1ff, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 4.893543983s ago: executing program 2 (id=1124): syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') (async) umount2(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x5) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000001c0)=""/53, 0x35) (async) getdents(r2, 0xfffffffffffffffd, 0x58) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES16=r3, @ANYRESDEC=r2, @ANYRESHEX=r0], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r8}, 0x20) (async) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f00000028c0)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 4.836097906s ago: executing program 0 (id=1125): symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711066000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 4.781131279s ago: executing program 4 (id=1126): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0200}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.553099806s ago: executing program 0 (id=1127): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000002380)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x2, @local}, @in={0x2, 0x4e24, @broadcast}], 0x70) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 4.4812555s ago: executing program 4 (id=1128): socket$inet6_mptcp(0xa, 0x1, 0x106) lseek(0xffffffffffffffff, 0xff, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x8, &(0x7f0000000900)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet(0x2, 0x6, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x1, 0x0, &(0x7f0000000880)=[{}], 0x0, 0x0, &(0x7f0000000340), 0x4, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0)}) getpid() setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={@remote, @local}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x200}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) prlimit64(0x0, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x110, 0x150, 0x150, 0x110, 0xf8010000, 0x430, 0x238, 0x238, 0x430, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0x0, 0xff000000], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x8, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x30, 0x0, [{0x1, 0xf0, 0x4, 0x2ea}, {0x5b4f, 0xba, 0x0, 0x1}, {0x2, 0x9, 0xb, 0x7fffffff}, {0xd0b0, 0x7, 0x10, 0x81}, {0x8000, 0xb7, 0x50, 0x5}, {0x3, 0x0, 0x3, 0xf}, {0x0, 0xfb, 0x50, 0x801}, {0x3ff, 0xfb, 0xd, 0xfffff000}, {0x6, 0x6, 0x80, 0x3}, {0x3, 0xe, 0x9, 0x4}, {0x9, 0x14, 0x0, 0x18}, {0x4, 0x1, 0xa, 0xa4}, {0x500, 0xa0, 0xfc, 0x80000000}, {0x4, 0x7, 0x5, 0x5c43}, {0x0, 0x8, 0x5, 0x3}, {0x8dc, 0x1, 0x7f, 0xffffffa2}, {0x7, 0x84, 0x7f, 0x7}, {0x400, 0xa7, 0x40}, {0x7, 0x3, 0x65, 0x5}, {0x800, 0x4, 0x6, 0xb}, {0x7e3, 0x5, 0x16, 0x5}, {0x1, 0x40, 0x71, 0x73}, {0x7f, 0x80, 0x8, 0x166}, {0x29, 0xd3, 0x3e, 0xf}, {0x8000, 0x9, 0x89, 0x81}, {0x0, 0xc, 0x3a, 0x3}, {0x6f3, 0x8d, 0x2d, 0xff3}, {0x2, 0xd, 0x6, 0x2}, {0x9, 0x96, 0x5, 0x400}, {0xcc5e, 0x5, 0xa8, 0x8}, {0xfe01, 0xf, 0x7, 0x7fff}, {0x1, 0x6, 0x63, 0x5}, {0x4, 0xf1, 0x9, 0x40}, {0x2, 0x81, 0x9, 0x70}, {0xa, 0x45, 0xe, 0x7ff}, {0x1, 0x7, 0xb, 0xbd16}, {0x4, 0x1, 0x7, 0x1}, {0x2, 0x0, 0x7, 0x8000}, {0xf3f, 0x2, 0x6, 0x1}, {0x7, 0x5c, 0x2, 0x2}, {0xe9, 0x4e, 0x4, 0xc00}, {0x0, 0x5, 0xff, 0x9}, {0xf, 0xe2, 0x40, 0x7fffffff}, {0xc, 0x5, 0x8, 0x5}, {0xfff, 0xc4, 0x0, 0xefc}, {0xc2f, 0xfb, 0x4c, 0x3}, {0xd8, 0x6, 0x8, 0x7}, {0x7, 0xf4, 0x2, 0x73faed7e}, {0x6, 0x4, 0x2d, 0x3c}, {0x5, 0x80, 0x9, 0x8}, {0x1, 0x10, 0x1, 0x9}, {0xfff7, 0xff, 0x2a, 0xfffffffc}, {0x595, 0x1, 0xb, 0xffffffff}, {0xa, 0x6, 0x7, 0x5}, {0x3, 0x5, 0x6}, {0x8, 0x4, 0x2, 0xee4}, {0x7, 0x1, 0x9, 0x7cb7}, {0x7, 0x2, 0xff, 0xdd}, {0x8001, 0x8, 0x3, 0x2}, {0x101, 0x2, 0xd, 0x3}, {0x0, 0xf7, 0x12, 0x8001}, {0x4, 0x80, 0x8, 0x2}, {0x4, 0x40, 0x1, 0x1}, {0x7f, 0xb, 0x4, 0x8}], {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 3.936856761s ago: executing program 2 (id=1129): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x7d08, &(0x7f0000000400)={0x0, 0x20000, 0x4002, 0xffffffff, 0x800003de}, 0x0, 0x0) kcmp(0x0, 0x0, 0x1, r0, r1) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r3) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (fail_nth: 4) 3.327534713s ago: executing program 1 (id=1130): socket$inet6_mptcp(0xa, 0x1, 0x106) lseek(0xffffffffffffffff, 0xff, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x8, &(0x7f0000000900)) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet(0x2, 0x6, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x1, 0x0, &(0x7f0000000880)=[{}], 0x0, 0x0, &(0x7f0000000340), 0x4, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0)}) getpid() setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={@remote, @local}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x200}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) prlimit64(0x0, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x110, 0x150, 0x150, 0x110, 0xf8010000, 0x430, 0x238, 0x238, 0x430, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0x0, 0xff000000], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x8, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x30, 0x0, [{0x1, 0xf0, 0x4, 0x2ea}, {0x5b4f, 0xba, 0x0, 0x1}, {0x2, 0x9, 0xb, 0x7fffffff}, {0xd0b0, 0x7, 0x10, 0x81}, {0x8000, 0xb7, 0x50, 0x5}, {0x3, 0x0, 0x3, 0xf}, {0x0, 0xfb, 0x50, 0x801}, {0x3ff, 0xfb, 0xd, 0xfffff000}, {0x6, 0x6, 0x80, 0x3}, {0x3, 0xe, 0x9, 0x4}, {0x9, 0x14, 0x0, 0x18}, {0x4, 0x1, 0xa, 0xa4}, {0x500, 0xa0, 0xfc, 0x80000000}, {0x4, 0x7, 0x5, 0x5c43}, {0x0, 0x8, 0x5, 0x3}, {0x8dc, 0x1, 0x7f, 0xffffffa2}, {0x7, 0x84, 0x7f, 0x7}, {0x400, 0xa7, 0x40}, {0x7, 0x3, 0x65, 0x5}, {0x800, 0x4, 0x6, 0xb}, {0x7e3, 0x5, 0x16, 0x5}, {0x1, 0x40, 0x71, 0x73}, {0x7f, 0x80, 0x8, 0x166}, {0x29, 0xd3, 0x3e, 0xf}, {0x8000, 0x9, 0x89, 0x81}, {0x0, 0xc, 0x3a, 0x3}, {0x6f3, 0x8d, 0x2d, 0xff3}, {0x2, 0xd, 0x6, 0x2}, {0x9, 0x96, 0x5, 0x400}, {0xcc5e, 0x5, 0xa8, 0x8}, {0xfe01, 0xf, 0x7, 0x7fff}, {0x1, 0x6, 0x63, 0x5}, {0x4, 0xf1, 0x9, 0x40}, {0x2, 0x81, 0x9, 0x70}, {0xa, 0x45, 0xe, 0x7ff}, {0x1, 0x7, 0xb, 0xbd16}, {0x4, 0x1, 0x7, 0x1}, {0x2, 0x0, 0x7, 0x8000}, {0xf3f, 0x2, 0x6, 0x1}, {0x7, 0x5c, 0x2, 0x2}, {0xe9, 0x4e, 0x4, 0xc00}, {0x0, 0x5, 0xff, 0x9}, {0xf, 0xe2, 0x40, 0x7fffffff}, {0xc, 0x5, 0x8, 0x5}, {0xfff, 0xc4, 0x0, 0xefc}, {0xc2f, 0xfb, 0x4c, 0x3}, {0xd8, 0x6, 0x8, 0x7}, {0x7, 0xf4, 0x2, 0x73faed7e}, {0x6, 0x4, 0x2d, 0x3c}, {0x5, 0x80, 0x9, 0x8}, {0x1, 0x10, 0x1, 0x9}, {0xfff7, 0xff, 0x2a, 0xfffffffc}, {0x595, 0x1, 0xb, 0xffffffff}, {0xa, 0x6, 0x7, 0x5}, {0x3, 0x5, 0x6}, {0x8, 0x4, 0x2, 0xee4}, {0x7, 0x1, 0x9, 0x7cb7}, {0x7, 0x2, 0xff, 0xdd}, {0x8001, 0x8, 0x3, 0x2}, {0x101, 0x2, 0xd, 0x3}, {0x0, 0xf7, 0x12, 0x8001}, {0x4, 0x80, 0x8, 0x2}, {0x4, 0x40, 0x1, 0x1}, {0x7f, 0xb, 0x4, 0x8}], {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 3.273888895s ago: executing program 4 (id=1131): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0xcbe, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000005c0)=0x14b4, 0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 2.372665033s ago: executing program 4 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.359685915s ago: executing program 2 (id=1133): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(0x0, 0x1a0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a320000000070000000050a010300000000000000000200000008000b40000000020900010073797a300000000008000a40000000030b00070066696c74657200000c000240000000"], 0x3518}}, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000040)="e1c9b7d1cf1c6f08640e7c93aaca3b432067a89458ecbda6a12c94098ecfef71016324d317d20d043ee8cedae8a74d91c692da0ca569aff7063be87f845513e990548da82a893bff5259d11b466902393a0e167719c6f5718b05c7286c2ab7cde08660eb6428cbf1facd76a6b47957a9a1a3f74251fef03ff1f096687b4c4ddfe8230aeec3aa797456e9fabea9b8828a49c9d0ab2e05c4fdc1eb72b42466df07737611741b8ad7e4e808342f1f5799dfef18d2b208c4aa3991d7c1395e081da5f6c1", 0xc2}, {&(0x7f00000002c0)="3b76a90ca26ca4aceda89009d591e2ab2787b5eea57beaf1092c46be2133fb3ce310f3bb5f23fed93bca0c1a45da6369a8b7d1b589bce0952c6b74550f897e0619e02ce9c949e56be0666c81d454189b830f8647963230febc5aa93805a7731a7bab7c8f3edbabef0ba668e30efec48935fa8d0a32f900145a352e9cb6a87df607888b4979bea2426e86c43c62bf93d0cf690552bc9543328009af953858c08d8e435e46ee5f78556345a0f0b37133a7cd30ac435e3b83a772179c8c24bb4a6b062f9ae91363eea4192c4e18c9a5a76c066ea56a92c5da5f739c4bba7ba54b59b320a9bb2c60eb", 0xe7}, {&(0x7f00000003c0)="2ea8d19bd67616d282d4af05ca37c87c29c783e484193db66c48a8a41a1aa7c7cf282c0ec6b153cf77ffebd7e8bd29e57d10bf0266757f923a63a4b718b030acf994074af6dde14e49de80e906f0b2472192f3bb94b9feb31649c272c72a486d99583888e9e3394ae89426c2e5436fcf7bbd06540085ae64053554175a4a5edb823d149fce10be1d57e1f8edb4d4b4ba4379dbbb0380fcf156df4d693d2d31deab41113fc31899c42ac004ca83840b25579459d1c8f8df4cfdaf1df8d96499299e0781f5fe61b9224ded16ddd179b88819b7c3c17672909c0b95eaabcd4a394c2442f6d4b350a6efae1f", 0xea}, {&(0x7f0000000200)}, {&(0x7f00000004c0)="623286fa91ab1683002760f1475fc984be8c274121151ede2fdfe6167e69361ac9f50985f929579df42690c0ec7551df17bdeb2f288eae1b70255ae3578b00ca6ed3ebffd8514ee8ff280c6353aab03f096377a59aa3710fdcb220b2d8b605f6c7ef9ec0d589543f25ac37cea6", 0x6d}, {&(0x7f0000000180)}, {&(0x7f0000000540)="ccdd1f206c28b6884bac6c1ea73d8eebbf277f68e9daea73cbbad9323927dde168bb04bde3373835d57463cb2a468117c77f1e1c1f4bbc40fea51abec137755d39911169748a0404445b01f0d0d672d2ae2283774ce43610de2aa4a4bd314b829a", 0x61}], 0x7, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac14141fe000000200000000b8000000000000000000000007000000070b58ac141429ac1e0001830398891794ac14141aac14143b64010102e000000100000000442409e3ac14143b000003ff7f000001000007ffac1414bb00000040ffffffff0000000001880955167b31865780830f70ac14142a7f000001ffffffff018644000000030106dace637f060c0cb783968012037f04b702111ea1406c34416cecee8709663f1644000e3ae5748a608b842a2ef7fc280108ad774d351a5502050a60d3001c000000000000000000000008000000"], 0x198}, 0x0) socket(0x21, 0x6, 0x73) open$dir(&(0x7f0000000000)='./file0\x00', 0x141040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f00000004c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000005c0)="97", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.88418683s ago: executing program 1 (id=1134): syz_io_uring_setup(0x3a65, 0x0, &(0x7f0000000100), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 1.882740532s ago: executing program 3 (id=1135): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fb, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be28", 0x2}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 1.496338469s ago: executing program 0 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) kcmp(r1, r1, 0x3, r0, r0) clock_adjtime(0x7, &(0x7f0000000100)={0xfffffffffffffffc, 0x6, 0xe1, 0x4, 0x10, 0x3, 0x20040000004, 0xffffffff00000001, 0x400, 0x2, 0x9, 0x9, 0x3ff, 0xffffffff, 0x0, 0x1fa, 0x9, 0x8d, 0x1, 0x42e6, 0x1ff, 0x1ff, 0x0, 0x20007, 0x6, 0x738}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c5331", 0x11}], 0x2}, 0x0) 325.833515ms ago: executing program 0 (id=1137): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 323.017772ms ago: executing program 2 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) kcmp(r1, r1, 0x3, r0, r0) clock_adjtime(0x7, &(0x7f0000000100)={0xfffffffffffffffc, 0x6, 0xe1, 0x4, 0x10, 0x3, 0x20040000004, 0xffffffff00000001, 0x400, 0x2, 0x9, 0x9, 0x3ff, 0xffffffff, 0x0, 0x1fa, 0x9, 0x8d, 0x1, 0x42e6, 0x1ff, 0x1ff, 0x0, 0x20007, 0x6, 0x738}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c5331", 0x11}], 0x2}, 0x0) (fail_nth: 1) 269.28987ms ago: executing program 1 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$kcm(0x2, 0x5, 0x84) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be28", 0x2}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 227.076495ms ago: executing program 3 (id=1140): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4080, 0xff0}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7, 0x0, 0x2000}, 0x80000000}], 0x4, 0x4022, 0x0) 0s ago: executing program 3 (id=1141): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000b33f00000000000010000a000000000000000000000008001a"], 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x5, @local, 0xdd}}}, 0x32) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6004000000951100fe8000000000000000000000000000bbfe8000000000000000000000000000bb00020e220064907802000000e6850000040000000d3b5237ad0b7cbbba3de7545b0c971b5f6cf33ae15f67a6c68cf86eea9be2b31b9ec6f8d1a0b6ab266bc551af8685a8caf7862ab8d847b220b44083864082ae5ca65c974a16e3e21077e62102c1a00f"], 0x0) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="25e6aa6b285a5440e94c3307ac46a9a1cf7bd93841175ca27ddfbf553340be", 0x1f, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6d42adab62d7ef9a, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f00000005c0)=""/4071, 0x0, 0x20}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x18}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000540)={0x60, 0x3, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000886000/0x3000)=nil, 0x8, &(0x7f0000000500)=[{0x7, 0x4, 0x6}], 0x1, 0x2e04, 0x3, 0x8, 0x0, 0x3f}) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r5, 0x5f, 0xce}, &(0x7f0000000300)={'enc=', 'raw', ' hash=', {'blake2b-512-generic\x00'}}, &(0x7f0000000380)="a67d9d3d1bffc979a07e1c725b88e1f69db00ae2be7dc236b472e9aa9013582b77405417e133e51bce93f21c95d149c38886905b9085ae559b5998a4489a1510938133cf71f3269cc72e494b1e6e81134a26b6d37cbaf3bc642c2e7689927e", &(0x7f0000000400)="d9ae0f88a7f56f53a2cb523e18ca2f86e913a941c8d1eed13f101095b7f1bc58573aadc0c07d53455c0ff674ffd17394e6d5fa9e8631197e64aa2f9a2edc11a14b11f54cd1e6051c5ed05e0122c54fd9b0682a81ad59ddfc761ecda7a4e1140b5111d087e150c6ff3f82ce04bf99233c06f7b3c99267aadae825f71019038ef53603a6ce2e697136a6cd220e4a4e1728dc57c6bc75dbbb2f16a0e667a3b67c4b4d0c92753c7380f0f2588c38f26d3886e02aea6f780f833fd7b123d5b6d1cf99f10355544eabba86f75d11e1d453") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r8, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001680)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005bd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006bb000/0x3000)=nil, &(0x7f0000668000/0x1000)=nil, &(0x7f0000745000/0x1000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00003ad000/0x3000)=nil, &(0x7f00000015c0)="8c4a8c3cd048bc613cf8f446433ea081b266cca1ffe05dad8b37ff01a6ab37f46da97a088ed1f908cb157afc4106c91fa0b3ed4161d400f9d4f26c25295d40bca1cee681bddc6c64d92b68376b43beec21604ca4972ac1a1da779da346758abee1ae18e1e3ffb1a95270d93e8b5fc5d5f30a49c50091e67be8ab1172f8da8e52e64dc81da4", 0x85, r8}, 0x68) kernel console output (not intermixed with test programs): 8 [ 316.512790][ T7681] RSP: 002b:00007fae1d3ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.512810][ T7681] RAX: ffffffffffffffda RBX: 00007fae1c7b6160 RCX: 00007fae1c58eb69 [ 316.512824][ T7681] RDX: 0000200000000300 RSI: 0000000000003b8c RDI: 0000000000000003 [ 316.512836][ T7681] RBP: 00007fae1d3ba090 R08: 0000000000000000 R09: 0000000000000000 [ 316.512847][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.512858][ T7681] R13: 0000000000000001 R14: 00007fae1c7b6160 R15: 00007fff632ba828 [ 316.512887][ T7681] [ 316.513936][ T7681] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.183126][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 319.669773][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 321.639075][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 321.858618][ T7736] trusted_key: encrypted_key: insufficient parameters specified [ 322.497192][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.530726][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.540909][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.896917][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 323.052453][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 323.061031][ T10] usb 2-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 323.073825][ T10] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 323.083629][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 323.096656][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.192504][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 326.311189][ T5945] usb 2-1: USB disconnect, device number 7 [ 326.798281][ T7773] net_ratelimit: 36 callbacks suppressed [ 326.798325][ T7773] netlink: zone id is out of range [ 326.809761][ T7773] netlink: zone id is out of range [ 326.815011][ T7773] netlink: zone id is out of range [ 326.820230][ T7773] netlink: zone id is out of range [ 326.825497][ T7773] netlink: zone id is out of range [ 326.831098][ T7773] netlink: zone id is out of range [ 326.836318][ T7773] netlink: zone id is out of range [ 326.841849][ T7773] netlink: zone id is out of range [ 326.847034][ T7773] netlink: zone id is out of range [ 326.852272][ T7773] netlink: zone id is out of range [ 327.900039][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 328.227554][ T7787] trusted_key: encrypted_key: insufficient parameters specified [ 329.870526][ T7800] tipc: Started in network mode [ 329.875965][ T7800] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 329.884546][ T7800] tipc: Enabled bearer , priority 10 [ 329.901486][ T7800] lo speed is unknown, defaulting to 1000 [ 329.908151][ T7800] lo speed is unknown, defaulting to 1000 [ 329.924606][ T7800] lo speed is unknown, defaulting to 1000 [ 329.963059][ T7800] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 330.074375][ T7800] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 330.208623][ T7801] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 330.256929][ T7800] lo speed is unknown, defaulting to 1000 [ 330.279037][ T7800] lo speed is unknown, defaulting to 1000 [ 330.301656][ T7800] lo speed is unknown, defaulting to 1000 [ 330.320674][ T7800] lo speed is unknown, defaulting to 1000 [ 330.341032][ T7800] lo speed is unknown, defaulting to 1000 [ 331.511677][ T24] tipc: Node number set to 10005162 [ 331.831041][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 332.661289][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 333.571383][ T24] usb 2-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 333.601004][ T24] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 333.621073][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 333.650896][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.711625][ T24] usb 2-1: can't set config #179, error -71 [ 333.747803][ T24] usb 2-1: USB disconnect, device number 8 [ 333.921105][ T7192] udevd[7192]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 334.834196][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 335.045914][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 335.241951][ T30] audit: type=1326 audit(1754027087.476:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 335.279488][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.471'. [ 335.299620][ T7848] trusted_key: encrypted_key: insufficient parameters specified [ 335.605073][ T10] usb 4-1: device descriptor read/all, error -71 [ 335.660946][ T30] audit: type=1326 audit(1754027087.486:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 335.805768][ T30] audit: type=1326 audit(1754027087.486:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 336.368460][ T30] audit: type=1326 audit(1754027087.