last executing test programs: 8.037155333s ago: executing program 3 (id=4856): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x54}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r1 = memfd_create(&(0x7f0000000b80)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcf\xdf\xe3b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9vm)\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\xff\xff\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xc8\x1b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-\x1e\xf4\xd1\x02Dt\xc0\x1c\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x03\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xfffffffffffffe6c}, 0x1, 0x0, 0x0, 0x49}, 0x44000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x4081) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x2bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x160, 0x3, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x84, 0x2, "429a2a6a467c3ba0bd7d0f683d97155e7e3346acc9cd910c20a5015a8ebe44def74cc9feebddee548ad41268fa557fca92783176b621731a9f0dd83910a0eabbcccdf8eeaa7fba9e400abdd6ddf5f30f17be418d5d3886caa02d512bf0dab22a2987633e4df48d1219c6704c9b699cadca111fa20de3b60ec983974dd89742ff"}}, {0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc2, 0x2, "94a0387e1411f5eb537309846f916d8076ff2283d3bd2109d65e75864ea34e0ce8b9c469da5762bc616ae344b9706fb2499d3ed3ad98a06485834ea4b3f9a91b9edaf4bdb2ae7caa07596477b5bb8930cbe4a63bdcd43e9dad04df83082f4d500c3777c40a1c97140587bc254c5b88805ed9cf55f136b8cf4113f6c84ccf79f1714082683183c36feac469e502ad81e9fbc00263fa6c157679731ca9156146b9b4d5a5265f65145eb8fe99bd3adc0a4727dc5db8f5641c3fcbf40bffac70"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc7, 0x2, "a184b0a7aa4c30cb88c63d665aabbac76bea98a91aef8e003f120142655c2ccfb1d064c75b1126166494150405204b9f9806e2613756f665751891c2837a8974693b9bc6c32b564bddc70ed97381398e26fcd5f1ac99cda56cd55dfa6e11af5d54397df64100c2f34149482c9ab6951b09d28f672e081acf26eeb611376f12d99e71ded340deab94d0e13eca4bf22a92604dec1b759dcae13496553fd2dca278c083631435a3dcb5891e3e50a3f348c8b743de1f893621223887e4f5f37fc7c7a94530"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x3c, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x26, 0x1, "9fdbe82bb951e813a9068f4d453caee35b87d6e10fe5603769d801c9640774172c58"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000010) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x84, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8804}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xb}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x6a6}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x2003}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xc) pwrite64(r3, &(0x7f0000000100)="5e69a3af174220833aca59dad5e6cb9b198647540b240ba000941e4af7733ae953755f73bb5df916a7dedddd75db16799b99734ea1da6d955b6117d94e597a47a89324fef6ac35bff2da89281bcd16840477c83b2174ab8b44af77b8dc4a2f84de48862df285a0d87924fd2e2392c0f709cbc8a17285fbcc5fc55bf8300f759bb32c41b3dfce226c8d081c53cc5ddbee44bf5cb8a787f01260c92c5ef8ea20af498dbfbce601fce370f976a6274135342492f69dc22dff4e02019f573aa3bbe99d142125e5de14ea4ef9a7ebf0d1fa4f532f516cde82bd86dca67b358771ad66b5805f92356109fc852fbd284df96ffb24b7", 0xf2, 0x4) 5.897894523s ago: executing program 1 (id=4861): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c5) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 5.633491365s ago: executing program 1 (id=4862): r0 = io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fd, 0x2, 0x20000001, 0x185}) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (fail_nth: 7) close_range(r0, 0xffffffffffffffff, 0x0) 5.153031474s ago: executing program 1 (id=4863): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180), 0x0) 5.104451688s ago: executing program 1 (id=4864): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2], [0x0, 0x1], [0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1}, {}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8}) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000009000/0x2000)=nil) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x9, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24008000) 4.689016124s ago: executing program 0 (id=4865): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000500)={0x80000000, 0x0, &(0x7f0000001740)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={r3, &(0x7f00000004c0), &(0x7f00000016c0)}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x5, 0xffff, 0x4}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 4.469620812s ago: executing program 2 (id=4867): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0xff, 0x801, 0x0, &(0x7f00000002c0)) 4.281326632s ago: executing program 2 (id=4868): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x9, 0x100000000000008, 0xfffffffe, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/380], 0x1b2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0)={0x0, 0x9, 0x10001, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000200)={0xfffffff8, [[0x5, 0x80000001, 0x40020, 0x0, 0x7fff, 0x3, 0xfffffffe, 0x206], [0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x940f, 0x0, 0x7], [0x0, 0x2, 0x5, 0x3, 0x100, 0x0, 0x1, 0x4571]], '\x00', [{0x0, 0x1, 0x1}, {0x2, 0x1}, {0x80, 0x80000}, {0x9, 0x4}, {0x2, 0xb}, {0x38}, {0xa5, 0x230d}, {}, {0x0, 0x1}, {0x4000000}, {0x80000000, 0x4}, {0x0, 0x1}], '\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xc0000484) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 4.066049678s ago: executing program 1 (id=4869): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2) 3.823562365s ago: executing program 4 (id=4870): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x0, 0xffffffdf, 0x0, 0x81d2}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) io_uring_setup(0x4e28, &(0x7f0000000380)={0x0, 0x5f41, 0x4, 0x0, 0x25c}) r2 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, r2) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r4, 0x5501) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 3.184759053s ago: executing program 1 (id=4871): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230f000000000300000007000000", @ANYRES32=0x0], 0x18}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pwritev(r6, &(0x7f0000000480)=[{&(0x7f0000000800)="e94fb1b1132ec8e506145a0e9c888c3289353eb63f7a83bfa5fbc1f6994f13deedd4d0d74142ee595efabca7eb715dfd08856be4c1048e207b60efdae7fb56be4e327146e75c0facf873d4960ef5e29cca7b831db70bd0b1939c7160", 0x5c}], 0x1, 0xce, 0x6) close_range(r5, r4, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000200)={0x5, 0x5, 0x40, 0x5}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x4058534c, &(0x7f00000000c0)={0x82, 0x0, {0x3, 0x0, 0x0, 0x0, 0xa3c6}}) 3.132895907s ago: executing program 3 (id=4872): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c5) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.785489098s ago: executing program 3 (id=4873): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.812877875s ago: executing program 4 (id=4874): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180), 0x0) 1.673854585s ago: executing program 4 (id=4875): unshare(0x2a020400) (async) eventfd(0x401) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4d40) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) pipe2(&(0x7f00000000c0), 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) (async) sendmsg$key(r6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 1.592648655s ago: executing program 3 (id=4876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x254, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x38, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9, 0x6, "4ac6768e05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x194, 0x1, [@m_pedit={0xcc, 0x11, 0x0, 0x0, {{0xa}, {0x4}, {0x9d, 0x6, "8901e361b494b5d8b0d32d835539ead4af550bea79e34365d32c492ff2e22234f2b145ddfc4f30f688e0164a553709adb1ccfc33f7bfc5becc42c696048040e4af43c9d285d1929094f5f40aa47666599f464f6df29bb65f74bbfc47c573c887701724a39e55989a4e5554729f6e53e8719a8bf21160b4676b58ad17436dd03428b944405d29d7f2cda329b961ab58304018c8ec4f47d32b79"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0xc4, 0x2, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "57512c7328557d10b965d75ac9efcd29"}, @TCA_CT_LABELS={0x14, 0x7, "8d60149ca32328c8edfdc3932ed2949b"}, @TCA_CT_ZONE={0x6, 0x4, 0x8000}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x3c}, @TCA_CT_LABELS={0x14, 0x7, "563a101103fc28bace1d7baeed16f654"}]}, {0x45, 0x6, "a8ac60a5c02cb307a2d4bd88100e383a56bcac0ef91a36ca7b23f8a3b3ac8212c5b55af1ed7b3d7324e8dee052ddf2bec6c9681278fd0104852520d8895bc36a40"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x81}, 0x20000084) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.489502804s ago: executing program 0 (id=4877): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0000, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 1.359474464s ago: executing program 2 (id=4878): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0xff, 0x801, 0x0, &(0x7f00000002c0)) 1.303978595s ago: executing program 3 (id=4879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d332000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/316], 0x184}}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000480)=""/133) close(0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) syz_emit_ethernet(0x3e, 0x0, 0x0) 1.253550135s ago: executing program 0 (id=4880): r0 = userfaultfd(0x80801) socket$kcm(0x2, 0x1, 0x84) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x3f, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 1.205494243s ago: executing program 2 (id=4881): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2) 1.188682969s ago: executing program 4 (id=4882): socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$MRT_FLUSH(r0, 0x2900, 0xd4, 0x0, 0x0) 1.116734183s ago: executing program 0 (id=4883): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r8], 0x50}}, 0x800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000040)="024ba05135fae8fa3436554e0f8ff126", 0x10) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000003600)={0x0, {}, 0x0, {}, 0x40000024, 0x0, 0x800019, 0x18, "28f5c9ea1f1ae4be4111ab1861e669bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793dde1aa9ca8d54100", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x7]}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0) pwritev(r9, &(0x7f0000003280)=[{&(0x7f0000003580)="0d9f20fc5c8f62cd2a1c8c4221c4758353af33839209790b604449590a93e8ecd2985f4e5326302cc3bc8111b65493f11ac9a82a87338272b3c25e4bdee6efabad4ad8d9323117e37bff0a3058abcd91432b04342e000000d4d6e5c6ecbfdec8cc2c548317861d4e1e2ff406", 0x6c}, {0x0}, {&(0x7f00000045c0)="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", 0xffe}], 0x3, 0x0, 0x1e2) r10 = syz_open_dev$loop(&(0x7f0000003100), 0x7ff, 0x2) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f00000031c0)={0x0, {}, 0x0, {}, 0xfffffffb, 0x5, 0x5, 0xc, "4ca4f6daab7b5ff723f40077da819c51b78030051dcd312a341c73e5011a6b3642628601ab5ac67e501b4fb3b2e8a0d38dee12703063c74a115b77e1bc69a689", "5f0ed1a45df3cf70490e6aadcc6a0207c7393d7212e283da3715b785579b1612", [0x507, 0x4]}) sendmmsg(r2, &(0x7f0000006c00)=[{{&(0x7f0000000280)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="a739db27fa95c3a3785bef217a0714101a230fe81d0e9f5c131b8dae7a63672f0b8414a61010bd03dc7f4f8b9a651dadf7250f5ccfd5204df90edb3fb40125bb8f3955ee0880a2fc6131f15e05424ef8cee7569b944f055b38c1ddbfd1", 0x5d}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="500000000000000014010000a4a646b0cf7865fa355231063c83ff68c0b778460c62ec660772a5a91ec8628ac35ec5d2975b361efe2710c0a6c1f122fde402a21122948380a51ebb4566cc231a6be8d3d4b37db1fecc85572eedd8ef733d39606f63a39ba50f1a15ee43f2427316062fc57769be168544c88e0d930a5fa688e4be76273c6d069bfcec864e7274bdab44b3f7d2df945967bba4e0d97f525cf88b5213dbf1839d90fa6dd274980e77cc6b6143c6738a84"], 0x50}}, {{&(0x7f0000000400)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="7b7cd36ba7d0174bd9becd4e0d5fcf4aaee1d5933a0ffabea75bdfdff4a215c498c9dafe2f9db5827242b1ee14f1b08d1af30a8d84a0a26b78e221088fabb00616db0eed4b55ea00d2da65117a1a525439004da86d06295a258b19a0712991588a767435229c35cd381671821a67b6c93a2aa197533d536d3f7ead1ad9bca46f656bd3123fee897b41a8b4ba3d33ee05164ec30248b8a9c5", 0x98}, {&(0x7f0000000540)="cde472a8afaad2153ceb2d8846ef3a3358013074fa597ef6f8702edde8a535b92b9aae972b0226004e02d971ffc73d9792bc9f234db008947cfa1b57e4af06e4497f05d9da8cca36be7f196bda3dea473fa4bad5de98f22954905ad53c8d0198a34ff85acdc0baf0a5d1fb1cf54e536af7d6b744b27f383668eff92fe85782f544761a808d66e6b4c9cba531dbf7879c90ed7d1939e635531e3fbe986e70c1d1", 0xa0}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0xfe0}, {&(0x7f0000000600)="d87637fadd6425ebf5c01c1dd7202452bd224468645317eb2c3a86d458f4220ddd6160d5ae718e9768e300ce0109d95c71dbcf243c2c09be8ce2dcb0d18ee1c7b2d5f9a62635b6b67178267820aaf8b9c05ebe824342f6ae73328911303a1819f2520783ae61678f443912cb02791f3ad100c03b1f84f26d371691a3c1d1c374c0073f60a8307a6f9eadae5c8eef8281de24aaf264ebde023a8a367d8392eac19f4dd6589652003b64cc76c6d6278eef091881ed7dcff39f28e92d70692dd9bbd14544fe9c3ca887b479781d40680dabb6ff661ce6045b02c3127bbf915d1bd55b", 0xe1}], 0x5, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)="0f48883e2b7a7e99a6d82a8dfbf16ae6a78ad8c4ae96204d91726604", 0x1c}, {&(0x7f0000000780)="709760e23b7a90a65cb07d10527d3e9bc0959e7a371685b4e278ef999e708f9056eeef5714b39de390e81b11a64ea718ccd69c97432e9a1f4e42cbd0592b6e0c93ed5b8a7c372cb4650605a07dded8d2a3c728cbf900680da9e3bea803cca8c9c0fc14ff8aa2cf89676e1620beb81b13", 0x70}, {&(0x7f0000002ac0)="ab2f8f002c0d567c334fb58233758bb69122041e1c3b9297a877b357a024071f11754f644f1805c6cb6253d4de84232e9a0493861092bc356baead2d063adde427ce6c684e11ccc0c23e88131942e39438ceb19f1ee60a4dc500308df1fadf67c1a884c74cf2e96de61978135d468e05663413f6cacf2e2c1c52a99483e60672e50aa925e0cf3d2df40982f6ea26d8c4973d378efe8baa2f44c9f019b620a1260ae4e18ba3eee9abf74469d955d2b090f1f6a95e0a10eb218ee464c136ff8a0461963db679607d69402697b86003c364cb49b7a217f08e8c3ced89f3b3fd970372925d0fa3ec5fe46ac568d399efc19f48f04c", 0xf3}], 0x3, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x538}}, {{&(0x7f0000003140)=@caif=@dgm={0x25, 0x9, 0x7}, 0x80, &(0x7f0000000840)=[{&(0x7f00000031c0)}, {&(0x7f00000032c0)="e3f57eb324bc6d0c6080ee6bd1ec953f42cd613bb3ecc3dee848344b2c29f004d849b94e0c2bca9a04253e67708f1059316a5942d23851c9b60901eea4a8c3d71583848a5678e82cd0af93fa13c8e1d610560bc7db5d20d7e59322b3daa9", 0x5e}, {&(0x7f0000003340)}], 0x3}}, {{&(0x7f0000003440)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f0000003280), 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB="b0000000000000000100000002000000d53f46aadeb32a68f64e267aa39d00221ec3960c9d824473636c54b63bebf070e002a249ccace027e5011e89606734ac9e0daebbb9bfcf42b7416c626241724a44491ad225fa4e282bcc57aec7a1c549cab758265275aa69bd1e36befc7b6bbd3ab7675508590d3ec04fed0e7decc86e78413875c2f94aac73b6caa01d813ae5a136dc96caa77d41261d7fa05353dff78ef61b7c62331e2fac41000000000000"], 0xb0}}, {{0x0, 0x0, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=ANY=[@ANYBLOB="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"], 0x1f8}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005b00)="059ff9f4b935dcef7deb5cc81633b2b63d82bd3164e048204484c8ee779d5be1d52ee6508cbb1f2f668a071a5df451eca2fc687aefa2aa8dbacff486b09ef489a282c9aacd8b2c606c0b3413b1817e1913d5dcc801dec19eeea217391d2938e61a4e7829bc473c7349d3ddd912f1744b", 0x70}, {&(0x7f0000005b80)="383023dbb155cb12109d1e0bcdb9f2992529d190ca6c072ab04d68ad7e00212153a3b2f11ce8de7e32bd9a7e6bb23bcd14185b445025fbfc4f229f5d20a138abacc92352fedd8665ee8a1e5a99d947eda9515d721eb0d8284b749a5b98524a9b420699334cb7028e21c605989aaaa19acd98b01e8f533203dc34abd6a557d17e1256988b87a10a26d0107643593714d209c6fac91796bac9b57ae3d48c45563ff125a42f6e25dc227f6cbde18bb6440b447eeb33689de585d862a984a3de9a86e229065f2c2c6c03236a31d717e8a3595a0350d3dd8006559c0f72e8dac4c8fb", 0xe0}, {&(0x7f0000005c80)="a6b57bc1d71b7c4decdbdcf5119144ca747fc416d0e9dea6d81456c070762ab6eecbfff87497745fd8e44cd999c292d0cf2db9130c38c4ed4bcb9d1913b19bc6df597bf60b977a8be5b8b30b669d54", 0x4f}], 0x3, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], 0x1d8}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f00000034c0)="e258ad8f64ffc358f5ab30baba6e68dea562a5f6889e886467f10bdc6649ca1f3b03907612c159297d0263dd341e3b0e57d8381add90524ba92fbf933bb748af0830e27ca20c3bcb870a05d481ee9f221831f095d137c7d35ac91cc1c514299e113a9e173f537d39d47b4397f816834f76a65ac3084c4f085d6e8c1ddd62f4edf51ccb79070cddd36db47cd974169a6388c8b448cf69fbbdcd827f40bc3ee14eea1dbe5e3cc17fb62ce961665c50a304da", 0xb1}, {&(0x7f0000006000)="25e4cc1f21091684f9bda882203ac18a8d062470fd79c8f30cb2debde7099f28aa7a5d6fec0c30a0c9ed021a142d1935c35ae98c161b86920ad9cadfe03b8a0ba48578584ce75aded60f49678e03653f5645c77083a1d4a2f49dd084888cdecfe95a621c38b9cf45556bfb21e565a0befba5234125316b03628564c4ed1c62aad84aea262345493aaa6587c7a31940e4a9c68cb717d92d5013ad0cf974fc2c296f061d7b962a1ab60e2f311b151595a51ca9985e3c0f5a9351cb05022526d05b20f36d45674ec59ac7be79ac6a0cb5b203e4c0b7d00ddf15e57a6a45", 0xdc}, {&(0x7f0000006100)="fe365d1968de219b21df12993b30e8af27144948279cb8a24969c4439ee5dd7626e016a2d860632710e9b417e7a4f1418b9324d17101c9e65306ad4a06e8f565d942adfed0267a1ca7d58a630dffa33e93f61b3cc35f275e522ae42302699957e7a1508568", 0x65}, {&(0x7f0000006180)="a275dcd1cf0821d1f841083109c3f537b5df2eaa47d755f4128068e8d753d6e18548432ad06b35e90731a0500f850c95a7ad5089", 0x34}, {&(0x7f0000003340)="eef23b01000ec8461844e4833bf2c6a85654d9b8d406e0d38c064b70c99e9afaba783b9ca54821c3a4006570b714cf21612961d132b4c66fe5512978fcdcb4bbc1e4edcde07413027a3c9ea82131b2f42e050d3ae62319827fa4f23ada6306270233c6738b0348aabe985cddc1c4bca05badc5606028816e10eda7e45ae2355bd40f29f8701aa4986d7ec2f3a22384773b69eaf6bbc6d7cb50e67487212e6c95592633d00abfdbed290150b79f8362135e848471658abcb7ee3ef29d486a0201dfd5c495afbbc7e3", 