last executing test programs: 2m41.65490627s ago: executing program 1 (id=1800): socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104f00000000"], 0x0}, 0x94) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000001b40)={0x70, 0xb3}, 0x20) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100e4b6c8437a68e0831d6e92525d482100000000000000000000000a1c000000000a0102000000000000000005000000080002400000000120000000030a0103000000000000000900010073797a300000000014"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) fsopen(&(0x7f0000000200)='ufs\x00', 0x1) 2m41.382491385s ago: executing program 1 (id=1801): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x2, 0x0) openat$cgroup_procs(r7, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006800010003001000fdffff7f00000000000004d3"], 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x11) r10 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r14, @ANYBLOB="04006c0046003300001c060008021100000008021100000050505050505042000006ae08000601010101010101002d1a0600000000000000000000040009000e0000000100030000000900000800260080090000"], 0x70}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000280)={@loopback, @dev, 0x0}, &(0x7f00000002c0)=0xffffffffffffffa6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="18eff8c3670000"], &(0x7f0000000200)='GPL\x00', 0x1b, 0x34, &(0x7f0000000240)=""/52, 0x41000, 0x22, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x7, 0xff9, 0x5}, 0x10, 0x0, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x10, 0x20b}, 0x94) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 2m40.375974617s ago: executing program 1 (id=1804): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000004c0)={0x18, 0x0, {0x2, @local, 'syz_tun\x00'}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008895}, 0x20068000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) 2m37.495287702s ago: executing program 1 (id=1810): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x34000, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2m34.324918048s ago: executing program 1 (id=1818): r0 = socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/437], 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xb8788d89d5848432, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008b"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) time(&(0x7f00000001c0)) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwrite64(r8, &(0x7f00000000c0)='%', 0x1, 0x6) r9 = syz_io_uring_setup(0x464e, &(0x7f0000000240)={0x0, 0xe089, 0x1000, 0x20000, 0x200003b9}, 0x0, &(0x7f0000000200)=0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000180)={0x2, "08d9fca767e3ff09cc69bbd7d1a5b37daeaf79a756439e64c61a30f117a3fba5b31a96513eb0213b3df7942dab008e8acbcd63660826f0926109085ca90b2967"}) ioctl$VHOST_SET_LOG_FD(r11, 0x4004af07, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r10, 0x0) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250c000000500001801400020067656e65766531000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567000000000000000000001804038008007b5bb69e0008040001000822040006000000"], 0x7c}}, 0x4004) r12 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) 2m30.852167594s ago: executing program 1 (id=1827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x10001}, 0x18) sync() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000000c0)={0x4, 0xfffffffc, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 2m15.725426928s ago: executing program 32 (id=1827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x10001}, 0x18) sync() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000000c0)={0x4, 0xfffffffc, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 1m12.550536297s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf251600000008000300", @ANYRES32=r8, @ANYBLOB="c34178146b5a760e137896de725d27ce0a6aeed1b20dd0fb1965c33ae043ed8973490a2d4b9fc0f608ad2e6dafac1990b4cf88e79e96127d1062ba5b0100fcf365d2112e458c28c25619dc7f4a2f896a575de8d3796ee4fe20eaad8f5469526b149311707c5394f84bedada4e2d69fdb1d373b741b0d805772f41a0869b8ca93842977b068a126759c97460f63f6a78aa62904c972b3e8ee93ecc9ad0f530945d5d5e7a3bc3651f1e51f013909a0268302a298afb0ec13f5011d10697a3f244f07c8c3bd715433ce7564217b528cc05508f455c65023e83aa5f3d71ab70be24d554c2e1e274fb9bd"], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 59.100047964s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf251600000008000300", @ANYRES32=r8, @ANYBLOB="c34178146b5a760e137896de725d27ce0a6aeed1b20dd0fb1965c33ae043ed8973490a2d4b9fc0f608ad2e6dafac1990b4cf88e79e96127d1062ba5b0100fcf365d2112e458c28c25619dc7f4a2f896a575de8d3796ee4fe20eaad8f5469526b149311707c5394f84bedada4e2d69fdb1d373b741b0d805772f41a0869b8ca93842977b068a126759c97460f63f6a78aa62904c972b3e8ee93ecc9ad0f530945d5d5e7a3bc3651f1e51f013909a0268302a298afb0ec13f5011d10697a3f244f07c8c3bd715433ce7564217b528cc05508f455c65023e83aa5f3d71ab70be24d554c2e1e274fb9bd"], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 47.448944603s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf251600000008000300", @ANYRES32=r8, @ANYBLOB="c34178146b5a760e137896de725d27ce0a6aeed1b20dd0fb1965c33ae043ed8973490a2d4b9fc0f608ad2e6dafac1990b4cf88e79e96127d1062ba5b0100fcf365d2112e458c28c25619dc7f4a2f896a575de8d3796ee4fe20eaad8f5469526b149311707c5394f84bedada4e2d69fdb1d373b741b0d805772f41a0869b8ca93842977b068a126759c97460f63f6a78aa62904c972b3e8ee93ecc9ad0f530945d5d5e7a3bc3651f1e51f013909a0268302a298afb0ec13f5011d10697a3f244f07c8c3bd715433ce7564217b528cc05508f455c65023e83aa5f3d71ab70be24d554c2e1e274fb9bd"], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 30.154778931s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf251600000008000300", @ANYRES32=r8, @ANYBLOB="c34178146b5a760e137896de725d27ce0a6aeed1b20dd0fb1965c33ae043ed8973490a2d4b9fc0f608ad2e6dafac1990b4cf88e79e96127d1062ba5b0100fcf365d2112e458c28c25619dc7f4a2f896a575de8d3796ee4fe20eaad8f5469526b149311707c5394f84bedada4e2d69fdb1d373b741b0d805772f41a0869b8ca93842977b068a126759c97460f63f6a78aa62904c972b3e8ee93ecc9ad0f530945d5d5e7a3bc3651f1e51f013909a0268302a298afb0ec13f5011d10697a3f244f07c8c3bd715433ce7564217b528cc05508f455c65023e83aa5f3d71ab70be24d554c2e1e274fb9bd"], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 14.081069723s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf251600000008000300", @ANYRES32=r8, @ANYBLOB="c34178146b5a760e137896de725d27ce0a6aeed1b20dd0fb1965c33ae043ed8973490a2d4b9fc0f608ad2e6dafac1990b4cf88e79e96127d1062ba5b0100fcf365d2112e458c28c25619dc7f4a2f896a575de8d3796ee4fe20eaad8f5469526b149311707c5394f84bedada4e2d69fdb1d373b741b0d805772f41a0869b8ca93842977b068a126759c97460f63f6a78aa62904c972b3e8ee93ecc9ad0f530945d5d5e7a3bc3651f1e51f013909a0268302a298afb0ec13f5011d10697a3f244f07c8c3bd715433ce7564217b528cc05508f455c65023e83aa5f3d71ab70be24d554c2e1e274fb9bd"], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 10.983260895s ago: executing program 2 (id=2224): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x52e}], 0x1, 0x4121, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$802154_raw(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004880) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x240400c6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(0x0, r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r5, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) fallocate(r7, 0x10, 0x8001, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB]) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140099793d2969b2200e7b35a14b0495040000f491ef0fbe426b7d89", @ANYRES16=0x0, @ANYBLOB="0100ffffffff0000000001000000"], 0x14}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x840) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) 10.212557514s ago: executing program 4 (id=2226): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x20000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, {0xa, 0x6, 0x8400, @private1, 0x80000005}}}, 0x48) 10.169495248s ago: executing program 3 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010003000000fedbdf25100000000c00060003000000030000000c00060001"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCOUTQ(r4, 0x80045430, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x80) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x9, 0x3a}, 0x2c) 9.846992s ago: executing program 4 (id=2228): socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104f00000000"], 0x0}, 0x94) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc1485544, &(0x7f0000000080)) connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="6eb62ffc13578fc984d5faafb8d0736a4978a56b7afaec369885c629ae3056467a59cdd8745e539487dfc01f305313f35c383e16d434d74b9d621ae7f772e3d172da67d880a91d6a032dfb3ca177a628aeeb5364ae22ba04d968dc6183b8b7c38d64a33d1d7977ce21b45db9d0e65b83c3f66a7bd103ad2cc345fef6a606fa7b72e56d65510abff546c096447ee70ca1bbd2ba27864ceabe8ad9700831ca628b8ff1ba0008ed413d35adcd9c49ef5cb94729009014ae73a44eba61e41e51751fe0eeb9f2ac44b5938d8fe78ae818043646e56878b997a73e9b9297a976bf47377f61771f", 0xe4, r1) keyctl$read(0xb, r1, 0x0, 0x0) 9.015833741s ago: executing program 3 (id=2229): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.941023244s ago: executing program 2 (id=2230): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x2, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006800010003001000fdffff7f00000000000004d3"], 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04006c0046003300001c060008021100000008021100000050505050505042000006ae08000601010101010101002d1a0600000000000000000000040009000e0000000100030000000900000800260080090000"], 0x70}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000280)={@loopback, @dev, 0x0}, &(0x7f00000002c0)=0xffffffffffffffa6) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="18eff8c3670000"], &(0x7f0000000200)='GPL\x00', 0x1b, 0x34, &(0x7f0000000240)=""/52, 0x41000, 0x22, '\x00', r14, 0x0, r15, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x7, 0xff9, 0x5}, 0x10, 0x0, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x10, 0x20b}, 0x94) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 2.128920797s ago: executing program 4 (id=2231): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.126289855s ago: executing program 0 (id=2233): keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x47, 0x8, 0x9c28, 0x8001, 0x0, 0xfffff800, "cbd8b589ec67775cad1088e81869780785845a758266a9b2204d45c87523de2995c9f5b3fce62342d7b1c85ed4282fe6bb41b9c1e9aee9b1f77cb6db077ae75e851006ed03a620"}}, 0x15f) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.124520765s ago: executing program 3 (id=2234): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25NOUID(r0, 0x5411, 0x0) 2.123295843s ago: executing program 2 (id=2235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, 0x0) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bda", 0x7) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/231, 0xe7}}, 0x10) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) 2.122808155s ago: executing program 3 (id=2236): openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a2f000/0x1000)=nil, 0x1000, 0x300000f, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3201}], 0x1, 0x10000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000002d1867149b18b8900000001101695e4a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) bpf$BPF_GET_PROG_INFO(0x3, 0x0, 0x0) 2.122066488s ago: executing program 4 (id=2237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000240)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x2b, 0x80801, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x5) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_mb_release_group_pa\x00', r1, 0x0, 0x30}, 0x18) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket(0x25, 0x1, 0x0) r10 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f0000000000)={0xfeffffff, r9, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 2.121202196s ago: executing program 0 (id=2238): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 2.119473231s ago: executing program 4 (id=2239): socket$xdp(0x2c, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x2d, 0xfffffffffffffff9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) fcntl$setown(r5, 0x8, 0x0) fcntl$setlease(r5, 0x400, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 2.117364759s ago: executing program 0 (id=2240): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) 2.117172169s ago: executing program 2 (id=2241): socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104f00000000"], 0x0}, 0x94) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc1485544, &(0x7f0000000080)) connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="6eb62ffc13578fc984d5faafb8d0736a4978a56b7afaec369885c629ae3056467a59cdd8745e539487dfc01f305313f35c383e16d434d74b9d621ae7f772e3d172da67d880a91d6a032dfb3ca177a628aeeb5364ae22ba04d968dc6183b8b7c38d64a33d1d7977ce21b45db9d0e65b83c3f66a7bd103ad2cc345fef6a606fa7b72e56d65510abff546c096447ee70ca1bbd2ba27864ceabe8ad9700831ca628b8ff1ba0008ed413d35adcd9c49ef5cb94729009014ae73a44eba61e41e51751fe0eeb9f2ac44b5938d8fe78ae818043646e56878b997a73e9b9297a976bf47377f61771f", 0xe4, r1) keyctl$read(0xb, r1, 0x0, 0x0) 2.117039174s ago: executing program 3 (id=2242): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x140a, 0x800, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048880}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) syz_usb_disconnect(0xffffffffffffffff) syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, 0x0, 0x0) 2.116861403s ago: executing program 4 (id=2243): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, 0x1c, &(0x7f00000002c0)}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5965}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="a9365cbb810344b9d34b53c9ff4ad14817d053d10c8e558847c0d53422", 0x1d}, {&(0x7f0000000800)="22f67b6df6e3483873e1ca37ca01f67cf9d1a8515e7b7cf3f88334dcec3174bfd1abca2ec482b30bd5994c04d19c57437849c7aa7218d297835dbdd30cef72bd90903bf6696227627fcd4ca3511d6b99d523e9a0b60c03d64f6a099f794c4402811ec0f2578e975e03824650d5e359a63074d94494b6e87c4fe1c3ea3718bc4eaa877bb16bb106c8b86c60d5", 0x8c}, {&(0x7f00000003c0)="8d1a656ff8bf1fda7122e89b3773f93c694fc0cb81f9d1e3666c33282681c512d858fd2af5c41e2a27ff1a32072025b31aaec3edc6321df6313f4d60e613a1f77e1d2f7fc6cdb2983b25e27797909c022ef8344d8148f8b9e53de8a8e591251c7ab925d549671b1e78239f1022", 0x6d}], 0x3, &(0x7f0000000640)=[@flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x0, 0x6, 0x0, [@private2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x50}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xb}}], 0xe0}}], 0x3, 0x40c4) shutdown(r0, 0x1) syz_open_dev$amidi(&(0x7f0000000080), 0x54, 0x90821) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045730, &(0x7f0000000180)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e14066389519e0701d4443589fb31364b460300950c70dbac711a39d4ec4227c8db73bb5278f773bb8bf1374d9d37553600a258539c91cf1fab6a0dacb66db06c087dc53e17030c8622a7c25ab8b2faf0a064ac1bf563879338dc2db3151818a391aa1d08b67286db86502cb80c764100000000000000", 0x2e}, {&(0x7f00000000c0)="70a2fdb82de8af7f21af00000000000000"}], 0x1, 0x0, 0xffffff9e}, 0x40000d0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.736838411s ago: executing program 0 (id=2244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.735382233s ago: executing program 2 (id=2245): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x2, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) openat$cgroup_procs(r6, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000080) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04006c0046003300001c060008021100000008021100000050505050505042000006ae08000601010101010101002d1a0600000000000000000000040009000e0000000100030000000900000800260080090000"], 0x70}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000280)={@loopback, @dev, 0x0}, &(0x7f00000002c0)=0xffffffffffffffa6) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="18eff8c3670000"], &(0x7f0000000200)='GPL\x00', 0x1b, 0x34, &(0x7f0000000240)=""/52, 0x41000, 0x22, '\x00', r14, 0x0, r15, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x7, 0xff9, 0x5}, 0x10, 0x0, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x10, 0x20b}, 0x94) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 1.419990724s ago: executing program 5 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf251600000008000300", @ANYRES32=r8, @ANYBLOB="c34178146b5a760e137896de725d27ce0a6aeed1b20dd0fb1965c33ae043ed8973490a2d4b9fc0f608ad2e6dafac1990b4cf88e79e96127d1062ba5b0100fcf365d2112e458c28c25619dc7f4a2f896a575de8d3796ee4fe20eaad8f5469526b149311707c5394f84bedada4e2d69fdb1d373b741b0d805772f41a0869b8ca93842977b068a126759c97460f63f6a78aa62904c972b3e8ee93ecc9ad0f530945d5d5e7a3bc3651f1e51f013909a0268302a298afb0ec13f5011d10697a3f244f07c8c3bd715433ce7564217b528cc05508f455c65023e83aa5f3d71ab70be24d554c2e1e274fb9bd"], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 160.333304ms ago: executing program 0 (id=2246): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 152.518532ms ago: executing program 2 (id=2247): socket(0x10, 0x3, 0x0) creat(0x0, 0x8b) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xfffffffffffffffc) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) 151.373162ms ago: executing program 3 (id=2248): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=2249): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4f, 0x0, 0x1, 0xfffffffe}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f00000006c0)={0x18, r8, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r9 = socket$nl_rdma(0x10, 0x3, 0x14) fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f000000e780)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000340)="392743af809f3cbe0e4933ab88557c841b5debda76bf7fc98e3fd7bae489baed73c836d70b3e19dc1fa5e98e62a1909766d62fed8771a74fa3f54f6ab2085f976d8d51", 0x43}, {&(0x7f00000003c0)="6a77349a945eea2723ea0095a919da18776a1250f8b03250278290a212be4fbded39ebd9169e61be9f2c4273d902c04b868ac0e17e89d3a11b635efbcebb498272fd3d7b6b458e275aba5476dda52d58f1143f3d8b623bbeaab4de0d31aa1c7a9d83afdf955e0204fc9bc1aca1ffa965fa349a7c0614a3f0fcf7690b75ec47fbba41c20cc9a6b5a8bdf8d65ddeb75ffbec6c92ca3467103998729d045f515a047e610f94353b81048821713c70e7aaf1ab4f69e530a37435b7150a2719b2fb7e206a43627e7448fbbb33d92d127bb01e98f44fa112e5bf81074ac10563649a86530917720d559bdd11947258d5db02b9", 0xf0}, {&(0x7f00000004c0)="c282a3fb7333c6d695329229ad19ac12f4d6cb4ed9da11efcd439b2045fc84e6a937b0e169a8b5fdf2c2d459d79d026a39d7148717017df6e22876aa2b585917c176ef4b53ba5edd357c2373f7111ea32ed36a9752e24a3e35e3a66aa299238d016fd16a4e949ed358dbf43caed7d97bf486c1238e5b35d6045aa4bf1d4330540a", 0x81}, {&(0x7f0000000580)="281413266d9f67d494f3eab548f03bc9086f7a5f64d26021a51a9605e7b801ab56b36b194dbbe34d66013ba77096d59f8bf4c73562f0c9cff911a1984657d0547b3c7d01818ee82f5b430b77c5d0d63b70b6245ceeb6b37a6aaa55178d56dc92fa4451ca6df37c6390c1612c9c3bc0db508641a0332e44db37d656bd39d6933048ea55fb2b0b35f2f6800cbc244591780c77f7846ad1ff178881b0b8760cc6d15f1c1338337cc43b5c040acd1955c0065eeec413e8cc3893d8a02b4242f3bb9e420474462cb934b5c30778fe004fd890dbea20350d2304941b47b413f2988673f7", 