last executing test programs: 10.818590395s ago: executing program 3 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r2, 0x567, 0x1000a387, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x70bd26, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x0, 0xfffffff7}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_ep_read(r5, 0x9, 0x1, &(0x7f0000000000)=""/1) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000000c0)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) clock_adjtime(0xa, &(0x7f0000004dc0)={0xb, 0x45, 0x8f0f, 0x2, 0x9, 0x7cca, 0x5, 0xc632, 0x2, 0x4, 0x7c, 0x7, 0x5, 0xfff, 0x8001, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0xffffffffffffff00, 0x200000000000, 0xa5, 0x3c0000000000000, 0x9011, 0x10, 0x18}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe5, &(0x7f0000000340)=@generic={0x8, 0x0, 0xdd, "d2c712a0", "3bfc1696804ff3eb8bfc247b67e063f795ddcd1ec5ab5d2567a0777a38fb86bff34c620ce7e6b6285da1b761205f1642905838e969dfbcc274fc209aaaa41dfe9a089e3fcc22374a7b3e0b52ba9893d80d27b513058992cbbaefa65ffa176d661a329c227bdb2c1dcbd27746e2745738f22effc69cb8abc1ba07066f3958a3206f77351363465f91d8c49e70dd0c70f2de91e867ecba3d1bbd70f25e6999262b9d9fb231a7dc7d346ae6a51593ff7175bf4c8c5574909298a5db53a60cdbc385c91b7a6f2495db2ad8b4c9ab4916f947abcfea63c43893fc0b4765f2fd"}) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000"], 0x70}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4008af25, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdddd1000}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x6) 9.626489886s ago: executing program 0 (id=1917): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8], &(0x7f00000009c0)=""/4096, 0x128, 0x1000, 0x1, 0x1000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2422008b9210ee0000002b000701fefffffffbdb037c00000c00018008000600ffffffff040002800000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x6, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r6, 0x3) 9.512975653s ago: executing program 4 (id=1918): r0 = socket(0x18, 0x6, 0x200000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newchain={0x68, 0x64, 0x20, 0x70bd6d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xf17}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r1 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x68890}, 0x40040) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r2, &(0x7f00000016c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x1000) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x10000, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x12, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0xe5, 0x3]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) 8.305946764s ago: executing program 0 (id=1919): r0 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004844}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 7.981560928s ago: executing program 3 (id=1921): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$inet(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002a00)="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", 0x53e}], 0x1}, 0x20000020) 7.914575234s ago: executing program 4 (id=1922): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, 0x0, 0x200ce8c0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000020c0)}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000340)={0x1, 0x3}, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) dup3(0xffffffffffffffff, r7, 0x80000) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.359851574s ago: executing program 3 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$dsp(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8021) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='nilfs2\x00', 0x700, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) openat$dsp1(0xffffffffffffff9c, 0x0, 0x100, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) unlink(0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 6.731716087s ago: executing program 0 (id=1924): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}], 0x1, 0x0) 6.693142796s ago: executing program 0 (id=1925): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200025a729bd705ed76085b44ab900fddbdf250a0000cdff0000010200010008000600cb0c0000080018004e234e23"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x1b, 0x88, 0x4000069}, 0x2c) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = fspick(0xffffffffffffffff, 0x0, 0x0) fsmount(r5, 0x1, 0x9) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0xfffe, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) 6.647237683s ago: executing program 4 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x100000000000001, 0xc201) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sync() open_tree(0xffffffffffffff9c, 0x0, 0xc0800) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1b2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) getpid() 6.560580185s ago: executing program 1 (id=1927): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffff3e}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 6.206524896s ago: executing program 3 (id=1928): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) semget$private(0x0, 0x5, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000500)=[0x3, 0x5]) 6.199684105s ago: executing program 0 (id=1929): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f00000000c0)=0xffffff0d, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000040)={0x20, 0xf, 0xb, "d9d84488f5b4aaf8dd0e5b"}, 0x0, 0x0}) 6.059513628s ago: executing program 2 (id=1930): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af25, &(0x7f0000000040)={@local}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6000000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x94f}, @in6={0xa, 0x4e22, 0x7, @private0, 0x9}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x4}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xa, @remote, 0x1}, @in={0x2, 0x4e21, @multicast2}], 0xb0) 5.087853168s ago: executing program 2 (id=1931): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000002440)={0x0, 0x295d, 0x10100, 0x2, 0x333}, &(0x7f0000002340)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x241, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1c9, 0x12) 4.037896549s ago: executing program 2 (id=1932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000002440)={0x0, 0x295d, 0x10100, 0x2, 0x333}, &(0x7f0000002340)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f2f, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x241, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1c9, 0x12) 3.970730981s ago: executing program 3 (id=1933): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$inet(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002a00)="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", 0x53e}], 0x1}, 0x20000020) 3.246457177s ago: executing program 3 (id=1934): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc3ffb}]}) r1 = semget$private(0x0, 0x20000000102, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x99, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x2, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "67bbdf"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff9, 0x2ba, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x28}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8, 0xf8}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xb4e7, 0x3f, 0x3, 0x9, 0xea}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x24, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x80, 0xa}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xe, 0x2, 0x3, 0xff, 0x3}, 0xd3, &(0x7f0000000400)={0x5, 0xf, 0xd3, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x6, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x6, 0x3a}, @generic={0xa9, 0x10, 0xb, "7410ff8758000de5bb2aecff02201fc1329f91f6ebc29c563947b58097c669f65bb5f04fdf411b39b7174268cb4d73fc21672432e4481f147c6869eb4ef3fbd801f257a1b5648966fb4a681ea1ef15e7bfb392ec0102fcedcab0d682522f0aaadc38e79b41103bcbac6f628590d9dae150622d8d9f06c50e3e8949ef196852a1aab1fd7678493f1dda988ce1f0016bb6ccfdc59842f5b045eb721af046d0891701095ecd95f6"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "7af5a7b950d4478cd0d74011a384ed52"}]}, 0x6, [{0xe3, &(0x7f0000000500)=@string={0xe3, 0x3, "8ef6c034c39fc190f65c8be89ec62f3441511ce6179697a7f55d4d30f74161a55a71e04a81e1a57de2d54da7f91ad0b2d2802df6dda18d94f5c8d8848c9534f1e09a0fe2175fa7fb030b4ab33681da0589caad33ec4cafdcd0f4f0cf5ce79a64f626bdefff0143d58322a1cbf95488ff5520595bc0f1b225c602b9219ab8d4b8bcab5479d37ac209b77bd99b68ae3734f0f9b5154b985d343339cd3cd41b97fa94b4c9efdb67f50d67aa09f102f575b56f3a47537d97a2e7d45856be39d1c58c924736b86cf0704c93acbcff30d2b444a216100c43c11b841ad43a913f2e78b6b4"}}, {0x39, &(0x7f0000000200)=@string={0x39, 0x3, "c1861172dc68d0067280f76bccf6a79a75b8ff9066da03873a897da660f83505ecc5e0e639ae9200e7865bd72f4cb04f48308666c5b52a"}}, {0x33, &(0x7f0000000240)=@string={0x33, 0x3, "59a8524a5f03db9e6a400c6fdacb47772af51cc94d4e5ecb7b12713613cd2dd404c76638388b7181bbf867950ee1110afa"}}, {0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "d66ceeca36f0f238b4d3fe4cc327e21031745d456e2c7c9db35bfb6230df571a2c8860bf3cf95613c3f393693175b2bd7c2ccb71258e8eae41dd5cdee030866c987ff0ea9bf0073742d6"}}, {0x30, &(0x7f0000000280)=@string={0x30, 0x3, "7e54f46c6ccecb065997eaee10a45bfebb765e06bfe152d4b7d1a8f15f95e662f05ad07abee26cb60eaba7c39f22"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x340a}}]}) semop(r1, &(0x7f00000003c0)=[{0x0, 0x7fff, 0x1000}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x63}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000001600)=[{0xffff, 0x4000, 0x0, 0x0}], 0x1}) 3.101793126s ago: executing program 2 (id=1935): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}], 0x1, 0x0) 3.055527711s ago: executing program 1 (id=1936): r0 = socket$inet(0xa, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@cipso={0x86, 0x6}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000080000000000000000000000000312ea91298c3937dc0b1fb2baeb05ef9e75d298869abd64f87198f88cef9c77a3f8513cad293a9df037da2b040e1b09fff0303f540a102d7d972e4ace0b19cdd6fd3d4566a6d3d4736c5cfc4000000007a4e8ead61ac224e5b6bc25df0a8d05dc0b56028d67d104f6fd426bbffdb961407d2e24428ba19ee5136d283a561598b44690ac4", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) read$msr(r1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x219, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000080)={r6}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 3.005485715s ago: executing program 4 (id=1937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x6}}, 0x0, 0x0, 0x9, 0x0, "f2f5752a41c9fb15d3b0447186b78c228f6d77b204ef1334aab4d5cc1654084b3806abacc530b5d2946c7cb666054664ec6b422ae3610be6ac0a2474bb1868d90f85d38095815028f41b55c815d378ff"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x0, 0x4000003, 0x400000000, 0x800000000005, 0x5, 0x100, 0x19, 0x0, 0x2007, 0x3, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0xfff, 0x3, 0x0, 0x3, 0x0, 0xe}) write(r3, &(0x7f0000000000)="270000001400070703060000120f0a0011000100f5fe0012ffa131751800390005000000000000", 0xfffffffffffffff0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(r7, 0x0, 0x0) sched_getaffinity(r7, 0x8, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 2.986583814s ago: executing program 2 (id=1938): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYRESHEX=0x0], 0x0, 0x4e, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) 2.786619643s ago: executing program 1 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="ffff0400000000f8ffff9400000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00020001ffe72037153e370c04018006041000450000002a560000e7ff0040", 0x2c}, {&(0x7f0000000600)="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", 0x3bf}, {&(0x7f0000000000), 0x700}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f59314c649223b791213aafb18e08f295189c63c72d255f34987edf7a120ed0fd80500000000000000c4bf95e695a7b864e534d2af6abeee35de087c976a02f4e4b20bdea333455b73232f9297ce2197ce", 0xa9}], 0x4}, 0x10049014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sg(&(0x7f0000000100), 0xa, 0x200) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private2, 0x7}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000340)={{0xff, 0x38}, 'port1\x00', 0x14, 0x60000, 0xd, 0x35ded5a6, 0x10001, 0x5, 0x1, 0x0, 0x2, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r7, &(0x7f0000002500)={0x2020}, 0x2020) 2.786308588s ago: executing program 2 (id=1940): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}], 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0xfff, 0xc001) recvmsg$unix(r2, &(0x7f0000000280)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000780)=""/104, 0x68}], 0x3}, 0x40000040) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}}, 0x20008030) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, 0x0, 0x0) 1.881161335s ago: executing program 4 (id=1941): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x500) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x100042, &(0x7f00000006c0)={[{@uuid_auto}, {@redirect_dir_off}], [{@audit}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/206], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 1.39768153s ago: executing program 1 (id=1942): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0xc46d, 0x4) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0xfffffffc, &(0x7f0000000080)=0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0xc3b, 0x2566, 0xfffffffe, 0x108000, 0x8, 0x0, 0x5, 0x10, 0x6, 0xffffffff, 0x1, 0x8, 0x344, 0x1, 0x7, 0x0, 0x8, 0x80000003, 0x9, 0xe, 0x100, 0x1003, 0x6, 0xc, 0x5, 0x1, 0x3, 0x7df, 0x8, 0x400007, 0x1]}) 1.212183974s ago: executing program 0 (id=1943): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) semget$private(0x0, 0x5, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000500)=[0x3, 0x5]) 1.150042886s ago: executing program 4 (id=1944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0xffee) write$binfmt_misc(r1, &(0x7f0000000580)="8c20ccb4301e3ea1028248086961ad9f6981e44b4852ebf1862b65cf6a18813ce745b4b6d9eda62e823e11c55dd422482d2a9c428ff8e5f47adbfd2d69b9119caef5b23995f12fb7323571ee1441975e94b502c676389461c6d0a99f3330dc58c7a65648a3ca5439f5325a73ba1ff9110ec96ae9ad5da3ca14fa084357469954c4c62b11a6c4a473a192644638301b0336bcb34c4ca608e6ed87c9ac61e692f24b54faf243ce8656f91edd12c5bb43d48a6c5a53a1e9ba8dbdba57b9ff3565760e4f278afb7a1296daa0f1cc093cd2c05e5c1418c45cf4557b1f7ab1df79eb6df1c3888d82578d2f2c13231a9e5bb7a9179d833517c62429a731cf1349a3daf9516d2c43e49027331bf9fc3bbeb643b1fbc7a52b54ce3cd63bb69af7a3267fe8fbc714c27940a5ba879de2c960c06a769c188d1608d1104ef912fc4e0b79a7606652a2623c13a228b85ae9b7e0ec6a4fc51ee05986eb1e0eceaa6295393a321bad36595d1d372373859bc8e3f968d8d3e6d182ec5d1b3c345ad14b27cbdf34f2e6063afc5760613c1fe84c7f6002a649b484bdf3589400870f12190cdcb678f9adad5cd361a507878379b78185df8a53a77515d3ec3a211451a0df6eafd4490e4e9105da70d60422599b795cb1a5029666cb7337bf243613e2b3dc4dfa27ecec15b91605b16881e7f749747557e5", 0x1ee) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}, {0x0, 0x33}}}, 0x7) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000001300010025bd70000000000004000080c9b8fe5590e9d109d61ebca0aa843468c86f5b369f5f76be2be6d808d106d4d42ed51aa03bb5fb7a081ca17466d1970aee99af11446d7bfbc78eb838e6e12fbb1f2b009d3a6f871ff2c648a8a0a7dc0529d7d61d19aa495bb59869d4b8f75aef4a8705b7934aff60a86234c9b9bc8ef2"], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3, @ANYRES8, @ANYRES16=r4, @ANYRES16=r5], 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000180)={0x18, r6}) 1.121319503s ago: executing program 1 (id=1945): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 0s ago: executing program 1 (id=1946): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000000001010400000000000000000200000008b528bd16000007180001801400018008000100e000000108000200ac141400080003400000040268ea38d9705f6e46c05731bd2872d4f4a0047757a8d970b480deb0feb8259e5766f5097fb53ced6a35ff0d2fcab1175df75c9c4ced3853d748ef84a5060ee5ec4253"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000008000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950045ce806931978bb5020007000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$media(&(0x7f00000003c0), 0x25cc, 0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x79) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) kernel console output (not intermixed with test programs): Product=103e, bcdDevice=4e.18 [ 479.615528][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.625520][ T5942] usb 3-1: Product: syz [ 479.631696][ T5942] usb 3-1: Manufacturer: syz [ 479.636390][ T5942] usb 3-1: SerialNumber: syz [ 479.646015][ T5942] usb 3-1: config 0 descriptor?? [ 481.127714][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 481.165209][ T5942] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.294422][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.307285][ T5942] usb 3-1: USB disconnect, device number 22 [ 481.311895][ T10] usb 1-1: config 9 has an invalid interface number: 25 but max is 0 [ 481.503105][ T10] usb 1-1: config 9 has no interface number 0 [ 481.512671][ T10] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=de.9f [ 481.521966][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.583023][ T974] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 482.656439][ T10] usb 1-1: Product: syz [ 482.669726][ T10] usb 1-1: Manufacturer: syz [ 482.674348][ T10] usb 1-1: SerialNumber: syz [ 482.903371][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 483.376931][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.392337][ T974] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 483.435714][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.800078][T10763] netlink: 'syz.0.1265': attribute type 3 has an invalid length. [ 483.809124][T10763] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1265'. [ 483.835963][T10763] sctp: [Deprecated]: syz.0.1265 (pid 10763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.835963][T10763] Use struct sctp_sack_info instead [ 483.883329][ T974] usb 2-1: config 0 descriptor?? [ 484.198784][T10771] netlink: 'syz.4.1272': attribute type 6 has an invalid length. [ 484.212458][T10771] netlink: 'syz.4.1272': attribute type 6 has an invalid length. [ 484.727315][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572f6c00: rx timeout, send abort [ 484.839949][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 484.839963][ T30] audit: type=1400 audit(1753744603.459:1151): avc: denied { read } for pid=5184 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 485.044722][ T974] usbhid 2-1:0.0: can't add hid device: -71 [ 485.051665][ T974] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 485.061895][ T974] usb 2-1: USB disconnect, device number 25 [ 485.236753][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572f6c00: abort rx timeout. Force session deactivation [ 485.258914][ T10] kl5kusb105 1-1:9.25: KL5KUSB105D / PalmConnect converter detected [ 485.271945][ T5942] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 485.291035][ T30] audit: type=1400 audit(1753744603.459:1152): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.314084][ T10] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 485.333514][ T10] usb 1-1: USB disconnect, device number 26 [ 485.344552][ T10] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 485.370381][ T10] kl5kusb105 1-1:9.25: device disconnected [ 485.469502][ T30] audit: type=1400 audit(1753744603.459:1153): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.113831][T10796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1277'. [ 486.169480][T10794] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1274'. [ 486.182751][ T5942] usb 5-1: not running at top speed; connect to a high speed hub [ 486.190760][ T30] audit: type=1400 audit(1753744603.459:1154): avc: denied { add_name } for pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.194334][ T5942] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.212349][ T30] audit: type=1400 audit(1753744603.459:1155): avc: denied { create } for pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 486.487348][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 486.558657][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 487.405557][ T5942] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.439710][ T30] audit: type=1400 audit(1753744603.469:1156): avc: denied { append open } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 487.753510][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.761847][T10794] could not allocate digest TFM handle cryptd(blake2b-160) [ 487.778119][ T5942] usb 5-1: Product: ੧뙉ۦ㓳펒﨎嚟ꛠ␩薺텋㟭ꔽ柭ᑑ阃퀉襠ᴋꎙ現቏殆묞࣬㳿ﯕ悺﫱웎䫯תּ鋟泦灧⚚䏷琡뀾ゕꑬ萟佀༡㍈⾢ﴰ茯擴㘨혴튌솼ꁿ뵮摡깷ꖈꃜ믑焷橞⼎씯觀ہ׶ᚚꄶ槓軔༛츪ꬉ휌ΰ좪䑟 [ 487.834684][ T30] audit: type=1400 audit(1753744603.469:1157): avc: denied { getattr } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 487.963861][ T5942] usb 5-1: Manufacturer: ᰊ [ 487.993659][ T5942] usb 5-1: SerialNumber: 뗹듡ꛃ頡꿋꛳鑾ꤾ䣎偒q턱೽䙋⥖댘淾乎屦衱ⓗ᭒ꋩ쵪ꌒ饬갤襸酩ᰙ쌁᭞ᗞ饞䢄锞䐪⤠ꌼะ웚䷾薏㍂孙镙큃펫쩨ᰍ텅⤽杼鄘䬎藴썷ꨭ᩷૆䥜ﲢ혨穨ᙘ泟∓ꚁ嗍鬴ꢇ퍘ɕ [ 488.200026][ T5942] usb 5-1: can't set config #1, error -71 [ 488.251774][ T5942] usb 5-1: USB disconnect, device number 27 [ 488.430631][T10813] tipc: Started in network mode [ 488.442941][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1282'. [ 488.733168][T10813] tipc: Node identity 5a2b321ce7b9, cluster identity 4711 [ 488.744935][T10813] tipc: Enabled bearer , priority 0 [ 488.754761][T10818] syzkaller0: entered promiscuous mode [ 488.874622][T10818] syzkaller0: entered allmulticast mode [ 488.982178][T10824] overlayfs: failed to resolve './file0': -2 [ 489.739949][ T54] tipc: Node number set to 3180474908 [ 489.763707][T10813] tipc: Resetting bearer [ 489.792407][T10812] tipc: Resetting bearer [ 489.869162][T10812] tipc: Disabling bearer [ 490.188241][ T30] audit: type=1400 audit(1753744608.699:1158): avc: denied { setopt } for pid=10830 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 491.522197][T10859] capability: warning: `syz.2.1293' uses 32-bit capabilities (legacy support in use) [ 492.404823][T10873] netlink: 186984 bytes leftover after parsing attributes in process `syz.1.1297'. [ 492.758177][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 492.820261][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 492.835795][ T30] audit: type=1400 audit(1753744611.459:1159): avc: denied { ioctl } for pid=10865 comm="syz.2.1295" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 492.954997][T10887] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1299'. [ 493.030320][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 493.100450][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 493.199670][ T5942] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 494.132302][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.195965][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 494.210185][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.263716][ T5942] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 494.273980][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.283243][ T5942] usb 5-1: Product: syz [ 494.287890][ T5942] usb 5-1: Manufacturer: syz [ 494.307260][ T5942] usb 5-1: SerialNumber: syz [ 494.366451][ T5942] usb 5-1: config 0 descriptor?? [ 494.381148][ T5942] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 494.437199][T10869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.497177][T10869] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.506765][T10869] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.515933][T10869] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.524944][T10869] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.596358][T10873] IPv6: sit1: Disabled Multicast RS [ 494.626828][T10873] sit1: entered allmulticast mode [ 494.755541][ T5939] usb 5-1: USB disconnect, device number 28 [ 494.926889][T10897] ubi31: attaching mtd0 [ 494.937977][T10897] ubi31: scanning is finished [ 494.967296][ T30] audit: type=1400 audit(1753744613.599:1160): avc: denied { accept } for pid=10898 comm="syz.2.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 495.453847][T10897] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 495.485443][T10897] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 495.510934][T10897] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 495.533610][T10897] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 495.571140][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 495.573301][T10897] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 495.578828][ T30] audit: type=1400 audit(1753744614.179:1161): avc: denied { create } for pid=10907 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 495.615789][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 495.618425][T10897] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 495.723631][T10897] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3321110392 [ 495.734169][ T30] audit: type=1400 audit(1753744614.179:1162): avc: denied { ioctl } for pid=10907 comm="syz.4.1307" path="socket:[35060]" dev="sockfs" ino=35060 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 495.758730][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'. [ 495.759138][ T54] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 495.779320][T10897] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 495.793334][T10906] ubi31: background thread "ubi_bgt31d" started, PID 10906 [ 495.885183][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.951261][ T54] usb 3-1: not running at top speed; connect to a high speed hub [ 495.990018][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.004442][ T54] usb 3-1: config 1 interface 0 altsetting 102 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 496.034598][ T54] usb 3-1: config 1 interface 0 has no altsetting 0 [ 496.043213][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.050295][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.055073][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.073137][ T54] usb 3-1: Product: 遶举벧⩌绠∗剏曛覩ꂆ鄉ꭽ蝯ᡟ繅옙㴉熦⍍ƭ㣘ﱑ럖䈸Зᚐ僆얠좜Ꞥ寧ㄶ퉪∭꽧囜⌠굎䗵厺숞⚙飪ࣜٽ䭈笶㼢锇Ч웋黁舨㟰셕 [ 496.109153][ T54] usb 3-1: Manufacturer: о [ 496.112501][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.114637][ T54] usb 3-1: SerialNumber:   [ 496.144683][T10900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 496.191280][ T5942] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 496.332566][ T5942] usb 4-1: device descriptor read/64, error -71 [ 496.375048][ T10] usb 1-1: usb_control_msg returned -32 [ 496.380796][ T10] usbtmc 1-1:16.0: can't read capabilities [ 496.877021][ T54] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 496.893225][ T54] usb 3-1: USB disconnect, device number 23 [ 497.009730][ T5942] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 497.150194][ T5942] usb 4-1: device descriptor read/64, error -71 [ 497.291762][ T5942] usb usb4-port1: attempt power cycle [ 497.662449][ T5942] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 497.774110][ T5942] usb 4-1: device descriptor read/8, error -71 [ 497.936945][ T974] usb 1-1: USB disconnect, device number 27 [ 498.119962][ T5942] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 498.213312][ T5942] usb 4-1: device descriptor read/8, error -71 [ 498.361307][ T5942] usb usb4-port1: unable to enumerate USB device [ 498.728987][ T30] audit: type=1400 audit(1753744617.359:1163): avc: denied { getopt } for pid=10947 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 500.099926][ T5942] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 500.137426][T10971] FAULT_INJECTION: forcing a failure. [ 500.137426][T10971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.150927][T10971] CPU: 1 UID: 0 PID: 10971 Comm: syz.0.1326 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 500.150950][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.150961][T10971] Call Trace: [ 500.150967][T10971] [ 500.150973][T10971] dump_stack_lvl+0x16c/0x1f0 [ 500.151005][T10971] should_fail_ex+0x512/0x640 [ 500.151036][T10971] _copy_from_iter+0x29f/0x16f0 [ 500.151057][T10971] ? __alloc_skb+0x200/0x380 [ 500.151083][T10971] ? __pfx__copy_from_iter+0x10/0x10 [ 500.151102][T10971] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 500.151130][T10971] netlink_sendmsg+0x829/0xdd0 [ 500.151154][T10971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.151184][T10971] ____sys_sendmsg+0xa98/0xc70 [ 500.151206][T10971] ? copy_msghdr_from_user+0x10a/0x160 [ 500.151223][T10971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.151255][T10971] ___sys_sendmsg+0x134/0x1d0 [ 500.151273][T10971] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.151287][T10971] ? __lock_acquire+0x622/0x1c90 [ 500.151333][T10971] __sys_sendmsg+0x16d/0x220 [ 500.151350][T10971] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.151382][T10971] do_syscall_64+0xcd/0x4c0 [ 500.151401][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.151418][T10971] RIP: 0033:0x7f6ace78e9a9 [ 500.151432][T10971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.151449][T10971] RSP: 002b:00007f6acf60b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.151465][T10971] RAX: ffffffffffffffda RBX: 00007f6ace9b5fa0 RCX: 00007f6ace78e9a9 [ 500.151476][T10971] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 500.151487][T10971] RBP: 00007f6acf60b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.151496][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.151505][T10971] R13: 0000000000000000 R14: 00007f6ace9b5fa0 R15: 00007ffcab1524f8 [ 500.151528][T10971] [ 500.688141][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.834501][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.898571][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.932691][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.943286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.988929][ T5942] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.067143][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.124054][ T30] audit: type=1400 audit(1753744622.747:1164): avc: denied { firmware_load } for pid=7837 comm="kworker/u8:11" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 501.175638][ T5942] usb 4-1: config 0 descriptor?? [ 502.581536][ T5942] plantronics 0003:047F:FFFF.0009: invalid report_size 7173 [ 502.588849][ T5942] plantronics 0003:047F:FFFF.0009: item 0 2 1 7 parsing failed [ 502.651708][ T5942] plantronics 0003:047F:FFFF.0009: parse failed [ 502.658320][ T5942] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 502.745380][ T974] usb 4-1: USB disconnect, device number 24 [ 503.379777][ T5981] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 503.447503][T11010] dlm: non-version read from control device 0 [ 503.519833][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 503.552738][ T5981] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.579543][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.644063][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.719393][ T5981] usb 1-1: Product: syz [ 503.724219][ T5981] usb 1-1: Manufacturer: syz [ 503.728923][ T5981] usb 1-1: SerialNumber: syz [ 503.739193][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.742265][ T5981] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 503.824328][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.447203][ T5942] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 504.691476][ T5942] usb 5-1: device descriptor read/64, error -71 [ 504.729534][T11033] Invalid source name [ 504.814985][T11037] FAULT_INJECTION: forcing a failure. [ 504.814985][T11037] name failslab, interval 1, probability 0, space 0, times 0 [ 504.846628][T11037] CPU: 1 UID: 0 PID: 11037 Comm: syz.2.1347 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 504.846652][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.846661][T11037] Call Trace: [ 504.846666][T11037] [ 