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 336.410961][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 336.500937][ T30] audit: type=1326 audit(1754027087.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f154398d57c code=0x7ffc0000 [ 336.696287][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 337.709869][ T30] audit: type=1326 audit(1754027087.536:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 337.733878][ T30] audit: type=1326 audit(1754027087.536:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 337.760166][ T30] audit: type=1326 audit(1754027087.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 337.783140][ T30] audit: type=1326 audit(1754027087.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 337.806292][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.301465][ T30] audit: type=1326 audit(1754027087.536:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.4.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f154398eb69 code=0x7ffc0000 [ 338.463650][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 338.479113][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1048, setting to 1024 [ 339.215655][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 339.309016][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 339.422852][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.476'. [ 339.495856][ T7855] delete_channel: no stack [ 339.684534][ T10] usb 4-1: string descriptor 0 read error: -71 [ 339.697186][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.751632][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.826205][ T10] usb 4-1: can't set config #1, error -71 [ 339.882459][ T10] usb 4-1: USB disconnect, device number 12 [ 339.897362][ T7879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.479'. [ 340.067130][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 340.109431][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 341.170992][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 341.786228][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 341.808532][ T10] usb 4-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 341.828785][ T10] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 341.864019][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 341.883499][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.461064][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 343.517326][ T7905] trusted_key: encrypted_key: insufficient parameters specified [ 343.792385][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 344.203246][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.215752][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.226811][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.239559][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.628389][ T5945] usb 4-1: USB disconnect, device number 13 [ 344.850933][ T10] usb 1-1: config 0 descriptor?? [ 344.919358][ T10] hub 1-1:0.0: USB hub found [ 345.885055][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 346.005944][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 346.012200][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 346.162377][ T10] usb 1-1: USB disconnect, device number 15 [ 348.234484][ T7951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.603109][ T7958] trusted_key: encrypted_key: insufficient parameters specified [ 351.499068][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 351.921096][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 355.964663][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.518'. [ 356.162037][ T8013] trusted_key: encrypted_key: insufficient parameters specified [ 358.118491][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 358.641387][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 359.414956][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 359.621122][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 360.065307][ T5890] usb 5-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 360.081044][ T5890] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 360.090457][ T5890] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 360.100020][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.829127][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.532'. [ 363.083295][ T5890] usb 5-1: USB disconnect, device number 4 [ 363.511547][ T8071] Cannot find add_set index 0 as target [ 363.759298][ T8075] trusted_key: encrypted_key: insufficient parameters specified [ 363.886484][ T6051] udevd[6051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 363.912486][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 366.233650][ T8097] FAULT_INJECTION: forcing a failure. [ 366.233650][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 366.269688][ T8097] CPU: 0 UID: 0 PID: 8097 Comm: syz.3.543 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 366.269718][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.269745][ T8097] Call Trace: [ 366.269754][ T8097] [ 366.269764][ T8097] dump_stack_lvl+0x189/0x250 [ 366.269795][ T8097] ? __pfx____ratelimit+0x10/0x10 [ 366.269819][ T8097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.269843][ T8097] ? __pfx__printk+0x10/0x10 [ 366.269873][ T8097] ? __might_fault+0xb0/0x130 [ 366.269907][ T8097] should_fail_ex+0x414/0x560 [ 366.269936][ T8097] _copy_from_user+0x2d/0xb0 [ 366.269968][ T8097] ___sys_sendmsg+0x158/0x2a0 [ 366.270005][ T8097] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.270089][ T8097] ? __might_fault+0xb0/0x130 [ 366.270115][ T8097] __sys_sendmmsg+0x227/0x430 [ 366.270155][ T8097] ? __pfx___sys_sendmmsg+0x10/0x10 [ 366.270186][ T8097] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 366.270241][ T8097] ? ksys_write+0x22a/0x250 [ 366.270265][ T8097] ? __pfx_ksys_write+0x10/0x10 [ 366.270282][ T8097] ? rcu_is_watching+0x15/0xb0 [ 366.270314][ T8097] __x64_sys_sendmmsg+0xa0/0xc0 [ 366.270350][ T8097] do_syscall_64+0xfa/0x3b0 [ 366.270374][ T8097] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.270396][ T8097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.270418][ T8097] ? clear_bhb_loop+0x60/0xb0 [ 366.270444][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.270465][ T8097] RIP: 0033:0x7ff1fbb8eb69 [ 366.270484][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.270503][ T8097] RSP: 002b:00007ff1fcab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.270526][ T8097] RAX: ffffffffffffffda RBX: 00007ff1fbdb5fa0 RCX: 00007ff1fbb8eb69 [ 366.270542][ T8097] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000008 [ 366.270556][ T8097] RBP: 00007ff1fcab6090 R08: 0000000000000000 R09: 0000000000000000 [ 366.270569][ T8097] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 366.270582][ T8097] R13: 0000000000000000 R14: 00007ff1fbdb5fa0 R15: 00007fffe3a5b778 [ 366.270615][ T8097] [ 367.280929][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 367.454331][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 367.671341][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 367.693191][ T10] usb 1-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 367.863756][ T10] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 367.873894][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 367.883522][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.331062][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 369.080534][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 369.099840][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 369.201105][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 369.247939][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 369.267660][ T24] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 369.294448][ T24] usb 3-1: config 12 has no interface number 0 [ 369.350488][ T8132] trusted_key: encrypted_key: insufficient parameters specified [ 369.808350][ T24] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 369.847682][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 369.872952][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.895242][ T24] usb 3-1: Product: syz [ 369.933467][ T24] usb 3-1: Manufacturer: syz [ 370.046538][ T5953] usb 1-1: USB disconnect, device number 16 [ 370.055123][ T24] usb 3-1: SerialNumber: syz [ 371.082822][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.191956][ T24] usb 3-1: USB disconnect, device number 12 [ 371.443642][ T8151] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.558'. [ 372.415124][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 372.516798][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 372.611045][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 372.932213][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 372.973061][ T10] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 372.996053][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.001010][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 373.031913][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.081009][ T10] usb 1-1: config 1 has no interface number 0 [ 373.139646][ T10] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.190926][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 373.191835][ T10] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.223605][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.283565][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.299284][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.302762][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 373.329232][ T10] usb 1-1: Product: syz [ 373.447659][ T10] usb 1-1: Manufacturer: syz [ 373.457783][ T10] usb 1-1: SerialNumber: syz [ 373.470043][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.520103][ T24] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 373.630290][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.888570][ T10] cdc_wdm 1-1:1.128: skipping garbage [ 373.919836][ T10] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 373.928291][ T24] usb 5-1: Product: syz [ 373.970330][ T10] cdc_wdm 1-1:1.128: Unknown control protocol [ 373.979713][ T24] usb 5-1: Manufacturer: syz [ 374.025378][ T24] usb 5-1: SerialNumber: syz [ 374.053230][ T24] usb 5-1: config 0 descriptor?? [ 374.059482][ T8163] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 374.157704][ T5934] usb 1-1: USB disconnect, device number 17 [ 374.541880][ T24] rc_core: IR keymap rc-streamzap not found [ 374.854738][ T24] Registered IR keymap rc-empty [ 374.948137][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 375.155208][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 376.049132][ T24] usb 5-1: USB disconnect, device number 5 [ 377.405938][ T10] IPVS: starting estimator thread 0... [ 377.901044][ T8212] IPVS: using max 25 ests per chain, 60000 per kthread [ 378.357414][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 379.695953][ T9] usb 3-1: config 6 has an invalid interface number: 223 but max is 1 [ 379.727218][ T9] usb 3-1: config 6 has an invalid interface number: 168 but max is 1 [ 379.751318][ T9] usb 3-1: config 6 has no interface number 0 [ 379.757476][ T9] usb 3-1: config 6 has no interface number 1 [ 379.786817][ T9] usb 3-1: config 6 interface 223 has no altsetting 0 [ 379.813941][ T9] usb 3-1: config 6 interface 168 has no altsetting 0 [ 379.837163][ T9] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=93.a4 [ 379.870193][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.886936][ T9] usb 3-1: Product: syz [ 379.897148][ T9] usb 3-1: Manufacturer: syz [ 379.914903][ T9] usb 3-1: SerialNumber: syz [ 379.941034][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 381.130938][ T10] usb 4-1: device descriptor read/64, error -71 [ 381.359873][ T9] usb 3-1: can't set config #6, error -71 [ 381.381078][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 381.415865][ T9] usb 3-1: USB disconnect, device number 13 [ 381.683993][ T10] usb 4-1: device descriptor read/64, error -71 [ 382.007374][ T10] usb usb4-port1: attempt power cycle [ 382.363430][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 382.977092][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.583'. [ 383.012641][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 383.490512][ T10] usb 4-1: device not accepting address 16, error -71 [ 383.697533][ T5934] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 383.971694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.978103][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.004654][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 384.084032][ T5934] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 384.130949][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.167363][ T5934] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 384.169017][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 384.187271][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.197414][ T5934] usb 5-1: Product: syz [ 384.208842][ T5934] usb 5-1: Manufacturer: syz [ 384.213911][ T5934] usb 5-1: SerialNumber: syz [ 384.239815][ T5934] usb 5-1: config 0 descriptor?? [ 384.274442][ T5934] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 384.551022][ T5934] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 384.586767][ T8295] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 384.596692][ T8295] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 384.711197][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 384.748276][ T5934] usb 3-1: config 249 has an invalid interface number: 117 but max is 0 [ 384.758728][ T5934] usb 3-1: config 249 has no interface number 0 [ 384.804937][ T5934] usb 3-1: config 249 interface 117 has no altsetting 0 [ 384.866898][ T5934] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 384.877138][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.038343][ T5934] usb 3-1: Product: syz [ 385.048009][ T5934] usb 3-1: Manufacturer: syz [ 385.060858][ T5934] usb 3-1: SerialNumber: syz [ 385.583042][ T5934] ttusb_dec_send_command: command bulk message failed: error -22 [ 385.610022][ T5934] ttusb-dec 3-1:249.117: probe with driver ttusb-dec failed with error -22 [ 385.944578][ T5934] usb 3-1: USB disconnect, device number 14 [ 386.513215][ T8312] netlink: 108 bytes leftover after parsing attributes in process `syz.3.596'. [ 386.752559][ T5945] usb 5-1: USB disconnect, device number 6 [ 387.201359][ T8331] FAULT_INJECTION: forcing a failure. [ 387.201359][ T8331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.215048][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.4.600 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 387.215076][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.215089][ T8331] Call Trace: [ 387.215100][ T8331] [ 387.215109][ T8331] dump_stack_lvl+0x189/0x250 [ 387.215144][ T8331] ? __pfx____ratelimit+0x10/0x10 [ 387.215168][ T8331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.215193][ T8331] ? __pfx__printk+0x10/0x10 [ 387.215235][ T8331] should_fail_ex+0x414/0x560 [ 387.215264][ T8331] _copy_to_user+0x31/0xb0 [ 387.215298][ T8331] simple_read_from_buffer+0xe1/0x170 [ 387.215327][ T8331] proc_fail_nth_read+0x1df/0x250 [ 387.215358][ T8331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.215389][ T8331] ? rw_verify_area+0x258/0x650 [ 387.215422][ T8331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.215451][ T8331] vfs_read+0x200/0x980 [ 387.215491][ T8331] ? __pfx___mutex_lock+0x10/0x10 [ 387.215517][ T8331] ? __pfx_vfs_read+0x10/0x10 [ 387.215552][ T8331] ? __fget_files+0x2a/0x420 [ 387.215583][ T8331] ? __fget_files+0x3a0/0x420 [ 387.215606][ T8331] ? __fget_files+0x2a/0x420 [ 387.215641][ T8331] ksys_read+0x145/0x250 [ 387.215664][ T8331] ? __pfx_ksys_read+0x10/0x10 [ 387.215697][ T8331] ? do_syscall_64+0xbe/0x3b0 [ 387.215726][ T8331] do_syscall_64+0xfa/0x3b0 [ 387.215752][ T8331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.215773][ T8331] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 387.215794][ T8331] ? clear_bhb_loop+0x60/0xb0 [ 387.215821][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.215843][ T8331] RIP: 0033:0x7f154398d57c [ 387.215862][ T8331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 387.215881][ T8331] RSP: 002b:00007f1544711030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.215904][ T8331] RAX: ffffffffffffffda RBX: 00007f1543bb6160 RCX: 00007f154398d57c [ 387.215920][ T8331] RDX: 000000000000000f RSI: 00007f15447110a0 RDI: 0000000000000008 [ 387.215933][ T8331] RBP: 00007f1544711090 R08: 0000000000000000 R09: 0000000000000000 [ 387.215946][ T8331] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 387.215960][ T8331] R13: 0000000000000000 R14: 00007f1543bb6160 R15: 00007fffe4843878 [ 387.215993][ T8331] [ 388.615558][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.605'. [ 389.436106][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 389.513013][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 389.531509][ T5949] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 389.767015][ T8354] program syz.2.