last executing test programs: 2m32.70862271s ago: executing program 4 (id=2091): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x800}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x37, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd7000000000"], 0x328}}, 0x84) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030000fbdbdf25880000000000000000"], 0x10}}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f00000002c0)=0x39) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x14, r8, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x184, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a6dcad9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82d0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x859}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe490}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000080)=""/48, 0x30}, 0x1}], 0x1, 0x40012002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001000280012800a000100767863616ef10de4ecdd32ccf5000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="90480000004b030008000300", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x40) 2m29.587262744s ago: executing program 4 (id=2097): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x70b7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='f2fs_truncate_data_blocks_range\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0x8) 2m28.251575846s ago: executing program 4 (id=2103): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpgid(0xffffffffffffffff) ptrace$poke(0x4, r0, &(0x7f0000000040), 0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x7, 0xc, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8002001, 0x3d7}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x6, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800c00}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xac, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1914bdfedea2"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x0, 0x3, 0x0, {0xffffffff, 0x0, 0x0, 0x3a5, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x7}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x1, 0x0, {0x2, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, 0x300, 0x10000, 0x5}}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, {0x1c, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x49}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xffffffff}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x405c040}, 0x4004000) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) 2m27.223478809s ago: executing program 4 (id=2105): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) mount(&(0x7f0000000380)=@sg0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='minix\x00', 0x2000, &(0x7f0000000440)='&/#%&-\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) 2m26.248533841s ago: executing program 4 (id=2106): write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) io_uring_setup(0x20006dde, &(0x7f00000002c0)={0x0, 0x682, 0x10, 0x1, 0x28b}) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x39) socket$key(0xf, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x3e8, 0x0) 2m25.322175833s ago: executing program 4 (id=2108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r2 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0xffffffff, 0x10000, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)=0x81) flock(0xffffffffffffffff, 0x1) 2m10.250295076s ago: executing program 32 (id=2108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r2 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0xffffffff, 0x10000, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)=0x81) flock(0xffffffffffffffff, 0x1) 14.169003677s ago: executing program 1 (id=2506): socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x8, 0x100}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280"], 0x110}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x3c}, 0x1, 0x1200}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x6, 0x1, 0x2, 0x340}}) 11.450624268s ago: executing program 1 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000000000000007000000d702441c1003ac1e000100000000ac1e000100000000ffffffff0000000000fd"], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x78, 0x10, 0x800, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x5}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x1}]}, 0x78}}, 0x4004850) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'veth0_to_team\x00', {0x2}, 0x6}) 11.135554295s ago: executing program 2 (id=2515): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x80105013, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0xf11f28412f48df91, 0x0, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xf4, 0x14, 0x8}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f00000005c0)=""/190, 0xbe}], 0x5, &(0x7f0000000700)=""/158, 0x9e}, 0x2}, {{&(0x7f00000007c0)=@caif, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/247, 0xf7}, {&(0x7f0000001a40)=""/202, 0xca}, {&(0x7f0000001b40)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/86, 0x56}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x9}, 0xfff}, {{&(0x7f0000002e00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002e80)=""/91, 0x5b}, {&(0x7f0000002f00)=""/215, 0xd7}, {&(0x7f0000003000)=""/168, 0xa8}, {&(0x7f00000030c0)=""/17, 0x11}], 0x4, &(0x7f0000003140)=""/71, 0x47}, 0xe8b}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000031c0)=""/243, 0xf3}, {&(0x7f00000032c0)=""/81, 0x51}, {&(0x7f0000003340)=""/229, 0xe5}, {&(0x7f0000003440)=""/141, 0x8d}, {&(0x7f0000003500)}, {&(0x7f0000003540)=""/41, 0x29}, {&(0x7f0000003580)=""/77, 0x4d}], 0x7}, 0x9880}, {{&(0x7f0000003680)=@caif=@rfm, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003700)=""/133, 0x85}, {&(0x7f00000037c0)=""/84, 0x54}, {&(0x7f0000003840)=""/39, 0x27}, {&(0x7f0000003880)=""/209, 0xd1}, {&(0x7f0000003980)=""/229, 0xe5}], 0x5, &(0x7f0000003b00)=""/171, 0xab}, 0x26}, {{&(0x7f0000003bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003c40)=""/244, 0xf4}, {&(0x7f0000003d40)=""/186, 0xba}, {&(0x7f0000003e00)=""/164, 0xa4}, {&(0x7f0000003f40)=""/64, 0x40}, {&(0x7f0000003f80)=""/5, 0x5}, {0x0}, {&(0x7f0000004fc0)=""/135, 0x87}], 0x7, &(0x7f0000005100)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000006100)=@caif, 0x80, &(0x7f0000006780)=[{&(0x7f0000006180)=""/240, 0xf0}, {&(0x7f0000006280)=""/252, 0xfc}, {&(0x7f0000006380)=""/184, 0xb8}, {&(0x7f0000006440)=""/249, 0xf9}, {0x0}, {&(0x7f0000006640)=""/14, 0xe}, {&(0x7f0000006680)}, {&(0x7f00000066c0)=""/171, 0xab}], 0x8, &(0x7f0000006800)=""/221, 0xdd}, 0xe3}, {{&(0x7f0000006900)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006a40)=[{0x0}], 0x1, &(0x7f0000006a80)=""/255, 0xff}, 0x8}], 0x8, 0x1, &(0x7f0000006d80)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a000008440001800c000280f3ff0100000000000600034007ff00002c0001"], 0x58}, 0x1, 0x0, 0x0, 0x14840}, 0x4094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff88}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000100)={0x9, 0x2, {0x1, 0x1, 0x3ff, 0x1, 0x6}, 0x7}) 11.134762819s ago: executing program 1 (id=2516): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x21, "4372071e845c1497c855383000000002000000372a72ee4d37968b000000005596"}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000340)={0x0, 0xfffffffffffffff6, &(0x7f00000005c0)=[{&(0x7f00000007c0)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c0300bfa10900002f8150d77a1971dbc025c6ffc23700bbd4be72b6e032f168332db8911d7db38cb56a1f98f0132e05faa0d97e6ddb3e6bb2ae04e2", 0x38}, {&(0x7f0000000700)="f84b173bc09ea6b4756f7cf2d9e712ba6e615c58481f05ad87391c7e746bff1865461053945e5b0e937f1fb03ac3025d953e1c756bd22d6458af95e28438654196fc93f7c851a7912ed6a567266cfd5085419994969e95d1dcceb4e832ae71e94aaec196da7c987183333b2246ebab7e6231cd7b7580596bf0d870e97d63f963609d032055474a09c9f003f1fa88a2878851d80a80649b12ea446491185b00cd5e2bf39e776f"}], 0x1}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r5) sched_setscheduler(0x0, 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f00000001c0)=""/239) 9.937532676s ago: executing program 1 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "92a55301a7a10500000052f50000929e9eca24674d9d3d4ef28dafe5360429b6"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_io_uring_setup(0x7e59, &(0x7f00000000c0)={0x0, 0x7079, 0x2, 0x15, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0xa, "1c51aa7b"}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf253500000008000300", @ANYRES32=r2, @ANYBLOB="140055009b58920e73eaf53c870a0e2423e54efd0a0034000101010101010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 9.922973899s ago: executing program 2 (id=2521): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x21, "4372071e845c1497c855383000000002000000372a72ee4d37968b000000005596"}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xca, &(0x7f00000003c0)=""/202, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000340)={0x0, 0xfffffffffffffff6, &(0x7f00000005c0)=[{&(0x7f00000007c0)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c0300bfa10900002f8150d77a1971dbc025c6ffc23700bbd4be72b6e032f168332db8911d7db38cb56a1f98f0132e05faa0d97e6ddb3e6bb2ae04e2", 0x38}, {&(0x7f0000000700)="f84b173bc09ea6b4756f7cf2d9e712ba6e615c58481f05ad87391c7e746bff1865461053945e5b0e937f1fb03ac3025d953e1c756bd22d6458af95e28438654196fc93f7c851a7912ed6a567266cfd5085419994969e95d1dcceb4e832ae71e94aaec196da7c987183333b2246ebab7e6231cd7b7580596bf0d870e97d63f963609d032055474a09c9f003f1fa88a2878851d80a80649b12ea446491185b00cd5e2bf39e776f"}], 0x1}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f00000001c0)=""/239) 8.17761796s ago: executing program 2 (id=2525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000ff80850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\a\x00'}, {0x20, '/)&'}, {}, {0x20, 'gre0\x00'}, {0x20, '*\xb1'}, {0x20, ']*@'}], 0xa, "441e565eda2fd3a99cd62977eac6cdbb87505aac"}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x2800, 0x28, &(0x7f0000000180)="6a76c1b175920a71f6191f9737343e385b6d1ff480e12dd63c7ed3fa0f835bcc00bab83ec0ba50c3"}, {0xfff3, 0x24f972aeb8675bb2, 0x0, 0x0}], 0x2}) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000080)={0xfffffffe, 0x1, 0x695b}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f0000000180)) 6.537655493s ago: executing program 2 (id=2530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x82) r1 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x703, 0x9) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') getdents(r4, 0x0, 0x51) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000880)=[@cpuid={0x2, 0x18, {0x10000, 0x6}}, @code={0x1, 0x58, {"c4a2c5919ce6005000002e430f01cf0f20d835080000000f22d8c4627d210f0f01c966ba4300ecc744240022010000c7442402987b4320ff2c24660f10cdc442f537f90f381d36"}}, @cpuid={0x2, 0x18, {0xffffffff, 0x9}}, @code={0x1, 0x59, {"b10fe5c719c719d066ba2000f1f379917a7aef66baf80cb8ec413084ef66bafc0ce0eeb9670200000f3266ba410066ed43d9ec26440f07470fc730440f20c0350f000000440f22c0"}}, @cpuid={0x2, 0x18, {0x3}}], 0xf9}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000001c0)="0f20c06635000000400f22c066b97a0b000066b846f5000066ba000000000f303e360fba39e50f0132baf80c66b8e8adb58866efbafc0cec670f1c8bbb0000000f78f466b99d0a000066b88a00000066ba000000000f30f30f005821670f01d9", 0x60}], 0x1, 0x44, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f0000000500), &(0x7f00000002c0)=r7}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000580)={{0x2000, 0xeeee0000, 0x3, 0x9, 0xc4, 0x9, 0xf1, 0x8, 0xa, 0x33, 0x8, 0x5}, {0x80a0000, 0x100000, 0xe, 0x0, 0x0, 0x1, 0x57, 0x3, 0x8, 0x2, 0xb, 0x2}, {0x8080000, 0x100000, 0x9, 0xfa, 0x0, 0x5, 0x5, 0x0, 0x6, 0x3, 0x1, 0x1e}, {0x100000, 0x2000, 0xd, 0x4, 0x0, 0x2, 0x3, 0x5, 0x8, 0x6, 0x8, 0x9d}, {0x1000, 0xffff1000, 0x9, 0x4, 0xc0, 0x4, 0x1, 0xff, 0xe6, 0x5a, 0x6, 0x99}, {0x1000, 0x1000, 0xb, 0xff, 0x9, 0xe0, 0xff, 0x8, 0x7, 0x68, 0x0, 0x8}, {0x1000, 0x1, 0xa, 0x23, 0x3, 0x2, 0x20, 0x0, 0x5, 0x40, 0x5, 0x2}, {0x10000, 0x3000, 0xa, 0x2, 0x1, 0x0, 0x94, 0xf9, 0x8, 0x6f, 0x4, 0xf9}, {0x0, 0x6000}, {0x3000, 0x9}, 0x20000000, 0x0, 0x2, 0x684, 0xd, 0x800, 0x6000, [0x9, 0x88f, 0x400, 0x401]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) syz_usb_connect$cdc_ecm(0x0, 0x88, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "c1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x81, 0x200, 0x7}, [@obex={0x5, 0x24, 0x15, 0x1}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x83}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x7, 0x40, 0x80}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xda, 0xff, 0xc}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x80, 0x9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3bf, 0x3, 0x0, 0x50}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x6, 0xa, 0x7, 0xff, 0x2}, 0x153, &(0x7f0000000980)={0x5, 0xf, 0x153, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "9aa3408413ba1834773783a85103547f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x5, 0x7f, 0xb3b, 0xa9}, @generic={0x41, 0x10, 0x3, "99959c278e69ffe1f04c3fcc81eb4799eab26c004562a9ae1dc5aa550fa176479ec8bd5927df8b00d07fddd94c2e9ff8dec56954e37781d0e26869c75760"}, @generic={0xee, 0x10, 0x4, "67ce54b6d83707da7da75c93b22fbf6927d60e6dda47cc47de9c306d6b862509e5469189f56394a1b081d6d928eee3c20ea1733f1bc1cdb694dc4ceae40bbbb8974fce40410fa2c12267684e1251dd390890c56afa5e36fd7eb093299a4805d938d9ef69f9cae96765b2ca4cdb9324f9d76266848c2d51f223757cffa1c6b5e3a37d3a3626e42daf6d6e7225471f7d2e8d9db32a47a4b7519ddcba6850a777188f006ef47b7f7ea4f33520a1443a0e5c61514a711061d09ed85861829937826389340d99abffaaf0f21d5ebf8dcc2b4732310998ea55d1f632721b3f24a70a216053a1f3e3521bab445ca6"}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 6.467744838s ago: executing program 0 (id=2531): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x3c, r2, 0x1, 0x0, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}]}, &(0x7f00000002c0)=0x10) shutdown(r3, 0x2) 6.254717803s ago: executing program 0 (id=2534): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x1000000) 6.139620706s ago: executing program 0 (id=2535): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$smackfs_ipv6host(r2, &(0x7f0000000540)=@l2={{0x67b2, 0x3a, 0xfffffffffffffffd, 0x3a, 0x7, 0x3a, 0xbcd2, 0x3a, 0x8, 0x3a, 0x8000, 0x3a, 0x5, 0x3a, 0x6}, 0x2f, 0x0, 0x20, 'pci\x00'}, 0xb2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464657673696d0000000f3cd5006e65050000000000000000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="e4010000c318e9677245b3fd1fa101e9bc4a65f837fd33c2569b62aed678e2dc1c3c88c5c9dad43ca337827b5a8d9f2e65403643c1af38b0a8c0680f4874d83a65b2ef9a0d5ebc069c0b8859fe66a8ef08ac116e166e897aec716998fe8d33cc72d50bb7229268de", @ANYRES16=r4, @ANYBLOB="00042abd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x1e4}, 0x1, 0x0, 0x0, 0x40900}, 0x4040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 5.897934531s ago: executing program 0 (id=2536): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5f, 0xc3, 0x89, 0x40, 0x403, 0xda71, 0xa295, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x1, 0xf1, 0x3d, 0x4f, 0x0, [], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x3, 0x2}}]}}]}}]}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) epoll_pwait(r3, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x33, &(0x7f0000000100)={[0x4]}, 0x8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x11) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@index_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x2) 5.28833528s ago: executing program 1 (id=2537): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.239718908s ago: executing program 2 (id=2540): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000240)='minix\x00', 0x208800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f690900442f00fc000000000000000000000000000003ff020000000000000000000000000001242088a80000000000000800000086dd88a888be08"], 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f0000001f40)=""/4092, 0xffc}], 0x2}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r7 = eventfd2(0x8000, 0x418fe5704ac0f627) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_submit(r6, 0x3, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0xfffe, r3, &(0x7f00000002c0)="b1e0fc65898d4fad0cbb5583a813802d84eb3035e3041ded80d62df76e90518614e6f6acd476e1a5cff24ae58af27704d77266b8419cbf671c4b05ca49789c60dabc26a20fb971926cc3590aa2ff11439f91f3fb5d07997656", 0x59, 0x2000000000000, 0x0, 0x1, r7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xd, r8, &(0x7f00000005c0)="c1d1c3c14db41e18e6e9d231e6c5dad0bf7c3f20797662c3071123a079c6fb36291bd75ed49ce01152c9a4b8534c0ab2b5ebfd369956d1d6e9057c24c73e97c4130943d9290cd41baef5c6294ecd5e44afc9e92795a5c71c56e611ef9dfb267fc19b797b4e3a3dc29975dda491dd85136268606d8155bc0d18a5b3732b549d55a9fc7149413cc2e9134ce051af5b0597869db99e89282a5939e4382b90e7fb9b7190b36ace30d82744a8e8b79949b253cd318e44b00bb47b3f", 0xb9, 0x7ff}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xd01c4813, &(0x7f00000000c0)={0x400004, 0x200, 0x100004, 0x10003, 0x2000400, 0xffffffd4}) 3.454881315s ago: executing program 3 (id=2543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@iter={0x0}}, 0x20) 3.379998247s ago: executing program 3 (id=2545): socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x8, 0x100}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280"], 0x110}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x3c}, 0x1, 0x1200}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x6, 0x1, 0x2, 0x340}}) 3.261572318s ago: executing program 5 (id=2546): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='ife\x00', &(0x7f0000000100)="1cc2b91472eb5d0d510321a05d5ccba4dc1d1e932597aff7882e87438d2bd4af0ba3c9df33f464df3192de296a2714f3b4b3b85feb1f58e2f5545dc419de550c37d5fa10c50a9c02fcc3c8edd268ba57239170d8457ceb3b4aa05b89b82b057582cce40413947564d2997678e4bf8b42b9b33d6ee40218ed076bbb65037d40ada16be18246e05ad29a87caef6fcefae4d1f315800d1d7878b7fc82dbb3d6b09da9c583f49b8e9b0ffe53b41878ee", 