504.846673][T11037] dump_stack_lvl+0x16c/0x1f0 [ 504.846702][T11037] should_fail_ex+0x512/0x640 [ 504.846726][T11037] ? fs_reclaim_acquire+0xae/0x150 [ 504.846747][T11037] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 504.846763][T11037] should_failslab+0xc2/0x120 [ 504.846780][T11037] __kmalloc_noprof+0xd2/0x510 [ 504.846810][T11037] tomoyo_realpath_from_path+0xc2/0x6e0 [ 504.846829][T11037] ? tomoyo_profile+0x47/0x60 [ 504.846850][T11037] tomoyo_path_number_perm+0x245/0x580 [ 504.846873][T11037] ? tomoyo_path_number_perm+0x237/0x580 [ 504.846899][T11037] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 504.846925][T11037] ? find_held_lock+0x2b/0x80 [ 504.846971][T11037] ? find_held_lock+0x2b/0x80 [ 504.846991][T11037] ? hook_file_ioctl_common+0x145/0x410 [ 504.847017][T11037] ? __fget_files+0x20e/0x3c0 [ 504.847038][T11037] security_file_ioctl+0x9b/0x240 [ 504.847057][T11037] __x64_sys_ioctl+0xb7/0x210 [ 504.847081][T11037] do_syscall_64+0xcd/0x4c0 [ 504.847100][T11037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.847116][T11037] RIP: 0033:0x7f3b1338e9a9 [ 504.847130][T11037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.847144][T11037] RSP: 002b:00007f3b1419b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.847160][T11037] RAX: ffffffffffffffda RBX: 00007f3b135b5fa0 RCX: 00007f3b1338e9a9 [ 504.847170][T11037] RDX: 0000000000000000 RSI: 00000000000007b2 RDI: 0000000000000003 [ 504.847180][T11037] RBP: 00007f3b1419b090 R08: 0000000000000000 R09: 0000000000000000 [ 504.847190][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.847199][T11037] R13: 0000000000000000 R14: 00007f3b135b5fa0 R15: 00007ffc44569728 [ 504.847220][T11037] [ 504.847228][T11037] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.883880][T11040] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 505.067869][ T5942] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 505.080764][T11040] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1348'. [ 505.199693][ T5942] usb 5-1: device descriptor read/64, error -71 [ 505.251163][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 505.288949][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1348'. [ 505.531132][ T5942] usb usb5-port1: attempt power cycle [ 505.809756][ T10] usb 1-1: Service connection timeout for: 256 [ 505.828729][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 505.900816][ T5942] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 506.182033][ T5942] usb 5-1: device descriptor read/8, error -71 [ 506.489876][ T30] audit: type=1400 audit(1753744627.887:1165): avc: denied { getopt } for pid=11057 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 506.531973][ T10] ath9k_htc: Failed to initialize the device [ 506.611199][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 506.679677][ T5942] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 506.686933][ T974] usb 1-1: USB disconnect, device number 28 [ 506.978313][ T5942] usb 5-1: device not accepting address 32, error -71 [ 507.000997][ T5942] usb usb5-port1: unable to enumerate USB device [ 508.068514][T11080] Invalid source name [ 508.327812][ T5912] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 508.521022][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.777727][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.808463][ T5912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 508.848107][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 508.897610][ T5912] usb 2-1: SerialNumber: syz [ 509.068385][ T5912] usb 2-1: 0:2 : does not exist [ 509.107379][T11095] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 509.896678][T11101] bpq0: entered promiscuous mode [ 509.917386][ T30] audit: type=1400 audit(1753744631.537:1166): avc: denied { append } for pid=11068 comm="syz.1.1358" name="pfkey" dev="proc" ino=4026533199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 510.034935][ T30] audit: type=1400 audit(1753744631.667:1167): avc: denied { connect } for pid=11093 comm="syz.4.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 510.776462][ T5912] usb 2-1: USB disconnect, device number 26 [ 514.150513][T11162] FAULT_INJECTION: forcing a failure. [ 514.150513][T11162] name failslab, interval 1, probability 0, space 0, times 0 [ 514.189169][T11162] CPU: 0 UID: 0 PID: 11162 Comm: syz.3.1384 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 514.189193][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.189203][T11162] Call Trace: [ 514.189208][T11162] [ 514.189218][T11162] dump_stack_lvl+0x16c/0x1f0 [ 514.189254][T11162] should_fail_ex+0x512/0x640 [ 514.189284][T11162] should_failslab+0xc2/0x120 [ 514.189303][T11162] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 514.189329][T11162] ? skb_clone+0x190/0x3f0 [ 514.189350][T11162] skb_clone+0x190/0x3f0 [ 514.189367][T11162] netlink_deliver_tap+0xabd/0xd30 [ 514.189391][T11162] netlink_unicast+0x62f/0x850 [ 514.189413][T11162] ? __pfx_netlink_unicast+0x10/0x10 [ 514.189438][T11162] netlink_sendmsg+0x8d1/0xdd0 [ 514.189461][T11162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.189490][T11162] sock_write_iter+0x4fc/0x5b0 [ 514.189511][T11162] ? __pfx_sock_write_iter+0x10/0x10 [ 514.189539][T11162] ? bpf_lsm_file_permission+0x9/0x10 [ 514.189558][T11162] ? security_file_permission+0x71/0x210 [ 514.189575][T11162] ? rw_verify_area+0xcf/0x680 [ 514.189600][T11162] vfs_write+0x6c4/0x1150 [ 514.189625][T11162] ? __pfx_sock_write_iter+0x10/0x10 [ 514.189648][T11162] ? __pfx_vfs_write+0x10/0x10 [ 514.189669][T11162] ? find_held_lock+0x2b/0x80 [ 514.189706][T11162] ksys_write+0x1f8/0x250 [ 514.189729][T11162] ? __pfx_ksys_write+0x10/0x10 [ 514.189760][T11162] do_syscall_64+0xcd/0x4c0 [ 514.189778][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.189795][T11162] RIP: 0033:0x7f688198e9a9 [ 514.189810][T11162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.189826][T11162] RSP: 002b:00007f68827d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.189844][T11162] RAX: ffffffffffffffda RBX: 00007f6881bb5fa0 RCX: 00007f688198e9a9 [ 514.189854][T11162] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000004 [ 514.189864][T11162] RBP: 00007f68827d8090 R08: 0000000000000000 R09: 0000000000000000 [ 514.189873][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.189883][T11162] R13: 0000000000000000 R14: 00007f6881bb5fa0 R15: 00007ffdfb758ef8 [ 514.189906][T11162] [ 515.922788][T11183] syz_tun: entered allmulticast mode [ 515.932669][T11183] dvmrp8: entered allmulticast mode [ 516.054698][T11185] block nbd3: NBD_DISCONNECT [ 516.260144][T11181] syz_tun: left allmulticast mode [ 517.021262][ T30] audit: type=1400 audit(1753744638.647:1168): avc: denied { map } for pid=11200 comm="syz.0.1397" path="socket:[36794]" dev="sockfs" ino=36794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.052712][T11205] binder_alloc: 11197: binder_alloc_buf, no vma [ 517.402121][ T30] audit: type=1400 audit(1753744638.687:1169): avc: denied { call } for pid=11197 comm="syz.1.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 517.605957][ T30] audit: type=1400 audit(1753744639.237:1170): avc: denied { map } for pid=11214 comm="syz.0.1402" path="/proc/888/net/fib_trie" dev="proc" ino=4026533236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 518.358360][T11230] syz_tun: entered allmulticast mode [ 518.811606][T11232] block nbd4: NBD_DISCONNECT [ 519.021145][T11229] syz_tun: left allmulticast mode [ 519.395116][T11248] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 519.446646][ T30] audit: type=1400 audit(1753744641.077:1171): avc: denied { audit_write } for pid=11243 comm="syz.2.1411" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 519.811338][T11253] Mount JFS Failure: -22 [ 519.815954][T11253] jfs_mount failed w/return code = -22 [ 519.843065][T11254] Mount JFS Failure: -22 [ 519.874562][T11254] jfs_mount failed w/return code = -22 [ 522.147301][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 522.167168][ T30] audit: type=1400 audit(1753744643.797:1172): avc: denied { read } for pid=11284 comm="syz.2.1419" path="socket:[37578]" dev="sockfs" ino=37578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 522.250967][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 522.364057][T11291] syz_tun: entered allmulticast mode [ 522.446001][T11288] dvmrp8: entered allmulticast mode [ 522.595773][T11293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.958323][T11291] block nbd0: NBD_DISCONNECT [ 523.270823][T11287] syz_tun: left allmulticast mode [ 524.379743][ T974] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 524.907769][ T974] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 525.000472][ T30] audit: type=1400 audit(1753744646.147:1173): avc: denied { getopt } for pid=11313 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 525.221925][ T974] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 525.333933][ T974] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 525.353272][ T974] usb 3-1: config 0 has no interface number 0 [ 525.359378][ T974] usb 3-1: config 0 has no interface number 1 [ 525.541136][ T974] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 525.552322][ T974] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 525.567342][ T974] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 525.578680][ T974] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 525.603486][ T974] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 526.078723][ T974] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 526.166685][ T974] usb 3-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 526.178662][ T974] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 526.189207][ T974] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 526.203010][ T974] usb 3-1: config 0 interface 66 has no altsetting 0 [ 526.229269][ T974] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 526.324403][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.334832][ T974] usb 3-1: Product: syz [ 526.339010][ T974] usb 3-1: Manufacturer: syz [ 526.349636][ T974] usb 3-1: SerialNumber: syz [ 526.379244][ T974] usb 3-1: config 0 descriptor?? [ 526.423920][ T974] ljca 3-1:0.84: bulk endpoints not found [ 527.102056][ T974] ljca 3-1:0.66: probe with driver ljca failed with error -71 [ 527.541621][T11348] FAULT_INJECTION: forcing a failure. [ 527.541621][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 527.566203][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.1.1435 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 527.566228][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.566237][T11348] Call Trace: [ 527.566244][T11348] [ 527.566251][T11348] dump_stack_lvl+0x16c/0x1f0 [ 527.566282][T11348] should_fail_ex+0x512/0x640 [ 527.566307][T11348] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 527.566333][T11348] should_failslab+0xc2/0x120 [ 527.566346][T11348] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 527.566362][T11348] ? mas_alloc_nodes+0x18b/0x8b0 [ 527.566378][T11348] mas_alloc_nodes+0x18b/0x8b0 [ 527.566396][T11348] mas_node_count_gfp+0x105/0x130 [ 527.566411][T11348] mas_preallocate+0x7e0/0xde0 [ 527.566425][T11348] ? __pfx_mas_preallocate+0x10/0x10 [ 527.566442][T11348] ? anon_vma_name+0x75/0x100 [ 527.566455][T11348] __split_vma+0x34a/0x1070 [ 527.566472][T11348] ? __pfx___split_vma+0x10/0x10 [ 527.566487][T11348] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 527.566501][T11348] ? __mpol_dup+0x74/0x380 [ 527.566512][T11348] ? __do_sys_set_mempolicy_home_node+0x32d/0x780 [ 527.566532][T11348] vma_modify+0x16dc/0x2030 [ 527.566550][T11348] ? __pfx_vma_modify+0x10/0x10 [ 527.566568][T11348] vma_modify_policy+0x219/0x2d0 [ 527.566584][T11348] ? __pfx_vma_modify_policy+0x10/0x10 [ 527.566605][T11348] ? find_held_lock+0x2b/0x80 [ 527.566621][T11348] mbind_range+0x175/0x570 [ 527.566634][T11348] __do_sys_set_mempolicy_home_node+0x458/0x780 [ 527.566650][T11348] ? __pfx___do_sys_set_mempolicy_home_node+0x10/0x10 [ 527.566670][T11348] ? __secure_computing+0x28e/0x3b0 [ 527.566687][T11348] do_syscall_64+0xcd/0x4c0 [ 527.566698][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.566709][T11348] RIP: 0033:0x7fad8698e9a9 [ 527.566719][T11348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.566729][T11348] RSP: 002b:00007fad8775a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 527.566739][T11348] RAX: ffffffffffffffda RBX: 00007fad86bb5fa0 RCX: 00007fad8698e9a9 [ 527.566745][T11348] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000417000 [ 527.566751][T11348] RBP: 00007fad8775a090 R08: 0000000000000000 R09: 0000000000000000 [ 527.566757][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.566763][T11348] R13: 0000000000000000 R14: 00007fad86bb5fa0 R15: 00007fff08dc4b18 [ 527.566776][T11348] [ 527.815992][ T974] usb 3-1: USB disconnect, device number 24 [ 527.918937][T11346] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1433'. [ 528.229915][T11346] could not allocate digest TFM handle cryptd(blake2b-160) [ 528.715948][T11343] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.1434'. [ 528.781772][ T30] audit: type=1400 audit(1753744650.397:1174): avc: denied { ioctl } for pid=11362 comm="syz.0.1438" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 528.807563][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.407248][ T30] audit: type=1400 audit(1753744650.657:1175): avc: denied { write } for pid=11362 comm="syz.0.1438" name="file0" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 529.477578][ T30] audit: type=1400 audit(1753744650.657:1176): avc: denied { open } for pid=11362 comm="syz.0.1438" path="/255/file0" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 529.684519][ T30] audit: type=1400 audit(1753744650.667:1177): avc: denied { ioctl } for pid=11362 comm="syz.0.1438" path="/255/file0" dev="tmpfs" ino=1385 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 529.708928][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.738619][ T30] audit: type=1400 audit(1753744651.137:1178): avc: denied { setopt } for pid=11367 comm="syz.1.