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.780871][ T8354] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 389.959730][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 390.113441][ T5949] usb 4-1: config 249 has an invalid interface number: 117 but max is 0 [ 390.153485][ T5949] usb 4-1: config 249 has no interface number 0 [ 390.190855][ T5949] usb 4-1: config 249 interface 117 has no altsetting 0 [ 390.218746][ T5949] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 390.330888][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.348210][ T5949] usb 4-1: Product: syz [ 390.352748][ T5949] usb 4-1: Manufacturer: syz [ 390.357891][ T5949] usb 4-1: SerialNumber: syz [ 391.614212][ T8378] netlink: 80 bytes leftover after parsing attributes in process `syz.0.612'. [ 392.010293][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 392.029831][ T8375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 392.178456][ T5949] ttusb_dec_send_command: command bulk message failed: error -22 [ 392.377128][ T5949] ttusb-dec 4-1:249.117: probe with driver ttusb-dec failed with error -22 [ 392.401951][ T5949] usb 4-1: USB disconnect, device number 18 [ 392.611179][ T5945] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 392.801057][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 392.833679][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.618'. [ 392.864315][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 392.921433][ T5945] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 392.971090][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.049733][ T5945] usb 3-1: config 0 descriptor?? [ 393.542519][ T5945] uclogic 0003:5543:0781.0001: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 393.715889][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.763834][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.790904][ T5949] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 393.832674][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 393.851228][ T5934] usb 3-1: USB disconnect, device number 15 [ 393.912784][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 393.971184][ T8418] fido_id[8418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 394.048742][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 394.055386][ T8423] trusted_key: encrypted_key: insufficient parameters specified [ 394.377110][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.020934][ T5949] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 395.051022][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.090909][ T5949] usb 5-1: Product: syz [ 395.106350][ T5949] usb 5-1: Manufacturer: syz [ 395.120870][ T5949] usb 5-1: SerialNumber: syz [ 395.145045][ T5949] usb 5-1: config 0 descriptor?? [ 395.202674][ T5949] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 396.425689][ T8411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.516795][ T5945] usb 5-1: USB disconnect, device number 7 [ 396.546198][ T8443] FAULT_INJECTION: forcing a failure. [ 396.546198][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 396.784053][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.3.627 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 396.784083][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.784096][ T8443] Call Trace: [ 396.784104][ T8443] [ 396.784114][ T8443] dump_stack_lvl+0x189/0x250 [ 396.784144][ T8443] ? __pfx____ratelimit+0x10/0x10 [ 396.784168][ T8443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.784193][ T8443] ? __pfx__printk+0x10/0x10 [ 396.784228][ T8443] ? __pfx___might_resched+0x10/0x10 [ 396.784259][ T8443] should_fail_ex+0x414/0x560 [ 396.784288][ T8443] should_failslab+0xa8/0x100 [ 396.784314][ T8443] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 396.784337][ T8443] ? dev_exception_add+0x94/0x4a0 [ 396.784370][ T8443] kmemdup_noprof+0x2b/0x70 [ 396.784400][ T8443] dev_exception_add+0x94/0x4a0 [ 396.784426][ T8443] ? bpf_lsm_capable+0x9/0x20 [ 396.784453][ T8443] ? security_capable+0x7e/0x2e0 [ 396.784498][ T8443] devcgroup_access_write+0xfdf/0x18b0 [ 396.784532][ T8443] ? __pfx_devcgroup_access_write+0x10/0x10 [ 396.784615][ T8443] ? kernfs_root+0x1c/0x230 [ 396.784641][ T8443] ? kernfs_root+0x1c/0x230 [ 396.784664][ T8443] ? kernfs_root+0x1c/0x230 [ 396.784690][ T8443] ? kernfs_root+0x1ea/0x230 [ 396.784714][ T8443] ? __pfx_devcgroup_access_write+0x10/0x10 [ 396.784743][ T8443] cgroup_file_write+0x39b/0x740 [ 396.784782][ T8443] ? __pfx_cgroup_file_write+0x10/0x10 [ 396.784830][ T8443] ? __pfx_cgroup_file_write+0x10/0x10 [ 396.784859][ T8443] kernfs_fop_write_iter+0x378/0x4f0 [ 396.784902][ T8443] vfs_write+0x54b/0xa90 [ 396.784928][ T8443] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 396.784963][ T8443] ? __pfx_vfs_write+0x10/0x10 [ 396.784997][ T8443] ? __fget_files+0x2a/0x420 [ 396.785034][ T8443] ksys_write+0x145/0x250 [ 396.785058][ T8443] ? __pfx_ksys_write+0x10/0x10 [ 396.785076][ T8443] ? rcu_is_watching+0x15/0xb0 [ 396.785105][ T8443] ? do_syscall_64+0xbe/0x3b0 [ 396.785134][ T8443] do_syscall_64+0xfa/0x3b0 [ 396.785156][ T8443] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.785179][ T8443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.785200][ T8443] ? clear_bhb_loop+0x60/0xb0 [ 396.785227][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.785247][ T8443] RIP: 0033:0x7ff1fbb8eb69 [ 396.785266][ T8443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.785283][ T8443] RSP: 002b:00007ff1fcab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.785305][ T8443] RAX: ffffffffffffffda RBX: 00007ff1fbdb5fa0 RCX: 00007ff1fbb8eb69 [ 396.785321][ T8443] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000004 [ 396.785334][ T8443] RBP: 00007ff1fcab6090 R08: 0000000000000000 R09: 0000000000000000 [ 396.785347][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.785359][ T8443] R13: 0000000000000000 R14: 00007ff1fbdb5fa0 R15: 00007fffe3a5b778 [ 396.785393][ T8443] [ 397.078594][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.285373][ T8450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.629'. [ 397.391018][ T5945] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 397.559540][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 397.568721][ T5945] usb 5-1: config 249 has an invalid interface number: 117 but max is 0 [ 397.581681][ T5945] usb 5-1: config 249 has no interface number 0 [ 397.588530][ T5945] usb 5-1: config 249 interface 117 has no altsetting 0 [ 397.609094][ T5945] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 397.619052][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.635089][ T5945] usb 5-1: Product: syz [ 397.639839][ T5945] usb 5-1: Manufacturer: syz [ 397.645071][ T5945] usb 5-1: SerialNumber: syz [ 398.830771][ T8463] program syz.3.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.841787][ T8463] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 398.932507][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 399.104669][ T5945] ttusb_dec_send_command: command bulk message failed: error -22 [ 399.124974][ T5945] ttusb-dec 5-1:249.117: probe with driver ttusb-dec failed with error -22 [ 399.230980][ T5945] usb 5-1: USB disconnect, device number 8 [ 400.569654][ T8486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.593966][ T8489] warning: `syz.4.641' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 400.905563][ T5934] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 401.060942][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 401.072406][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.097601][ T5934] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 401.107970][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.120234][ T8490] lo speed is unknown, defaulting to 1000 [ 401.126071][ T5934] usb 1-1: Product: syz [ 401.138550][ T5934] usb 1-1: Manufacturer: syz [ 401.149143][ T5934] usb 1-1: SerialNumber: syz [ 401.179753][ T5934] usb 1-1: config 0 descriptor?? [ 401.198182][ T5934] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 401.404474][ T5934] usb 1-1: USB disconnect, device number 18 [ 402.710087][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.860885][ T5945] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 403.041426][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 403.062104][ T8527] netlink: 830 bytes leftover after parsing attributes in process `syz.0.653'. [ 403.195261][ T5945] usb 3-1: config 249 has an invalid interface number: 117 but max is 0 [ 403.233702][ T5945] usb 3-1: config 249 has no interface number 0 [ 403.321410][ T5945] usb 3-1: config 249 interface 117 has no altsetting 0 [ 403.446912][ T5945] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 403.570999][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.579083][ T5945] usb 3-1: Product: syz [ 403.624533][ T5945] usb 3-1: Manufacturer: syz [ 403.629800][ T5945] usb 3-1: SerialNumber: syz [ 404.024312][ T5945] ttusb_dec_send_command: command bulk message failed: error -22 [ 404.072827][ T5945] ttusb-dec 3-1:249.117: probe with driver ttusb-dec failed with error -22 [ 404.091282][ T5945] usb 3-1: USB disconnect, device number 16 [ 406.501709][ T5949] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 406.970892][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 406.986575][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.008402][ T5949] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.012359][ T8564] bond_slave_0: entered promiscuous mode [ 407.027705][ T8564] bond_slave_1: entered promiscuous mode [ 407.043023][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.071196][ T8564] vlan2: entered promiscuous mode [ 407.074890][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 407.076671][ T8564] bond0: entered promiscuous mode [ 407.115083][ T5949] usb 4-1: SerialNumber: syz [ 407.141652][ T5949] cdc_acm 4-1:1.0: skipping garbage [ 407.146954][ T5949] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 407.243103][ T5949] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 407.273896][ T5949] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 407.321694][ T5923] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 407.374330][ T5949] usb 4-1: USB disconnect, device number 19 [ 407.500870][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 407.578291][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 407.673262][ T5923] usb 1-1: config 16 interface 0 has no altsetting 0 [ 407.816548][ T5923] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 407.903631][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.021330][ T5923] usb 1-1: Product: syz [ 408.080414][ T5923] usb 1-1: Manufacturer: syz [ 408.149616][ T5923] usb 1-1: SerialNumber: syz [ 408.232271][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 408.571063][ T5934] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 408.699672][ T5923] usb 1-1: ucan: probing device on interface #0 [ 408.710468][ T5923] usb 1-1: ucan: invalid endpoint configuration [ 408.745149][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 408.750966][ T5923] usb 1-1: ucan: probe failed; try to update the device firmware [ 408.810393][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'. [ 408.967878][ T5934] usb 2-1: config 249 has an invalid interface number: 117 but max is 0 [ 408.980847][ T5934] usb 2-1: config 249 has no interface number 0 [ 408.987333][ T5934] usb 2-1: config 249 interface 117 has no altsetting 0 [ 408.994935][ T5923] usb 1-1: USB disconnect, device number 19 [ 409.040426][ T5934] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 409.056017][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.159375][ T5934] usb 2-1: Product: syz [ 409.213580][ T5934] usb 2-1: Manufacturer: syz [ 409.313127][ T5934] usb 2-1: SerialNumber: syz [ 410.284881][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 410.379810][ T5934] ttusb_dec_send_command: command bulk message failed: error -22 [ 410.402525][ T5934] ttusb-dec 2-1:249.117: probe with driver ttusb-dec failed with error -22 [ 410.427445][ T5934] usb 2-1: USB disconnect, device number 9 [ 410.761606][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.678'. [ 411.553417][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 411.589116][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 412.421878][ T5949] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 412.591038][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 412.604266][ T5949] usb 2-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 412.684630][ T5949] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 412.696042][ T5949] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 412.713533][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.785140][ T8647] trusted_key: encrypted_key: insufficient parameters specified [ 415.312436][ T5949] usb 2-1: USB disconnect, device number 10 [ 415.600883][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 416.720898][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 416.767471][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.776422][ T9] usb 1-1: config 0 has no interface number 0 [ 416.842820][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 416.889377][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 416.900945][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.914023][ T9] usb 1-1: Product: syz [ 416.918267][ T9] usb 1-1: Manufacturer: syz [ 416.941072][ T9] usb 1-1: SerialNumber: syz [ 416.956779][ T9] usb 1-1: config 0 descriptor?? [ 416.971457][ T5945] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 417.149338][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 417.168031][ T5945] usb 4-1: config 249 has an invalid interface number: 117 but max is 0 [ 417.177435][ T5945] usb 4-1: config 249 has no interface number 0 [ 417.183956][ T5945] usb 4-1: config 249 interface 117 has no altsetting 0 [ 417.203257][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 417.224532][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 417.233631][ T5945] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 417.243806][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.252875][ T5945] usb 4-1: Product: syz [ 417.257578][ T5945] usb 4-1: Manufacturer: syz [ 417.272279][ T5945] usb 4-1: SerialNumber: syz [ 417.709950][ T5945] ttusb_dec_send_command: command bulk message failed: error -22 [ 417.729853][ T5945] ttusb-dec 4-1:249.117: probe with driver ttusb-dec failed with error -22 [ 417.743365][ T5945] usb 4-1: USB disconnect, device number 20 [ 417.868078][ T8649] netlink: 'syz.0.690': attribute type 1 has an invalid length. [ 418.137198][ T8649] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.690'. [ 420.175293][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 420.211041][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 420.219377][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 420.301158][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 421.164403][ T9] usb 1-1: USB disconnect, device number 20 [ 421.398259][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 422.030339][ T8711] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 422.089526][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.142673][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.3.707'. [ 422.206673][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.226717][ T8713] unsupported nlmsg_type 40 [ 423.191392][ T8720] delete_channel: no stack [ 424.311121][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 424.323529][ T5945] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 424.493089][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 424.519680][ T9] usb 5-1: config 249 has an invalid interface number: 117 but max is 0 [ 424.530350][ T5945] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 424.559517][ T9] usb 5-1: config 249 has no interface number 0 [ 424.582316][ T9] usb 5-1: config 249 interface 117 has no altsetting 0 [ 424.599921][ T5945] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 424.623926][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.639647][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 424.672106][ T5945] usb 4-1: Product: syz [ 424.688727][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.700125][ T5945] usb 4-1: Manufacturer: syz [ 424.717734][ T5945] usb 4-1: SerialNumber: syz [ 424.732924][ T9] usb 5-1: Product: syz [ 424.749491][ T9] usb 5-1: Manufacturer: syz [ 424.763793][ T5945] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 424.779759][ T9] usb 5-1: SerialNumber: syz [ 425.019719][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 425.054868][ T9] ttusb-dec 5-1:249.117: probe with driver ttusb-dec failed with error -22 [ 425.085534][ T9] usb 5-1: USB disconnect, device number 9 [ 425.389646][ T5945] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 425.445609][ T5945] usb 4-1: USB disconnect, device number 21 [ 426.627699][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.719'. [ 427.009584][ T8810] ubi31: attaching mtd0 [ 427.044395][ T8810] ubi31: scanning is finished [ 427.049258][ T8810] ubi31: empty MTD device detected [ 427.818920][ T8811] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 428.156185][ T8811] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 428.292013][ T8810] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 430.322688][ T8827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 430.595324][ T8839] Cannot find add_set index 0 as target [ 430.902386][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 431.421036][ T5949] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 432.351237][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 432.390329][ T5949] usb 1-1: config 249 has an invalid interface number: 117 but max is 0 [ 432.407718][ T5949] usb 1-1: config 249 has no interface number 0 [ 432.433003][ T5949] usb 1-1: config 249 interface 117 has no altsetting 0 [ 432.448059][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 432.463621][ T5949] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 432.483043][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.503884][ T5949] usb 1-1: Product: syz [ 432.508146][ T5949] usb 1-1: Manufacturer: syz [ 432.518633][ T5949] usb 1-1: SerialNumber: syz [ 433.035026][ T5949] ttusb_dec_send_command: command bulk message failed: error -22 [ 433.043597][ T5949] ttusb-dec 1-1:249.117: probe with driver ttusb-dec failed with error -22 [ 433.063749][ T5949] usb 1-1: USB disconnect, device number 21 [ 433.251542][ T5945] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 433.420902][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 434.170571][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.268057][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 434.278343][ T5945] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 434.288511][ T5945] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 434.303223][ T5945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.312671][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 434.320716][ T5945] usb 4-1: SerialNumber: syz [ 434.354772][ T5945] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 435.026204][ T24] usb 4-1: USB disconnect, device number 22 [ 435.137268][ T8886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.740'. [ 435.720921][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 436.104928][ T8898] Falling back ldisc for ptm0. [ 436.168159][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 436.188788][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 436.241002][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 436.350466][ T6051] udevd[6051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.440500][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.789203][ T8901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.382857][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 438.221214][ T8930] trusted_key: encrypted_key: insufficient parameters specified [ 438.687317][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 438.743055][ T10] usb 2-1: config 249 has an invalid interface number: 117 but max is 0 [ 438.752973][ T10] usb 2-1: config 249 has no interface number 0 [ 438.759537][ T10] usb 2-1: config 249 interface 117 has no altsetting 0 [ 438.770070][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 438.784324][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.793151][ T10] usb 2-1: Product: syz [ 438.797516][ T10] usb 2-1: Manufacturer: syz [ 438.825495][ T10] usb 2-1: SerialNumber: syz [ 439.315264][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 439.374875][ T10] ttusb-dec 2-1:249.117: probe with driver ttusb-dec failed with error -22 [ 439.397881][ T10] usb 2-1: USB disconnect, device number 11 [ 440.556271][ T8951] program syz.1.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.690945][ T8953] program syz.1.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.841308][ T8953] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 440.926121][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 441.701487][ T5934] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 441.730931][ T5945] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 442.109574][ T5934] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 442.625841][ T5934] usb 5-1: config 0 has no interface number 0 [ 442.625919][ T5945] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 442.666724][ T5934] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.740911][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.748699][ T5934] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.821217][ T5945] usb 2-1: config 0 descriptor?? [ 442.844122][ T5934] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 442.900537][ T5934] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 442.923077][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 442.950915][ T5934] usb 5-1: Product: syz [ 443.032003][ T5934] usb 5-1: SerialNumber: syz [ 443.077269][ T5934] usb 5-1: config 0 descriptor?? [ 443.122915][ T5945] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 443.138657][ T5934] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 443.200281][ T5934] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 443.341555][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 443.343418][ T10] usb 5-1: USB disconnect, device number 10 [ 443.348922][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 443.424606][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 443.743012][ T5945] [drm:udl_init] *ERROR* Selecting channel failed [ 443.933123][ T5945] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 443.956597][ T5945] [drm] Initialized udl on minor 2 [ 443.976109][ T5945] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.004849][ T5945] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 444.028154][ T5945] usb 2-1: USB disconnect, device number 12 [ 444.035486][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.062777][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 444.266494][ T8996] netlink: 256 bytes leftover after parsing attributes in process `syz.4.767'. [ 444.440517][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 444.750951][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 444.769028][ T10] usb 1-1: config 249 has an invalid interface number: 117 but max is 0 [ 445.451748][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.458135][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.514591][ T10] usb 1-1: config 249 has no interface number 0 [ 445.528271][ T10] usb 1-1: config 249 interface 117 has no altsetting 0 [ 445.539342][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 445.558888][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.640515][ T10] usb 1-1: Product: syz [ 445.670026][ T10] usb 1-1: Manufacturer: syz [ 445.713995][ T10] usb 1-1: SerialNumber: syz [ 445.820382][ T9010] netlink: 248 bytes leftover after parsing attributes in process `syz.1.771'. [ 445.829829][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 445.925102][ T9013] FAULT_INJECTION: forcing a failure. [ 445.925102][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.949786][ T9010] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 445.957753][ T9010] netlink: 224 bytes leftover after parsing attributes in process `syz.1.771'. [ 445.995852][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.4.772 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 445.995881][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.995897][ T9013] Call Trace: [ 445.995908][ T9013] [ 445.995916][ T9013] dump_stack_lvl+0x189/0x250 [ 445.995942][ T9013] ? __pfx____ratelimit+0x10/0x10 [ 445.995974][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.995995][ T9013] ? __pfx__printk+0x10/0x10 [ 445.996015][ T9013] ? __might_fault+0xb0/0x130 [ 445.996038][ T9013] ? rcu_is_watching+0x3a/0xb0 [ 445.996063][ T9013] should_fail_ex+0x414/0x560 [ 445.996087][ T9013] _copy_to_user+0x31/0xb0 [ 445.996120][ T9013] simple_read_from_buffer+0xe1/0x170 [ 445.996147][ T9013] proc_fail_nth_read+0x1df/0x250 [ 445.996177][ T9013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.996208][ T9013] ? rw_verify_area+0x258/0x650 [ 445.996241][ T9013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.996269][ T9013] vfs_read+0x200/0x980 [ 445.996308][ T9013] ? __pfx___mutex_lock+0x10/0x10 [ 445.996334][ T9013] ? __pfx_vfs_read+0x10/0x10 [ 445.996369][ T9013] ? __fget_files+0x2a/0x420 [ 445.996399][ T9013] ? __fget_files+0x3a0/0x420 [ 445.996422][ T9013] ? __fget_files+0x2a/0x420 [ 445.996456][ T9013] ksys_read+0x145/0x250 [ 445.996479][ T9013] ? __pfx_ksys_read+0x10/0x10 [ 445.996496][ T9013] ? rcu_is_watching+0x15/0xb0 [ 445.996525][ T9013] ? do_syscall_64+0xbe/0x3b0 [ 445.996553][ T9013] do_syscall_64+0xfa/0x3b0 [ 445.996575][ T9013] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.996596][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.996617][ T9013] ? clear_bhb_loop+0x60/0xb0 [ 445.996643][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.996664][ T9013] RIP: 0033:0x7f154398d57c [ 445.996681][ T9013] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 445.996697][ T9013] RSP: 002b:00007f1544753030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.996718][ T9013] RAX: ffffffffffffffda RBX: 00007f1543bb5fa0 RCX: 00007f154398d57c [ 445.996731][ T9013] RDX: 000000000000000f RSI: 00007f15447530a0 RDI: 0000000000000005 [ 445.996742][ T9013] RBP: 00007f1544753090 R08: 0000000000000000 R09: 0000000000000000 [ 445.996753][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.996763][ T9013] R13: 0000000000000000 R14: 00007f1543bb5fa0 R15: 00007fffe4843878 [ 445.996793][ T9013] [ 446.595405][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 446.606519][ T10] ttusb-dec 1-1:249.117: probe with driver ttusb-dec failed with error -22 [ 446.617297][ T10] usb 1-1: USB disconnect, device number 22 [ 447.513520][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 447.523730][ T9028] IPVS: Error joining to the multicast group [ 448.800964][ T5945] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 448.952410][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 448.964830][ T5945] usb 2-1: config 2 has an invalid interface number: 157 but max is 0 [ 448.990937][ T5945] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 449.035593][ T5945] usb 2-1: config 2 has no interface number 1 [ 449.067458][ T5945] usb 2-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 449.109347][ T5945] usb 2-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 449.128464][ T9057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.782'. [ 449.154835][ T5945] usb 2-1: config 2 interface 0 has no altsetting 0 [ 449.183753][ T5945] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 449.196841][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.219291][ T5945] usb 2-1: Product: syz [ 449.232259][ T5945] usb 2-1: Manufacturer: syz [ 449.239718][ T5945] usb 2-1: SerialNumber: syz [ 449.255439][ T5945] imon 2-1:2.157: inconsistent driver matching [ 449.272936][ T5945] imon 2-1:2.157: unable to register, err -22 [ 449.289478][ T5945] imon 2-1:2.157: probe with driver imon failed with error -22 [ 450.274217][ T5945] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 450.290929][ T5945] imon 2-1:2.0: unable to initialize intf0, err -19 [ 450.297636][ T5945] imon:imon_probe: failed to initialize context! [ 450.311515][ T5945] imon 2-1:2.0: unable to register, err -19 [ 450.348028][ T5945] usb 2-1: USB disconnect, device number 13 [ 450.573155][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 450.870856][ T5945] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 451.151502][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 451.174172][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 451.578307][ T5945] usb 4-1: config 249 has an invalid interface number: 117 but max is 0 [ 451.597083][ T5945] usb 4-1: config 249 has no interface number 0 [ 451.619579][ T5945] usb 4-1: config 249 interface 117 has no altsetting 0 [ 451.634909][ T5945] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 451.636944][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 451.650603][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.715675][ T5945] usb 4-1: Product: syz [ 451.734710][ T5945] usb 4-1: Manufacturer: syz [ 451.760748][ T5945] usb 4-1: SerialNumber: syz [ 451.858910][ T9081] xt_TCPMSS: Only works on TCP SYN packets [ 451.918527][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 452.108386][ T5945] ttusb_dec_send_command: command bulk message failed: error -22 [ 452.185545][ T5945] ttusb-dec 4-1:249.117: probe with driver ttusb-dec failed with error -22 [ 452.900612][ T5945] usb 4-1: USB disconnect, device number 23 [ 453.703850][ T5934] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 453.825920][ T9102] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 453.890990][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 453.898835][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 454.017414][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 454.100513][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.155438][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.200883][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 454.257199][ T5934] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 454.273640][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.307320][ T5934] usb 2-1: Product: syz [ 454.322353][ T5934] usb 2-1: Manufacturer: syz [ 454.327009][ T5934] usb 2-1: SerialNumber: syz [ 454.387088][ T5934] usb 2-1: config 0 descriptor?? [ 454.417928][ T9093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 454.444140][ C1] port100 2-1:0.0: NFC: Urb failure (status -71) [ 454.463782][ T5934] port100 2-1:0.0: NFC: Could not get supported command types [ 455.603229][ T10] usb 2-1: USB disconnect, device number 14 [ 455.881074][ T5945] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 456.463191][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.488328][ T5945] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 456.498370][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.528081][ T5945] usb 3-1: config 0 descriptor?? [ 456.851953][ T5945] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 456.876914][ T5945] command write [95] error -22 [ 456.942615][ T5945] usb 3-1: USB disconnect, device number 17 [ 457.419283][ T5934] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 457.586065][ T5890] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 458.353238][ T9134] Cannot find del_set index 0 as target [ 458.374126][ T5934] usb 4-1: too many configurations: 24, using maximum allowed: 8 [ 458.393649][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 458.401402][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 458.408028][ T5934] usb 4-1: can't read configurations, error -61 [ 458.421116][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 458.430468][ T5890] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 458.454785][ T5890] usb 1-1: config 12 has no interface number 0 [ 458.496979][ T5890] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 458.548286][ T5890] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 458.591643][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.603294][ T5934] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 458.639422][ T5890] usb 1-1: Product: syz [ 458.651007][ T5945] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 458.665751][ T5890] usb 1-1: Manufacturer: syz [ 458.670573][ T5890] usb 1-1: SerialNumber: syz [ 458.807958][ T5934] usb 4-1: too many configurations: 24, using maximum allowed: 8 [ 459.471113][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 459.486173][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 459.501810][ T5945] usb 2-1: config 249 has an invalid interface number: 117 but max is 0 [ 459.552144][ T5934] usb 4-1: can't read configurations, error -61 [ 459.552149][ T5945] usb 2-1: config 249 has no interface number 0 [ 459.552186][ T5945] usb 2-1: config 249 interface 117 has no altsetting 0 [ 459.563580][ T5945] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 459.585232][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.623230][ T5934] usb usb4-port1: attempt power cycle [ 459.636665][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.676265][ T5945] usb 2-1: Product: syz [ 459.695922][ T5945] usb 2-1: Manufacturer: syz [ 459.696392][ T5890] usb 1-1: USB disconnect, device number 23 [ 459.700580][ T5945] usb 2-1: SerialNumber: syz [ 459.984997][ T5934] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 460.085982][ T5945] ttusb_dec_send_command: command bulk message failed: error -22 [ 460.297913][ T5934] usb 4-1: device not accepting address 26, error -71 [ 460.300681][ T5945] ttusb-dec 2-1:249.117: probe with driver ttusb-dec failed with error -22 [ 460.456945][ T5945] usb 2-1: USB disconnect, device number 15 [ 462.479519][ T9176] FAULT_INJECTION: forcing a failure. [ 462.479519][ T9176] name failslab, interval 1, probability 0, space 0, times 0 [ 462.492513][ T9176] CPU: 0 UID: 0 PID: 9176 Comm: syz.0.813 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 462.492543][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.492557][ T9176] Call Trace: [ 462.492566][ T9176] [ 462.492575][ T9176] dump_stack_lvl+0x189/0x250 [ 462.492606][ T9176] ? __pfx____ratelimit+0x10/0x10 [ 462.492630][ T9176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.492656][ T9176] ? __pfx__printk+0x10/0x10 [ 462.492692][ T9176] ? __pfx___might_resched+0x10/0x10 [ 462.492724][ T9176] should_fail_ex+0x414/0x560 [ 462.492753][ T9176] should_failslab+0xa8/0x100 [ 462.492780][ T9176] __kmalloc_noprof+0xcb/0x4f0 [ 462.492800][ T9176] ? kfree+0x4d/0x440 [ 462.492830][ T9176] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 462.492866][ T9176] tomoyo_realpath_from_path+0xe3/0x5d0 [ 462.492908][ T9176] ? tomoyo_mount_permission+0x27a/0x970 [ 462.492937][ T9176] tomoyo_mount_permission+0x377/0x970 [ 462.492968][ T9176] ? tomoyo_mount_permission+0x27a/0x970 [ 462.492996][ T9176] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 462.493099][ T9176] security_sb_mount+0xec/0x350 [ 462.493135][ T9176] path_mount+0xbc/0xfe0 [ 462.493158][ T9176] ? user_path_at+0x44/0x60 [ 462.493185][ T9176] ? kmem_cache_free+0x18f/0x400 [ 462.493219][ T9176] __se_sys_mount+0x317/0x410 [ 462.493251][ T9176] ? __pfx___se_sys_mount+0x10/0x10 [ 462.493275][ T9176] ? rcu_is_watching+0x15/0xb0 [ 462.493305][ T9176] ? do_syscall_64+0xbe/0x3b0 [ 462.493328][ T9176] ? __x64_sys_mount+0x20/0xc0 [ 462.493357][ T9176] do_syscall_64+0xfa/0x3b0 [ 462.493380][ T9176] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.493404][ T9176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.493426][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 462.493454][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.493475][ T9176] RIP: 0033:0x7efebbb8eb69 [ 462.493494][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.493514][ T9176] RSP: 002b:00007efebc97f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 462.493537][ T9176] RAX: ffffffffffffffda RBX: 00007efebbdb6160 RCX: 00007efebbb8eb69 [ 462.493554][ T9176] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000200000000080 [ 462.493569][ T9176] RBP: 00007efebc97f090 R08: 0000000000000000 R09: 0000000000000000 [ 462.493583][ T9176] R10: 0000000001a0c099 R11: 0000000000000246 R12: 0000000000000001 [ 462.493597][ T9176] R13: 0000000000000000 R14: 00007efebbdb6160 R15: 00007ffd6ef72c38 [ 462.493632][ T9176] [ 462.493666][ T9176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 463.041087][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 466.323908][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.819'. [ 466.342954][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.819'. [ 466.580523][ T9206] x_tables: duplicate underflow at hook 3 [ 466.931284][ T5890] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 466.934492][ T5945] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 468.141202][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 468.174266][ T5890] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 16 [ 468.190938][ T5890] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 468.190962][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 468.209585][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short [ 468.243775][ T5945] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 468.254921][ T5890] usb 1-1: config 1 interface 0 has no altsetting 0 [ 468.270874][ T5945] usb 2-1: config 12 has no interface number 0 [ 468.277156][ T5945] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 468.299902][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 468.331014][ T5945] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 468.340880][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.344157][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.366230][ T5890] usb 1-1: Product: ౵ູ틞螒ᬶ箨䣿ë—쩥쬃Ⲥ龪娹ᩙ擰攽䄽빿î’䡾녰噠ﮫ騒凖檨㨠㴻î»ïˆ¡ìŠµë¼‰è²­ä¨®æ²ä—¨ç•’팤ᤙ鸌뺤ㅱ뭡檧ë¢é£†ä”–촊쵺ﱸ࣯ᣳ瑎˺弻ః饉箔좃풡㮭㙜鑈ä©í‰Šå“µâ£¹ì†ŠäŠŽê£´íŽ“鸈å¬åŠ¶å˜¨ìˆºêŸ†â§´ï¿„㽤 [ 468.372237][ T5945] usb 2-1: Product: syz [ 468.430830][ T5945] usb 2-1: Manufacturer: syz [ 468.441022][ T5945] usb 2-1: SerialNumber: syz [ 468.577525][ T5890] usb 1-1: Manufacturer: ᭅຩë±ï„¦ê“䱾첷䧙枉ǘéµé°¡ë¨‚楻졓噠ᒰᨮ﵄ꯋè»ã¤¤Å©ê‹Ÿï¢Œí‰Ÿí’¹ë…˜ï±™ï™•é²Ÿé«¦ëœ¾î°¼âº¾å¥§à¯œá³‡æ¡¬ëŽ—⭒郉㸲ïŸì°¥ë‘ŒãŽ°è¾²ì•¡ïµ–「貮ﰞ葿ê›ì“Šè—䅵퇜럑濢嗖蠟 [ 469.526070][ T5890] usb 1-1: SerialNumber: á„ [ 469.544882][ T9211] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.961203][ T5890] usb 1-1: can't set config #1, error -71 [ 470.071441][ T5890] usb 1-1: USB disconnect, device number 24 [ 470.855229][ T5945] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.921043][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 471.608545][ T5945] usb 2-1: USB disconnect, device number 16 [ 471.820817][ T9245] program syz.0.832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.886306][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.922431][ T9246] program syz.0.832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.938505][ T9246] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 472.338877][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 474.031208][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.837'. [ 474.648836][ T9266] trusted_key: encrypted_key: insufficient parameters specified [ 478.136483][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 478.247535][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.294667][ T9291] program syz.3.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.415941][ T9292] program syz.3.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.429939][ T9292] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 479.503700][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 482.253032][ T9306] trusted_key: encrypted_key: insufficient parameters specified [ 483.043452][ T9305] program syz.0.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.184070][ T9321] trusted_key: encrypted_key: insufficient parameters specified [ 487.775391][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.857'. [ 488.180072][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 490.190890][ T2151] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 490.541009][ T2151] usb 3-1: Using ep0 maxpacket: 32 [ 490.582093][ T2151] usb 3-1: unable to get BOS descriptor or descriptor too short [ 490.591854][ T24] usb 5-1: device descriptor read/all, error -71 [ 491.098716][ T2151] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 491.436171][ T2151] usb 3-1: config 12 has no interface number 0 [ 491.500976][ T2151] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 491.514729][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 491.710975][ T5890] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 491.774239][ T2151] usb 3-1: string descriptor 0 read error: -71 [ 491.821313][ T2151] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 491.830442][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.884570][ T2151] usb 3-1: can't set config #12, error -71 [ 491.902591][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 491.911373][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 491.991636][ T9373] program syz.3.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.021865][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.112345][ T9375] program syz.3.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.118645][ T2151] usb 3-1: USB disconnect, device number 18 [ 492.130387][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 492.169392][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.201169][ T9375] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 492.549897][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.564637][ T9376] trusted_key: encrypted_key: insufficient parameters specified [ 492.590131][ T5890] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 492.604795][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 492.630927][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.649311][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 492.664508][ T5890] usb 1-1: Product: syz [ 492.668885][ T5890] usb 1-1: Manufacturer: syz [ 492.673608][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.683541][ T5890] usb 1-1: SerialNumber: syz [ 492.699886][ T5890] usb 1-1: config 0 descriptor?? [ 492.706832][ T24] usb 5-1: config 0 descriptor?? [ 492.712606][ T9360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.719778][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 492.732136][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 492.781244][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 492.832191][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 492.883060][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 492.890522][ T24] usb 5-1: media controller created [ 492.972778][ T9367] dvb-usb: bulk message failed: -22 (2/0) [ 492.984532][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 493.012658][ T5890] rc_core: IR keymap rc-streamzap not found [ 493.018644][ T5890] Registered IR keymap rc-empty [ 493.241269][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 493.282321][ T5890] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 493.297378][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 493.304047][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 493.316143][ T5890] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 493.996488][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 494.104820][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.151410][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 494.160478][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 494.232523][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 494.239679][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 494.252676][ T5890] usb 1-1: USB disconnect, device number 25 [ 494.278624][ T24] usb 5-1: USB disconnect, device number 12 [ 494.289268][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.384174][ T10] usb 3-1: config 0 descriptor?? [ 494.445704][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 494.562294][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 494.920792][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 495.282484][ T9380] dvb-usb: bulk message failed: -22 (2/0) [ 495.301380][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 495.310929][ T10] usb 3-1: media controller created [ 495.317790][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.518571][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 495.548779][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 495.601312][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 495.715672][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 495.726732][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 496.307367][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 496.462670][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 496.469435][ T9] dvb-usb: error while querying for an remote control event. [ 497.156345][ T10] usb 3-1: USB disconnect, device number 19 [ 497.502405][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 498.441462][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 498.632430][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 498.644874][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 498.658624][ T10] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 498.669498][ T10] usb 3-1: config 12 has no interface number 0 [ 498.676159][ T10] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 498.694244][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 498.712002][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.720071][ T10] usb 3-1: Product: syz [ 498.724905][ T10] usb 3-1: Manufacturer: syz [ 498.729636][ T10] usb 3-1: SerialNumber: syz [ 498.970884][ T5945] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 499.751763][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 499.785795][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.800616][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.926808][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 499.966709][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 499.987852][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.006261][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.024415][ T5945] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.050578][ T5945] usb 5-1: Manufacturer: syz [ 500.065996][ T5945] usb 5-1: config 0 descriptor?? [ 500.170967][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 500.578294][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 500.589489][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.617120][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 500.634665][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 500.675133][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 500.690394][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 500.692887][ T10] usb 3-1: USB disconnect, device number 20 [ 500.722091][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 500.726491][ T9446] ======================================================= [ 500.726491][ T9446] WARNING: The mand mount option has been deprecated and [ 500.726491][ T9446] and is ignored by this kernel. Remove the mand [ 500.726491][ T9446] option from the mount to silence this warning. [ 500.726491][ T9446] ======================================================= [ 500.773394][ T5949] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 500.996229][ T24] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 500.996758][ T5945] rc_core: IR keymap rc-hauppauge not found [ 501.100993][ T5945] Registered IR keymap rc-empty [ 501.107559][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.130955][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.144857][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.174637][ T5945] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 501.184238][ T24] usb 2-1: Product: syz [ 501.190587][ T24] usb 2-1: Manufacturer: syz [ 501.211014][ T24] usb 2-1: SerialNumber: syz [ 501.238531][ T5945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 501.251749][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 501.258706][ T24] usb 2-1: config 0 descriptor?? [ 501.286120][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 501.336356][ T5949] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 501.352128][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.361264][ C0] mceusb 5-1:0.0: long-range (0x1) receiver active [ 501.378953][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.397327][ T5949] usb 4-1: Product: syz [ 501.403091][ T5949] usb 4-1: Manufacturer: syz [ 501.409104][ T5949] usb 4-1: SerialNumber: syz [ 501.414485][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.451204][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.469719][ T5949] usb 4-1: config 0 descriptor?? [ 501.502603][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.538552][ T24] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 501.566937][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.588457][ T5949] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0208 [ 501.646876][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 501.661356][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.667051][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 501.707159][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.739692][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.749866][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 501.769856][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 501.770855][ T5949] usb 4-1: USB disconnect, device number 28 [ 501.782077][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.807900][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.810242][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 501.869553][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.015486][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.059855][ T9459] program syz.1.883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.110933][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.112034][ T5945] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 502.117673][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.128899][ T9460] program syz.1.883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.156274][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.181460][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.214741][ T5945] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 502.271354][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.301478][ T9460] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 502.302457][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.386729][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.595657][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.672387][ T5945] usb 5-1: USB disconnect, device number 13 [ 502.690513][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.699730][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.740672][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.822550][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 502.851033][ T24] input input12: Timeout waiting for response from device. [ 502.932356][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 502.990873][ T24] usb 2-1: USB disconnect, device number 17 [ 506.120983][ T9493] program syz.1.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.171974][ T9494] program syz.1.