0xae) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ipv6={@private1, @mcast2, [0xffffff00, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xffffff00, 0xffffffff], 'batadv_slave_0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2b, 0xb, 0x5, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x298}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"162f", 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 3.12391019s ago: executing program 5 (id=2547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.091736582s ago: executing program 5 (id=2548): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000100000018110000"], 0x0, 0x70b7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='f2fs_truncate_data_blocks_range\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0) r8 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, 0x0) signalfd(r7, &(0x7f0000000100)={[0x2]}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f74610000001000000000000140000000000000000814000000110001000000000000000000008400"], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0x8) 2.246740558s ago: executing program 3 (id=2549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000180)=[0x3, 0x4], 0x2) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) keyctl$clear(0x3, 0xfffffffffffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) 1.964064397s ago: executing program 1 (id=2550): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = getpid() capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000200)={0x8, 0x5, 0x7, 0x7, 0x1, 0x2}) r2 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x40, 0x23, 0x5c, {0x5c, 0x11, "3c925192716e1f0c7b86de805c495195276575a347b45b1749c7e8fdc680bc1d2ca3f9672e3ae579ac25d9793255d69971e5e7ab3ecf506434b7851d4a751d3e1ba21ca782b71367af527eac28a5e18393f09c0611c0bab73bfb"}}, &(0x7f00000002c0)={0x0, 0x3, 0x54, @string={0x54, 0x3, "1ad85fc4d5addd5ff10ccfa427bb47feb058bfbde1ee7065b8d544d67f94230648846d7eca3bd1b342bc0262b1f42aa722fabb6523cdea5895e4b3f31e5f874208e481da0fce24be9b4a85991e30f74d6482"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000380)={0x40, 0x14, 0xdf, "e5fa67f029e7f15bf3fdbbea62d7feaa69899d8e91fb07987dd0731760a69fc678a8ef1ebd865822a8c801d4e01435bf7bcf1ae0bd0530aed9a57140e1bfef1cb582b6aa2c77a6d6482ab19ae535a4633054e75ad78f2762ff8326bb96b6ecefeef6c909eb5d9ad613f5a57607f970e383a4a17b3dbaa0ff7ae176ccc68316e01f27501050ed7443f1397036df7d4bddd99bcf90a8f5cd7b7caaee0f7e4b80641dea484a980bee28a8f88be74d4fbb163efbc7c1a30f85cd3b0f7f5571f0e18aea50333b34ecffc5df88e1dafc83820a544a8748bc70fa53683d4fe62762ac"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000000500)={0x20, 0x81, 0x3, '+C5'}, &(0x7f0000000540)={0x20, 0x82, 0x2, "bcaa"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "bdd2"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "4d60aee5"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "fdcc07"}}) 1.960452736s ago: executing program 0 (id=2551): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x17, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5d}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40814) 1.219603529s ago: executing program 5 (id=2552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES64=0xffffffffffffffff], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) memfd_secret(0x80000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x3d04, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 856.39951ms ago: executing program 0 (id=2553): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) 855.834467ms ago: executing program 3 (id=2554): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) close(0x4) close(0x3) 195.752123ms ago: executing program 2 (id=2555): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0xfffc, [0x108, 0x4bb], 0x100}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 195.165459ms ago: executing program 5 (id=2556): r0 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x3}, 0x10) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4}, 0x10) close(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x2c8, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) 133.396236ms ago: executing program 3 (id=2557): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1e6e2b4dbb4b433c9ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb23475a2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b000", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 57.331453ms ago: executing program 5 (id=2558): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e25, @local}, 0x10) 0s ago: executing program 3 (id=2559): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r1, &(0x7f0000000cc0), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61, 0x0, 0x61, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)='~'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r6, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xb14}, {0x0}], 0x2}}], 0x1, 0x4000040) kernel console output (not intermixed with test programs): 61.834897][T13467] bond_slave_1: entered promiscuous mode [ 861.844321][T13444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 861.844487][T13467] bridge0: port 3(bond0) entered blocking state [ 861.864276][T13467] bridge0: port 3(bond0) entered disabled state [ 861.871085][T13467] bond0: entered allmulticast mode [ 861.874335][ T977] gspca_main: spca561-2.14.0 probing abcd:cdee [ 861.885485][T13467] bond_slave_0: entered allmulticast mode [ 861.891721][T13467] bond_slave_1: entered allmulticast mode [ 862.138812][ T977] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 862.173686][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.206094][ T977] usb 4-1: MIDIStreaming interface descriptor not found [ 862.414139][ T977] usb 4-1: USB disconnect, device number 53 [ 864.302908][ T10] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 864.544123][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.670207][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 865.481975][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 865.500347][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 865.509669][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.640997][T13497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 865.675535][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 865.702035][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 865.720055][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 865.740718][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 865.757077][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 865.763599][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 865.972540][ T24] usb 5-1: USB disconnect, device number 51 [ 865.995400][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 866.151952][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 866.158989][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 866.171811][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.171946][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 866.182315][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.182353][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 866.182391][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.182438][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 866.243423][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.361882][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 866.470084][ T43] usb 4-1: GET_CAPABILITIES returned 9f [ 866.475866][ T43] usbtmc 4-1:16.0: can't read capabilities [ 866.650178][T13519] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1988'. [ 867.938916][ T977] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 868.599105][ T977] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 868.607671][ T977] usb 1-1: config 0 has no interface number 0 [ 868.614394][ T977] usb 1-1: config 0 interface 228 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 868.628564][ T977] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 868.645100][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.653333][ T977] usb 1-1: Product: syz [ 868.657813][ T977] usb 1-1: Manufacturer: syz [ 868.662870][ T977] usb 1-1: SerialNumber: syz [ 868.673791][ T977] usb 1-1: config 0 descriptor?? [ 868.686580][ T977] bfusb 1-1:0.228: probe with driver bfusb failed with error -5 [ 868.774949][ T977] usb 4-1: USB disconnect, device number 54 [ 869.153913][T13551] netlink: 'syz.4.1996': attribute type 4 has an invalid length. [ 869.171603][ T5935] lo speed is unknown, defaulting to 1000 [ 869.189603][ T5935] syz2: Port: 1 Link DOWN [ 869.220733][T13551] NILFS (nbd4): device size too small [ 869.817803][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 869.902909][ T43] usb 1-1: USB disconnect, device number 58 [ 869.999984][ T30] audit: type=1326 audit(2000000218.730:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13556 comm="syz.4.1997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccab18e929 code=0x0 [ 870.002139][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 870.176156][ T24] usb 3-1: config 162 has an invalid interface number: 84 but max is 1 [ 870.184979][ T24] usb 3-1: config 162 has an invalid interface number: 2 but max is 1 [ 870.202283][ T24] usb 3-1: config 162 has no interface number 0 [ 870.208614][ T24] usb 3-1: config 162 has no interface number 1 [ 870.219556][ T24] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 870.240572][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 870.243604][ T24] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 870.255077][ T10] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 870.271209][ T24] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 870.289751][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 870.295199][ T24] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 870.298434][ T10] usb 2-1: can't read configurations, error -71 [ 870.317096][ T24] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 870.330994][ T24] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 870.348431][T13560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 870.357365][T13560] overlayfs: conflicting options: userxattr,metacopy=on [ 870.368057][ T24] usb 3-1: config 162 interface 84 has no altsetting 0 [ 870.379212][ T24] usb 3-1: config 162 interface 2 has no altsetting 0 [ 870.394826][ T24] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 870.407672][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.418235][ T24] usb 3-1: Product: syz [ 870.427791][ T24] usb 3-1: Manufacturer: syz [ 870.434715][ T24] usb 3-1: SerialNumber: syz [ 870.449574][T13562] netlink: 'syz.3.1999': attribute type 6 has an invalid length. [ 870.694739][ T24] usb 3-1: USB disconnect, device number 37 [ 871.731896][T10524] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 872.801616][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 872.941858][T10524] usb 1-1: device descriptor read/64, error -32 [ 873.192250][T10524] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 873.337803][T13598] lo speed is unknown, defaulting to 1000 [ 873.562480][T10524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.575618][T10524] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 873.594221][T10524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.623023][T10524] usb 1-1: config 0 descriptor?? [ 874.458517][T13620] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 875.197502][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.204879][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.561904][ T43] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 875.689383][T13630] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 875.695028][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 875.696545][ T5904] IPVS: starting estimator thread 0... [ 875.712437][T13630] trusted_key: encrypted_key: insufficient parameters specified [ 875.770804][ T43] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 875.780354][T10524] usbhid 1-1:0.0: can't add hid device: -71 [ 875.781532][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 875.787489][T10524] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 875.797263][ T43] usb 3-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 875.815208][T10524] usb 1-1: USB disconnect, device number 60 [ 875.816430][T13639] IPVS: using max 29 ests per chain, 69600 per kthread [ 875.836167][ T43] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 875.847263][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 875.858954][ T43] usb 3-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 875.861972][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 875.878031][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.881141][ T43] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 875.890482][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 875.912620][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 875.914579][ T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 875.927218][ T43] usb 3-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 875.932897][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.951884][ T43] usb 3-1: string descriptor 0 read error: -22 [ 875.952169][ T43] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 875.962052][ T10] usb 5-1: config 0 descriptor?? [ 875.970704][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.998784][ T43] adutux 3-1:168.0: interrupt endpoints not found [ 876.240640][ T5935] usb 3-1: USB disconnect, device number 38 [ 876.385063][ T10] aquacomputer_d5next 0003:0C70:F0BD.0014: item fetching failed at offset 5/7 [ 876.397531][ T10] aquacomputer_d5next 0003:0C70:F0BD.0014: probe with driver aquacomputer_d5next failed with error -22 [ 876.590915][ T43] libceph: connect (1)[c::]:6789 error -101 [ 876.601424][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 876.667067][T13648] ceph: No mds server is up or the cluster is laggy [ 876.867668][ T43] libceph: connect (1)[c::]:6789 error -101 [ 876.945865][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 877.104934][T13658] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 877.367425][T13667] Failed to get privilege flags for destination (handle=0x2:0x7) [ 877.508668][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2028'. [ 878.718415][ T43] usb 5-1: USB disconnect, device number 52 [ 881.063317][T13682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2031'. [ 881.716277][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'. [ 882.740977][T13716] FAULT_INJECTION: forcing a failure. [ 882.740977][T13716] name failslab, interval 1, probability 0, space 0, times 0 [ 882.758522][T13716] CPU: 0 UID: 0 PID: 13716 Comm: syz.4.2042 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 882.758544][T13716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 882.758554][T13716] Call Trace: [ 882.758560][T13716] [ 882.758567][T13716] dump_stack_lvl+0x189/0x250 [ 882.758595][T13716] ? __pfx____ratelimit+0x10/0x10 [ 882.758619][T13716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.758642][T13716] ? __pfx__printk+0x10/0x10 [ 882.758662][T13716] ? __pfx___might_resched+0x10/0x10 [ 882.758684][T13716] ? fs_reclaim_acquire+0x7d/0x100 [ 882.758711][T13716] should_fail_ex+0x414/0x560 [ 882.758734][T13716] should_failslab+0xa8/0x100 [ 882.758756][T13716] __kmalloc_noprof+0xcb/0x4f0 [ 882.758773][T13716] ? kfree+0x4d/0x440 [ 882.758788][T13716] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 882.758816][T13716] tomoyo_realpath_from_path+0xe3/0x5d0 [ 882.758841][T13716] ? tomoyo_domain+0xda/0x130 [ 882.758869][T13716] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 882.758889][T13716] tomoyo_path_number_perm+0x1e8/0x5a0 [ 882.758910][T13716] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 882.758943][T13716] ? __lock_acquire+0xab9/0xd20 [ 882.758979][T13716] ? __fget_files+0x2a/0x420 [ 882.759001][T13716] ? __fget_files+0x2a/0x420 [ 882.759021][T13716] ? __fget_files+0x3a0/0x420 [ 882.759040][T13716] ? __fget_files+0x2a/0x420 [ 882.759064][T13716] security_file_ioctl+0xcb/0x2d0 [ 882.759086][T13716] __se_sys_ioctl+0x47/0x170 [ 882.759105][T13716] do_syscall_64+0xfa/0x3b0 [ 882.759127][T13716] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.759151][T13716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.759166][T13716] ? clear_bhb_loop+0x60/0xb0 [ 882.759185][T13716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.759200][T13716] RIP: 0033:0x7fccab18e929 [ 882.759213][T13716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.759227][T13716] RSP: 002b:00007fccac08b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 882.759243][T13716] RAX: ffffffffffffffda RBX: 00007fccab3b5fa0 RCX: 00007fccab18e929 [ 882.759255][T13716] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 882.759270][T13716] RBP: 00007fccac08b090 R08: 0000000000000000 R09: 0000000000000000 [ 882.759279][T13716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.759288][T13716] R13: 0000000000000000 R14: 00007fccab3b5fa0 R15: 00007ffd97b45ef8 [ 882.759312][T13716] [ 882.759318][T13716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 882.837247][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 883.205572][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 883.222806][ T43] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.254353][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 883.261104][ T43] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 883.274254][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.296833][ T43] usb 2-1: config 0 descriptor?? [ 883.806636][ T43] aquacomputer_d5next 0003:0C70:F0BD.0015: item fetching failed at offset 5/7 [ 883.829744][ T43] aquacomputer_d5next 0003:0C70:F0BD.0015: probe with driver aquacomputer_d5next failed with error -22 [ 885.052420][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 885.232135][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 885.254850][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 885.278646][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 885.293693][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 885.308233][T13746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2049'. [ 885.317514][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.345045][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 885.357790][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.511213][T13751] team_slave_1: mtu less than device minimum [ 885.586493][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 885.592369][ T10] usbtmc 3-1:16.0: can't read capabilities [ 886.304236][ T43] usb 2-1: USB disconnect, device number 45 [ 886.469903][T13754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.511529][T13754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.562086][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.580273][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.608116][ T24] usb 3-1: USB disconnect, device number 39 [ 886.682506][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 886.792011][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 886.904386][T13764] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2055'. [ 886.945041][T13764] netlink: zone id is out of range [ 886.952028][T13764] netlink: zone id is out of range [ 886.957649][T13764] netlink: zone id is out of range [ 886.967548][T13764] netlink: zone id is out of range [ 886.973645][T13764] netlink: zone id is out of range [ 886.980681][T13764] netlink: zone id is out of range [ 886.986241][T13764] netlink: zone id is out of range [ 886.994236][T13764] netlink: zone id is out of range [ 887.000036][T13764] netlink: zone id is out of range [ 888.597251][T13794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2063'. [ 888.802228][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 888.901875][ T43] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 888.982865][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 888.990381][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 889.000779][T13801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2066'. [ 889.010068][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.028858][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.038939][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.049391][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.062708][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 889.063358][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 889.072153][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.088188][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.100832][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 889.108997][ T43] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 889.120905][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.135121][ T43] usb 1-1: config 0 descriptor?? [ 889.274309][ T5935] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 889.382114][ T977] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 889.434640][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 889.447665][ T5935] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 889.456364][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.469876][ T5935] usb 4-1: config 0 has no interface number 0 [ 889.478055][ T5935] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 889.492233][ T5935] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 889.504541][ T5935] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 889.515967][ T5935] usb 4-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 889.529017][ T5935] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 889.544649][ T5935] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 889.558929][ T977] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 889.567995][ T977] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 889.582767][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.592201][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 889.605204][ T5935] usb 4-1: config 0 descriptor?? [ 889.611354][ T977] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 889.621281][ T43] aquacomputer_d5next 0003:0C70:F0BD.0016: item fetching failed at offset 5/7 [ 889.624047][T13801] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 889.640506][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 889.657488][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 889.659613][ T43] aquacomputer_d5next 0003:0C70:F0BD.0016: probe with driver aquacomputer_d5next failed with error -22 [ 889.664824][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 889.710800][ T977] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 889.725670][ T977] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 889.745906][ T977] usb 2-1: Product: syz [ 889.750180][ T977] usb 2-1: Manufacturer: syz [ 889.764968][ T5935] snd-usb-audio 4-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 889.780716][T13803] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 889.795833][ T977] cdc_wdm 2-1:1.0: skipping garbage [ 889.801571][ T977] cdc_wdm 2-1:1.0: skipping garbage [ 889.809861][ T977] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 889.816762][ T977] cdc_wdm 2-1:1.0: Unknown control protocol [ 889.859315][ T43] usb 4-1: USB disconnect, device number 55 [ 889.877689][ T10] usb 5-1: usb_control_msg returned -71 [ 889.884471][ T10] usbtmc 5-1:16.0: can't read capabilities [ 889.910514][ T10] usb 5-1: USB disconnect, device number 53 [ 889.918225][T13806] netlink: 'syz.2.2068': attribute type 11 has an invalid length. [ 889.928401][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2068'. [ 890.273691][T13811] Failed to get privilege flags for destination (handle=0x2:0x7) [ 893.267994][ T24] usb 1-1: USB disconnect, device number 61 [ 893.803389][ T43] usb 2-1: USB disconnect, device number 46 [ 893.897595][T13819] loop8: detected capacity change from 0 to 1 [ 893.905703][T13819] Dev loop8: unable to read RDB block 1 [ 893.911524][T13819] loop8: unable to read partition table [ 893.921030][T13819] loop8: partition table beyond EOD, truncated [ 893.927736][T13819] loop_reread_partitions: partition scan of loop8 (þ被xü^>Þ~) failed (rc=-5) [ 893.946880][T13819] net_ratelimit: 76 callbacks suppressed [ 893.946898][T13819] openvswitch: netlink: Duplicate or invalid key (type 0). [ 893.989724][T13819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.662339][T13825] program syz.0.2072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.262969][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 896.376449][T13847] could not allocate digest TFM handle cryptd(blake2b-160) [ 896.444533][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.483066][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.504061][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.518380][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 896.529573][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 896.543382][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.557864][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.566006][ T24] usb 4-1: Product: syz [ 896.570293][ T24] usb 4-1: Manufacturer: syz [ 896.580566][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 896.586175][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 896.598405][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 896.604623][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 896.632011][ T5935] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 896.741879][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 896.792161][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 896.808650][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.812509][ T5935] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.831448][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.838583][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 896.846912][ T24] usb 4-1: USB disconnect, device number 56 [ 896.851792][ T5935] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 896.881971][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.901492][ T5935] usb 3-1: config 0 descriptor?? [ 896.913017][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.932685][ T10] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 896.952160][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.971484][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 897.001910][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 897.019204][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 897.033066][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 897.050383][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 897.058569][ T10] usb 2-1: Product: syz [ 897.063546][ T10] usb 2-1: Manufacturer: syz [ 897.073197][T13868] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 897.083800][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 897.089107][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 897.106236][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 897.114404][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 897.469801][T13874] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 897.662369][ T5935] aquacomputer_d5next 0003:0C70:F0BD.0017: item fetching failed at offset 5/7 [ 897.681417][ T5935] aquacomputer_d5next 0003:0C70:F0BD.0017: probe with driver aquacomputer_d5next failed with error -22 [ 898.292325][ T43] usb 3-1: USB disconnect, device number 40 [ 899.400859][T13889] openvswitch: netlink: Key 6 has unexpected len 108 expected 2 [ 899.611643][ T5935] usb 2-1: USB disconnect, device number 47 [ 901.153683][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 901.204463][T13904] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2090'. [ 901.497989][T13902] FAULT_INJECTION: forcing a failure. [ 901.497989][T13902] name failslab, interval 1, probability 0, space 0, times 0 [ 901.516057][T13902] CPU: 0 UID: 0 PID: 13902 Comm: syz.2.2090 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 901.516088][T13902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.516102][T13902] Call Trace: [ 901.516111][T13902] [ 901.516121][T13902] dump_stack_lvl+0x189/0x250 [ 901.516160][T13902] ? __pfx____ratelimit+0x10/0x10 [ 901.516193][T13902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.516226][T13902] ? __pfx__printk+0x10/0x10 [ 901.516255][T13902] ? __pfx___might_resched+0x10/0x10 [ 901.516286][T13902] ? fs_reclaim_acquire+0x7d/0x100 [ 901.516323][T13902] should_fail_ex+0x414/0x560 [ 901.516357][T13902] should_failslab+0xa8/0x100 [ 901.516387][T13902] kmem_cache_alloc_noprof+0x73/0x3c0 [ 901.516413][T13902] ? security_inode_alloc+0x39/0x330 [ 901.516441][T13902] security_inode_alloc+0x39/0x330 [ 901.516466][T13902] inode_init_always_gfp+0x9ed/0xdc0 [ 901.516505][T13902] alloc_inode+0x82/0x1b0 [ 901.516535][T13902] iget_locked+0xf0/0x570 [ 901.516572][T13902] kernfs_get_inode+0x4f/0x780 [ 901.516609][T13902] kernfs_iop_lookup+0x1f6/0x320 [ 901.516635][T13902] __lookup_slow+0x294/0x3d0 [ 901.516658][T13902] ? __pfx___lookup_slow+0x10/0x10 [ 901.516688][T13902] ? bpf_lsm_inode_permission+0x9/0x20 [ 901.516714][T13902] ? security_inode_permission+0xb7/0x310 [ 901.516748][T13902] ? down_read+0x1ad/0x2e0 [ 901.516774][T13902] lookup_slow+0x53/0x70 [ 901.516795][T13902] walk_component+0x2d2/0x400 [ 901.516826][T13902] ? path_lookupat+0x156/0x430 [ 901.516862][T13902] path_lookupat+0x163/0x430 [ 901.516905][T13902] filename_lookup+0x212/0x570 [ 901.516946][T13902] ? __pfx_filename_lookup+0x10/0x10 [ 901.517018][T13902] ? strncpy_from_user+0x150/0x290 [ 901.517049][T13902] ? getname_flags+0x1e5/0x540 [ 901.517079][T13902] ? _copy_from_user+0x94/0xb0 [ 901.517104][T13902] user_path_at+0x3a/0x60 [ 901.517126][T13902] __se_sys_mount+0x2d3/0x410 [ 901.517164][T13902] ? __pfx___se_sys_mount+0x10/0x10 [ 901.517192][T13902] ? rcu_is_watching+0x15/0xb0 [ 901.517230][T13902] ? do_syscall_64+0xbe/0x3b0 [ 901.517262][T13902] ? __x64_sys_mount+0x20/0xc0 [ 901.517294][T13902] do_syscall_64+0xfa/0x3b0 [ 901.517327][T13902] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.517359][T13902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.517381][T13902] ? clear_bhb_loop+0x60/0xb0 [ 901.517403][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.517423][T13902] RIP: 0033:0x7f213a18e929 [ 901.517443][T13902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.517462][T13902] RSP: 002b:00007f213b024038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 901.517484][T13902] RAX: ffffffffffffffda RBX: 00007f213a3b6080 RCX: 00007f213a18e929 [ 901.517499][T13902] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000280 [ 901.517514][T13902] RBP: 00007f213b024090 R08: 0000000000000000 R09: 0000000000000000 [ 901.517527][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.517539][T13902] R13: 0000000000000000 R14: 00007f213a3b6080 R15: 00007ffe1ae7d328 [ 901.517571][T13902] [ 902.220851][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 902.237503][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'. [ 903.512214][ T43] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 903.699798][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 903.717598][ T43] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 903.742963][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.770270][ T43] usb 4-1: config 0 descriptor?? [ 903.786117][T13921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.855933][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 904.080959][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.096676][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.106877][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.128858][ T24] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 904.139462][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.161889][ T5935] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 904.166343][ T24] usb 1-1: config 0 descriptor?? [ 904.322000][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 904.451034][ T5935] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.524120][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 904.562816][ T5935] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 904.651660][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.914336][ T5935] usb 2-1: config 0 descriptor?? [ 905.168458][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 905.175187][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 905.189206][ T43] usb 4-1: USB disconnect, device number 57 [ 906.210053][ T5935] aquacomputer_d5next 0003:0C70:F0BD.0018: item fetching failed at offset 5/7 [ 906.224242][ T5935] aquacomputer_d5next 0003:0C70:F0BD.0018: probe with driver aquacomputer_d5next failed with error -22 [ 906.279942][ T24] dragonrise 0003:0079:0011.0019: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 906.347433][T13960] bridge_slave_0: left allmulticast mode [ 906.355673][T13960] bridge_slave_0: left promiscuous mode [ 906.364251][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.404377][T13960] bridge_slave_1: left allmulticast mode [ 906.421273][T13960] bridge_slave_1: left promiscuous mode [ 906.438334][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.569270][T13960] bond0: (slave bond_slave_0): Releasing backup interface [ 906.735881][T13960] bond0: (slave bond_slave_1): Releasing backup interface [ 906.873636][T13960] team0: Port device team_slave_0 removed [ 906.905144][T13960] team0: Port device team_slave_1 removed [ 906.931055][T13960] bond1: (slave ip6erspan0): Releasing active interface [ 906.976317][T13960] team0: Port device batadv1 removed [ 906.984092][T13960] vlan2: left promiscuous mode [ 906.989012][T13960] vlan1: left promiscuous mode [ 906.995226][T13960] bridge0: port 3(vlan2) entered disabled state [ 907.013593][T13959] lo speed is unknown, defaulting to 1000 [ 907.330511][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.350085][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.177921][ T977] usb 2-1: USB disconnect, device number 48 [ 908.714953][ T9144] usb 1-1: USB disconnect, device number 62 [ 908.842035][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 911.401818][ T977] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 911.977434][ T977] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 911.986504][ T977] usb 1-1: config 0 has no interface number 0 [ 912.091510][T14030] 9pnet_fd: Insufficient options for proto=fd [ 912.092698][ T977] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 912.112259][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.130613][ T977] usb 1-1: Product: syz [ 912.135238][ T977] usb 1-1: Manufacturer: syz [ 912.140083][ T977] usb 1-1: SerialNumber: syz [ 912.147329][T14030] Cannot find add_set index 0 as target [ 912.156250][ T977] usb 1-1: config 0 descriptor?? [ 912.481885][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 912.488831][ T977] kaweth 1-1:0.58: Firmware present in device. [ 912.814862][ T977] kaweth 1-1:0.58: Statistics collection: 0 [ 912.828089][ T977] kaweth 1-1:0.58: Multicast filter limit: 0 [ 912.864545][ T977] kaweth 1-1:0.58: MTU: 0 [ 912.897293][ T977] kaweth 1-1:0.58: Read MAC address 00:00:00:00:00:00 [ 913.111226][ T977] kaweth 1-1:0.58: probe with driver kaweth failed with error -5 [ 913.139890][ T977] usb 1-1: USB disconnect, device number 63 [ 914.316363][T14056] FAULT_INJECTION: forcing a failure. [ 914.316363][T14056] name (null), interval 1, probability 0, space 0, times 1 [ 914.341519][T14056] CPU: 1 UID: 0 PID: 14056 Comm: syz.3.2131 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 914.341552][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 914.341566][T14056] Call Trace: [ 914.341574][T14056] [ 914.341585][T14056] dump_stack_lvl+0x189/0x250 [ 914.341623][T14056] ? __pfx____ratelimit+0x10/0x10 [ 914.341656][T14056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.341689][T14056] ? __pfx__printk+0x10/0x10 [ 914.341719][T14056] ? current_time+0x222/0x370 [ 914.341754][T14056] ? __pfx_current_time+0x10/0x10 [ 914.341789][T14056] should_fail_ex+0x414/0x560 [ 914.341822][T14056] null_queue_rq+0x34c/0xe30 [ 914.341867][T14056] null_queue_rqs+0x123/0x270 [ 914.341902][T14056] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 914.341937][T14056] blk_mq_dispatch_queue_requests+0x417/0x800 [ 914.341974][T14056] blk_mq_flush_plug_list+0x432/0x550 [ 914.342007][T14056] ? __lock_acquire+0xab9/0xd20 [ 914.342052][T14056] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 914.342084][T14056] ? do_raw_spin_lock+0x121/0x290 [ 914.342115][T14056] __blk_flush_plug+0x3d3/0x4b0 [ 914.342157][T14056] ? do_raw_spin_unlock+0x122/0x240 [ 914.342183][T14056] ? __pfx___blk_flush_plug+0x10/0x10 [ 914.342212][T14056] ? __io_submit_flush_completions+0xcc4/0xe40 [ 914.342248][T14056] blk_finish_plug+0x5e/0x90 [ 914.342280][T14056] io_submit_sqes+0x184c/0x1c50 [ 914.342338][T14056] __se_sys_io_uring_enter+0x2df/0x2b20 [ 914.342384][T14056] ? ksys_write+0x1cb/0x250 [ 914.342412][T14056] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 914.342436][T14056] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 914.342469][T14056] ? __pfx_vfs_write+0x10/0x10 [ 914.342497][T14056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 914.342534][T14056] ? __fget_files+0x3a0/0x420 [ 914.342569][T14056] ? fput+0xa0/0xd0 [ 914.342600][T14056] ? ksys_write+0x22a/0x250 [ 914.342627][T14056] ? __pfx_ksys_write+0x10/0x10 [ 914.342648][T14056] ? rcu_is_watching+0x15/0xb0 [ 914.342686][T14056] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 914.342714][T14056] do_syscall_64+0xfa/0x3b0 [ 914.342746][T14056] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.342776][T14056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.342797][T14056] ? clear_bhb_loop+0x60/0xb0 [ 914.342824][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.342844][T14056] RIP: 0033:0x7f8999f8e929 [ 914.342864][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.342882][T14056] RSP: 002b:00007f899aec9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 914.342905][T14056] RAX: ffffffffffffffda RBX: 00007f899a1b5fa0 RCX: 00007f8999f8e929 [ 914.342921][T14056] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 914.342934][T14056] RBP: 00007f899aec9090 R08: 0000000000000000 R09: 0000000000000000 [ 914.342946][T14056] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 914.342958][T14056] R13: 0000000000000000 R14: 00007f899a1b5fa0 R15: 00007ffd74f99af8 [ 914.342993][T14056] [ 914.640069][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.750658][T14064] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 914.859746][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 915.387546][T14072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.413635][T14079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2139'. [ 915.737469][T14072] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 916.732620][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2142'. [ 917.011801][ T5843] Bluetooth: hci0: command tx timeout [ 917.172562][T14099] Can't find a SQUASHFS superblock on nullb0 [ 918.231992][ T9144] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 918.393013][ T9144] usb 4-1: Using ep0 maxpacket: 16 [ 918.411327][ T9144] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 918.422987][ T9144] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 918.435476][ T9144] usb 4-1: config 1 interface 0 has no altsetting 0 [ 918.445588][ T9144] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 918.457285][ T9144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.466311][ T9144] usb 4-1: Product: ꯯ꇻ貉 [ 918.471309][ T9144] usb 4-1: Manufacturer: 딭ᛖﮛ尫ⓜᴊì“龫칥쫥᮪è©âµ²é§±æ°¿â¾‰á«‘徃修并ﷴ黹炋⣑娗腨꡸࿨ã¢ä´„鮡æ‹àª¹èƒžé¸¤é“â´² [ 918.490162][ T9144] usb 4-1: SerialNumber: Б [ 918.500836][T14109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.519005][T14109] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.616657][T14114] lo speed is unknown, defaulting to 1000 [ 918.627268][T14112] tipc: Started in network mode [ 918.632504][T14112] tipc: Node identity 4, cluster identity 4711 [ 918.639809][T14112] tipc: Node number set to 4 [ 918.837505][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.855032][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.936122][ T9144] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 918.970201][ T9144] usb 4-1: USB disconnect, device number 58 [ 918.998477][ T9144] usblp0: removed [ 919.133754][T14130] Invalid ELF header magic: != ELF [ 920.150858][T14141] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2156'. [ 922.398346][T14147] vlan2: entered promiscuous mode [ 922.482012][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 922.593650][T14147] hsr0: entered promiscuous mode [ 922.656899][ T24] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 922.691815][ T24] usb 4-1: config 0 has no interface number 0 [ 922.698022][ T24] usb 4-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 922.737150][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 922.749843][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.757972][ T24] usb 4-1: Product: syz [ 922.764085][ T24] usb 4-1: Manufacturer: syz [ 922.768698][ T24] usb 4-1: SerialNumber: syz [ 922.838224][ T24] usb 4-1: config 0 descriptor?? [ 922.851470][T11864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 922.860846][T11864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 922.871992][ T24] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 922.878556][ T24] usb 4-1: No valid video chain found. [ 922.884405][T11864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 922.897826][T11864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 922.907592][T11864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 923.072146][ T9144] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 923.215145][T14157] overlayfs: conflicting options: userxattr,redirect_dir=on [ 923.248169][T14168] lo speed is unknown, defaulting to 1000 [ 924.119235][T14168] chnl_net:caif_netlink_parms(): no params data found [ 924.485942][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.507826][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.525434][T14168] bridge_slave_0: entered allmulticast mode [ 924.544301][T14168] bridge_slave_0: entered promiscuous mode [ 924.565417][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.577692][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.592087][T14168] bridge_slave_1: entered allmulticast mode [ 924.607979][T14168] bridge_slave_1: entered promiscuous mode [ 924.682227][T14168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.707449][T14168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.785718][T14168] team0: Port device team_slave_0 added [ 924.801929][ T5935] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 924.809423][T14168] team0: Port device team_slave_1 added [ 924.878619][T14168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.897864][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.958668][T14168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.978657][T14168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.986394][ T5935] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 924.987594][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.000098][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.035682][T14168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.114282][ T5935] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 925.122169][ T5843] Bluetooth: hci5: command tx timeout [ 925.128137][ T5935] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 925.137984][ T5935] usb 3-1: Manufacturer: syz [ 925.185335][ T5935] usb 3-1: config 0 descriptor?? [ 925.348325][T14168] hsr_slave_0: entered promiscuous mode [ 925.356159][T14168] hsr_slave_1: entered promiscuous mode [ 925.363086][T14168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.373074][ T5935] rc_core: IR keymap rc-hauppauge not found [ 925.379151][ T5935] Registered IR keymap rc-empty [ 925.386225][ T5935] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 925.398256][ T5935] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 925.409245][T14168] Cannot create hsr debugfs directory [ 925.976785][ T9144] usb 3-1: USB disconnect, device number 42 [ 926.067208][ T24] usb 4-1: USB disconnect, device number 59 [ 926.169548][T14168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.206599][T14168] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.238941][T10237] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.246234][T10237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.274460][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.281689][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.289951][T14212] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2170'. [ 927.264031][ T5843] Bluetooth: hci5: command tx timeout [ 927.725150][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.756907][T14168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.026092][T14244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2181'. [ 928.952392][T14260] vivid-001: disconnect [ 929.271911][ T5843] Bluetooth: hci5: command tx timeout [ 929.522901][T14253] vivid-001: reconnect [ 929.617902][ T30] audit: type=1326 audit(2000000278.230:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 929.824152][ T30] audit: type=1326 audit(2000000278.230:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 929.910077][ T30] audit: type=1326 audit(2000000278.230:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.261342][ T5935] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 930.501869][ T30] audit: type=1326 audit(2000000278.230:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.531605][ T30] audit: type=1326 audit(2000000278.230:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.571906][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 930.577651][ T30] audit: type=1326 audit(2000000278.230:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.605414][ T30] audit: type=1326 audit(2000000278.230:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.628785][ T5935] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 930.639115][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.647473][ T5935] usb 3-1: Product: syz [ 930.651945][ T5935] usb 3-1: Manufacturer: syz [ 930.662126][ T5935] usb 3-1: SerialNumber: syz [ 930.669198][ T30] audit: type=1326 audit(2000000278.230:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.695665][ T5935] usb 3-1: config 0 descriptor?? [ 930.703304][ T5935] gspca_main: se401-2.14.0 probing 047d:5003 [ 930.710818][ T30] audit: type=1326 audit(2000000278.230:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.714958][T14168] veth0_vlan: entered promiscuous mode [ 930.734122][ T30] audit: type=1326 audit(2000000278.230:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14253 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8999f8e929 code=0x7fc00000 [ 930.777824][T14168] veth1_vlan: entered promiscuous mode [ 930.873385][T14168] veth0_macvtap: entered promiscuous mode [ 930.892255][T14168] veth1_macvtap: entered promiscuous mode [ 930.966521][T14168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.992355][T14168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.116081][ T5935] gspca_se401: Wrong descriptor type [ 931.178019][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.202615][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 931.221266][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.331618][ T9062] usb 3-1: USB disconnect, device number 43 [ 931.339522][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.351994][ T5843] Bluetooth: hci5: command tx timeout [ 931.368754][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.380563][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 931.422369][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 931.495360][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 931.524168][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 931.598269][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.173267][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.220018][ T10] usb 4-1: config 0 descriptor?? [ 932.336407][T14278] bond0: left allmulticast mode [ 932.381751][T14278] bond_slave_0: left allmulticast mode [ 932.411817][T14278] bond_slave_1: left allmulticast mode [ 932.440029][T14278] bridge0: port 3(bond0) entered disabled state [ 933.168944][T14292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2190'. [ 933.314786][T14278] bridge_slave_0: left allmulticast mode [ 933.341191][T14278] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.656762][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 933.664160][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 933.725569][ T10] usb 4-1: USB disconnect, device number 60 [ 933.981320][T14278] bridge_slave_1: left allmulticast mode [ 934.032418][T14278] bridge_slave_1: left promiscuous mode [ 934.039286][T14278] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.065177][T14278] bond0: (slave bond_slave_0): Releasing backup interface [ 934.076621][T14278] bond_slave_0: left promiscuous mode [ 934.101457][T14278] bond0: (slave bond_slave_1): Releasing backup interface [ 934.119267][T14278] bond_slave_1: left promiscuous mode [ 934.159588][T14278] team0: Port device team_slave_0 removed [ 934.176020][T14278] team0: Port device team_slave_1 removed [ 934.183595][T14278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.199117][T14278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.208426][T14278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.218820][T14278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.327858][ T977] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 934.866682][T14323] binder: 14309:14323 ioctl c0306201 200000000080 returned -14 [ 934.906725][T14323] binder: BINDER_SET_CONTEXT_MGR already set [ 934.913586][T14323] binder: 14309:14323 ioctl 4018620d 200000000040 returned -16 [ 935.196098][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.214908][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.238694][ T977] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 935.269692][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.310732][ T977] usb 1-1: config 0 descriptor?? [ 936.018023][ T9062] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 936.262465][ T9062] usb 3-1: Using ep0 maxpacket: 16 [ 936.274215][ T9062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.285604][ T9062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.307753][ T9062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.332967][ T9062] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 936.343308][ T9062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.355894][ T9062] usb 3-1: config 0 descriptor?? [ 937.181401][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.188053][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.602238][ T5935] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 937.615115][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 937.689128][ T9062] usbhid 3-1:0.0: can't add hid device: -71 [ 937.703544][ T9062] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 937.717078][ T9062] usb 3-1: USB disconnect, device number 44 [ 937.785783][ T5935] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 937.808211][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 937.820214][ T5935] usb 4-1: config 0 has no interface number 0 [ 937.826851][ T5935] usb 4-1: config 0 interface 170 has no altsetting 0 [ 937.834038][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.842755][ T5935] usb 4-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 937.851989][ T10] usb 6-1: Product: syz [ 937.856438][ T10] usb 6-1: Manufacturer: syz [ 937.862654][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.870946][ T10] usb 6-1: SerialNumber: syz [ 937.880228][ T10] usb 6-1: config 0 descriptor?? [ 937.889909][ T5935] usb 4-1: config 0 descriptor?? [ 937.899919][ T10] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 937.910790][ T5935] usb 4-1: bad CDC descriptors [ 938.017946][T14369] lo speed is unknown, defaulting to 1000 [ 938.150660][ T10] usb 4-1: USB disconnect, device number 61 [ 938.365735][T10524] usb 6-1: USB disconnect, device number 2 [ 938.561353][ T977] usbhid 1-1:0.0: can't add hid device: -71 [ 938.572197][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 938.613393][ T977] usb 1-1: USB disconnect, device number 64 [ 938.911959][ T9144] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 939.077565][ T9144] usb 3-1: Using ep0 maxpacket: 32 [ 939.085062][ T9144] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 939.100234][T14389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2221'. [ 939.115656][ T9144] usb 3-1: config 0 has no interface number 0 [ 939.134158][ T9144] usb 3-1: config 0 interface 12 has no altsetting 0 [ 939.151053][ T9144] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 939.169236][ T9144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.187969][ T9144] usb 3-1: Product: syz [ 939.199285][ T9144] usb 3-1: Manufacturer: syz [ 939.214170][ T9144] usb 3-1: SerialNumber: syz [ 939.231661][T14383] input: syz1 as /devices/virtual/input/input33 [ 939.287967][ T9144] usb 3-1: config 0 descriptor?? [ 939.828924][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.871157][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.992708][T14388] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 940.108836][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 940.279046][T14404] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2226'. [ 940.342086][ T977] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 940.354368][T10524] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 941.113120][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 941.131765][T10524] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 941.141532][T10524] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 941.153164][T10524] usb 1-1: config 220 has no interface number 2 [ 941.159722][T10524] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 941.173224][ T977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.184545][T10524] usb 1-1: config 220 interface 0 has no altsetting 0 [ 941.191359][T10524] usb 1-1: config 220 interface 76 has no altsetting 0 [ 941.198597][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 941.205398][ T977] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 941.214829][T10524] usb 1-1: config 220 interface 1 has no altsetting 0 [ 941.221906][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.251536][ T977] usb 2-1: config 0 descriptor?? [ 941.261901][T10524] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 941.271008][T10524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.291948][T10524] usb 1-1: Product: syz [ 941.296204][T10524] usb 1-1: Manufacturer: syz [ 941.300856][T10524] usb 1-1: SerialNumber: syz [ 941.372025][ T5935] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 941.461947][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 941.521908][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 941.530464][ T5935] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 941.541543][ T5935] usb 4-1: config 0 has no interface number 0 [ 941.565121][T10524] usb 1-1: selecting invalid altsetting 0 [ 941.571086][ T5935] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 941.581062][T10524] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 941.598024][T10524] usb 1-1: No valid video chain found. [ 941.604109][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.614088][ T5935] usb 4-1: Product: syz [ 941.618559][ T5935] usb 4-1: Manufacturer: syz [ 941.626864][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 941.632415][ T5935] usb 4-1: SerialNumber: syz [ 941.639162][T10524] usb 1-1: selecting invalid altsetting 0 [ 941.648540][T10524] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 941.658121][ T5935] usb 4-1: config 0 descriptor?? [ 941.672442][ T5935] smsc95xx v2.0.0 [ 941.678048][T10524] usb 1-1: USB disconnect, device number 65 [ 941.684919][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 941.701994][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.713815][ T977] aquacomputer_d5next 0003:0C70:F0BD.001A: item fetching failed at offset 5/7 [ 941.725476][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.737689][ T977] aquacomputer_d5next 0003:0C70:F0BD.001A: probe with driver aquacomputer_d5next failed with error -22 [ 941.750514][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 941.767177][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.780592][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 941.790085][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.992469][ T9144] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 942.010400][ T9144] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 942.018133][ T9144] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 942.031221][ T9144] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 942.049759][ T9144] usb 3-1: USB disconnect, device number 45 [ 942.180823][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 942.186466][ T10] usbtmc 6-1:16.0: can't read capabilities [ 942.798515][ T5935] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 942.824186][ T5935] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 943.986643][ T10] usb 2-1: USB disconnect, device number 49 [ 944.254047][T14426] FAULT_INJECTION: forcing a failure. [ 944.254047][T14426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.267866][T14426] CPU: 1 UID: 0 PID: 14426 Comm: syz.0.2232 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 944.267895][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.267909][T14426] Call Trace: [ 944.267920][T14426] [ 944.267930][T14426] dump_stack_lvl+0x189/0x250 [ 944.267971][T14426] ? __pfx____ratelimit+0x10/0x10 [ 944.268005][T14426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.268037][T14426] ? __pfx__printk+0x10/0x10 [ 944.268072][T14426] should_fail_ex+0x414/0x560 [ 944.268105][T14426] _copy_to_user+0x31/0xb0 [ 944.268130][T14426] simple_read_from_buffer+0xe1/0x170 [ 944.268165][T14426] proc_fail_nth_read+0x1df/0x250 [ 944.268200][T14426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 944.268234][T14426] ? rw_verify_area+0x258/0x650 [ 944.268256][T14426] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 944.268281][T14426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 944.268315][T14426] vfs_read+0x200/0x980 [ 944.268338][T14426] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 944.268368][T14426] ? __pfx___mutex_lock+0x10/0x10 [ 944.268409][T14426] ? __pfx_vfs_read+0x10/0x10 [ 944.268439][T14426] ? __rcu_read_unlock+0x84/0xe0 [ 944.268465][T14426] ? __fget_files+0x3a0/0x420 [ 944.268494][T14426] ? __fget_files+0x2a/0x420 [ 944.268533][T14426] ksys_read+0x145/0x250 [ 944.268561][T14426] ? __pfx_ksys_read+0x10/0x10 [ 944.268599][T14426] do_syscall_64+0xfa/0x3b0 [ 944.268634][T14426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.268655][T14426] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 944.268676][T14426] ? clear_bhb_loop+0x60/0xb0 [ 944.268704][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.268726][T14426] RIP: 0033:0x7fed2058d33c [ 944.268746][T14426] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 944.268765][T14426] RSP: 002b:00007fed21492030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 944.268787][T14426] RAX: ffffffffffffffda RBX: 00007fed207b6160 RCX: 00007fed2058d33c [ 944.268803][T14426] RDX: 000000000000000f RSI: 00007fed214920a0 RDI: 000000000000000a [ 944.268817][T14426] RBP: 00007fed21492090 R08: 0000000000000000 R09: 0000000000000000 [ 944.268832][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.268845][T14426] R13: 0000000000000000 R14: 00007fed207b6160 R15: 00007ffc53c8b378 [ 944.268879][T14426] [ 944.508688][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 944.706849][T10524] usb 6-1: USB disconnect, device number 3 [ 944.797891][ T5935] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 944.836305][T14432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2233'. [ 944.875310][ T5935] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 944.937957][ T5935] usb 4-1: USB disconnect, device number 62 [ 944.946631][T14439] netlink: 'syz.3.2238': attribute type 9 has an invalid length. [ 945.015651][T14441] FAULT_INJECTION: forcing a failure. [ 945.015651][T14441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.069878][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.5.2239 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 945.069912][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.069926][T14441] Call Trace: [ 945.069936][T14441] [ 945.069946][T14441] dump_stack_lvl+0x189/0x250 [ 945.069984][T14441] ? __pfx____ratelimit+0x10/0x10 [ 945.070018][T14441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.070051][T14441] ? __pfx__printk+0x10/0x10 [ 945.070073][T14441] ? __might_fault+0xb0/0x130 [ 945.070112][T14441] should_fail_ex+0x414/0x560 [ 945.070147][T14441] _copy_from_user+0x2d/0xb0 [ 945.070172][T14441] ___sys_sendmsg+0x158/0x2a0 [ 945.070203][T14441] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.070270][T14441] ? __fget_files+0x2a/0x420 [ 945.070300][T14441] ? __fget_files+0x3a0/0x420 [ 945.070342][T14441] __x64_sys_sendmsg+0x19b/0x260 [ 945.070380][T14441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.070420][T14441] ? __pfx_ksys_write+0x10/0x10 [ 945.070443][T14441] ? rcu_is_watching+0x15/0xb0 [ 945.070482][T14441] ? do_syscall_64+0xbe/0x3b0 [ 945.070521][T14441] do_syscall_64+0xfa/0x3b0 [ 945.070553][T14441] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.070586][T14441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.070609][T14441] ? clear_bhb_loop+0x60/0xb0 [ 945.070636][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.070659][T14441] RIP: 0033:0x7f7615f8e929 [ 945.070678][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.070699][T14441] RSP: 002b:00007f7616d6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.070724][T14441] RAX: ffffffffffffffda RBX: 00007f76161b5fa0 RCX: 00007f7615f8e929 [ 945.070741][T14441] RDX: 0000000000000000 RSI: 0000200000002380 RDI: 0000000000000003 [ 945.070756][T14441] RBP: 00007f7616d6b090 R08: 0000000000000000 R09: 0000000000000000 [ 945.070770][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.070785][T14441] R13: 0000000000000000 R14: 00007f76161b5fa0 R15: 00007fff54211b38 [ 945.070819][T14441] [ 945.793871][T14466] Can't find a SQUASHFS superblock on nullb0 [ 946.285711][ T9144] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 946.452034][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 946.459913][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 946.569495][ T9144] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 946.606429][ T9144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.623222][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 946.628897][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 946.642284][ T5904] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 947.422686][ T9144] usb 1-1: Product: syz [ 947.427033][ T9144] usb 1-1: Manufacturer: syz [ 947.431665][ T9144] usb 1-1: SerialNumber: syz [ 947.445007][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.456794][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 947.463594][ T43] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 947.493416][ T9144] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 947.524835][ T5925] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 947.538732][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 947.567389][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.585772][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.596157][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 947.606216][ T5904] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 947.614633][ T5904] usb 2-1: config 0 has no interface number 0 [ 947.645771][ T5904] usb 2-1: config 0 interface 12 has no altsetting 0 [ 947.654665][ T43] usb 3-1: config 0 descriptor?? [ 947.669154][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.686572][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.698741][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.714012][ T5904] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 947.724036][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.732496][ T5904] usb 2-1: Product: syz [ 947.736937][ T5904] usb 2-1: Manufacturer: syz [ 947.741783][ T5904] usb 2-1: SerialNumber: syz [ 947.746609][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.760771][ T5904] usb 2-1: config 0 descriptor?? [ 947.765884][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.798695][T14437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2237'. [ 947.882868][ T9144] usb 1-1: USB disconnect, device number 66 [ 947.988536][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 947.994850][ T24] usbtmc 4-1:16.0: can't read capabilities [ 947.999181][ T5935] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 948.103841][ T43] aquacomputer_d5next 0003:0C70:F0BD.001B: item fetching failed at offset 5/7 [ 948.114199][ T43] aquacomputer_d5next 0003:0C70:F0BD.001B: probe with driver aquacomputer_d5next failed with error -22 [ 948.165847][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.176450][ T5935] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 948.192557][ T5935] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 948.203132][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.211197][ T5935] usb 6-1: Product: syz [ 948.215649][ T5935] usb 6-1: Manufacturer: syz [ 948.220976][ T5935] usb 6-1: SerialNumber: syz [ 948.228753][ T5935] usb 6-1: config 0 descriptor?? [ 948.566820][ T5935] usb 6-1: USB disconnect, device number 4 [ 948.632346][ T5925] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 949.180439][ T5925] ath9k_htc: Failed to initialize the device [ 949.187924][ T9144] usb 1-1: ath9k_htc: USB layer deinitialized [ 949.229308][ T977] usb 4-1: USB disconnect, device number 63 [ 949.770292][T14481] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 950.851434][ T977] usb 3-1: USB disconnect, device number 46 [ 950.857589][T11864] Bluetooth: hci4: command 0x0406 tx timeout [ 951.060539][ T5904] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 951.091856][ T5904] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 951.099247][ T5904] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 951.126868][ T5904] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 951.174004][ T5904] usb 2-1: USB disconnect, device number 50 [ 951.213544][T14506] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2257'. [ 952.033908][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2262'. [ 952.292972][T14520] batadv0: entered promiscuous mode [ 952.311318][T14520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 952.333501][T14520] batadv0: left promiscuous mode [ 952.381956][ T5935] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 952.389941][T14523] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 952.552005][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 952.567794][ T5935] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 952.608098][ T5935] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.653997][ T5935] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.675130][ T5935] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 953.674100][ T5935] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.754600][ T5935] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 954.071508][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.242878][ T5925] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 955.466845][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 955.540900][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.742792][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.874967][ T5925] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 956.021825][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.053144][ T5925] usb 4-1: config 0 descriptor?? [ 956.058663][ T5925] usb 4-1: can't set config #0, error -71 [ 956.065955][ T5925] usb 4-1: USB disconnect, device number 64 [ 956.082484][ T5935] usb 2-1: usb_control_msg returned -71 [ 956.108603][ T5935] usbtmc 2-1:16.0: can't read capabilities [ 956.140009][ T5935] usb 2-1: USB disconnect, device number 51 [ 956.195866][T14546] tmpfs: Unknown parameter 'ota' [ 956.278637][T14551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2273'. [ 958.193350][T14566] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 958.300882][T14564] lo speed is unknown, defaulting to 1000 [ 958.531804][ T977] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 959.447317][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 959.459857][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.493767][ T977] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 959.505519][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.518526][ T977] usb 2-1: config 0 descriptor?? [ 959.952223][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 960.205327][ T977] isku 0003:1E7D:319C.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 960.286749][T14602] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2284'. [ 960.306537][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 960.525539][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 960.549298][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 960.571303][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 960.584331][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 960.595536][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.612249][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 960.621370][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.001986][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 961.007588][ T10] usbtmc 4-1:16.0: can't read capabilities [ 961.524824][T14606] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 961.536169][T14606] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 961.837291][T14611] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 961.910002][T14612] FAULT_INJECTION: forcing a failure. [ 961.910002][T14612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.933517][T14612] CPU: 0 UID: 0 PID: 14612 Comm: syz.5.2286 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 961.933549][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 961.933564][T14612] Call Trace: [ 961.933573][T14612] [ 961.933583][T14612] dump_stack_lvl+0x189/0x250 [ 961.933622][T14612] ? __pfx____ratelimit+0x10/0x10 [ 961.933653][T14612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.933685][T14612] ? __pfx__printk+0x10/0x10 [ 961.933721][T14612] should_fail_ex+0x414/0x560 [ 961.933754][T14612] _copy_to_user+0x31/0xb0 [ 961.933777][T14612] sctp_getsockopt_peer_addr_params+0x921/0xcc0 [ 961.933807][T14612] ? __pfx_sctp_getsockopt_peer_addr_params+0x10/0x10 [ 961.933848][T14612] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 961.933892][T14612] sctp_getsockopt+0x7ed/0xb60 [ 961.933922][T14612] do_sock_getsockopt+0x360/0x650 [ 961.933952][T14612] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 961.933978][T14612] ? do_syscall_64+0x80/0x3b0 [ 961.934010][T14612] ? __fget_files+0x3a0/0x420 [ 961.934038][T14612] ? __fget_files+0x2a/0x420 [ 961.934076][T14612] __x64_sys_getsockopt+0x1a5/0x250 [ 961.934101][T14612] ? do_syscall_64+0x80/0x3b0 [ 961.934135][T14612] ? do_syscall_64+0x80/0x3b0 [ 961.934171][T14612] do_syscall_64+0xfa/0x3b0 [ 961.934202][T14612] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.934240][T14612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.934261][T14612] ? clear_bhb_loop+0x60/0xb0 [ 961.934288][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.934309][T14612] RIP: 0033:0x7f7615f8e929 [ 961.934328][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.934347][T14612] RSP: 002b:00007f7616d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 961.934370][T14612] RAX: ffffffffffffffda RBX: 00007f76161b6080 RCX: 00007f7615f8e929 [ 961.934386][T14612] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 961.934399][T14612] RBP: 00007f7616d4a090 R08: 0000200000000080 R09: 0000000000000000 [ 961.934414][T14612] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 961.934428][T14612] R13: 0000000000000001 R14: 00007f76161b6080 R15: 00007fff54211b38 [ 961.934462][T14612] [ 962.334996][ T977] usb 4-1: USB disconnect, device number 65 [ 962.518605][ T5904] usb 2-1: USB disconnect, device number 52 [ 962.779680][ T977] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 963.092330][T14630] overlayfs: missing 'lowerdir' [ 963.295227][ T977] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 963.434855][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.603302][ T977] usb 4-1: Product: syz [ 963.615318][ T977] usb 4-1: Manufacturer: syz [ 963.623242][ T977] usb 4-1: SerialNumber: syz [ 963.639931][ T977] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 963.711906][ T5935] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 963.992096][ T977] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 964.122394][ T977] usb 6-1: device descriptor read/64, error -71 [ 964.320317][T14650] FAULT_INJECTION: forcing a failure. [ 964.320317][T14650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.334094][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.0.2298 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 964.334134][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 964.334149][T14650] Call Trace: [ 964.334161][T14650] [ 964.334172][T14650] dump_stack_lvl+0x189/0x250 [ 964.334210][T14650] ? __pfx____ratelimit+0x10/0x10 [ 964.334254][T14650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.334284][T14650] ? __pfx__printk+0x10/0x10 [ 964.334305][T14650] ? __might_fault+0xb0/0x130 [ 964.334345][T14650] should_fail_ex+0x414/0x560 [ 964.334378][T14650] _copy_from_user+0x2d/0xb0 [ 964.334399][T14650] ppp_write+0x186/0x400 [ 964.334426][T14650] ? __pfx_ppp_write+0x10/0x10 [ 964.334455][T14650] vfs_write+0x27e/0xa90 [ 964.334489][T14650] ? __pfx_vfs_write+0x10/0x10 [ 964.334517][T14650] ? __fget_files+0x2a/0x420 [ 964.334548][T14650] ? __fget_files+0x2a/0x420 [ 964.334574][T14650] ? __fget_files+0x3a0/0x420 [ 964.334599][T14650] ? __fget_files+0x2a/0x420 [ 964.334636][T14650] ksys_write+0x145/0x250 [ 964.334664][T14650] ? __pfx_ksys_write+0x10/0x10 [ 964.334687][T14650] ? rcu_is_watching+0x15/0xb0 [ 964.334724][T14650] ? do_syscall_64+0xbe/0x3b0 [ 964.334764][T14650] do_syscall_64+0xfa/0x3b0 [ 964.334793][T14650] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.334824][T14650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.334846][T14650] ? clear_bhb_loop+0x60/0xb0 [ 964.334873][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.334893][T14650] RIP: 0033:0x7fed2058e929 [ 964.334913][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.334931][T14650] RSP: 002b:00007fed214d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 964.334953][T14650] RAX: ffffffffffffffda RBX: 00007fed207b5fa0 RCX: 00007fed2058e929 [ 964.334969][T14650] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000003 [ 964.334984][T14650] RBP: 00007fed214d4090 R08: 0000000000000000 R09: 0000000000000000 [ 964.334998][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.335011][T14650] R13: 0000000000000000 R14: 00007fed207b5fa0 R15: 00007ffc53c8b378 [ 964.335046][T14650] [ 964.613069][T14648] 9pnet_fd: Insufficient options for proto=fd [ 964.954274][ T5904] usb 4-1: USB disconnect, device number 66 [ 965.124089][ T977] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 965.373669][ T977] usb 6-1: device descriptor read/64, error -71 [ 965.380621][ T5935] usb 4-1: Service connection timeout for: 256 [ 965.386956][ T5935] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 965.396143][ T5935] ath9k_htc: Failed to initialize the device [ 965.418282][ T5904] usb 4-1: ath9k_htc: USB layer deinitialized [ 965.484186][ T977] usb usb6-port1: attempt power cycle [ 966.014149][T11864] Bluetooth: hci5: command 0x0405 tx timeout [ 966.232047][ T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 966.252547][ T977] usb 6-1: device descriptor read/8, error -71 [ 966.502132][ T977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 966.522587][ T977] usb 6-1: device descriptor read/8, error -71 [ 966.765103][ T977] usb usb6-port1: unable to enumerate USB device [ 966.891947][ T5935] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 966.935643][T14680] overlayfs: missing 'lowerdir' [ 967.362333][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 967.392301][ T5935] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 967.406545][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.425755][ T5935] usb 4-1: config 0 has no interface number 0 [ 967.438866][ T5935] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 967.441842][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 967.460430][ T5935] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 967.477398][ T5935] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 967.489107][ T5935] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 967.504006][ T5935] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 967.520435][ T5935] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 967.545744][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.601843][ T5904] usb 6-1: device descriptor read/64, error -71 [ 967.686193][ T5935] usb 4-1: config 0 descriptor?? [ 967.728090][T14664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 967.807727][T14664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 968.003794][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 968.465324][ T5935] usb 4-1: USB disconnect, device number 67 [ 968.493570][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 968.525538][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 968.641931][ T5904] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 968.777065][ T5904] usb 6-1: device descriptor read/64, error -71 [ 968.878600][ T5925] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 968.933065][ T5904] usb usb6-port1: attempt power cycle [ 968.938807][ T43] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 969.317870][ T5925] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 969.379889][ T5925] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 969.411891][ T5925] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 969.433881][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.453998][T14695] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 969.478983][ T5925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 969.545400][T14703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2317'. [ 969.712797][ T5904] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 969.721008][ T5934] usb 3-1: USB disconnect, device number 47 [ 969.741775][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 969.756674][ T5904] usb 6-1: device descriptor read/8, error -71 [ 970.472148][ T5904] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 970.492057][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 970.499476][ T5904] usb 6-1: device descriptor read/8, error -32 [ 970.614754][ T5904] usb usb6-port1: unable to enumerate USB device [ 970.646225][T14710] overlayfs: missing 'lowerdir' [ 970.782188][ T43] usb 1-1: device descriptor read/all, error -71 [ 972.668354][T14739] [U] „ [ 972.752338][T14744] 9pnet_fd: Insufficient options for proto=fd [ 972.759093][T14743] 9pnet_fd: Insufficient options for proto=fd [ 973.781949][T14752] input: syz1 as /devices/virtual/input/input34 [ 974.547609][T14768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2336'. [ 976.565817][T14772] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 976.576087][T14772] overlayfs: conflicting options: userxattr,metacopy=on [ 978.309434][T14788] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 978.335729][T14788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2339'. [ 978.632209][ T977] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 978.802322][ T5935] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 978.921989][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 979.002196][ T5935] usb 3-1: device descriptor read/64, error -71 [ 979.368474][ T5935] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 979.527003][ T977] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 979.536240][ T977] usb 1-1: can't read configurations, error -71 [ 979.654017][ T5935] usb 3-1: device descriptor read/64, error -71 [ 979.809594][ T5935] usb usb3-port1: attempt power cycle [ 980.882538][ T5935] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 981.748947][ T5935] usb 3-1: device descriptor read/8, error -71 [ 982.004283][T14821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2350'. [ 982.926598][T14835] FAULT_INJECTION: forcing a failure. [ 982.926598][T14835] name failslab, interval 1, probability 0, space 0, times 0 [ 982.948236][T14835] CPU: 0 UID: 0 PID: 14835 Comm: syz.3.2353 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 982.948267][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 982.948282][T14835] Call Trace: [ 982.948292][T14835] [ 982.948302][T14835] dump_stack_lvl+0x189/0x250 [ 982.948338][T14835] ? __pfx____ratelimit+0x10/0x10 [ 982.948371][T14835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 982.948403][T14835] ? __pfx__printk+0x10/0x10 [ 982.948432][T14835] ? __pfx___might_resched+0x10/0x10 [ 982.948462][T14835] ? fs_reclaim_acquire+0x7d/0x100 [ 982.948497][T14835] should_fail_ex+0x414/0x560 [ 982.948529][T14835] should_failslab+0xa8/0x100 [ 982.948560][T14835] __kmalloc_noprof+0xcb/0x4f0 [ 982.948584][T14835] ? kfree+0x4d/0x440 [ 982.948606][T14835] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 982.948646][T14835] tomoyo_realpath_from_path+0xe3/0x5d0 [ 982.948682][T14835] ? tomoyo_domain+0xda/0x130 [ 982.948722][T14835] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 982.948751][T14835] tomoyo_path_number_perm+0x1e8/0x5a0 [ 982.948784][T14835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 982.948831][T14835] ? __lock_acquire+0xab9/0xd20 [ 982.948889][T14835] ? __fget_files+0x2a/0x420 [ 982.948928][T14835] ? __fget_files+0x2a/0x420 [ 982.948956][T14835] ? __fget_files+0x3a0/0x420 [ 982.948984][T14835] ? __fget_files+0x2a/0x420 [ 982.949018][T14835] security_file_ioctl+0xcb/0x2d0 [ 982.949051][T14835] __se_sys_ioctl+0x47/0x170 [ 982.949078][T14835] do_syscall_64+0xfa/0x3b0 [ 982.949110][T14835] ? lockdep_hardirqs_on+0x9c/0x150 [ 982.949143][T14835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.949166][T14835] ? clear_bhb_loop+0x60/0xb0 [ 982.949193][T14835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.949215][T14835] RIP: 0033:0x7f8999f8e929 [ 982.949235][T14835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.949255][T14835] RSP: 002b:00007f899aec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.949280][T14835] RAX: ffffffffffffffda RBX: 00007f899a1b5fa0 RCX: 00007f8999f8e929 [ 982.949297][T14835] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 982.949311][T14835] RBP: 00007f899aec9090 R08: 0000000000000000 R09: 0000000000000000 [ 982.949326][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.949339][T14835] R13: 0000000000000000 R14: 00007f899a1b5fa0 R15: 00007ffd74f99af8 [ 982.949373][T14835] [ 982.949383][T14835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 984.094607][T14848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.348555][T14865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.447115][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 985.627315][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 985.630730][T14861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.723264][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 985.803721][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 985.997423][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 986.021965][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 986.041794][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.071857][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 986.080980][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.238399][T14873] lo speed is unknown, defaulting to 1000 [ 986.377170][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 986.393367][ T10] usbtmc 6-1:16.0: can't read capabilities [ 986.600842][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 986.621886][ T977] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 986.687080][T14873] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2365'. [ 986.702150][T14873] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2365'. [ 986.787161][ T977] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 986.800527][ T977] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 986.814915][T14875] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2365'. [ 986.833079][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 986.847741][ T977] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.860856][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2365'. [ 986.875178][ T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 986.888335][ T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 986.890568][ T977] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 986.911310][ T977] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 986.919782][ T977] usb 4-1: Product: syz [ 986.925991][ T977] usb 4-1: Manufacturer: syz [ 986.934356][T14878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 986.950688][ T977] cdc_wdm 4-1:1.0: skipping garbage [ 986.959727][ T977] cdc_wdm 4-1:1.0: skipping garbage [ 987.131522][ T977] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 987.425275][ T977] cdc_wdm 4-1:1.0: Unknown control protocol [ 987.689724][ T5935] usb 6-1: USB disconnect, device number 13 [ 989.428550][ T43] usb 4-1: USB disconnect, device number 68 [ 991.560437][T14923] netlink: 'syz.5.2376': attribute type 33 has an invalid length. [ 991.602118][T14923] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2376'. [ 992.381852][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 992.381872][ T30] audit: type=1326 audit(2000000341.110:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14929 comm="syz.2.2379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f213a18e929 code=0x0 [ 992.827901][T14942] FAULT_INJECTION: forcing a failure. [ 992.827901][T14942] name failslab, interval 1, probability 0, space 0, times 0 [ 992.841390][T14942] CPU: 1 UID: 0 PID: 14942 Comm: syz.1.2381 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 992.841420][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 992.841435][T14942] Call Trace: [ 992.841444][T14942] [ 992.841454][T14942] dump_stack_lvl+0x189/0x250 [ 992.841493][T14942] ? __pfx____ratelimit+0x10/0x10 [ 992.841527][T14942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.841560][T14942] ? __pfx__printk+0x10/0x10 [ 992.841599][T14942] should_fail_ex+0x414/0x560 [ 992.841633][T14942] should_failslab+0xa8/0x100 [ 992.841665][T14942] __kmalloc_cache_noprof+0x70/0x3d0 [ 992.841695][T14942] ? sctp_add_bind_addr+0x8c/0x370 [ 992.841723][T14942] sctp_add_bind_addr+0x8c/0x370 [ 992.841751][T14942] sctp_copy_local_addr_list+0x30b/0x4e0 [ 992.841792][T14942] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 992.841828][T14942] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 992.841871][T14942] ? sctp_v4_is_any+0x35/0x60 [ 992.841893][T14942] ? sctp_copy_one_addr+0x93/0x360 [ 992.841938][T14942] sctp_bind_addr_copy+0xb3/0x3c0 [ 992.841961][T14942] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 992.841999][T14942] sctp_connect_new_asoc+0x2e0/0x690 [ 992.842032][T14942] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 992.842062][T14942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 992.842090][T14942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 992.842117][T14942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 992.842146][T14942] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 992.842176][T14942] ? security_sctp_bind_connect+0x7e/0x2e0 [ 992.842210][T14942] sctp_sendmsg+0x155c/0x2810 [ 992.842258][T14942] ? __pfx_sctp_sendmsg+0x10/0x10 [ 992.842285][T14942] ? __lock_acquire+0xab9/0xd20 [ 992.842335][T14942] ? sock_rps_record_flow+0x19/0x410 [ 992.842373][T14942] ? inet_sendmsg+0x2f4/0x370 [ 992.842393][T14942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 992.842423][T14942] __sock_sendmsg+0x19c/0x270 [ 992.842461][T14942] __sys_sendto+0x3bd/0x520 [ 992.842489][T14942] ? __pfx___sys_sendto+0x10/0x10 [ 992.842511][T14942] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 992.842562][T14942] ? __fget_files+0x3a0/0x420 [ 992.842605][T14942] ? ksys_write+0x22a/0x250 [ 992.842634][T14942] ? __pfx_ksys_write+0x10/0x10 [ 992.842658][T14942] ? rcu_is_watching+0x15/0xb0 [ 992.842697][T14942] __x64_sys_sendto+0xde/0x100 [ 992.842726][T14942] do_syscall_64+0xfa/0x3b0 [ 992.842760][T14942] ? lockdep_hardirqs_on+0x9c/0x150 [ 992.842792][T14942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.842816][T14942] ? clear_bhb_loop+0x60/0xb0 [ 992.842843][T14942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.842866][T14942] RIP: 0033:0x7f116738e929 [ 992.842886][T14942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.842906][T14942] RSP: 002b:00007f11651f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 992.842929][T14942] RAX: ffffffffffffffda RBX: 00007f11675b6160 RCX: 00007f116738e929 [ 992.842946][T14942] RDX: 000000000000ff04 RSI: 00002000000004c0 RDI: 0000000000000006 [ 992.842962][T14942] RBP: 00007f11651f6090 R08: 00002000000001c0 R09: 0000000000000010 [ 992.842978][T14942] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 992.842992][T14942] R13: 0000000000000000 R14: 00007f11675b6160 R15: 00007ffeb7add9d8 [ 992.843027][T14942] [ 993.314448][T14943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2383'. [ 994.100102][T14953] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2384'. [ 994.257446][T14964] gretap0: entered promiscuous mode [ 994.294646][T14966] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2390'. [ 994.342405][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 994.755985][T14973] FAULT_INJECTION: forcing a failure. [ 994.755985][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 994.768864][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.3.2391 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 994.768895][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 994.768911][T14973] Call Trace: [ 994.768921][T14973] [ 994.768931][T14973] dump_stack_lvl+0x189/0x250 [ 994.768970][T14973] ? __pfx____ratelimit+0x10/0x10 [ 994.769004][T14973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.769038][T14973] ? __pfx__printk+0x10/0x10 [ 994.769076][T14973] ? ref_tracker_alloc+0x318/0x460 [ 994.769110][T14973] should_fail_ex+0x414/0x560 [ 994.769145][T14973] should_failslab+0xa8/0x100 [ 994.769178][T14973] kmem_cache_alloc_noprof+0x73/0x3c0 [ 994.769204][T14973] ? skb_clone+0x212/0x3a0 [ 994.769254][T14973] skb_clone+0x212/0x3a0 [ 994.769288][T14973] __netlink_deliver_tap+0x404/0x850 [ 994.769330][T14973] ? netlink_deliver_tap+0x2e/0x1b0 [ 994.769358][T14973] netlink_deliver_tap+0x19c/0x1b0 [ 994.769386][T14973] netlink_unicast+0x72f/0x8d0 [ 994.769423][T14973] netlink_sendmsg+0x805/0xb30 [ 994.769461][T14973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.769490][T14973] ? rcu_is_watching+0x15/0xb0 [ 994.769528][T14973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 994.769556][T14973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.769584][T14973] __sock_sendmsg+0x21c/0x270 [ 994.769622][T14973] ____sys_sendmsg+0x505/0x830 [ 994.769658][T14973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.769698][T14973] ? import_iovec+0x74/0xa0 [ 994.769725][T14973] ___sys_sendmsg+0x21f/0x2a0 [ 994.769756][T14973] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.769831][T14973] ? __fget_files+0x2a/0x420 [ 994.769860][T14973] ? __fget_files+0x3a0/0x420 [ 994.769903][T14973] __x64_sys_sendmsg+0x19b/0x260 [ 994.769929][T14973] ? schedule+0x165/0x360 [ 994.769962][T14973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 994.770014][T14973] ? do_syscall_64+0xbe/0x3b0 [ 994.770059][T14973] do_syscall_64+0xfa/0x3b0 [ 994.770094][T14973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.770116][T14973] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 994.770139][T14973] ? clear_bhb_loop+0x60/0xb0 [ 994.770167][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.770189][T14973] RIP: 0033:0x7f8999f8e929 [ 994.770209][T14973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.770230][T14973] RSP: 002b:00007f899ae87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.770254][T14973] RAX: ffffffffffffffda RBX: 00007f899a1b6160 RCX: 00007f8999f8e929 [ 994.770271][T14973] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 994.770286][T14973] RBP: 00007f899ae87090 R08: 0000000000000000 R09: 0000000000000000 [ 994.770301][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.770314][T14973] R13: 0000000000000000 R14: 00007f899a1b6160 R15: 00007ffd74f99af8 [ 994.770352][T14973] [ 995.083907][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 995.093202][ T10] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 995.104765][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 995.114029][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 995.126379][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 995.137758][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 995.152368][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 995.161638][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 995.171518][ T10] usb 3-1: Product: syz [ 995.176078][ T10] usb 3-1: Manufacturer: syz [ 995.184649][T14960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 995.193943][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 995.199302][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 995.209665][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 995.215812][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 996.769721][T14989] overlayfs: missing 'lowerdir' [ 996.878606][T14994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2397'. [ 996.898557][T14994] unsupported nlmsg_type 40 [ 998.032419][T14999] loop6: detected capacity change from 0 to 524287999 [ 998.077035][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.083496][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.596407][ T43] usb 3-1: USB disconnect, device number 52 [ 1000.902019][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1000.921895][ T977] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1001.084317][ T977] usb 2-1: config 0 has an invalid interface number: 207 but max is 1 [ 1001.141814][ T5935] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1001.684973][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.749889][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 1002.234420][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1002.271947][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.300524][ T43] usb 6-1: Product: syz [ 1002.317461][ T43] usb 6-1: Manufacturer: syz [ 1002.336468][ T43] usb 6-1: SerialNumber: syz [ 1002.464687][ T43] usb 6-1: bad CDC descriptors [ 1002.942026][ T977] usb 2-1: config 0 has an invalid interface number: 62 but max is 1 [ 1003.000521][T15017] xt_socket: unknown flags 0x50 [ 1003.125544][ T5935] usb 3-1: config index 0 descriptor too short (expected 35, got 9) [ 1004.392635][ T977] usb 2-1: config 0 has no interface number 0 [ 1004.398995][ T977] usb 2-1: config 0 has no interface number 1 [ 1004.578521][ T5935] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1004.597076][ T10] usb 6-1: USB disconnect, device number 14 [ 1004.604469][ T977] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=c2.ae [ 1004.619862][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.662940][ T977] usb 2-1: config 0 descriptor?? [ 1004.670383][ T977] usb 2-1: can't set config #0, error -71 [ 1004.677744][ T977] usb 2-1: USB disconnect, device number 53 [ 1004.740688][ T5935] usb 3-1: string descriptor 0 read error: -71 [ 1004.750658][ T5935] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1004.760785][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.772617][ T5935] usb 3-1: config 0 descriptor?? [ 1004.778256][ T5935] usb 3-1: can't set config #0, error -71 [ 1004.786907][ T5935] usb 3-1: USB disconnect, device number 53 [ 1005.049244][T15042] Can't find a SQUASHFS superblock on nullb0 [ 1010.444303][T15098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2421'. [ 1010.691991][ T977] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1010.842139][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 1010.849556][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1010.865794][ T977] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1010.881823][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.891306][ T977] usb 4-1: Product: syz [ 1010.895913][ T977] usb 4-1: Manufacturer: syz [ 1010.900901][ T977] usb 4-1: SerialNumber: syz [ 1010.929842][ T977] usb 4-1: config 0 descriptor?? [ 1010.953878][ T977] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1011.333590][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1011.460103][T15115] fuse: root generation should be zero [ 1011.479195][ T43] usb 4-1: USB disconnect, device number 69 [ 1011.482118][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1011.497533][T15003] usb 4-1: Failed to submit usb control message: -71 [ 1011.499066][ T977] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1011.522080][T15003] usb 4-1: unable to send the bmi data to the device: -71 [ 1011.528561][ T977] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1011.529260][T15003] usb 4-1: unable to get target info from device [ 1011.560364][T15003] usb 4-1: could not get target info (-71) [ 1011.568951][T15119] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2431'. [ 1011.569922][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1011.578127][T15003] usb 4-1: could not probe fw (-71) [ 1011.610248][ T977] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1011.633590][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.660281][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1011.682464][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.414061][ T977] usb 3-1: GET_CAPABILITIES returned 0 [ 1012.420642][ T977] usbtmc 3-1:16.0: can't read capabilities [ 1012.473620][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 1012.698679][T15140] loop6: detected capacity change from 0 to 524287999 [ 1012.899294][T15147] vlan2: entered promiscuous mode [ 1012.907762][T15147] bridge0: entered promiscuous mode [ 1012.913446][T15147] vlan2: entered allmulticast mode [ 1012.919824][T15147] bridge0: entered allmulticast mode [ 1012.994027][ T43] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1013.984247][ T43] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 1013.992762][ T43] usb 4-1: config 201 has no interface number 0 [ 1013.999091][ T43] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1014.010722][ T43] usb 4-1: config 201 interface 249 has no altsetting 0 [ 1014.020244][ T43] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1014.029824][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.037932][ T43] usb 4-1: Product: syz [ 1014.042217][ T43] usb 4-1: Manufacturer: syz [ 1014.047242][ T43] usb 4-1: SerialNumber: syz [ 1014.069231][ T9144] usb 3-1: USB disconnect, device number 54 [ 1014.326835][ T43] ath6kl: Failed to submit usb control message: -71 [ 1014.334063][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 1014.341416][ T43] ath6kl: Unable to send get target info: -71 [ 1014.350488][ T43] ath6kl: Failed to init ath6kl core: -71 [ 1014.369365][ T43] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1014.394996][ T43] usb 4-1: USB disconnect, device number 70 [ 1014.647325][ T3519] Bluetooth: hci6: Frame reassembly failed (-84) [ 1014.970409][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1015.926227][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1015.982907][ T43] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1016.017752][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1016.038003][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1016.243608][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1016.254294][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1016.268219][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1016.277479][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.632464][T11864] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1016.919779][ T43] usb 2-1: GET_CAPABILITIES returned 0 [ 1016.931872][ T43] usbtmc 2-1:16.0: can't read capabilities [ 1017.362993][T15193] netlink: 'syz.5.2447': attribute type 4 has an invalid length. [ 1017.370960][T15193] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2447'. [ 1017.454390][T15193] vlan2: entered allmulticast mode [ 1017.459698][T15193] vlan1: entered allmulticast mode [ 1017.465011][T15193] veth0_vlan: entered allmulticast mode [ 1017.480456][T15193] bridge0: port 3(vlan2) entered blocking state [ 1017.487868][T15193] bridge0: port 3(vlan2) entered disabled state [ 1017.512541][T15193] vlan2: entered promiscuous mode [ 1017.517767][T15193] vlan1: entered promiscuous mode [ 1017.527531][T15193] bridge0: port 3(vlan2) entered blocking state [ 1017.534113][T15193] bridge0: port 3(vlan2) entered forwarding state [ 1017.947179][ T5934] usb 2-1: USB disconnect, device number 54 [ 1018.389366][T15197] fuse: Unknown parameter 'use00000000000000000000' [ 1018.531644][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2452'. [ 1018.564152][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 1018.570618][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 1019.200647][T14412] libceph: connect (1)[c::]:6789 error -101 [ 1019.248905][T14412] libceph: mon0 (1)[c::]:6789 connect error [ 1019.793085][T14412] libceph: connect (1)[c::]:6789 error -101 [ 1020.019552][T14412] libceph: mon0 (1)[c::]:6789 connect error [ 1020.123183][T15203] ceph: No mds server is up or the cluster is laggy [ 1020.302158][ T5934] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1021.267518][ T5934] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 1021.299133][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.332310][ T5934] usb 2-1: Product: syz [ 1021.336560][ T5934] usb 2-1: Manufacturer: syz [ 1021.569043][ T5934] usb 2-1: SerialNumber: syz [ 1021.582679][ T5934] usb 2-1: config 0 descriptor?? [ 1021.599615][ T5934] upd78f0730 2-1:0.0: upd78f0730 converter detected [ 1021.616963][ T5934] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 1023.011432][ T5934] usb 2-1: USB disconnect, device number 55 [ 1023.019940][ T5934] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1023.037965][T15260] fuse: Unknown parameter 'use00000000000000000000' [ 1023.045136][ T5934] upd78f0730 2-1:0.0: device disconnected [ 1024.447428][T15258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.181933][ T43] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1026.378873][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1026.416774][ T43] usb 4-1: config 1 has no interface number 1 [ 1026.452341][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.475859][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.493399][ T43] usb 4-1: Product: syz [ 1026.498040][ T43] usb 4-1: Manufacturer: syz [ 1026.521626][ T43] usb 4-1: SerialNumber: syz [ 1026.817699][T15292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.850319][T15292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.988219][ T43] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1027.050379][T15293] syz.1.2472: attempt to access beyond end of device [ 1027.050379][T15293] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1027.064563][T15293] hfsplus: unable to find HFS+ superblock [ 1027.398702][ T43] usb 4-1: USB disconnect, device number 71 [ 1027.731996][T14412] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1027.806902][T15306] fuse: Unknown parameter 'use00000000000000000000' [ 1027.894199][T14412] usb 1-1: Using ep0 maxpacket: 16 [ 1027.942511][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.969937][T14412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.013509][T14412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1028.062009][T14412] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1028.086664][T14412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.168330][T14412] usb 1-1: config 0 descriptor?? [ 1030.687062][T14412] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 1031.133551][T15317] random: crng reseeded on system resumption [ 1031.451059][T15337] Can't find a SQUASHFS superblock on nullb0 [ 1032.215547][T14412] shield 0003:0955:7214.001D: Registered Thunderstrike controller [ 1032.258337][T14412] shield 0003:0955:7214.001D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1032.624044][ T5934] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1032.636353][T14412] usb 1-1: USB disconnect, device number 71 [ 1032.649489][ T5934] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1032.797989][ T5934] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1032.811386][ T5934] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1034.401118][ T30] audit: type=1326 audit(2000000382.530:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15355 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213a18e929 code=0x7ffc0000 [ 1034.685642][ T30] audit: type=1326 audit(2000000382.530:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15355 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213a18e929 code=0x7ffc0000 [ 1034.720002][ T30] audit: type=1326 audit(2000000382.530:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15355 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f213a18e929 code=0x7ffc0000 [ 1035.005946][ T30] audit: type=1326 audit(2000000382.530:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15355 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213a18e929 code=0x7ffc0000 [ 1035.042073][ T30] audit: type=1326 audit(2000000382.530:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15355 comm="syz.2.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213a18e929 code=0x7ffc0000 [ 1035.158814][ T30] audit: type=1326 audit(2000000383.890:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15366 comm="syz.5.2495" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7615f8e929 code=0x0 [ 1036.733849][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2500'. [ 1041.432243][T15440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1043.987367][T15469] fuse: Bad value for 'fd' [ 1044.269411][T15469] lo speed is unknown, defaulting to 1000 [ 1044.346998][ T977] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1044.532339][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 1044.565699][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.629523][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.767143][ T977] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1044.786806][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.808215][ T977] usb 2-1: config 0 descriptor?? [ 1045.221958][T14412] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1045.236451][ T977] wacom 0003:056A:0084.001E: unbalanced collection at end of report description [ 1045.247708][ T977] wacom 0003:056A:0084.001E: parse failed [ 1045.254089][ T977] wacom 0003:056A:0084.001E: probe with driver wacom failed with error -22 [ 1045.406920][T14412] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1045.454652][T14412] usb 4-1: can't read configurations, error -61 [ 1045.643620][T14412] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1045.859844][ T977] usb 2-1: USB disconnect, device number 56 [ 1045.900423][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2529'. [ 1045.994428][T14412] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1046.008895][T14412] usb 4-1: can't read configurations, error -61 [ 1046.016139][T14412] usb usb4-port1: attempt power cycle [ 1046.236918][T15500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1046.312034][ T5935] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1046.362390][T14412] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1046.398826][T14412] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1046.417896][T14412] usb 4-1: can't read configurations, error -61 [ 1046.430641][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1046.464620][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 1046.481096][ T5935] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 218, changing to 11 [ 1046.494874][ T5935] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1046.510497][ T5935] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 959 [ 1046.551972][T14412] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1046.570051][ T5935] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1046.579814][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1046.605312][T14412] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1046.616419][T14412] usb 4-1: can't read configurations, error -61 [ 1046.623210][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.634732][T14412] usb usb4-port1: unable to enumerate USB device [ 1046.650108][T15505] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1046.660044][ T5935] usb 3-1: Product: syz [ 1046.666932][ T5935] usb 3-1: Manufacturer: syz [ 1046.802973][ T5935] usb 3-1: SerialNumber: syz [ 1046.970425][T15491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1047.054311][T15491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1047.319677][ T5935] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1047.336067][ T5935] usb 3-1: USB disconnect, device number 55 [ 1047.541834][ T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1047.552335][ T5925] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1047.714638][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1047.722212][ T5925] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1047.730685][ T5925] usb 1-1: config 0 has no interface number 0 [ 1047.741843][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1047.751206][ T43] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1047.759639][ T43] usb 2-1: Product: syz [ 1047.763893][ T43] usb 2-1: Manufacturer: syz [ 1047.768555][ T43] usb 2-1: SerialNumber: syz [ 1047.774309][ T5925] usb 1-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice=a2.95 [ 1047.784679][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.793447][ T43] usb 2-1: config 0 descriptor?? [ 1047.798592][ T5925] usb 1-1: Product: syz [ 1047.802901][ T5925] usb 1-1: Manufacturer: syz [ 1047.809568][ T43] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1047.816483][ T5925] usb 1-1: SerialNumber: syz [ 1047.824720][ T5925] usb 1-1: config 0 descriptor?? [ 1047.832749][ T5925] usb 1-1: NDI device with a latency value of 1 [ 1048.068751][T15509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1048.158355][T15509] overlayfs: failed to set xattr on upper [ 1048.171082][T15509] overlayfs: ...falling back to uuid=null. [ 1048.547064][ T5925] ftdi_sio 1-1:0.8: FTDI USB Serial Device converter detected [ 1048.556831][ T43] gspca_zc3xx: reg_r err -110 [ 1048.590156][ T43] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1048.645795][ T5925] ftdi_sio ttyUSB0: unknown device type: 0xa295 [ 1048.796013][ T5925] usb 1-1: USB disconnect, device number 72 [ 1048.857108][ T5925] ftdi_sio 1-1:0.8: device disconnected [ 1049.113536][ T5935] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1049.262034][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1050.172032][ T5935] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1050.331935][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1050.392377][T14412] usb 2-1: USB disconnect, device number 57 [ 1050.452914][ T5935] usb usb3-port1: attempt power cycle [ 1050.756378][T15552] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1051.212313][ T5935] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1051.243438][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1051.272189][ T5934] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1051.512046][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 1051.634117][ T5934] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1051.714988][ T5935] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1051.792187][ T5934] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1051.890983][ T5934] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.176485][ T5934] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1052.206861][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1052.232622][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.243648][ T5934] usb 2-1: Product: syz [ 1052.247885][ T5934] usb 2-1: Manufacturer: syz [ 1052.252926][ T5934] usb 2-1: SerialNumber: syz [ 1052.276836][ T30] audit: type=1326 audit(2000000401.010:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15563 comm="syz.0.2553" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed2058e929 code=0x0 [ 1052.332274][ T5935] usb usb3-port1: unable to enumerate USB device [ 1052.412536][T15575] fuse: Bad value for 'fd' [ 1052.472491][ T31] INFO: task syz.4.2108:13973 blocked for more than 143 seconds. [ 1052.480350][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 1052.493074][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1052.511460][ T31] task:syz.4.2108 state:D stack:26344 pid:13973 tgid:13971 ppid:5826 task_flags:0x400740 flags:0x00004004 [ 1052.524408][ T31] Call Trace: [ 1052.586088][ T31] [ 1052.720839][ T5934] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1052.727788][ T31] __schedule+0x16a2/0x4cb0 [ 1052.736768][ T31] ? finish_task_switch+0x18b/0x950 [ 1052.742211][ T31] ? schedule+0x165/0x360 [ 1052.746612][ T31] ? __lock_acquire+0xab9/0xd20 [ 1052.752407][ T31] ? __pfx___schedule+0x10/0x10 [ 1052.757311][ T31] ? schedule+0x91/0x360 [ 1052.761583][ T31] schedule+0x165/0x360 [ 1052.762139][ T5935] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1052.779613][ T31] schedule_timeout+0x9a/0x270 [ 1052.799144][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1052.807149][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1052.814711][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1052.830627][ T31] __wait_for_common+0x3da/0x710 [ 1052.968262][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1053.022890][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1053.054392][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1053.076799][ T31] wait_for_completion_state+0x1c/0x40 [ 1053.094934][ T31] do_coredump+0x831/0x3440 [ 1053.099712][ T31] ? kernel_text_address+0xa5/0xe0 [ 1053.124688][ T31] ? __pfx_do_coredump+0x10/0x10 [ 1053.131023][ T31] ? arch_stack_walk+0xfc/0x150 [ 1053.136198][ T31] ? stack_trace_save+0x9c/0xe0 [ 1053.145768][ T31] ? kasan_save_track+0x4f/0x80 [ 1053.151756][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 1053.152706][ T31] ? kasan_save_track+0x3e/0x80 [ 1053.165635][ T31] ? kasan_save_free_info+0x46/0x50 [ 1053.175109][ T31] ? __kasan_slab_free+0x62/0x70 [ 1053.181314][ T31] ? kmem_cache_free+0x18f/0x400 [ 1053.190654][ T31] ? get_signal+0xa2b/0x1310 [ 1053.190730][ T5935] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1053.195391][ T31] ? arch_do_signal_or_restart+0x9a/0x750 [ 1053.195426][ T31] ? exit_to_user_mode_loop+0x75/0x110 [ 1053.195456][ T31] ? do_syscall_64+0x2bd/0x3b0 [ 1053.195491][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.196886][ T31] ? proc_coredump_connector+0x172/0x4b0 [ 1053.259575][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1053.266462][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1053.272183][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.273534][ T5935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1053.277552][ T31] get_signal+0x10d9/0x1310 [ 1053.293876][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1053.299597][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1053.307092][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1053.308859][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1053.325732][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1053.327445][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1053.331229][ T31] do_syscall_64+0x2bd/0x3b0 [ 1053.341349][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.346071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.365616][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.369209][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1053.371941][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1053.386886][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.389100][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.401498][ T31] RIP: 0033:0x7fccab18e929 [ 1053.411088][ T31] RSP: 002b:00007fccac06a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1053.419998][ T31] RAX: ffffffffffffffda RBX: 00007fccab3b6088 RCX: 00007fccab18e929 [ 1053.428318][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fccab3b608c [ 1053.436513][ T31] RBP: 00007fccab3b6080 R08: 7fffffffffffffff R09: 0000000000000000 [ 1053.444645][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fccab3b608c [ 1053.452840][ T31] R13: 0000000000000000 R14: 00007ffd97b45e10 R15: 00007ffd97b45ef8 [ 1053.460930][ T31] [ 1053.464145][ T31] [ 1053.464145][ T31] Showing all locks held in the system: [ 1053.475953][ T31] 1 lock held by khungtaskd/31: [ 1053.480867][ T31] #0: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1053.506366][ T31] 2 locks held by getty/5589: [ 1053.511128][ T31] #0: ffff88803115a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1053.523568][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1053.534009][ T31] 6 locks held by kworker/0:4/5934: [ 1053.539249][ T31] #0: ffff8880212ae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1053.550734][ T31] #1: ffffc90004e67bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1053.562789][ T31] #2: ffff888028314198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1053.572220][ T31] #3: ffff88801e2cb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1053.581614][ T31] #4: ffff88801e6af160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1053.588196][ T5934] usb 2-1: current rate 3490603 is different from the runtime rate 9338507 [ 1053.591023][ T31] #5: ffffffff8f48bae8 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1e10 [ 1053.612056][ T31] 5 locks held by kworker/0:5/5935: [ 1053.617301][ T31] #0: ffff8880212ae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1053.623561][ T5935] usb 3-1: GET_CAPABILITIES returned 0 [ 1053.628898][ T31] #1: [ 1053.634729][ T5935] usbtmc 3-1:16.0: can't read capabilities [ 1053.649004][ T31] ffffc90004ec7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1053.660727][ T31] #2: ffffffff99c76c28 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 1053.675816][ T31] #3: ffffffff99c25130 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 1053.686905][ T31] #4: ffff88823be8a098 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x53/0x820 [ 1053.701072][ T31] 2 locks held by syz.0.2553/15573: [ 1053.707395][ T31] [ 1053.709787][ T31] ============================================= [ 1053.709787][ T31] [ 1053.721749][ T31] NMI backtrace for cpu 1 [ 1053.721771][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1053.721797][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.721811][ T31] Call Trace: [ 1053.721820][ T31] [ 1053.721830][ T31] dump_stack_lvl+0x189/0x250 [ 1053.721866][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1053.721893][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1053.721926][ T31] ? __pfx__printk+0x10/0x10 [ 1053.721962][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1053.721995][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1053.722020][ T31] ? _printk+0xcf/0x120 [ 1053.722057][ T31] ? __pfx__printk+0x10/0x10 [ 1053.722081][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1053.722111][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1053.722142][ T31] watchdog+0xfee/0x1030 [ 1053.722171][ T31] ? watchdog+0x1de/0x1030 [ 1053.722206][ T31] kthread+0x70e/0x8a0 [ 1053.722239][ T31] ? __pfx_watchdog+0x10/0x10 [ 1053.722264][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.722290][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1053.722320][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.722349][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.722372][ T31] ret_from_fork+0x3fc/0x770 [ 1053.722403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.722438][ T31] ? __switch_to_asm+0x39/0x70 [ 1053.722458][ T31] ? __switch_to_asm+0x33/0x70 [ 1053.722476][ T31] ? __pfx_kthread+0x10/0x10 [ 1053.722499][ T31] ret_from_fork_asm+0x1a/0x30 [ 1053.722535][ T31] [ 1053.722543][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1053.879986][ C0] NMI backtrace for cpu 0 [ 1053.880005][ C0] CPU: 0 UID: 0 PID: 5934 Comm: kworker/0:4 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1053.880027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.880041][ C0] Workqueue: usb_hub_wq hub_event [ 1053.880074][ C0] RIP: 0010:memcpy_orig+0x25/0x130 [ 1053.880095][ C0] Code: 90 90 90 90 90 48 89 f8 48 83 fa 20 72 7e 40 38 fe 7c 35 48 83 ea 20 48 83 ea 20 4c 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b 5e 18 <48> 8d 76 20 4c 89 07 4c 89 4f 08 4c 89 57 10 4c 89 5f 18 48 8d 7f [ 1053.880112][ C0] RSP: 0018:ffffc90004e67728 EFLAGS: 00000002 [ 1053.880128][ C0] RAX: ffffc900169b5008 RBX: 0000000000000003 RCX: 0000000000000003 [ 1053.880141][ C0] RDX: 0000000000061fd0 RSI: ffffc900197bc6e8 RDI: ffffc90016bb66e8 [ 1053.880156][ C0] RBP: 00000000002636f0 R08: ffffffff871b321f R09: ffffffff871b3125 [ 1053.880170][ C0] R10: ffffffff871ac6ad R11: ffffffff871ac8a7 R12: ffffc900195bb000 [ 1053.880184][ C0] R13: ffff888026aeef08 R14: ffff88802f530000 R15: ffff888026aeef00 [ 1053.880200][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 1053.880216][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1053.880230][ C0] CR2: 00007fed20781178 CR3: 00000000351d8000 CR4: 00000000003526f0 [ 1053.880247][ C0] Call Trace: [ 1053.880255][ C0] [ 1053.880262][ C0] kcov_remote_stop+0x54a/0x6d0 [ 1053.880290][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1053.880314][ C0] hub_event+0x45bd/0x4a00 [ 1053.880371][ C0] ? __pfx_hub_event+0x10/0x10 [ 1053.880399][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1053.880431][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1053.880457][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1053.880485][ C0] process_scheduled_works+0xade/0x17b0 [ 1053.880528][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1053.880565][ C0] worker_thread+0x8a0/0xda0 [ 1053.880607][ C0] kthread+0x70e/0x8a0 [ 1053.880628][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1053.880655][ C0] ? __pfx_kthread+0x10/0x10 [ 1053.880675][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1053.880700][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.880726][ C0] ? __pfx_kthread+0x10/0x10 [ 1053.880745][ C0] ret_from_fork+0x3fc/0x770 [ 1053.880771][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.880799][ C0] ? __switch_to_asm+0x39/0x70 [ 1053.880822][ C0] ? __switch_to_asm+0x33/0x70 [ 1053.880839][ C0] ? __pfx_kthread+0x10/0x10 [ 1053.880859][ C0] ret_from_fork_asm+0x1a/0x30 [ 1053.880887][ C0] [ 1054.125316][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1054.132237][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1054.142338][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.152407][ T31] Call Trace: [ 1054.155705][ T31] [ 1054.158664][ T31] dump_stack_lvl+0x99/0x250 [ 1054.163300][ T31] ? __asan_memcpy+0x40/0x70 [ 1054.167912][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.173157][ T31] ? __pfx__printk+0x10/0x10 [ 1054.177781][ T31] panic+0x2db/0x790 [ 1054.181723][ T31] ? __pfx_panic+0x10/0x10 [ 1054.186178][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1054.192021][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1054.197424][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1054.203624][ T31] watchdog+0x102d/0x1030 [ 1054.207977][ T31] ? watchdog+0x1de/0x1030 [ 1054.212418][ T31] kthread+0x70e/0x8a0 [ 1054.216503][ T31] ? __pfx_watchdog+0x10/0x10 [ 1054.221198][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.225803][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1054.231042][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.236299][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.240922][ T31] ret_from_fork+0x3fc/0x770 [ 1054.245547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1054.250696][ T31] ? __switch_to_asm+0x39/0x70 [ 1054.255479][ T31] ? __switch_to_asm+0x33/0x70 [ 1054.260277][ T31] ? __pfx_kthread+0x10/0x10 [ 1054.264889][ T31] ret_from_fork_asm+0x1a/0x30 [ 1054.269684][ T31] [ 1054.273028][ T31] Kernel Offset: disabled [ 1054.277365][ T31] Rebooting in 86400 seconds..