0xc8}, {&(0x7f0000006240)="0c078d3fe81e3bb6e6228337a09d4e9d6de518f61765770bafbf805e5581d8527f77a41511d686a1a592d2d393f1591eaeb634d0db8dc3292e81077a0940dcf33b6dbe9668d2476989e736df8298a1e9c04fdca78303252d68e79b2239b9dbe75ce5683ee24ce78da522a45ae275a775f6668a8c27ae27bb8eb612c1faa2bc65a1f6cf25d77fcd31c45b046e29d6db5275ed6f5c7490210d09b0a7bff5acb618a85b6d66747d", 0xa6}], 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="100220100006000000407b6f0d81775f7de909750cc4fa"], 0x10}}, {{&(0x7f0000006400)=@generic={0x2b, "1cbda85079cc054817e7d339e941b80c485493c090bbe3d434de91df23f1b81acb3511596599095084832bf750f0e6cb67fc91d70837d5c550213634022b2e1883e618de151cad208cc01059a4414eaf4d3516e0b209c8e2ebfe87969c615e5097c336830103831587b2a7a68f86728399cb3bf91880d6598d9a76dcc60f"}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006480)="1e742e666adc232c85cad319bac0deb0d7d4ac78ef0a1732fef32f0dadef3ab610e97a77cfb9c09158a0be038a63ee697ecee96245c60c91980a515ce24b4ac92e6f3edee6754e8200d5", 0x4a}, {&(0x7f0000006500)="76eb8dbb40b1ebf4b5ab52bb42656db3666f850b03266ec036309ec221e0a432134e8b3d7cc2fd02fb10491938354619e7c57dc106f13494f844f5c1eec8ec174c43f1fe11d96d72b665f3458152ba850709dbffa573dbb023de3adaac0bcac122d41882a3dbf96d09cbbd2c505763f414710f6631561bb7b64c8521233a6074de4c0f8a63d2e7edd2647d20eee0d80263ffa14c20deafed440fd5817b282a99882e47351944562cbd9517c6360a2968273a05f49066fa01de3012af9c250144f574ef53bb509a437752c095fb55978e1a572c5c17a8cf29", 0xd8}, {&(0x7f0000006600)="455fe00e9b0d79e546e1a8e4456411f4c44fecd2eebbb95399076ea345ed85941034ae0b4dce4f319a5949aea2e8f734d1a5821ac46897f9966ce870e0a16cc3fa17b0cce130220976170aee9c09b78220548bfc606b96a24bb7cf4a23402f2b3a57d1d817439d326845068bad08d804dc3041f6937a37186d00fd5e797562214c1e8d0bd98196099f7f736f823ed838d3669a3a95116e8a322951fd51e21c231fe794f3b8a836dd06df4e13c40730188a6a3a2133aec88dc797ac277aae631f61f522bf6ae186f05966eb14c047aaa8ded100ac5691d91f2e008140e704c5ccec8c862c609d2a65340d144d13e0f34cbfd028e5119e99", 0xf7}, {&(0x7f0000006700)="0885", 0x2}, {&(0x7f0000006740)="5b8977e7541e24b7b98aacae6b06acf5957b5ae792b5429cff57ca7b741f3f7c91ca1edc87", 0x25}, {&(0x7f0000006780)="f86462b3fb7b10d138d29823", 0xc}, {&(0x7f00000067c0)="285f79bda3acc1b0994cc25cc706445b2227f18ae63acad0705e", 0x1a}, {&(0x7f0000006800)="0d007bf8581bd8a0e4651a988ef876e7ff2d03191352af6d0920cd205b18199b76a9be18a78f6590179980196d7e07f2591eecf21424c71d64b28b40714906a20cc5ee34a5b2dd9a5ab30bcc4ee49cab06f52654f8612c365b552daddb7e25f8e4f713e30c08fcf2075356526d779fc69ea1051fdddfa2a9a1b3afa8c773bd8696cd429b389f818454e99bc2ce2aaa5cc20afaee4ab3c1f21d43f07b40d2ac90978b29cb035f661570fa319dc45ead241910e9f65815a14a4a6a50e9b81dc603d9695c9cb015827611a385801be38ad1189c20a831b45643c8d54845af83d07659", 0xe1}, {&(0x7f0000006900)}, {&(0x7f0000006940)="1150207c55c6acc1ebdf9bee5d9fb13a529e02583eb4a4efb8deae148416b9e9d0461ad86c7ed71f18c2b6e5c15d6a0f9df0d1380953474c10ef6dd1490798e6c0a1b72c1aeeab49b3f5c05860019ec3363699b3448105789e5e418ecc9380e8c234147f6d7193537cba17b48a3e5c35", 0x70}], 0xa, &(0x7f0000006f40)=ANY=[@ANYBLOB="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"], 0x158}}], 0x9, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 775.445784ms ago: executing program 4 (id=4884): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 466.631383ms ago: executing program 2 (id=4885): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{0x0}], 0x1) 425.2113ms ago: executing program 0 (id=4886): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 191.953423ms ago: executing program 2 (id=4887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x144}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x11000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000010000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000000d000/0x1000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400)="449c9830bfb8b299114a34a31ddb49eaf7da4b932b5e0b33cf676a9679e058e949b2eb20f80d6e6a3303f21cbc10690d324f93e62afa71916bb20ee97eab9bb4ee626f01d3c7c692ffbab53ed2c02063743e3e7346d917921e0280aaa218febeee04dc59ae067a39a7f8bb608c513a9cc10e16bc0032efbda23cf89bc6cf8bb9f788100affbdf5375fac9c111bbf7d23f607d23ab8bf554b877bb38969fe3752e8ab4e20abb0956b3ba8ee88a19c", 0xae, r2}, 0x68) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t'], 0x5c}}, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1}, {&(0x7f00000005c0)="ae78", 0x2}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r1) 0s ago: executing program 0 (id=4888): socket$alg(0x26, 0x5, 0x0) syz_open_dev$cec(0x0, 0x0, 0x40880) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1ec51b1", 0xf2}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a4ab9b76efff69534261326c259b2c88e6fcbca536490258f8ab5a510", 0x62}], 0x3, &(0x7f0000000400)}, 0x4000042) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x2) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) kernel console output (not intermixed with test programs): or 'fd' [ 904.532507][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 904.532524][ T30] audit: type=1326 audit(1753377303.388:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 904.618938][ T30] audit: type=1326 audit(1753377303.388:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.050822][ T30] audit: type=1326 audit(1753377303.388:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.145450][ T30] audit: type=1326 audit(1753377303.388:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.211683][ T30] audit: type=1326 audit(1753377303.388:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.300766][ T30] audit: type=1326 audit(1753377303.388:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.352840][ T30] audit: type=1326 audit(1753377303.388:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.513921][ T43] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 905.541983][ T30] audit: type=1326 audit(1753377303.388:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc48d38e9a9 code=0x7ffc0000 [ 905.613748][ T30] audit: type=1326 audit(1753377303.388:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc48d38e9e3 code=0x7ffc0000 [ 905.697207][ T30] audit: type=1326 audit(1753377303.548:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20456 comm="syz.2.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc48d38e9e3 code=0x7ffc0000 [ 905.702628][ T43] usb 5-1: config 0 has no interfaces? [ 905.886433][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 905.895636][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.903954][ T43] usb 5-1: Product: syz [ 905.908307][ T43] usb 5-1: Manufacturer: syz [ 905.912919][ T43] usb 5-1: SerialNumber: syz [ 905.953080][ T43] usb 5-1: config 0 descriptor?? [ 908.121257][T20527] netlink: 'syz.1.4573': attribute type 20 has an invalid length. [ 908.185978][ T93] usb 5-1: USB disconnect, device number 101 [ 908.207278][T20529] fuse: Bad value for 'fd' [ 908.263682][ T43] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 908.413677][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 908.432492][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 908.463941][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 908.494981][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.525929][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 908.535682][ T43] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 908.545143][ T43] usb 1-1: Product: syz [ 908.553913][ T43] usb 1-1: Manufacturer: syz [ 908.558680][ T43] usb 1-1: SerialNumber: syz [ 908.614976][ T43] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input80 [ 908.935882][T20548] fuse: Bad value for 'fd' [ 909.049818][ T93] usb 1-1: USB disconnect, device number 95 [ 909.049896][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 909.102792][ T93] appletouch 1-1:1.0: input: appletouch disconnected [ 909.403701][ T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 909.424585][T20564] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 909.614679][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.641884][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.687033][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.743878][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.753266][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.765744][ T43] usb 2-1: config 0 descriptor?? [ 910.186028][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.195571][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.224517][ T43] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 910.255771][ T43] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 910.373843][ T5898] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 910.446486][ T43] usb 2-1: USB disconnect, device number 86 [ 910.523735][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 910.552317][ T5898] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 910.616597][T20587] fido_id[20587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 910.631079][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.667491][ T5898] usb 3-1: config 0 descriptor?? [ 910.842902][T20596] fuse: Bad value for 'fd' [ 910.914270][ T5898] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 911.058458][T20613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4591'. [ 912.113796][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 912.364047][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 912.455087][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 912.464436][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 912.473353][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 913.226477][T20641] FAULT_INJECTION: forcing a failure. [ 913.226477][T20641] name failslab, interval 1, probability 0, space 0, times 0 [ 913.240730][ T5898] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 913.257556][ T5898] asix 3-1:0.0: probe with driver asix failed with error -71 [ 913.290531][T20641] CPU: 0 UID: 0 PID: 20641 Comm: syz.4.4597 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 913.290558][T20641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 913.290568][T20641] Call Trace: [ 913.290576][T20641] [ 913.290584][T20641] dump_stack_lvl+0x189/0x250 [ 913.290610][T20641] ? __pfx____ratelimit+0x10/0x10 [ 913.290630][T20641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 913.290647][T20641] ? __pfx__printk+0x10/0x10 [ 913.290673][T20641] ? __pfx___might_resched+0x10/0x10 [ 913.290692][T20641] ? fs_reclaim_acquire+0x7d/0x100 [ 913.290714][T20641] should_fail_ex+0x414/0x560 [ 913.290739][T20641] should_failslab+0xa8/0x100 [ 913.290764][T20641] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 913.290787][T20641] ? __alloc_skb+0x112/0x2d0 [ 913.290810][T20641] __alloc_skb+0x112/0x2d0 [ 913.290835][T20641] netlink_ack+0x146/0xa50 [ 913.290855][T20641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.290871][T20641] ? ref_tracker_free+0x63a/0x7d0 [ 913.290889][T20641] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 913.290915][T20641] ? __pfx_nl80211_post_doit+0x10/0x10 [ 913.290932][T20641] ? __pfx_ref_tracker_free+0x10/0x10 [ 913.290960][T20641] netlink_rcv_skb+0x28c/0x470 [ 913.290984][T20641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.291003][T20641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.291043][T20641] ? down_read+0x1ad/0x2e0 [ 913.291066][T20641] genl_rcv+0x28/0x40 [ 913.291082][T20641] netlink_unicast+0x75c/0x8e0 [ 913.291114][T20641] netlink_sendmsg+0x805/0xb30 [ 913.291145][T20641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.291178][T20641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.291202][T20641] __sock_sendmsg+0x21c/0x270 [ 913.291224][T20641] ____sys_sendmsg+0x505/0x830 [ 913.291246][T20641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.291272][T20641] ? import_iovec+0x74/0xa0 [ 913.291299][T20641] ___sys_sendmsg+0x21f/0x2a0 [ 913.291318][T20641] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.291366][T20641] ? __fget_files+0x2a/0x420 [ 913.291381][T20641] ? __fget_files+0x3a0/0x420 [ 913.291405][T20641] __x64_sys_sendmsg+0x19b/0x260 [ 913.291424][T20641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.291449][T20641] ? __pfx_ksys_write+0x10/0x10 [ 913.291467][T20641] ? rcu_is_watching+0x15/0xb0 [ 913.291489][T20641] ? do_syscall_64+0xbe/0x3b0 [ 913.291510][T20641] do_syscall_64+0xfa/0x3b0 [ 913.291526][T20641] ? lockdep_hardirqs_on+0x9c/0x150 [ 913.291542][T20641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.291562][T20641] ? clear_bhb_loop+0x60/0xb0 [ 913.291582][T20641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.291596][T20641] RIP: 0033:0x7fc971d8e9a9 [ 913.291610][T20641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.291624][T20641] RSP: 002b:00007fc972b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.291642][T20641] RAX: ffffffffffffffda RBX: 00007fc971fb5fa0 RCX: 00007fc971d8e9a9 [ 913.291654][T20641] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 913.291664][T20641] RBP: 00007fc972b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 913.291674][T20641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.291684][T20641] R13: 0000000000000000 R14: 00007fc971fb5fa0 R15: 00007fc9720dfa28 [ 913.291713][T20641] [ 913.637940][ T5898] usb 3-1: USB disconnect, device number 84 [ 913.986650][T20643] FAULT_INJECTION: forcing a failure. [ 913.986650][T20643] name failslab, interval 1, probability 0, space 0, times 0 [ 914.001166][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.4.4599 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 914.001192][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 914.001202][T20643] Call Trace: [ 914.001208][T20643] [ 914.001213][T20643] dump_stack_lvl+0x189/0x250 [ 914.001230][T20643] ? __pfx____ratelimit+0x10/0x10 [ 914.001249][T20643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.001268][T20643] ? __pfx__printk+0x10/0x10 [ 914.001296][T20643] ? __pfx___might_resched+0x10/0x10 [ 914.001320][T20643] should_fail_ex+0x414/0x560 [ 914.001339][T20643] should_failslab+0xa8/0x100 [ 914.001355][T20643] __kmalloc_cache_noprof+0x70/0x3d0 [ 914.001370][T20643] ? mpi_alloc+0x52/0x140 [ 914.001382][T20643] mpi_alloc+0x52/0x140 [ 914.001398][T20643] mpi_read_raw_data+0x139/0x970 [ 914.001425][T20643] dh_set_secret+0x186/0x310 [ 914.001443][T20643] ? crypto_create_tfm_node+0x83/0x3f0 [ 914.001471][T20643] ? __pfx_dh_set_secret+0x10/0x10 [ 914.001489][T20643] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 914.001508][T20643] __keyctl_dh_compute+0x507/0xca0 [ 914.001523][T20643] ? __might_fault+0xb0/0x130 [ 914.001538][T20643] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 914.001567][T20643] ? __lock_acquire+0xab9/0xd20 [ 914.001615][T20643] keyctl_dh_compute+0x109/0x160 [ 914.001632][T20643] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 914.001646][T20643] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 914.001658][T20643] ? vfs_write+0x8d8/0xa90 [ 914.001678][T20643] __se_sys_keyctl+0x423/0x910 [ 914.001691][T20643] ? __pfx___se_sys_keyctl+0x10/0x10 [ 914.001712][T20643] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 914.001736][T20643] ? __fget_files+0x3a0/0x420 [ 914.001760][T20643] ? fput+0xa0/0xd0 [ 914.001777][T20643] ? ksys_write+0x22a/0x250 [ 914.001793][T20643] ? __pfx_ksys_write+0x10/0x10 [ 914.001804][T20643] ? rcu_is_watching+0x15/0xb0 [ 914.001819][T20643] ? do_syscall_64+0xbe/0x3b0 [ 914.001830][T20643] ? __x64_sys_keyctl+0x20/0xc0 [ 914.001845][T20643] do_syscall_64+0xfa/0x3b0 [ 914.001863][T20643] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.001881][T20643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.001899][T20643] ? clear_bhb_loop+0x60/0xb0 [ 914.001920][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.001933][T20643] RIP: 0033:0x7fc971d8e9a9 [ 914.001943][T20643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.001951][T20643] RSP: 002b:00007fc972b1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 914.001963][T20643] RAX: ffffffffffffffda RBX: 00007fc971fb5fa0 RCX: 00007fc971d8e9a9 [ 914.001970][T20643] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 914.001977][T20643] RBP: 00007fc972b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 914.001983][T20643] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 914.001992][T20643] R13: 0000000000000000 R14: 00007fc971fb5fa0 R15: 00007fc9720dfa28 [ 914.002020][T20643] [ 914.482939][T20651] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4598'. [ 914.992192][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 915.010034][T20661] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4604'. [ 915.019367][ T24] usb 2-1: no configurations [ 915.027659][ T24] usb 2-1: can't read configurations, error -22 [ 915.383821][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 915.539166][ T24] usb 2-1: no configurations [ 915.546387][ T24] usb 2-1: can't read configurations, error -22 [ 915.562672][ T24] usb usb2-port1: attempt power cycle [ 915.707082][T20669] libceph: resolve '4..' (ret=-3): failed [ 915.747646][T20671] fuse: Bad value for 'fd' [ 915.760651][T20673] netlink: 'syz.0.4607': attribute type 12 has an invalid length. [ 915.794485][T20673] netlink: 'syz.0.4607': attribute type 29 has an invalid length. [ 915.816687][T20673] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4607'. [ 915.857327][T20673] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4607'. [ 915.933820][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 915.958951][ T24] usb 2-1: no configurations [ 915.963718][ T24] usb 2-1: can't read configurations, error -22 [ 916.100958][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 916.157466][ T24] usb 2-1: no configurations [ 916.162129][ T24] usb 2-1: can't read configurations, error -22 [ 916.178733][ T24] usb usb2-port1: unable to enumerate USB device [ 916.323803][T20682] syzkaller1: entered promiscuous mode [ 916.357711][T20682] syzkaller1: entered allmulticast mode [ 916.477782][T20683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4608'. [ 916.725594][T20690] netlink: 'syz.2.4611': attribute type 12 has an invalid length. [ 916.738776][T20690] netlink: 'syz.2.4611': attribute type 29 has an invalid length. [ 916.747273][T20690] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4611'. [ 916.760694][T20690] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4611'. [ 917.403822][T15138] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 917.592524][T15138] usb 3-1: device descriptor read/64, error -71 [ 917.893658][T15138] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 918.023752][T15138] usb 3-1: device descriptor read/64, error -71 [ 918.116420][T20709] FAULT_INJECTION: forcing a failure. [ 918.116420][T20709] name failslab, interval 1, probability 0, space 0, times 0 [ 918.138476][T20710] fuse: Invalid rootmode [ 918.143955][T15138] usb usb3-port1: attempt power cycle [ 918.176108][T20709] CPU: 0 UID: 0 PID: 20709 Comm: syz.0.4616 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 918.176125][T20709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 918.176131][T20709] Call Trace: [ 918.176136][T20709] [ 918.176142][T20709] dump_stack_lvl+0x189/0x250 [ 918.176159][T20709] ? __pfx____ratelimit+0x10/0x10 [ 918.176172][T20709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.176183][T20709] ? __pfx__printk+0x10/0x10 [ 918.176201][T20709] ? __pfx___might_resched+0x10/0x10 [ 918.176216][T20709] should_fail_ex+0x414/0x560 [ 918.176230][T20709] ? fuse_readdir+0x146e/0x2bb0 [ 918.176243][T20709] should_failslab+0xa8/0x100 [ 918.176259][T20709] __kvmalloc_node_noprof+0x161/0x5f0 [ 918.176274][T20709] ? fuse_readdir+0x146e/0x2bb0 [ 918.176288][T20709] fuse_readdir+0x146e/0x2bb0 [ 918.176309][T20709] ? __lock_acquire+0xab9/0xd20 [ 918.176325][T20709] ? __might_fault+0xb0/0x130 [ 918.176342][T20709] ? __pfx_fuse_readdir+0x10/0x10 [ 918.176364][T20709] ? aa_file_perm+0x11f/0xed0 [ 918.176378][T20709] ? aa_file_perm+0x11f/0xed0 [ 918.176389][T20709] ? look_up_lock_class+0x74/0x170 [ 918.176402][T20709] ? register_lock_class+0x51/0x320 [ 918.176427][T20709] ? end_current_label_crit_section+0x152/0x180 [ 918.176439][T20709] ? iterate_dir+0x49f/0x770 [ 918.176451][T20709] ? down_read_killable+0x1d1/0x350 [ 918.176467][T20709] iterate_dir+0x5af/0x770 [ 918.176483][T20709] __se_sys_getdents64+0xe4/0x260 [ 918.176498][T20709] ? __pfx___se_sys_getdents64+0x10/0x10 [ 918.176510][T20709] ? ksys_write+0x22a/0x250 [ 918.176521][T20709] ? __pfx_filldir64+0x10/0x10 [ 918.176536][T20709] ? __pfx_ksys_write+0x10/0x10 [ 918.176547][T20709] ? rcu_is_watching+0x15/0xb0 [ 918.176562][T20709] ? do_syscall_64+0xbe/0x3b0 [ 918.176575][T20709] do_syscall_64+0xfa/0x3b0 [ 918.176586][T20709] ? lockdep_hardirqs_on+0x9c/0x150 [ 918.176596][T20709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.176606][T20709] ? clear_bhb_loop+0x60/0xb0 [ 918.176618][T20709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.176628][T20709] RIP: 0033:0x7fab93f8e9a9 [ 918.176638][T20709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.176651][T20709] RSP: 002b:00007fab93dd6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 918.176663][T20709] RAX: ffffffffffffffda RBX: 00007fab941b6080 RCX: 00007fab93f8e9a9 [ 918.176671][T20709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 918.176677][T20709] RBP: 00007fab93dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 918.176684][T20709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.176690][T20709] R13: 0000000000000000 R14: 00007fab941b6080 R15: 00007fab942dfa28 [ 918.176706][T20709] [ 918.718677][T20714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 918.725257][T20714] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 918.752430][T20714] vhci_hcd vhci_hcd.0: Device attached [ 918.759807][T20715] vhci_hcd: connection closed [ 918.760214][T12647] vhci_hcd: stop threads [ 918.783796][T15138] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 918.804457][T12647] vhci_hcd: release socket [ 918.809353][T15138] usb 3-1: device descriptor read/8, error -71 [ 918.816125][T12647] vhci_hcd: disconnect device [ 918.911548][T20725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.925565][T20725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.937760][T20725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.952064][T20725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.060489][T20731] libceph: resolve '4..' (ret=-3): failed [ 919.082475][T15138] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 919.088342][T20732] netlink: 'syz.3.4625': attribute type 12 has an invalid length. [ 919.103117][T20732] netlink: 'syz.3.4625': attribute type 29 has an invalid length. [ 919.104551][T15138] usb 3-1: device descriptor read/8, error -71 [ 919.149225][ T980] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 919.165663][T20732] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4625'. [ 919.185377][T20732] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4625'. [ 919.323097][T15138] usb usb3-port1: unable to enumerate USB device [ 919.368705][ T980] usb 1-1: config 36 has too many interfaces: 160, using maximum allowed: 32 [ 919.377650][ T980] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 919.403489][ T980] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 160 [ 919.420703][ T980] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 919.433674][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.442029][ T980] usb 1-1: Product: syz [ 919.447854][ T980] usb 1-1: Manufacturer: syz [ 919.453905][ T980] usb 1-1: SerialNumber: syz [ 919.682994][ T980] usb 1-1: USB disconnect, device number 96 [ 920.131256][T20744] FAULT_INJECTION: forcing a failure. [ 920.131256][T20744] name failslab, interval 1, probability 0, space 0, times 0 [ 920.131288][T20744] CPU: 1 UID: 0 PID: 20744 Comm: syz.4.4630 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 920.131310][T20744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 920.131320][T20744] Call Trace: [ 920.131328][T20744] [ 920.131337][T20744] dump_stack_lvl+0x189/0x250 [ 920.131361][T20744] ? __pfx____ratelimit+0x10/0x10 [ 920.131382][T20744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.131401][T20744] ? __pfx__printk+0x10/0x10 [ 920.131440][T20744] ? __pfx___might_resched+0x10/0x10 [ 920.131459][T20744] ? fs_reclaim_acquire+0x7d/0x100 [ 920.131482][T20744] should_fail_ex+0x414/0x560 [ 920.131507][T20744] should_failslab+0xa8/0x100 [ 920.131532][T20744] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 920.131555][T20744] ? __alloc_skb+0x112/0x2d0 [ 920.131583][T20744] __alloc_skb+0x112/0x2d0 [ 920.131609][T20744] netlink_ack+0x146/0xa50 [ 920.131633][T20744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.131650][T20744] ? ref_tracker_free+0x63a/0x7d0 [ 920.131668][T20744] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 920.131685][T20744] ? __pfx_nl80211_post_doit+0x10/0x10 [ 920.131703][T20744] ? __pfx_ref_tracker_free+0x10/0x10 [ 920.131733][T20744] netlink_rcv_skb+0x28c/0x470 [ 920.131756][T20744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.131776][T20744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.131816][T20744] ? down_read+0x1ad/0x2e0 [ 920.131840][T20744] genl_rcv+0x28/0x40 [ 920.131856][T20744] netlink_unicast+0x75c/0x8e0 [ 920.131888][T20744] netlink_sendmsg+0x805/0xb30 [ 920.131921][T20744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.131947][T20744] ? aa_sock_msg_perm+0x94/0x160 [ 920.131967][T20744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.131985][T20744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.132008][T20744] __sock_sendmsg+0x21c/0x270 [ 920.132033][T20744] ____sys_sendmsg+0x505/0x830 [ 920.132057][T20744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.132081][T20744] ? import_iovec+0x74/0xa0 [ 920.132101][T20744] ___sys_sendmsg+0x21f/0x2a0 [ 920.132115][T20744] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.132161][T20744] ? __fget_files+0x2a/0x420 [ 920.132176][T20744] ? __fget_files+0x3a0/0x420 [ 920.132202][T20744] __x64_sys_sendmsg+0x19b/0x260 [ 920.132222][T20744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.132246][T20744] ? __pfx_ksys_write+0x10/0x10 [ 920.132265][T20744] ? rcu_is_watching+0x15/0xb0 [ 920.132290][T20744] ? do_syscall_64+0xbe/0x3b0 [ 920.132313][T20744] do_syscall_64+0xfa/0x3b0 [ 920.132329][T20744] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.132347][T20744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.132363][T20744] ? clear_bhb_loop+0x60/0xb0 [ 920.132383][T20744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.132399][T20744] RIP: 0033:0x7fc971d8e9a9 [ 920.132421][T20744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.132436][T20744] RSP: 002b:00007fc972b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.132454][T20744] RAX: ffffffffffffffda RBX: 00007fc971fb5fa0 RCX: 00007fc971d8e9a9 [ 920.132466][T20744] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 920.132477][T20744] RBP: 00007fc972b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 920.132488][T20744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.132499][T20744] R13: 0000000000000000 R14: 00007fc971fb5fa0 R15: 00007fc9720dfa28 [ 920.132526][T20744] [ 920.138809][T20745] FAULT_INJECTION: forcing a failure. [ 920.138809][T20745] name failslab, interval 1, probability 0, space 0, times 0 [ 920.514012][T20745] CPU: 1 UID: 0 PID: 20745 Comm: syz.1.4629 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 920.514038][T20745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 920.514050][T20745] Call Trace: [ 920.514057][T20745] [ 920.514064][T20745] dump_stack_lvl+0x189/0x250 [ 920.514090][T20745] ? __pfx____ratelimit+0x10/0x10 [ 920.514111][T20745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.514129][T20745] ? __pfx__printk+0x10/0x10 [ 920.514155][T20745] ? __pfx___might_resched+0x10/0x10 [ 920.514172][T20745] ? fs_reclaim_acquire+0x7d/0x100 [ 920.514192][T20745] should_fail_ex+0x414/0x560 [ 920.514216][T20745] should_failslab+0xa8/0x100 [ 920.514240][T20745] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 920.514263][T20745] ? __alloc_skb+0x112/0x2d0 [ 920.514291][T20745] __alloc_skb+0x112/0x2d0 [ 920.514317][T20745] netlink_ack+0x146/0xa50 [ 920.514337][T20745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.514354][T20745] ? ref_tracker_free+0x63a/0x7d0 [ 920.514380][T20745] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 920.514397][T20745] ? __pfx_nl80211_post_doit+0x10/0x10 [ 920.514415][T20745] ? __pfx_ref_tracker_free+0x10/0x10 [ 920.514454][T20745] netlink_rcv_skb+0x28c/0x470 [ 920.514476][T20745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.514496][T20745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.514534][T20745] ? down_read+0x1ad/0x2e0 [ 920.514554][T20745] genl_rcv+0x28/0x40 [ 920.514569][T20745] netlink_unicast+0x75c/0x8e0 [ 920.514598][T20745] netlink_sendmsg+0x805/0xb30 [ 920.514629][T20745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.514653][T20745] ? aa_sock_msg_perm+0x94/0x160 [ 920.514674][T20745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.514690][T20745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.514710][T20745] __sock_sendmsg+0x21c/0x270 [ 920.514732][T20745] ____sys_sendmsg+0x505/0x830 [ 920.514754][T20745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.514778][T20745] ? import_iovec+0x74/0xa0 [ 920.514801][T20745] ___sys_sendmsg+0x21f/0x2a0 [ 920.514815][T20745] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.514843][T20745] ? __fget_files+0x2a/0x420 [ 920.514852][T20745] ? __fget_files+0x3a0/0x420 [ 920.514867][T20745] __x64_sys_sendmsg+0x19b/0x260 [ 920.514878][T20745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.514893][T20745] ? __pfx_ksys_write+0x10/0x10 [ 920.514906][T20745] ? rcu_is_watching+0x15/0xb0 [ 920.514922][T20745] ? do_syscall_64+0xbe/0x3b0 [ 920.514942][T20745] do_syscall_64+0xfa/0x3b0 [ 920.514958][T20745] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.514975][T20745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.514993][T20745] ? clear_bhb_loop+0x60/0xb0 [ 920.515010][T20745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.515020][T20745] RIP: 0033:0x7febd0b8e9a9 [ 920.515030][T20745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.515038][T20745] RSP: 002b:00007febd19de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.515050][T20745] RAX: ffffffffffffffda RBX: 00007febd0db5fa0 RCX: 00007febd0b8e9a9 [ 920.515058][T20745] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 920.515065][T20745] RBP: 00007febd19de090 R08: 0000000000000000 R09: 0000000000000000 [ 920.515071][T20745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.515077][T20745] R13: 0000000000000000 R14: 00007febd0db5fa0 R15: 00007febd0edfa28 [ 920.515093][T20745] [ 921.188823][T20756] input: syz0 as /devices/virtual/input/input82 [ 921.229809][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 921.229826][ T30] audit: type=1326 audit(1753377320.098:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20749 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93f8e9a9 code=0x7ffc0000 [ 921.259538][ T30] audit: type=1326 audit(1753377320.098:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20749 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fab93f8e9a9 code=0x7ffc0000 [ 921.282749][ T30] audit: type=1326 audit(1753377320.098:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20749 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93f8e9a9 code=0x7ffc0000 [ 921.305331][ T30] audit: type=1326 audit(1753377320.098:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20749 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab93f8d310 code=0x7ffc0000 [ 921.328187][ T30] audit: type=1326 audit(1753377320.108:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20749 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93f8e9a9 code=0x7ffc0000 [ 921.512133][ T30] audit: type=1326 audit(1753377320.108:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20749 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93f8e9a9 code=0x7ffc0000 [ 922.730673][ T43] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 922.942672][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.973761][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 922.985582][ T43] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.006430][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 923.021493][T20790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.032226][T20790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.096143][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 923.120576][ T43] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 923.191330][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.348962][T20778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 923.384821][ T43] hub 3-1:1.0: bad descriptor, ignoring hub [ 923.401227][ T43] hub 3-1:1.0: probe with driver hub failed with error -5 [ 923.421706][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 923.464132][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 923.542316][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 923.663703][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 924.253864][ T93] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 924.428666][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.450666][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.487746][ T93] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 924.536514][ T93] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.589265][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.610874][ T93] usb 4-1: config 0 descriptor?? [ 924.619495][T20816] FAULT_INJECTION: forcing a failure. [ 924.619495][T20816] name failslab, interval 1, probability 0, space 0, times 0 [ 924.634300][T20816] CPU: 1 UID: 0 PID: 20816 Comm: syz.4.4654 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 924.634316][T20816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 924.634323][T20816] Call Trace: [ 924.634328][T20816] [ 924.634333][T20816] dump_stack_lvl+0x189/0x250 [ 924.634350][T20816] ? __pfx____ratelimit+0x10/0x10 [ 924.634362][T20816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.634373][T20816] ? __pfx__printk+0x10/0x10 [ 924.634391][T20816] ? __pfx___might_resched+0x10/0x10 [ 924.634402][T20816] ? fs_reclaim_acquire+0x7d/0x100 [ 924.634416][T20816] should_fail_ex+0x414/0x560 [ 924.634430][T20816] should_failslab+0xa8/0x100 [ 924.634446][T20816] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 924.634460][T20816] ? __alloc_skb+0x112/0x2d0 [ 924.634477][T20816] __alloc_skb+0x112/0x2d0 [ 924.634494][T20816] netlink_ack+0x146/0xa50 [ 924.634507][T20816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 924.634517][T20816] ? ref_tracker_free+0x63a/0x7d0 [ 924.634527][T20816] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 924.634538][T20816] ? __pfx_nl80211_post_doit+0x10/0x10 [ 924.634548][T20816] ? __pfx_ref_tracker_free+0x10/0x10 [ 924.634564][T20816] netlink_rcv_skb+0x28c/0x470 [ 924.634579][T20816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 924.634591][T20816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 924.634614][T20816] ? down_read+0x1ad/0x2e0 [ 924.634628][T20816] genl_rcv+0x28/0x40 [ 924.634638][T20816] netlink_unicast+0x75c/0x8e0 [ 924.634664][T20816] netlink_sendmsg+0x805/0xb30 [ 924.634685][T20816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.634700][T20816] ? aa_sock_msg_perm+0x94/0x160 [ 924.634713][T20816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.634724][T20816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.634738][T20816] __sock_sendmsg+0x21c/0x270 [ 924.634762][T20816] ____sys_sendmsg+0x505/0x830 [ 924.634774][T20816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.634789][T20816] ? import_iovec+0x74/0xa0 [ 924.634806][T20816] ___sys_sendmsg+0x21f/0x2a0 [ 924.634817][T20816] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.634846][T20816] ? __fget_files+0x2a/0x420 [ 924.634855][T20816] ? __fget_files+0x3a0/0x420 [ 924.634870][T20816] __x64_sys_sendmsg+0x19b/0x260 [ 924.634881][T20816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.634896][T20816] ? __pfx_ksys_write+0x10/0x10 [ 924.634910][T20816] ? rcu_is_watching+0x15/0xb0 [ 924.634925][T20816] ? do_syscall_64+0xbe/0x3b0 [ 924.634939][T20816] do_syscall_64+0xfa/0x3b0 [ 924.634950][T20816] ? lockdep_hardirqs_on+0x9c/0x150 [ 924.634960][T20816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.634970][T20816] ? clear_bhb_loop+0x60/0xb0 [ 924.634983][T20816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.634993][T20816] RIP: 0033:0x7fc971d8e9a9 [ 924.635003][T20816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.635012][T20816] RSP: 002b:00007fc972b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.635024][T20816] RAX: ffffffffffffffda RBX: 00007fc971fb5fa0 RCX: 00007fc971d8e9a9 [ 924.635031][T20816] RDX: 0000000000044050 RSI: 0000200000000240 RDI: 0000000000000003 [ 924.635038][T20816] RBP: 00007fc972b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 924.635044][T20816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.635051][T20816] R13: 0000000000000000 R14: 00007fc971fb5fa0 R15: 00007fc9720dfa28 [ 924.635066][T20816] [ 925.356657][ T24] usb 3-1: USB disconnect, device number 89 [ 925.671631][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.708043][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.782863][ T93] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 925.861150][ T93] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 926.021188][ T9] usb 4-1: USB disconnect, device number 103 [ 926.073935][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 926.144066][T15138] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 926.305117][T15138] usb 3-1: unable to get BOS descriptor set [ 926.315099][T15138] usb 3-1: not running at top speed; connect to a high speed hub [ 926.330082][T20835] fido_id[20835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 926.343497][T15138] usb 3-1: config 1 interface 0 has no altsetting 0 [ 926.355883][T15138] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 926.388939][T15138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.409707][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 926.472554][ T24] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 926.481670][T15138] usb 3-1: Product: syz [ 926.486368][ T24] usb 2-1: config 0 has no interface number 0 [ 926.498923][ T24] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 926.522470][T15138] usb 3-1: Manufacturer: syz [ 926.528627][ T24] usb 2-1: config 0 interface 85 has no altsetting 0 [ 926.545011][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 926.554639][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.565973][T15138] usb 3-1: SerialNumber: syz [ 926.572361][ T24] usb 2-1: Product: syz [ 926.591212][ T24] usb 2-1: Manufacturer: syz [ 926.621344][ T24] usb 2-1: SerialNumber: syz [ 926.664806][ T24] usb 2-1: config 0 descriptor?? [ 926.746982][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4664'. [ 926.814015][T20840] FAULT_INJECTION: forcing a failure. [ 926.814015][T20840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.833763][T20840] CPU: 1 UID: 0 PID: 20840 Comm: syz.3.4664 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 926.833790][T20840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.833800][T20840] Call Trace: [ 926.833809][T20840] [ 926.833818][T20840] dump_stack_lvl+0x189/0x250 [ 926.833843][T20840] ? __pfx____ratelimit+0x10/0x10 [ 926.833864][T20840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.833884][T20840] ? __pfx__printk+0x10/0x10 [ 926.833920][T20840] should_fail_ex+0x414/0x560 [ 926.833944][T20840] _copy_to_user+0x31/0xb0 [ 926.833969][T20840] simple_read_from_buffer+0xe1/0x170 [ 926.833998][T20840] proc_fail_nth_read+0x1df/0x250 [ 926.834020][T20840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 926.834042][T20840] ? rw_verify_area+0x258/0x650 [ 926.834061][T20840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 926.834081][T20840] vfs_read+0x200/0x980 [ 926.834107][T20840] ? __pfx___mutex_lock+0x10/0x10 [ 926.834129][T20840] ? __pfx_vfs_read+0x10/0x10 [ 926.834152][T20840] ? __fget_files+0x2a/0x420 [ 926.834173][T20840] ? __fget_files+0x3a0/0x420 [ 926.834187][T20840] ? __fget_files+0x2a/0x420 [ 926.834213][T20840] ksys_read+0x145/0x250 [ 926.834237][T20840] ? __pfx_ksys_read+0x10/0x10 [ 926.834256][T20840] ? rcu_is_watching+0x15/0xb0 [ 926.834283][T20840] ? do_syscall_64+0xbe/0x3b0 [ 926.834306][T20840] do_syscall_64+0xfa/0x3b0 [ 926.834324][T20840] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.834342][T20840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.834359][T20840] ? clear_bhb_loop+0x60/0xb0 [ 926.834381][T20840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.834398][T20840] RIP: 0033:0x7f52fbb8d3bc [ 926.834415][T20840] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 926.834431][T20840] RSP: 002b:00007f52fc954030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 926.834451][T20840] RAX: ffffffffffffffda RBX: 00007f52fbdb5fa0 RCX: 00007f52fbb8d3bc [ 926.834465][T20840] RDX: 000000000000000f RSI: 00007f52fc9540a0 RDI: 0000000000000004 [ 926.834477][T20840] RBP: 00007f52fc954090 R08: 0000000000000000 R09: 0000000000000000 [ 926.834489][T20840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.834509][T20840] R13: 0000000000000000 R14: 00007f52fbdb5fa0 R15: 00007f52fbedfa28 [ 926.834539][T20840] [ 926.863521][T15138] usb 3-1: USB disconnect, device number 90 [ 927.847998][T20856] netlink: 'syz.3.4669': attribute type 12 has an invalid length. [ 927.860186][T20856] netlink: 'syz.3.4669': attribute type 29 has an invalid length. [ 927.960016][T20856] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4669'. [ 928.028923][T20856] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4669'. [ 928.333934][ T24] appletouch 2-1:0.85: Failed to read mode from device. [ 928.458630][ T24] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 928.484001][ T24] usb 2-1: USB disconnect, device number 91 [ 929.134506][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 929.415452][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.430767][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 929.553996][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 929.565014][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 929.757736][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 929.798431][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 930.133220][ T24] usb 2-1: Manufacturer: syz [ 930.218479][ T24] usb 2-1: config 0 descriptor?? [ 930.245850][T20891] FAULT_INJECTION: forcing a failure. [ 930.245850][T20891] name failslab, interval 1, probability 0, space 0, times 0 [ 930.264810][T20891] CPU: 0 UID: 0 PID: 20891 Comm: syz.4.4679 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 930.264834][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 930.264845][T20891] Call Trace: [ 930.264852][T20891] [ 930.264858][T20891] dump_stack_lvl+0x189/0x250 [ 930.264879][T20891] ? __pfx____ratelimit+0x10/0x10 [ 930.264892][T20891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.264904][T20891] ? __pfx__printk+0x10/0x10 [ 930.264920][T20891] ? __pfx___might_resched+0x10/0x10 [ 930.264932][T20891] ? fs_reclaim_acquire+0x7d/0x100 [ 930.264950][T20891] should_fail_ex+0x414/0x560 [ 930.264972][T20891] should_failslab+0xa8/0x100 [ 930.264996][T20891] kmem_cache_alloc_noprof+0x73/0x3c0 [ 930.265013][T20891] ? fuse_get_req+0x7b9/0x10b0 [ 930.265029][T20891] fuse_get_req+0x7b9/0x10b0 [ 930.265047][T20891] ? stack_depot_save_flags+0x40/0x900 [ 930.265059][T20891] ? kernel_text_address+0xa5/0xe0 [ 930.265073][T20891] ? __pfx_fuse_get_req+0x10/0x10 [ 930.265084][T20891] ? fuse_lookup_name+0x1b5/0x860 [ 930.265093][T20891] ? fuse_lookup+0x1e9/0x640 [ 930.265101][T20891] ? __lookup_slow+0x297/0x3d0 [ 930.265116][T20891] ? lookup_slow+0x53/0x70 [ 930.265132][T20891] ? walk_component+0x2d2/0x400 [ 930.265147][T20891] ? path_lookupat+0x163/0x430 [ 930.265162][T20891] ? filename_lookup+0x212/0x570 [ 930.265173][T20891] ? do_linkat+0x120/0x560 [ 930.265185][T20891] ? __x64_sys_link+0x82/0x90 [ 930.265197][T20891] ? do_syscall_64+0xfa/0x3b0 [ 930.265208][T20891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.265223][T20891] __fuse_simple_request+0x2aa/0x18d0 [ 930.265242][T20891] ? __pfx___fuse_simple_request+0x10/0x10 [ 930.265276][T20891] ? __kasan_kmalloc+0x93/0xb0 [ 930.265309][T20891] fuse_lookup_name+0x34c/0x860 [ 930.265337][T20891] ? __pfx_fuse_lookup_name+0x10/0x10 [ 930.265346][T20891] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 930.265362][T20891] ? fuse_lock_inode+0xd3/0x120 [ 930.265377][T20891] ? d_alloc_parallel+0x2e0/0x14e0 [ 930.265392][T20891] ? d_alloc_parallel+0x13d0/0x14e0 [ 930.265409][T20891] fuse_lookup+0x1e9/0x640 [ 930.265433][T20891] ? __pfx_fuse_lookup+0x10/0x10 [ 930.265464][T20891] ? __raw_spin_lock_init+0x45/0x100 [ 930.265488][T20891] ? __init_waitqueue_head+0xa9/0x150 [ 930.265507][T20891] __lookup_slow+0x297/0x3d0 [ 930.265519][T20891] ? __pfx___lookup_slow+0x10/0x10 [ 930.265539][T20891] ? down_read+0x1ad/0x2e0 [ 930.265564][T20891] lookup_slow+0x53/0x70 [ 930.265584][T20891] walk_component+0x2d2/0x400 [ 930.265601][T20891] ? path_lookupat+0x156/0x430 [ 930.265621][T20891] path_lookupat+0x163/0x430 [ 930.265645][T20891] filename_lookup+0x212/0x570 [ 930.265655][T20891] ? kasan_save_track+0x4f/0x80 [ 930.265670][T20891] ? __pfx_filename_lookup+0x10/0x10 [ 930.265696][T20891] ? __might_fault+0xb0/0x130 [ 930.265722][T20891] do_linkat+0x120/0x560 [ 930.265755][T20891] ? __pfx_do_linkat+0x10/0x10 [ 930.265774][T20891] ? strncpy_from_user+0x150/0x290 [ 930.265793][T20891] ? getname_flags+0x1e5/0x540 [ 930.265805][T20891] __x64_sys_link+0x82/0x90 [ 930.265820][T20891] do_syscall_64+0xfa/0x3b0 [ 930.265830][T20891] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.265841][T20891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.265851][T20891] ? clear_bhb_loop+0x60/0xb0 [ 930.265872][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.265889][T20891] RIP: 0033:0x7fc971d8e9a9 [ 930.265906][T20891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.265921][T20891] RSP: 002b:00007fc96fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 930.265939][T20891] RAX: ffffffffffffffda RBX: 00007fc971fb6080 RCX: 00007fc971d8e9a9 [ 930.265946][T20891] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 930.265953][T20891] RBP: 00007fc96fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 930.265959][T20891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.265965][T20891] R13: 0000000000000000 R14: 00007fc971fb6080 R15: 00007fc9720dfa28 [ 930.265981][T20891] [ 930.690200][T20894] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 930.697782][T20894] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 930.919128][T20898] netlink: 'syz.3.4682': attribute type 12 has an invalid length. [ 930.927581][ T24] rc_core: IR keymap rc-hauppauge not found [ 930.937724][T20898] netlink: 'syz.3.4682': attribute type 29 has an invalid length. [ 930.946078][T20898] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4682'. [ 930.955473][T20898] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4682'. [ 930.964507][T15138] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 930.983337][T20900] netlink: 'syz.4.4681': attribute type 12 has an invalid length. [ 930.991523][ T24] Registered IR keymap rc-empty [ 931.017536][T20900] netlink: 'syz.4.4681': attribute type 29 has an invalid length. [ 931.026308][T20900] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4681'. [ 931.036212][T20900] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4681'. [ 931.057513][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.093667][T15138] usb 1-1: device descriptor read/64, error -71 [ 931.128192][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.170373][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 931.222604][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input86 [ 931.281421][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.310267][ T30] audit: type=1326 audit(1753377330.188:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 931.374783][T15138] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 931.375285][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.416068][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.434802][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.445855][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.452156][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.459778][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.492087][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.504280][ T30] audit: type=1326 audit(1753377330.188:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 931.527089][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.553936][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.586203][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.629446][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 931.684506][T15138] usb 1-1: device descriptor read/64, error -71 [ 931.794776][T15138] usb usb1-port1: attempt power cycle [ 931.810517][ T30] audit: type=1326 audit(1753377330.188:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 932.020721][ T30] audit: type=1326 audit(1753377330.188:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 932.065790][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 932.079405][ T30] audit: type=1326 audit(1753377330.188:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 932.083632][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 932.108127][ T30] audit: type=1326 audit(1753377330.188:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 932.143809][ T30] audit: type=1326 audit(1753377330.188:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc971d8e9e3 code=0x7ffc0000 [ 932.166598][T15138] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 932.251952][T15138] usb 1-1: device descriptor read/8, error -71 [ 932.277757][ T30] audit: type=1326 audit(1753377330.188:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc971d8e9e3 code=0x7ffc0000 [ 932.371351][ T24] usb 2-1: USB disconnect, device number 92 [ 932.443340][ T30] audit: type=1326 audit(1753377330.218:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 932.533683][T15138] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 932.562244][ T30] audit: type=1326 audit(1753377330.218:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.4.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 932.604545][T15138] usb 1-1: device descriptor read/8, error -71 [ 932.733118][T15138] usb usb1-port1: unable to enumerate USB device [ 933.603839][T15138] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 933.771646][T20934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4690'. [ 933.784707][T15138] usb 5-1: Using ep0 maxpacket: 16 [ 933.794491][T15138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.805712][T15138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.910126][T20934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4690'. [ 933.923794][T20934] FAULT_INJECTION: forcing a failure. [ 933.923794][T20934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.963747][T15138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 933.980407][T20938] FAULT_INJECTION: forcing a failure. [ 933.980407][T20938] name failslab, interval 1, probability 0, space 0, times 0 [ 934.003780][T20934] CPU: 1 UID: 0 PID: 20934 Comm: syz.3.4690 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 934.003806][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.003818][T20934] Call Trace: [ 934.003826][T20934] [ 934.003836][T20934] dump_stack_lvl+0x189/0x250 [ 934.003861][T20934] ? __pfx____ratelimit+0x10/0x10 [ 934.003881][T20934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.003902][T20934] ? __pfx__printk+0x10/0x10 [ 934.003937][T20934] should_fail_ex+0x414/0x560 [ 934.003978][T20934] _copy_to_user+0x31/0xb0 [ 934.004004][T20934] simple_read_from_buffer+0xe1/0x170 [ 934.004033][T20934] proc_fail_nth_read+0x1df/0x250 [ 934.004056][T20934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.004078][T20934] ? rw_verify_area+0x258/0x650 [ 934.004099][T20934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.004119][T20934] vfs_read+0x200/0x980 [ 934.004146][T20934] ? __pfx___mutex_lock+0x10/0x10 [ 934.004168][T20934] ? __pfx_vfs_read+0x10/0x10 [ 934.004191][T20934] ? __fget_files+0x2a/0x420 [ 934.004213][T20934] ? __fget_files+0x3a0/0x420 [ 934.004228][T20934] ? __fget_files+0x2a/0x420 [ 934.004254][T20934] ksys_read+0x145/0x250 [ 934.004279][T20934] ? __pfx_ksys_read+0x10/0x10 [ 934.004297][T20934] ? rcu_is_watching+0x15/0xb0 [ 934.004324][T20934] ? do_syscall_64+0xbe/0x3b0 [ 934.004348][T20934] do_syscall_64+0xfa/0x3b0 [ 934.004367][T20934] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.004385][T20934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.004403][T20934] ? clear_bhb_loop+0x60/0xb0 [ 934.004425][T20934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.004443][T20934] RIP: 0033:0x7f52fbb8d3bc [ 934.004459][T20934] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 934.004475][T20934] RSP: 002b:00007f52fc954030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.004495][T20934] RAX: ffffffffffffffda RBX: 00007f52fbdb5fa0 RCX: 00007f52fbb8d3bc [ 934.004508][T20934] RDX: 000000000000000f RSI: 00007f52fc9540a0 RDI: 0000000000000007 [ 934.004520][T20934] RBP: 00007f52fc954090 R08: 0000000000000000 R09: 0000000000000000 [ 934.004531][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.004542][T20934] R13: 0000000000000000 R14: 00007f52fbdb5fa0 R15: 00007f52fbedfa28 [ 934.004572][T20934] [ 934.023697][T15138] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 934.058731][T20938] CPU: 1 UID: 0 PID: 20938 Comm: syz.0.4691 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 934.058757][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.058768][T20938] Call Trace: [ 934.058776][T20938] [ 934.058784][T20938] dump_stack_lvl+0x189/0x250 [ 934.058808][T20938] ? __pfx____ratelimit+0x10/0x10 [ 934.058829][T20938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.058848][T20938] ? __pfx__printk+0x10/0x10 [ 934.058872][T20938] ? __pfx___might_resched+0x10/0x10 [ 934.058892][T20938] ? fs_reclaim_acquire+0x7d/0x100 [ 934.058913][T20938] should_fail_ex+0x414/0x560 [ 934.058943][T20938] should_failslab+0xa8/0x100 [ 934.058967][T20938] __kmalloc_noprof+0xcb/0x4f0 [ 934.058987][T20938] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 934.059005][T20938] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 934.059031][T20938] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 934.059057][T20938] genl_family_rcv_msg_doit+0xb8/0x300 [ 934.059082][T20938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 934.059103][T20938] ? rcu_is_watching+0x15/0xb0 [ 934.059127][T20938] ? apparmor_capable+0x137/0x1b0 [ 934.059150][T20938] ? bpf_lsm_capable+0x9/0x20 [ 934.059170][T20938] ? security_capable+0x7e/0x2e0 [ 934.059194][T20938] genl_rcv_msg+0x60e/0x790 [ 934.059220][T20938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.059235][T20938] ? ref_tracker_free+0x63a/0x7d0 [ 934.059253][T20938] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 934.059268][T20938] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 934.059288][T20938] ? __pfx_nl80211_post_doit+0x10/0x10 [ 934.059306][T20938] ? __pfx_ref_tracker_free+0x10/0x10 [ 934.059335][T20938] netlink_rcv_skb+0x208/0x470 [ 934.059358][T20938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.059378][T20938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.059420][T20938] ? down_read+0x1ad/0x2e0 [ 934.059442][T20938] genl_rcv+0x28/0x40 [ 934.059458][T20938] netlink_unicast+0x75c/0x8e0 [ 934.059490][T20938] netlink_sendmsg+0x805/0xb30 [ 934.059523][T20938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.059548][T20938] ? aa_sock_msg_perm+0x94/0x160 [ 934.059568][T20938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 934.059585][T20938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.059608][T20938] __sock_sendmsg+0x21c/0x270 [ 934.059632][T20938] ____sys_sendmsg+0x505/0x830 [ 934.059654][T20938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.059680][T20938] ? import_iovec+0x74/0xa0 [ 934.059707][T20938] ___sys_sendmsg+0x21f/0x2a0 [ 934.059726][T20938] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.059778][T20938] ? __fget_files+0x2a/0x420 [ 934.059794][T20938] ? __fget_files+0x3a0/0x420 [ 934.059820][T20938] __x64_sys_sendmsg+0x19b/0x260 [ 934.059839][T20938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.059866][T20938] ? __pfx_ksys_write+0x10/0x10 [ 934.059884][T20938] ? rcu_is_watching+0x15/0xb0 [ 934.059908][T20938] ? do_syscall_64+0xbe/0x3b0 [ 934.059931][T20938] do_syscall_64+0xfa/0x3b0 [ 934.059956][T20938] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.059974][T20938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.059990][T20938] ? clear_bhb_loop+0x60/0xb0 [ 934.060011][T20938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.060028][T20938] RIP: 0033:0x7fab93f8e9a9 [ 934.060044][T20938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.060058][T20938] RSP: 002b:00007fab93df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.060077][T20938] RAX: ffffffffffffffda RBX: 00007fab941b5fa0 RCX: 00007fab93f8e9a9 [ 934.060091][T20938] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 934.060102][T20938] RBP: 00007fab93df7090 R08: 0000000000000000 R09: 0000000000000000 [ 934.060113][T20938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.060124][T20938] R13: 0000000000000000 R14: 00007fab941b5fa0 R15: 00007fab942dfa28 [ 934.060152][T20938] [ 934.787044][T15138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.900290][T15138] usb 5-1: config 0 descriptor?? [ 934.942481][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4693'. [ 935.357815][T15138] hid (null): unknown global tag 0xe [ 935.390732][T15138] hid-multitouch 0003:0457:07DA.0021: unknown global tag 0xe [ 935.626720][T15138] hid-multitouch 0003:0457:07DA.0021: item 0 0 1 14 parsing failed [ 935.647343][T15138] hid-multitouch 0003:0457:07DA.0021: probe with driver hid-multitouch failed with error -22 [ 935.764264][T15138] usb 5-1: USB disconnect, device number 102 [ 936.053671][ T93] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 936.212920][ T93] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 936.486441][ T93] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 936.497882][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.548734][ T93] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 936.576514][ T93] usb 3-1: No valid video chain found. [ 936.812643][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.831773][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.891522][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4697'. [ 937.006366][T20977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.017417][T20977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.103890][T15138] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 937.114775][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4701'. [ 937.287507][T20982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4702'. [ 937.297633][T20982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4702'. [ 937.338952][T15138] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 937.398327][T20984] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 937.405908][T20984] macsec2: entered allmulticast mode [ 937.411700][T20984] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 937.421463][ T24] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 937.456507][T15138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 937.472254][T15138] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 937.484541][T15138] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 937.496814][T15138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.506440][T20984] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 937.516499][T20984] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 937.584722][T15138] usb 2-1: config 0 descriptor?? [ 937.592338][T20974] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 937.630718][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 937.702883][ T24] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.722193][T15138] gspca_main: spca561-2.14.0 probing abcd:cdee [ 937.776040][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 937.832223][T20986] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4704'. [ 937.843438][T20986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.250249][T15138] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 938.259430][T15138] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 938.269521][T15138] usb 2-1: MIDIStreaming interface descriptor not found [ 938.846163][ T93] usb 3-1: USB disconnect, device number 91 [ 939.512635][T21000] xt_bpf: check failed: parse error [ 939.657511][ T93] usb 2-1: USB disconnect, device number 93 [ 939.994611][T21007] FAULT_INJECTION: forcing a failure. [ 939.994611][T21007] name failslab, interval 1, probability 0, space 0, times 0 [ 940.032404][T21007] CPU: 1 UID: 0 PID: 21007 Comm: syz.2.4711 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 940.032431][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 940.032442][T21007] Call Trace: [ 940.032450][T21007] [ 940.032459][T21007] dump_stack_lvl+0x189/0x250 [ 940.032485][T21007] ? __pfx____ratelimit+0x10/0x10 [ 940.032505][T21007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.032528][T21007] ? __pfx__printk+0x10/0x10 [ 940.032553][T21007] ? __pfx___might_resched+0x10/0x10 [ 940.032573][T21007] ? fs_reclaim_acquire+0x7d/0x100 [ 940.032596][T21007] should_fail_ex+0x414/0x560 [ 940.032622][T21007] should_failslab+0xa8/0x100 [ 940.032647][T21007] __kmalloc_noprof+0xcb/0x4f0 [ 940.032667][T21007] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 940.032685][T21007] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 940.032711][T21007] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 940.032739][T21007] genl_family_rcv_msg_doit+0xb8/0x300 [ 940.032766][T21007] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 940.032788][T21007] ? rcu_is_watching+0x15/0xb0 [ 940.032812][T21007] ? apparmor_capable+0x137/0x1b0 [ 940.032837][T21007] ? bpf_lsm_capable+0x9/0x20 [ 940.032858][T21007] ? security_capable+0x7e/0x2e0 [ 940.032882][T21007] genl_rcv_msg+0x60e/0x790 [ 940.032907][T21007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 940.032923][T21007] ? ref_tracker_free+0x63a/0x7d0 [ 940.032941][T21007] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 940.032958][T21007] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 940.032977][T21007] ? __pfx_nl80211_post_doit+0x10/0x10 [ 940.032995][T21007] ? __pfx_ref_tracker_free+0x10/0x10 [ 940.033026][T21007] netlink_rcv_skb+0x208/0x470 [ 940.033050][T21007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 940.033071][T21007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.033112][T21007] ? down_read+0x1ad/0x2e0 [ 940.033136][T21007] genl_rcv+0x28/0x40 [ 940.033153][T21007] netlink_unicast+0x75c/0x8e0 [ 940.033187][T21007] netlink_sendmsg+0x805/0xb30 [ 940.033221][T21007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.033253][T21007] ? aa_sock_msg_perm+0x94/0x160 [ 940.033274][T21007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.033293][T21007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.033316][T21007] __sock_sendmsg+0x21c/0x270 [ 940.033339][T21007] ____sys_sendmsg+0x505/0x830 [ 940.033361][T21007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.033388][T21007] ? import_iovec+0x74/0xa0 [ 940.033415][T21007] ___sys_sendmsg+0x21f/0x2a0 [ 940.033436][T21007] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.033493][T21007] ? __fget_files+0x2a/0x420 [ 940.033509][T21007] ? __fget_files+0x3a0/0x420 [ 940.033535][T21007] __x64_sys_sendmsg+0x19b/0x260 [ 940.033553][T21007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.033578][T21007] ? __pfx_ksys_write+0x10/0x10 [ 940.033595][T21007] ? rcu_is_watching+0x15/0xb0 [ 940.033618][T21007] ? do_syscall_64+0xbe/0x3b0 [ 940.033640][T21007] do_syscall_64+0xfa/0x3b0 [ 940.033656][T21007] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.033674][T21007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.033693][T21007] ? clear_bhb_loop+0x60/0xb0 [ 940.033715][T21007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.033732][T21007] RIP: 0033:0x7fc48d38e9a9 [ 940.033749][T21007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.033765][T21007] RSP: 002b:00007fc48e21a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.033784][T21007] RAX: ffffffffffffffda RBX: 00007fc48d5b5fa0 RCX: 00007fc48d38e9a9 [ 940.033798][T21007] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 940.033810][T21007] RBP: 00007fc48e21a090 R08: 0000000000000000 R09: 0000000000000000 [ 940.033821][T21007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.033832][T21007] R13: 0000000000000000 R14: 00007fc48d5b5fa0 R15: 00007fc48d6dfa28 [ 940.033863][T21007] [ 940.509638][ T24] usb 1-1: string descriptor 0 read error: -71 [ 940.509725][ T24] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.40 [ 940.509738][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.512525][ T24] usb 1-1: can't set config #1, error -71 [ 940.516724][ T24] usb 1-1: USB disconnect, device number 101 [ 940.943898][ T43] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 941.257234][T21031] input: syz0 as /devices/virtual/input/input87 [ 941.287533][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 941.287550][ T30] audit: type=1326 audit(1753377340.158:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21022 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 941.317750][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 941.325236][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.387664][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.413786][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 941.432757][ T30] audit: type=1326 audit(1753377340.158:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21022 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 941.483704][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 941.507937][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.576881][ T30] audit: type=1326 audit(1753377340.158:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21022 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 941.741881][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 941.751383][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 941.781676][ T30] audit: type=1326 audit(1753377340.158:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21022 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52fbb8d310 code=0x7ffc0000 [ 941.818115][ T43] usb 5-1: Manufacturer: syz [ 941.833240][ T43] usb 5-1: config 0 descriptor?? [ 941.880716][ T30] audit: type=1326 audit(1753377340.168:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21022 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 941.953635][ T30] audit: type=1326 audit(1753377340.168:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21022 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 942.373724][ T43] rc_core: IR keymap rc-hauppauge not found [ 942.400484][ T43] Registered IR keymap rc-empty [ 942.424158][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.466084][T15138] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 942.484252][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.517757][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 942.577501][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input88 [ 942.623848][T15138] usb 1-1: Using ep0 maxpacket: 16 [ 942.644567][T15138] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 942.660909][T15138] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 942.671198][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.683869][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.749847][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.793958][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.826504][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.844565][T15138] usb 1-1: config 0 has no interface number 0 [ 942.850737][T15138] usb 1-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 942.883694][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.896372][T21049] fuse: Unknown parameter 'user_i00000000000000000000' [ 942.953925][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 942.985233][T15138] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 943.003306][T15138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.055049][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 943.093825][T15138] usb 1-1: Product: syz [ 943.097215][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 943.098018][T15138] usb 1-1: Manufacturer: syz [ 943.098035][T15138] usb 1-1: SerialNumber: syz [ 943.179415][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 943.190167][T15138] usb 1-1: config 0 descriptor?? [ 943.211206][T21054] tipc: Started in network mode [ 943.223859][T21054] tipc: Node identity 4, cluster identity 4711 [ 943.239674][T21054] tipc: Node number set to 4 [ 943.245000][ T43] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 943.284169][ T43] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 943.353833][ T43] usb 5-1: USB disconnect, device number 103 [ 943.565733][T21059] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4723'. [ 943.711556][T21043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.763173][T21043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.801275][T15138] asix 1-1:0.251: probe with driver asix failed with error -22 [ 943.849527][T15138] usb 1-1: USB disconnect, device number 102 [ 943.874045][ T5898] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 943.981677][ T30] audit: type=1326 audit(1753377342.858:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.2.4732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc48d38e9a9 code=0x0 [ 944.044760][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 944.061209][ T5898] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 944.070171][ T5898] usb 4-1: config 0 has no interface number 0 [ 944.087716][ T5898] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 944.100615][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.109675][ T5898] usb 4-1: Product: syz [ 944.117583][ T5898] usb 4-1: Manufacturer: syz [ 944.123704][ T5898] usb 4-1: SerialNumber: syz [ 944.150040][ T5898] usb 4-1: config 0 descriptor?? [ 944.219050][ T5898] usb 4-1: bad CDC descriptors [ 944.274047][ T43] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 944.433673][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 945.084085][T15138] usb 4-1: USB disconnect, device number 104 [ 945.195167][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 945.256960][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 945.316353][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 945.384654][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 945.439307][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.453370][ T43] usb 2-1: Product: syz [ 945.459485][ T43] usb 2-1: Manufacturer: syz [ 945.465753][ T43] usb 2-1: SerialNumber: syz [ 945.504551][ T43] usb 2-1: config 0 descriptor?? [ 945.519876][T21078] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 945.658008][ T43] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 945.725204][ T43] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 945.824498][ T43] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 945.831391][ T43] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 946.067155][ T43] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 946.606299][T21101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4739'. [ 947.396601][T21134] netlink: 'syz.3.4745': attribute type 12 has an invalid length. [ 947.448429][T21134] netlink: 'syz.3.4745': attribute type 29 has an invalid length. [ 947.483740][T21134] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4745'. [ 947.563680][T21134] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4745'. [ 947.590177][ T24] usb 2-1: USB disconnect, device number 94 [ 947.600196][ T24] mcba_usb 2-1:0.0 can0: device disconnected [ 948.194992][T21150] FAULT_INJECTION: forcing a failure. [ 948.194992][T21150] name failslab, interval 1, probability 0, space 0, times 0 [ 948.348130][T21150] CPU: 0 UID: 0 PID: 21150 Comm: syz.1.4748 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 948.348156][T21150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.348167][T21150] Call Trace: [ 948.348175][T21150] [ 948.348184][T21150] dump_stack_lvl+0x189/0x250 [ 948.348209][T21150] ? __pfx____ratelimit+0x10/0x10 [ 948.348229][T21150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.348247][T21150] ? __pfx__printk+0x10/0x10 [ 948.348274][T21150] ? __pfx___might_resched+0x10/0x10 [ 948.348293][T21150] ? fs_reclaim_acquire+0x7d/0x100 [ 948.348316][T21150] should_fail_ex+0x414/0x560 [ 948.348340][T21150] should_failslab+0xa8/0x100 [ 948.348363][T21150] __kmalloc_cache_noprof+0x70/0x3d0 [ 948.348384][T21150] ? nfnetlink_rcv+0xeff/0x2520 [ 948.348408][T21150] nfnetlink_rcv+0xeff/0x2520 [ 948.348460][T21150] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 948.348498][T21150] ? ref_tracker_free+0x63a/0x7d0 [ 948.348548][T21150] ? __netlink_deliver_tap+0x807/0x850 [ 948.348577][T21150] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.348598][T21150] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.348625][T21150] netlink_unicast+0x75c/0x8e0 [ 948.348658][T21150] netlink_sendmsg+0x805/0xb30 [ 948.348690][T21150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.348716][T21150] ? aa_sock_msg_perm+0x94/0x160 [ 948.348738][T21150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.348756][T21150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.348778][T21150] __sock_sendmsg+0x21c/0x270 [ 948.348802][T21150] ____sys_sendmsg+0x505/0x830 [ 948.348824][T21150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.348851][T21150] ? import_iovec+0x74/0xa0 [ 948.348876][T21150] ___sys_sendmsg+0x21f/0x2a0 [ 948.348896][T21150] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.348944][T21150] ? __fget_files+0x2a/0x420 [ 948.348959][T21150] ? __fget_files+0x3a0/0x420 [ 948.348983][T21150] __x64_sys_sendmsg+0x19b/0x260 [ 948.349002][T21150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.349028][T21150] ? __pfx_ksys_write+0x10/0x10 [ 948.349046][T21150] ? rcu_is_watching+0x15/0xb0 [ 948.349072][T21150] ? do_syscall_64+0xbe/0x3b0 [ 948.349094][T21150] do_syscall_64+0xfa/0x3b0 [ 948.349120][T21150] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.349137][T21150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.349153][T21150] ? clear_bhb_loop+0x60/0xb0 [ 948.349174][T21150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.349191][T21150] RIP: 0033:0x7febd0b8e9a9 [ 948.349208][T21150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.349222][T21150] RSP: 002b:00007febd19de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.349241][T21150] RAX: ffffffffffffffda RBX: 00007febd0db5fa0 RCX: 00007febd0b8e9a9 [ 948.349255][T21150] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 948.349266][T21150] RBP: 00007febd19de090 R08: 0000000000000000 R09: 0000000000000000 [ 948.349278][T21150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.349289][T21150] R13: 0000000000000000 R14: 00007febd0db5fa0 R15: 00007febd0edfa28 [ 948.349320][T21150] [ 949.181075][T21178] xt_bpf: check failed: parse error [ 949.463769][ T5898] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 949.637704][ T5898] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 949.676363][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.724403][ T5898] usb 2-1: Product: syz [ 949.735670][ T5898] usb 2-1: Manufacturer: syz [ 949.747489][ T5898] usb 2-1: SerialNumber: syz [ 949.774646][ T5898] usb 2-1: config 0 descriptor?? [ 949.802154][ T5898] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 950.120467][T21199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4757'. [ 950.590698][ T24] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 950.603471][ T43] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 950.624138][ T5898] gspca_sunplus: reg_w_riv err -110 [ 950.630167][ T5898] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 950.653762][ T93] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 950.793726][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 950.805876][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 950.819634][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 950.933713][ T93] usb 3-1: Using ep0 maxpacket: 16 [ 950.975714][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 951.002544][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.018286][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 951.029014][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 951.046583][ T93] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 951.069902][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 951.086158][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 951.102256][ T93] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 951.138633][ T24] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 951.149421][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 951.164648][ T93] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 951.173855][ T24] usb 1-1: Product: syz [ 951.178028][ T24] usb 1-1: Manufacturer: syz [ 951.185268][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.193786][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 951.210434][ T24] usb 1-1: SerialNumber: syz [ 951.219375][ T93] usb 3-1: Product: syz [ 951.238707][ T93] usb 3-1: Manufacturer: syz [ 951.266660][ T43] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 951.277691][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input89 [ 951.293190][ T93] usb 3-1: SerialNumber: syz [ 951.307997][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.318504][ T93] usb 3-1: config 0 descriptor?? [ 951.332856][T21212] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 951.340224][ T43] usb 5-1: Product: syz [ 951.344763][ T43] usb 5-1: Manufacturer: syz [ 951.390240][ T43] usb 5-1: SerialNumber: syz [ 951.421334][ T93] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 951.449128][ T43] usb 5-1: config 0 descriptor?? [ 951.467160][ T93] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 951.483311][ T93] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 951.491551][ T43] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 951.512050][ T93] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 951.533089][ T93] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 951.552910][ T5898] usb 1-1: USB disconnect, device number 103 [ 951.748559][ T5898] appletouch 1-1:1.0: input: appletouch disconnected [ 951.860296][ T93] usb 5-1: USB disconnect, device number 104 [ 952.174873][ T93] usb 2-1: USB disconnect, device number 95 [ 953.887518][ T24] usb 3-1: USB disconnect, device number 92 [ 953.905695][ T24] mcba_usb 3-1:0.0 can0: device disconnected [ 953.972658][T21265] FAULT_INJECTION: forcing a failure. [ 953.972658][T21265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.044836][T21265] CPU: 1 UID: 0 PID: 21265 Comm: syz.4.4766 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 954.044863][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 954.044874][T21265] Call Trace: [ 954.044881][T21265] [ 954.044890][T21265] dump_stack_lvl+0x189/0x250 [ 954.044916][T21265] ? __pfx____ratelimit+0x10/0x10 [ 954.044936][T21265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.044957][T21265] ? __pfx__printk+0x10/0x10 [ 954.044991][T21265] should_fail_ex+0x414/0x560 [ 954.045016][T21265] _copy_to_user+0x31/0xb0 [ 954.045041][T21265] simple_read_from_buffer+0xe1/0x170 [ 954.045070][T21265] proc_fail_nth_read+0x1df/0x250 [ 954.045091][T21265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.045112][T21265] ? rw_verify_area+0x258/0x650 [ 954.045132][T21265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.045152][T21265] vfs_read+0x200/0x980 [ 954.045178][T21265] ? __pfx___mutex_lock+0x10/0x10 [ 954.045199][T21265] ? __pfx_vfs_read+0x10/0x10 [ 954.045224][T21265] ? __fget_files+0x2a/0x420 [ 954.045244][T21265] ? __fget_files+0x3a0/0x420 [ 954.045259][T21265] ? __fget_files+0x2a/0x420 [ 954.045284][T21265] ksys_read+0x145/0x250 [ 954.045307][T21265] ? __pfx_ksys_read+0x10/0x10 [ 954.045334][T21265] ? do_syscall_64+0xbe/0x3b0 [ 954.045357][T21265] do_syscall_64+0xfa/0x3b0 [ 954.045375][T21265] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.045393][T21265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.045409][T21265] ? clear_bhb_loop+0x60/0xb0 [ 954.045431][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.045454][T21265] RIP: 0033:0x7fc971d8d3bc [ 954.045470][T21265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 954.045483][T21265] RSP: 002b:00007fc972b1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.045501][T21265] RAX: ffffffffffffffda RBX: 00007fc971fb5fa0 RCX: 00007fc971d8d3bc [ 954.045512][T21265] RDX: 000000000000000f RSI: 00007fc972b1f0a0 RDI: 0000000000000005 [ 954.045520][T21265] RBP: 00007fc972b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 954.045530][T21265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.045539][T21265] R13: 0000000000000000 R14: 00007fc971fb5fa0 R15: 00007fc9720dfa28 [ 954.045567][T21265] [ 954.766551][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 954.891767][T21289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.933842][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 954.945105][ T24] usb 3-1: config 9 has an invalid interface number: 160 but max is 0 [ 954.956136][ T24] usb 3-1: config 9 has no interface number 0 [ 954.962249][ T24] usb 3-1: config 9 interface 160 has no altsetting 0 [ 955.070267][T21294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.078571][T21294] batadv_slave_0: entered promiscuous mode [ 955.124756][ T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f [ 955.156862][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.169465][ T24] usb 3-1: Product: syz [ 955.173755][ T93] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 955.181688][ T24] usb 3-1: Manufacturer: syz [ 955.191438][ T24] usb 3-1: SerialNumber: syz [ 955.398624][ T93] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 955.408294][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.429449][ T93] usb 4-1: Product: syz [ 955.440351][ T93] usb 4-1: Manufacturer: syz [ 955.452053][ T93] usb 4-1: SerialNumber: syz [ 955.498941][ T93] usb 4-1: config 0 descriptor?? [ 955.523284][ T93] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 955.674355][ T43] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 955.844824][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 955.863783][ T43] usb 1-1: no configurations [ 955.868482][ T43] usb 1-1: can't read configurations, error -22 [ 956.053853][ T43] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 956.253868][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 956.260633][ T43] usb 1-1: no configurations [ 956.275331][ T24] ftdi_sio 3-1:9.160: FTDI USB Serial Device converter detected [ 956.288967][ T43] usb 1-1: can't read configurations, error -22 [ 956.297442][ T93] gspca_sunplus: reg_w_riv err -110 [ 956.304782][ T24] ftdi_sio ttyUSB0: unknown device type: 0x4e3f [ 956.324281][ T43] usb usb1-port1: attempt power cycle [ 956.329951][ T93] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 956.350684][ T24] usb 3-1: USB disconnect, device number 93 [ 956.378778][ T24] ftdi_sio 3-1:9.160: device disconnected [ 956.651197][T21324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 956.693641][ T43] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 956.714623][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 956.720764][ T43] usb 1-1: no configurations [ 956.725824][ T93] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 956.734194][ T43] usb 1-1: can't read configurations, error -22 [ 956.747095][T21328] netlink: 'syz.2.4781': attribute type 21 has an invalid length. [ 956.755655][T21328] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4781'. [ 956.765848][T21328] netlink: 'syz.2.4781': attribute type 4 has an invalid length. [ 956.775248][T21328] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4781'. [ 956.873715][ T5898] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 956.873768][ T43] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 956.895306][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.910784][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.921238][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 956.938779][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 956.945568][ T93] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 956.945754][ T43] usb 1-1: no configurations [ 956.960804][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.971912][ T43] usb 1-1: can't read configurations, error -22 [ 956.988410][ T93] usb 2-1: config 0 descriptor?? [ 956.996920][ T43] usb usb1-port1: unable to enumerate USB device [ 957.023643][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 957.031059][ T5898] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 957.040133][ T5898] usb 5-1: config 0 has no interface number 0 [ 957.054000][ T5898] usb 5-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 957.065301][ T5898] usb 5-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 957.083777][ T5898] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 957.099283][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.113829][ T5898] usb 5-1: Product: syz [ 957.118118][ T5898] usb 5-1: Manufacturer: syz [ 957.122816][ T5898] usb 5-1: SerialNumber: syz [ 957.141786][ T5898] usb 5-1: config 0 descriptor?? [ 957.358476][ T5898] usb 5-1: USB disconnect, device number 105 [ 957.414279][ T93] usbhid 2-1:0.0: can't add hid device: -71 [ 957.425434][ T93] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 957.439610][ T93] usb 2-1: USB disconnect, device number 96 [ 957.490151][T21330] FAULT_INJECTION: forcing a failure. [ 957.490151][T21330] name failslab, interval 1, probability 0, space 0, times 0 [ 957.506086][T21330] CPU: 0 UID: 0 PID: 21330 Comm: syz.2.4783 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 957.506138][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.506162][T21330] Call Trace: [ 957.506172][T21330] [ 957.506181][T21330] dump_stack_lvl+0x189/0x250 [ 957.506206][T21330] ? __pfx____ratelimit+0x10/0x10 [ 957.506227][T21330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 957.506247][T21330] ? __pfx__printk+0x10/0x10 [ 957.506276][T21330] ? __pfx___might_resched+0x10/0x10 [ 957.506295][T21330] ? fs_reclaim_acquire+0x7d/0x100 [ 957.506318][T21330] should_fail_ex+0x414/0x560 [ 957.506343][T21330] should_failslab+0xa8/0x100 [ 957.506367][T21330] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 957.506389][T21330] ? __alloc_skb+0x112/0x2d0 [ 957.506421][T21330] __alloc_skb+0x112/0x2d0 [ 957.506449][T21330] netlink_ack+0x146/0xa50 [ 957.506468][T21330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.506485][T21330] ? ref_tracker_free+0x63a/0x7d0 [ 957.506502][T21330] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 957.506520][T21330] ? __pfx_nl80211_post_doit+0x10/0x10 [ 957.506539][T21330] ? __pfx_ref_tracker_free+0x10/0x10 [ 957.506569][T21330] netlink_rcv_skb+0x28c/0x470 [ 957.506593][T21330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.506614][T21330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 957.506655][T21330] ? down_read+0x1ad/0x2e0 [ 957.506679][T21330] genl_rcv+0x28/0x40 [ 957.506695][T21330] netlink_unicast+0x75c/0x8e0 [ 957.506729][T21330] netlink_sendmsg+0x805/0xb30 [ 957.506761][T21330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.506788][T21330] ? aa_sock_msg_perm+0x94/0x160 [ 957.506809][T21330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 957.506828][T21330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.506851][T21330] __sock_sendmsg+0x21c/0x270 [ 957.506876][T21330] ____sys_sendmsg+0x505/0x830 [ 957.506900][T21330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.506927][T21330] ? import_iovec+0x74/0xa0 [ 957.506953][T21330] ___sys_sendmsg+0x21f/0x2a0 [ 957.506974][T21330] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.507030][T21330] ? __fget_files+0x2a/0x420 [ 957.507045][T21330] ? __fget_files+0x3a0/0x420 [ 957.507073][T21330] __x64_sys_sendmsg+0x19b/0x260 [ 