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.183859][ T9494] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 506.193132][ T5945] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 506.439607][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 506.740868][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 506.760009][ T5945] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.775851][ T5945] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.811462][ T5945] usb 3-1: config 1 has no interface number 1 [ 506.830858][ T5945] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 506.850059][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.920708][ T5945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.933858][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.974414][ T5945] usb 3-1: Product: syz [ 506.978690][ T5945] usb 3-1: Manufacturer: syz [ 507.016131][ T5945] usb 3-1: SerialNumber: syz [ 508.746860][ T5945] usb 3-1: USB disconnect, device number 21 [ 509.979275][ T7192] udevd[7192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.146997][ T5945] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 511.350913][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 511.363633][ T5945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.383323][ T5945] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 511.400846][ T5945] usb 4-1: config 12 has no interface number 0 [ 511.432047][ T5945] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 511.499369][ T5945] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 511.510995][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.519524][ T5945] usb 4-1: Product: syz [ 511.525744][ T5945] usb 4-1: Manufacturer: syz [ 511.531224][ T5945] usb 4-1: SerialNumber: syz [ 512.366255][ T9543] netlink: zone id is out of range [ 512.373084][ T9543] netlink: zone id is out of range [ 512.379266][ T9543] netlink: zone id is out of range [ 512.384600][ T9543] netlink: zone id is out of range [ 512.389867][ T9543] netlink: zone id is out of range [ 512.395204][ T9543] netlink: zone id is out of range [ 512.400483][ T9543] netlink: zone id is out of range [ 512.405866][ T9543] netlink: zone id is out of range [ 512.411169][ T9543] netlink: zone id is out of range [ 512.416551][ T9543] netlink: zone id is out of range [ 513.013702][ T5945] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.132844][ T5945] usb 4-1: USB disconnect, device number 29 [ 513.345937][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.444812][ T5949] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 513.454797][ T9562] trusted_key: encrypted_key: insufficient parameters specified [ 513.610860][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 514.283553][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 514.309065][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.326747][ T5949] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.404666][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.443074][ T5949] usb 5-1: Product: syz [ 514.460299][ T5949] usb 5-1: Manufacturer: syz [ 514.529757][ T5949] usb 5-1: SerialNumber: syz [ 514.584744][ T5949] usb 5-1: config 0 descriptor?? [ 515.536739][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.751877][ T5949] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 515.761637][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.791585][ T5949] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 516.851255][ T5949] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 516.875927][ T5949] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 516.894750][ T5949] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 516.919596][ T5949] em28xx 5-1:0.0: No AC97 audio processor [ 516.980517][ T5949] usb 5-1: USB disconnect, device number 14 [ 517.030244][ T5949] em28xx 5-1:0.0: Disconnecting em28xx [ 517.061672][ T5949] em28xx 5-1:0.0: Freeing device [ 517.929789][ T9595] net_ratelimit: 13 callbacks suppressed [ 517.935783][ T9595] netlink: zone id is out of range [ 517.941958][ T9595] netlink: zone id is out of range [ 517.947201][ T9595] netlink: zone id is out of range [ 517.952549][ T9595] netlink: zone id is out of range [ 517.957762][ T9595] netlink: zone id is out of range [ 517.963075][ T9595] netlink: zone id is out of range [ 517.968281][ T9595] netlink: zone id is out of range [ 517.973573][ T9595] netlink: zone id is out of range [ 517.979007][ T9595] netlink: zone id is out of range [ 517.984305][ T9595] netlink: zone id is out of range [ 519.108711][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'. [ 519.151062][ T5903] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 519.387386][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 519.490827][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 519.530134][ T5903] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 519.546255][ T5903] usb 1-1: config 12 has no interface number 0 [ 519.574669][ T5903] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 519.650844][ T5903] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 519.661302][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.669456][ T5903] usb 1-1: Product: syz [ 519.673869][ T5903] usb 1-1: Manufacturer: syz [ 519.679203][ T5903] usb 1-1: SerialNumber: syz [ 520.549158][ T9617] program syz.3.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.599965][ T9619] program syz.3.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.622403][ T9619] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 520.654284][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 520.774309][ T5903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.831015][ T5945] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 520.876114][ T5903] usb 1-1: USB disconnect, device number 26 [ 521.167408][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 521.185525][ T5945] usb 2-1: config 249 has an invalid interface number: 117 but max is 0 [ 521.197206][ T5945] usb 2-1: config 249 has no interface number 0 [ 521.208765][ T5945] usb 2-1: config 249 interface 117 has no altsetting 0 [ 521.226416][ T5945] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 521.296423][ T9626] process 'syz.3.921' launched './file0' with NULL argv: empty string added [ 521.381198][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 521.911106][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.919289][ T5945] usb 2-1: Product: syz [ 521.923568][ T5945] usb 2-1: Manufacturer: syz [ 521.931539][ T5945] usb 2-1: SerialNumber: syz [ 522.063454][ T9628] xt_TCPMSS: Only works on TCP SYN packets [ 522.089786][ T9628] x_tables: duplicate underflow at hook 1 [ 522.288388][ T5945] ttusb_dec_send_command: command bulk message failed: error -22 [ 522.321861][ T5945] ttusb-dec 2-1:249.117: probe with driver ttusb-dec failed with error -22 [ 522.498342][ T5945] usb 2-1: USB disconnect, device number 18 [ 523.630774][ T9644] program syz.0.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.750884][ T5953] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 523.772422][ T9645] program syz.0.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.782582][ T9645] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 523.847195][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 524.212342][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.235305][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 524.506145][ T5953] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 525.280913][ T9654] net_ratelimit: 13 callbacks suppressed [ 525.286733][ T9654] netlink: zone id is out of range [ 525.292804][ T9654] netlink: zone id is out of range [ 525.298119][ T9654] netlink: zone id is out of range [ 525.303574][ T9654] netlink: zone id is out of range [ 525.308922][ T9654] netlink: zone id is out of range [ 525.314252][ T9654] netlink: zone id is out of range [ 525.319508][ T9654] netlink: zone id is out of range [ 525.324944][ T9654] netlink: zone id is out of range [ 525.330228][ T9654] netlink: zone id is out of range [ 525.335508][ T9654] netlink: zone id is out of range [ 525.384821][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.744976][ T5953] usb 5-1: config 0 descriptor?? [ 525.814981][ T5953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 525.843276][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 525.877829][ T5953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 525.923637][ T5953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 525.931209][ T5953] usb 5-1: media controller created [ 525.931363][ T9656] capability: warning: `syz.1.930' uses deprecated v2 capabilities in a way that may be insecure [ 525.939601][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.004362][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 526.031310][ T5953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 526.039992][ T9643] dvb-usb: bulk message failed: -22 (2/0) [ 526.059451][ T9658] syz.1.930: attempt to access beyond end of device [ 526.059451][ T9658] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 526.073818][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 526.091756][ T9658] qnx6: unable to read the first superblock [ 526.100918][ T9658] syz.1.930: attempt to access beyond end of device [ 526.100918][ T9658] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 526.114979][ T9658] qnx6: unable to read the first superblock [ 526.121963][ T9658] qnx6: unable to read the first superblock [ 526.175510][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 526.202904][ T5953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 526.262014][ T5953] usb 5-1: USB disconnect, device number 15 [ 526.369849][ T5953] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 526.849937][ T9673] trusted_key: encrypted_key: insufficient parameters specified [ 528.271086][ T5953] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 528.480991][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 528.507818][ T5953] usb 4-1: config 249 has an invalid interface number: 117 but max is 0 [ 529.003606][ T5953] usb 4-1: config 249 has no interface number 0 [ 529.009967][ T5953] usb 4-1: config 249 interface 117 has no altsetting 0 [ 529.020522][ T5953] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 529.064459][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.103739][ T5953] usb 4-1: Product: syz [ 529.107996][ T5953] usb 4-1: Manufacturer: syz [ 529.151047][ T5953] usb 4-1: SerialNumber: syz [ 529.488401][ T5953] ttusb_dec_send_command: command bulk message failed: error -22 [ 529.534395][ T5953] ttusb-dec 4-1:249.117: probe with driver ttusb-dec failed with error -22 [ 529.602553][ T5953] usb 4-1: USB disconnect, device number 30 [ 529.711238][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 530.072342][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 530.223630][ T9704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.226757][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 530.240205][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.253428][ T24] usb 5-1: config 0 descriptor?? [ 530.264283][ T9695] ALSA: mixer_oss: invalid OSS volume '' [ 530.401359][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 531.173818][ T24] gspca_sq930x: ucbus_write failed -110 [ 532.148170][ T24] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 533.412955][ T5945] usb 5-1: USB disconnect, device number 16 [ 535.012632][ T9754] netlink: 'syz.2.957': attribute type 3 has an invalid length. [ 535.500023][ T9762] tipc: Started in network mode [ 535.505480][ T9762] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 535.517198][ T9762] tipc: Enabled bearer , priority 10 [ 535.590111][ T9762] siw: device registration error -23 [ 535.701831][ T9762] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 536.256397][ T9759] delete_channel: no stack [ 536.958440][ T24] tipc: Node number set to 10005162 [ 537.590495][ T9783] net_ratelimit: 13 callbacks suppressed [ 537.590579][ T9783] netlink: zone id is out of range [ 537.591617][ T9783] netlink: zone id is out of range [ 537.591724][ T9783] netlink: zone id is out of range [ 537.591795][ T9783] netlink: zone id is out of range [ 537.591986][ T9783] netlink: zone id is out of range [ 537.592067][ T9783] netlink: zone id is out of range [ 537.592138][ T9783] netlink: zone id is out of range [ 537.592207][ T9783] netlink: zone id is out of range [ 537.592277][ T9783] netlink: zone id is out of range [ 537.592347][ T9783] netlink: zone id is out of range [ 539.292263][ T5903] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 539.486114][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 539.521820][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.556456][ T5903] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 539.572703][ T5903] usb 3-1: config 12 has no interface number 0 [ 539.638201][ T9799] trusted_key: encrypted_key: insufficient parameters specified [ 539.653225][ T5903] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 539.674127][ T5903] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 539.688355][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.715442][ T5903] usb 3-1: Product: syz [ 539.761474][ T5903] usb 3-1: Manufacturer: syz [ 539.810771][ T5903] usb 3-1: SerialNumber: syz [ 539.895883][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 540.694695][ T5903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.883710][ T5903] usb 3-1: USB disconnect, device number 22 [ 540.977686][ T9810] fuse: Bad value for 'fd' [ 541.717247][ T9812] trusted_key: encrypted_key: insufficient parameters specified [ 542.801666][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.395570][ T9824] program syz.0.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.513387][ T9825] program syz.0.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.523787][ T9825] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 543.693621][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 543.892875][ T5903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 544.004036][ T9830] IPVS: set_ctl: invalid protocol: 12 172.20.20.37:0 [ 544.121857][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 544.152181][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.192899][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.206940][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 544.224346][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.243764][ T5903] usb 5-1: config 0 descriptor?? [ 544.456631][ T5934] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 544.456710][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 544.467606][ T9843] trusted_key: encrypted_key: insufficient parameters specified [ 544.790988][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 544.923270][ T5903] apple 0003:05AC:0246.0002: unknown global tag 0xc [ 544.994478][ T9823] capability: warning: `syz.4.975' uses 32-bit capabilities (legacy support in use) [ 545.003259][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 545.006380][ T5903] apple 0003:05AC:0246.0002: item 0 2 1 12 parsing failed [ 545.009570][ T5934] usb 3-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 545.027348][ T5903] apple 0003:05AC:0246.0002: parse failed [ 545.033372][ T5903] apple 0003:05AC:0246.0002: probe with driver apple failed with error -22 [ 545.047600][ T5934] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 545.078850][ T24] usb 4-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 545.573226][ T5903] usb 5-1: USB disconnect, device number 17 [ 545.576292][ T5934] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 545.588528][ T24] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 545.626636][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 545.647557][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.687835][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.821547][ T24] usb 4-1: USB disconnect, device number 31 [ 548.704876][ T9851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.718184][ T24] usb 3-1: USB disconnect, device number 23 [ 549.239146][ T9880] trusted_key: encrypted_key: insufficient parameters specified [ 553.089252][ T9900] trusted_key: encrypted_key: insufficient parameters specified [ 554.006475][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 555.338472][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 557.977009][ T9938] trusted_key: encrypted_key: insufficient parameters specified [ 558.735169][ T9947] program syz.1.1004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.885798][ T9949] program syz.1.1004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.986292][ T9949] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 559.351308][ T9958] trusted_key: encrypted_key: insufficient parameters specified [ 559.637769][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 560.194724][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 560.596070][ T30] audit: type=1326 audit(1754028080.352:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff80c78eb69 code=0x0 [ 562.015316][ T9983] netlink: 'syz.4.1013': attribute type 4 has an invalid length. [ 562.065083][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 562.451119][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 562.478919][ T10] usb 4-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 562.489602][ T10] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 562.507579][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 562.517683][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.939632][ T5945] usb 4-1: USB disconnect, device number 32 [ 565.486452][ T5945] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 565.938145][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 566.192957][T10001] trusted_key: encrypted_key: insufficient parameters specified [ 566.267522][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.289183][ T5945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 566.409719][ T5945] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 566.452225][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.503607][ T5945] usb 4-1: config 0 descriptor?? [ 566.531037][ T5945] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 566.575486][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 566.592532][ T5945] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 566.656679][ T5945] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 566.707387][ T5945] usb 4-1: media controller created [ 