0xe1}, {&(0x7f0000000680)="8f674496d519cdbe225f5af98e3995347c71b60cb418e92a74a5b9124a11ecd7e9c3aa61ad572f0a6ba995ae80545786ff6f60b35b1eb4cc34d2c4dce56ccd752e1f1ce293a35812712c4729051107e1f7f3e93c3e7a407933d2d1934a40d3d5660d0d436c7cc1802da559d55117fe2aa280384e2a90dd877eda73c637672030d1dafeae35ab6d62e1330b844ff21aaea925527750fc542b61044bf974c22346ff8488495a99e5ebf2755797b9695b926b13b5279e46e9f2ecc8bac63022821e9e1ccc7d37f3c41236ea54c28c93f5404bae2de2d35153ac", 0xd8}, {&(0x7f0000000c00)="410ea9afc9764d67bfe7e1b79e4f978e99b0d776cd", 0x15}, {&(0x7f0000000780)="eed1af893a81a44b4bc4a2c1b568a04db1adc859a9eabee7604e08d81d1b2a888992590077f5d341c3a1443687f651cb8eaab6832201892cd013c807ce00606dd5ba076ef1805af5e968df328d0322e357c479c2e29f9f6a16bf30aa0259d48abf7cb7315981429795bda3e460bdeb2f971318f63500f5f660ef7f17d7300acd2a879dd0ccb41e8681ea643d6cc90a55cc4114462678b9a37c36b2c7840232fca4c9cbb1551ae3de6138ba0b68698c72b8788ca3c4c137a3d7ed3bf8", 0xbc}, {&(0x7f0000000840)="53825bfb312c43c2cad3d4376add215443116aa9beafc2c3042b7c547e70d5519736288c0a5168137d4f06de5e6334c712bda4357ef0e7a0da65c74f49e2f7bb289f953e9ff175e2c8d68305d2a2d951fbb26ede6bad80121d58c3bc272b8667b7d6325e80d0b5b090467c61410c9ae066e58d9d271acdb6d9a0b265571f542ee5a32ed6f8c515bd276ed5880e3488351531dc32066f4059ebd0d389143fb007b7ff9e798db47b261262ff0e09396a9d6b5fd84a7554b9db3b26ce53d761d273f8e4affc426adab907", 0xc9}], 0x8, &(0x7f0000004d40)=ANY=[@ANYBLOB="1c000000000000000002000000000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x90}}, {{&(0x7f0000004e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004ec0)="308a2ff2f40c7a8ac70a60dd", 0xc}, {&(0x7f0000004f00)="7802e11838932d5128", 0x9}], 0x2}}, {{&(0x7f0000004f80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000005000)="bbc2bec791544af9756cc4951c405d4b437d825ade81989f4cf6111984f57e08ba722608f6fbccd7dc7f609561de53a072df5419cba10abddd16aeaadd2f03e8c679bcc78cb611efb9b803798de219e8b13ad0730415b75dab3a506dc02db6748aa1d436aaab270423d70a914d965361632c930023", 0x75}, {&(0x7f0000005080)="9a728d21e3516e7a36f2846608ac20fa1089a05a3f3c1a8b41423c5a906905ffd926a907da93112669f814e7ebf2a0a0f76d28c08a3e165374f25f38669fab0d8a3afeafff4f0fb26d43e06d695fd512199361787224dc3ffb17328010c21f750ab298b7abd477d64a6905500e80669510ce078a12d0902987ea4baff94f43f528912bb412cf288336cafc8fd679716894be675243e907f645e386e88cfc8a681721320450c41fa2283a3ed2b36c21fdbfdb42596c6b8d88ad0531ef24e5cf692641e6b71d1f98127a4daf1b2b975af2ea19e7535cfa6d6706e080914a883f83d83c101cf74cb15625690b0ed144b2d3", 0xf0}, {&(0x7f0000005180)="0c2667e0ac825cd064181d4e764050ba8b1f5ca799020bb471b11a5e3aec31b49d219f31309f1070899535ae5daa192e34246b6cf11f59345d824b6d096338a419955bb3fa191e3594067039cfc1a39b02eddc20140bb0bf0471c2dd2f6c1fea9d5e4d918b88c4029e978cc1eb9121a82ab1dd1bf9c3eb71ddf7332d7efd788956773075dfd45bdbc6787ba5d7cf57f3f440b27ba565faf3f218e257f53bdd748cc3c74f3ba09ab5d1d9403767d6", 0xae}, {&(0x7f0000005240)="338f47dbe9bc9ba6f2aa4e416064c43408ead0502d572d33df2ef7e90820b94db075e39069c53dc51d750eb88354aa7ceee5dd2dde8670385dc09f9b4186de7de3a070292ac5a711e69582b5f09dd12d5d5598f4d4a8c3e99069e4ffc995663201a56f9a1ea865c660e5f42af6a1e61c6972fd1a7856248012bbd83b519adc91cd", 0x81}, {&(0x7f0000005300)="aa5bd7fd40a7256715ad92bb163e531e2bf0cd397239a81944b4a665464ccf3d9ced55e03f2e755ca6cb35e999403d84409eb0e20b34b277a1f940ceeecdc8c87d0d2a0a4ab886d175327be866cc695c3b00460247fd3307a4a67f63ea8857ded8e943c6b8191c9d45f8177e335706ef98c5325a91c4f0e2303a8d74dbd37abd7f80081f31ae5250fa37f3dfa510ce42f21b3cab68112059f3f81c6f0880c01bba33a73bb345c308b80fabcb1d419e6a7ab5753614616a364aaf09bd4c166813f7db1647b1cf293459a8d82267ea96b50cb1ae330d71fd99d622a122f17cf8c02f137a7756b267a3db0ceed29d8e2d1d9f509889ac304e", 0xf7}], 0x5, &(0x7f0000005480)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r11}}}, @rights={{0x18, 0x1, 0x1, [r9, r3]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005540)="c38548c863ab5f68a703b68efb1e827da44f83f77e2f83117c918e3442170b86f1effe2542e70ca4bca4d1770bb48249bb3320e36f530e2c66149ff0f1e6c3c3b7dd62fc059353e13e4e06f5a933d8aac82b9c26bb905069efabc330d197e64dbae65b8eb3d871c5b14a40079605c28307800c3328b557fb598f4f864e53e6131bd8", 0x82}, {&(0x7f0000005600)="27e61f37c92a80e335d7e49ac7c10738a9ddb466d4160fb258e842e50c718b5d0217a2010351ecb27b81d9", 0x2b}, {&(0x7f0000005640)="a2de1928d15477f13342bb37efcd0ae2a48179e0e5979a6acb73562576fb80036d49f3acc50b3c3c6ff444d8258c4a52d009c3a4ee53e389f3bbf12e94a49ed33050d71fbde679422025ace0e412b768f5a5f0b48418b27458fb38d5bf70ba03a0a5dcc4483802890dd32ae0c7755530c8972c12d014c509e0575a", 0x7b}, {&(0x7f00000056c0)="0383d8f98af4f79e561e6ad925df71e560292e584456b721b9d84454b8640daa98313dd297f375d148d91bd1a17b674bb8", 0x31}, {&(0x7f0000005700)="efb0ebdba063bcd8ee9b491a8a44b411e94601536b6d70c97c02cc3e1381a537f17f5ac124b657d7b18bb8816aa73a1bfce858e7a1fb08007cb6685f164f1b84e831a3b24873a9dbc0ec77248bb15c10ee42cd7c56bd7af35140aae8807937203192e3668d3da38650aeeb7e50be99b906d9a3fa3149d1d906357166", 0x7c}], 0x5, &(0x7f0000005900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70, 0x20000000}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000e5c0)=[{&(0x7f000000e280)="126273043291ab08585b4cfb381d61104be2f0762e0e853417c3a9c6b5bd5add061731e3015cce5d193795009d8eeb7356a9ee33bf9bc162be0e945eea97f8497193dc77718d6da949bf17e837ddd723a51932a9d3250392575f3b44432a3670633e41d587655eee3c95eae04989a8b9df5c44d40b96e64b07e66963413436900d475a490f3da137252c565a6098540141c57b5e39ddeb795b13798f3fbb9f3cd1823bf1b69c8a194cea3a432b9c10e6e4d92f439c2d3924b8c86fad73959685a24997f5ec8e38c1a5f5f21c4006e539cae72cf93e93fb5e18f76b371d2b84a5e79df84db96d461b234acaa716e486f27c5064466ada8b259f", 0xf9}, {&(0x7f000000e380)="44ab8f73cb8509499e73b0910a30ec2cc7259fabfaa4c48b8b769812fab22f9177b81ad3d0ecb724986c50b2d488e0b66c7c688ba379bf2a7fb5abf3649a7c6c41eac2a8f58e89f7d06b1439c641bca1aff08fa8566ab181597aacec67a7e76d6e2d6a0f6e8bba374cfbf5286857225120de3cc27c0749c7933cda602bd4f36b53e6c00793ce3b3d812eab522256c24a1bf87c42cc097f19a8203d401a50e9210e723104cb85a513cb88837fcbe7b1c714905e28666a7fa571cb9ee6a539e8947795c2ee7213047107a66feac22402004171cabb0d75da55b2301e4a87dbd0", 0xdf}, {&(0x7f000000e480)="d60d62f4bb40af41a581729e35025067563a79d48e60fc24654f78bf5e1bb0a7b277714aa9170f821a46f236eaeef5178e613530702badaef05b2bc5b194d19e13e1c313bad5d3a03d2f8ed04c", 0x4d}, {&(0x7f000000e500)="66d6ff3ca8cc2e17e60a2cb9fcdd0cde3f30410d6ea0d7c564bb06c79fcf826a017d985402c9233afc5f16fbb963f16ceaa10aca6fe31305820448b3a2208bcf3db6f25f02e946d12f0ceb121ed70f7abc43d9adeb4b236299f498c0d591f93e5916b08101fbd843906960b7b5ace21342eed6a981f1a615ca87ff313821ffe596d61efe2f7838ce1bdbde062cf5f14a01c266a73f060ad0badb7b901a321e1f4fa24ab7e81007eef2", 0xa9}], 0x4, &(0x7f000000e640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff, r4, r0, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128, 0x1}}], 0x5, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) r14 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x80045430, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r13, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r15}) ftruncate(r0, 0x5e9) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x9, 0x3a}, 0x2c) kernel console output (not intermixed with test programs): C core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.414653][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.552240][ T30] audit: type=1400 audit(1752447725.341:2501): avc: denied { append } for pid=13343 comm="syz.4.1825" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 709.755693][ T30] audit: type=1400 audit(1752447725.671:2502): avc: denied { append } for pid=13343 comm="syz.4.1825" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 709.863839][ T5955] usb 5-1: USB disconnect, device number 30 [ 709.873370][ T5955] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 709.915875][ T5955] belkin_sa 5-1:32.40: device disconnected [ 711.357177][ T5887] cdc_ncm 3-1:1.0: bind() failure [ 711.433933][ T5887] usb 3-1: USB disconnect, device number 42 [ 712.038458][T13383] comedi comedi0: comedi_test: 265 microvolt, 100000 microsecond waveform attached [ 712.811332][T13417] overlayfs: failed to resolve './file0': -2 [ 712.956413][ T55] block nbd0: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 60 seconds [ 712.969136][ T55] block nbd0: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 60 seconds [ 713.000478][ T55] block nbd0: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 60 seconds [ 713.039199][ T55] block nbd0: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 60 seconds [ 714.673953][T13434] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 714.767015][T13434] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 715.225940][T13447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13447 comm=syz.3.1841 [ 715.244336][ T30] audit: type=1400 audit(1752447731.141:2503): avc: denied { write } for pid=13443 comm="syz.4.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 716.806266][T13463] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 716.828087][T13463] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 717.045196][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 718.509404][ T30] audit: type=1400 audit(1752447734.421:2504): avc: denied { read } for pid=13479 comm="syz.0.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 718.529346][T13484] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 718.571195][T13484] team0: Port device wlan1 added [ 720.867934][T13519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1860'. [ 720.944402][ T5887] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 721.094827][ T5887] usb 5-1: device descriptor read/64, error -71 [ 721.113399][ T30] audit: type=1400 audit(1752447737.021:2505): avc: denied { create } for pid=13526 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 721.355605][ T5887] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 721.494354][ T5887] usb 5-1: device descriptor read/64, error -71 [ 721.604782][ T5887] usb usb5-port1: attempt power cycle [ 722.314350][ T5887] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 722.334957][ T5887] usb 5-1: device descriptor read/8, error -71 [ 722.589576][ T5887] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 722.616107][ T5887] usb 5-1: device descriptor read/8, error -71 [ 723.153243][ T5887] usb usb5-port1: unable to enumerate USB device [ 723.897985][T13561] trusted_key: encrypted_key: insufficient parameters specified [ 724.080849][ T5887] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 724.091268][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.100686][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.110101][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.128223][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.139491][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 724.163862][T13563] Failed to initialize the IGMP autojoin socket (err -2) [ 724.241918][ T5887] usb 3-1: device descriptor read/64, error -71 [ 724.515378][T13571] team0: Port device wlan1 removed [ 724.555947][T13572] team0: Unable to change to the same mode the team is in [ 724.868397][ T5887] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 726.274449][T11561] Bluetooth: hci5: command tx timeout [ 726.940497][T13563] chnl_net:caif_netlink_parms(): no params data found [ 726.981455][ T30] audit: type=1400 audit(1752447742.871:2506): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 727.536444][T13601] FAULT_INJECTION: forcing a failure. [ 727.536444][T13601] name failslab, interval 1, probability 0, space 0, times 0 [ 727.607711][T13601] CPU: 1 UID: 0 PID: 13601 Comm: syz.4.1880 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 727.607738][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.607748][T13601] Call Trace: [ 727.607753][T13601] [ 727.607760][T13601] dump_stack_lvl+0x16c/0x1f0 [ 727.607788][T13601] should_fail_ex+0x512/0x640 [ 727.607808][T13601] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 727.607824][T13601] should_failslab+0xc2/0x120 [ 727.607840][T13601] __kmalloc_cache_noprof+0x6a/0x3e0 [ 727.607853][T13601] ? ufs_init_fs_context+0x164/0x310 [ 727.607867][T13601] ? fscontext_alloc_log+0x4a/0x1b0 [ 727.607880][T13601] fscontext_alloc_log+0x4a/0x1b0 [ 727.607896][T13601] __x64_sys_fsopen+0x157/0x240 [ 727.607913][T13601] do_syscall_64+0xcd/0x4c0 [ 727.607938][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.607951][T13601] RIP: 0033:0x7f9c06f8e929 [ 727.607961][T13601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.607971][T13601] RSP: 002b:00007f9c07da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 727.607982][T13601] RAX: ffffffffffffffda RBX: 00007f9c071b5fa0 RCX: 00007f9c06f8e929 [ 727.607989][T13601] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200 [ 727.607995][T13601] RBP: 00007f9c07da7090 R08: 0000000000000000 R09: 0000000000000000 [ 727.608002][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.608008][T13601] R13: 0000000000000001 R14: 00007f9c071b5fa0 R15: 00007ffd96ed6db8 [ 727.608021][T13601] [ 727.776762][T13563] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.783948][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.791261][T13563] bridge_slave_0: entered allmulticast mode [ 727.798561][T13563] bridge_slave_0: entered promiscuous mode [ 727.916902][T13563] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.924060][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.931388][T13563] bridge_slave_1: entered allmulticast mode [ 727.939520][T13563] bridge_slave_1: entered promiscuous mode [ 728.213699][T13563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.285933][T11561] Bluetooth: hci5: command tx timeout [ 728.898909][T13616] overlayfs: failed to resolve './file0': -2 [ 729.829248][T13563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.355131][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 730.363139][T13563] team0: Port device team_slave_0 added [ 730.370287][T11561] Bluetooth: hci5: command tx timeout [ 730.459353][T13563] team0: Port device team_slave_1 added [ 730.589902][T13633] trusted_key: encrypted_key: insufficient parameters specified [ 730.789056][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 730.820277][T13563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.876146][T13563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.902186][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.007973][T13563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.308749][T13653] team0: Unable to change to the same mode the team is in [ 732.416354][T13563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.462809][T11561] Bluetooth: hci5: command tx timeout [ 732.499086][T13563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.525039][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.841854][T13563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.661221][T13563] hsr_slave_0: entered promiscuous mode [ 733.688991][ T30] audit: type=1400 audit(1752447749.601:2507): avc: denied { read } for pid=13664 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 733.716644][T13563] hsr_slave_1: entered promiscuous mode [ 733.753537][T13563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.801797][T13563] Cannot create hsr debugfs directory [ 734.067419][ T30] audit: type=1400 audit(1752447749.941:2508): avc: denied { setopt } for pid=13668 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 737.574338][ T5955] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 737.682533][T13563] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 737.785994][ T5955] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 738.018824][T13563] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 738.035903][ T5955] usb 1-1: config 0 interface 0 has no altsetting 0 [ 738.054971][ T5955] usb 1-1: New USB device found, idVendor=0486, idProduct=0186, bcdDevice= 0.00 [ 738.592508][T13563] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 738.632378][T13563] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 738.662080][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.692313][ T5955] usb 1-1: config 0 descriptor?? [ 739.165353][ T5955] usbhid 1-1:0.0: can't add hid device: -71 [ 739.171429][ T5955] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 739.217700][ T5955] usb 1-1: USB disconnect, device number 31 [ 740.394083][T13755] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 740.420037][T13755] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 740.938898][T13563] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.035381][T13762] FAULT_INJECTION: forcing a failure. [ 741.035381][T13762] name failslab, interval 1, probability 0, space 0, times 0 [ 741.048438][T13762] CPU: 0 UID: 0 PID: 13762 Comm: syz.0.1915 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 741.048463][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.048472][T13762] Call Trace: [ 741.048477][T13762] [ 741.048481][T13762] dump_stack_lvl+0x16c/0x1f0 [ 741.048503][T13762] should_fail_ex+0x512/0x640 [ 741.048520][T13762] should_failslab+0xc2/0x120 [ 741.048538][T13762] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 741.048553][T13762] ? skb_clone+0x190/0x3f0 [ 741.048572][T13762] skb_clone+0x190/0x3f0 [ 741.048587][T13762] netlink_deliver_tap+0xabd/0xd30 [ 741.048606][T13762] ? netlink_unicast+0x41d/0x850 [ 741.048618][T13762] netlink_unicast+0x62f/0x850 [ 741.048630][T13762] ? __pfx_netlink_unicast+0x10/0x10 [ 741.048645][T13762] netlink_sendmsg+0x8d1/0xdd0 [ 741.048658][T13762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.048674][T13762] ____sys_sendmsg+0xa95/0xc70 [ 741.048686][T13762] ? copy_msghdr_from_user+0x10a/0x160 [ 741.048701][T13762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.048714][T13762] ? irqentry_exit+0x3b/0x90 [ 741.048729][T13762] ? lockdep_hardirqs_on+0x7c/0x110 [ 741.048747][T13762] ___sys_sendmsg+0x134/0x1d0 [ 741.048763][T13762] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.048777][T13762] ? __lock_acquire+0x622/0x1c90 [ 741.048806][T13762] __sys_sendmsg+0x16d/0x220 [ 741.048821][T13762] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.048846][T13762] do_syscall_64+0xcd/0x4c0 [ 741.048862][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.048877][T13762] RIP: 0033:0x7f053478e929 [ 741.048887][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.048898][T13762] RSP: 002b:00007f0535631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.048909][T13762] RAX: ffffffffffffffda RBX: 00007f05349b6160 RCX: 00007f053478e929 [ 741.048916][T13762] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000008 [ 741.048922][T13762] RBP: 00007f0535631090 R08: 0000000000000000 R09: 0000000000000000 [ 741.048928][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.048935][T13762] R13: 0000000000000000 R14: 00007f05349b6160 R15: 00007ffdda2bd168 [ 741.048948][T13762] [ 741.335702][T13764] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1916'. [ 741.385566][T13762] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 741.396789][T13762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 741.407280][T13762] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 741.640748][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.647996][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.791220][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.798418][T11527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.928803][T13778] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 741.951838][T13778] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 743.011821][ T55] block nbd0: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 90 seconds [ 743.022932][ T55] block nbd0: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 90 seconds [ 743.054656][ T55] block nbd0: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 90 seconds [ 743.334566][ T55] block nbd0: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 90 seconds [ 743.723398][T13765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.790466][T13765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.802735][T13563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.934447][ T5955] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 744.384381][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 744.390043][ T5955] usb 3-1: no configurations [ 744.404086][ T5955] usb 3-1: can't read configurations, error -22 [ 744.555209][ T5955] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 744.774307][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 744.848984][ T5955] usb 3-1: device descriptor read/all, error -71 [ 744.896207][ T5955] usb usb3-port1: attempt power cycle [ 745.398670][T13563] veth0_vlan: entered promiscuous mode [ 745.491081][T13563] veth1_vlan: entered promiscuous mode [ 746.620178][T13563] veth0_macvtap: entered promiscuous mode [ 746.929920][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.946807][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.994273][ T30] audit: type=1326 audit(1752447762.901:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 747.058757][T13563] veth1_macvtap: entered promiscuous mode [ 747.372000][T13845] overlayfs: failed to resolve './file0': -2 [ 747.778718][ T30] audit: type=1326 audit(1752447762.931:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.057153][T13563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.103348][ T30] audit: type=1326 audit(1752447762.931:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.155103][ T30] audit: type=1326 audit(1752447762.931:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.178612][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.297353][T13563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.304737][ T30] audit: type=1326 audit(1752447762.931:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.328176][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.760965][ T30] audit: type=1326 audit(1752447762.931:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.766374][T13563] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 748.813608][ T30] audit: type=1326 audit(1752447762.931:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.918268][ T30] audit: type=1326 audit(1752447762.931:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 748.966815][T13862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=13862 comm=syz.0.1939 [ 748.981683][ T30] audit: type=1326 audit(1752447762.931:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 749.024381][T13563] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 749.067462][ T30] audit: type=1326 audit(1752447762.931:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13835 comm="syz.3.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1593d8e929 code=0x7ffc0000 [ 749.167472][T13563] wireguard: wg0: Could not create IPv4 socket [ 749.219325][T13866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.276576][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 749.291206][T13563] wireguard: wg1: Could not create IPv4 socket [ 749.321042][T13563] wireguard: wg2: Could not create IPv4 socket [ 749.876856][T13877] overlayfs: workdir and upperdir must reside under the same mount [ 750.593864][T13882] trusted_key: encrypted_key: insufficient parameters specified [ 750.733642][T13884] can0: slcan on ptm0. [ 750.999928][T13890] 9pnet_fd: Insufficient options for proto=fd [ 751.153012][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'. [ 751.626022][T13881] can0 (unregistered): slcan off ptm0. [ 751.834429][ T9746] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 752.452525][ T5977] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 752.465351][ T9746] usb 1-1: Using ep0 maxpacket: 32 [ 752.481516][ T9746] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 752.533309][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 752.546163][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 752.555184][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 752.565096][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 752.572827][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 752.601600][ T9746] usb 1-1: config 0 has no interface number 0 [ 752.633192][T13919] Failed to initialize the IGMP autojoin socket (err -2) [ 752.656292][ T9746] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 752.674737][ T9746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.686680][ T9746] usb 1-1: Product: syz [ 752.691625][ T5977] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.700165][ T9746] usb 1-1: Manufacturer: syz [ 752.705966][ T9746] usb 1-1: SerialNumber: syz [ 752.707531][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.723492][ T9746] usb 1-1: config 0 descriptor?? [ 752.738499][ T9746] smsc95xx v2.0.0 [ 752.780351][ T5977] usb 5-1: config 0 has no interface number 0 [ 752.804019][ T5977] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.880080][ T5977] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 752.904462][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.974454][ T5977] usb 5-1: config 0 descriptor?? [ 752.997184][ T5977] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 753.185261][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 753.185272][ T30] audit: type=1400 audit(1752447769.101:2534): avc: denied { write } for pid=13896 comm="syz.0.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 753.254153][ T9746] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 753.304728][ T9746] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 753.906339][ T9746] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 753.935842][ T9746] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 753.951929][ T9746] usb 1-1: USB disconnect, device number 32 [ 754.107961][T13948] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 754.120455][T13948] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 754.735475][ T5840] Bluetooth: hci5: command tx timeout [ 755.086983][ T5977] usb 5-1: USB disconnect, device number 35 [ 756.060245][T13919] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 756.111976][T13919] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 756.209292][T13919] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 756.430809][T13919] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 756.804299][ T5840] Bluetooth: hci5: command tx timeout [ 757.681817][T13995] 9pnet_fd: Insufficient options for proto=fd [ 758.797399][T14020] trusted_key: encrypted_key: insufficient parameters specified [ 758.845337][ T5840] Bluetooth: hci5: command tx timeout [ 758.863381][T13919] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 758.911984][T14024] can0: slcan on ptm1. [ 758.932215][T13919] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 758.971395][T13919] wireguard: wg0: Could not create IPv4 socket [ 759.146105][T13919] wireguard: wg1: Could not create IPv4 socket [ 759.197297][T13919] wireguard: wg2: Could not create IPv4 socket [ 759.506285][T14038] FAULT_INJECTION: forcing a failure. [ 759.506285][T14038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.519567][T14038] CPU: 1 UID: 0 PID: 14038 Comm: syz.2.1970 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 759.519592][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.519602][T14038] Call Trace: [ 759.519608][T14038] [ 759.519615][T14038] dump_stack_lvl+0x16c/0x1f0 [ 759.519644][T14038] should_fail_ex+0x512/0x640 [ 759.519670][T14038] _copy_from_user+0x2e/0xd0 [ 759.519696][T14038] __sys_bpf+0x21d/0x4d80 [ 759.519728][T14038] ? __pfx___sys_bpf+0x10/0x10 [ 759.519752][T14038] ? ksys_write+0x190/0x250 [ 759.519780][T14038] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 759.519821][T14038] ? fput+0x70/0xf0 [ 759.519836][T14038] ? ksys_write+0x1ac/0x250 [ 759.519858][T14038] ? __pfx_ksys_write+0x10/0x10 [ 759.519883][T14038] __x64_sys_bpf+0x78/0xc0 [ 759.519907][T14038] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.519930][T14038] do_syscall_64+0xcd/0x4c0 [ 759.519956][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.519974][T14038] RIP: 0033:0x7fd84318e929 [ 759.519989][T14038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.520005][T14038] RSP: 002b:00007fd843fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.520022][T14038] RAX: ffffffffffffffda RBX: 00007fd8433b6160 RCX: 00007fd84318e929 [ 759.520033][T14038] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 759.520044][T14038] RBP: 00007fd843fc6090 R08: 0000000000000000 R09: 0000000000000000 [ 759.520053][T14038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.520063][T14038] R13: 0000000000000000 R14: 00007fd8433b6160 R15: 00007ffe25c77ea8 [ 759.520087][T14038] [ 759.690854][ C1] vkms_vblank_simulate: vblank timer overrun [ 760.275680][T14019] can0 (unregistered): slcan off ptm1. [ 761.964394][T12811] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 761.977911][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 762.204397][T12811] usb 1-1: Using ep0 maxpacket: 8 [ 762.232733][T12811] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 762.268276][T12811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.319244][T12811] usb 1-1: Product: syz [ 762.373543][T12811] usb 1-1: Manufacturer: syz [ 762.391881][T12811] usb 1-1: SerialNumber: syz [ 762.445980][T12811] usb 1-1: config 0 descriptor?? [ 762.491838][T12811] gspca_main: se401-2.14.0 probing 047d:5003 [ 762.577080][ T30] audit: type=1326 audit(1752447778.471:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 762.663176][T14091] 9pnet_fd: Insufficient options for proto=fd [ 762.901936][ T30] audit: type=1326 audit(1752447778.471:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 762.928110][ T30] audit: type=1326 audit(1752447778.471:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.011857][ T30] audit: type=1326 audit(1752447778.531:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.128706][T12811] gspca_se401: Wrong descriptor type [ 763.157837][ T30] audit: type=1326 audit(1752447778.531:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.500705][ T13] syz1: rxe_create_qp: returned err = -2 [ 763.554374][ T30] audit: type=1326 audit(1752447778.811:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.582505][ T1212] usb 1-1: USB disconnect, device number 33 [ 763.588773][ T30] audit: type=1326 audit(1752447778.811:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.612635][ T30] audit: type=1326 audit(1752447778.811:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.626693][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 763.704989][ T30] audit: type=1326 audit(1752447778.811:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.708384][T11527] syz1: rxe_create_qp: returned err = -2 [ 763.747483][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 763.787942][T11527] syz1: rxe_create_qp: returned err = -2 [ 763.835722][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 763.857571][T11527] syz1: rxe_create_qp: returned err = -2 [ 763.863969][ T30] audit: type=1326 audit(1752447778.811:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.2.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 763.887466][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.942735][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 764.040955][ T36] syz1: rxe_create_qp: returned err = -2 [ 764.072509][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 764.168787][ T13] syz1: rxe_create_qp: returned err = -2 [ 764.203801][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 764.327401][T11527] syz1: rxe_create_qp: returned err = -2 [ 764.356435][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 764.538753][ T13] syz1: rxe_create_qp: returned err = -2 [ 764.570178][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 764.630593][ T13] syz1: rxe_create_qp: returned err = -2 [ 764.661936][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 764.684596][ T1212] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 764.845933][ T1212] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 764.854451][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.904443][ T1212] usb 3-1: config 0 has no interface number 0 [ 764.954912][ T1212] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.004248][ T1212] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 765.022951][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.052240][ T1212] usb 3-1: config 0 descriptor?? [ 765.084798][ T1212] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 765.227748][ T13] syz1: rxe_create_qp: returned err = -2 [ 765.254337][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 765.312355][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.323861][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.335887][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.346295][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.354129][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.404120][T14129] Failed to initialize the IGMP autojoin socket (err -2) [ 767.404424][ T5840] Bluetooth: hci5: command tx timeout [ 767.506426][ T9746] usb 3-1: USB disconnect, device number 48 [ 767.524314][ T5977] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 767.618609][T14173] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 767.649599][T14173] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 767.715388][T14129] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 767.737146][ T5977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.761230][T14129] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 767.807572][ T5977] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 767.817329][T14129] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 767.843730][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.901929][ T5977] usb 1-1: config 0 descriptor?? [ 767.908271][T14129] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 768.731548][T14182] trusted_key: encrypted_key: insufficient parameters specified [ 769.058632][ T5977] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 769.102753][ T5977] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0029/input/input51 [ 769.193274][T14185] 9pnet_fd: Insufficient options for proto=fd [ 769.356961][ T5977] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 769.419874][T14179] trusted_key: encrypted_key: insufficient parameters specified [ 769.485679][ T5840] Bluetooth: hci5: command tx timeout [ 770.374502][ T5977] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 770.554485][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 770.570548][ T5977] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 770.603341][ T5977] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 770.628649][ T5977] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 770.658516][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.768471][T14218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2000'. [ 770.921557][ T5977] usb 3-1: string descriptor 0 read error: -71 [ 770.940097][ T5977] hub 3-1:32.0: USB hub found [ 771.061358][ T5977] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 771.209662][ T5977] usb 3-1: USB disconnect, device number 49 [ 771.563219][T14129] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 771.579656][ T5840] Bluetooth: hci5: command tx timeout [ 771.937447][ T9746] usb 1-1: USB disconnect, device number 34 [ 772.200652][T14129] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 772.633333][T14129] wireguard: wg0: Could not create IPv4 socket [ 772.690165][T14129] wireguard: wg1: Could not create IPv4 socket [ 772.698928][T14129] wireguard: wg2: Could not create IPv4 socket [ 773.038953][ T13] syz1: rxe_create_qp: returned err = -2 [ 773.134545][ T55] block nbd0: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 120 seconds [ 773.146200][ T55] block nbd0: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 120 seconds [ 773.218155][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 773.334481][ T55] block nbd0: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 120 seconds [ 773.360212][ T55] block nbd0: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 120 seconds [ 773.511071][ T37] syz1: rxe_create_qp: returned err = -2 [ 773.716003][ T37] RDS/IB: rds_ib_setup_qp failed (-2) [ 774.691778][ T5946] syz1: rxe_create_qp: returned err = -2 [ 774.745754][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 774.863334][T14288] IPVS: persistence engine module ip_vs_pe_ not found [ 775.287733][ T6025] syz1: rxe_create_qp: returned err = -2 [ 775.302320][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 775.496840][ T5946] syz1: rxe_create_qp: returned err = -2 [ 775.504490][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 775.708197][T14318] netlink: 'syz.4.2013': attribute type 10 has an invalid length. [ 775.717201][T14318] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 775.741691][T14318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.365594][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 776.378705][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 776.421298][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 776.424238][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 776.424255][ T30] audit: type=1400 audit(1752447792.331:2550): avc: denied { setopt } for pid=14317 comm="syz.4.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 776.460576][T11527] syz1: rxe_create_qp: returned err = -2 [ 776.474428][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 776.491602][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 776.535921][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 776.718422][T14333] Failed to initialize the IGMP autojoin socket (err -2) [ 777.635252][T14356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=14356 comm=syz.4.2018 [ 777.648171][ T30] audit: type=1400 audit(1752447793.551:2551): avc: denied { getopt } for pid=14353 comm="syz.4.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 777.754058][T14356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=14356 comm=syz.4.2018 [ 777.776883][T14356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=14356 comm=syz.4.2018 [ 777.827349][T14356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=14356 comm=syz.4.2018 [ 777.852294][T14356] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6 sclass=netlink_xfrm_socket pid=14356 comm=syz.4.2018 [ 778.202637][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 778.289137][ T30] audit: type=1400 audit(1752447794.181:2552): avc: denied { remount } for pid=14360 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 778.294297][T11561] Bluetooth: hci0: unexpected event for opcode 0x204e [ 778.423374][ T30] audit: type=1400 audit(1752447794.191:2553): avc: denied { write } for pid=14360 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 778.615363][T11561] Bluetooth: hci5: command tx timeout [ 779.439249][T14388] 9pnet_fd: Insufficient options for proto=fd [ 780.214357][ T5977] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 780.522626][ T5977] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.684255][T11561] Bluetooth: hci5: command tx timeout [ 780.802546][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.821064][T14407] ucma_write: process 1490 (syz.3.2027) changed security contexts after opening file descriptor, this is not allowed. [ 781.032877][ T5977] usb 5-1: config 0 has no interface number 0 [ 781.053691][ T5977] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.101477][ T5977] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 781.132850][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.150631][T14424] dummy0: entered promiscuous mode [ 781.182729][ T5977] usb 5-1: config 0 descriptor?? [ 781.213068][T14424] dummy0: left promiscuous mode [ 781.228734][ T5977] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 781.343726][T14333] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 781.354804][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 781.426715][T14333] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 781.461245][T14333] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 781.508921][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'. [ 781.511352][T14333] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 781.533583][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.562618][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 781.576564][ T5977] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 781.607837][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 781.630633][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.662088][ T24] usb 3-1: Product: syz [ 781.664669][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 781.675079][ T24] usb 3-1: Manufacturer: syz [ 781.681561][ T24] usb 3-1: SerialNumber: syz [ 781.747047][ T5977] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.775587][ T5977] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 781.796755][ T5977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 781.814355][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.847275][T14429] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 781.879715][ T5977] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.912540][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.954654][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.015542][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 782.060654][ T24] usb 3-1: USB disconnect, device number 50 [ 782.177258][ T44] usb 1-1: USB disconnect, device number 35 [ 782.224506][T14453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14453 comm=syz.3.2034 [ 782.494887][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 782.523661][T14333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 782.548457][T14333] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 782.567378][T14333] wireguard: wg0: Could not create IPv4 socket [ 782.576246][T14333] wireguard: wg1: Could not create IPv4 socket [ 782.587742][T14333] wireguard: wg2: Could not create IPv4 socket [ 782.667572][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 782.680882][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 782.695320][ T24] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 782.711355][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.723012][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.738295][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 782.749101][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.770742][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.792836][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 782.802917][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.933487][ T36] syz1: rxe_create_qp: returned err = -2 [ 782.958320][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 783.147810][ T24] usb 3-1: usb_control_msg returned -32 [ 783.153667][ T24] usbtmc 3-1:16.0: can't read capabilities [ 783.185938][ T10] usb 5-1: USB disconnect, device number 36 [ 783.256395][ T1212] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 783.287335][ T5946] syz1: rxe_create_qp: returned err = -2 [ 783.461425][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.467556][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.473570][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.479680][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.485796][ C1] usbtmc 3-1:16.0: invalid notification: 11 [ 783.491899][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.498104][ C1] usbtmc 3-1:16.0: invalid notification: 2 [ 783.503221][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 783.504088][ C1] usbtmc 3-1:16.0: invalid notification: 5 [ 783.515755][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.521772][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.527777][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.533771][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.539799][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.545833][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.551847][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.557866][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.563871][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.565109][ T1212] usb 1-1: Using ep0 maxpacket: 32 [ 783.569881][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.584260][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.590322][ C1] usbtmc 3-1:16.0: invalid notification: 30 [ 783.596416][ C1] usbtmc 3-1:16.0: invalid notification: 30 [ 783.602491][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.608503][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.614504][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.620507][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.626537][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.632530][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.634733][ T1212] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.638515][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.664369][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.670403][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.676428][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.680471][T14487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.682574][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.704406][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.710559][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.724287][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.724485][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.730410][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.743581][T14487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.744230][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.760451][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.767541][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.775245][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.781613][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.784016][ T1212] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 783.790971][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.803165][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.809338][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.815383][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.821422][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.831736][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 783.834305][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.849631][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.855674][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.861688][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.867717][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.873734][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.879773][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.883878][ T1212] usb 1-1: Product: syz [ 783.885916][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.904449][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.910556][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.916602][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.922630][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.925706][ T1212] usb 1-1: config 0 descriptor?? [ 783.928673][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.944254][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.950298][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.956328][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.962349][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.968481][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.974501][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.980511][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.986550][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.992633][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 783.998676][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.004718][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.010710][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.016700][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.022706][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.028755][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.034784][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.040789][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.046819][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.052836][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.058861][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.064897][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.070911][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.076957][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.082968][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.089013][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.104444][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.110497][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.116527][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.122544][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.128604][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.134623][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.140633][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.146649][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.152787][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.158813][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.164849][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.170880][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.176897][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.182913][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.188947][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.194985][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.201085][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.207371][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.213384][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.219415][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.225464][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.231469][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.237499][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.243506][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.249532][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.255555][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.261592][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.267660][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.273678][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.279706][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.285761][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.289215][ T5946] syz1: rxe_create_qp: returned err = -2 [ 784.291748][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.304403][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.310427][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.316463][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.319908][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 784.322443][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.333711][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.339734][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.345770][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.351811][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.357822][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.363848][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.369939][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.375946][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.381950][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.387997][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.394012][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.400025][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.414427][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.420472][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.426499][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.432500][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.436599][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.438507][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.452816][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.458859][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.460173][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.464852][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.478447][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.484458][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.490472][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.496476][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.502470][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.511942][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.517974][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.524006][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.530096][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.536156][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.542179][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.548299][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.554306][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.560323][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.566333][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.572344][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.578441][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.584462][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.590483][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.596541][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.602551][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.608678][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.614716][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.620722][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.626757][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.632783][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.638855][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.644869][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.650884][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.656889][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.662920][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.668922][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.674932][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.680953][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.687038][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.693036][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.699120][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.705140][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.711177][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.717207][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.723224][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.729289][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.735304][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.741334][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.747359][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.753381][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.759495][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.765518][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.771537][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.777596][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.783623][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.789638][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.795717][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.801729][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 784.807793][ C1] usbtmc 3-1:16.0: invalid notification: 0 [ 785.084392][ T44] usb 3-1: USB disconnect, device number 51 [ 785.175664][ T36] syz1: rxe_create_qp: returned err = -2 [ 785.193719][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 785.966688][ T6025] syz1: rxe_create_qp: returned err = -2 [ 785.993599][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 786.186382][T14533] FAULT_INJECTION: forcing a failure. [ 786.186382][T14533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.292825][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.2.2045 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 786.292855][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.292864][T14533] Call Trace: [ 786.292870][T14533] [ 786.292877][T14533] dump_stack_lvl+0x16c/0x1f0 [ 786.292908][T14533] should_fail_ex+0x512/0x640 [ 786.292935][T14533] _copy_to_user+0x32/0xd0 [ 786.292980][T14533] simple_read_from_buffer+0xcb/0x170 [ 786.293004][T14533] proc_fail_nth_read+0x197/0x270 [ 786.293026][T14533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.293049][T14533] ? rw_verify_area+0xcf/0x680 [ 786.293069][T14533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.293091][T14533] vfs_read+0x1e1/0xc60 [ 786.293120][T14533] ? __pfx___mutex_lock+0x10/0x10 [ 786.293144][T14533] ? __pfx_vfs_read+0x10/0x10 [ 786.293172][T14533] ? __fget_files+0x20e/0x3c0 [ 786.293203][T14533] ksys_read+0x12a/0x250 [ 786.293224][T14533] ? __pfx_ksys_read+0x10/0x10 [ 786.293246][T14533] ? fput+0x70/0xf0 [ 786.293266][T14533] do_syscall_64+0xcd/0x4c0 [ 786.293291][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.293309][T14533] RIP: 0033:0x7fd84318d33c [ 786.293324][T14533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 786.293340][T14533] RSP: 002b:00007fd844008030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.293357][T14533] RAX: ffffffffffffffda RBX: 00007fd8433b5fa0 RCX: 00007fd84318d33c [ 786.293368][T14533] RDX: 000000000000000f RSI: 00007fd8440080a0 RDI: 0000000000000003 [ 786.293378][T14533] RBP: 00007fd844008090 R08: 0000000000000000 R09: 0000000000000000 [ 786.293389][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.293399][T14533] R13: 0000000000000000 R14: 00007fd8433b5fa0 R15: 00007ffe25c77ea8 [ 786.293421][T14533] [ 786.518187][ T6025] syz1: rxe_create_qp: returned err = -2 [ 786.547379][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 786.914933][T14544] openvswitch: netlink: IPv4 tunnel dst address is zero [ 787.294261][ T6025] syz1: rxe_create_qp: returned err = -2 [ 787.314380][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 787.403141][T14544] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2047'. [ 787.795727][ T1212] usbhid 1-1:0.0: can't add hid device: -71 [ 787.830843][ T1212] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 787.868620][ T1212] usb 1-1: USB disconnect, device number 36 [ 788.220474][T11527] syz1: rxe_create_qp: returned err = -2 [ 788.252034][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 788.444434][ T30] audit: type=1400 audit(1752447804.281:2554): avc: denied { read write } for pid=14582 comm="syz.0.2055" dev="sockfs" ino=53566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.497334][ T5946] syz1: rxe_create_qp: returned err = -2 [ 789.273814][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 789.519426][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 789.541886][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 789.550591][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 789.558395][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 789.727404][T11527] syz1: rxe_create_qp: returned err = -2 [ 789.750556][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 789.761619][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 790.069536][T14606] Failed to initialize the IGMP autojoin socket (err -2) [ 790.655603][ T5955] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 790.815112][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 790.908666][ T5955] usb 4-1: config 0 has no interfaces? [ 790.915283][ T5955] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 790.965403][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.053352][ T5955] usb 4-1: config 0 descriptor?? [ 791.322180][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.356688][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.397297][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.428741][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.457143][ T1212] usb 4-1: USB disconnect, device number 37 [ 791.989931][T14666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.054523][T11561] Bluetooth: hci5: command tx timeout [ 792.520110][T14606] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 792.945460][T14606] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 793.028146][T14606] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 793.468804][T14606] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 794.128052][T11561] Bluetooth: hci5: command tx timeout [ 795.158501][T14714] syz.0.2081 (14714): drop_caches: 2 [ 795.701398][T14728] trusted_key: encrypted_key: insufficient parameters specified [ 795.720640][T14728] trusted_key: encrypted_key: insufficient parameters specified [ 796.003572][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 796.207276][T11561] Bluetooth: hci5: command tx timeout [ 798.517350][T11561] Bluetooth: hci5: command tx timeout [ 798.545752][T14760] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2088'. [ 798.567447][T14606] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 798.598596][T14606] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 798.641043][T14606] wireguard: wg0: Could not create IPv4 socket [ 798.792512][T14606] wireguard: wg1: Could not create IPv4 socket [ 798.913826][T14776] netlink: 'syz.0.2091': attribute type 6 has an invalid length. [ 799.366849][T14606] wireguard: wg2: Could not create IPv4 socket [ 799.636253][ T1212] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 799.814746][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 799.821342][ T1212] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.840121][ T1212] usb 3-1: config 0 interface 0 has no altsetting 0 [ 799.893239][ T1212] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 799.916561][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 799.938789][ T1212] usb 3-1: Product: syz [ 800.031349][T14798] trusted_key: encrypted_key: insufficient parameters specified [ 800.046222][T14798] trusted_key: encrypted_key: insufficient parameters specified [ 800.221329][ T6025] syz1: rxe_create_qp: returned err = -2 [ 800.232281][ T1212] usb 3-1: config 0 descriptor?? [ 800.261400][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 800.917197][ T37] syz1: rxe_create_qp: returned err = -2 [ 800.947762][ T37] RDS/IB: rds_ib_setup_qp failed (-2) [ 801.030919][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.078294][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.680314][ T6025] syz1: rxe_create_qp: returned err = -2 [ 802.779837][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 802.897899][ T1212] usbhid 3-1:0.0: can't add hid device: -71 [ 802.904342][ T1212] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 802.925092][ T1212] usb 3-1: USB disconnect, device number 52 [ 803.148086][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 803.159142][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 803.166422][ T55] block nbd0: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 150 seconds [ 803.181181][ T55] block nbd0: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 150 seconds [ 803.198929][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 803.199931][ T179] syz1: rxe_create_qp: returned err = -2 [ 803.213722][T14853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=14853 comm=syz.4.2103 [ 803.227267][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.244274][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.250544][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 803.264426][ T5955] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 803.287971][T14849] Failed to initialize the IGMP autojoin socket (err -2) [ 803.354377][ T55] block nbd0: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 150 seconds [ 803.374785][ T55] block nbd0: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 150 seconds [ 803.477522][ T5955] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 803.491703][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.509917][ T5955] usb 4-1: Product: syz [ 803.520087][ T5955] usb 4-1: Manufacturer: syz [ 803.531446][ T5955] usb 4-1: SerialNumber: syz [ 803.573160][ T5955] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 803.599792][ T1212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 804.206160][ T5955] usb 4-1: USB disconnect, device number 38 [ 804.691883][ T1212] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 804.704883][ T1212] ath9k_htc: Failed to initialize the device [ 804.724300][ T5955] usb 4-1: ath9k_htc: USB layer deinitialized [ 804.989182][T14849] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 805.312492][T14895] input: syz0 as /devices/virtual/input/input52 [ 805.327780][ T5840] Bluetooth: hci5: command tx timeout [ 805.399898][T14849] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 805.467698][ T30] audit: type=1400 audit(1752447821.381:2555): avc: denied { map } for pid=14902 comm="syz.3.2112" path="socket:[54971]" dev="sockfs" ino=54971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 805.537435][T14849] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 805.650206][ T30] audit: type=1400 audit(1752447821.381:2556): avc: denied { read } for pid=14902 comm="syz.3.2112" path="socket:[54971]" dev="sockfs" ino=54971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 805.676029][ T30] audit: type=1400 audit(1752447821.381:2557): avc: denied { ioctl } for pid=14902 comm="syz.3.2112" path="socket:[54971]" dev="sockfs" ino=54971 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 805.704540][ T5955] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 805.721334][T14849] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 805.894278][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 805.903553][ T5955] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.919098][ T5955] usb 1-1: config 0 interface 0 has no altsetting 0 [ 805.927091][ T5955] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 806.377688][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 806.407104][T14910] syz.3.2114 (14910): drop_caches: 2 [ 806.451200][ T5955] usb 1-1: Product: syz [ 806.506581][ T5955] usb 1-1: config 0 descriptor?? [ 807.086989][T14915] trusted_key: encrypted_key: insufficient parameters specified [ 807.100687][T14915] trusted_key: encrypted_key: insufficient parameters specified [ 807.431891][ T5840] Bluetooth: hci5: command tx timeout [ 807.611495][T14901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.626056][T14901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.540808][T14929] team0: Unable to change to the same mode the team is in [ 808.591645][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.603126][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.463342][ T5955] usbhid 1-1:0.0: can't add hid device: -71 [ 809.485888][ T5840] Bluetooth: hci5: command tx timeout [ 809.496489][ T5955] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 809.653688][T14937] netlink: 'syz.2.2120': attribute type 2 has an invalid length. [ 809.663429][ T5955] usb 1-1: USB disconnect, device number 37 [ 809.677262][T14937] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2120'. [ 809.982030][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'. [ 810.064341][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 810.082449][T14945] vlan2: entered allmulticast mode [ 810.106886][T14945] bond1: entered allmulticast mode [ 810.189102][T14849] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 810.227645][T14849] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 810.245973][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 810.256728][ T30] audit: type=1400 audit(1752447826.161:2558): avc: denied { read } for pid=14948 comm="syz.4.2124" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 810.461545][ T10] usb 3-1: config 0 has no interfaces? [ 810.509683][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.610746][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.621015][ T30] audit: type=1400 audit(1752447826.171:2559): avc: denied { open } for pid=14948 comm="syz.4.2124" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 810.970874][ T10] usb 3-1: config 0 descriptor?? [ 811.075655][T14849] wireguard: wg0: Could not create IPv4 socket [ 811.083951][T14849] wireguard: wg1: Could not create IPv4 socket [ 811.095280][T14849] wireguard: wg2: Could not create IPv4 socket [ 811.122473][ T30] audit: type=1400 audit(1752447826.221:2560): avc: denied { read write } for pid=14948 comm="syz.4.2124" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.146106][ T30] audit: type=1400 audit(1752447826.221:2561): avc: denied { open } for pid=14948 comm="syz.4.2124" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.379127][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.450600][T14963] trusted_key: encrypted_key: insufficient parameters specified [ 811.460390][T14963] trusted_key: encrypted_key: insufficient parameters specified [ 811.529638][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.810679][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.833309][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.858341][ T9746] usb 3-1: USB disconnect, device number 53 [ 812.206263][ T37] syz1: rxe_create_qp: returned err = -2 [ 812.218033][ T37] RDS/IB: rds_ib_setup_qp failed (-2) [ 812.225379][ T44] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 812.384326][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 812.391551][ T44] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.404004][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 812.418030][ T44] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 812.440136][ T44] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 812.461704][ T44] usb 5-1: Product: syz [ 812.471706][ T44] usb 5-1: config 0 descriptor?? [ 812.821217][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 812.851732][ T30] audit: type=1400 audit(1752447828.761:2562): avc: denied { watch watch_reads } for pid=14968 comm="syz.2.2129" path="pipe:[55063]" dev="pipefs" ino=55063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 812.908263][T14976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 812.963883][T14969] syzkaller0: entered promiscuous mode [ 812.969870][T14972] ceph: No mds server is up or the cluster is laggy [ 812.995505][T14969] syzkaller0: entered allmulticast mode [ 813.075892][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 813.090870][T14966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.094842][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 813.102989][T14966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.121419][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 813.136977][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 813.145490][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 813.173439][ T36] syz1: rxe_create_qp: returned err = -2 [ 813.196770][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 813.619308][ T13] syz1: rxe_create_qp: returned err = -2 [ 813.647682][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 814.024654][T14990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 814.031298][T14990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 814.075491][T14990] vhci_hcd vhci_hcd.0: Device attached [ 814.179281][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 814.201626][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 814.257684][ T44] usb 5-1: USB disconnect, device number 37 [ 814.309705][T11527] syz1: rxe_create_qp: returned err = -2 [ 814.324252][ T10] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 814.352589][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 814.360288][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 814.507884][T14992] vhci_hcd: connection reset by peer [ 814.532011][T11527] vhci_hcd: stop threads [ 814.539406][T11527] vhci_hcd: release socket [ 814.595903][T11527] vhci_hcd: disconnect device [ 814.597262][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.611673][ T24] usb 1-1: config 0 has no interface number 0 [ 814.636992][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.648260][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.664538][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 814.675487][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.717195][ T24] usb 1-1: config 0 descriptor?? [ 815.160671][ T24] usbhid 1-1:0.1: can't add hid device: -71 [ 815.169772][ T24] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 815.191691][ T24] usb 1-1: USB disconnect, device number 38 [ 815.255843][T11561] Bluetooth: hci5: command tx timeout [ 815.331245][ T179] syz1: rxe_create_qp: returned err = -2 [ 815.339508][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 815.528277][T11527] syz1: rxe_create_qp: returned err = -2 [ 815.535758][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 816.016618][T14980] Failed to initialize the IGMP autojoin socket (err -2) [ 816.104921][ T30] audit: type=1326 audit(1752447832.021:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 816.139207][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 816.185822][ T30] audit: type=1326 audit(1752447832.021:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 816.215360][ T37] syz1: rxe_create_qp: returned err = -2 [ 816.236010][T15010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2139'. [ 816.251550][ T37] RDS/IB: rds_ib_setup_qp failed (-2) [ 816.279090][ T30] audit: type=1326 audit(1752447832.021:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 816.339739][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2139'. [ 816.369995][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 816.384231][ T30] audit: type=1326 audit(1752447832.061:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 816.479662][ T30] audit: type=1326 audit(1752447832.061:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 816.742959][ T30] audit: type=1326 audit(1752447832.071:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 817.043931][ T30] audit: type=1326 audit(1752447832.071:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 817.078084][ T30] audit: type=1326 audit(1752447832.071:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 817.114888][ T30] audit: type=1326 audit(1752447832.121:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd84312ab19 code=0x7ffc0000 [ 817.152989][ T9746] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 817.167956][ T30] audit: type=1326 audit(1752447832.121:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.2.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84318e929 code=0x7ffc0000 [ 817.264388][ T5955] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 817.324310][T11561] Bluetooth: hci5: command tx timeout [ 817.369448][ T9746] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 818.015926][ T9746] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 818.340824][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 818.359086][ T9746] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.477793][ T9746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.541185][ T5955] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.575552][T15019] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 818.596791][T15028] team0: Unable to change to the same mode the team is in [ 818.607618][ T9746] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.625196][ T5955] usb 1-1: config 0 interface 0 has no altsetting 0 [ 818.634006][ T5955] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 818.679043][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 818.697091][ T5955] usb 1-1: Product: syz [ 818.718848][ T5955] usb 1-1: config 0 descriptor?? [ 818.810516][ T5977] usb 5-1: USB disconnect, device number 38 [ 819.424390][T11561] Bluetooth: hci5: command tx timeout [ 819.465368][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.480905][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.062102][ T10] vhci_hcd: vhci_device speed not set [ 820.610569][T14980] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 820.660172][T14980] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 820.740214][T14980] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 820.912157][T15052] binder: 15047:15052 ioctl 4018620d 0 returned -22 [ 820.988653][T15052] syz.4.2149 (15052): drop_caches: 2 [ 821.374945][T14980] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 821.499220][T11561] Bluetooth: hci5: command tx timeout [ 821.734767][ T5955] usbhid 1-1:0.0: can't add hid device: -71 [ 821.740844][ T5955] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 821.809364][ T5955] usb 1-1: USB disconnect, device number 39 [ 821.825010][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 821.870264][T15062] FAULT_INJECTION: forcing a failure. [ 821.870264][T15062] name failslab, interval 1, probability 0, space 0, times 0 [ 821.944505][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.4.2153 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 821.944532][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.944542][T15062] Call Trace: [ 821.944548][T15062] [ 821.944554][T15062] dump_stack_lvl+0x16c/0x1f0 [ 821.944583][T15062] should_fail_ex+0x512/0x640 [ 821.944605][T15062] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 821.944633][T15062] should_failslab+0xc2/0x120 [ 821.944659][T15062] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 821.944681][T15062] ? security_file_alloc+0x34/0x2b0 [ 821.944711][T15062] security_file_alloc+0x34/0x2b0 [ 821.944735][T15062] init_file+0x93/0x4c0 [ 821.944752][T15062] alloc_empty_file+0x73/0x1e0 [ 821.944775][T15062] alloc_file_pseudo+0x13a/0x230 [ 821.944793][T15062] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 821.944812][T15062] ? _raw_spin_unlock+0x28/0x50 [ 821.944832][T15062] ? alloc_fd+0x471/0x7d0 [ 821.944861][T15062] __anon_inode_getfile+0xe8/0x280 [ 821.944890][T15062] anon_inode_getfd+0x52/0xb0 [ 821.944916][T15062] __x64_sys_fsopen+0x18b/0x240 [ 821.944936][T15062] do_syscall_64+0xcd/0x4c0 [ 821.944960][T15062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.944978][T15062] RIP: 0033:0x7f9c06f8e929 [ 821.944993][T15062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.945009][T15062] RSP: 002b:00007f9c07da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 821.945026][T15062] RAX: ffffffffffffffda RBX: 00007f9c071b5fa0 RCX: 00007f9c06f8e929 [ 821.945037][T15062] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200 [ 821.945048][T15062] RBP: 00007f9c07da7090 R08: 0000000000000000 R09: 0000000000000000 [ 821.945058][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.945068][T15062] R13: 0000000000000001 R14: 00007f9c071b5fa0 R15: 00007ffd96ed6db8 [ 821.945092][T15062] [ 822.238264][ T30] kauditd_printk_skb: 1089 callbacks suppressed [ 822.238284][ T30] audit: type=1400 audit(1752447838.141:3662): avc: denied { write } for pid=15071 comm="syz.3.