957.507094][T21330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 957.507122][T21330] ? __pfx_ksys_write+0x10/0x10 [ 957.507150][T21330] ? do_syscall_64+0xbe/0x3b0 [ 957.507173][T21330] do_syscall_64+0xfa/0x3b0 [ 957.507191][T21330] ? lockdep_hardirqs_on+0x9c/0x150 [ 957.507209][T21330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.507227][T21330] ? clear_bhb_loop+0x60/0xb0 [ 957.507248][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.507264][T21330] RIP: 0033:0x7fc48d38e9a9 [ 957.507281][T21330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.507295][T21330] RSP: 002b:00007fc48e21a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.507314][T21330] RAX: ffffffffffffffda RBX: 00007fc48d5b5fa0 RCX: 00007fc48d38e9a9 [ 957.507328][T21330] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 957.507339][T21330] RBP: 00007fc48e21a090 R08: 0000000000000000 R09: 0000000000000000 [ 957.507350][T21330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.507362][T21330] R13: 0000000000000000 R14: 00007fc48d5b5fa0 R15: 00007fc48d6dfa28 [ 957.507392][T21330] [ 957.889144][ T43] usb 4-1: USB disconnect, device number 105 [ 958.273897][ T43] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 958.425573][ T43] usb 4-1: config index 0 descriptor too short (expected 2084, got 36) [ 958.678638][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.716407][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.727705][ T43] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 958.738225][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.774414][ T43] usb 4-1: config 0 descriptor?? [ 958.848837][T21356] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 959.123199][T21367] FAULT_INJECTION: forcing a failure. [ 959.123199][T21367] name fail_futex, interval 1, probability 0, space 0, times 1 [ 959.136985][T21367] CPU: 0 UID: 0 PID: 21367 Comm: syz.2.4794 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 959.137010][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 959.137021][T21367] Call Trace: [ 959.137029][T21367] [ 959.137037][T21367] dump_stack_lvl+0x189/0x250 [ 959.137063][T21367] ? __pfx____ratelimit+0x10/0x10 [ 959.137082][T21367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.137102][T21367] ? __pfx__printk+0x10/0x10 [ 959.137130][T21367] ? __task_pid_nr_ns+0x28/0x470 [ 959.137155][T21367] should_fail_ex+0x414/0x560 [ 959.137179][T21367] futex_lock_pi_atomic+0xd2/0xd60 [ 959.137211][T21367] futex_lock_pi+0x23d/0xa60 [ 959.137233][T21367] ? _parse_integer_limit+0x1ae/0x1f0 [ 959.137259][T21367] ? __pfx_futex_lock_pi+0x10/0x10 [ 959.137285][T21367] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 959.137329][T21367] ? __pfx_futex_wake_mark+0x10/0x10 [ 959.137357][T21367] ? __might_fault+0xb0/0x130 [ 959.137395][T21367] do_futex+0x292/0x420 [ 959.137421][T21367] ? __pfx_do_futex+0x10/0x10 [ 959.137453][T21367] __se_sys_futex+0x36f/0x400 [ 959.137481][T21367] ? __pfx___se_sys_futex+0x10/0x10 [ 959.137502][T21367] ? __pfx_ksys_write+0x10/0x10 [ 959.137522][T21367] ? rcu_is_watching+0x15/0xb0 [ 959.137547][T21367] ? __x64_sys_futex+0x21/0xf0 [ 959.137572][T21367] do_syscall_64+0xfa/0x3b0 [ 959.137590][T21367] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.137608][T21367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.137626][T21367] ? clear_bhb_loop+0x60/0xb0 [ 959.137647][T21367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.137664][T21367] RIP: 0033:0x7fc48d38e9a9 [ 959.137681][T21367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.137696][T21367] RSP: 002b:00007fc48e21a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 959.137716][T21367] RAX: ffffffffffffffda RBX: 00007fc48d5b5fa0 RCX: 00007fc48d38e9a9 [ 959.137729][T21367] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 959.137741][T21367] RBP: 00007fc48e21a090 R08: 0000000000000000 R09: 0000000000000000 [ 959.137752][T21367] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.137764][T21367] R13: 0000000000000001 R14: 00007fc48d5b5fa0 R15: 00007fc48d6dfa28 [ 959.137794][T21367] [ 959.526640][ T43] dragonrise 0003:0079:0006.0022: unknown main item tag 0x0 [ 959.631504][ T43] dragonrise 0003:0079:0006.0022: unknown main item tag 0x0 [ 959.692817][ T43] dragonrise 0003:0079:0006.0022: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 959.753771][ T43] dragonrise 0003:0079:0006.0022: no inputs found [ 959.782298][T21374] use of bytesused == 0 is deprecated and will be removed in the future, [ 959.791378][T21374] use the actual size instead. [ 959.844060][ T43] dragonrise 0003:0079:0006.0022: force feedback init failed [ 959.896943][ T43] usb 4-1: USB disconnect, device number 106 [ 960.054682][T21373] fido_id[21373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 960.253877][T15138] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 960.445312][T15138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.472509][T15138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.592085][T15138] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.611075][T15138] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.636127][T15138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.685072][T21389] libceph: resolve '4..' (ret=-3): failed [ 960.963377][T21391] input: syz1 as /devices/virtual/input/input91 [ 961.288420][T15138] usb 2-1: config 0 descriptor?? [ 961.719175][T15138] usbhid 2-1:0.0: can't add hid device: -71 [ 961.732436][T15138] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 961.761225][T15138] usb 2-1: USB disconnect, device number 97 [ 961.913936][ T5922] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 962.397078][ T5922] usb 1-1: config 0 has no interfaces? [ 962.416042][ T5922] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 962.425562][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.440383][ T5922] usb 1-1: Product: syz [ 962.445004][ T5922] usb 1-1: Manufacturer: syz [ 962.450832][ T5922] usb 1-1: SerialNumber: syz [ 962.484963][ T5922] usb 1-1: config 0 descriptor?? [ 962.772744][T21404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.782965][T21404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.821808][ T5922] usb 1-1: USB disconnect, device number 108 [ 965.228775][T21453] pim6reg: entered allmulticast mode [ 965.259648][T21453] pim6reg: left allmulticast mode [ 965.303836][T21456] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 965.352983][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4822'. [ 965.379600][ T30] audit: type=1804 audit(1753377364.258:1515): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4820" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=84012 res=1 errno=0 [ 965.426157][T21458] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 965.471983][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4822'. [ 965.514631][T21458] FAULT_INJECTION: forcing a failure. [ 965.514631][T21458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.531477][T21458] CPU: 0 UID: 0 PID: 21458 Comm: syz.3.4822 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 965.531494][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 965.531500][T21458] Call Trace: [ 965.531505][T21458] [ 965.531510][T21458] dump_stack_lvl+0x189/0x250 [ 965.531528][T21458] ? __pfx____ratelimit+0x10/0x10 [ 965.531541][T21458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.531552][T21458] ? __pfx__printk+0x10/0x10 [ 965.531573][T21458] should_fail_ex+0x414/0x560 [ 965.531587][T21458] _copy_to_user+0x31/0xb0 [ 965.531604][T21458] simple_read_from_buffer+0xe1/0x170 [ 965.531622][T21458] proc_fail_nth_read+0x1df/0x250 [ 965.531634][T21458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 965.531646][T21458] ? rw_verify_area+0x258/0x650 [ 965.531658][T21458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 965.531668][T21458] vfs_read+0x200/0x980 [ 965.531684][T21458] ? __pfx___mutex_lock+0x10/0x10 [ 965.531697][T21458] ? __pfx_vfs_read+0x10/0x10 [ 965.531710][T21458] ? __fget_files+0x2a/0x420 [ 965.531721][T21458] ? __fget_files+0x3a0/0x420 [ 965.531729][T21458] ? __fget_files+0x2a/0x420 [ 965.531743][T21458] ksys_read+0x145/0x250 [ 965.531757][T21458] ? __pfx_ksys_read+0x10/0x10 [ 965.531769][T21458] ? rcu_is_watching+0x15/0xb0 [ 965.531784][T21458] ? do_syscall_64+0xbe/0x3b0 [ 965.531798][T21458] do_syscall_64+0xfa/0x3b0 [ 965.531808][T21458] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.531819][T21458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.531829][T21458] ? clear_bhb_loop+0x60/0xb0 [ 965.531841][T21458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.531851][T21458] RIP: 0033:0x7f52fbb8d3bc [ 965.531861][T21458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 965.531869][T21458] RSP: 002b:00007f52fc933030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 965.531881][T21458] RAX: ffffffffffffffda RBX: 00007f52fbdb6080 RCX: 00007f52fbb8d3bc [ 965.531888][T21458] RDX: 000000000000000f RSI: 00007f52fc9330a0 RDI: 0000000000000004 [ 965.531895][T21458] RBP: 00007f52fc933090 R08: 0000000000000000 R09: 0000000000000000 [ 965.531901][T21458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.531907][T21458] R13: 0000000000000000 R14: 00007f52fbdb6080 R15: 00007f52fbedfa28 [ 965.531922][T21458] [ 966.222173][ T30] audit: type=1326 audit(1753377365.088:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 966.329260][ T30] audit: type=1326 audit(1753377365.088:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 966.363757][ T93] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 966.596525][T15138] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 966.657507][ T30] audit: type=1326 audit(1753377365.088:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 966.719753][ T93] usb 3-1: Using ep0 maxpacket: 32 [ 966.783853][ T93] usb 3-1: unable to get BOS descriptor or descriptor too short [ 966.783881][ T30] audit: type=1326 audit(1753377365.088:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 966.984783][T15138] usb 4-1: config 0 has no interfaces? [ 967.001063][T15138] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 967.026829][T15138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.037291][ T93] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 967.040950][T15138] usb 4-1: Product: syz [ 967.054346][ T93] usb 3-1: config 7 has no interface number 0 [ 967.060576][ T93] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 967.062733][T15138] usb 4-1: Manufacturer: syz [ 967.083374][ T93] usb 3-1: config 7 interface 187 has no altsetting 0 [ 967.085522][ T30] audit: type=1326 audit(1753377365.088:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 967.244023][T15138] usb 4-1: SerialNumber: syz [ 967.257264][ T93] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 967.266782][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.296383][ T93] usb 3-1: Product: syz [ 967.302283][ T93] usb 3-1: Manufacturer: syz [ 967.305912][T15138] usb 4-1: config 0 descriptor?? [ 967.310330][ T93] usb 3-1: SerialNumber: syz [ 967.323707][ T30] audit: type=1326 audit(1753377365.088:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 967.373701][ T30] audit: type=1326 audit(1753377365.088:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 967.493798][ T30] audit: type=1326 audit(1753377365.088:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 967.519868][ T30] audit: type=1326 audit(1753377365.098:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21461 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7febd0b8e9a9 code=0x7ffc0000 [ 967.654519][ T93] usb 3-1: Limiting number of CPorts to U8_MAX [ 967.675984][ T93] usb 3-1: Unknown endpoint type found, address 0x07 [ 967.715674][ T93] usb 3-1: Unknown endpoint type found, address 0x03 [ 967.722408][ T93] usb 3-1: Not enough endpoints found in device, aborting! [ 968.103954][T15138] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 968.463873][T15138] usb 1-1: Using ep0 maxpacket: 16 [ 968.473714][T15138] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 968.485652][T15138] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.583604][T15138] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 968.607075][T15138] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.623033][T15138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.631502][T15138] usb 1-1: Product: syz [ 968.641371][T15138] usb 1-1: Manufacturer: syz [ 968.661500][T15138] usb 1-1: SerialNumber: syz [ 968.680136][T21495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.723963][T21495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.906321][T21508] pim6reg9: entered allmulticast mode [ 968.921344][T21508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4835'. [ 968.967426][T15138] usb 1-1: 0:2 : does not exist [ 968.989631][T15138] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 969.038211][T15138] usb 1-1: USB disconnect, device number 109 [ 969.086243][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.133147][T21516] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 969.174400][ T93] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 969.253934][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 969.428603][ T93] usb 2-1: device descriptor read/64, error -71 [ 969.624157][ T5922] usb 4-1: USB disconnect, device number 107 [ 969.635759][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 969.722933][ T93] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 969.779416][ T24] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 969.789115][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.805600][ T24] usb 5-1: config 0 descriptor?? [ 969.825344][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 969.874570][ T93] usb 2-1: device descriptor read/64, error -71 [ 970.014884][ T93] usb usb2-port1: attempt power cycle [ 970.045487][ T5922] usb 3-1: USB disconnect, device number 94 [ 970.113964][T21524] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 970.236400][T21512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.247512][T21512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.280669][ T24] gspca_vc032x: reg_w err -71 [ 970.285994][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.291604][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.297549][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.303102][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.315438][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.335739][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.352953][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.369753][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.385963][ T93] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 970.396569][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.413197][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.427593][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.433195][ T93] usb 2-1: device descriptor read/8, error -71 [ 970.449350][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.459830][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.468200][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.473908][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.495107][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.513822][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.604039][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 970.609377][ T24] gspca_vc032x: Unknown sensor... [ 970.623871][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 970.654390][ T24] usb 5-1: USB disconnect, device number 106 [ 970.703648][ T93] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 970.730292][ T93] usb 2-1: device descriptor read/8, error -71 [ 970.740264][T21533] fuse: Unknown parameter '0x0000000000000003' [ 970.869724][ T93] usb usb2-port1: unable to enumerate USB device [ 970.913707][ T5898] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 971.163615][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 971.299249][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 971.473667][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 971.483499][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 971.707132][ T5898] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 971.717626][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.726000][ T5898] usb 3-1: Product: syz [ 971.731034][ T5898] usb 3-1: Manufacturer: syz [ 971.737463][ T5898] usb 3-1: SerialNumber: syz [ 971.747225][ T5898] usb 3-1: config 0 descriptor?? [ 971.756007][T21532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 971.868971][ T5898] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 971.924089][ T5898] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 971.972547][ T5898] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 971.997904][ T5898] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 972.021689][ T5898] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 972.049447][T21556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4852'. [ 972.268755][T21564] libceph: resolve '4..' (ret=-3): failed [ 972.596405][T21569] fuse: Unknown parameter '0x0000000000000003' [ 972.695928][T21572] loop8: detected capacity change from 0 to 16383 [ 973.634869][T21580] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 973.641443][T21580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 973.661242][T21580] vhci_hcd vhci_hcd.0: Device attached [ 973.983701][ T93] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 974.413682][T21581] vhci_hcd: connection reset by peer [ 974.426197][ T59] vhci_hcd: stop threads [ 974.467037][ T59] vhci_hcd: release socket [ 974.487300][ T59] vhci_hcd: disconnect device [ 974.558968][ T9] usb 3-1: USB disconnect, device number 95 [ 974.567522][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 974.674035][ T24] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 974.829266][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.860057][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.893316][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 974.900143][T21603] FAULT_INJECTION: forcing a failure. [ 974.900143][T21603] name failslab, interval 1, probability 0, space 0, times 0 [ 974.948146][T21603] CPU: 0 UID: 0 PID: 21603 Comm: syz.1.4862 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 974.948175][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 974.948188][T21603] Call Trace: [ 974.948195][T21603] [ 974.948205][T21603] dump_stack_lvl+0x189/0x250 [ 974.948230][T21603] ? __pfx____ratelimit+0x10/0x10 [ 974.948250][T21603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.948271][T21603] ? __pfx__printk+0x10/0x10 [ 974.948293][T21603] ? crng_make_state+0x3fc/0x700 [ 974.948316][T21603] ? crng_make_state+0x13a/0x700 [ 974.948341][T21603] should_fail_ex+0x414/0x560 [ 974.948363][T21603] should_failslab+0xa8/0x100 [ 974.948388][T21603] __kmalloc_cache_noprof+0x70/0x3d0 [ 974.948410][T21603] ? sctp_add_bind_addr+0x8c/0x370 [ 974.948435][T21603] sctp_add_bind_addr+0x8c/0x370 [ 974.948467][T21603] sctp_copy_local_addr_list+0x30b/0x4e0 [ 974.948492][T21603] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 974.948513][T21603] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 974.948537][T21603] ? sctp_v6_is_any+0x64/0x80 [ 974.948560][T21603] ? sctp_copy_one_addr+0x93/0x360 [ 974.948585][T21603] sctp_bind_addr_copy+0xb3/0x3c0 [ 974.948608][T21603] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 974.948631][T21603] sctp_connect_new_asoc+0x2e0/0x690 [ 974.948659][T21603] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 974.948680][T21603] ? __local_bh_enable_ip+0x12d/0x1c0 [ 974.948708][T21603] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 974.948727][T21603] ? security_sctp_bind_connect+0x7e/0x2e0 [ 974.948754][T21603] sctp_sendmsg+0x155c/0x2810 [ 974.948790][T21603] ? __pfx_sctp_sendmsg+0x10/0x10 [ 974.948817][T21603] ? aa_sk_perm+0x81e/0x950 [ 974.948841][T21603] ? __pfx_aa_sk_perm+0x10/0x10 [ 974.948863][T21603] ? sock_rps_record_flow+0x19/0x410 [ 974.948886][T21603] ? inet_sendmsg+0x2f4/0x370 [ 974.948910][T21603] __sock_sendmsg+0x19c/0x270 [ 974.948936][T21603] __sys_sendto+0x3bd/0x520 [ 974.948961][T21603] ? __pfx___sys_sendto+0x10/0x10 [ 974.948981][T21603] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 974.949016][T21603] ? __fget_files+0x3a0/0x420 [ 974.949045][T21603] ? ksys_write+0x22a/0x250 [ 974.949069][T21603] ? __pfx_ksys_write+0x10/0x10 [ 974.949087][T21603] ? rcu_is_watching+0x15/0xb0 [ 974.949113][T21603] __x64_sys_sendto+0xde/0x100 [ 974.949141][T21603] do_syscall_64+0xfa/0x3b0 [ 974.949159][T21603] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.949177][T21603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.949194][T21603] ? clear_bhb_loop+0x60/0xb0 [ 974.949216][T21603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.949233][T21603] RIP: 0033:0x7febd0b8e9a9 [ 974.949251][T21603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.949266][T21603] RSP: 002b:00007febd19de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 974.949286][T21603] RAX: ffffffffffffffda RBX: 00007febd0db5fa0 RCX: 00007febd0b8e9a9 [ 974.949300][T21603] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 974.949312][T21603] RBP: 00007febd19de090 R08: 0000200000000100 R09: 000000000000001c [ 974.949324][T21603] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 974.949336][T21603] R13: 0000000000000000 R14: 00007febd0db5fa0 R15: 00007febd0edfa28 [ 974.949367][T21603] [ 975.288415][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.304923][T21605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4860'. [ 975.314168][T21605] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4860'. [ 975.536220][ T24] usb 5-1: usb_control_msg returned -32 [ 975.574025][ T24] usbtmc 5-1:16.0: can't read capabilities [ 975.624546][T21613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4864'. [ 975.714867][T21613] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4864'. [ 976.113724][ T24] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 976.129137][ T5898] usb 5-1: USB disconnect, device number 107 [ 976.275081][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 976.284352][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 976.331305][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 976.406373][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.457571][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 976.490687][ T24] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 976.512747][T21636] libceph: resolve '4..' (ret=-3): failed [ 976.596774][ T24] usb 1-1: Product: syz [ 976.611308][ T24] usb 1-1: Manufacturer: syz [ 976.627579][ T24] usb 1-1: SerialNumber: syz [ 976.707119][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input92 [ 976.990437][ T5898] usb 1-1: USB disconnect, device number 110 [ 977.148449][T21648] input: syz0 as /devices/virtual/input/input93 [ 977.226945][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 977.226957][ T30] audit: type=1326 audit(1753377376.098:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 977.294822][ T5898] appletouch 1-1:1.0: input: appletouch disconnected [ 977.411106][ T30] audit: type=1326 audit(1753377376.098:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 977.497089][ T30] audit: type=1326 audit(1753377376.098:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 977.561835][ T30] audit: type=1326 audit(1753377376.098:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 977.613998][ T30] audit: type=1326 audit(1753377376.098:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 977.637663][ T30] audit: type=1326 audit(1753377376.098:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc971d8d310 code=0x7ffc0000 [ 977.660866][ T30] audit: type=1326 audit(1753377376.098:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 978.005360][ T30] audit: type=1326 audit(1753377376.108:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21641 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc971d8e9a9 code=0x7ffc0000 [ 978.183813][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 978.373827][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 978.381831][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 978.453781][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 978.608330][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 978.753666][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 978.818235][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.948876][ T24] usb 2-1: Product: syz [ 978.953429][ T24] usb 2-1: Manufacturer: syz [ 979.009400][ T24] usb 2-1: SerialNumber: syz [ 979.103809][ T93] vhci_hcd: vhci_device speed not set [ 979.141058][ T24] usb 2-1: config 0 descriptor?? [ 979.177583][T21659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 979.246971][ T24] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 979.323267][ T24] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 979.355379][ T24] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 979.376275][ T24] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 979.382722][ T24] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 979.830122][ T30] audit: type=1326 audit(1753377378.678:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21690 comm="syz.3.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 979.905232][ T30] audit: type=1326 audit(1753377378.698:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21690 comm="syz.3.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f52fbb8e9a9 code=0x7ffc0000 [ 980.024215][T21703] loop8: detected capacity change from 16383 to 0 [ 1103.533499][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1103.540512][ C0] rcu: 1-...!: (1 ticks this GP) idle=3094/1/0x4000000000000000 softirq=124508/124508 fqs=0 [ 1103.551810][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14979/1:b..l [ 1103.559832][ C0] rcu: (detected by 0, t=10502 jiffies, g=120953, q=1007 ncpus=2) [ 1103.567743][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1103.567774][ C1] NMI backtrace for cpu 1 [ 1103.567792][ C1] CPU: 1 UID: 0 PID: 21655 Comm: syz.1.4871 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 1103.567812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1103.567823][ C1] RIP: 0010:taprio_set_budgets+0x14a/0x3b0 [ 1103.567846][ C1] Code: 32 f8 49 83 fc 0f 48 89 6c 24 30 0f 87 8a 01 00 00 4d 8d 2c 2f 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 ef e8 4c cc 94 f8 4d 89 fe 49 8b 2c 5f 48 b8 00 00 00 [ 1103.567860][ C1] RSP: 0018:ffffc90000a08c00 EFLAGS: 00000046 [ 1103.567874][ C1] RAX: 1ffff1100af6c181 RBX: 0000000000000004 RCX: dffffc0000000000 [ 1103.567886][ C1] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000010 [ 1103.567897][ C1] RBP: 0000000000000008 R08: ffff888057b60c83 R09: 1ffff1100af6c190 [ 1103.567909][ C1] R10: dffffc0000000000 R11: ffffed100af6c191 R12: 0000000000000001 [ 1103.567920][ C1] R13: ffff888057b60c08 R14: ffff888053e762e0 R15: ffff888057b60c00 [ 1103.567932][ C1] FS: 00007febd19bd6c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 1103.567946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.567957][ C1] CR2: 00002000003f6030 CR3: 00000000352c8000 CR4: 00000000003526f0 [ 1103.567971][ C1] DR0: 0000000000000000 DR1: 000000000000000b DR2: 0000000000000000 [ 1103.567980][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1103.567990][ C1] Call Trace: [ 1103.568000][ C1] [ 1103.568013][ C1] advance_sched+0x963/0xc90 [ 1103.568035][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1103.568049][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1103.568076][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1103.568091][ C1] ? read_tsc+0x9/0x20 [ 1103.568109][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1103.568139][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1103.568158][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1103.568175][ C1] [ 1103.568181][ C1] [ 1103.568187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1103.568204][ C1] RIP: 0010:kasan_check_range+0x95/0x2c0 [ 1103.568224][ C1] Code: 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb <48> f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 49 ff c3 48 ff c3 [ 1103.568237][ C1] RSP: 0018:ffffc90012ccf588 EFLAGS: 00000202 [ 1103.568250][ C1] RAX: 0000000000000001 RBX: 1ffff1100ee0c5d6 RCX: ffffffff8b6efb10 [ 1103.568261][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888077062eb0 [ 1103.568271][ C1] RBP: ffffc90012ccf6d0 R08: ffff888077062eb7 R09: 1ffff1100ee0c5d6 [ 1103.568283][ C1] R10: dffffc0000000000 R11: ffffed100ee0c5d6 R12: 0000000000000001 [ 1103.568294][ C1] R13: 1ffff92002599ec0 R14: ffffed100ee0c5d7 R15: 1ffff1100ee0c5d6 [ 1103.568310][ C1] ? __mutex_unlock_slowpath+0x1c0/0x700 [ 1103.568333][ C1] __mutex_unlock_slowpath+0x1c0/0x700 [ 1103.568352][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1103.568369][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 1103.568393][ C1] __unix_dgram_recvmsg+0xa25/0xd80 [ 1103.568423][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1103.568444][ C1] ? exc_page_fault+0x9f/0xf0 [ 1103.568463][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1103.568482][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1103.568502][ C1] sock_recvmsg_nosec+0x183/0x1c0 [ 1103.568521][ C1] ____sys_recvmsg+0x3aa/0x460 [ 1103.568540][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1103.568562][ C1] ? import_iovec+0x74/0xa0 [ 1103.568583][ C1] ___sys_recvmsg+0x1b5/0x510 [ 1103.568600][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1103.568629][ C1] ? __might_fault+0xb0/0x130 [ 1103.568650][ C1] do_recvmmsg+0x307/0x770 [ 1103.568669][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1103.568691][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1103.568708][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1103.568730][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 1103.568746][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1103.568763][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1103.568781][ C1] do_syscall_64+0xfa/0x3b0 [ 1103.568797][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.568812][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.568827][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1103.568844][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.568858][ C1] RIP: 0033:0x7febd0b8e9a9 [ 1103.568874][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.568887][ C1] RSP: 002b:00007febd19bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1103.568902][ C1] RAX: ffffffffffffffda RBX: 00007febd0db6080 RCX: 00007febd0b8e9a9 [ 1103.568914][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1103.568925][ C1] RBP: 00007febd0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1103.568936][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1103.568946][ C1] R13: 0000000000000001 R14: 00007febd0db6080 R15: 00007febd0edfa28 [ 1103.568964][ C1] [ 1103.569765][ C0] task:syz-executor state:R running task stack:22008 pid:14979 tgid:14979 ppid:14966 task_flags:0x400140 flags:0x00004002 [ 1104.073996][ C0] Call Trace: [ 1104.077278][ C0] [ 1104.080219][ C0] __schedule+0x16fd/0x4cf0 [ 1104.084733][ C0] ? smp_call_function_many_cond+0xffe/0x12d0 [ 1104.090815][ C0] ? preempt_schedule_common+0x83/0xd0 [ 1104.096281][ C0] ? __pfx___schedule+0x10/0x10 [ 1104.101145][ C0] ? __lock_acquire+0xab9/0xd20 [ 1104.106000][ C0] ? preempt_schedule+0xae/0xc0 [ 1104.110853][ C0] preempt_schedule_common+0x83/0xd0 [ 1104.116141][ C0] preempt_schedule+0xae/0xc0 [ 1104.120818][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1104.126193][ C0] ? __folio_rmap_sanity_checks+0x30d/0x700 [ 1104.132105][ C0] preempt_schedule_thunk+0x16/0x30 [ 1104.137316][ C0] _raw_spin_unlock+0x3f/0x50 [ 1104.141994][ C0] do_wp_page+0x1d1d/0x5800 [ 1104.146512][ C0] ? do_wp_page+0x161d/0x5800 [ 1104.151205][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1104.156061][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1104.161104][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1104.166493][ C0] __handle_mm_fault+0x1144/0x5620 [ 1104.171610][ C0] ? __lock_acquire+0xab9/0xd20 [ 1104.176479][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1104.181942][ C0] ? lock_vma_under_rcu+0xf8/0x710 [ 1104.187072][ C0] ? lock_vma_under_rcu+0xf8/0x710 [ 1104.192194][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1104.197753][ C0] handle_mm_fault+0x40a/0x8e0 [ 1104.202532][ C0] do_user_addr_fault+0xa81/0x1390 [ 1104.207651][ C0] ? rcu_is_watching+0x15/0xb0 [ 1104.212422][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 1104.217798][ C0] exc_page_fault+0x76/0xf0 [ 1104.222310][ C0] asm_exc_page_fault+0x26/0x30 [ 1104.227159][ C0] RIP: 0033:0x7febd0b4ce0f [ 1104.231576][ C0] RSP: 002b:00007febd0edfc50 EFLAGS: 00010206 [ 1104.237646][ C0] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 0000555563d27590 [ 1104.245616][ C0] RDX: 0000000000008041 RSI: 0000555563d2f5c0 RDI: 0000000000000004 [ 1104.253586][ C0] RBP: 00007febd0d86ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.261576][ C0] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 1104.269568][ C0] R13: 0000000000000076 R14: 00007febd0d86d00 R15: 0000000000000000 [ 1104.277567][ C0] [ 1104.280588][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g120953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1104.292996][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=63932 [ 1104.300889][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g120953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1104.312341][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1104.322312][ C0] rcu: RCU grace-period kthread stack dump: [ 1104.328196][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1104.340120][ C0] Call Trace: [ 1104.343403][ C0] [ 1104.346340][ C0] __schedule+0x16fd/0x4cf0 [ 1104.350881][ C0] ? schedule+0x165/0x360 [ 1104.355222][ C0] ? __pfx___schedule+0x10/0x10 [ 1104.360095][ C0] ? schedule+0x91/0x360 [ 1104.364346][ C0] schedule+0x165/0x360 [ 1104.368509][ C0] schedule_timeout+0x12b/0x270 [ 1104.373384][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1104.378775][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1104.384093][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1104.389658][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1104.394531][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1104.399477][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.404682][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1104.409969][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1104.415191][ C0] ? finish_swait+0xcd/0x1f0 [ 1104.419791][ C0] rcu_gp_kthread+0x99/0x390 [ 1104.424393][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1104.429594][ C0] ? __kthread_parkme+0x7b/0x200 [ 1104.434535][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1104.439573][ C0] kthread+0x70e/0x8a0 [ 1104.443654][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1104.448870][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.453484][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1104.458696][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.463925][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.468525][ C0] ret_from_fork+0x3fc/0x770 [ 1104.473125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.478245][ C0] ? __switch_to_asm+0x39/0x70 [ 1104.483011][ C0] ? __switch_to_asm+0x33/0x70 [ 1104.487782][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.492377][ C0] ret_from_fork_asm+0x1a/0x30 [ 1104.497161][ C0]