566.735881][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.747980][ T9998] dvb-usb: bulk message failed: -22 (2/0) [ 566.776546][ T5945] dvb-usb: bulk message failed: -22 (6/0) [ 566.786154][ T5945] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 566.938970][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 566.960358][ T5945] dvb-usb: schedule remote query interval to 150 msecs. [ 566.968638][ T5945] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 567.788801][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 567.794882][ T5949] dvb-usb: error while querying for an remote control event. [ 567.929505][ T5945] usb 4-1: USB disconnect, device number 33 [ 567.950118][ T5945] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 568.291570][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.668014][T10027] netlink: 'syz.2.1025': attribute type 25 has an invalid length. [ 569.535472][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1027'. [ 569.579863][T10037] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 569.630500][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1027'. [ 569.779967][T10044] program syz.0.1029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.853270][T10037] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 569.882729][T10025] lo speed is unknown, defaulting to 1000 [ 569.889183][ T5949] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 569.922313][T10046] program syz.0.1029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.938568][T10046] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 570.369122][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 570.437071][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 571.678690][ T5949] usb 3-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 572.883299][ T5949] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 572.906165][ T5949] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 572.917015][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.936931][ T5949] usb 3-1: can't set config #179, error -71 [ 572.957825][ T5949] usb 3-1: USB disconnect, device number 24 [ 573.246452][T10054] trusted_key: encrypted_key: insufficient parameters specified [ 574.562955][T10071] trusted_key: encrypted_key: insufficient parameters specified [ 574.606609][ T5949] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 574.936171][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.999677][ T5949] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 575.037426][ T5949] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 575.084431][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.139925][ T5949] usb 1-1: config 0 descriptor?? [ 575.212671][ T5949] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 575.226611][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 575.236135][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 575.246912][ T5949] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 575.254160][ T5949] usb 1-1: media controller created [ 575.305779][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.352070][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 575.361704][ T5949] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 575.386775][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 575.414836][T10067] dvb-usb: bulk message failed: -22 (2/0) [ 575.426741][ T5945] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 575.476833][ T5949] dvb-usb: schedule remote query interval to 150 msecs. [ 575.483860][ T5949] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 575.512828][ T5949] usb 1-1: USB disconnect, device number 27 [ 575.596532][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 575.821542][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.834321][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 575.847502][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 575.859604][ T5949] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 575.877135][ T5945] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 575.887087][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.895695][ T5945] usb 2-1: Product: syz [ 575.901048][ T5945] usb 2-1: Manufacturer: syz [ 575.906060][ T5945] usb 2-1: SerialNumber: syz [ 575.922965][ T5934] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 575.928256][ T5945] usb 2-1: config 0 descriptor?? [ 575.940196][T10083] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 575.965573][T10098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.985836][T10098] cgroup: No subsys list or none specified [ 576.106885][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 576.122709][ T5934] usb 4-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 576.143180][ T5934] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 576.146908][ T5945] rc_core: IR keymap rc-streamzap not found [ 576.155928][ T5934] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 576.170863][ T5945] Registered IR keymap rc-empty [ 576.178228][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.256269][ T5945] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 576.374712][ T5945] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 576.987127][ T5945] usb 2-1: USB disconnect, device number 19 [ 577.012359][T10112] trusted_key: encrypted_key: insufficient parameters specified [ 579.478583][ T2151] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 579.487977][ T24] usb 4-1: USB disconnect, device number 34 [ 579.657401][ T2151] usb 5-1: Using ep0 maxpacket: 32 [ 580.422605][ T2151] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 580.559408][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.597912][ T2151] usb 5-1: Product: syz [ 580.602152][ T2151] usb 5-1: Manufacturer: syz [ 580.606815][ T2151] usb 5-1: SerialNumber: syz [ 580.617185][ T5949] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 580.633757][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 580.666816][ T2151] usb 5-1: config 0 descriptor?? [ 580.698931][ T2151] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 580.857758][ T5949] usb 1-1: device descriptor read/64, error -71 [ 581.567556][T10147] ip6erspan0: entered promiscuous mode [ 581.701495][ T5949] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 581.719731][T10146] tipc: Started in network mode [ 581.724695][T10146] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 581.740168][ T2151] gspca_ov534_9: reg_w failed -110 [ 582.298241][ T2151] gspca_ov534_9: Unknown sensor 0000 [ 582.304326][ T2151] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 582.357452][ T5949] usb 1-1: device descriptor read/64, error -71 [ 582.446150][ T2151] usb 5-1: USB disconnect, device number 18 [ 582.467620][ T5949] usb usb1-port1: attempt power cycle [ 582.947469][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 583.547429][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 583.564059][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 583.574226][ T10] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 583.884466][ T10] usb 4-1: config 12 has no interface number 0 [ 583.891457][ T10] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 584.365705][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1059'. [ 584.684252][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 584.807890][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.869708][ T10] usb 4-1: Product: syz [ 584.899959][ T10] usb 4-1: Manufacturer: syz [ 584.932406][ T10] usb 4-1: SerialNumber: syz [ 585.167926][ T2151] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 585.333453][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.397668][ T2151] usb 5-1: Using ep0 maxpacket: 32 [ 585.415457][ T2151] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 585.434426][ T2151] usb 5-1: config 0 has no interface number 0 [ 585.469613][ T2151] usb 5-1: config 0 interface 106 has no altsetting 0 [ 585.520863][ T10] usb 4-1: USB disconnect, device number 35 [ 585.545730][ T2151] usb 5-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 585.605252][T10180] PKCS7: Unknown OID: [4] 0.0 [ 585.628505][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.636985][T10180] PKCS7: Only support pkcs7_signedData type [ 585.636984][ T2151] usb 5-1: Product: syz [ 585.637006][ T2151] usb 5-1: Manufacturer: syz [ 585.683123][ T2151] usb 5-1: SerialNumber: syz [ 585.878026][T10182] binder: BINDER_SET_CONTEXT_MGR already set [ 585.884385][T10182] binder: 10179:10182 ioctl 4018620d 200000000040 returned -16 [ 586.132024][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.202318][ T2151] usb 5-1: config 0 descriptor?? [ 586.452717][ T2151] cdc_phonet 5-1:0.106: probe with driver cdc_phonet failed with error -22 [ 586.728152][ T2151] usb 5-1: USB disconnect, device number 19 [ 587.140527][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 588.107344][ T5979] udevd[5979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 588.161037][T10193] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 590.532844][ T5155] Bluetooth: hci1: connection err: -111 [ 590.867189][T10227] tty tty28: ldisc open failed (-12), clearing slot 27 [ 591.947823][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 592.408556][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 592.429148][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 592.523605][ T10] usb 5-1: config 12 has an invalid interface number: 184 but max is 0 [ 592.559131][ T10] usb 5-1: config 12 has no interface number 0 [ 592.576279][ T10] usb 5-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 592.632023][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 592.658888][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.686044][ T10] usb 5-1: Product: syz [ 592.700280][ T10] usb 5-1: Manufacturer: syz [ 592.728596][ T10] usb 5-1: SerialNumber: syz [ 593.953288][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.094912][T10256] Illegal XDP return value 10256 on prog (id 167) dev N/A, expect packet loss! [ 594.121337][ T10] usb 5-1: USB disconnect, device number 20 [ 594.169114][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 594.241670][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.648934][ T2151] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 594.952058][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 594.958876][ T2151] usb 2-1: Using ep0 maxpacket: 32 [ 594.968793][T10276] bridge_slave_1: left allmulticast mode [ 594.974830][T10276] bridge_slave_1: left promiscuous mode [ 594.987715][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.217490][T10276] bridge_slave_0: left allmulticast mode [ 595.223499][T10276] bridge_slave_0: left promiscuous mode [ 595.231081][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.238560][ T2151] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 595.270777][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.272932][T10280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.487723][ T2151] usb 2-1: Product: syz [ 595.498992][ T2151] usb 2-1: Manufacturer: syz [ 595.509088][ T2151] usb 2-1: SerialNumber: syz [ 595.542502][ T2151] usb 2-1: config 0 descriptor?? [ 595.587821][ T2151] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 595.767184][T10285] program syz.4.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.840511][T10286] program syz.4.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.851437][T10286] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 595.995540][ T10] libceph: connect (1)[c::]:6789 error -101 [ 596.008964][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 596.045308][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 596.285692][ T10] libceph: connect (1)[c::]:6789 error -101 [ 596.503460][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 596.520526][T10284] ceph: No mds server is up or the cluster is laggy [ 597.181510][ T2151] gspca_topro: reg_w err -71 [ 597.219931][ T2151] gspca_topro: Sensor soi763a [ 597.872116][ T2151] usb 2-1: USB disconnect, device number 20 [ 598.442114][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1097'. [ 598.569437][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 598.993236][T10323] bridge0: entered promiscuous mode [ 599.518580][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 600.159037][T10341] bond0: Unable to set up delay as MII monitoring is disabled [ 601.952438][T10367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1106'. [ 604.705318][T10373] FAULT_INJECTION: forcing a failure. [ 604.705318][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 604.718110][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.1.1108 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 604.718139][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.718153][T10373] Call Trace: [ 604.718164][T10373] [ 604.718174][T10373] dump_stack_lvl+0x189/0x250 [ 604.718206][T10373] ? __pfx____ratelimit+0x10/0x10 [ 604.718230][T10373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.718255][T10373] ? __pfx__printk+0x10/0x10 [ 604.718291][T10373] ? __pfx___might_resched+0x10/0x10 [ 604.718315][T10373] ? fs_reclaim_acquire+0x7d/0x100 [ 604.718348][T10373] should_fail_ex+0x414/0x560 [ 604.718377][T10373] should_failslab+0xa8/0x100 [ 604.718404][T10373] __kmalloc_noprof+0xcb/0x4f0 [ 604.718424][T10373] ? kfree+0x4d/0x440 [ 604.718454][T10373] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 604.718491][T10373] tomoyo_realpath_from_path+0xe3/0x5d0 [ 604.718523][T10373] ? tomoyo_domain+0xda/0x130 [ 604.718559][T10373] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 604.718584][T10373] tomoyo_path_number_perm+0x1e8/0x5a0 [ 604.718612][T10373] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 604.718656][T10373] ? __lock_acquire+0xab9/0xd20 [ 604.718706][T10373] ? __fget_files+0x2a/0x420 [ 604.718736][T10373] ? __fget_files+0x2a/0x420 [ 604.718759][T10373] ? __fget_files+0x3a0/0x420 [ 604.718783][T10373] ? __fget_files+0x2a/0x420 [ 604.718813][T10373] security_file_ioctl+0xcb/0x2d0 [ 604.718841][T10373] __se_sys_ioctl+0x47/0x170 [ 604.718878][T10373] do_syscall_64+0xfa/0x3b0 [ 604.718906][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.718927][T10373] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 604.718949][T10373] ? clear_bhb_loop+0x60/0xb0 [ 604.718975][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.718997][T10373] RIP: 0033:0x7ff80c78eb69 [ 604.719017][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.719036][T10373] RSP: 002b:00007ff80d60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.719067][T10373] RAX: ffffffffffffffda RBX: 00007ff80c9b6080 RCX: 00007ff80c78eb69 [ 604.719083][T10373] RDX: 0000200000000340 RSI: 00000000c0145401 RDI: 000000000000000a [ 604.719098][T10373] RBP: 00007ff80d60f090 R08: 0000000000000000 R09: 0000000000000000 [ 604.719112][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.719125][T10373] R13: 0000000000000000 R14: 00007ff80c9b6080 R15: 00007ffe4fb9f868 [ 604.719160][T10373] [ 604.981851][T10373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.108288][T10376] netlink: 'syz.4.1111': attribute type 4 has an invalid length. [ 606.137686][T10382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.954645][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'. [ 608.805769][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 608.836079][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 610.094737][T10424] /dev/sg0: Can't lookup blockdev [ 610.935255][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1128'. [ 611.906625][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 612.670798][ T5979] block device autoloading is deprecated and will be removed. [ 613.042218][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1133'. [ 613.272773][T10479] overlayfs: empty lowerdir [ 613.417844][T10483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.550055][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 613.619324][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 613.836687][ T7192] udevd[7192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 615.172324][T10509] FAULT_INJECTION: forcing a failure. [ 615.172324][T10509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.173735][T10509] [ 615.173746][T10509] ====================================================== [ 615.173755][T10509] WARNING: possible circular locking dependency detected [ 615.173771][T10509] 6.16.0-syzkaller #0 Not tainted [ 615.173783][T10509] ------------------------------------------------------ [ 615.173791][T10509] syz.2.1138/10509 is trying to acquire lock: [ 615.173803][T10509] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 615.173867][T10509] [ 615.173867][T10509] but task is already holding lock: [ 615.173875][T10509] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 615.173922][T10509] [ 615.173922][T10509] which lock already depends on the new lock. [ 615.173922][T10509] [ 615.173930][T10509] [ 615.173930][T10509] the existing dependency chain (in reverse order) is: [ 615.173938][T10509] [ 615.173938][T10509] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 615.173965][T10509] lock_acquire+0x120/0x360 [ 615.173984][T10509] _raw_spin_lock_nested+0x32/0x50 [ 615.174015][T10509] raw_spin_rq_lock_nested+0x2a/0x140 [ 615.174035][T10509] task_rq_lock+0xbc/0x470 [ 615.174054][T10509] cgroup_move_task+0x9a/0x590 [ 615.174077][T10509] css_set_move_task+0x658/0x9e0 [ 615.174101][T10509] cgroup_post_fork+0x1ef/0x790 [ 615.174124][T10509] copy_process+0x37e6/0x3b80 [ 615.174146][T10509] kernel_clone+0x224/0x7f0 [ 615.174179][T10509] user_mode_thread+0xdd/0x140 [ 615.174203][T10509] rest_init+0x23/0x300 [ 615.174228][T10509] start_kernel+0x47d/0x500 [ 615.174250][T10509] x86_64_start_reservations+0x24/0x30 [ 615.174279][T10509] x86_64_start_kernel+0x143/0x1c0 [ 615.174307][T10509] common_startup_64+0x13e/0x147 [ 615.174333][T10509] [ 615.174333][T10509] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 615.174361][T10509] lock_acquire+0x120/0x360 [ 615.174378][T10509] _raw_spin_lock_irqsave+0xa7/0xf0 [ 615.174410][T10509] try_to_wake_up+0x6e/0x1290 [ 615.174436][T10509] __wake_up_common_lock+0x137/0x1f0 [ 615.174464][T10509] tty_port_default_wakeup+0xa2/0xf0 [ 615.174495][T10509] serial8250_tx_chars+0x72e/0x970 [ 615.174523][T10509] serial8250_handle_irq+0x633/0xbb0 [ 615.174550][T10509] serial8250_default_handle_irq+0xbf/0x1b0 [ 615.174570][T10509] serial8250_interrupt+0xa2/0x1d0 [ 615.174593][T10509] __handle_irq_event_percpu+0x289/0x980 [ 615.174620][T10509] handle_irq_event+0x8b/0x1e0 [ 615.174646][T10509] handle_edge_irq+0x267/0x9c0 [ 615.174668][T10509] __common_interrupt+0x140/0x250 [ 615.174698][T10509] common_interrupt+0xb6/0xe0 [ 615.174724][T10509] asm_common_interrupt+0x26/0x40 [ 615.174744][T10509] unwind_next_frame+0x0/0x2390 [ 615.174764][T10509] arch_stack_walk+0x11c/0x150 [ 615.174786][T10509] stack_trace_save+0x9c/0xe0 [ 615.174811][T10509] save_stack+0xf7/0x1f0 [ 615.174828][T10509] __reset_page_owner+0x71/0x1f0 [ 615.174846][T10509] __free_frozen_pages+0xc65/0xe60 [ 615.174867][T10509] __put_partials+0x161/0x1c0 [ 615.174886][T10509] put_cpu_partial+0x17c/0x250 [ 615.174911][T10509] __slab_free+0x2f7/0x400 [ 615.174935][T10509] qlist_free_all+0x97/0x140 [ 615.174964][T10509] kasan_quarantine_reduce+0x148/0x160 [ 615.175001][T10509] __kasan_slab_alloc+0x22/0x80 [ 615.175019][T10509] __kmalloc_noprof+0x224/0x4f0 [ 615.175038][T10509] tomoyo_realpath_from_path+0xe3/0x5d0 [ 615.175065][T10509] tomoyo_path_perm+0x213/0x4b0 [ 615.175083][T10509] security_inode_getattr+0x12f/0x330 [ 615.175103][T10509] __x64_sys_newfstat+0xfc/0x200 [ 615.175128][T10509] do_syscall_64+0xfa/0x3b0 [ 615.175150][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.175170][T10509] [ 615.175170][T10509] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 615.175198][T10509] lock_acquire+0x120/0x360 [ 615.175215][T10509] _raw_spin_lock_irqsave+0xa7/0xf0 [ 615.175246][T10509] __wake_up_common_lock+0x2f/0x1f0 [ 615.175275][T10509] tty_port_default_wakeup+0xa2/0xf0 [ 615.175306][T10509] serial8250_tx_chars+0x72e/0x970 [ 615.175333][T10509] serial8250_handle_irq+0x633/0xbb0 [ 615.175361][T10509] serial8250_default_handle_irq+0xbf/0x1b0 [ 615.175380][T10509] serial8250_interrupt+0xa2/0x1d0 [ 615.175403][T10509] __handle_irq_event_percpu+0x289/0x980 [ 615.175429][T10509] handle_irq_event+0x8b/0x1e0 [ 615.175455][T10509] handle_edge_irq+0x267/0x9c0 [ 615.175477][T10509] __common_interrupt+0x140/0x250 [ 615.175506][T10509] common_interrupt+0xb6/0xe0 [ 615.175532][T10509] asm_common_interrupt+0x26/0x40 [ 615.175551][T10509] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 615.175583][T10509] uart_port_unlock_deref+0x111/0x2f0 [ 615.175611][T10509] uart_write+0xe8/0x130 [ 615.175635][T10509] n_tty_write+0xd35/0x11d0 [ 615.175655][T10509] file_tty_write+0x500/0x990 [ 615.175680][T10509] vfs_write+0x54b/0xa90 [ 615.175695][T10509] ksys_write+0x145/0x250 [ 615.175712][T10509] do_syscall_64+0xfa/0x3b0 [ 615.175733][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.175753][T10509] [ 615.175753][T10509] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 615.175781][T10509] lock_acquire+0x120/0x360 [ 615.175797][T10509] _raw_spin_lock_irqsave+0xa7/0xf0 [ 615.175828][T10509] serial8250_console_write+0x17e/0x1ba0 [ 615.175859][T10509] console_flush_all+0x728/0xc40 [ 615.175884][T10509] console_unlock+0xc4/0x270 [ 615.175905][T10509] vprintk_emit+0x5b7/0x7a0 [ 615.175927][T10509] _printk+0xcf/0x120 [ 615.175958][T10509] register_console+0xa8b/0xf90 [ 615.175984][T10509] univ8250_console_init+0x52/0x90 [ 615.176021][T10509] console_init+0x1a1/0x670 [ 615.176057][T10509] start_kernel+0x2cc/0x500 [ 615.176077][T10509] x86_64_start_reservations+0x24/0x30 [ 615.176106][T10509] x86_64_start_kernel+0x143/0x1c0 [ 615.176133][T10509] common_startup_64+0x13e/0x147 [ 615.176159][T10509] [ 615.176159][T10509] -> #0 (console_owner){-.-.}-{0:0}: [ 615.176187][T10509] validate_chain+0xb9b/0x2140 [ 615.176208][T10509] __lock_acquire+0xab9/0xd20 [ 615.176225][T10509] lock_acquire+0x120/0x360 [ 615.176242][T10509] console_flush_all+0x6d2/0xc40 [ 615.176268][T10509] console_unlock+0xc4/0x270 [ 615.176289][T10509] vprintk_emit+0x5b7/0x7a0 [ 615.176311][T10509] _printk+0xcf/0x120 [ 615.176334][T10509] should_fail_ex+0x3f5/0x560 [ 615.176352][T10509] strncpy_from_user+0x36/0x290 [ 615.176390][T10509] strncpy_from_user_nofault+0x72/0x150 [ 615.176411][T10509] bpf_probe_read_user_str+0x2a/0x70 [ 615.176430][T10509] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 615.176447][T10509] bpf_trace_run4+0x28e/0x4a0 [ 615.176473][T10509] __bpf_trace_sched_switch+0x17a/0x1e0 [ 615.176500][T10509] __traceiter_sched_switch+0x9a/0xd0 [ 615.176527][T10509] __schedule+0x22ba/0x4c90 [ 615.176544][T10509] preempt_schedule_irq+0xb5/0x150 [ 615.176563][T10509] irqentry_exit+0x6f/0x90 [ 615.176582][T10509] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 615.176602][T10509] lock_release+0x2b5/0x3e0 [ 615.176619][T10509] sb_end_write+0x26/0x1c0 [ 615.176641][T10509] vfs_write+0x8d8/0xa90 [ 615.176657][T10509] ksys_write+0x145/0x250 [ 615.176673][T10509] do_syscall_64+0xfa/0x3b0 [ 615.176694][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.176714][T10509] [ 615.176714][T10509] other info that might help us debug this: [ 615.176714][T10509] [ 615.176722][T10509] Chain exists of: [ 615.176722][T10509] console_owner --> &p->pi_lock --> &rq->__lock [ 615.176722][T10509] [ 615.176755][T10509] Possible unsafe locking scenario: [ 615.176755][T10509] [ 615.176762][T10509] CPU0 CPU1 [ 615.176769][T10509] ---- ---- [ 615.176775][T10509] lock(&rq->__lock); [ 615.176790][T10509] lock(&p->pi_lock); [ 615.176805][T10509] lock(&rq->__lock); [ 615.176820][T10509] lock(console_owner); [ 615.176835][T10509] [ 615.176835][T10509] *** DEADLOCK *** [ 615.176835][T10509] [ 615.176840][T10509] 5 locks held by syz.2.1138/10509: [ 615.176853][T10509] #0: ffff888033396478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 615.176906][T10509] #1: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 615.176955][T10509] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 615.177017][T10509] #3: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 615.177070][T10509] #4: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 615.177125][T10509] [ 615.177125][T10509] stack backtrace: [ 615.177137][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1138 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 615.177161][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.177174][T10509] Call Trace: [ 615.177183][T10509] [ 615.177192][T10509] dump_stack_lvl+0x189/0x250 [ 615.177218][T10509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.177242][T10509] ? __pfx__printk+0x10/0x10 [ 615.177271][T10509] ? print_lock_name+0xde/0x100 [ 615.177299][T10509] print_circular_bug+0x2ee/0x310 [ 615.177327][T10509] check_noncircular+0x134/0x160 [ 615.177356][T10509] validate_chain+0xb9b/0x2140 [ 615.177394][T10509] __lock_acquire+0xab9/0xd20 [ 615.177417][T10509] ? console_flush_all+0x13a/0xc40 [ 615.177444][T10509] lock_acquire+0x120/0x360 [ 615.177462][T10509] ? console_flush_all+0x13a/0xc40 [ 615.177494][T10509] ? do_raw_spin_unlock+0x122/0x240 [ 615.177521][T10509] ? console_flush_all+0x13a/0xc40 [ 615.177550][T10509] console_flush_all+0x6d2/0xc40 [ 615.177576][T10509] ? console_flush_all+0x13a/0xc40 [ 615.177605][T10509] ? console_flush_all+0x13a/0xc40 [ 615.177636][T10509] ? __pfx_console_flush_all+0x10/0x10 [ 615.177665][T10509] ? strncpy_from_user+0x1bc/0x290 [ 615.177702][T10509] ? is_printk_cpu_sync_owner+0x32/0x40 [ 615.177735][T10509] console_unlock+0xc4/0x270 [ 615.177761][T10509] ? __pfx_console_unlock+0x10/0x10 [ 615.177788][T10509] ? is_printk_cpu_sync_owner+0x32/0x40 [ 615.177821][T10509] vprintk_emit+0x5b7/0x7a0 [ 615.177847][T10509] ? __pfx_vprintk_emit+0x10/0x10 [ 615.177873][T10509] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 615.177907][T10509] ? __bad_area_nosemaphore+0x11a/0x780 [ 615.177946][T10509] _printk+0xcf/0x120 [ 615.177971][T10509] ? __pfx____ratelimit+0x10/0x10 [ 615.178000][T10509] ? __pfx__printk+0x10/0x10 [ 615.178029][T10509] ? irq_work_queue+0xbc/0x140 [ 615.178065][T10509] should_fail_ex+0x3f5/0x560 [ 615.178088][T10509] strncpy_from_user+0x36/0x290 [ 615.178123][T10509] strncpy_from_user_nofault+0x72/0x150 [ 615.178148][T10509] bpf_probe_read_user_str+0x2a/0x70 [ 615.178171][T10509] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 615.178189][T10509] bpf_trace_run4+0x28e/0x4a0 [ 615.178217][T10509] ? irqentry_exit+0x74/0x90 [ 615.178238][T10509] ? bpf_trace_run4+0x19c/0x4a0 [ 615.178266][T10509] ? __pfx_bpf_trace_run4+0x10/0x10 [ 615.178298][T10509] ? __pfx_rcu_qs+0x10/0x10 [ 615.178319][T10509] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 615.178351][T10509] __bpf_trace_sched_switch+0x17a/0x1e0 [ 615.178381][T10509] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 615.178412][T10509] ? rcu_read_lock_sched_held+0x89/0x100 [ 615.178436][T10509] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 615.178459][T10509] ? plist_check_list+0x30f/0x330 [ 615.178491][T10509] ? plist_check_list+0x308/0x330 [ 615.178525][T10509] ? task_psi_group+0x50/0x1a0 [ 615.178549][T10509] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 615.178579][T10509] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 615.178608][T10509] __traceiter_sched_switch+0x9a/0xd0 [ 615.178640][T10509] __schedule+0x22ba/0x4c90 [ 615.178670][T10509] ? preempt_schedule_irq+0xb5/0x150 [ 615.178691][T10509] ? preempt_schedule_irq+0xde/0x150 [ 615.178713][T10509] ? __pfx___schedule+0x10/0x10 [ 615.178735][T10509] ? irqentry_exit+0x74/0x90 [ 615.178762][T10509] ? preempt_schedule_irq+0xaa/0x150 [ 615.178785][T10509] preempt_schedule_irq+0xb5/0x150 [ 615.178806][T10509] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 615.178833][T10509] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 615.178858][T10509] irqentry_exit+0x6f/0x90 [ 615.178879][T10509] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 615.178901][T10509] RIP: 0010:lock_release+0x2b5/0x3e0 [ 615.178922][T10509] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb 42 fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 615.178941][T10509] RSP: 0018:ffffc9000ae27c10 EFLAGS: 00000206 [ 615.178959][T10509] RAX: fa99df1c30e67c00 RBX: 0000000000000283 RCX: fa99df1c30e67c00 [ 615.178975][T10509] RDX: 0000000000000001 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 615.178990][T10509] RBP: ffff8880272c4718 R08: ffff8880272c3c2b R09: 1ffff11004e58785 [ 615.179012][T10509] R10: dffffc0000000000 R11: ffffed1004e58786 R12: 0000000000000001 [ 615.179028][T10509] R13: 0000000000000001 R14: ffff888055d6c428 R15: ffff8880272c3c00 [ 615.179055][T10509] ? vfs_write+0x8d8/0xa90 [ 615.179076][T10509] sb_end_write+0x26/0x1c0 [ 615.179101][T10509] vfs_write+0x8d8/0xa90 [ 615.179124][T10509] ? __pfx_vfs_write+0x10/0x10 [ 615.179144][T10509] ? __fget_files+0x2a/0x420 [ 615.179170][T10509] ? __fget_files+0x3a0/0x420 [ 615.179193][T10509] ? __fget_files+0x2a/0x420 [ 615.179221][T10509] ksys_write+0x145/0x250 [ 615.179241][T10509] ? __pfx_ksys_write+0x10/0x10 [ 615.179267][T10509] do_syscall_64+0xfa/0x3b0 [ 615.179291][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.179312][T10509] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 615.179334][T10509] ? clear_bhb_loop+0x60/0xb0 [ 615.179358][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.179380][T10509] RIP: 0033:0x7fae1c58d61f [ 615.179397][T10509] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 615.179416][T10509] RSP: 002b:00007fae1d3ba030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 615.179436][T10509] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fae1c58d61f [ 615.179451][T10509] RDX: 0000000000000001 RSI: 00007fae1d3ba090 RDI: 000000000000000a [ 615.179465][T10509] RBP: 00007fae1d3ba090 R08: 0000000000000000 R09: 00007fae1d3b9df7 [ 615.179480][T10509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 615.179494][T10509] R13: 0000000000000000 R14: 00007fae1c7b6160 R15: 00007fff632ba828 [ 615.179518][T10509] [ 616.601881][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1138 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 616.601902][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.601911][T10509] Call Trace: [ 616.601920][T10509] [ 616.601928][T10509] dump_stack_lvl+0x189/0x250 [ 616.601951][T10509] ? __pfx____ratelimit+0x10/0x10 [ 616.601967][T10509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.601984][T10509] ? __pfx__printk+0x10/0x10 [ 616.602005][T10509] ? irq_work_queue+0xbc/0x140 [ 616.602030][T10509] should_fail_ex+0x414/0x560 [ 616.602048][T10509] strncpy_from_user+0x36/0x290 [ 616.602073][T10509] strncpy_from_user_nofault+0x72/0x150 [ 616.602091][T10509] bpf_probe_read_user_str+0x2a/0x70 [ 616.602108][T10509] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 616.602121][T10509] bpf_trace_run4+0x28e/0x4a0 [ 616.602141][T10509] ? irqentry_exit+0x74/0x90 [ 616.602156][T10509] ? bpf_trace_run4+0x19c/0x4a0 [ 616.602176][T10509] ? __pfx_bpf_trace_run4+0x10/0x10 [ 616.602204][T10509] ? __pfx_rcu_qs+0x10/0x10 [ 616.602219][T10509] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 616.602242][T10509] __bpf_trace_sched_switch+0x17a/0x1e0 [ 616.602265][T10509] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 616.602286][T10509] ? rcu_read_lock_sched_held+0x89/0x100 [ 616.602303][T10509] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 616.602320][T10509] ? plist_check_list+0x30f/0x330 [ 616.602342][T10509] ? plist_check_list+0x308/0x330 [ 616.602366][T10509] ? task_psi_group+0x50/0x1a0 [ 616.602383][T10509] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 616.602404][T10509] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 616.602425][T10509] __traceiter_sched_switch+0x9a/0xd0 [ 616.602448][T10509] __schedule+0x22ba/0x4c90 [ 616.602469][T10509] ? preempt_schedule_irq+0xb5/0x150 [ 616.602483][T10509] ? preempt_schedule_irq+0xde/0x150 [ 616.602499][T10509] ? __pfx___schedule+0x10/0x10 [ 616.602514][T10509] ? irqentry_exit+0x74/0x90 [ 616.602534][T10509] ? preempt_schedule_irq+0xaa/0x150 [ 616.602552][T10509] preempt_schedule_irq+0xb5/0x150 [ 616.602566][T10509] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 616.602586][T10509] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 616.602603][T10509] irqentry_exit+0x6f/0x90 [ 616.602618][T10509] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 616.602634][T10509] RIP: 0010:lock_release+0x2b5/0x3e0 [ 616.602649][T10509] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb 42 fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 616.602662][T10509] RSP: 0018:ffffc9000ae27c10 EFLAGS: 00000206 [ 616.602677][T10509] RAX: fa99df1c30e67c00 RBX: 0000000000000283 RCX: fa99df1c30e67c00 [ 616.602688][T10509] RDX: 0000000000000001 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 616.602699][T10509] RBP: ffff8880272c4718 R08: ffff8880272c3c2b R09: 1ffff11004e58785 [ 616.602711][T10509] R10: dffffc0000000000 R11: ffffed1004e58786 R12: 0000000000000001 [ 616.602722][T10509] R13: 0000000000000001 R14: ffff888055d6c428 R15: ffff8880272c3c00 [ 616.602740][T10509] ? vfs_write+0x8d8/0xa90 [ 616.602755][T10509] sb_end_write+0x26/0x1c0 [ 616.602773][T10509] vfs_write+0x8d8/0xa90 [ 616.602790][T10509] ? __pfx_vfs_write+0x10/0x10 [ 616.602804][T10509] ? __fget_files+0x2a/0x420 [ 616.602823][T10509] ? __fget_files+0x3a0/0x420 [ 616.602839][T10509] ? __fget_files+0x2a/0x420 [ 616.602859][T10509] ksys_write+0x145/0x250 [ 616.602873][T10509] ? __pfx_ksys_write+0x10/0x10 [ 616.602891][T10509] do_syscall_64+0xfa/0x3b0 [ 616.602909][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.602923][T10509] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 616.602938][T10509] ? clear_bhb_loop+0x60/0xb0 [ 616.602955][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.602970][T10509] RIP: 0033:0x7fae1c58d61f [ 616.602984][T10509] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 616.602997][T10509] RSP: 002b:00007fae1d3ba030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 616.603011][T10509] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fae1c58d61f [ 616.603022][T10509] RDX: 0000000000000001 RSI: 00007fae1d3ba090 RDI: 000000000000000a [ 616.603031][T10509] RBP: 00007fae1d3ba090 R08: 0000000000000000 R09: 00007fae1d3b9df7 [ 616.603041][T10509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 616.603050][T10509] R13: 0000000000000000 R14: 00007fae1c7b6160 R15: 00007fff632ba828 [ 616.603067][T10509] [ 617.240437][T10512] trusted_key: encrypted_key: insufficient parameters specified [ 618.091700][ T5903] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 618.242435][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 618.249477][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.259077][ T5903] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 618.267661][ T5903] usb 4-1: config 12 has no interface number 0 [ 618.274360][ T5903] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 618.287492][ T5903] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 618.296948][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.305263][ T5903] usb 4-1: Product: syz [ 618.309501][ T5903] usb 4-1: Manufacturer: syz [ 618.314253][ T5903] usb 4-1: SerialNumber: syz [ 618.535417][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.553240][ T5903] usb 4-1: USB disconnect, device number 36 [ 618.578874][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory