last executing test programs: 14.293890047s ago: executing program 4 (id=1549): r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b", 0x19}], 0x2) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x0) bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x496, &(0x7f00000005c0)={0x0, 0x7075, 0x0, 0x14, 0x28b, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000380)) socket$l2tp6(0xa, 0x2, 0x73) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x3, 0x2, 0x1000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x8, 0x4, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2, 0x4, 0x2, 0x0, 0x4cd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x14f9, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0xfffffffc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x648c0000, 0x2, 0x0, 0xfffffffd]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 10.873114884s ago: executing program 1 (id=1553): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x48}}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000380)={0xeebc8ad36783bdcc, 0x0, &(0x7f0000ced000/0x4000)=nil}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 9.730560249s ago: executing program 1 (id=1556): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 8.470883734s ago: executing program 3 (id=1557): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x2b4}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$isdn(0x22, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4000004) sched_setscheduler(0x0, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x0, 0x3, 0x4, 0x100000000, 0xf, 0x0, {0x0, 0x20000, 0x0, 0x3, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000ac0)={&(0x7f0000000500)={0x50, 0x0, 0x6, {0x7, 0x29, 0x0, 0xffffffffe04180d0, 0xa, 0x1, 0x80000414, 0x8000, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) 8.425289838s ago: executing program 4 (id=1558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, 0x8) 7.755997542s ago: executing program 4 (id=1559): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/225, 0xe1}], 0x1) 7.321907637s ago: executing program 3 (id=1562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000100)}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000180)=@filename='./file0\x00', r1, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x5, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_init(0x1, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r5, 0x101, 0x6, &(0x7f0000000200), 0x4) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r7, 0x0) open$dir(0x0, 0x700, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 6.305332105s ago: executing program 1 (id=1567): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_WKALM_SET(r0, 0x4008700e, &(0x7f0000000040)={0x1, 0x0, {0x31, 0x0, 0x9, 0xa, 0x0, 0x50, 0x0, 0x14b, 0xffffffffffffffff}}) 5.599578104s ago: executing program 0 (id=1568): socket$netlink(0x10, 0x3, 0x12) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gre0\x00'}) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) semget$private(0x0, 0x1, 0x210) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000380)=""/135, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, r4, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10000004, 0x101}, 0x10, 0x0, r4, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x2000009}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket(0x1e, 0x4, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000340)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pimreg1\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) openat(r0, &(0x7f0000000100)='./file0\x00', 0x101080, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 5.543037307s ago: executing program 1 (id=1569): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000001c0)=0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) 5.469345608s ago: executing program 2 (id=1570): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 4.802732626s ago: executing program 2 (id=1571): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x2, 0x0, 0x1, 0xfffa, 0x7fe}, 0x20) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 4.646896631s ago: executing program 4 (id=1572): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpid() r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x80, 0x1d4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 4.133218374s ago: executing program 2 (id=1573): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a800100", 0xe) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setpgid(0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r3, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) 3.679608029s ago: executing program 2 (id=1574): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(0x0, 0x2) fcntl$dupfd(r1, 0x406, r0) socket$packet(0x11, 0x3, 0x300) unshare(0x6020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffd, 0x80000c}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffff8, 0x9, 0x0, 0x0, 0x7ffffffd, 0x3}, 0x0, 0x0) 3.500994168s ago: executing program 4 (id=1575): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x300, 0x3000040, 0x8, 0x1b, 0xfe, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r3, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.277311003s ago: executing program 0 (id=1576): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3f, 0x800000000004, @thr={&(0x7f0000000440)="5349283b48b5dabf12796dfa84be", 0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 3.050364185s ago: executing program 0 (id=1577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 2.939555705s ago: executing program 3 (id=1578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403fc08c806405c0ba375"], 0xe) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x26202) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0x100000, 0x4000, 0x5, 0x0, 0x7}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200) ioctl$NBD_DO_IT(r4, 0xab03) socket$pppoe(0x18, 0x1, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x400c840) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$TCSETS(r7, 0x8925, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x7, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x321681, 0x0) 2.756497962s ago: executing program 2 (id=1579): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x8, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) socket$kcm(0x11, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0), &(0x7f0000000440)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000480)={{0x0, 0x2, 0x0, 0x3}}) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) readlinkat(r1, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)=""/48, 0x30) fchdir(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x6a) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) times(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 2.261727881s ago: executing program 3 (id=1580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaa"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={'\x00', 0x9, 0x9, 0xfffffffe, 0x2, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x82001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2.050147607s ago: executing program 2 (id=1581): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x3388}], 0x1, 0x800) 1.905172818s ago: executing program 0 (id=1582): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 1.848024212s ago: executing program 1 (id=1583): io_submit(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fstat(r1, &(0x7f0000000140)) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x19}, 0x0) 1.669012526s ago: executing program 1 (id=1584): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x4, {0x0, 0xfffffffc, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x6, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, &(0x7f00000007c0), 0x4) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x400455c8, 0x1000000000000002) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffbfffc0) openat$cgroup_ro(r1, &(0x7f0000000200)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x8) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f00000001c0)=0x100, 0x4) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="9b", 0x1}], 0x1}, 0x4000051) 1.056680764s ago: executing program 4 (id=1585): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x10}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) preadv(r7, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/130, 0x82}], 0x1, 0x0, 0x7f) write(r6, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1, 0xc) fcntl$setstatus(r9, 0x4, 0x2000) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0xc92) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) 983.002401ms ago: executing program 3 (id=1586): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000c00)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4008000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB], 0x48) migrate_pages(r1, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000b00)=0x6) r9 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r9, 0xc0044dff, &(0x7f0000000100)=0x9) 873.135353ms ago: executing program 0 (id=1587): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 717.676384ms ago: executing program 0 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060000000080000001"], 0x48) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x9, 0x100, 0x1, 0x0, 0x1, 0x2, 0x4, 0x1, 0x17, 0x0, 0x0, 0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x12b040, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0xc46f, 0x10000, 0x2, 0x3f, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) 0s ago: executing program 3 (id=1589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000005"]) r2 = dup(r0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000003c0)={@loopback, 0x23}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x2, 0xc9, 0xc9, 0x5}}}, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): 674227][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.761577][ T8512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.693'. [ 435.903595][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.947168][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.005639][ T10] usb 5-1: config 0 descriptor?? [ 436.047517][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 436.062469][ T8515] xt_CT: No such helper "snmp" [ 436.068244][ T8492] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.088669][ T8512] tipc: Started in network mode [ 436.093626][ T8512] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 436.138122][ T8512] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 436.163547][ T8512] tipc: Enabled bearer , priority 10 [ 436.525399][ T10] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 436.570273][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 436.591745][ T8541] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 436.615477][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 436.666574][ T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 436.690975][ T8544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.699'. [ 436.850256][ T8541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.050992][ T8554] 9pnet_fd: Insufficient options for proto=fd [ 437.278571][ T5959] tipc: Node number set to 1 [ 437.701656][ T8541] bond1 (unregistering): Released all slaves [ 437.731672][ T8551] 9pnet_fd: Insufficient options for proto=fd [ 437.776240][ T5959] usb 5-1: USB disconnect, device number 8 [ 438.018217][ T30] audit: type=1326 audit(1753568434.233:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 438.059088][ T8570] 9pnet_fd: Insufficient options for proto=fd [ 438.347146][ T30] audit: type=1326 audit(1753568434.343:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 438.368641][ T30] audit: type=1326 audit(1753568434.353:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 438.467156][ T30] audit: type=1326 audit(1753568434.743:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 438.574112][ T8573] syzkaller1: entered promiscuous mode [ 438.579696][ T8573] syzkaller1: entered allmulticast mode [ 438.693978][ T8575] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 438.716150][ T30] audit: type=1326 audit(1753568435.003:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 438.766570][ T30] audit: type=1326 audit(1753568435.003:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 438.841639][ T8581] FAULT_INJECTION: forcing a failure. [ 438.841639][ T8581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.870768][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.4.712 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 438.870793][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.870804][ T8581] Call Trace: [ 438.870812][ T8581] [ 438.870821][ T8581] dump_stack_lvl+0x189/0x250 [ 438.870846][ T8581] ? __pfx____ratelimit+0x10/0x10 [ 438.870867][ T8581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.870888][ T8581] ? __pfx__printk+0x10/0x10 [ 438.870912][ T8581] ? __might_fault+0xb0/0x130 [ 438.870941][ T8581] should_fail_ex+0x414/0x560 [ 438.870965][ T8581] _copy_from_user+0x2d/0xb0 [ 438.870992][ T8581] ___sys_sendmsg+0x158/0x2a0 [ 438.871025][ T8581] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.871101][ T8581] ? __fget_files+0x2a/0x420 [ 438.871122][ T8581] ? __fget_files+0x3a0/0x420 [ 438.871154][ T8581] __x64_sys_sendmsg+0x19b/0x260 [ 438.871185][ T8581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.871230][ T8581] ? __pfx_ksys_write+0x10/0x10 [ 438.871245][ T8581] ? rcu_is_watching+0x15/0xb0 [ 438.871271][ T8581] ? do_syscall_64+0xbe/0x3b0 [ 438.871295][ T8581] do_syscall_64+0xfa/0x3b0 [ 438.871315][ T8581] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.871334][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.871352][ T8581] ? clear_bhb_loop+0x60/0xb0 [ 438.871375][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.871393][ T8581] RIP: 0033:0x7f165f98e9a9 [ 438.871409][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.871425][ T8581] RSP: 002b:00007f166089c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.871443][ T8581] RAX: ffffffffffffffda RBX: 00007f165fbb5fa0 RCX: 00007f165f98e9a9 [ 438.871457][ T8581] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 438.871469][ T8581] RBP: 00007f166089c090 R08: 0000000000000000 R09: 0000000000000000 [ 438.871480][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.871491][ T8581] R13: 0000000000000000 R14: 00007f165fbb5fa0 R15: 00007fff7578a6a8 [ 438.871520][ T8581] [ 438.879891][ T30] audit: type=1326 audit(1753568435.003:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.220739][ T30] audit: type=1326 audit(1753568435.003:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.265922][ T30] audit: type=1326 audit(1753568435.113:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.353945][ T30] audit: type=1326 audit(1753568435.113:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.390370][ T30] audit: type=1326 audit(1753568435.113:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.416053][ T30] audit: type=1326 audit(1753568435.113:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.471549][ T8595] xt_TCPMSS: Only works on TCP SYN packets [ 439.481460][ T30] audit: type=1326 audit(1753568435.113:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.569974][ T30] audit: type=1326 audit(1753568435.113:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.592271][ T30] audit: type=1326 audit(1753568435.113:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.613786][ T30] audit: type=1326 audit(1753568435.113:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.635427][ T30] audit: type=1326 audit(1753568435.113:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 439.646346][ T8595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.713691][ T8598] 9pnet_fd: Insufficient options for proto=fd [ 439.959341][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970933][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.157371][ T30] audit: type=1326 audit(1753568435.113:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa58e9a9 code=0x7fc00000 [ 440.398575][ T8595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.467990][ T8606] syz_tun: entered allmulticast mode [ 440.495612][ T8609] CIFS mount error: No usable UNC path provided in device string! [ 440.495612][ T8609] [ 440.588293][ T8609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 440.688530][ T8595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.387025][ T8600] syz_tun: left allmulticast mode [ 441.491575][ T8595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.061340][ T8627] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 442.185691][ T8595] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.293403][ T8595] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.418770][ T8595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.438802][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 442.470311][ T8638] netlink: 39 bytes leftover after parsing attributes in process `syz.1.728'. [ 442.541823][ T8595] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.717997][ T8646] 9pnet_fd: Insufficient options for proto=fd [ 442.864660][ T8643] 9pnet_fd: Insufficient options for proto=fd [ 443.355060][ T8650] syzkaller1: entered promiscuous mode [ 443.361104][ T8650] syzkaller1: entered allmulticast mode [ 443.836749][ T8660] CIFS mount error: No usable UNC path provided in device string! [ 443.836749][ T8660] [ 443.852578][ T8660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.875011][ T8662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 444.077420][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 444.238002][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 444.272423][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.295854][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.343758][ T5959] wg0 speed is unknown, defaulting to 1000 [ 444.353837][ T10] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 444.382642][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.431521][ T10] usb 2-1: config 0 descriptor?? [ 444.518464][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 444.528507][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.740'. [ 444.540615][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 444.549713][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 444.670308][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 444.682486][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 444.693447][ T10] usb 2-1: USB disconnect, device number 11 [ 444.717524][ T8080] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 444.747481][ T5919] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 444.870009][ T8080] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 444.879781][ T8080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.890956][ T8080] usb 5-1: config 0 descriptor?? [ 444.927409][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 444.938198][ T5919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 444.945830][ T5919] usb 1-1: can't read configurations, error -61 [ 445.077212][ T5919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 445.227146][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 445.242056][ T5919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.257332][ T5919] usb 1-1: can't read configurations, error -61 [ 445.445491][ T5919] usb usb1-port1: attempt power cycle [ 445.773343][ T8080] ath6kl: mismatched byte count 0 vs. expected 12 [ 445.826751][ T8080] ath6kl: Failed to init ath6kl core: -22 [ 445.843370][ T8080] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 445.994786][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 446.062294][ T8669] hsr_slave_1 (unregistering): left promiscuous mode [ 446.157361][ T5919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 446.468352][ T8686] 9pnet_fd: Insufficient options for proto=fd [ 446.484410][ T8080] usb 5-1: USB disconnect, device number 9 [ 446.498195][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 446.506456][ T5919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 446.514472][ T5919] usb 1-1: can't read configurations, error -61 [ 446.647323][ T5919] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 446.688070][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 446.696393][ T5919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 446.706330][ T5919] usb 1-1: can't read configurations, error -61 [ 446.713548][ T5919] usb usb1-port1: unable to enumerate USB device [ 446.724964][ T8689] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 446.748380][ T8689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.756827][ T8689] bond1: (slave wlan0): Opening slave failed [ 447.059113][ T8700] CIFS mount error: No usable UNC path provided in device string! [ 447.059113][ T8700] [ 447.070701][ T8700] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 447.177296][ T5919] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 447.282227][ T8705] x_tables: duplicate underflow at hook 2 [ 447.307172][ T5919] usb 2-1: device descriptor read/64, error -71 [ 448.091921][ T5919] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 448.161960][ T8713] CUSE: info not properly terminated [ 448.267350][ T5919] usb 2-1: device descriptor read/64, error -71 [ 448.333870][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 448.398196][ T8719] comedi comedi2: pcl816: I/O port conflict (0x209e1,16) [ 448.418094][ T5919] usb usb2-port1: attempt power cycle [ 448.576995][ T8722] overlay: ./file0 is not a directory [ 448.978920][ T5919] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 449.160400][ T5919] usb 2-1: device descriptor read/8, error -71 [ 449.233099][ T8729] 9pnet_fd: Insufficient options for proto=fd [ 449.837280][ T5919] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 449.851437][ T8731] CIFS mount error: No usable UNC path provided in device string! [ 449.851437][ T8731] [ 449.863897][ T8731] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.877011][ T5919] usb 2-1: device descriptor read/8, error -71 [ 450.022626][ T5919] usb usb2-port1: unable to enumerate USB device [ 450.475310][ T8745] IPVS: length: 129 != 8 [ 450.609881][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 450.754982][ T8753] Illegal XDP return value 4294967274 on prog (id 158) dev N/A, expect packet loss! [ 450.807234][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 450.833442][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.892564][ T10] usb 1-1: Product: syz [ 450.900086][ T10] usb 1-1: Manufacturer: syz [ 450.904786][ T10] usb 1-1: SerialNumber: syz [ 450.938856][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.044329][ T5919] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.170573][ T8758] overlay: ./file0 is not a directory [ 451.233575][ T8761] syz_tun: entered allmulticast mode [ 451.320536][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 451.735806][ T8742] dlm: non-version read from control device 211 [ 451.745203][ T8742] dlm: non-version read from control device 211 [ 451.751679][ T8742] dlm: non-version read from control device 211 [ 451.758121][ T8742] dlm: non-version read from control device 211 [ 451.764489][ T8742] dlm: non-version read from control device 211 [ 451.770854][ T8742] dlm: non-version read from control device 211 [ 451.777256][ T8742] dlm: non-version read from control device 211 [ 451.783591][ T8742] dlm: non-version read from control device 211 [ 451.789968][ T8742] dlm: non-version read from control device 211 [ 451.796285][ T8742] dlm: non-version read from control device 211 [ 451.802668][ T8742] dlm: non-version read from control device 211 [ 451.809156][ T8742] dlm: non-version read from control device 211 [ 451.815478][ T8742] dlm: non-version read from control device 211 [ 451.821863][ T8742] dlm: non-version read from control device 211 [ 451.828403][ T8742] dlm: non-version read from control device 211 [ 451.834726][ T8742] dlm: non-version read from control device 211 [ 451.841109][ T8742] dlm: non-version read from control device 211 [ 451.847449][ T8742] dlm: non-version read from control device 211 [ 451.853765][ T8742] dlm: non-version read from control device 211 [ 451.860266][ T8742] dlm: non-version read from control device 211 [ 451.866579][ T8742] dlm: non-version read from control device 211 [ 451.872950][ T8742] dlm: non-version read from control device 211 [ 451.879325][ T8742] dlm: non-version read from control device 211 [ 451.885641][ T8742] dlm: non-version read from control device 211 [ 451.891995][ T8742] dlm: non-version read from control device 211 [ 451.898351][ T8742] dlm: non-version read from control device 211 [ 451.904663][ T8742] dlm: non-version read from control device 211 [ 451.911298][ T8742] dlm: non-version read from control device 211 [ 451.917685][ T8742] dlm: non-version read from control device 211 [ 451.923999][ T8742] dlm: non-version read from control device 211 [ 451.930368][ T8742] dlm: non-version read from control device 211 [ 451.936684][ T8742] dlm: non-version read from control device 211 [ 451.943058][ T8742] dlm: non-version read from control device 211 [ 451.949464][ T8742] dlm: non-version read from control device 211 [ 451.955789][ T8742] dlm: non-version read from control device 211 [ 451.962362][ T8742] dlm: non-version read from control device 211 [ 451.968725][ T8742] dlm: non-version read from control device 211 [ 451.975035][ T8742] dlm: non-version read from control device 211 [ 451.981377][ T8742] dlm: non-version read from control device 211 [ 451.987723][ T8742] dlm: non-version read from control device 211 [ 451.994044][ T8742] dlm: non-version read from control device 211 [ 452.000406][ T8742] dlm: non-version read from control device 211 [ 452.006740][ T8742] dlm: non-version read from control device 211 [ 452.013332][ T8742] dlm: non-version read from control device 211 [ 452.019724][ T8742] dlm: non-version read from control device 211 [ 452.026041][ T8742] dlm: non-version read from control device 211 [ 452.032496][ T8742] dlm: non-version read from control device 211 [ 452.038876][ T8742] dlm: non-version read from control device 211 [ 452.045210][ T8742] dlm: non-version read from control device 211 [ 452.051577][ T8742] dlm: non-version read from control device 211 [ 452.057933][ T8742] dlm: non-version read from control device 211 [ 452.064317][ T8742] dlm: non-version read from control device 211 [ 452.070900][ T8742] dlm: non-version read from control device 211 [ 452.077259][ T8742] dlm: non-version read from control device 211 [ 452.083575][ T8742] dlm: non-version read from control device 211 [ 452.089934][ T8742] dlm: non-version read from control device 211 [ 452.096251][ T8742] dlm: non-version read from control device 211 [ 452.102636][ T8742] dlm: non-version read from control device 211 [ 452.108985][ T8742] dlm: non-version read from control device 211 [ 452.115455][ T8742] dlm: non-version read from control device 211 [ 452.121814][ T8742] dlm: non-version read from control device 211 [ 452.128171][ T8742] dlm: non-version read from control device 211 [ 452.134503][ T8742] dlm: non-version read from control device 211 [ 452.140886][ T8742] dlm: non-version read from control device 211 [ 452.147259][ T8742] dlm: non-version read from control device 211 [ 452.153574][ T8742] dlm: non-version read from control device 211 [ 452.159944][ T8742] dlm: non-version read from control device 211 [ 452.166413][ T8742] dlm: non-version read from control device 211 [ 452.172793][ T8742] dlm: non-version read from control device 211 [ 452.179141][ T8742] dlm: non-version read from control device 211 [ 452.185453][ T8742] dlm: non-version read from control device 211 [ 452.191800][ T8742] dlm: non-version read from control device 211 [ 452.198147][ T8742] dlm: non-version read from control device 211 [ 452.204461][ T8742] dlm: non-version read from control device 211 [ 452.210809][ T8742] dlm: non-version read from control device 211 [ 452.217288][ T8742] dlm: non-version read from control device 211 [ 452.223611][ T8742] dlm: non-version read from control device 211 [ 452.230012][ T8742] dlm: non-version read from control device 211 [ 452.236345][ T8742] dlm: non-version read from control device 211 [ 452.242734][ T8742] dlm: non-version read from control device 211 [ 452.249070][ T8742] dlm: non-version read from control device 211 [ 452.255377][ T8742] dlm: non-version read from control device 211 [ 452.261738][ T8742] dlm: non-version read from control device 211 [ 452.268235][ T8742] dlm: non-version read from control device 211 [ 452.274547][ T8742] dlm: non-version read from control device 211 [ 452.280898][ T8742] dlm: non-version read from control device 211 [ 452.287229][ T8742] dlm: non-version read from control device 211 [ 452.293536][ T8742] dlm: non-version read from control device 211 [ 452.299871][ T8742] dlm: non-version read from control device 211 [ 452.306180][ T8742] dlm: non-version read from control device 211 [ 452.312639][ T8742] dlm: non-version read from control device 211 [ 452.319133][ T8742] dlm: non-version read from control device 211 [ 452.325441][ T8742] dlm: non-version read from control device 211 [ 452.331808][ T8742] dlm: non-version read from control device 211 [ 452.338254][ T8742] dlm: non-version read from control device 211 [ 452.344567][ T8742] dlm: non-version read from control device 211 [ 452.350917][ T8742] dlm: non-version read from control device 211 [ 452.357273][ T8742] dlm: non-version read from control device 211 [ 452.363590][ T8742] dlm: non-version read from control device 211 [ 452.384307][ T8770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 452.394651][ T8770] 9pnet_fd: Insufficient options for proto=fd [ 452.401705][ T5919] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 452.461575][ T5919] ath9k_htc: Failed to initialize the device [ 452.474867][ T8759] syz_tun: left allmulticast mode [ 452.535654][ T5919] usb 1-1: ath9k_htc: USB layer deinitialized [ 452.992837][ T8774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.031180][ T8774] lo: entered allmulticast mode [ 453.036690][ T8772] lo: left allmulticast mode [ 453.049693][ T8775] FAULT_INJECTION: forcing a failure. [ 453.049693][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.063080][ T8775] CPU: 0 UID: 0 PID: 8775 Comm: syz.1.771 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 453.063109][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.063118][ T8775] Call Trace: [ 453.063126][ T8775] [ 453.063132][ T8775] dump_stack_lvl+0x189/0x250 [ 453.063161][ T8775] ? __pfx____ratelimit+0x10/0x10 [ 453.063178][ T8775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.063195][ T8775] ? __pfx__printk+0x10/0x10 [ 453.063225][ T8775] should_fail_ex+0x414/0x560 [ 453.063245][ T8775] _copy_to_user+0x31/0xb0 [ 453.063269][ T8775] bpf_test_finish+0x1ab/0x700 [ 453.063299][ T8775] ? __pfx_bpf_test_finish+0x10/0x10 [ 453.063325][ T8775] ? bpf_test_init+0x133/0x170 [ 453.063357][ T8775] bpf_prog_test_run_xdp+0x79a/0x1000 [ 453.063401][ T8775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 453.063433][ T8775] ? __fget_files+0x2a/0x420 [ 453.063456][ T8775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 453.063476][ T8775] bpf_prog_test_run+0x2c7/0x340 [ 453.063500][ T8775] __sys_bpf+0x4a4/0x860 [ 453.063520][ T8775] ? __pfx___sys_bpf+0x10/0x10 [ 453.063548][ T8775] ? ksys_write+0x22a/0x250 [ 453.063561][ T8775] ? __pfx_ksys_write+0x10/0x10 [ 453.063572][ T8775] ? rcu_is_watching+0x15/0xb0 [ 453.063592][ T8775] __x64_sys_bpf+0x7c/0x90 [ 453.063610][ T8775] do_syscall_64+0xfa/0x3b0 [ 453.063624][ T8775] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.063638][ T8775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.063651][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 453.063667][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.063679][ T8775] RIP: 0033:0x7ff6fa58e9a9 [ 453.063692][ T8775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.063703][ T8775] RSP: 002b:00007ff6fb478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.063717][ T8775] RAX: ffffffffffffffda RBX: 00007ff6fa7b5fa0 RCX: 00007ff6fa58e9a9 [ 453.063727][ T8775] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 453.063735][ T8775] RBP: 00007ff6fb478090 R08: 0000000000000000 R09: 0000000000000000 [ 453.063743][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.063751][ T8775] R13: 0000000000000000 R14: 00007ff6fa7b5fa0 R15: 00007ffff6221638 [ 453.063771][ T8775] [ 453.613081][ T1208] usb 1-1: USB disconnect, device number 27 [ 453.716206][ T8786] nftables ruleset with unbound set [ 454.017917][ T8797] overlay: ./file0 is not a directory [ 454.387976][ T8805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 454.402843][ T8805] 9pnet_fd: Insufficient options for proto=fd [ 455.037382][ T1208] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 455.391154][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 455.421503][ T1208] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 455.433408][ T1208] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 455.490827][ T1208] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 455.544877][ T1208] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 455.598750][ T1208] usb 5-1: config 0 interface 0 has no altsetting 0 [ 455.616452][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 455.630620][ T1208] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 455.646249][ T1208] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 455.667508][ T1208] usb 5-1: Product: syz [ 455.682401][ T1208] usb 5-1: Manufacturer: syz [ 455.691455][ T1208] usb 5-1: SerialNumber: syz [ 455.722716][ T1208] usb 5-1: config 0 descriptor?? [ 455.735033][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 455.750489][ T1208] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 455.781208][ T8828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.784117][ T1208] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 455.890053][ T8828] syz_tun: entered allmulticast mode [ 455.895835][ T8827] syz_tun: left allmulticast mode [ 456.311398][ T43] usb 5-1: USB disconnect, device number 10 [ 456.320781][ T43] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 456.398779][ T8846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'. [ 456.414339][ T8846] 9pnet_fd: Insufficient options for proto=fd [ 457.046555][ T8850] fuse: Bad value for 'fd' [ 457.157186][ T5919] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 457.215513][ T8856] overlay: ./file0 is not a directory [ 457.311465][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 457.347262][ T5919] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 457.388278][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.434133][ T5919] usb 2-1: config 0 descriptor?? [ 457.478631][ T8848] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 457.519530][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 457.950503][ T8877] fuse: Bad value for 'fd' [ 458.117971][ T8881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.177853][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 458.841560][ T5919] uclogic 0003:5543:0003.000B: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 458.861659][ T8881] syz_tun: entered allmulticast mode [ 458.877488][ T8880] syz_tun: left allmulticast mode [ 459.027501][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 459.034523][ T43] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.045514][ T43] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.064777][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.082643][ T43] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 459.106933][ T43] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 459.143679][ T43] usb 5-1: Product: syz [ 459.181067][ T8887] overlay: ./file0 is not a directory [ 459.213343][ T43] usb 5-1: config 0 descriptor?? [ 459.674876][ T43] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 459.704863][ T43] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 459.734168][ T43] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 459.754430][ T43] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 459.754777][ T8897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.762764][ T43] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 459.826495][ T43] waterforce 0003:1044:7A4D.000C: hidraw1: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 459.845318][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.884137][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.896545][ T8897] syz_tun: entered allmulticast mode [ 459.905492][ T8896] syz_tun: left allmulticast mode [ 459.967920][ T43] waterforce 0003:1044:7A4D.000C: fw version request failed with -38 [ 460.020809][ T43] usb 5-1: USB disconnect, device number 11 [ 460.275309][ T8902] fido_id[8902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 460.378389][ T8906] syz_tun: entered allmulticast mode [ 461.249415][ T8905] syz_tun: left allmulticast mode [ 461.874400][ T8917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.906119][ T8917] lo: entered allmulticast mode [ 461.912341][ T8916] lo: left allmulticast mode [ 462.836428][ T8080] usb 2-1: USB disconnect, device number 16 [ 462.898065][ T8925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.937996][ T8929] CIFS mount error: No usable UNC path provided in device string! [ 462.937996][ T8929] [ 462.977422][ T8929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 463.075475][ T8925] lo: entered allmulticast mode [ 463.081222][ T8924] lo: left allmulticast mode [ 463.150234][ T8938] syz_tun: entered allmulticast mode [ 464.012886][ T8936] syz_tun: left allmulticast mode [ 464.288534][ T8950] 9pnet_fd: Insufficient options for proto=fd [ 464.294717][ T30] kauditd_printk_skb: 263 callbacks suppressed [ 464.294732][ T30] audit: type=1326 audit(1753568460.573:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 464.412927][ T8951] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.421228][ T8951] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.429528][ T8951] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.437792][ T8951] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.516121][ T8958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.836'. [ 464.686876][ T30] audit: type=1326 audit(1753568460.573:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 464.745342][ T30] audit: type=1326 audit(1753568460.743:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 464.824835][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'. [ 464.834319][ T8956] netlink: 84 bytes leftover after parsing attributes in process `syz.0.835'. [ 464.902684][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.094376][ T30] audit: type=1326 audit(1753568461.373:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8947 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 465.227449][ T1208] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 465.394607][ T8971] 9pnet_fd: Insufficient options for proto=fd [ 465.399778][ T1208] usb 5-1: Using ep0 maxpacket: 8 [ 465.411858][ T1208] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 465.431081][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.454130][ T1208] usb 5-1: Product: syz [ 465.479381][ T1208] usb 5-1: Manufacturer: syz [ 465.494221][ T1208] usb 5-1: SerialNumber: syz [ 465.516227][ T1208] usb 5-1: config 0 descriptor?? [ 465.885805][ T8963] syz_tun: entered allmulticast mode [ 465.987272][ T8080] hid-generic 0000:0004:0034.000D: unknown main item tag 0x0 [ 466.085362][ T8080] hid-generic 0000:0004:0034.000D: unknown main item tag 0x0 [ 466.188558][ T8080] hid-generic 0000:0004:0034.000D: unknown main item tag 0x0 [ 466.257422][ T8990] netlink: 'syz.1.846': attribute type 39 has an invalid length. [ 466.396981][ T8080] hid-generic 0000:0004:0034.000D: hidraw0: HID v0.0e Device [syz0] on syz1 [ 468.494619][ T8963] syz_tun: left allmulticast mode [ 468.539475][ T1208] gspca_main: sq905-2.14.0 probing 2770:9120 [ 468.564196][ T1208] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 468.593826][ T1208] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 468.630687][ T1208] usb 5-1: USB disconnect, device number 12 [ 468.788003][ T30] audit: type=1326 audit(1753568465.083:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 468.840256][ T9005] 9pnet_fd: Insufficient options for proto=fd [ 468.892556][ T30] audit: type=1326 audit(1753568465.133:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 468.990639][ T30] audit: type=1326 audit(1753568465.283:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.054015][ T30] audit: type=1326 audit(1753568465.283:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.156352][ T30] audit: type=1326 audit(1753568465.283:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.238394][ T5959] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 469.409962][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.451078][ T5959] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 469.480868][ T30] audit: type=1326 audit(1753568465.773:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.606566][ T5959] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 469.677364][ T30] audit: type=1326 audit(1753568465.773:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.686805][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.719570][ T30] audit: type=1326 audit(1753568465.773:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.774358][ T30] audit: type=1326 audit(1753568465.773:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.812442][ T5959] usb 2-1: config 0 descriptor?? [ 469.838999][ T30] audit: type=1326 audit(1753568465.773:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 469.985957][ T30] audit: type=1326 audit(1753568465.773:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8998 comm="syz.2.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 470.012201][ T5959] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 470.043190][ T5959] dvb-usb: bulk message failed: -22 (3/0) [ 470.252831][ T5959] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 470.359013][ T5959] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 470.406294][ T5959] usb 2-1: media controller created [ 470.584057][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.613952][ T9010] dvb-usb: bulk message failed: -22 (2/0) [ 470.626049][ T9010] netlink: 160 bytes leftover after parsing attributes in process `syz.1.852'. [ 470.665183][ T5959] dvb-usb: bulk message failed: -22 (6/0) [ 470.686784][ T5959] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 470.708876][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 470.782011][ T5959] dvb-usb: schedule remote query interval to 150 msecs. [ 470.886466][ T5959] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 470.948210][ T9036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.859'. [ 470.957267][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 471.022034][ T5959] usb 2-1: USB disconnect, device number 17 [ 471.083426][ T5959] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 471.247338][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 471.530787][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.586233][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.681098][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.742363][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.814091][ T10] usb 1-1: SerialNumber: syz [ 472.136044][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.473369][ T10] usb 1-1: 0:2 : does not exist [ 472.533756][ T10] usb 1-1: USB disconnect, device number 28 [ 472.630554][ T8934] udevd[8934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.693867][ T9055] 9pnet_fd: Insufficient options for proto=fd [ 472.707182][ T5892] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 472.714871][ T30] audit: type=1326 audit(1753568468.983:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 473.027111][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 473.174281][ T5892] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 473.227650][ T30] audit: type=1326 audit(1753568469.233:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 473.227728][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.287654][ T30] audit: type=1326 audit(1753568469.293:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 473.309091][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.407107][ T9058] syzkaller1: entered promiscuous mode [ 473.412998][ T9058] syzkaller1: entered allmulticast mode [ 473.457208][ T30] audit: type=1326 audit(1753568469.553:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 473.637216][ T5892] usb 2-1: Product: syz [ 473.707206][ T5892] usb 2-1: Manufacturer: syz [ 473.711844][ T5892] usb 2-1: SerialNumber: syz [ 473.845082][ T5892] usb 2-1: config 0 descriptor?? [ 474.060871][ T9072] bridge_slave_1: left allmulticast mode [ 474.097172][ T9072] bridge_slave_1: left promiscuous mode [ 474.104319][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.389000][ T5899] hid-generic 0000:0004:0034.000E: unknown main item tag 0x0 [ 474.426723][ T9072] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 474.559966][ T5899] hid-generic 0000:0004:0034.000E: unknown main item tag 0x0 [ 474.668004][ T5899] hid-generic 0000:0004:0034.000E: unknown main item tag 0x0 [ 475.009359][ T5899] hid-generic 0000:0004:0034.000E: hidraw0: HID v0.0e Device [syz0] on syz1 [ 475.769731][ T9075] lo: entered allmulticast mode [ 476.807885][ T9073] syz.2.872 (9073) used greatest stack depth: 19040 bytes left [ 477.159547][ T9046] lo: left allmulticast mode [ 477.212735][ T5892] gspca_main: sq905-2.14.0 probing 2770:9120 [ 477.247320][ T5892] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 477.283538][ T5892] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 477.326160][ T5892] usb 2-1: USB disconnect, device number 18 [ 477.376269][ T9096] fuse: Invalid rootmode [ 477.797228][ T9104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 477.803790][ T9104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.813792][ T9104] vhci_hcd vhci_hcd.0: Device attached [ 478.192090][ T9105] vhci_hcd: connection closed [ 478.192490][ T6082] vhci_hcd: stop threads [ 478.217600][ T6082] vhci_hcd: release socket [ 478.226084][ T30] kauditd_printk_skb: 434 callbacks suppressed [ 478.226097][ T30] audit: type=1326 audit(1753568474.513:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 478.229237][ T6082] vhci_hcd: disconnect device [ 478.232718][ T5899] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 478.266254][ T9121] 9pnet_fd: Insufficient options for proto=fd [ 478.403370][ T30] audit: type=1326 audit(1753568474.693:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 478.451591][ T30] audit: type=1326 audit(1753568474.723:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 478.508407][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 478.577285][ T5959] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 478.680173][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.747020][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 478.747420][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 478.749520][ T5959] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 478.825759][ T5892] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.870971][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.875087][ T30] audit: type=1326 audit(1753568475.153:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322e98e9a9 code=0x7fc00000 [ 478.881858][ T5959] usb 1-1: config 0 has no interface number 0 [ 478.937206][ T5892] usb 5-1: config 1 interface 0 has no altsetting 0 [ 478.939419][ T5959] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 478.956812][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.984545][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.998916][ T5959] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.017540][ T5959] usb 1-1: config 0 interface 52 has no altsetting 0 [ 479.021050][ T5892] usb 5-1: Product: syz [ 479.027330][ T5959] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 479.037286][ T5892] usb 5-1: Manufacturer: syz [ 479.042093][ T5959] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 479.050509][ T5892] usb 5-1: SerialNumber: syz [ 479.075798][ T5959] usb 1-1: Manufacturer: syz [ 479.116117][ T5959] usb 1-1: config 0 descriptor?? [ 479.135092][ T5959] hub 1-1:0.52: bad descriptor, ignoring hub [ 479.144718][ T5959] hub 1-1:0.52: probe with driver hub failed with error -5 [ 479.259640][ T9142] autofs: Unknown parameter './file0' [ 479.266870][ T9142] fuse: Unknown parameter '$' [ 479.352241][ T5959] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input20 [ 479.575699][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.853982][ T30] audit: type=1326 audit(1753568476.143:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9159 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 479.883097][ T9161] 9pnet_fd: Insufficient options for proto=fd [ 479.896207][ T30] audit: type=1326 audit(1753568476.163:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9159 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 479.934430][ T30] audit: type=1326 audit(1753568476.173:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9159 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 479.971018][ T30] audit: type=1326 audit(1753568476.263:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9159 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 480.337995][ T9176] overlayfs: failed to clone upperpath [ 480.581312][ T30] audit: type=1326 audit(1753568476.873:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9159 comm="syz.3.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 480.779333][ T9188] trusted_key: syz.3.909 sent an empty control message without MSG_MORE. [ 480.813659][ T9188] xt_ipcomp: unknown flags 12 [ 480.968452][ T9192] nft_compat: unsupported protocol 0 [ 481.062897][ T5919] usb 5-1: USB disconnect, device number 13 [ 481.745985][ T5892] usb 1-1: USB disconnect, device number 29 [ 482.022604][ T9207] syz_tun: entered allmulticast mode [ 482.974746][ T9206] syz_tun: left allmulticast mode [ 483.161778][ T9219] evm: overlay not supported [ 483.214607][ T9219] veth0_to_bridge: entered promiscuous mode [ 483.221250][ T9217] veth0_to_bridge: left promiscuous mode [ 483.701994][ T5899] vhci_hcd: vhci_device speed not set [ 483.755196][ T9230] bridge_slave_0: left allmulticast mode [ 483.770871][ T9230] bridge_slave_0: left promiscuous mode [ 483.786959][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.822680][ T9230] bridge_slave_1: left allmulticast mode [ 483.853067][ T9230] bridge_slave_1: left promiscuous mode [ 483.882379][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.943652][ T9238] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 483.953471][ T9230] bond0: (slave bond_slave_0): Releasing backup interface [ 484.100407][ T9230] bond0: (slave bond_slave_1): Releasing backup interface [ 484.189047][ T9242] overlay: ./file0 is not a directory [ 484.483819][ T30] audit: type=1326 audit(1753568480.703:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9244 comm="syz.3.928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x0 [ 484.498904][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 484.710739][ T9230] team0: Port device team_slave_0 removed [ 484.789697][ T5919] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 484.822417][ T9230] team0: Port device team_slave_1 removed [ 484.867300][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.876558][ T9253] x_tables: duplicate underflow at hook 2 [ 484.903405][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.943950][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.966292][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.069129][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.076666][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.365357][ T9249] tmpfs: Bad value for 'mpol' [ 485.774538][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.786852][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.800202][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 485.820735][ T5919] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 485.822396][ T9260] lo: entered allmulticast mode [ 485.837264][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 485.860584][ T5919] usb 1-1: Product: syz [ 485.872506][ T5919] usb 1-1: config 0 descriptor?? [ 486.740815][ T9259] lo: left allmulticast mode [ 487.526567][ T5919] waltop 0003:172F:0037.000F: unknown main item tag 0x0 [ 487.534167][ T5919] waltop 0003:172F:0037.000F: unknown main item tag 0x0 [ 487.555854][ T5919] waltop 0003:172F:0037.000F: unknown main item tag 0x0 [ 487.607612][ T5919] waltop 0003:172F:0037.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 487.734984][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.936'. [ 487.772256][ T9282] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 487.792115][ T9282] overlayfs: failed to set xattr on upper [ 487.805527][ T9282] overlayfs: ...falling back to redirect_dir=nofollow. [ 487.811969][ T9230] team0: Mode changed to "loadbalance" [ 487.821469][ T9282] overlayfs: ...falling back to index=off. [ 487.836074][ T9282] overlayfs: ...falling back to uuid=null. [ 487.852886][ T5892] usb 1-1: USB disconnect, device number 30 [ 487.869229][ T9282] overlayfs: ...falling back to xino=off. [ 489.378878][ T9302] syz_tun: entered allmulticast mode [ 490.203944][ T9300] syz_tun: left allmulticast mode [ 490.558780][ T9314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.508210][ T9314] lo: entered allmulticast mode [ 492.513972][ T9313] lo: left allmulticast mode [ 492.606893][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.953'. [ 492.693984][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.953'. [ 492.705895][ T9323] netlink: 92 bytes leftover after parsing attributes in process `syz.3.953'. [ 492.737536][ T9328] netlink: 'syz.1.954': attribute type 5 has an invalid length. [ 492.888849][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 492.898058][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.958'. [ 492.906943][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 492.921885][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.958'. [ 492.931518][ T9335] netlink: 'syz.0.958': attribute type 6 has an invalid length. [ 493.155273][ T9346] lo: entered allmulticast mode [ 493.176129][ T9345] lo: left allmulticast mode [ 493.514084][ T9352] siw: device registration error -23 [ 494.886424][ T9362] netlink: 'syz.1.967': attribute type 5 has an invalid length. [ 495.402656][ T9375] syz_tun: entered allmulticast mode [ 495.860550][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 496.302299][ T9373] syz_tun: left allmulticast mode [ 496.378994][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 496.583765][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.615724][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 496.624679][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.656823][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 496.676926][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.678398][ T9382] bridge0: port 3(team0) entered disabled state [ 496.714108][ T10] usb 5-1: config 0 descriptor?? [ 497.596008][ T10] hid-u2fzero 0003:10C4:8ACF.0010: unknown main item tag 0x3 [ 497.615898][ T10] hid-u2fzero 0003:10C4:8ACF.0010: item fetching failed at offset 4/5 [ 497.656523][ T10] hid-u2fzero 0003:10C4:8ACF.0010: probe with driver hid-u2fzero failed with error -22 [ 497.699929][ T9404] netlink: 'syz.1.981': attribute type 5 has an invalid length. [ 497.749112][ T10] usb 5-1: USB disconnect, device number 14 [ 498.018484][ T9417] lo: entered allmulticast mode [ 498.045551][ T9416] lo: left allmulticast mode [ 498.255428][ T9424] netlink: 84 bytes leftover after parsing attributes in process `syz.2.987'. [ 498.281625][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 499.219987][ T9431] CIFS mount error: No usable UNC path provided in device string! [ 499.219987][ T9431] [ 499.308728][ T9431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.034918][ T9438] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 501.357950][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.364384][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.565596][ T9457] 9pnet_fd: Insufficient options for proto=fd [ 501.967367][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 502.132036][ T9460] lo: entered allmulticast mode [ 502.218759][ T10] usb 2-1: device descriptor read/64, error -71 [ 503.570407][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 503.766226][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1000'. [ 506.010867][ T9512] netlink: 'syz.4.1015': attribute type 2 has an invalid length. [ 507.497431][ T5941] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 507.674541][ T5941] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 507.694990][ T5941] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 507.723040][ T5941] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 507.881142][ T5941] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 507.904549][ T5941] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 507.926866][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.765318][ T9529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.781815][ T9529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.798496][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1020'. [ 509.037926][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 509.151505][ T5941] ath6kl: Failed to submit usb control message: -71 [ 509.178548][ T5941] ath6kl: unable to send the bmi data to the device: -71 [ 509.208637][ T5941] ath6kl: Unable to send get target info: -71 [ 509.224212][ T5941] ath6kl: Failed to init ath6kl core: -71 [ 509.234346][ T5941] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 509.258731][ T5941] usb 1-1: USB disconnect, device number 31 [ 509.814309][ T9566] lo: entered allmulticast mode [ 510.793879][ T9564] lo: left allmulticast mode [ 511.740132][ T9580] Invalid source name [ 511.744245][ T9580] UBIFS error (pid: 9580): cannot open "/dev/sg0", error -22 [ 512.035177][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 513.754138][ T9618] nvme_fabrics: missing parameter 'transport=%s' [ 513.762866][ T9618] nvme_fabrics: missing parameter 'nqn=%s' [ 513.898138][ T30] audit: type=1326 audit(1753568510.193:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 513.901859][ T9629] 9pnet_fd: Insufficient options for proto=fd [ 514.133805][ T30] audit: type=1326 audit(1753568510.353:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 514.628730][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 514.666229][ T9629] syzkaller1: entered promiscuous mode [ 514.674597][ T9629] syzkaller1: entered allmulticast mode [ 514.877144][ T30] audit: type=1326 audit(1753568511.163:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.017155][ T9641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.056608][ T30] audit: type=1326 audit(1753568511.163:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.522735][ T9641] overlayfs: missing 'lowerdir' [ 515.577866][ T9637] bdev: Unknown parameter 'rDma' [ 515.647552][ T30] audit: type=1326 audit(1753568511.163:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.690404][ T30] audit: type=1326 audit(1753568511.163:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.713995][ T30] audit: type=1326 audit(1753568511.163:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.739499][ T30] audit: type=1326 audit(1753568511.203:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.790681][ T30] audit: type=1326 audit(1753568511.203:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 515.869736][ T30] audit: type=1326 audit(1753568511.203:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9622 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165f98e9a9 code=0x7fc00000 [ 516.309492][ T9670] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.318411][ T9670] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.327241][ T9670] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.335970][ T9670] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.956693][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 516.971875][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 517.157198][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 517.187531][ T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 517.230352][ T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 517.274383][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.318563][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.339999][ T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 517.406656][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 517.426045][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.448801][ T10] usb 2-1: Product: syz [ 517.460715][ T10] usb 2-1: Manufacturer: syz [ 517.470922][ T10] usb 2-1: SerialNumber: syz [ 517.590517][ T10] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 517.612957][ T10] imon 2-1:155.0: unable to initialize intf0, err -90 [ 517.736564][ T10] imon:imon_probe: failed to initialize context! [ 517.754004][ T10] imon 2-1:155.0: unable to register, err -19 [ 518.284061][ T5919] usb 2-1: USB disconnect, device number 21 [ 518.506686][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 519.205298][ T9702] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 519.277653][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 519.301394][ T10] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32 [ 519.318947][ T10] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 519.335381][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 519.459494][ T9698] syz.4.1071 (9698) used greatest stack depth: 15696 bytes left [ 519.546578][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 519.566178][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.575897][ T10] usb 1-1: Product: 愌뷹뽡リꐳ볇叽䛨㲯綎१ᔰ뮣ꤽ䙐䅼ꐙ٘끷৐㇬篬듎ऺ㠌➣걸챑鬄쨛묁씄왳ᶋơ厲錉ꌀ旭榀瓶궯쒸᭸ﻻ異韔懾釯碠ვ禋嚎ឡ℩䕪뻾霭쾟⛎┐쿹ᵲ稠ᗊ쐀䬨釁꫙쓳 [ 520.333950][ T10] usb 1-1: Manufacturer: Г [ 520.342759][ T10] usb 1-1: SerialNumber: 䀁 [ 520.360280][ T9693] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 520.392149][ T9693] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 520.616029][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 520.616047][ T30] audit: type=1326 audit(1753568516.903:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.486265][ T30] audit: type=1326 audit(1753568516.903:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.535453][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1078'. [ 521.545948][ T30] audit: type=1326 audit(1753568516.903:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.578695][ T30] audit: type=1326 audit(1753568516.903:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.601466][ T30] audit: type=1326 audit(1753568516.903:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.623735][ T30] audit: type=1326 audit(1753568516.903:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.655574][ T30] audit: type=1326 audit(1753568516.913:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.678255][ T30] audit: type=1326 audit(1753568516.913:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.700441][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 521.708343][ T30] audit: type=1326 audit(1753568516.913:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 521.737282][ T30] audit: type=1326 audit(1753568516.913:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.0.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e4d8e9a9 code=0x7ffc0000 [ 522.007138][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 522.016019][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 522.057121][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.089237][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 522.103512][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.124757][ T43] usb 2-1: Product: syz [ 522.132116][ T43] usb 2-1: Manufacturer: syz [ 522.152330][ T43] usb 2-1: SerialNumber: syz [ 522.157443][ T10] usb 1-1: USB disconnect, device number 32 [ 522.164926][ T43] usb 2-1: config 0 descriptor?? [ 522.206846][ T43] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 522.225790][ T43] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 522.392569][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.401797][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.823827][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.846772][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.873259][ T9718] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 522.895358][ T43] em28xx 2-1:0.0: chip ID is em2874 [ 523.108730][ T10] usb 2-1: USB disconnect, device number 22 [ 523.125243][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 523.158633][ T10] em28xx 2-1:0.0: Freeing device [ 523.210840][ T9749] overlay: ./file0 is not a directory [ 523.229528][ T9751] syz_tun: entered allmulticast mode [ 523.990831][ T9774] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 524.061908][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 524.077339][ T9774] netlink: 'syz.0.1098': attribute type 6 has an invalid length. [ 524.086174][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 524.464452][ T9750] syz_tun: left allmulticast mode [ 524.978094][ T9799] overlay: ./file0 is not a directory [ 525.475721][ T9807] syz.0.1106: attempt to access beyond end of device [ 525.475721][ T9807] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 525.489051][ T9807] hpfs: hpfs_map_sector(): read error [ 526.392205][ T9814] syz_tun: entered allmulticast mode [ 526.397475][ T9813] CIFS mount error: No usable UNC path provided in device string! [ 526.397475][ T9813] [ 526.535595][ T9813] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 527.265849][ T9812] syz_tun: left allmulticast mode [ 527.416137][ T9820] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 527.472621][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 527.637940][ T9829] binder: 9828:9829 ioctl c0306201 0 returned -14 [ 529.432043][ T9858] overlay: ./file0 is not a directory [ 529.768806][ T9862] syz_tun: entered allmulticast mode [ 530.621052][ T9861] syz_tun: left allmulticast mode [ 531.021165][ T9868] lo: entered allmulticast mode [ 532.993198][ T9867] lo: left allmulticast mode [ 534.088645][ T9910] Cannot find set identified by id 0 to match [ 534.202002][ T9916] netlink: 'syz.3.1142': attribute type 2 has an invalid length. [ 534.214058][ T9916] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1142'. [ 534.223898][ T9916] nbd: must specify at least one socket [ 534.810435][ T9922] syz_tun: entered allmulticast mode [ 535.699050][ T9917] syz_tun: left allmulticast mode [ 536.196496][ T9943] bridge0: port 3(team0) entered blocking state [ 536.202890][ T9943] bridge0: port 3(team0) entered disabled state [ 536.209361][ T9943] team0: entered allmulticast mode [ 536.214490][ T9943] team_slave_0: entered allmulticast mode [ 536.220256][ T9943] team_slave_1: entered allmulticast mode [ 536.226008][ T9943] bond0: entered allmulticast mode [ 536.231155][ T9943] bond_slave_0: entered allmulticast mode [ 536.236894][ T9943] bond_slave_1: entered allmulticast mode [ 536.245230][ T9943] team0: entered promiscuous mode [ 536.250350][ T9943] team_slave_0: entered promiscuous mode [ 536.256151][ T9943] team_slave_1: entered promiscuous mode [ 536.261961][ T9943] bond0: entered promiscuous mode [ 536.267057][ T9943] bond_slave_0: entered promiscuous mode [ 536.273459][ T9943] bond_slave_1: entered promiscuous mode [ 536.279967][ T9943] bridge0: port 3(team0) entered blocking state [ 536.286276][ T9943] bridge0: port 3(team0) entered forwarding state [ 536.839819][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 536.906273][ T9956] siw: device registration error -23 [ 537.786886][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.801190][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 537.810660][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.841157][ T43] usb 2-1: config 0 descriptor?? [ 538.279329][ T43] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0011/input/input22 [ 538.373588][ T43] uclogic 0003:28BD:0933.0011: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 538.476518][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.497623][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.704812][ T10] usb 2-1: USB disconnect, device number 23 [ 540.844888][ T9998] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 540.859513][ T9998] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1167'. [ 542.154907][T10023] FAULT_INJECTION: forcing a failure. [ 542.154907][T10023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.192436][T10023] CPU: 0 UID: 0 PID: 10023 Comm: syz.4.1175 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 542.192469][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.192483][T10023] Call Trace: [ 542.192492][T10023] [ 542.192502][T10023] dump_stack_lvl+0x189/0x250 [ 542.192538][T10023] ? __pfx____ratelimit+0x10/0x10 [ 542.192563][T10023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.192588][T10023] ? __pfx__printk+0x10/0x10 [ 542.192631][T10023] should_fail_ex+0x414/0x560 [ 542.192661][T10023] _copy_to_user+0x31/0xb0 [ 542.192694][T10023] simple_read_from_buffer+0xe1/0x170 [ 542.192724][T10023] proc_fail_nth_read+0x1df/0x250 [ 542.192757][T10023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.192787][T10023] ? rw_verify_area+0x258/0x650 [ 542.192821][T10023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.192861][T10023] vfs_read+0x200/0x980 [ 542.192901][T10023] ? __pfx___mutex_lock+0x10/0x10 [ 542.192927][T10023] ? __pfx_vfs_read+0x10/0x10 [ 542.192963][T10023] ? __fget_files+0x2a/0x420 [ 542.192994][T10023] ? __fget_files+0x3a0/0x420 [ 542.193017][T10023] ? __fget_files+0x2a/0x420 [ 542.193053][T10023] ksys_read+0x145/0x250 [ 542.193072][T10023] ? __fget_files+0x3a0/0x420 [ 542.193098][T10023] ? __pfx_ksys_read+0x10/0x10 [ 542.193124][T10023] ? do_syscall_64+0xbe/0x3b0 [ 542.193154][T10023] do_syscall_64+0xfa/0x3b0 [ 542.193177][T10023] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.193200][T10023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.193223][T10023] ? clear_bhb_loop+0x60/0xb0 [ 542.193250][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.193283][T10023] RIP: 0033:0x7f165f98d3bc [ 542.193301][T10023] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 542.193331][T10023] RSP: 002b:00007f166087b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.193352][T10023] RAX: ffffffffffffffda RBX: 00007f165fbb6080 RCX: 00007f165f98d3bc [ 542.193367][T10023] RDX: 000000000000000f RSI: 00007f166087b0a0 RDI: 0000000000000003 [ 542.193379][T10023] RBP: 00007f166087b090 R08: 0000000000000000 R09: 0000000000000000 [ 542.193402][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.193413][T10023] R13: 0000000000000000 R14: 00007f165fbb6080 R15: 00007fff7578a6a8 [ 542.193442][T10023] [ 542.998781][T10026] syz_tun: entered allmulticast mode [ 543.367941][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 543.438155][T10033] fuse: Unknown parameter '0x0000000000000003' [ 543.502426][T10035] 9pnet_fd: Insufficient options for proto=fd [ 544.495569][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'. [ 544.655221][T10057] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1187'. [ 545.512031][T10070] syz_tun: entered allmulticast mode [ 545.645523][T10069] syz_tun: left allmulticast mode [ 546.484535][T10078] fuse: Unknown parameter '0x0000000000000003' [ 548.077313][T10101] overlay: ./file0 is not a directory [ 548.561215][T10107] lo: entered allmulticast mode [ 549.424432][T10105] lo: left allmulticast mode [ 551.873456][T10120] fuse: Unknown parameter '0x0000000000000003' [ 551.947356][T10127] binder_alloc: 10126: binder_alloc_buf, no vma [ 552.753819][T10142] FAULT_INJECTION: forcing a failure. [ 552.753819][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.768435][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.0.1212 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 552.768464][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.768476][T10142] Call Trace: [ 552.768485][T10142] [ 552.768495][T10142] dump_stack_lvl+0x189/0x250 [ 552.768523][T10142] ? __pfx____ratelimit+0x10/0x10 [ 552.768545][T10142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.768568][T10142] ? __pfx__printk+0x10/0x10 [ 552.768594][T10142] ? __might_fault+0xb0/0x130 [ 552.768628][T10142] should_fail_ex+0x414/0x560 [ 552.768656][T10142] _copy_from_user+0x2d/0xb0 [ 552.768685][T10142] lowpan_control_write+0xf1/0x6c0 [ 552.768717][T10142] ? __pfx_lowpan_control_write+0x10/0x10 [ 552.768769][T10142] ? __pfx___debugfs_file_get+0x10/0x10 [ 552.768803][T10142] ? rcu_read_lock_any_held+0xb3/0x120 [ 552.768831][T10142] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 552.768864][T10142] full_proxy_write+0x15a/0x220 [ 552.768890][T10142] ? __pfx_full_proxy_write+0x10/0x10 [ 552.768928][T10142] vfs_write+0x27e/0xa90 [ 552.768957][T10142] ? __pfx_vfs_write+0x10/0x10 [ 552.768979][T10142] ? __fget_files+0x2a/0x420 [ 552.769007][T10142] ? __fget_files+0x3a0/0x420 [ 552.769029][T10142] ? __fget_files+0x2a/0x420 [ 552.769061][T10142] ksys_write+0x145/0x250 [ 552.769084][T10142] ? __pfx_ksys_write+0x10/0x10 [ 552.769108][T10142] ? __x64_sys_write+0x2d/0x90 [ 552.769133][T10142] do_syscall_64+0xfa/0x3b0 [ 552.769154][T10142] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.769175][T10142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.769196][T10142] ? clear_bhb_loop+0x60/0xb0 [ 552.769221][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.769241][T10142] RIP: 0033:0x7fd0e4d8e9a9 [ 552.769258][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.769276][T10142] RSP: 002b:00007fd0e5b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.769296][T10142] RAX: ffffffffffffffda RBX: 00007fd0e4fb6080 RCX: 00007fd0e4d8e9a9 [ 552.769311][T10142] RDX: 000000000000001b RSI: 0000200000000040 RDI: 000000000000000c [ 552.769324][T10142] RBP: 00007fd0e5b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 552.769336][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.769348][T10142] R13: 0000000000000000 R14: 00007fd0e4fb6080 R15: 00007fff31773428 [ 552.769381][T10142] [ 553.532645][T10149] siw: device registration error -23 [ 554.600726][T10156] fuse: Unknown parameter '0x0000000000000003' [ 554.748995][T10161] FAULT_INJECTION: forcing a failure. [ 554.748995][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 554.761953][T10161] CPU: 0 UID: 0 PID: 10161 Comm: syz.4.1219 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 554.761979][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.761991][T10161] Call Trace: [ 554.762000][T10161] [ 554.762006][T10161] dump_stack_lvl+0x189/0x250 [ 554.762024][T10161] ? irqentry_exit+0x74/0x90 [ 554.762039][T10161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.762060][T10161] ? dump_stack+0x9/0x20 [ 554.762078][T10161] should_fail_ex+0x414/0x560 [ 554.762096][T10161] should_failslab+0xa8/0x100 [ 554.762113][T10161] __kmalloc_noprof+0xcb/0x4f0 [ 554.762125][T10161] ? kfree+0x4d/0x440 [ 554.762162][T10161] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.762187][T10161] tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.762209][T10161] ? tomoyo_domain+0xda/0x130 [ 554.762234][T10161] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 554.762251][T10161] tomoyo_path_number_perm+0x1e8/0x5a0 [ 554.762269][T10161] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.762300][T10161] ? __lock_acquire+0xab9/0xd20 [ 554.762331][T10161] ? __fget_files+0x2a/0x420 [ 554.762350][T10161] ? __fget_files+0x2a/0x420 [ 554.762366][T10161] ? __fget_files+0x3a0/0x420 [ 554.762383][T10161] ? __fget_files+0x2a/0x420 [ 554.762403][T10161] security_file_ioctl+0xcb/0x2d0 [ 554.762423][T10161] __se_sys_ioctl+0x47/0x170 [ 554.762448][T10161] do_syscall_64+0xfa/0x3b0 [ 554.762467][T10161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.762482][T10161] ? asm_sysvec_call_function_single+0x1a/0x20 [ 554.762509][T10161] ? clear_bhb_loop+0x60/0xb0 [ 554.762528][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.762543][T10161] RIP: 0033:0x7f165f98e9a9 [ 554.762557][T10161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.762570][T10161] RSP: 002b:00007f166087b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.762587][T10161] RAX: ffffffffffffffda RBX: 00007f165fbb6080 RCX: 00007f165f98e9a9 [ 554.762598][T10161] RDX: 00002000000000c0 RSI: 00000000c01855e0 RDI: 0000000000000007 [ 554.762608][T10161] RBP: 00007f166087b090 R08: 0000000000000000 R09: 0000000000000000 [ 554.762618][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.762627][T10161] R13: 0000000000000000 R14: 00007f165fbb6080 R15: 00007fff7578a6a8 [ 554.762651][T10161] [ 554.762680][T10161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.886231][T10173] overlay: ./file0 is not a directory [ 556.621897][T10182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.210876][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 558.917329][T10194] siw: device registration error -23 [ 560.393335][T10204] fuse: Unknown parameter '0x0000000000000003' [ 560.454494][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 560.553578][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 560.567814][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 560.580753][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 560.591305][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 562.801922][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.808269][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.157768][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 563.178556][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 563.801973][T10239] 9pnet_fd: Insufficient options for proto=fd [ 563.980797][T10241] omfs: Invalid superblock (0) [ 567.828629][T10269] siw: device registration error -23 [ 568.652252][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 569.379452][ T43] Process accounting resumed [ 574.672027][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 574.672044][ T30] audit: type=1326 audit(1753568570.963:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10313 comm="syz.3.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x0 [ 574.805896][ T30] audit: type=1326 audit(1753568570.963:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10313 comm="syz.3.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x0 [ 575.118168][T10326] Bluetooth: (null): Invalid header checksum [ 576.325462][T10333] dns_resolver: Unsupported server list version (0) [ 576.847975][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1270'. [ 576.856992][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 577.356252][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1274'. [ 577.842281][T10362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.404788][T10371] syz_tun: entered allmulticast mode [ 578.608150][T10377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.078289][T10370] syz_tun: left allmulticast mode [ 582.000201][ T8080] hid-generic 0000:0004:0034.0012: unknown main item tag 0x0 [ 582.089344][ T8080] hid-generic 0000:0004:0034.0012: unknown main item tag 0x0 [ 582.163107][ T8080] hid-generic 0000:0004:0034.0012: unknown main item tag 0x0 [ 583.427987][ T8080] hid-generic 0000:0004:0034.0012: hidraw0: HID v0.0e Device [syz0] on syz1 [ 583.817982][T10405] fido_id[10405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0004:0034.0012/report_descriptor': No such device [ 584.086299][T10421] fuse: Unknown parameter 'fd0x0000000000000003' [ 584.380940][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 584.400557][T10431] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1297'. [ 585.346002][T10437] netlink: zone id is out of range [ 585.360825][T10437] netlink: zone id is out of range [ 585.366310][T10437] netlink: zone id is out of range [ 585.371697][T10437] netlink: zone id is out of range [ 585.377090][T10437] netlink: zone id is out of range [ 585.382392][T10437] netlink: zone id is out of range [ 585.387805][T10437] netlink: zone id is out of range [ 585.393343][T10437] netlink: zone id is out of range [ 585.401024][T10437] netlink: zone id is out of range [ 585.424136][T10437] netlink: zone id is out of range [ 586.443380][ T30] audit: type=1326 audit(1753568582.723:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 586.492697][T10451] FAULT_INJECTION: forcing a failure. [ 586.492697][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 586.535676][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.4.1304 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 586.535681][ T30] audit: type=1326 audit(1753568582.723:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 586.535704][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.535716][T10451] Call Trace: [ 586.535723][T10451] [ 586.535730][T10451] dump_stack_lvl+0x189/0x250 [ 586.535758][T10451] ? __pfx____ratelimit+0x10/0x10 [ 586.535781][T10451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.535806][T10451] ? __pfx__printk+0x10/0x10 [ 586.535841][T10451] ? __pfx___might_resched+0x10/0x10 [ 586.535863][T10451] ? fs_reclaim_acquire+0x7d/0x100 [ 586.535894][T10451] should_fail_ex+0x414/0x560 [ 586.535921][T10451] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 586.535943][T10451] should_failslab+0xa8/0x100 [ 586.535967][T10451] __kvmalloc_node_noprof+0x161/0x5f0 [ 586.535990][T10451] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 586.536011][T10451] ? __asan_memcpy+0x40/0x70 [ 586.536046][T10451] alloc_netdev_mqs+0x8e5/0x11e0 [ 586.536076][T10451] rtnl_create_link+0x31f/0xd10 [ 586.536106][T10451] rtnl_newlink_create+0x25c/0xb00 [ 586.536141][T10451] ? __lock_acquire+0xab9/0xd20 [ 586.536167][T10451] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 586.536195][T10451] ? rtnl_newlink+0x8db/0x1c70 [ 586.536225][T10451] ? __pfx___mutex_lock+0x10/0x10 [ 586.536259][T10451] ? ns_capable+0x8a/0xf0 [ 586.536294][T10451] rtnl_newlink+0x16d6/0x1c70 [ 586.536322][T10451] ? netlink_sendmsg+0x805/0xb30 [ 586.536366][T10451] ? __pfx_rtnl_newlink+0x10/0x10 [ 586.536419][T10451] ? kasan_quarantine_put+0xdd/0x220 [ 586.536450][T10451] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.536477][T10451] ? nlmon_xmit+0xb0/0x100 [ 586.536501][T10451] ? kmem_cache_free+0x18f/0x400 [ 586.536529][T10451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 586.536551][T10451] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.536574][T10451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 586.536594][T10451] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 586.536621][T10451] ? __dev_queue_xmit+0x27e/0x3a70 [ 586.536642][T10451] ? __dev_queue_xmit+0x27e/0x3a70 [ 586.536661][T10451] ? __dev_queue_xmit+0x27e/0x3a70 [ 586.536684][T10451] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 586.536711][T10451] ? __lock_acquire+0xab9/0xd20 [ 586.536757][T10451] ? __pfx_rtnl_newlink+0x10/0x10 [ 586.536784][T10451] rtnetlink_rcv_msg+0x7cc/0xb70 [ 586.536816][T10451] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 586.536841][T10451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.536865][T10451] ? ref_tracker_free+0x63a/0x7d0 [ 586.536887][T10451] ? __copy_skb_header+0xa7/0x550 [ 586.536909][T10451] ? __pfx_ref_tracker_free+0x10/0x10 [ 586.536943][T10451] netlink_rcv_skb+0x205/0x470 [ 586.536973][T10451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.537006][T10451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 586.537050][T10451] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.537078][T10451] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.537113][T10451] netlink_unicast+0x75c/0x8e0 [ 586.537151][T10451] netlink_sendmsg+0x805/0xb30 [ 586.537192][T10451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.537233][T10451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.537255][T10451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.537292][T10451] __sock_sendmsg+0x21c/0x270 [ 586.537319][T10451] ____sys_sendmsg+0x505/0x830 [ 586.537358][T10451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.537400][T10451] ? import_iovec+0x74/0xa0 [ 586.537433][T10451] ___sys_sendmsg+0x21f/0x2a0 [ 586.537467][T10451] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.537538][T10451] ? __fget_files+0x2a/0x420 [ 586.537561][T10451] ? __fget_files+0x3a0/0x420 [ 586.537596][T10451] __x64_sys_sendmsg+0x19b/0x260 [ 586.537630][T10451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.537674][T10451] ? __pfx_ksys_write+0x10/0x10 [ 586.537690][T10451] ? rcu_is_watching+0x15/0xb0 [ 586.537717][T10451] ? do_syscall_64+0xbe/0x3b0 [ 586.537745][T10451] do_syscall_64+0xfa/0x3b0 [ 586.537766][T10451] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.537787][T10451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.537808][T10451] ? clear_bhb_loop+0x60/0xb0 [ 586.537833][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.537852][T10451] RIP: 0033:0x7f165f98e9a9 [ 586.537870][T10451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.537888][T10451] RSP: 002b:00007f166089c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.537910][T10451] RAX: ffffffffffffffda RBX: 00007f165fbb5fa0 RCX: 00007f165f98e9a9 [ 586.537925][T10451] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 586.537938][T10451] RBP: 00007f166089c090 R08: 0000000000000000 R09: 0000000000000000 [ 586.537951][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.538001][T10451] R13: 0000000000000000 R14: 00007f165fbb5fa0 R15: 00007fff7578a6a8 [ 586.538034][T10451] [ 587.070277][T10456] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 587.144463][ T30] audit: type=1326 audit(1753568582.723:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 587.227657][T10463] FAULT_INJECTION: forcing a failure. [ 587.227657][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 587.240798][T10463] CPU: 1 UID: 0 PID: 10463 Comm: syz.4.1309 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 587.240823][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.240836][T10463] Call Trace: [ 587.240843][T10463] [ 587.240848][T10463] dump_stack_lvl+0x189/0x250 [ 587.240868][T10463] ? __pfx____ratelimit+0x10/0x10 [ 587.240883][T10463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.240898][T10463] ? __pfx__printk+0x10/0x10 [ 587.240919][T10463] ? __pfx___might_resched+0x10/0x10 [ 587.240933][T10463] ? fs_reclaim_acquire+0x7d/0x100 [ 587.240952][T10463] should_fail_ex+0x414/0x560 [ 587.240970][T10463] should_failslab+0xa8/0x100 [ 587.240985][T10463] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 587.240998][T10463] ? __alloc_skb+0x112/0x2d0 [ 587.241020][T10463] __alloc_skb+0x112/0x2d0 [ 587.241041][T10463] netlink_ack+0x146/0xa50 [ 587.241057][T10463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 587.241073][T10463] ? ref_tracker_free+0x63a/0x7d0 [ 587.241087][T10463] ? __copy_skb_header+0xa7/0x550 [ 587.241100][T10463] ? __pfx_ref_tracker_free+0x10/0x10 [ 587.241121][T10463] netlink_rcv_skb+0x28c/0x470 [ 587.241140][T10463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 587.241158][T10463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.241185][T10463] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.241202][T10463] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.241224][T10463] netlink_unicast+0x75c/0x8e0 [ 587.241273][T10463] netlink_sendmsg+0x805/0xb30 [ 587.241309][T10463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.241334][T10463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.241347][T10463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.241366][T10463] __sock_sendmsg+0x21c/0x270 [ 587.241384][T10463] ____sys_sendmsg+0x505/0x830 [ 587.241408][T10463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.241434][T10463] ? import_iovec+0x74/0xa0 [ 587.241455][T10463] ___sys_sendmsg+0x21f/0x2a0 [ 587.241477][T10463] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.241503][T10463] ? rcu_read_lock_any_held+0xb3/0x120 [ 587.241527][T10463] ? sb_end_write+0xe9/0x1c0 [ 587.241551][T10463] ? __pfx_vfs_write+0x10/0x10 [ 587.241569][T10463] __x64_sys_sendmsg+0x19b/0x260 [ 587.241592][T10463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.241618][T10463] ? __pfx_ksys_write+0x10/0x10 [ 587.241629][T10463] ? rcu_is_watching+0x15/0xb0 [ 587.241646][T10463] ? do_syscall_64+0xbe/0x3b0 [ 587.241663][T10463] do_syscall_64+0xfa/0x3b0 [ 587.241677][T10463] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.241691][T10463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.241704][T10463] ? clear_bhb_loop+0x60/0xb0 [ 587.241720][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.241732][T10463] RIP: 0033:0x7f165f98e9a9 [ 587.241744][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.241756][T10463] RSP: 002b:00007f166087b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.241770][T10463] RAX: ffffffffffffffda RBX: 00007f165fbb6080 RCX: 00007f165f98e9a9 [ 587.241780][T10463] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 587.241788][T10463] RBP: 00007f166087b090 R08: 0000000000000000 R09: 0000000000000000 [ 587.241796][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.241805][T10463] R13: 0000000000000000 R14: 00007f165fbb6080 R15: 00007fff7578a6a8 [ 587.241824][T10463] [ 587.575850][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.858565][ T30] audit: type=1326 audit(1753568582.723:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 587.880275][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.886794][ T30] audit: type=1326 audit(1753568582.733:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 587.908633][ T30] audit: type=1326 audit(1753568582.733:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 587.930285][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.936770][ T30] audit: type=1326 audit(1753568582.733:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 588.001041][ T30] audit: type=1326 audit(1753568582.733:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 588.023454][ T30] audit: type=1326 audit(1753568582.753:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 588.045579][ T30] audit: type=1326 audit(1753568582.753:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7ffc0000 [ 588.146042][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 588.527222][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 588.878583][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 588.980450][ T10] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 589.164791][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=84.b2 [ 589.174859][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.183207][ T10] usb 2-1: Product: syz [ 589.187635][ T10] usb 2-1: Manufacturer: syz [ 589.192240][ T10] usb 2-1: SerialNumber: syz [ 589.444419][ T10] usb 2-1: selecting invalid altsetting 1 [ 589.467373][ T10] snd-usb-caiaq 2-1:4.0: can't set alt interface. [ 589.477408][ T10] usb 2-1: unable to init card! (ret=-5) [ 589.482788][T10489] netlink: 'syz.4.1318': attribute type 2 has an invalid length. [ 589.484022][ T10] snd-usb-caiaq 2-1:4.0: probe with driver snd-usb-caiaq failed with error -5 [ 589.501792][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 589.512843][T10489] netlink: 'syz.4.1318': attribute type 8 has an invalid length. [ 589.540805][T10489] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1318'. [ 589.552630][ T10] usb 2-1: USB disconnect, device number 24 [ 589.566204][T10494] syz.4.1318 (10494): /proc/10488/oom_adj is deprecated, please use /proc/10488/oom_score_adj instead. [ 589.614330][T10497] FAULT_INJECTION: forcing a failure. [ 589.614330][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.672995][T10497] CPU: 0 UID: 0 PID: 10497 Comm: syz.0.1321 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 589.673017][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.673027][T10497] Call Trace: [ 589.673033][T10497] [ 589.673040][T10497] dump_stack_lvl+0x189/0x250 [ 589.673064][T10497] ? __pfx____ratelimit+0x10/0x10 [ 589.673081][T10497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.673098][T10497] ? __pfx__printk+0x10/0x10 [ 589.673118][T10497] ? __might_fault+0xb0/0x130 [ 589.673141][T10497] should_fail_ex+0x414/0x560 [ 589.673161][T10497] _copy_from_user+0x2d/0xb0 [ 589.673184][T10497] ___sys_sendmsg+0x158/0x2a0 [ 589.673217][T10497] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.673270][T10497] ? __fget_files+0x2a/0x420 [ 589.673287][T10497] ? __fget_files+0x3a0/0x420 [ 589.673323][T10497] __x64_sys_sendmsg+0x19b/0x260 [ 589.673350][T10497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.673392][T10497] ? __pfx_ksys_write+0x10/0x10 [ 589.673403][T10497] ? rcu_is_watching+0x15/0xb0 [ 589.673421][T10497] ? do_syscall_64+0xbe/0x3b0 [ 589.673438][T10497] do_syscall_64+0xfa/0x3b0 [ 589.673451][T10497] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.673465][T10497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.673478][T10497] ? clear_bhb_loop+0x60/0xb0 [ 589.673494][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.673507][T10497] RIP: 0033:0x7fd0e4d8e9a9 [ 589.673524][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.673540][T10497] RSP: 002b:00007fd0e5b80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.673559][T10497] RAX: ffffffffffffffda RBX: 00007fd0e4fb5fa0 RCX: 00007fd0e4d8e9a9 [ 589.673572][T10497] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 589.673585][T10497] RBP: 00007fd0e5b80090 R08: 0000000000000000 R09: 0000000000000000 [ 589.673596][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.673607][T10497] R13: 0000000000000000 R14: 00007fd0e4fb5fa0 R15: 00007fff31773428 [ 589.673632][T10497] [ 590.023392][T10505] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 590.860702][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 591.176593][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1327'. [ 591.214304][T10525] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1327'. [ 591.945646][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 592.410435][T10538] siw: device registration error -23 [ 592.710427][T10540] fuse: Unknown parameter 'CO#ͼfV^4' [ 592.926815][T10548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 593.239200][T10557] 9pnet_fd: Insufficient options for proto=fd [ 593.245411][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 593.245421][ T30] audit: type=1326 audit(1753568589.533:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 593.273325][ T5892] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 593.349376][ T30] audit: type=1326 audit(1753568589.533:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 593.452253][ T30] audit: type=1326 audit(1753568589.683:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 593.474268][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 593.495367][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.530639][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 593.567464][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 593.588387][ T30] audit: type=1326 audit(1753568589.683:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 593.645853][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.699899][ T30] audit: type=1326 audit(1753568589.683:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 593.735288][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 593.785272][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.313786][ T5892] usb 1-1: GET_CAPABILITIES returned 0 [ 594.334023][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 594.342096][ T30] audit: type=1326 audit(1753568590.613:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 594.389857][ T30] audit: type=1326 audit(1753568590.613:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 594.420352][ T30] audit: type=1326 audit(1753568590.613:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 594.507604][T10551] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1336'. [ 594.528161][ T30] audit: type=1326 audit(1753568590.613:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 594.569532][ T8080] usb 1-1: USB disconnect, device number 33 [ 594.596200][ T30] audit: type=1326 audit(1753568590.613:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10552 comm="syz.3.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049478e9a9 code=0x7fc00000 [ 594.611028][T10573] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 595.084847][T10585] overlayfs: overlapping lowerdir path [ 595.717817][T10597] macsec0: entered promiscuous mode [ 595.723336][T10597] macsec0: entered allmulticast mode [ 595.738484][T10597] veth1_macvtap: entered allmulticast mode [ 595.826726][T10603] netlink: 'syz.1.1353': attribute type 72 has an invalid length. [ 595.834821][T10603] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1353'. [ 596.073284][T10608] netlink: 'syz.2.1351': attribute type 12 has an invalid length. [ 596.932298][T10617] 9pnet_fd: Insufficient options for proto=fd [ 597.051418][T10618] syzkaller1: entered promiscuous mode [ 597.057057][T10618] syzkaller1: entered allmulticast mode [ 597.728082][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 597.767349][T10623] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1349'. [ 599.032090][T10632] wg0 speed is unknown, defaulting to 1000 [ 599.040556][T10632] wlan0 speed is unknown, defaulting to 1000 [ 600.238647][T10647] overlayfs: overlapping lowerdir path [ 600.924918][T10651] netlink: 'syz.4.1364': attribute type 72 has an invalid length. [ 600.986844][T10651] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1364'. [ 601.073878][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1365'. [ 601.672564][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 601.729789][T10653] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 601.767275][T10653] nbd: couldn't find device at index -492516844 [ 602.479280][T10670] loop6: detected capacity change from 0 to 524287999 [ 603.000768][T10671] netlink: 'syz.1.1366': attribute type 12 has an invalid length. [ 604.157930][T10690] overlayfs: failed to clone lowerpath [ 604.652753][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'. [ 604.740156][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 604.754719][T10706] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 604.772703][T10706] nbd: couldn't find device at index -492516844 [ 605.930504][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1379'. [ 605.957475][T10719] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1379'. [ 606.537897][T10727] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 606.551823][T10727] Error validating options; rc = [-22] [ 607.411899][T10740] overlayfs: failed to clone lowerpath [ 607.557237][ T5892] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 608.400313][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 608.482991][ T5892] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 608.519169][ T5892] usb 1-1: config 0 has no interface number 0 [ 608.528531][ T5892] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.572022][ T5892] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 608.609983][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.637569][ T5892] usb 1-1: Product: syz [ 608.641765][ T5892] usb 1-1: Manufacturer: syz [ 608.649438][ T5892] usb 1-1: SerialNumber: syz [ 608.657698][ T5892] usb 1-1: config 0 descriptor?? [ 608.680205][ T5892] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 608.699269][ T5892] em28xx 1-1:0.132: Video interface 132 found: [ 608.733215][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.746877][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.760291][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.772004][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.788909][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.801568][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.812547][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.825243][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.835591][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 608.848675][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 609.071326][ T5892] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 609.164927][T10769] overlayfs: failed to clone upperpath [ 609.487326][ T5892] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 609.500422][ T5892] em28xx 1-1:0.132: board has no eeprom [ 609.587747][ T5892] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 609.595794][ T5892] em28xx 1-1:0.132: analog set to bulk mode. [ 609.603839][ T5919] em28xx 1-1:0.132: Registering V4L2 extension [ 609.710482][T10736] netlink: 'syz.0.1389': attribute type 3 has an invalid length. [ 609.719639][ T5919] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 609.720079][ T5941] usb 1-1: USB disconnect, device number 34 [ 609.735288][ T5919] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 609.741437][ T5941] em28xx 1-1:0.132: Disconnecting em28xx [ 609.830001][ T5919] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 609.837513][ T5919] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 609.845808][ T5919] em28xx 1-1:0.132: No AC97 audio processor [ 609.862031][ T5919] usb 1-1: Decoder not found [ 609.866664][ T5919] em28xx 1-1:0.132: failed to create media graph [ 609.873531][ T5919] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 609.885409][ T5919] em28xx 1-1:0.132: Remote control support is not available for this card. [ 609.895663][ T5941] em28xx 1-1:0.132: Closing input extension [ 609.929310][ T5941] em28xx 1-1:0.132: Freeing device [ 611.925992][T10807] siw: device registration error -23 [ 612.723691][T10813] fuse: Unknown parameter 'uuer_id' [ 615.024706][T10829] overlay: ./file0 is not a directory [ 615.096082][T10831] __nla_validate_parse: 1 callbacks suppressed [ 615.096098][T10831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1416'. [ 615.506530][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'. [ 615.608175][ T5919] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 615.644788][ T5919] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 615.798580][T10841] fido_id[10841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 616.448154][ T5959] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 616.699146][ T5959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.710124][ T5959] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 616.739063][ T5959] usb 1-1: config 1 has no interface number 1 [ 616.762415][T10853] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 616.774527][T10853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.784034][ T5959] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 616.834275][ T5959] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.846169][T10853] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 616.865959][ T5959] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.880938][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.881023][T10855] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 616.905263][ T5959] usb 1-1: Product: syz [ 616.910185][ T5959] usb 1-1: Manufacturer: syz [ 616.914947][ T5959] usb 1-1: SerialNumber: syz [ 616.945644][T10855] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1424'. [ 616.957959][T10836] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 616.977918][T10858] netlink: 'syz.1.1425': attribute type 11 has an invalid length. [ 616.988513][T10858] netlink: 'syz.1.1425': attribute type 11 has an invalid length. [ 616.996401][T10858] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1425'. [ 617.307340][ T5959] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 617.315320][ T5959] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 618.192555][ T5959] usb 1-1: USB disconnect, device number 35 [ 618.341325][T10491] udevd[10491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.231418][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 619.475608][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'. [ 619.500544][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 619.528239][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 619.583477][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1435'. [ 620.855114][T10905] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 621.518271][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 621.543878][T10892] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1435'. [ 622.533785][ T5941] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 623.328583][ T5941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.354913][ T5941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 623.386609][ T5941] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 623.407236][ T5941] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.418400][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.438303][T10921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.462109][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.627320][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 624.149942][ T5941] usb 2-1: USB disconnect, device number 25 [ 624.225075][T10942] wg0 speed is unknown, defaulting to 1000 [ 624.239689][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.246035][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.290796][T10942] wlan0 speed is unknown, defaulting to 1000 [ 626.186080][T10969] syz.1.1461: attempt to access beyond end of device [ 626.186080][T10969] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 626.199971][T10969] gfs2: error -5 reading superblock [ 627.353612][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 628.172087][T10994] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 628.178663][T10994] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 628.193525][T10994] vhci_hcd vhci_hcd.0: Device attached [ 628.642908][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 628.652073][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 628.716655][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 628.862938][ T5941] usb 42-1: SetAddress Request (2) to port 0 [ 628.917811][ T5941] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 629.130719][T10995] vhci_hcd: connection reset by peer [ 629.141750][ T3561] vhci_hcd: stop threads [ 629.146020][ T3561] vhci_hcd: release socket [ 629.156184][ T3561] vhci_hcd: disconnect device [ 629.992476][T11013] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1469'. [ 630.251128][T11017] vxcan1: entered allmulticast mode [ 630.338029][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 631.573905][T11032] block nbd0: not configured, cannot reconfigure [ 631.693465][T11018] bridge0: port 3(team0) entered blocking state [ 631.699923][T11018] bridge0: port 3(team0) entered forwarding state [ 632.213103][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.329714][T11018] net_ratelimit: 4 callbacks suppressed [ 632.329779][T11018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.106099][T11043] netlink: 'syz.0.1482': attribute type 2 has an invalid length. [ 633.933112][T11052] netlink: 'syz.4.1487': attribute type 21 has an invalid length. [ 633.974650][T11054] wg1: entered promiscuous mode [ 633.981424][T11054] wg1: entered allmulticast mode [ 634.028899][T11052] netlink: 'syz.4.1487': attribute type 6 has an invalid length. [ 634.049436][T11052] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1487'. [ 634.073731][ T5941] usb 42-1: device descriptor read/8, error -110 [ 634.498406][ T5941] usb usb42-port1: attempt power cycle [ 635.068039][ T5941] usb usb42-port1: unable to enumerate USB device [ 635.359500][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 635.890406][T11124] input: syz1 as /devices/virtual/input/input23 [ 637.846133][T11155] wg0 speed is unknown, defaulting to 1000 [ 638.065021][T11155] wlan0 speed is unknown, defaulting to 1000 [ 639.546833][T11178] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (pcl812) [ 639.666129][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 642.227718][T11203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.058509][T11209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 643.065154][T11209] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 643.073050][T11209] vhci_hcd vhci_hcd.0: Device attached [ 643.094293][T11210] vhci_hcd: connection closed [ 643.102111][ T6082] vhci_hcd: stop threads [ 643.212642][ T6082] vhci_hcd: release socket [ 643.259410][ T6082] vhci_hcd: disconnect device [ 644.694544][T11226] vlan1: entered promiscuous mode [ 644.701345][T11226] vlan1: entered allmulticast mode [ 644.706511][T11226] veth0_vlan: entered allmulticast mode [ 646.130115][T11239] wg0 speed is unknown, defaulting to 1000 [ 646.154200][T11239] wlan0 speed is unknown, defaulting to 1000 [ 646.605964][T11251] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1543'. [ 650.199608][T11282] 9pnet_virtio: no channels available for device syz [ 650.330725][T11283] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 650.421457][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 650.436108][T11283] macvlan0: entered promiscuous mode [ 650.449940][T11284] netlink: 'syz.4.1549': attribute type 5 has an invalid length. [ 650.477073][T11283] macvlan0: entered allmulticast mode [ 650.492753][T11283] veth1_vlan: entered allmulticast mode [ 650.520955][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1549'. [ 650.534661][T11283] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 650.882511][T11284] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 650.936852][T11284] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 650.986393][T11284] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 651.084161][T11284] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 651.163407][T11284] geneve2: entered promiscuous mode [ 651.221345][T11284] geneve2: entered allmulticast mode [ 653.377137][ T5919] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 653.674290][T11302] batadv1: entered allmulticast mode [ 653.684657][T11302] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 653.868810][T11300] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 653.875452][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 653.883303][T11300] vhci_hcd vhci_hcd.0: Device attached [ 654.053825][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 654.062468][T11303] vhci_hcd: connection closed [ 654.148696][ T36] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 654.188101][ T78] vhci_hcd: stop threads [ 654.192388][ T78] vhci_hcd: release socket [ 654.200612][ T78] vhci_hcd: disconnect device [ 654.200864][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.226537][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.265016][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.275391][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.288861][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.334815][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.570129][ T5919] usb 2-1: GET_CAPABILITIES returned 0 [ 654.575635][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 654.859309][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.869654][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.883611][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.892699][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.901755][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.910806][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.930426][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.939523][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.948571][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.957613][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.973002][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.982120][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 654.991193][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 655.000276][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 655.013824][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 655.022922][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 655.036047][ T5941] usb 2-1: USB disconnect, device number 26 [ 655.172316][T11324] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 657.174710][T11347] hub 2-0:1.0: USB hub found [ 657.182373][T11347] hub 2-0:1.0: 1 port detected [ 662.014341][T11406] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.050867][T11406] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.132427][T11406] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.179116][T11406] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.451559][T11406] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.482049][T11406] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.515502][T11407] ================================================================== [ 662.523590][T11407] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0xa7/0xf0 [ 662.531760][T11407] Read of size 1 at addr ffff88814adf16b0 by task syz.0.1588/11407 [ 662.539638][T11407] [ 662.541956][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.0.1588 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 662.541973][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.541983][T11407] Call Trace: [ 662.541989][T11407] [ 662.541995][T11407] dump_stack_lvl+0x189/0x250 [ 662.542012][T11407] ? rcu_is_watching+0x15/0xb0 [ 662.542027][T11407] ? __kasan_check_byte+0x12/0x40 [ 662.542042][T11407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.542056][T11407] ? rcu_is_watching+0x15/0xb0 [ 662.542070][T11407] ? lock_release+0x4b/0x3e0 [ 662.542085][T11407] ? __virt_addr_valid+0x1c8/0x5c0 [ 662.542102][T11407] ? __virt_addr_valid+0x4a5/0x5c0 [ 662.542119][T11407] print_report+0xca/0x240 [ 662.542139][T11407] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 662.542163][T11407] kasan_report+0x118/0x150 [ 662.542177][T11407] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 662.542220][T11407] ? remove_wait_queue+0x24/0x120 [ 662.542242][T11407] __kasan_check_byte+0x2a/0x40 [ 662.542257][T11407] lock_acquire+0x8d/0x360 [ 662.542271][T11407] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 662.542297][T11407] _raw_spin_lock_irqsave+0xa7/0xf0 [ 662.542321][T11407] ? remove_wait_queue+0x24/0x120 [ 662.542342][T11407] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 662.542368][T11407] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 662.542393][T11407] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 662.542420][T11407] remove_wait_queue+0x24/0x120 [ 662.542444][T11407] poll_freewait+0xb1/0x240 [ 662.542460][T11407] do_select+0x172f/0x17e0 [ 662.542475][T11407] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.542495][T11407] ? do_select+0xbb1/0x17e0 [ 662.542519][T11407] ? __pfx_do_select+0x10/0x10 [ 662.542535][T11407] ? io_poll_add+0x135/0x1f0 [ 662.542551][T11407] ? __pfx_io_poll_add+0x10/0x10 [ 662.542567][T11407] ? do_raw_spin_lock+0x121/0x290 [ 662.542590][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542608][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542625][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542642][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542664][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542681][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542699][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542716][T11407] ? __pfx_pollwake+0x10/0x10 [ 662.542744][T11407] core_sys_select+0x6dd/0xa20 [ 662.542765][T11407] ? __pfx_core_sys_select+0x10/0x10 [ 662.542779][T11407] ? rcu_is_watching+0x15/0xb0 [ 662.542806][T11407] ? __pfx_set_user_sigmask+0x10/0x10 [ 662.542824][T11407] ? arch_do_signal_or_restart+0x2d3/0x750 [ 662.542852][T11407] __se_sys_pselect6+0x27a/0x300 [ 662.542871][T11407] ? __pfx___se_sys_pselect6+0x10/0x10 [ 662.542891][T11407] ? __x64_sys_pselect6+0x21/0xf0 [ 662.542908][T11407] do_syscall_64+0xfa/0x3b0 [ 662.542926][T11407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.542942][T11407] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 662.542958][T11407] ? clear_bhb_loop+0x60/0xb0 [ 662.542976][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.542991][T11407] RIP: 0033:0x7fd0e4d8e9a9 [ 662.543005][T11407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.543019][T11407] RSP: 002b:00007fd0e5b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 662.543036][T11407] RAX: ffffffffffffffda RBX: 00007fd0e4fb6080 RCX: 00007fd0e4d8e9a9 [ 662.543049][T11407] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 662.543059][T11407] RBP: 00007fd0e4e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 662.543069][T11407] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 662.543080][T11407] R13: 0000000000000000 R14: 00007fd0e4fb6080 R15: 00007fff31773428 [ 662.543098][T11407] [ 662.543103][T11407] [ 662.903669][T11407] Allocated by task 1: [ 662.907723][T11407] kasan_save_track+0x3e/0x80 [ 662.912423][T11407] __kasan_kmalloc+0x93/0xb0 [ 662.917013][T11407] __kmalloc_cache_noprof+0x230/0x3d0 [ 662.922396][T11407] comedi_device_postconfig+0x4a8/0xc90 [ 662.927960][T11407] comedi_auto_config+0x267/0x380 [ 662.932996][T11407] comedi_test_init+0x8e/0x110 [ 662.937804][T11407] do_one_initcall+0x233/0x820 [ 662.942583][T11407] do_initcall_level+0x137/0x1f0 [ 662.947530][T11407] do_initcalls+0x69/0xd0 [ 662.951848][T11407] kernel_init_freeable+0x3d9/0x570 [ 662.957046][T11407] kernel_init+0x1d/0x1d0 [ 662.961370][T11407] ret_from_fork+0x3fc/0x770 [ 662.965949][T11407] ret_from_fork_asm+0x1a/0x30 [ 662.970728][T11407] [ 662.973046][T11407] Freed by task 11399: [ 662.977106][T11407] kasan_save_track+0x3e/0x80 [ 662.981784][T11407] kasan_save_free_info+0x46/0x50 [ 662.986822][T11407] __kasan_slab_free+0x62/0x70 [ 662.991576][T11407] kfree+0x18e/0x440 [ 662.995479][T11407] comedi_device_detach+0x372/0x720 [ 663.000691][T11407] comedi_unlocked_ioctl+0xbd2/0xfc0 [ 663.005966][T11407] __se_sys_ioctl+0xfc/0x170 [ 663.010550][T11407] do_syscall_64+0xfa/0x3b0 [ 663.015044][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.020929][T11407] [ 663.023249][T11407] The buggy address belongs to the object at ffff88814adf1600 [ 663.023249][T11407] which belongs to the cache kmalloc-256 of size 256 [ 663.037302][T11407] The buggy address is located 176 bytes inside of [ 663.037302][T11407] freed 256-byte region [ffff88814adf1600, ffff88814adf1700) [ 663.051085][T11407] [ 663.053400][T11407] The buggy address belongs to the physical page: [ 663.059860][T11407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14adf0 [ 663.068711][T11407] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 663.077201][T11407] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 663.085262][T11407] page_type: f5(slab) [ 663.089239][T11407] raw: 057ff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 663.097814][T11407] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 663.106387][T11407] head: 057ff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 663.115047][T11407] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 663.123730][T11407] head: 057ff00000000001 ffffea00052b7c01 00000000ffffffff 00000000ffffffff [ 663.132404][T11407] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 663.141067][T11407] page dumped because: kasan: bad access detected [ 663.147466][T11407] page_owner tracks the page as allocated [ 663.153176][T11407] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21925635189, free_ts 0 [ 663.172885][T11407] post_alloc_hook+0x240/0x2a0 [ 663.177649][T11407] get_page_from_freelist+0x21d5/0x22b0 [ 663.183191][T11407] __alloc_frozen_pages_noprof+0x181/0x370 [ 663.189002][T11407] alloc_pages_mpol+0x232/0x4a0 [ 663.193842][T11407] allocate_slab+0x8a/0x3b0 [ 663.198356][T11407] ___slab_alloc+0xbfc/0x1480 [ 663.203030][T11407] __kmalloc_cache_noprof+0x296/0x3d0 [ 663.208397][T11407] bus_add_driver+0x162/0x640 [ 663.213072][T11407] driver_register+0x23a/0x320 [ 663.217834][T11407] do_one_initcall+0x233/0x820 [ 663.222596][T11407] do_initcall_level+0x137/0x1f0 [ 663.227537][T11407] do_initcalls+0x69/0xd0 [ 663.231859][T11407] kernel_init_freeable+0x3d9/0x570 [ 663.237048][T11407] kernel_init+0x1d/0x1d0 [ 663.241368][T11407] ret_from_fork+0x3fc/0x770 [ 663.245946][T11407] ret_from_fork_asm+0x1a/0x30 [ 663.250704][T11407] page_owner free stack trace missing [ 663.256093][T11407] [ 663.258404][T11407] Memory state around the buggy address: [ 663.264019][T11407] ffff88814adf1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 663.272072][T11407] ffff88814adf1600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 663.280122][T11407] >ffff88814adf1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 663.288167][T11407] ^ [ 663.293781][T11407] ffff88814adf1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 663.301831][T11407] ffff88814adf1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 663.309878][T11407] ================================================================== [ 663.317935][T11407] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 663.325118][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.0.1588 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 663.337167][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.347214][T11407] Call Trace: [ 663.350485][T11407] [ 663.353424][T11407] dump_stack_lvl+0x99/0x250 [ 663.358008][T11407] ? __asan_memcpy+0x40/0x70 [ 663.362596][T11407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.367802][T11407] ? __pfx__printk+0x10/0x10 [ 663.372396][T11407] panic+0x2db/0x790 [ 663.376316][T11407] ? __pfx_panic+0x10/0x10 [ 663.380729][T11407] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 663.386624][T11407] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 663.392951][T11407] ? print_memory_metadata+0x314/0x400 [ 663.398417][T11407] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 663.403787][T11407] check_panic_on_warn+0x89/0xb0 [ 663.408728][T11407] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 663.414100][T11407] end_report+0x78/0x160 [ 663.418337][T11407] kasan_report+0x129/0x150 [ 663.422837][T11407] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 663.428220][T11407] ? remove_wait_queue+0x24/0x120 [ 663.433246][T11407] __kasan_check_byte+0x2a/0x40 [ 663.438094][T11407] lock_acquire+0x8d/0x360 [ 663.442510][T11407] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 663.447891][T11407] _raw_spin_lock_irqsave+0xa7/0xf0 [ 663.453092][T11407] ? remove_wait_queue+0x24/0x120 [ 663.458124][T11407] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 663.464014][T11407] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 663.469912][T11407] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 663.476243][T11407] remove_wait_queue+0x24/0x120 [ 663.481093][T11407] poll_freewait+0xb1/0x240 [ 663.485587][T11407] do_select+0x172f/0x17e0 [ 663.490000][T11407] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.495191][T11407] ? do_select+0xbb1/0x17e0 [ 663.499715][T11407] ? __pfx_do_select+0x10/0x10 [ 663.504472][T11407] ? io_poll_add+0x135/0x1f0 [ 663.509057][T11407] ? __pfx_io_poll_add+0x10/0x10 [ 663.513985][T11407] ? do_raw_spin_lock+0x121/0x290 [ 663.519013][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.523688][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.528355][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.533029][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.537707][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.542380][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.547059][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.551728][T11407] ? __pfx_pollwake+0x10/0x10 [ 663.556405][T11407] core_sys_select+0x6dd/0xa20 [ 663.561162][T11407] ? __pfx_core_sys_select+0x10/0x10 [ 663.566434][T11407] ? rcu_is_watching+0x15/0xb0 [ 663.571206][T11407] ? __pfx_set_user_sigmask+0x10/0x10 [ 663.576579][T11407] ? arch_do_signal_or_restart+0x2d3/0x750 [ 663.582396][T11407] __se_sys_pselect6+0x27a/0x300 [ 663.587333][T11407] ? __pfx___se_sys_pselect6+0x10/0x10 [ 663.592791][T11407] ? __x64_sys_pselect6+0x21/0xf0 [ 663.597815][T11407] do_syscall_64+0xfa/0x3b0 [ 663.602315][T11407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.608375][T11407] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.614521][T11407] ? clear_bhb_loop+0x60/0xb0 [ 663.619191][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.625074][T11407] RIP: 0033:0x7fd0e4d8e9a9 [ 663.629479][T11407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.649082][T11407] RSP: 002b:00007fd0e5b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 663.657495][T11407] RAX: ffffffffffffffda RBX: 00007fd0e4fb6080 RCX: 00007fd0e4d8e9a9 [ 663.665470][T11407] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 663.673440][T11407] RBP: 00007fd0e4e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 663.681409][T11407] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 663.689372][T11407] R13: 0000000000000000 R14: 00007fd0e4fb6080 R15: 00007fff31773428 [ 663.697346][T11407] [ 663.700686][T11407] Kernel Offset: disabled [ 663.705014][T11407] Rebooting in 86400 seconds..