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.758131][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.058287][T11378] IPVS: set_ctl: invalid protocol: 13 172.30.1.4:20000 [ 530.110357][T11379] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.139838][T11371] loop2: detected capacity change from 0 to 7 [ 530.489010][T11371] Dev loop2: unable to read RDB block 7 [ 530.500012][T11371] loop2: unable to read partition table [ 530.507669][T11371] loop2: partition table beyond EOD, truncated [ 530.515633][T11371] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 530.624173][T11343] could not allocate digest TFM handle cryptd(blake2b-160) [ 533.004078][T11402] kvm: pic: single mode not supported [ 533.004878][T11402] kvm: pic: single mode not supported [ 536.584871][T11417] tipc: Can't bind to reserved service type 2 [ 536.885000][T11422] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1451'. [ 537.037946][ T30] audit: type=1400 audit(1753744658.637:1179): avc: denied { map } for pid=11415 comm="syz.3.1452" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 537.654486][T11422] could not allocate digest TFM handle cryptd(blake2b-160) [ 539.713031][T11460] No control pipe specified [ 540.848404][T11473] syz_tun: entered allmulticast mode [ 540.858460][T11473] dvmrp8: entered allmulticast mode [ 541.377648][T11475] block nbd1: NBD_DISCONNECT [ 541.650130][T11472] syz_tun: left allmulticast mode [ 542.340855][ T974] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 542.640725][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 542.939409][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.949512][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 542.991509][ T974] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 543.077071][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.131433][ T974] usb 4-1: config 0 descriptor?? [ 543.345051][T11494] bridge0: entered promiscuous mode [ 543.552160][T11494] macvlan2: entered promiscuous mode [ 543.928880][T11496] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1471'. [ 544.251534][ T974] hid-alps 0003:044E:1215.000A: item fetching failed at offset 5/7 [ 544.292736][ T974] hid-alps 0003:044E:1215.000A: parse failed [ 544.299778][ T974] hid-alps 0003:044E:1215.000A: probe with driver hid-alps failed with error -22 [ 544.540741][T11496] could not allocate digest TFM handle cryptd(blake2b-160) [ 544.617816][ T974] usb 4-1: USB disconnect, device number 25 [ 545.154672][ T5912] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 545.369259][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.383843][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.444946][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.638653][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 545.728193][ T5912] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 545.798041][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.813743][ T5912] usb 2-1: config 0 descriptor?? [ 546.121631][ T30] audit: type=1400 audit(1753744667.757:1180): avc: denied { append } for pid=11531 comm="syz.4.1480" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.455986][T11541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1478'. [ 546.501266][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 546.572667][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 546.590972][T11514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.606978][T11514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.623660][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 546.636403][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 546.684105][ T5912] usb 2-1: USB disconnect, device number 27 [ 546.824663][T11544] No control pipe specified [ 548.013969][T11561] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1484'. [ 548.063834][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 548.073968][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 549.001456][T11572] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1487'. [ 549.511347][T11572] could not allocate digest TFM handle cryptd(blake2b-160) [ 550.697791][ T30] audit: type=1400 audit(1753744672.327:1181): avc: denied { bind } for pid=11590 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 550.929957][ T30] audit: type=1400 audit(1753744672.517:1182): avc: denied { read } for pid=11590 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 551.322210][T11594] batman_adv: batadv0: Adding interface: ipvlan2 [ 551.328592][T11594] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.353964][T11594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.364545][T11594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.374418][T11594] batman_adv: batadv0: Interface activated: ipvlan2 [ 551.660651][T11606] binder: 11605:11606 ioctl c0306201 0 returned -14 [ 551.824077][ T30] audit: type=1400 audit(1753744673.457:1183): avc: denied { getopt } for pid=11611 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 552.109753][ T54] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 552.287939][T11613] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 552.444064][T11618] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1501'. [ 552.469757][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 552.619026][ T54] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 552.628140][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.636225][ T54] usb 5-1: Product: syz [ 552.640678][ T54] usb 5-1: Manufacturer: syz [ 552.650756][ T54] usb 5-1: SerialNumber: syz [ 552.660252][ T54] usb 5-1: config 0 descriptor?? [ 552.744222][ T54] gspca_main: se401-2.14.0 probing 047d:5003 [ 553.466368][T11618] could not allocate digest TFM handle cryptd(blake2b-160) [ 553.544691][ T54] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 553.544765][ T54] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 553.546506][ T54] usb 5-1: USB disconnect, device number 33 [ 553.769392][T11636] No control pipe specified [ 553.878870][ T30] audit: type=1400 audit(1753744675.507:1184): avc: denied { write } for pid=11634 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 557.065730][T11673] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1514'. [ 557.434085][T11673] could not allocate digest TFM handle cryptd(blake2b-160) [ 558.548279][T11692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.574759][ T30] audit: type=1800 audit(1753744680.207:1185): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1519" name="bus" dev="tmpfs" ino=756 res=0 errno=0 [ 558.596504][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.594382][T11712] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 560.614656][T11721] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.1527'. [ 562.157248][T11720] could not allocate digest TFM handle cryptd(blake2b-160) [ 562.374255][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.281184][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.341549][T11746] openvswitch: netlink: Message has 16 unknown bytes. [ 563.348367][T11746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.387129][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'. [ 563.641740][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 564.144375][T11759] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 564.409664][ T5904] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 565.440645][ T5904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.448656][ T5904] usb 4-1: config 0 has no interface number 0 [ 565.548518][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 565.557817][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 565.604820][ T5904] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 565.729068][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.769504][ T5904] usb 4-1: config 0 descriptor?? [ 565.802020][ T5904] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 566.007514][ T5904] usb 4-1: USB disconnect, device number 26 [ 566.168283][T11789] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1544'. [ 566.592235][T11793] openvswitch: netlink: Message has 16 unknown bytes. [ 566.642051][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.843923][T11785] could not allocate digest TFM handle cryptd(blake2b-160) [ 568.429023][T11803] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1549'. [ 568.736468][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 568.797321][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 568.930029][ T5942] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 568.979615][ T5912] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 569.111172][ T5942] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 569.120765][ T5942] usb 2-1: config 0 has no interface number 0 [ 569.134743][ T5942] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.164625][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 569.180673][ T5912] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 569.190902][ T5912] usb 3-1: config 179 has no interface number 0 [ 569.199012][ T5942] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.210788][ T5912] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 569.243948][ T5942] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 569.258131][ T5912] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 569.274916][ T5942] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 569.324064][ T5942] usb 2-1: Manufacturer: syz [ 569.331529][ T5912] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.364387][ T5942] usb 2-1: config 0 descriptor?? [ 569.386678][ T5912] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 569.457877][ T5912] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 569.477822][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.516725][T11816] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 569.569833][T11826] binder: 11825:11826 ioctl c0306201 0 returned -14 [ 569.740639][ T5904] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input35 [ 569.788968][T11813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.800403][T11813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.840625][ T5912] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 569.852107][ T5942] usbhid 2-1:0.18: can't add hid device: -71 [ 569.858274][ T5942] usbhid 2-1:0.18: probe with driver usbhid failed with error -71 [ 569.875391][ T5942] usb 2-1: USB disconnect, device number 28 [ 570.139820][ T30] audit: type=1400 audit(1753744691.767:1186): avc: denied { append } for pid=11832 comm="syz.1.1557" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 570.183099][T11816] Bluetooth: MGMT ver 1.23 [ 570.256454][ T974] usb 3-1: USB disconnect, device number 25 [ 570.256463][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 570.256501][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 570.309687][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 570.317918][ T5912] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 570.339584][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.359413][ T5912] usb 4-1: Product: syz [ 570.373281][ T5912] usb 4-1: Manufacturer: syz [ 570.378578][ T5912] usb 4-1: SerialNumber: syz [ 570.397046][ T5912] usb 4-1: config 0 descriptor?? [ 570.414082][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 571.036820][ T5912] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 571.044692][ T5912] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 571.068567][ T5912] usb 4-1: USB disconnect, device number 27 [ 571.097935][T11849] binder: BINDER_SET_CONTEXT_MGR already set [ 571.106192][T11849] binder: 11848:11849 ioctl 4018620d 200000000040 returned -16 [ 571.387171][T11861] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1563'. [ 572.037213][T11861] could not allocate digest TFM handle cryptd(blake2b-160) [ 572.495317][T11886] FAULT_INJECTION: forcing a failure. [ 572.495317][T11886] name failslab, interval 1, probability 0, space 0, times 0 [ 572.886975][T11886] CPU: 1 UID: 0 PID: 11886 Comm: syz.4.1572 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 572.886997][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.887003][T11886] Call Trace: [ 572.887007][T11886] [ 572.887011][T11886] dump_stack_lvl+0x16c/0x1f0 [ 572.887032][T11886] should_fail_ex+0x512/0x640 [ 572.887051][T11886] should_failslab+0xc2/0x120 [ 572.887062][T11886] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 572.887079][T11886] ? skb_clone+0x190/0x3f0 [ 572.887091][T11886] skb_clone+0x190/0x3f0 [ 572.887102][T11886] netlink_deliver_tap+0xabd/0xd30 [ 572.887117][T11886] netlink_unicast+0x62f/0x850 [ 572.887131][T11886] ? __pfx_netlink_unicast+0x10/0x10 [ 572.887146][T11886] netlink_sendmsg+0x8d1/0xdd0 [ 572.887160][T11886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.887177][T11886] ____sys_sendmsg+0xa98/0xc70 [ 572.887190][T11886] ? copy_msghdr_from_user+0x10a/0x160 [ 572.887200][T11886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.887219][T11886] ___sys_sendmsg+0x134/0x1d0 [ 572.887230][T11886] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.887238][T11886] ? __lock_acquire+0x622/0x1c90 [ 572.887265][T11886] __sys_sendmsg+0x16d/0x220 [ 572.887275][T11886] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.887294][T11886] do_syscall_64+0xcd/0x4c0 [ 572.887305][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.887316][T11886] RIP: 0033:0x7f68fcd8e9a9 [ 572.887325][T11886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.887335][T11886] RSP: 002b:00007f68fdbbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.887345][T11886] RAX: ffffffffffffffda RBX: 00007f68fcfb5fa0 RCX: 00007f68fcd8e9a9 [ 572.887352][T11886] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 572.887358][T11886] RBP: 00007f68fdbbc090 R08: 0000000000000000 R09: 0000000000000000 [ 572.887363][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.887369][T11886] R13: 0000000000000000 R14: 00007f68fcfb5fa0 R15: 00007ffc02266108 [ 572.887382][T11886] [ 574.824416][T11915] syz_tun: entered allmulticast mode [ 575.682293][T11920] block nbd4: NBD_DISCONNECT [ 575.694757][T11920] block nbd4: Send disconnect failed -22 [ 575.814091][T11912] block nbd4: Disconnected due to user request. [ 575.823422][T11912] block nbd4: shutting down sockets [ 576.393552][T11912] syz_tun: left allmulticast mode [ 576.577585][T11930] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.672128][ T30] audit: type=1400 audit(1753744698.297:1187): avc: denied { remount } for pid=11928 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 576.777640][ T30] audit: type=1400 audit(1753744698.407:1188): avc: denied { read write } for pid=11934 comm="syz.4.1585" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 576.809871][ T5912] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 576.839693][ T30] audit: type=1400 audit(1753744698.407:1189): avc: denied { open } for pid=11934 comm="syz.4.1585" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 576.864074][ T5912] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.870944][T11937] syz_tun: entered allmulticast mode [ 576.902068][ T5942] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 576.930906][T11937] block nbd0: NBD_DISCONNECT [ 576.935506][T11937] block nbd0: Send disconnect failed -22 [ 576.941646][T11936] block nbd0: Disconnected due to user request. [ 576.947894][T11936] block nbd0: shutting down sockets [ 576.990199][T11936] syz_tun: left allmulticast mode [ 577.052855][ T5942] usb 2-1: device descriptor read/64, error -71 [ 577.178673][T11943] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1588'. [ 577.378273][ T5942] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 577.576093][ T5942] usb 2-1: device descriptor read/64, error -71 [ 577.690360][ T5942] usb usb2-port1: attempt power cycle [ 578.419877][ T5942] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 578.745350][ T5942] usb 2-1: device descriptor read/8, error -71 [ 579.059605][ T5942] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 580.384607][T11975] lo speed is unknown, defaulting to 1000 [ 580.390896][T11975] lo speed is unknown, defaulting to 1000 [ 580.403488][T11975] lo speed is unknown, defaulting to 1000 [ 580.431627][T11975] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 580.485491][T11975] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 580.693440][T11975] lo speed is unknown, defaulting to 1000 [ 580.707027][T11975] lo speed is unknown, defaulting to 1000 [ 580.713823][T11975] lo speed is unknown, defaulting to 1000 [ 580.720855][T11975] lo speed is unknown, defaulting to 1000 [ 580.727327][T11975] lo speed is unknown, defaulting to 1000 [ 581.304862][ T5942] usb 2-1: device descriptor read/8, error -71 [ 581.511368][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1599'. [ 581.530246][ T5942] usb usb2-port1: unable to enumerate USB device [ 582.008109][ T5939] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 582.043836][ T30] audit: type=1326 audit(1753744703.677:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.069772][ T30] audit: type=1326 audit(1753744703.677:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.593569][ T30] audit: type=1326 audit(1753744703.677:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.619210][ T30] audit: type=1326 audit(1753744703.677:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.651791][ T30] audit: type=1326 audit(1753744703.677:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.683125][ T30] audit: type=1326 audit(1753744703.707:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.707032][ T30] audit: type=1326 audit(1753744703.707:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.806380][ T30] audit: type=1326 audit(1753744703.707:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.830689][ T30] audit: type=1326 audit(1753744703.707:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.841420][ T5939] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.858386][ T30] audit: type=1326 audit(1753744703.707:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11989 comm="syz.0.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ace78e9a9 code=0x7ffc0000 [ 582.869525][ T5939] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 583.581525][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.766357][ T5939] usb 3-1: config 0 descriptor?? [ 585.685026][T12031] binder: 12029:12031 ioctl c0306201 0 returned -14 [ 585.871661][ T5942] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 586.039661][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 586.082371][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.119800][ T5912] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 586.165675][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.258933][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 586.329723][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 586.350136][ T5912] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 586.363478][ T5942] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 586.380297][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.388289][ T5912] usb 1-1: Product: syz [ 586.407873][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.424000][ T5912] usb 1-1: Manufacturer: syz [ 586.515476][ T5912] usb 1-1: SerialNumber: syz [ 586.555441][ T5942] usb 4-1: config 0 descriptor?? [ 587.007720][ T5912] usb 1-1: config 0 descriptor?? [ 587.027595][ T5981] usb 3-1: USB disconnect, device number 26 [ 587.046865][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 587.981330][ T5912] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 587.988717][ T5912] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 588.009254][ T5942] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input36 [ 588.023808][ T5912] usb 1-1: USB disconnect, device number 29 [ 588.158229][ T5942] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input37 [ 589.431328][ T5942] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 590.005902][T12068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1621'. [ 590.546508][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 590.546526][ T30] audit: type=1400 audit(1753744711.557:1249): avc: denied { write } for pid=12060 comm="syz.3.1621" name="cgroup.subtree_control" dev="cgroup2" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 590.814811][ T30] audit: type=1400 audit(1753744711.557:1250): avc: denied { open } for pid=12060 comm="syz.3.1621" path="" dev="cgroup2" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 590.904773][ T5942] usb 4-1: USB disconnect, device number 28 [ 592.009916][T12082] Invalid ELF section header size [ 595.911070][T12106] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 596.949657][ T974] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 597.212370][T12106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 597.271875][ T974] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 597.548824][T12113] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 597.634509][T12116] vlan3: entered allmulticast mode [ 597.641723][T12116] veth1: entered allmulticast mode [ 597.655488][T12116] bond1: (slave vlan3): Opening slave failed [ 597.889665][ T974] usb 2-1: config 0 has no interface number 0 [ 597.901767][ T974] usb 2-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 598.063388][T12124] warning: `syz.0.1636' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 598.085066][ T974] usb 2-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 598.214651][ T974] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 598.229197][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.278575][ T974] usb 2-1: Product: syz [ 598.388962][ T974] usb 2-1: Manufacturer: syz [ 598.426268][ T974] usb 2-1: SerialNumber: syz [ 598.442950][ T974] usb 2-1: config 0 descriptor?? [ 598.485544][ T974] usb 2-1: can't set config #0, error -71 [ 598.537241][ T974] usb 2-1: USB disconnect, device number 33 [ 599.791950][T12132] batman_adv: batadv0: Adding interface: ipvlan2 [ 599.798316][T12132] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.247078][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.257566][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.267406][T12132] batman_adv: batadv0: Interface activated: ipvlan2 [ 600.397349][T12147] syz.2.1642: attempt to access beyond end of device [ 600.397349][T12147] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 600.410242][T12147] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 600.635332][ T30] audit: type=1400 audit(1753744721.937:1251): avc: denied { ioctl } for pid=12145 comm="syz.2.1642" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 602.543488][ T5942] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 602.853686][ T5942] usb 1-1: device descriptor read/64, error -71 [ 603.224519][T12180] batman_adv: batadv0: Adding interface: ipvlan1 [ 603.230980][T12180] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.256356][T12180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.266848][T12180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.276760][T12180] batman_adv: batadv0: Interface activated: ipvlan1 [ 603.339608][ T5942] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 603.470691][ T5942] usb 1-1: device descriptor read/64, error -71 [ 603.590989][ T5942] usb usb1-port1: attempt power cycle [ 603.732059][ T974] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 603.790321][ T5939] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 603.848989][T12189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.990037][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 604.034500][ T5939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.077754][ T974] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 604.109865][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.139105][ T974] usb 3-1: config 0 has no interfaces? [ 605.075093][ T974] usb 3-1: config 0 has no interfaces? [ 605.431549][ T5939] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.525042][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 606.343673][ T5939] usb 2-1: SerialNumber: syz [ 606.395493][ T974] usb 3-1: config 0 has no interfaces? [ 606.537115][ T974] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 606.558174][ T974] usb 3-1: can't read configurations, error -71 [ 607.000873][T12211] dvmrp17: entered allmulticast mode [ 607.095517][T12215] dvmrp17: left allmulticast mode [ 607.310884][ T5939] usb 2-1: can't set config #1, error -71 [ 607.317971][ T5939] usb 2-1: USB disconnect, device number 34 [ 607.453438][T12213] overlay: Unknown parameter 'subj_user' [ 607.757402][T12225] syz_tun: entered allmulticast mode [ 608.113471][T12229] block nbd1: NBD_DISCONNECT [ 608.120213][T12229] block nbd1: Send disconnect failed -22 [ 608.229164][T12224] block nbd1: Disconnected due to user request. [ 608.235671][T12224] block nbd1: shutting down sockets [ 608.270437][T12224] syz_tun: left allmulticast mode [ 609.282682][T12217] trusted_key: encrypted_key: insufficient parameters specified [ 609.449677][ T974] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 609.763695][ T974] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 609.789003][ T974] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 609.833169][ T974] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.882819][ T974] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 609.915922][ T974] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 609.927874][ T974] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.943832][ T974] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 609.957927][ T974] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 609.971677][ T974] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.991147][ T974] usb 2-1: string descriptor 0 read error: -22 [ 610.006479][ T974] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 610.015653][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.037798][ T974] adutux 2-1:168.0: interrupt endpoints not found [ 610.100784][T12251] binder: 12250:12251 ioctl c0306201 200000000240 returned -14 [ 610.206395][ T30] audit: type=1400 audit(1753744731.837:1252): avc: denied { write } for pid=12254 comm="syz.3.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 610.249204][T12235] tipc: Resetting bearer [ 610.264218][ T30] audit: type=1400 audit(1753744731.877:1253): avc: denied { ioctl } for pid=12234 comm="syz.1.1663" path="socket:[42992]" dev="sockfs" ino=42992 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 610.265131][ T974] usb 2-1: USB disconnect, device number 35 [ 612.389609][ T5942] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 612.981154][ T5942] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.989295][ T5942] usb 5-1: config 0 has no interface number 0 [ 612.995474][ T5942] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.010718][ T5942] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.047725][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.030568][ T5942] usb 5-1: config 0 descriptor?? [ 614.043097][ T5942] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 614.253941][ T5942] usb 5-1: USB disconnect, device number 34 [ 617.319021][T12333] ref_ctr_offset mismatch. inode: 0x6d1 offset: 0x0 ref_ctr_offset(old): 0x200000000180 ref_ctr_offset(new): 0x0 [ 618.040267][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'. [ 618.059204][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1689'. [ 618.080633][ T5939] lo speed is unknown, defaulting to 1000 [ 618.425143][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'. [ 618.425246][T12342] netlink: 'syz.0.1690': attribute type 7 has an invalid length. [ 618.425299][T12342] netlink: 'syz.0.1690': attribute type 8 has an invalid length. [ 618.425326][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 618.604358][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 620.379972][ T5939] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 620.632556][ T5939] usb 1-1: device descriptor read/64, error -71 [ 621.350789][ T5939] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 621.607804][ T5939] usb 1-1: device descriptor read/64, error -71 [ 622.130480][ T5939] usb usb1-port1: attempt power cycle [ 622.549672][ T5939] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 622.724250][ T5939] usb 1-1: device descriptor read/8, error -71 [ 622.728927][T12390] geneve2: entered allmulticast mode [ 622.999868][ T5939] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 623.055826][ T5939] usb 1-1: device descriptor read/8, error -71 [ 623.330696][ T5939] usb usb1-port1: unable to enumerate USB device [ 623.534784][T12413] syz_tun: entered allmulticast mode [ 623.821403][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.871203][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.957715][T12416] block nbd0: NBD_DISCONNECT [ 623.983415][T12416] block nbd0: Send disconnect failed -22 [ 624.046501][T12420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1708'. [ 624.080959][T12412] block nbd0: Disconnected due to user request. [ 624.098736][T12412] block nbd0: shutting down sockets [ 624.179656][T12424] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 624.186258][T12424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 624.196815][T12412] syz_tun: left allmulticast mode [ 624.227812][T12424] vhci_hcd vhci_hcd.0: Device attached [ 624.303240][T12430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.399653][ T5942] vhci_hcd: vhci_device speed not set [ 624.459987][ T5942] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 624.478328][T12427] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 624.484931][T12427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.780790][T12427] vhci_hcd vhci_hcd.0: Device attached [ 624.811074][T12420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1708'. [ 624.911520][T12424] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 624.918166][T12424] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.993903][T12424] vhci_hcd vhci_hcd.0: Device attached [ 625.038457][T12430] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 625.045097][T12430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 625.147343][T12444] batadv_slave_1: Device is already in use. [ 625.386387][T12430] vhci_hcd vhci_hcd.0: Device attached [ 625.436263][T12432] vhci_hcd: connection closed [ 625.436588][T12434] vhci_hcd: connection closed [ 625.437085][T12435] vhci_hcd: connection closed [ 625.441374][ T1102] vhci_hcd: stop threads [ 625.446016][T12425] vhci_hcd: connection reset by peer [ 625.873694][ T1102] vhci_hcd: release socket [ 625.908423][ T1102] vhci_hcd: disconnect device [ 625.950107][ T1102] vhci_hcd: stop threads [ 625.954387][ T1102] vhci_hcd: release socket [ 626.000127][ T1102] vhci_hcd: disconnect device [ 626.011689][ T1102] vhci_hcd: stop threads [ 626.015956][ T1102] vhci_hcd: release socket [ 626.030457][ T1102] vhci_hcd: disconnect device [ 626.036426][ T1102] vhci_hcd: stop threads [ 626.048727][ T1102] vhci_hcd: release socket [ 626.165232][ T1102] vhci_hcd: disconnect device [ 626.905570][T12482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'. [ 627.036259][T12484] blktrace: Concurrent blktraces are not allowed on loop0 [ 627.788533][T12482] lo speed is unknown, defaulting to 1000 [ 628.637743][T12498] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1720'. [ 628.791817][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 628.805000][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 629.240069][T12512] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1721'. [ 629.289913][ T30] audit: type=1400 audit(1753744750.907:1254): avc: denied { lock } for pid=12505 comm="syz.1.1722" path="socket:[44861]" dev="sockfs" ino=44861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 629.560604][ T5942] vhci_hcd: vhci_device speed not set [ 630.184702][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 630.219927][T12532] fuse: Unknown parameter 'fdDmluδ-*' [ 630.241263][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 630.325695][T12535] Lens A: ================= START STATUS ================= [ 630.364554][T12535] Lens A: Focus, Absolute: 0 [ 630.403994][T12535] Lens A: ================== END STATUS ================== [ 630.423287][ T30] audit: type=1400 audit(1753744752.047:1255): avc: denied { accept } for pid=12524 comm="syz.3.1726" lport=33394 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 630.619677][ T54] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 630.713162][ T5939] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 630.811006][ T54] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 630.848032][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.909781][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 630.918346][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 630.933280][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.959013][ T5939] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 630.983780][ T5939] usb 5-1: config 1 interface 0 has no altsetting 0 [ 631.006408][ T54] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 631.017331][ T5939] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 631.026966][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.036640][ T5939] usb 5-1: Product: syz [ 631.054271][ T5939] usb 5-1: Manufacturer: syz [ 631.092372][ T5939] usb 5-1: SerialNumber: syz [ 631.106519][ T54] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 631.155929][ T54] usb 2-1: Manufacturer: syz [ 631.278977][ T54] usb 2-1: config 0 descriptor?? [ 632.119630][ T54] rc_core: IR keymap rc-hauppauge not found [ 632.194813][ T54] Registered IR keymap rc-empty [ 632.213202][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 632.247724][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 632.288802][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 632.656193][ T54] usb 2-1: USB disconnect, device number 36 [ 633.293671][ T54] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 633.314868][T12578] lo speed is unknown, defaulting to 1000 [ 633.361312][T12584] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1734'. [ 633.599490][ T5939] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input40 [ 633.709386][T12584] could not allocate digest TFM handle cryptd(blake2b-160) [ 633.733914][ T5187] bcm5974 5-1:1.0: could not read from device [ 633.734113][ T5939] usb 5-1: USB disconnect, device number 35 [ 633.752913][ T54] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 633.761731][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1735'. [ 633.795093][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.817813][ T5187] bcm5974 5-1:1.0: could not read from device [ 633.847697][ T54] usb 2-1: config 0 has no interface number 0 [ 633.862578][ T54] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6018, setting to 64 [ 633.891663][ T54] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.018210][ T54] usb 2-1: config 0 interface 52 has no altsetting 0 [ 634.319740][ T5939] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 634.511350][ T54] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 634.531217][ T54] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 634.549562][ T54] usb 2-1: Product: syz [ 634.553743][ T54] usb 2-1: Manufacturer: syz [ 634.558332][ T54] usb 2-1: SerialNumber: syz [ 634.569071][ T54] usb 2-1: config 0 descriptor?? [ 634.571314][ T5939] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.622335][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 634.648009][ T5939] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 634.688447][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.787939][ T54] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input41 [ 634.836598][ T5939] usb 5-1: config 0 descriptor?? [ 635.369260][ T5981] usb 2-1: USB disconnect, device number 37 [ 635.369366][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 635.439178][ T5939] microsoft 0003:045E:009D.000D: item fetching failed at offset 3/5 [ 635.451187][ T5939] microsoft 0003:045E:009D.000D: parse failed [ 635.466359][ T5939] microsoft 0003:045E:009D.000D: probe with driver microsoft failed with error -22 [ 635.678742][T12594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.679595][ T54] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 635.688609][T12594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.781516][T12636] overlayfs: missing 'lowerdir' [ 636.799119][T12638] FAULT_INJECTION: forcing a failure. [ 636.799119][T12638] name failslab, interval 1, probability 0, space 0, times 0 [ 636.815417][T12638] CPU: 0 UID: 0 PID: 12638 Comm: syz.3.1747 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 636.815441][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.815451][T12638] Call Trace: [ 636.815456][T12638] [ 636.815462][T12638] dump_stack_lvl+0x16c/0x1f0 [ 636.815494][T12638] should_fail_ex+0x512/0x640 [ 636.815520][T12638] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 636.815548][T12638] should_failslab+0xc2/0x120 [ 636.815565][T12638] __kmalloc_cache_noprof+0x6a/0x3e0 [ 636.815584][T12638] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.815610][T12638] ? alloc_fs_context+0x57/0x9c0 [ 636.815631][T12638] alloc_fs_context+0x57/0x9c0 [ 636.815645][ T5912] usb 5-1: USB disconnect, device number 36 [ 636.815651][T12638] __x64_sys_fsopen+0xeb/0x240 [ 636.815672][T12638] do_syscall_64+0xcd/0x4c0 [ 636.815687][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.815701][T12638] RIP: 0033:0x7f688198e9a9 [ 636.815713][T12638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.815727][T12638] RSP: 002b:00007f68827d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 636.815741][T12638] RAX: ffffffffffffffda RBX: 00007f6881bb5fa0 RCX: 00007f688198e9a9 [ 636.815751][T12638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 636.815759][T12638] RBP: 00007f68827d8090 R08: 0000000000000000 R09: 0000000000000000 [ 636.815767][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.815776][T12638] R13: 0000000000000001 R14: 00007f6881bb5fa0 R15: 00007ffdfb758ef8 [ 636.815795][T12638] [ 637.292083][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1748'. [ 637.319641][ T54] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 637.328062][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.357684][ T54] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 637.373033][ T54] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 637.401985][ T54] usb 1-1: Manufacturer: syz [ 637.453688][ T54] usb 1-1: config 0 descriptor?? [ 637.702908][ T54] rc_core: IR keymap rc-hauppauge not found [ 637.750191][ T54] Registered IR keymap rc-empty [ 637.756498][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 638.217481][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 638.247211][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 638.255361][ T54] usb 1-1: USB disconnect, device number 37 [ 639.075370][T12673] batman_adv: batadv0: Adding interface: ipvlan3 [ 639.081752][T12673] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.107033][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.117443][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.127431][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 639.137243][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.147030][T12673] batman_adv: batadv0: Interface activated: ipvlan3 [ 640.627563][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 641.279615][ T5939] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 641.348809][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 641.357878][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 641.396167][T12715] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.405188][T12715] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.414107][T12715] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.422888][T12715] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.438822][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 641.448089][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 641.805176][ T5939] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 641.815851][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.851493][ T5939] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 641.878445][ T5939] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 641.904110][ T5939] usb 2-1: Manufacturer: syz [ 641.916514][ T5939] usb 2-1: config 0 descriptor?? [ 642.599959][ T5939] rc_core: IR keymap rc-hauppauge not found [ 642.605893][ T5939] Registered IR keymap rc-empty [ 642.673586][ T5939] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 642.741506][ T5939] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43 [ 642.796478][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 642.806821][ T5939] usb 2-1: USB disconnect, device number 38 [ 643.918904][T12742] bridge0: port 3(team0) entered disabled state [ 644.041104][T12742] bridge_slave_0: left allmulticast mode [ 644.051229][T12742] bridge_slave_0: left promiscuous mode [ 644.056962][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.068882][T12742] bridge_slave_1: left allmulticast mode [ 644.508283][T12742] bridge_slave_1: left promiscuous mode [ 644.525999][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.566596][T12742] bond0: (slave bond_slave_0): Releasing backup interface [ 644.581337][T12742] bond0: (slave bond_slave_1): Releasing backup interface [ 644.584660][T12749] netlink: 'syz.1.1776': attribute type 10 has an invalid length. [ 644.608961][T12742] team_slave_0: left promiscuous mode [ 644.617804][T12742] team_slave_0: left allmulticast mode [ 644.648530][T12742] team0: Port device team_slave_0 removed [ 644.660975][T12742] team_slave_1: left promiscuous mode [ 644.664988][T12751] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1776'. [ 644.676491][T12742] team_slave_1: left allmulticast mode [ 644.801402][T12742] team0: Port device team_slave_1 removed [ 644.808034][T12742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.838036][T12742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.278329][T12742] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 645.288079][T12742] batman_adv: batadv0: Removing interface: ipvlan2 [ 645.296517][T12742] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 645.310540][T12742] batman_adv: batadv0: Removing interface: ipvlan3 [ 645.329000][T12746] team0: Mode changed to "loadbalance" [ 645.345106][T12747] FAULT_INJECTION: forcing a failure. [ 645.345106][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 645.357742][T12747] CPU: 1 UID: 0 PID: 12747 Comm: syz.0.1777 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 645.357757][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.357762][T12747] Call Trace: [ 645.357766][T12747] [ 645.357769][T12747] dump_stack_lvl+0x16c/0x1f0 [ 645.357790][T12747] should_fail_ex+0x512/0x640 [ 645.357809][T12747] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 645.357837][T12747] should_failslab+0xc2/0x120 [ 645.357852][T12747] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 645.357868][T12747] ? __alloc_skb+0x2b2/0x380 [ 645.357885][T12747] __alloc_skb+0x2b2/0x380 [ 645.357901][T12747] ? __pfx___alloc_skb+0x10/0x10 [ 645.357915][T12747] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 645.357934][T12747] netlink_ack+0x15d/0xb80 [ 645.357951][T12747] netlink_rcv_skb+0x332/0x420 [ 645.357962][T12747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.357975][T12747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.357985][T12747] ? rcu_is_watching+0x12/0xc0 [ 645.358007][T12747] netlink_unicast+0x58a/0x850 [ 645.358020][T12747] ? __pfx_netlink_unicast+0x10/0x10 [ 645.358035][T12747] netlink_sendmsg+0x8d1/0xdd0 [ 645.358049][T12747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.358062][T12747] ? security_socket_sendmsg+0x18/0x240 [ 645.358079][T12747] ____sys_sendmsg+0xa98/0xc70 [ 645.358092][T12747] ? copy_msghdr_from_user+0x10a/0x160 [ 645.358102][T12747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.358116][T12747] ? __pfx__kstrtoull+0x10/0x10 [ 645.358132][T12747] ___sys_sendmsg+0x134/0x1d0 [ 645.358147][T12747] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.358163][T12747] ? find_held_lock+0x2b/0x80 [ 645.358184][T12747] __sys_sendmmsg+0x200/0x420 [ 645.358195][T12747] ? __pfx___sys_sendmmsg+0x10/0x10 [ 645.358220][T12747] __x64_sys_sendmmsg+0x9c/0x100 [ 645.358229][T12747] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.358245][T12747] do_syscall_64+0xcd/0x4c0 [ 645.358255][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.358266][T12747] RIP: 0033:0x7f6ace78e9a9 [ 645.358275][T12747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.358285][T12747] RSP: 002b:00007f6acf5c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 645.358295][T12747] RAX: ffffffffffffffda RBX: 00007f6ace9b6160 RCX: 00007f6ace78e9a9 [ 645.358301][T12747] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b [ 645.358307][T12747] RBP: 00007f6acf5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 645.358313][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.358319][T12747] R13: 0000000000000000 R14: 00007f6ace9b6160 R15: 00007ffcab1524f8 [ 645.358331][T12747] [ 645.358412][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 645.628643][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 645.736705][T12749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.747840][T12749] bond0: entered promiscuous mode [ 645.756896][T12749] bond0: entered allmulticast mode [ 645.766778][T12749] team0: Port device bond0 added [ 645.932075][T12762] netlink: 'syz.3.1782': attribute type 10 has an invalid length. [ 646.582276][T12751] bond0: left promiscuous mode [ 646.587710][T12751] bond0: left allmulticast mode [ 646.629338][T12751] team0 (unregistering): Port device bond0 removed [ 646.713371][T12747] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.722092][T12747] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.730799][T12747] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.739614][T12747] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.749185][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 646.758051][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 646.817440][T12762] bond0: (slave bond_slave_0): Releasing backup interface [ 647.040168][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 647.940620][T12784] lo speed is unknown, defaulting to 1000 [ 648.271329][T12787] lo speed is unknown, defaulting to 1000 [ 648.313174][T12787] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.1788'. [ 648.447290][T12787] could not allocate digest TFM handle cryptd(blake2b-160) [ 648.644581][T12799] Invalid ELF section header size [ 648.849628][ T5904] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 649.792277][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.870640][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.906488][T12806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.906734][ T5904] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 649.924293][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.975490][ T5904] usb 3-1: config 0 descriptor?? [ 650.005708][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 650.697890][ T5904] hid-led 0003:1D34:0004.000E: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 650.727457][ T5904] hid-led 0003:1D34:0004.000E: Dream Cheeky Webmail Notifier initialized [ 651.844314][T12829] input: syz1 as /devices/virtual/input/input44 [ 651.917524][T12829] pim6reg1: entered promiscuous mode [ 651.930600][T12829] pim6reg1: entered allmulticast mode [ 651.956471][T12832] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1800'. [ 651.974908][ T5904] usb 3-1: USB disconnect, device number 29 [ 652.111839][T12831] lo speed is unknown, defaulting to 1000 [ 652.791414][T12832] could not allocate digest TFM handle cryptd(blake2b-160) [ 653.431438][T12859] FAULT_INJECTION: forcing a failure. [ 653.431438][T12859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.455115][ T30] audit: type=1400 audit(1753744774.907:1256): avc: denied { mount } for pid=12853 comm="syz.4.1805" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 653.455217][T12859] CPU: 1 UID: 0 PID: 12859 Comm: syz.3.1803 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 653.455236][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.455245][T12859] Call Trace: [ 653.455250][T12859] [ 653.455255][T12859] dump_stack_lvl+0x16c/0x1f0 [ 653.455284][T12859] should_fail_ex+0x512/0x640 [ 653.455310][T12859] _copy_from_user+0x2e/0xd0 [ 653.455326][T12859] kstrtouint_from_user+0xd6/0x1d0 [ 653.455346][T12859] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 653.455364][T12859] ? __lock_acquire+0xb8a/0x1c90 [ 653.455389][T12859] proc_fail_nth_write+0x83/0x250 [ 653.455410][T12859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 653.455437][T12859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 653.455456][T12859] vfs_write+0x2a0/0x1150 [ 653.455480][T12859] ? __pfx___mutex_lock+0x10/0x10 [ 653.455495][T12859] ? __pfx_vfs_write+0x10/0x10 [ 653.455522][T12859] ? __fget_files+0x20e/0x3c0 [ 653.455542][T12859] ksys_write+0x12a/0x250 [ 653.455562][T12859] ? __pfx_ksys_write+0x10/0x10 [ 653.455589][T12859] do_syscall_64+0xcd/0x4c0 [ 653.455605][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.455621][T12859] RIP: 0033:0x7f688198d45f [ 653.455633][T12859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 653.455646][T12859] RSP: 002b:00007f68827d8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 653.455660][T12859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f688198d45f [ 653.455670][T12859] RDX: 0000000000000001 RSI: 00007f68827d80a0 RDI: 0000000000000004 [ 653.455679][T12859] RBP: 00007f68827d8090 R08: 0000000000000000 R09: 0000000000000000 [ 653.455687][T12859] R10: 0000000040010142 R11: 0000000000000293 R12: 0000000000000001 [ 653.455696][T12859] R13: 0000000000000000 R14: 00007f6881bb5fa0 R15: 00007ffdfb758ef8 [ 653.455716][T12859] [ 654.364965][ T30] audit: type=1400 audit(1753744775.997:1257): avc: denied { unmount } for pid=8928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 654.528657][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1812'. [ 655.307111][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1812'. [ 655.400258][T12888] batman_adv: batadv0: Adding interface: ipvlan2 [ 655.406720][T12888] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.500408][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.546334][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.772407][T12888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 655.886541][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.896546][T12888] batman_adv: batadv0: Interface activated: ipvlan2 [ 655.959563][ T30] audit: type=1326 audit(1753744777.567:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.1.1814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad8698e9a9 code=0x0 [ 658.010660][T12917] binder: 12913:12917 ioctl c0306201 0 returned -14 [ 658.307367][T12922] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1820'. [ 659.603968][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 659.615188][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 659.969711][ T5981] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 660.709974][T12931] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 660.873208][ T5981] usb 1-1: Using ep0 maxpacket: 8 [ 660.882892][ T5981] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 660.900137][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.186382][ T5981] usb 1-1: Product: syz [ 661.197380][ T5981] usb 1-1: Manufacturer: syz [ 661.786264][ T5981] usb 1-1: SerialNumber: syz [ 661.796055][ T5981] usb 1-1: config 0 descriptor?? [ 661.805416][ T5981] usb 1-1: can't set config #0, error -71 [ 661.816784][ T5981] usb 1-1: USB disconnect, device number 38 [ 662.979626][ T5939] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 663.146572][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1831'. [ 663.199602][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 663.502458][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.523508][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.549129][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.582240][ T5939] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 663.652164][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.719151][ T5939] usb 3-1: config 0 descriptor?? [ 664.049712][ T974] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 664.083408][T12979] FAULT_INJECTION: forcing a failure. [ 664.083408][T12979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.099949][T12979] CPU: 1 UID: 0 PID: 12979 Comm: syz.3.1837 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 664.099973][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.099983][T12979] Call Trace: [ 664.099988][T12979] [ 664.099994][T12979] dump_stack_lvl+0x16c/0x1f0 [ 664.100023][T12979] should_fail_ex+0x512/0x640 [ 664.100044][T12979] _copy_to_user+0x32/0xd0 [ 664.100057][T12979] simple_read_from_buffer+0xcb/0x170 [ 664.100074][T12979] proc_fail_nth_read+0x197/0x270 [ 664.100092][T12979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.100116][T12979] ? rw_verify_area+0xcf/0x680 [ 664.100136][T12979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.100158][T12979] vfs_read+0x1e1/0xc60 [ 664.100179][T12979] ? __pfx___mutex_lock+0x10/0x10 [ 664.100190][T12979] ? __pfx_vfs_read+0x10/0x10 [ 664.100208][T12979] ? __fget_files+0x20e/0x3c0 [ 664.100221][T12979] ksys_read+0x12a/0x250 [ 664.100237][T12979] ? __pfx_ksys_read+0x10/0x10 [ 664.100266][T12979] do_syscall_64+0xcd/0x4c0 [ 664.100284][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.100300][T12979] RIP: 0033:0x7f688198d3bc [ 664.100313][T12979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 664.100324][T12979] RSP: 002b:00007f68827d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.100334][T12979] RAX: ffffffffffffffda RBX: 00007f6881bb5fa0 RCX: 00007f688198d3bc [ 664.100341][T12979] RDX: 000000000000000f RSI: 00007f68827d80a0 RDI: 0000000000000009 [ 664.100347][T12979] RBP: 00007f68827d8090 R08: 0000000000000000 R09: 0000000000000000 [ 664.100352][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.100358][T12979] R13: 0000000000000000 R14: 00007f6881bb5fa0 R15: 00007ffdfb758ef8 [ 664.100371][T12979] [ 664.288301][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.302239][ T5939] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.000F/input/input45 [ 664.345822][ T5939] uclogic 0003:28BD:0909.000F: input,hidraw0: USB HID vff.fe Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 664.387834][T12981] binder: 12980:12981 ioctl c0306201 0 returned -14 [ 664.401167][ T974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 664.412306][ T974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 664.433287][ T974] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 664.444351][ T974] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 664.466041][ T974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.477606][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.485649][ T974] usb 5-1: Product: syz [ 664.522308][ T974] usb 5-1: Manufacturer: syz [ 664.545282][ T974] usb 5-1: SerialNumber: syz [ 664.640050][T12976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 664.657987][ T54] usb 3-1: USB disconnect, device number 30 [ 664.689627][ T5939] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 664.859967][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 665.086421][T12976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 665.107037][ T5939] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 665.121542][T12976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 665.135345][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.144252][ T5939] usb 4-1: Product: syz [ 665.148594][ T5939] usb 4-1: Manufacturer: syz [ 665.153291][ T5939] usb 4-1: SerialNumber: syz [ 665.159863][ T5939] usb 4-1: config 0 descriptor?? [ 665.167390][ T5939] gspca_main: se401-2.14.0 probing 047d:5003 [ 665.607117][ T5939] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 665.630328][ T5939] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 665.655898][ T5939] usb 4-1: USB disconnect, device number 29 [ 665.871553][T12976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 666.010384][T12976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 666.200948][ T974] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 666.207399][ T974] cdc_ncm 5-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 666.229231][ T974] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 666.298436][T13013] Invalid source name [ 666.759118][ T974] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 666.783866][ T974] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 666.802646][ T974] usb 5-1: USB disconnect, device number 37 [ 666.809901][ T974] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 666.835498][T13022] afs: Unknown parameter 'GPL' [ 667.854777][T13035] FAULT_INJECTION: forcing a failure. [ 667.854777][T13035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.904465][T13035] CPU: 0 UID: 0 PID: 13035 Comm: syz.4.1857 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 667.904488][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.904501][T13035] Call Trace: [ 667.904508][T13035] [ 667.904514][T13035] dump_stack_lvl+0x16c/0x1f0 [ 667.904546][T13035] should_fail_ex+0x512/0x640 [ 667.904576][T13035] _copy_from_user+0x2e/0xd0 [ 667.904593][T13035] copy_mount_options+0x76/0x190 [ 667.904616][T13035] __x64_sys_mount+0x1ac/0x310 [ 667.904635][T13035] ? __pfx___x64_sys_mount+0x10/0x10 [ 667.904660][T13035] do_syscall_64+0xcd/0x4c0 [ 667.904677][T13035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.904694][T13035] RIP: 0033:0x7f68fcd8e9a9 [ 667.904708][T13035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.904724][T13035] RSP: 002b:00007f68fdbbc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 667.904740][T13035] RAX: ffffffffffffffda RBX: 00007f68fcfb5fa0 RCX: 00007f68fcd8e9a9 [ 667.904751][T13035] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 667.904761][T13035] RBP: 00007f68fdbbc090 R08: 0000200000000100 R09: 0000000000000000 [ 667.904771][T13035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.904780][T13035] R13: 0000000000000000 R14: 00007f68fcfb5fa0 R15: 00007ffc02266108 [ 667.904803][T13035] [ 667.906527][T13035] tmpfs: Bad value for 'mpol' [ 668.279941][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 668.669590][ T974] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 668.866640][ T974] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 669.707136][ T974] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 669.722103][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 669.757698][ T974] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 669.763330][ T5904] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 669.766862][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.784983][ T974] usb 2-1: Product: syz [ 669.789196][ T974] usb 2-1: Manufacturer: syz [ 669.797682][ T974] usb 2-1: SerialNumber: syz [ 669.845831][ T974] rndis_host 2-1:7.0: skipping garbage [ 669.862560][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 669.870213][ T5904] usb 4-1: can't read configurations, error -61 [ 669.906214][ T974] usb 2-1: bad CDC descriptors [ 669.918717][ T974] option 2-1:7.0: GSM modem (1-port) converter detected [ 670.042091][ T5904] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 670.072330][T13043] comedi comedi4: comedi_config --init_data is deprecated [ 670.081586][ T974] usb 2-1: USB disconnect, device number 39 [ 670.088046][ T974] option 2-1:7.0: device disconnected [ 670.209902][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 670.215663][ T5904] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 670.245442][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 670.253411][ T54] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 670.275267][ T5904] usb 4-1: can't read configurations, error -61 [ 670.293260][ T5904] usb usb4-port1: attempt power cycle [ 670.527527][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 670.540452][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'. [ 671.178364][ T54] usb 5-1: device descriptor read/64, error -71 [ 671.304676][T13078] input: syz0 as /devices/virtual/input/input46 [ 671.406187][T13082] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 671.440229][ T54] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 671.641203][ T54] usb 5-1: device descriptor read/64, error -71 [ 671.700264][ T5981] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 671.797415][ T54] usb usb5-port1: attempt power cycle [ 671.927468][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 673.197123][ T54] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 673.848739][ T5981] usb 3-1: config 250 has an invalid interface number: 81 but max is 0 [ 674.049638][ T54] usb 5-1: device not accepting address 40, error -71 [ 674.232406][ T5981] usb 3-1: config 250 has an invalid descriptor of length 30, skipping remainder of the config [ 674.243167][ T5981] usb 3-1: config 250 has no interface number 0 [ 674.249439][ T5981] usb 3-1: config 250 interface 81 has no altsetting 0 [ 674.260635][ T5981] usb 3-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=d5.6e [ 674.309865][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.372291][ T30] audit: type=1400 audit(1753744795.977:1259): avc: denied { connect } for pid=13104 comm="syz.4.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 674.393693][ T5981] usb 3-1: Product: syz [ 674.398215][ T5981] usb 3-1: Manufacturer: syz [ 674.403682][ T5981] usb 3-1: SerialNumber: syz [ 674.664517][ T5981] usb 3-1: can't set config #250, error -71 [ 674.693784][ T5981] usb 3-1: USB disconnect, device number 31 [ 675.376995][ T30] audit: type=1400 audit(1753744796.987:1260): avc: denied { block_suspend } for pid=13112 comm="syz.2.1879" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 676.248143][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 676.260245][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 677.771253][T13135] FAULT_INJECTION: forcing a failure. [ 677.771253][T13135] name failslab, interval 1, probability 0, space 0, times 0 [ 677.784015][T13135] CPU: 0 UID: 0 PID: 13135 Comm: syz.2.1883 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 677.784037][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.784046][T13135] Call Trace: [ 677.784050][T13135] [ 677.784054][T13135] dump_stack_lvl+0x16c/0x1f0 [ 677.784076][T13135] should_fail_ex+0x512/0x640 [ 677.784092][T13135] ? fs_reclaim_acquire+0xae/0x150 [ 677.784107][T13135] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.784117][T13135] should_failslab+0xc2/0x120 [ 677.784128][T13135] __kmalloc_noprof+0xd2/0x510 [ 677.784146][T13135] tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.784158][T13135] ? tomoyo_profile+0x47/0x60 [ 677.784171][T13135] tomoyo_path_number_perm+0x245/0x580 [ 677.784185][T13135] ? tomoyo_path_number_perm+0x237/0x580 [ 677.784201][T13135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 677.784217][T13135] ? find_held_lock+0x2b/0x80 [ 677.784242][T13135] ? find_held_lock+0x2b/0x80 [ 677.784254][T13135] ? hook_file_ioctl_common+0x145/0x410 [ 677.784270][T13135] ? __fget_files+0x20e/0x3c0 [ 677.784281][T13135] security_file_ioctl+0x9b/0x240 [ 677.784292][T13135] __x64_sys_ioctl+0xb7/0x210 [ 677.784308][T13135] do_syscall_64+0xcd/0x4c0 [ 677.784319][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.784330][T13135] RIP: 0033:0x7f3b1338e9a9 [ 677.784339][T13135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.784349][T13135] RSP: 002b:00007f3b14159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.784359][T13135] RAX: ffffffffffffffda RBX: 00007f3b135b6160 RCX: 00007f3b1338e9a9 [ 677.784365][T13135] RDX: 00000000000000b9 RSI: 000000000000ae03 RDI: 0000000000000004 [ 677.784371][T13135] RBP: 00007f3b14159090 R08: 0000000000000000 R09: 0000000000000000 [ 677.784377][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.784383][T13135] R13: 0000000000000000 R14: 00007f3b135b6160 R15: 00007ffc44569728 [ 677.784396][T13135] [ 677.784413][T13135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 679.632558][ T30] audit: type=1400 audit(1753744801.267:1261): avc: denied { ioctl } for pid=13158 comm="syz.3.1891" path="socket:[48333]" dev="sockfs" ino=48333 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 679.848548][T13165] batman_adv: batadv0: Adding interface: ipvlan4 [ 679.855068][T13165] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.883102][T13165] batman_adv: batadv0: Interface activated: ipvlan4 [ 680.833270][ T30] audit: type=1400 audit(1753744802.467:1262): avc: denied { shutdown } for pid=13176 comm="syz.1.