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 822.934435][ T9746] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 822.964369][ T5955] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 823.022524][T15089] overlayfs: failed to resolve './file0': -2 [ 823.124308][ T9746] usb 4-1: Using ep0 maxpacket: 8 [ 823.133194][ T9746] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 823.173899][ T9746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.184234][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 823.232043][ T9746] usb 4-1: Product: syz [ 823.232381][ T5955] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 823.256547][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 823.272971][ T9746] usb 4-1: Manufacturer: syz [ 823.278095][ T9746] usb 4-1: SerialNumber: syz [ 823.296144][ T9746] usb 4-1: config 0 descriptor?? [ 823.302528][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.323923][ T9746] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 823.346482][ T5955] usb 5-1: config 0 descriptor?? [ 823.368767][ T9746] dvb-usb: bulk message failed: -22 (2/0) [ 823.428824][ T9746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.438863][T14980] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 823.441738][ T9746] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 823.466064][T14980] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 823.469639][ T9746] usb 4-1: media controller created [ 823.682187][ T5955] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 823.903260][T14980] wireguard: wg0: Could not create IPv4 socket [ 823.911732][T14980] wireguard: wg1: Could not create IPv4 socket [ 823.920306][T14980] wireguard: wg2: Could not create IPv4 socket [ 823.938786][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 824.018453][ T9746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.059725][ T5955] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 824.111937][ T5955] usb 5-1: media controller created [ 824.141688][ T9746] dvb-usb: bulk message failed: -22 (1/0) [ 824.154102][ T9746] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 824.174048][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.189352][ T9746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 824.253806][ T9746] dvb-usb: schedule remote query interval to 50 msecs. [ 824.263100][ T5955] az6027: usb out operation failed. (-71) [ 824.269553][ T9746] dvb-usb: bulk message failed: -22 (2/0) [ 824.323474][ T5955] az6027: usb out operation failed. (-71) [ 824.334012][ T9746] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 824.344790][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 824.353802][ T10] dvb-usb: error while querying for an remote control event. [ 824.363015][ T5955] stb0899_attach: Driver disabled by Kconfig [ 824.374496][ T5955] az6027: no front-end attached [ 824.374496][ T5955] [ 824.399496][ T9746] usb 4-1: USB disconnect, device number 39 [ 824.415231][ T5955] az6027: usb out operation failed. (-71) [ 824.428225][ T5955] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 824.444949][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 824.470972][ T10] dvb-usb: error while querying for an remote control event. [ 824.504115][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 824.549010][ T5955] dvb-usb: schedule remote query interval to 400 msecs. [ 824.563143][ T36] syz1: rxe_create_qp: returned err = -2 [ 824.583636][ T5955] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 824.594307][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 824.608702][ T9746] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 824.623338][ T5955] usb 5-1: USB disconnect, device number 39 [ 824.635391][ T5977] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 824.708778][ T5955] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 824.776125][ T6025] syz1: rxe_create_qp: returned err = -2 [ 824.791539][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 824.804327][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 824.811551][ T5977] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.823884][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 824.835005][ T5977] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 824.848478][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 824.875667][ T5977] usb 1-1: Product: syz [ 824.906710][ T5977] usb 1-1: config 0 descriptor?? [ 825.236540][T15114] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 825.523081][ T5946] syz1: rxe_create_qp: returned err = -2 [ 825.550339][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 825.570978][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.604381][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.241739][ T30] audit: type=1400 audit(1752447842.151:3663): avc: denied { write } for pid=15119 comm="syz.3.2166" path="socket:[56589]" dev="sockfs" ino=56589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 826.242000][T15121] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2166'. [ 826.447212][ T36] syz1: rxe_create_qp: returned err = -2 [ 826.455261][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 827.133162][T15129] overlayfs: failed to resolve './file0': -2 [ 827.238368][ T37] syz1: rxe_create_qp: returned err = -2 [ 827.268047][ T37] RDS/IB: rds_ib_setup_qp failed (-2) [ 827.428847][ T5977] usbhid 1-1:0.0: can't add hid device: -71 [ 827.450628][ T5977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 827.471204][ T5977] usb 1-1: USB disconnect, device number 40 [ 827.706844][ T6025] syz1: rxe_create_qp: returned err = -2 [ 827.727192][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 827.794256][ T5955] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 827.995769][ T5955] usb 3-1: config 4 has an invalid interface number: 1 but max is 0 [ 828.007391][ T5955] usb 3-1: config 4 has no interface number 0 [ 828.019824][ T5955] usb 3-1: config 4 interface 1 has no altsetting 0 [ 828.930669][ T36] syz1: rxe_create_qp: returned err = -2 [ 828.944699][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 828.995831][ T5955] usb 3-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=21.c0 [ 829.009747][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.018445][ T5955] usb 3-1: Product: syz [ 829.022677][ T5955] usb 3-1: Manufacturer: syz [ 829.028031][ T5955] usb 3-1: SerialNumber: syz [ 829.224559][ T179] syz1: rxe_create_qp: returned err = -2 [ 829.246976][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 829.402702][ T36] syz1: rxe_create_qp: returned err = -2 [ 829.410631][ T36] RDS/IB: rds_ib_setup_qp failed (-2) [ 829.497511][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.510394][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.529897][ T5955] xsens_mt 3-1:4.1: xsens_mt converter detected [ 829.538315][ T5955] usb 3-1: xsens_mt converter now attached to ttyUSB0 [ 829.548133][ T5955] usb 3-1: USB disconnect, device number 55 [ 829.557013][ T5955] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 829.566084][ T5955] xsens_mt 3-1:4.1: device disconnected [ 830.294660][ T37] syz1: rxe_create_qp: returned err = -2 [ 830.315842][ T37] RDS/IB: rds_ib_setup_qp failed (-2) [ 830.428155][ T6025] syz1: rxe_create_qp: returned err = -2 [ 830.465565][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 831.250319][ T5955] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 831.275489][ T179] syz1: rxe_create_qp: returned err = -2 [ 831.282831][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 831.474243][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 831.499351][T15174] team0: Unable to change to the same mode the team is in [ 831.502627][ T5955] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.668581][ T30] audit: type=1400 audit(1752447847.291:3664): avc: denied { wake_alarm } for pid=15166 comm="syz.2.2182" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 833.254491][T13336] block nbd0: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 180 seconds [ 833.279429][T13336] block nbd0: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 180 seconds [ 833.374409][T13336] block nbd0: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 180 seconds [ 833.402292][T13336] block nbd0: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 180 seconds [ 833.402729][T11527] syz1: rxe_create_qp: returned err = -2 [ 833.767185][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 833.974657][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 833.982235][ T5955] usb 4-1: string descriptor 0 read error: -71 [ 833.988633][ T5955] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 833.997769][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 834.008354][ T5955] usb 4-1: config 0 descriptor?? [ 834.014009][ T5955] usb 4-1: can't set config #0, error -71 [ 834.021827][ T5955] usb 4-1: USB disconnect, device number 40 [ 834.079742][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 834.090059][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 834.098549][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 834.106326][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 834.114912][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 834.174518][T15184] Failed to initialize the IGMP autojoin socket (err -2) [ 834.293192][T15189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=15189 comm=syz.4.2187 [ 834.327198][ T30] audit: type=1400 audit(1752447850.231:3665): avc: denied { map } for pid=15190 comm="syz.3.2188" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 834.430410][T15191] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 834.442123][T15191] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 834.460968][ T30] audit: type=1400 audit(1752447850.231:3666): avc: denied { execute } for pid=15190 comm="syz.3.2188" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 834.519487][ T30] audit: type=1400 audit(1752447850.341:3667): avc: denied { getopt } for pid=15190 comm="syz.3.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 834.644463][ T5955] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 835.306976][T15208] overlayfs: failed to resolve './file0': -2 [ 835.630690][T15209] syz.3.2192 (15209): drop_caches: 2 [ 835.698541][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.712570][ T5955] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 835.740897][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.015746][ T5955] usb 1-1: config 0 descriptor?? [ 836.204318][T11561] Bluetooth: hci5: command tx timeout [ 836.471582][ T5955] kye 0003:0458:5013.002A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 836.491282][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.517486][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.534525][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.551745][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.569617][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.586492][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.624397][ T5955] kye 0003:0458:5013.002A: unknown main item tag 0x0 [ 836.683257][ T5955] kye 0003:0458:5013.002A: hidraw0: USB HID v0.2f Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 836.743072][ T5955] kye 0003:0458:5013.002A: tablet-enabling feature report not found [ 836.762842][ T5955] kye 0003:0458:5013.002A: tablet enabling failed [ 836.847570][ T5955] usb 1-1: USB disconnect, device number 41 [ 836.947370][T15234] fido_id[15234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 837.004300][ T5977] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 837.167687][ T5977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 837.234422][ T5977] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 837.268669][ T5977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 837.726914][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.820549][T15233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 837.871800][ T5977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 837.931705][T15238] team0: Unable to change to the same mode the team is in [ 838.328283][T11561] Bluetooth: hci5: command tx timeout [ 838.682579][ T5977] usb 4-1: USB disconnect, device number 41 [ 838.929650][ T30] audit: type=1400 audit(1752447854.841:3668): avc: denied { read } for pid=15241 comm="syz.4.2199" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 839.080335][T15245] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 839.597692][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.744811][ T30] audit: type=1400 audit(1752447854.871:3669): avc: denied { open } for pid=15241 comm="syz.4.2199" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 839.810250][T15184] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 840.002624][T15184] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 840.080789][T15257] syz.3.2203: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 840.310416][T15257] CPU: 1 UID: 0 PID: 15257 Comm: syz.3.2203 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 840.310450][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.310462][T15257] Call Trace: [ 840.310469][T15257] [ 840.310478][T15257] dump_stack_lvl+0x16c/0x1f0 [ 840.310510][T15257] warn_alloc+0x248/0x3a0 [ 840.310539][T15257] ? __pfx_warn_alloc+0x10/0x10 [ 840.310561][T15257] ? __pfx_stack_trace_save+0x10/0x10 [ 840.310586][T15257] ? stack_depot_save_flags+0x28/0xa40 [ 840.310618][T15257] ? kasan_save_stack+0x42/0x60 [ 840.310641][T15257] ? kasan_save_stack+0x33/0x60 [ 840.310662][T15257] ? kasan_save_track+0x14/0x30 [ 840.310685][T15257] ? xskq_create+0x52/0x1d0 [ 840.310705][T15257] ? xsk_setsockopt+0x640/0x840 [ 840.310728][T15257] ? do_sock_setsockopt+0x221/0x470 [ 840.310759][T15257] ? xskq_create+0xfb/0x1d0 [ 840.310782][T15257] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 840.310812][T15257] ? xskq_create+0xfb/0x1d0 [ 840.310841][T15257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 840.310869][T15257] ? xskq_create+0xfb/0x1d0 [ 840.310891][T15257] vmalloc_user_noprof+0x9e/0xe0 [ 840.310912][T15257] ? xskq_create+0xfb/0x1d0 [ 840.310934][T15257] xskq_create+0xfb/0x1d0 [ 840.310960][T15257] xsk_setsockopt+0x640/0x840 [ 840.310983][T15257] ? __pfx_xsk_setsockopt+0x10/0x10 [ 840.311002][T15257] ? __lock_acquire+0x622/0x1c90 [ 840.311028][T15257] ? selinux_socket_setsockopt+0x6a/0x80 [ 840.311054][T15257] ? __pfx_xsk_setsockopt+0x10/0x10 [ 840.311075][T15257] do_sock_setsockopt+0x221/0x470 [ 840.311103][T15257] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 840.311147][T15257] __sys_setsockopt+0x1a0/0x230 [ 840.311176][T15257] __x64_sys_setsockopt+0xbd/0x160 [ 840.311197][T15257] ? do_syscall_64+0x91/0x4c0 [ 840.311219][T15257] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.311246][T15257] do_syscall_64+0xcd/0x4c0 [ 840.311270][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.311288][T15257] RIP: 0033:0x7f1593d8e929 [ 840.311302][T15257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.311319][T15257] RSP: 002b:00007f1594b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 840.311338][T15257] RAX: ffffffffffffffda RBX: 00007f1593fb5fa0 RCX: 00007f1593d8e929 [ 840.311350][T15257] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 840.311360][T15257] RBP: 00007f1593e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 840.311371][T15257] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.311382][T15257] R13: 0000000000000000 R14: 00007f1593fb5fa0 R15: 00007fffc9a8fbf8 [ 840.311408][T15257] [ 840.578226][T11561] Bluetooth: hci5: command tx timeout [ 840.887460][T15257] Mem-Info: [ 840.910582][T15257] active_anon:16442 inactive_anon:0 isolated_anon:0 [ 840.910582][T15257] active_file:19523 inactive_file:40982 isolated_file:0 [ 840.910582][T15257] unevictable:768 dirty:439 writeback:0 [ 840.910582][T15257] slab_reclaimable:7385 slab_unreclaimable:105758 [ 840.910582][T15257] mapped:37702 shmem:4396 pagetables:1352 [ 840.910582][T15257] sec_pagetables:0 bounce:0 [ 840.910582][T15257] kernel_misc_reclaimable:0 [ 840.910582][T15257] free:1272459 free_pcp:16548 free_cma:0 [ 840.957113][T15257] Node 0 active_anon:65768kB inactive_anon:0kB active_file:78048kB inactive_file:163724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150764kB dirty:1756kB writeback:0kB shmem:16048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11680kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 840.994242][T15257] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 841.010697][T15184] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 841.034357][T15257] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 841.106301][T15257] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 841.113924][T15184] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 841.126519][T15266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'. [ 841.133111][T15257] Node 0 DMA32 free:1173504kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65744kB inactive_anon:0kB active_file:78048kB inactive_file:162404kB unevictable:1536kB writepending:1756kB present:3129332kB managed:2540076kB mlocked:0kB bounce:0kB free_pcp:50544kB local_pcp:19964kB free_cma:0kB [ 841.224800][T15257] lowmem_reserve[]: 0 0 1 1 1 [ 841.254714][ T30] audit: type=1400 audit(1752447857.141:3670): avc: denied { setopt } for pid=15265 comm="syz.2.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 841.304300][T15257] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 841.381176][T15257] lowmem_reserve[]: 0 0 0 0 0 [ 841.389518][T15257] Node 1 Normal free:3900964kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14720kB local_pcp:9184kB free_cma:0kB [ 841.435778][T15257] lowmem_reserve[]: 0 0 0 0 0 [ 841.441512][T15257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 841.458130][T15257] Node 0 DMA32: 1371*4kB (UME) 611*8kB (UME) 260*16kB (UM) 216*32kB (UME) 450*64kB (UME) 234*128kB (UME) 187*256kB (UME) 69*512kB (UME) 51*1024kB (UME) 18*2048kB (UME) 225*4096kB (UM) = 1174084kB [ 841.482174][T15257] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 841.501212][T15257] Node 1 Normal: 189*4kB (UME) 52*8kB (UME) 39*16kB (UE) 169*32kB (UE) 60*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (UM) = 3900964kB [ 841.523088][T15257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.533503][T15257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 841.547428][T15257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.557920][T15257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 841.571453][T15257] 70451 total pagecache pages [ 841.576499][T15257] 8 pages in swap cache [ 841.581091][T15257] Free swap = 124964kB [ 841.589791][T15257] Total swap = 124996kB [ 841.594458][T15257] 2097051 pages RAM [ 841.598598][T15257] 0 pages HighMem/MovableOnly [ 841.603548][T15257] 430054 pages reserved [ 841.614799][T15257] 0 pages cma reserved [ 841.665506][ T5955] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 841.707445][T15279] overlayfs: failed to resolve './file0': -2 [ 842.039552][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 842.131968][ T5955] usb 3-1: config 0 has no interfaces? [ 842.143324][ T5955] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 842.170526][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.248543][ T5955] usb 3-1: config 0 descriptor?? [ 842.604251][T11561] Bluetooth: hci5: command tx timeout [ 842.708286][T15272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.814308][T15272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.898725][T15272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.909460][T15272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.946279][ T5977] usb 3-1: USB disconnect, device number 56 [ 843.733465][T15305] vivid-002: ================= START STATUS ================= [ 843.747602][T15305] vivid-002: Radio HW Seek Mode: Bounded [ 843.760021][T15305] vivid-002: Radio Programmable HW Seek: false [ 843.796435][T15305] vivid-002: RDS Rx I/O Mode: Block I/O [ 843.927430][T15305] vivid-002: Generate RBDS Instead of RDS: false [ 843.934452][T15305] vivid-002: RDS Reception: true [ 843.939702][T15305] vivid-002: RDS Program Type: 0 inactive [ 843.946300][T15305] vivid-002: RDS PS Name: inactive [ 843.951775][T15305] vivid-002: RDS Radio Text: inactive [ 843.957527][T15305] vivid-002: RDS Traffic Announcement: false inactive [ 843.964897][T15305] vivid-002: RDS Traffic Program: false inactive [ 843.971383][T15305] vivid-002: RDS Music: false inactive [ 843.977075][T15305] vivid-002: ================== END STATUS ================== [ 844.006320][ T5977] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 844.236603][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.284425][ T5977] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 844.313928][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.364805][ T5977] usb 3-1: config 0 descriptor?? [ 844.384045][ T5977] pwc: Askey VC010 type 2 USB webcam detected. [ 844.409164][T15184] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 844.441188][T15184] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 844.463395][T15184] wireguard: wg0: Could not create IPv4 socket [ 844.469606][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.469910][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.480691][T15184] wireguard: wg1: Could not create IPv4 socket [ 844.498299][T15184] wireguard: wg2: Could not create IPv4 socket [ 844.527232][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.544967][T15313] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 844.555231][T15313] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 844.601332][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.797745][ T5977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 844.810359][ T5977] pwc: recv_control_msg error -32 req 02 val 2700 [ 844.824591][ T5955] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 845.004605][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 845.030089][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.144097][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.248817][ T13] syz1: rxe_create_qp: returned err = -2 [ 845.256269][ T5955] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 845.258208][ T13] RDS/IB: rds_ib_setup_qp failed (-2) [ 845.268726][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.272099][ T5977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 845.300551][ T5977] pwc: recv_control_msg error -32 req 04 val 1000 [ 845.314730][ T5977] pwc: recv_control_msg error -32 req 04 val 1300 [ 845.332294][ T5955] usb 4-1: config 0 descriptor?? [ 845.350151][ T5977] pwc: recv_control_msg error -32 req 04 val 1400 [ 845.413351][ T5977] pwc: recv_control_msg error -32 req 02 val 2000 [ 845.414382][ T30] audit: type=1400 audit(1752447861.321:3671): avc: denied { create } for pid=15302 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 845.440191][ T5977] pwc: recv_control_msg error -32 req 02 val 2100 [ 845.453572][T15327] trusted_key: encrypted_key: master key parameter '00N0040' is invalid [ 845.533948][T15327] trusted_key: encrypted_key: master key parameter '00N0040' is invalid [ 845.539082][ T5977] pwc: recv_control_msg error -32 req 04 val 1500 [ 845.548198][ T30] audit: type=1400 audit(1752447861.321:3672): avc: denied { getopt } for pid=15302 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 845.636228][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 845.645445][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 845.646049][ T5977] pwc: recv_control_msg error -32 req 02 val 2500 [ 845.684798][ T5955] usb 4-1: USB disconnect, device number 42 [ 845.730655][ T5977] pwc: recv_control_msg error -32 req 02 val 2400 [ 845.767599][ T5977] pwc: recv_control_msg error -32 req 02 val 2600 [ 846.035622][ T5977] pwc: recv_control_msg error -71 req 02 val 2800 [ 846.042858][ T5977] pwc: recv_control_msg error -71 req 04 val 1100 [ 846.050582][ T5977] pwc: recv_control_msg error -71 req 04 val 1200 [ 846.052633][ T6025] syz1: rxe_create_qp: returned err = -2 [ 846.060710][ T5977] pwc: Registered as video103. [ 846.071345][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 846.074981][ T5977] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55 [ 846.110973][ T5977] usb 3-1: USB disconnect, device number 57 [ 846.769189][ T179] syz1: rxe_create_qp: returned err = -2 [ 846.796540][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 846.969435][T15341] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 847.742211][T15347] overlayfs: failed to resolve './file0': -2 [ 847.857459][ T5946] syz1: rxe_create_qp: returned err = -2 [ 847.942757][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 848.390364][T11527] syz1: rxe_create_qp: returned err = -2 [ 848.424280][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 848.994844][ T12] syz1: rxe_create_qp: returned err = -2 [ 849.018936][ T30] audit: type=1400 audit(1752447864.931:3673): avc: denied { read } for pid=15357 comm="syz.2.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 849.026021][ T12] RDS/IB: rds_ib_setup_qp failed (-2) [ 849.107415][ T30] audit: type=1400 audit(1752447864.991:3674): avc: denied { write } for pid=15357 comm="syz.2.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 849.308345][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 849.317614][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 849.326932][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 849.335474][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 849.343748][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 849.518860][T15365] Failed to initialize the IGMP autojoin socket (err -2) [ 849.655085][T15372] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2227'. [ 850.027332][T15373] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 850.044509][T15373] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 851.610905][ T5840] Bluetooth: hci5: command tx timeout [ 851.818047][ T30] audit: type=1326 audit(1752447867.731:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.0.2233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f053478e929 code=0x0 [ 852.491121][T15408] kvm: pic: non byte write [ 852.771848][T15365] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 852.827652][T15365] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 852.915435][T15365] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 853.101255][T15365] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 853.644501][ T5840] Bluetooth: hci5: command tx timeout [ 854.097597][T15365] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 854.120130][T15365] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 854.137989][T15365] wireguard: wg0: Could not create IPv4 socket [ 854.146358][T15365] wireguard: wg1: Could not create IPv4 socket [ 854.153852][T15365] wireguard: wg2: Could not create IPv4 socket [ 854.607398][ T5946] syz1: rxe_create_qp: returned err = -2 [ 854.614051][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 855.191121][ T179] syz1: rxe_create_qp: returned err = -2 [ 855.197811][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 856.047603][ T12] syz1: rxe_create_qp: returned err = -2 [ 856.054412][ T12] RDS/IB: rds_ib_setup_qp failed (-2) [ 856.845948][T11527] syz1: rxe_create_qp: returned err = -2 [ 856.852470][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 857.369381][T15438] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 857.382814][T15438] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 857.589320][T15439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.601369][ T179] syz1: rxe_create_qp: returned err = -2 [ 857.609121][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 857.619168][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 858.366282][ T5946] syz1: rxe_create_qp: returned err = -2 [ 858.384225][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 858.523234][ T12] syz1: rxe_create_qp: returned err = -2 [ 858.546369][ T12] RDS/IB: rds_ib_setup_qp failed (-2) [ 858.756627][ T179] syz1: rxe_create_qp: returned err = -2 [ 858.763282][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 859.563385][T11527] syz1: rxe_create_qp: returned err = -2 [ 859.850361][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 860.092922][T11561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 860.103516][T11561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 860.112009][T11561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 860.121377][T11561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 860.131227][T11561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 860.202067][ T6025] syz1: rxe_create_qp: returned err = -2 [ 860.222191][ T6025] RDS/IB: rds_ib_setup_qp failed (-2) [ 860.238390][T15464] Failed to initialize the IGMP autojoin socket (err -2) [ 862.174507][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 862.204479][T11561] Bluetooth: hci5: command tx timeout [ 862.345301][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 862.379599][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.401311][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.422144][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 862.464047][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.560587][ T10] usb 4-1: config 0 descriptor?? [ 862.725943][T15464] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 862.762548][T15464] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 862.809168][T15464] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 862.841527][T15464] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 863.325257][ T55] block nbd0: Possible stuck request ffff888026730000: control (read@0,1024B). Runtime 210 seconds [ 863.336378][ T55] block nbd0: Possible stuck request ffff8880267301c0: control (read@1024,1024B). Runtime 210 seconds [ 863.359359][T15464] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 863.380365][T15464] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 863.398761][T15464] wireguard: wg0: Could not create IPv4 socket [ 863.404550][ T55] block nbd0: Possible stuck request ffff888026730380: control (read@2048,1024B). Runtime 210 seconds [ 863.407795][T15464] wireguard: wg1: Could not create IPv4 socket [ 863.426647][T15464] wireguard: wg2: Could not create IPv4 socket [ 863.444485][ T55] block nbd0: Possible stuck request ffff888026730540: control (read@3072,1024B). Runtime 210 seconds [ 863.502394][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.513025][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.523619][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.531247][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.541669][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.549030][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.559211][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.573035][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.585251][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.592409][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.600426][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.607854][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.615770][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.622932][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.632625][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.640821][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.650265][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.658699][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.668128][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.676328][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.683421][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.695800][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.702948][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.711858][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.721399][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.729722][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.737247][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.744512][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.751618][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.758885][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.766320][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.773966][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.781178][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.788390][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.796221][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.803296][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.810931][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.818119][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.825403][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.832479][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.839815][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.847359][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.854539][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.861672][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.869060][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.876209][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.883287][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.890636][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.897806][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.905142][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.912225][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.919365][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.926577][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.933630][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.940788][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.948021][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.955403][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.962482][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.970079][ T31] INFO: task syz.1.1827:13348 blocked for more than 143 seconds. [ 863.977956][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 863.987977][ T31] Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 [ 863.988669][ T179] syz1: rxe_create_qp: returned err = -2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 863.995726][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.016064][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 864.024318][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 864.027146][ T30] audit: type=1400 audit(1752447879.923:3676): avc: denied { recv } for pid=5813 comm="syz-executor" saddr=10.128.0.169 src=37994 daddr=10.128.1.206 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 864.033072][ T31] task:syz.1.1827 state:D [ 864.058854][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.058887][ T179] syz1: rxe_create_qp: returned err = -2 [ 864.063661][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.076657][ T179] RDS/IB: rds_ib_setup_qp failed (-2) [ 864.078994][T11527] syz1: rxe_create_qp: returned err = -2 [ 864.099930][T11527] RDS/IB: rds_ib_setup_qp failed (-2) [ 864.104233][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.112380][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.119905][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.127240][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.129914][ T31] stack:26520 pid:13348 tgid:13347 ppid:5829 task_flags:0x400140 flags:0x00004004 [ 864.134669][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.151045][ T31] Call Trace: [ 864.151059][ T31] [ 864.151070][ T31] __schedule+0x116a/0x5de0 [ 864.151113][ T31] ? __pfx___schedule+0x10/0x10 [ 864.151142][ T31] ? find_held_lock+0x2b/0x80 [ 864.151166][ T31] ? schedule+0x2d7/0x3a0 [ 864.151189][ T31] schedule+0xe7/0x3a0 [ 864.151211][ T31] schedule_preempt_disabled+0x13/0x30 [ 864.224206][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.231348][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.253371][ T31] __mutex_lock+0x6c7/0xb90 [ 864.327193][ T31] ? sync_bdevs+0xfd/0x360 [ 864.331685][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 864.334377][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.343830][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.359267][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 864.374561][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.381825][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.384188][ T31] ? iput+0xd3/0x880 [ 864.392957][ T31] ? sync_bdevs+0xfd/0x360 [ 864.412970][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.424388][ T31] sync_bdevs+0xfd/0x360 [ 864.428684][ T31] ksys_sync+0xb2/0x150 [ 864.432855][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 