last executing test programs:

8m27.073799687s ago: executing program 0 (id=233):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, 0x0, 0xc000)

8m26.870239528s ago: executing program 0 (id=237):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0)

8m26.649832126s ago: executing program 0 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xeec, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2], 0xeeef0000, 0x42240})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0x8, 0xb, 0x0, 0x7ffffffffffffffd, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

8m26.402187064s ago: executing program 0 (id=246):
syz_open_procfs(0xffffffffffffffff, 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
getpgid(r1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

8m26.111525316s ago: executing program 0 (id=254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xeec, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2], 0xeeef0000, 0x42240})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0x8, 0xb, 0x0, 0x7ffffffffffffffd, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

8m25.792877314s ago: executing program 0 (id=260):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="010000000000000000103b00000008000300", @ANYRES32=r2, @ANYBLOB="6400330080800000ffffffffffff08021100000046fabfd2b9550000c800828000000000000000000000000000060202020202020101300406000010000020eb0206000503000000250300a9033c040200b700720603031633709eab48"], 0x88}}, 0x20000000)

8m25.462256872s ago: executing program 32 (id=260):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="010000000000000000103b00000008000300", @ANYRES32=r2, @ANYBLOB="6400330080800000ffffffffffff08021100000046fabfd2b9550000c800828000000000000000000000000000060202020202020101300406000010000020eb0206000503000000250300a9033c040200b700720603031633709eab48"], 0x88}}, 0x20000000)

8m20.851201432s ago: executing program 3 (id=316):
socket$rxrpc(0x21, 0x2, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
syz_emit_vhci(0x0, 0x7)

8m20.751111171s ago: executing program 3 (id=317):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

8m20.724927829s ago: executing program 3 (id=318):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

8m20.637946302s ago: executing program 3 (id=319):
syz_open_procfs(0xffffffffffffffff, 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
r2 = getpgid(r1)
setpgid(0x0, r2)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

8m20.540493665s ago: executing program 3 (id=320):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x1e, 0x4, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0)

8m20.185533386s ago: executing program 3 (id=324):
socket$rxrpc(0x21, 0x2, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000001100)=ANY=[], 0x7)

8m19.669786269s ago: executing program 33 (id=324):
socket$rxrpc(0x21, 0x2, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000001100)=ANY=[], 0x7)

7m37.520226557s ago: executing program 4 (id=573):
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX])
mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
r1 = getpgid(r0)
setpgid(0x0, r1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

7m35.549219728s ago: executing program 4 (id=577):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af9234751", 0x78}], 0x1}, 0xc000)

7m34.44253996s ago: executing program 4 (id=581):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

7m33.334511414s ago: executing program 4 (id=585):
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
r2 = getpgid(r1)
setpgid(0x0, r2)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

7m32.907297459s ago: executing program 4 (id=588):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b535"], 0x232)

7m31.618196263s ago: executing program 4 (id=596):
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
r2 = getpgid(r1)
setpgid(0x0, r2)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

7m30.580878135s ago: executing program 34 (id=596):
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
r2 = getpgid(r1)
setpgid(0x0, r2)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

3m5.202141432s ago: executing program 6 (id=2013):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x48}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0)

3m5.173901129s ago: executing program 6 (id=2014):
iopl(0x3)
syz_clone3(&(0x7f0000000280)={0x4080, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}])
read$FUSE(r1, 0x0, 0x0)
write$FUSE_INIT(r1, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x900})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'pim6reg\x00', {0x2, 0x0, @empty}})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x7f, @empty, 0x2}}, 0x3, 0x0, 0x9, 0x386, 0xd8, 0x2, 0x6}, &(0x7f0000000080)=0x9c)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e520d02100001aaaaaaaaaa129610090308050008aaaaaaaaaa1020bc86249600b842cb2d28dfab26a7966a56fb01851b0001ffffffffffff000b087f"], 0x55)

3m5.023389724s ago: executing program 6 (id=2015):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4758a79422feb1de00"})
ioctl$TCXONC(r2, 0x540a, 0x2)
syz_usb_disconnect(r0)
r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

3m3.586043101s ago: executing program 6 (id=2018):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

3m2.190080856s ago: executing program 6 (id=2021):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, 0x0, 0x100, 0x80000002, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20002400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

3m2.061415458s ago: executing program 6 (id=2024):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
flock(r0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2004080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@debug={'debug', 0x3d, 0x6}}], [{@subj_role={'subj_role', 0x3d, '/@'}}, {@hash}]}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
flock(r1, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00')
read$watch_queue(r2, &(0x7f0000000000)=""/196, 0xc4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r5)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6)