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.044454][T13189] syz_tun: entered allmulticast mode [ 681.048874][ T30] audit: type=1400 audit(1753744802.657:1263): avc: denied { mount } for pid=13184 comm="syz.3.1900" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 681.077182][T13187] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1900'. [ 681.210241][T13189] block nbd0: NBD_DISCONNECT [ 681.214865][T13189] block nbd0: Send disconnect failed -22 [ 681.220975][T13188] block nbd0: Disconnected due to user request. [ 681.227204][T13188] block nbd0: shutting down sockets [ 681.319681][ T54] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 681.650028][T13188] syz_tun: left allmulticast mode [ 681.756736][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.061093][ T54] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 682.091384][ T54] usb 3-1: config 1 has no interface number 0 [ 682.097520][ T54] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.177626][ T54] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.189540][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.215418][ T54] usb 3-1: Product: syz [ 682.224251][ T54] usb 3-1: Manufacturer: syz [ 682.228919][ T54] usb 3-1: SerialNumber: syz [ 682.267176][ T54] usb 3-1: selecting invalid altsetting 1 [ 682.856445][ T54] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 682.880351][ T54] cdc_ncm 3-1:1.1: bind() failure [ 682.902950][ T54] usb 3-1: USB disconnect, device number 32 [ 683.222350][T13222] batman_adv: batadv0: Adding interface: ipvlan3 [ 683.228726][T13222] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.254073][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.264472][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.274257][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 683.284074][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.293853][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 683.303634][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.313424][T13222] batman_adv: batadv0: Interface activated: ipvlan3 [ 685.139947][ T54] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 685.253152][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.259479][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.329802][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 685.340460][ T54] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 685.360967][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.384803][ T30] audit: type=1400 audit(1753744807.007:1264): avc: denied { read } for pid=13247 comm="syz.1.1916" path="socket:[49270]" dev="sockfs" ino=49270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 685.411707][ T54] usb 4-1: Product: syz [ 685.417131][ T54] usb 4-1: Manufacturer: syz [ 685.671670][ T54] usb 4-1: SerialNumber: syz [ 685.707976][ T54] usb 4-1: config 0 descriptor?? [ 685.715559][ T54] gspca_main: se401-2.14.0 probing 047d:5003 [ 686.899640][ T54] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 686.907726][ T54] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 686.926724][ T54] usb 4-1: USB disconnect, device number 33 [ 687.665557][T13268] overlay: Unknown parameter '/' [ 688.499036][T13276] NILFS (nullb0): couldn't find nilfs on the device [ 688.572548][T13276] cgroup: Unknown subsys name 'cpuset' [ 689.429896][ T5981] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 689.529398][ T974] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 690.011318][ T5981] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 690.020084][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.077278][ T5981] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 690.089662][ T5981] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 690.098100][ T5981] usb 4-1: Manufacturer: syz [ 690.105507][ T5981] usb 4-1: config 0 descriptor?? [ 690.114862][ T974] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 690.133553][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.143814][ T974] usb 1-1: Product: syz [ 690.148345][ T974] usb 1-1: Manufacturer: syz [ 690.154122][ T974] usb 1-1: SerialNumber: syz [ 690.160224][ T974] usb 1-1: config 0 descriptor?? [ 690.167518][ T974] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 039 [ 690.209987][ T5981] rc_core: IR keymap rc-hauppauge not found [ 690.217226][ T5981] Registered IR keymap rc-empty [ 690.223702][ T5981] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 690.235932][ T5981] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 690.323197][ T5981] usb 4-1: USB disconnect, device number 34 [ 692.384233][ T974] i2c i2c-1: failure reading functionality [ 692.415232][ T974] i2c i2c-1: connected i2c-tiny-usb device [ 692.426163][ T974] usb 1-1: USB disconnect, device number 39 [ 692.452141][T13316] veth0: entered promiscuous mode [ 692.539824][ T5981] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 693.067631][T13325] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1939'. [ 693.076748][T13325] netlink: zone id is out of range [ 693.081946][T13325] netlink: zone id is out of range [ 693.087051][T13325] netlink: zone id is out of range [ 693.092222][T13325] netlink: zone id is out of range [ 693.097323][T13325] netlink: zone id is out of range [ 693.102485][T13325] netlink: zone id is out of range [ 693.107593][T13325] netlink: zone id is out of range [ 693.112811][T13325] netlink: zone id is out of range [ 693.118438][T13325] netlink: zone id is out of range [ 693.123656][T13325] netlink: zone id is out of range [ 693.149873][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 693.216828][ T5981] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 693.228563][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.236702][ T5981] usb 4-1: Product: syz [ 693.243673][ T5981] usb 4-1: Manufacturer: syz [ 693.257895][ T5981] usb 4-1: SerialNumber: syz [ 693.276269][ T5981] usb 4-1: config 0 descriptor?? [ 693.317402][T13315] veth0: left promiscuous mode [ 693.450227][ T5904] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 693.959726][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.963164][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.978928][ T30] audit: type=1326 audit(1753745071.594:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.014427][ T5904] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 694.024968][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.042128][ T30] audit: type=1326 audit(1753745071.594:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.067929][ T5904] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 694.088517][ T30] audit: type=1326 audit(1753745071.594:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.111976][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.135331][ T30] audit: type=1326 audit(1753745071.594:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f688198d310 code=0x7ffc0000 [ 694.158795][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.161050][T13334] dlm: non-version read from control device 4096 [ 694.165714][ T30] audit: type=1326 audit(1753745071.594:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688198e5ab code=0x7ffc0000 [ 694.184836][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.194749][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.233164][ T5904] usb 3-1: config 0 descriptor?? [ 694.245346][ T30] audit: type=1326 audit(1753745071.594:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688198e5ab code=0x7ffc0000 [ 694.272319][ T5981] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 694.286843][ T5981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 694.307252][ T30] audit: type=1326 audit(1753745071.674:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.309117][ T5981] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 694.331634][ T30] audit: type=1326 audit(1753745071.694:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.331678][ T30] audit: type=1326 audit(1753745071.694:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.386997][ T30] audit: type=1326 audit(1753745071.694:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688198e9a9 code=0x7ffc0000 [ 694.410627][ T5981] usb 4-1: media controller created [ 694.426305][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.489602][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 694.631520][ T5904] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 694.669083][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 694.677702][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.691048][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 694.701931][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 694.710061][ T10] usb 1-1: Manufacturer: syz [ 694.975887][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.328958][ T5981] zl10353_read_register: readreg error (reg=127, ret==0) [ 695.337502][ T5981] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 695.345540][ T5981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 695.353804][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.354584][T13326] ------------[ cut here ]------------ [ 695.368947][T13326] usb 4-1: BOGUS control dir, pipe 80002380 doesn't match bRequestType c0 [ 695.380428][ T5904] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 695.380985][ T10] usb 1-1: config 0 descriptor?? [ 695.389848][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 695.409127][ T5904] usb 5-1: SerialNumber: syz [ 695.420924][T13326] WARNING: CPU: 1 PID: 13326 at drivers/usb/core/urb.c:411 usb_submit_urb+0x13c3/0x1790 [ 695.430734][T13326] Modules linked in: [ 695.436055][T13326] CPU: 1 UID: 0 PID: 13326 Comm: syz.2.1940 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 695.446063][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.456262][T13326] RIP: 0010:usb_submit_urb+0x13c3/0x1790 [ 695.461940][T13326] Code: e8 b2 88 87 fa 4c 89 ef e8 8a 9e d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 e0 19 73 8c e8 0e 90 46 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 7f 88 87 fa 0f b6 2d a8 40 5d 09 31 [ 695.481906][T13326] RSP: 0018:ffffc90004a3f9b0 EFLAGS: 00010286 [ 695.487986][T13326] RAX: 0000000000000000 RBX: ffff88814ca58c00 RCX: ffffc9000bde9000 [ 695.496029][T13326] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 695.503994][T13326] RBP: ffff888079316058 R08: 0000000000000001 R09: 0000000000000000 [ 695.511994][T13326] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8881432fd800 [ 695.519960][T13326] R13: ffff8880793160b0 R14: 0000000000000001 R15: 0000000080002380 [ 695.527914][T13326] FS: 00007f3b1419b6c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 695.536847][T13326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.543422][T13326] CR2: 0000001b306d9000 CR3: 0000000032941000 CR4: 00000000003526f0 [ 695.551387][T13326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 695.559332][T13326] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 695.567293][T13326] Call Trace: [ 695.570591][T13326] [ 695.573510][T13326] ? __init_swait_queue_head+0xca/0x150 [ 695.579043][T13326] usb_start_wait_urb+0x104/0x4b0 [ 695.584113][T13326] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 695.589715][T13326] ? __asan_memset+0x23/0x50 [ 695.594316][T13326] usb_control_msg+0x326/0x4a0 [ 695.599062][T13326] ? __pfx_usb_control_msg+0x10/0x10 [ 695.604361][T13326] ? __asan_memset+0x23/0x50 [ 695.608958][T13326] dtv5100_i2c_msg+0x1d8/0x320 [ 695.613726][T13326] dtv5100_i2c_xfer+0x1e0/0x420 [ 695.619080][T13326] ? mark_held_locks+0x49/0x80 [ 695.623844][T13326] __i2c_transfer+0x6b6/0x2190 [ 695.628586][T13326] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0x1c87/0x1cc0 [ 695.636090][T13326] ? __pfx___i2c_transfer+0x10/0x10 [ 695.641297][T13326] i2c_transfer+0x1da/0x380 [ 695.645779][T13326] i2cdev_ioctl_rdwr+0x373/0x710 [ 695.650948][T13326] i2cdev_ioctl+0x5ff/0x820 [ 695.655458][T13326] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 695.660508][T13326] ? selinux_file_ioctl+0x180/0x270 [ 695.665709][T13326] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 695.670733][T13326] __x64_sys_ioctl+0x18e/0x210 [ 695.675480][T13326] do_syscall_64+0xcd/0x4c0 [ 695.679993][T13326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.685866][T13326] RIP: 0033:0x7f3b1338e9a9 [ 695.690300][T13326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.709944][T13326] RSP: 002b:00007f3b1419b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.718336][T13326] RAX: ffffffffffffffda RBX: 00007f3b135b5fa0 RCX: 00007f3b1338e9a9 [ 695.726309][T13326] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 695.734608][T13326] RBP: 00007f3b13410d69 R08: 0000000000000000 R09: 0000000000000000 [ 695.742589][T13326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.750566][T13326] R13: 0000000000000000 R14: 00007f3b135b5fa0 R15: 00007ffc44569728 [ 695.758524][T13326] [ 695.761539][T13326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 695.768796][T13326] CPU: 1 UID: 0 PID: 13326 Comm: syz.2.1940 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 695.778746][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.788788][T13326] Call Trace: [ 695.792045][T13326] [ 695.794955][T13326] dump_stack_lvl+0x3d/0x1f0 [ 695.799534][T13326] panic+0x71c/0x800 [ 695.803435][T13326] ? __pfx_panic+0x10/0x10 [ 695.807834][T13326] ? show_trace_log_lvl+0x29b/0x3e0 [ 695.813017][T13326] ? usb_submit_urb+0x13c3/0x1790 [ 695.818017][T13326] check_panic_on_warn+0xab/0xb0 [ 695.822948][T13326] __warn+0xf6/0x3c0 [ 695.826826][T13326] ? preempt_schedule_notrace+0x62/0xe0 [ 695.832355][T13326] ? usb_submit_urb+0x13c3/0x1790 [ 695.837372][T13326] report_bug+0x3c3/0x580 [ 695.841692][T13326] ? usb_submit_urb+0x13c3/0x1790 [ 695.846707][T13326] handle_bug+0x184/0x210 [ 695.851015][T13326] exc_invalid_op+0x17/0x50 [ 695.855502][T13326] asm_exc_invalid_op+0x1a/0x20 [ 695.860339][T13326] RIP: 0010:usb_submit_urb+0x13c3/0x1790 [ 695.865963][T13326] Code: e8 b2 88 87 fa 4c 89 ef e8 8a 9e d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 e0 19 73 8c e8 0e 90 46 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 7f 88 87 fa 0f b6 2d a8 40 5d 09 31 [ 695.885564][T13326] RSP: 0018:ffffc90004a3f9b0 EFLAGS: 00010286 [ 695.891612][T13326] RAX: 0000000000000000 RBX: ffff88814ca58c00 RCX: ffffc9000bde9000 [ 695.899569][T13326] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 695.907528][T13326] RBP: ffff888079316058 R08: 0000000000000001 R09: 0000000000000000 [ 695.915478][T13326] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8881432fd800 [ 695.923426][T13326] R13: ffff8880793160b0 R14: 0000000000000001 R15: 0000000080002380 [ 695.931378][T13326] ? __warn_printk+0x1a5/0x350 [ 695.936133][T13326] ? __init_swait_queue_head+0xca/0x150 [ 695.941659][T13326] usb_start_wait_urb+0x104/0x4b0 [ 695.946662][T13326] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 695.952189][T13326] ? __asan_memset+0x23/0x50 [ 695.956759][T13326] usb_control_msg+0x326/0x4a0 [ 695.961501][T13326] ? __pfx_usb_control_msg+0x10/0x10 [ 695.966765][T13326] ? __asan_memset+0x23/0x50 [ 695.971352][T13326] dtv5100_i2c_msg+0x1d8/0x320 [ 695.976111][T13326] dtv5100_i2c_xfer+0x1e0/0x420 [ 695.980944][T13326] ? mark_held_locks+0x49/0x80 [ 695.985690][T13326] __i2c_transfer+0x6b6/0x2190 [ 695.990428][T13326] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0x1c87/0x1cc0 [ 695.997864][T13326] ? __pfx___i2c_transfer+0x10/0x10 [ 696.003039][T13326] i2c_transfer+0x1da/0x380 [ 696.007518][T13326] i2cdev_ioctl_rdwr+0x373/0x710 [ 696.012433][T13326] i2cdev_ioctl+0x5ff/0x820 [ 696.016916][T13326] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 696.021939][T13326] ? selinux_file_ioctl+0x180/0x270 [ 696.027132][T13326] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 696.032131][T13326] __x64_sys_ioctl+0x18e/0x210 [ 696.036875][T13326] do_syscall_64+0xcd/0x4c0 [ 696.041356][T13326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.047241][T13326] RIP: 0033:0x7f3b1338e9a9 [ 696.051631][T13326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.071224][T13326] RSP: 002b:00007f3b1419b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.079611][T13326] RAX: ffffffffffffffda RBX: 00007f3b135b5fa0 RCX: 00007f3b1338e9a9 [ 696.087560][T13326] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 696.095506][T13326] RBP: 00007f3b13410d69 R08: 0000000000000000 R09: 0000000000000000 [ 696.103464][T13326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.111480][T13326] R13: 0000000000000000 R14: 00007f3b135b5fa0 R15: 00007ffc44569728 [ 696.120017][T13326] [ 696.123201][T13326] Kernel Offset: disabled [ 696.127514][T13326] Rebooting in 86400 seconds..