864.434409][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.463592][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.470998][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.478739][ T31] ? syscall_trace_enter+0x1cb/0x260 [ 864.484661][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.491989][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.499920][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.504204][ T31] ? rcu_is_watching+0x12/0xc0 [ 864.507216][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.514218][ T31] ? syscall_trace_enter+0xee/0x260 [ 864.534656][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.541812][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.544189][ T31] __do_sys_sync+0xe/0x20 [ 864.553342][ T31] do_syscall_64+0xcd/0x4c0 [ 864.564348][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.567762][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.571510][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.594381][ T31] RIP: 0033:0x7fa5f7b8e929 [ 864.598835][ T31] RSP: 002b:00007fa5f899f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 864.614186][ T31] RAX: ffffffffffffffda RBX: 00007fa5f7db5fa0 RCX: 00007fa5f7b8e929 [ 864.614431][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.624229][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.637474][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.646012][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.647504][ T12] syz1: rxe_create_qp: returned err = -2 [ 864.653129][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.669209][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.674202][ T31] RBP: 00007fa5f7db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 864.676606][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.686131][ T12] RDS/IB: rds_ib_setup_qp failed (-2) [ 864.698104][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.704203][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.706180][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.713085][ T31] R13: 0000000000000000 R14: 00007fa5f7db5fa0 R15: 00007ffd71c42f98 [ 864.713117][ T31] [ 864.721054][ T31] [ 864.721054][ T31] Showing all locks held in the system: [ 864.748074][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.762130][ T31] 6 locks held by kworker/0:1/10: [ 864.823023][ T31] 1 lock held by khungtaskd/31: [ 864.828239][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.838642][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 864.844746][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.884423][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.886837][ T31] 3 locks held by kworker/1:1/44: [ 864.891672][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891695][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891714][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891733][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891752][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891770][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891787][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891805][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891823][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891857][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891875][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891894][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.891914][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 864.914202][ T31] #0: [ 865.044264][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.068333][ T31] ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 865.072780][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.078667][ T31] #1: ffffc90000b47d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 865.078719][ T31] #2: ffffffff8e5d03f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 865.078798][ T31] 2 locks held by getty/5590: [ 865.112968][ T31] #0: [ 865.112970][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.115774][ T31] ffff8880374a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 865.123098][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.136949][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 865.139609][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.149651][ T31] 4 locks held by syz-executor/5835: [ 865.162205][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.163973][ T31] #0: ffff88805a2e0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 865.169492][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.178993][ T31] #1: ffff88805a2e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 865.179048][ T31] #2: ffffffff905d49a8 ( [ 865.186587][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.198566][ T31] hci_cb_list_lock [ 865.200764][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.208139][ T31] ){+.+.}-{4:4} [ 865.211656][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.218500][ T31] , at: hci_conn_hash_flush+0xbb/0x260 [ 865.222703][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.231845][ T31] #3: [ 865.234856][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.243529][ T31] ffff888142bb7b38 [ 865.249888][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.255666][ T31] (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 865.255716][ T31] 3 locks held by syz-executor/5837: [ 865.255728][ T31] #0: ffff88807d138dc0 [ 865.263080][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.275810][ T31] (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 865.282414][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.297816][ T31] #1: ffff88807d1380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 865.302691][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.312180][ T31] #2: ffffffff8e5d03f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 865.319505][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.333614][ T31] 3 locks held by kworker/0:8/5955: [ 865.336682][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.341571][ T31] #0: [ 865.348689][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.348712][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.348732][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.348751][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.348776][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.354546][ T31] ffff88801b878d48 [ 865.359181][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.370615][ T31] ( [ 865.373446][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.380323][ T31] (wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 865.380365][ T31] #1: ffffc900046efd10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 865.388035][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.393830][ T31] #2: [ 865.398422][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.401231][ T31] ffff888037508240 [ 865.408505][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.435674][ T31] (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 865.438791][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.456287][ T31] 1 lock held by udevd/6797: [ 865.456302][ T31] #0: ffff8881437ff358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 865.456356][ T31] 3 locks held by syz.4.499/8003: [ 865.456366][ T31] #0: ffff88807bb00dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 865.456419][ T31] #1: [ 865.465059][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.474478][ T31] ffff88807bb000b8 [ 865.476703][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.490380][ T31] ( [ 865.491788][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.500411][ T31] &hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 865.500450][ T31] #2: ffffffff905d49a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 865.500497][ T31] 1 lock held by syz.1.1827/13348: [ 865.500508][ T31] #0: [ 865.503897][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.513366][ T31] ffff8881437ff358 [ 865.515075][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.521493][ T31] (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 865.521547][ T31] 1 lock held by syz-executor/15464: [ 865.524063][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.533671][ T31] #0: [ 865.539337][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.548748][ T31] ffffffff8e5d02c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 865.554387][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.570031][ T31] 3 locks held by syz.3.2254/15483: [ 865.574974][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.587377][ T31] #0: ffff8880250a8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 865.587441][ T31] #1: ffff8880250a80b8 (&hdev->lock [ 865.594916][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.604603][ T31] ){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 865.604640][ T31] #2: ffffffff905d49a8 (hci_cb_list_lock [ 865.614649][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.623744][ T31] ){+.+.}-{4:4} [ 865.626848][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.633334][ T31] , at: hci_conn_hash_flush+0xbb/0x260 [ 865.650719][ T5946] syz1: rxe_create_qp: returned err = -2 [ 865.656297][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.667261][ T31] [ 865.670094][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.679771][ T5946] RDS/IB: rds_ib_setup_qp failed (-2) [ 865.688720][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.709734][ T31] ============================================= [ 865.709734][ T31] [ 865.715709][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.737244][ T31] NMI backtrace for cpu 1 [ 865.737259][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 865.737278][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.737286][ T31] Call Trace: [ 865.737292][ T31] [ 865.737298][ T31] dump_stack_lvl+0x116/0x1f0 [ 865.737324][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 865.737340][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 865.737362][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 865.737385][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 865.737403][ T31] watchdog+0xf70/0x12c0 [ 865.737425][ T31] ? __pfx_watchdog+0x10/0x10 [ 865.737441][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.737462][ T31] ? __kthread_parkme+0x19e/0x250 [ 865.737486][ T31] ? __pfx_watchdog+0x10/0x10 [ 865.737502][ T31] kthread+0x3c5/0x780 [ 865.737517][ T31] ? __pfx_kthread+0x10/0x10 [ 865.737534][ T31] ? rcu_is_watching+0x12/0xc0 [ 865.737559][ T31] ? __pfx_kthread+0x10/0x10 [ 865.737574][ T31] ret_from_fork+0x5d7/0x6f0 [ 865.737596][ T31] ? __pfx_kthread+0x10/0x10 [ 865.737612][ T31] ret_from_fork_asm+0x1a/0x30 [ 865.737641][ T31] [ 865.737646][ T31] Sending NMI from CPU 1 to CPUs 0: [ 865.744430][ T10] macally 0003:060B:0001.002B: unknown main item tag 0x0 [ 865.746919][ C0] NMI backtrace for cpu 0 [ 865.746931][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 865.746948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.746959][ C0] Workqueue: usb_hub_wq hub_event [ 865.746978][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 865.746996][ C0] Code: 22 60 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 48 fc c6 fc eb a2 e8 d1 fc [ 865.747009][ C0] RSP: 0018:ffffc900000f6458 EFLAGS: 00000002 [ 865.747019][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 865.747027][ C0] RDX: 00000000000003fd RSI: ffffffff855bcf90 RDI: ffffffff9b0c72a0 [ 865.747036][ C0] RBP: ffffffff9b0c7260 R08: 0000000000000001 R09: 000000000000001f [ 865.747044][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 865.747051][ C0] R13: 0000000000000020 R14: fffffbfff3618ea6 R15: dffffc0000000000 [ 865.747060][ C0] FS: 0000000000000000(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 865.747073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.747082][ C0] CR2: 000055939757fb40 CR3: 0000000035d35000 CR4: 00000000003526f0 [ 865.747090][ C0] Call Trace: [ 865.747095][ C0] [ 865.747102][ C0] wait_for_lsr+0x137/0x210 [ 865.747122][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 865.747137][ C0] serial8250_console_write+0xf83/0x1890 [ 865.747154][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 865.747167][ C0] ? lock_acquire+0x179/0x350 [ 865.747183][ C0] console_flush_all+0x7fe/0xc60 [ 865.747201][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 865.747217][ C0] ? __lock_acquire+0x622/0x1c90 [ 865.747230][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 865.747248][ C0] console_unlock+0xd8/0x210 [ 865.747263][ C0] ? __pfx_console_unlock+0x10/0x10 [ 865.747281][ C0] vprintk_emit+0x418/0x6d0 [ 865.747297][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 865.747315][ C0] dev_printk_emit+0xfa/0x140 [ 865.747330][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 865.747351][ C0] ? __dev_printk+0x26/0x270 [ 865.747367][ C0] __dev_printk+0xf5/0x270 [ 865.747383][ C0] _dev_warn+0xe4/0x120 [ 865.747397][ C0] ? __pfx__dev_warn+0x10/0x10 [ 865.747411][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.747432][ C0] ? hid_concatenate_last_usage_page+0x57/0x2c0 [ 865.747448][ C0] hid_parser_main+0x7a4/0xd80 [ 865.747464][ C0] ? fetch_item+0x1bb/0x530 [ 865.747476][ C0] hid_open_report+0x456/0x830 [ 865.747490][ C0] ? __pfx_hid_open_report+0x10/0x10 [ 865.747504][ C0] ? mark_held_locks+0x49/0x80 [ 865.747518][ C0] hid_device_probe+0x5ed/0x720 [ 865.747534][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 865.747549][ C0] really_probe+0x241/0xa90 [ 865.747567][ C0] __driver_probe_device+0x1de/0x440 [ 865.747585][ C0] driver_probe_device+0x4c/0x1b0 [ 865.747602][ C0] __device_attach_driver+0x1df/0x310 [ 865.747620][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 865.747637][ C0] bus_for_each_drv+0x159/0x1e0 [ 865.747650][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 865.747664][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.747680][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 865.747698][ C0] __device_attach+0x1e4/0x4b0 [ 865.747715][ C0] ? __pfx___device_attach+0x10/0x10 [ 865.747731][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 865.747748][ C0] bus_probe_device+0x17f/0x1c0 [ 865.747770][ C0] device_add+0x1148/0x1a70 [ 865.747783][ C0] ? __pfx_device_add+0x10/0x10 [ 865.747795][ C0] ? debugfs_create_file_full+0x41/0x60 [ 865.747815][ C0] hid_add_device+0x373/0xa60 [ 865.747830][ C0] ? __pfx_hid_add_device+0x10/0x10 [ 865.747843][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 865.747856][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 865.747869][ C0] usbhid_probe+0xd38/0x13f0 [ 865.747890][ C0] usb_probe_interface+0x300/0x9c0 [ 865.747909][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 865.747925][ C0] really_probe+0x241/0xa90 [ 865.747942][ C0] __driver_probe_device+0x1de/0x440 [ 865.747960][ C0] driver_probe_device+0x4c/0x1b0 [ 865.747976][ C0] __device_attach_driver+0x1df/0x310 [ 865.747993][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 865.748010][ C0] bus_for_each_drv+0x159/0x1e0 [ 865.748023][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 865.748037][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.748053][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 865.748069][ C0] __device_attach+0x1e4/0x4b0 [ 865.748085][ C0] ? __pfx___device_attach+0x10/0x10 [ 865.748102][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 865.748117][ C0] bus_probe_device+0x17f/0x1c0 [ 865.748133][ C0] device_add+0x1148/0x1a70 [ 865.748145][ C0] ? __pfx_device_add+0x10/0x10 [ 865.748156][ C0] ? mark_held_locks+0x49/0x80 [ 865.748170][ C0] usb_set_configuration+0x1187/0x1e20 [ 865.748190][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 865.748202][ C0] usb_generic_driver_probe+0xb1/0x110 [ 865.748215][ C0] usb_probe_device+0xec/0x3e0 [ 865.748229][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 865.748248][ C0] really_probe+0x241/0xa90 [ 865.748265][ C0] __driver_probe_device+0x1de/0x440 [ 865.748280][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 865.748297][ C0] driver_probe_device+0x4c/0x1b0 [ 865.748314][ C0] __device_attach_driver+0x1df/0x310 [ 865.748332][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 865.748347][ C0] bus_for_each_drv+0x159/0x1e0 [ 865.748361][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 865.748375][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.748390][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 865.748407][ C0] __device_attach+0x1e4/0x4b0 [ 865.748423][ C0] ? __pfx___device_attach+0x10/0x10 [ 865.748440][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 865.748456][ C0] bus_probe_device+0x17f/0x1c0 [ 865.748472][ C0] device_add+0x1148/0x1a70 [ 865.748484][ C0] ? __pfx_device_add+0x10/0x10 [ 865.748495][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 865.748509][ C0] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 865.748528][ C0] usb_new_device+0xd07/0x1a20 [ 865.748543][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 865.748557][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 865.748571][ C0] ? mark_held_locks+0x49/0x80 [ 865.748584][ C0] hub_event+0x2eb7/0x4fa0 [ 865.748607][ C0] ? __pfx_hub_event+0x10/0x10 [ 865.748621][ C0] ? sm3_block_generic+0x2e90/0x35e0 [ 865.748640][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.748657][ C0] process_one_work+0x9cf/0x1b70 [ 865.748674][ C0] ? __pfx_br_fdb_cleanup+0x10/0x10 [ 865.748690][ C0] ? __pfx_process_one_work+0x10/0x10 [ 865.748706][ C0] ? assign_work+0x1a0/0x250 [ 865.748719][ C0] worker_thread+0x6c8/0xf10 [ 865.748737][ C0] ? __pfx_worker_thread+0x10/0x10 [ 865.748755][ C0] kthread+0x3c5/0x780 [ 865.748769][ C0] ? __pfx_kthread+0x10/0x10 [ 865.748782][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.748797][ C0] ? __pfx_kthread+0x10/0x10 [ 865.748809][ C0] ret_from_fork+0x5d7/0x6f0 [ 865.748827][ C0] ? __pfx_kthread+0x10/0x10 [ 865.748839][ C0] ret_from_fork_asm+0x1a/0x30 [ 865.748860][ C0] [ 865.769465][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 865.769487][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 865.769512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.769524][ T31] Call Trace: [ 865.769533][ T31] [ 865.769541][ T31] dump_stack_lvl+0x3d/0x1f0 [ 865.769570][ T31] panic+0x71c/0x800 [ 865.769594][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 866.615704][ T31] ? __pfx_panic+0x10/0x10 [ 866.620123][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 866.625490][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 866.631462][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 866.636827][ T31] ? watchdog+0xdda/0x12c0 [ 866.641233][ T31] ? watchdog+0xdcd/0x12c0 [ 866.645664][ T31] watchdog+0xdeb/0x12c0 [ 866.649900][ T31] ? __pfx_watchdog+0x10/0x10 [ 866.654563][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.659755][ T31] ? __kthread_parkme+0x19e/0x250 [ 866.664787][ T31] ? __pfx_watchdog+0x10/0x10 [ 866.669451][ T31] kthread+0x3c5/0x780 [ 866.673507][ T31] ? __pfx_kthread+0x10/0x10 [ 866.678084][ T31] ? rcu_is_watching+0x12/0xc0 [ 866.682841][ T31] ? __pfx_kthread+0x10/0x10 [ 866.687419][ T31] ret_from_fork+0x5d7/0x6f0 [ 866.692001][ T31] ? __pfx_kthread+0x10/0x10 [ 866.696583][ T31] ret_from_fork_asm+0x1a/0x30 [ 866.701348][ T31] [ 866.704574][ T31] Kernel Offset: disabled [ 866.708879][ T31] Rebooting in 86400 seconds..