2m47.030792668s ago: executing program 35 (id=2024):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
flock(r0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2004080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@debug={'debug', 0x3d, 0x6}}], [{@subj_role={'subj_role', 0x3d, '/@'}}, {@hash}]}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
flock(r1, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00')
read$watch_queue(r2, &(0x7f0000000000)=""/196, 0xc4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r5)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6)

5.434131687s ago: executing program 1 (id=2878):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x24048084)

5.390370788s ago: executing program 1 (id=2879):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000000e14010025bd7000fcdbdf25080001000000000008003c00020000000800030001"], 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000000)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

5.301188256s ago: executing program 1 (id=2880):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000c400)="e47c6c216d8aa37d2b4b4937cfe03e2410439a321b06378d3ea501c17dc8b903b8248840d09c10c6c253f5b6e1e937e281668664f6d7604b7802a480c65efe232149b9a1b5685da4b06f7300fa4ba8bf52b83ca92b9340c552063c5c54313b425aa83b0bb70cc61edfcd875385d3b4cdcabf7e5d7b6afe878fe33d5a2f54b21f9a99f5384099ae155074bcadc16fa61bbc92c54fd1e4e903ddd075b54e0fd0038f016509f8c271f61d87c793e3e12f2c2cc904b4eb10b03c7407dd50b83dc3a18daee83065d39185121ba9c6bdec2158faade8e7d558b99fd60434b1fcd74eaa24d75d6a591fd08c1d3219cbd7c59cafbbde4b5d5f059a12e9377ca96953a8605fd6445f30ceae48093052474f4f9f14c7cb9b5a255268a462738e7fc45805aa57f6b892e690bfc3750b23b13c1b6b499b19b6865baf9a95ae98bce137aa98e5d2ec0daa6795c027113bece2e8a33f02dea2501cd7a60378d8503c02afa003819a2caa68203620eb1b8b532a515e9c5d331d1e9c92d6af26d17d1c1e26ba196df0902f6d0ae5c607b53c9ada09aa4a9a99da592b737fa8d1795bc4e61b5bb00c67f4a84e97e6b7126e0cbdaa651430125c57f9de224bb18a96d78253be5daa1c1bbe8491769d39c5db252ded1bbfc27194eff67ff94997a93095cf9405a7d016c2376b911c619c1f5dc45e6c8a4ce168ad766d8ff8f382b24176a3f50b6ec4e50b0b4b95c9e1f00b8ab6676d8ba438a21483ef9cf9aed2a05cdd2305bf665dffeadf554ec2c57a89d343b4f05cc2b904562ddc629e509b52d9fb7adc22bb5377953033615617c8a0d88f93ff4936c07df225448e52747d47b4a5c781e4b8c5237f4bc4bda77a242fc321880ce3eec414c5355fc66e57c35e901c4dd0f20a615482bb5eef38a29c7279c633fe075d9c9bd377f425446a303e0a59bc613907cd6be3537c0f94d1245940ed5bbf31c41a03c5a39dd4e1d8ab0a19ab6911dca0578abb9763b0eae86a91571d2b0726722b74db9a1bfffb7424c8a9197f5d41cedf5c0b89273718a85fe81ded439104acc28da887863c7606657af0d279ac7c5b50716a1380665169eaa039080987d63a9af0ae10c036a57a1d651267061faa4e46c650fcb4556f8a34e4bb06a4e1f2e0be58add2c62ba67c64508e08f5b1c7ab6ddedbb49736826fdcb985f2c651a2be6b0f55e18d9367f029b2d85438fd53f1961f533685745c01bd867707ec16d084cd8cef1ba5e9100f1f86a252a14c65e8991b0a7ec745572e1a396ab4ce89ec5e54fd6e3841b99ed2384b0a35a86ba8a0436e87e1215bbb0492427af73ba404790aab0e336f53b69749fca97def0b5f3445b42f700cbe0a01c3c6966cd5bb6f79fe8aa7d934f5869a0e3b0e743c52c140e01b050a0725e4c27cda0444f488078b68783765b59ab6c079d843e2d35eecb4b82a8251d61e232e19d386ad7ddec0ac6eacc863f1a2b103f48077bb5cc7e58157b5af32a137d4df40f98a405422df6dbfdab5477bae9e0633647a8b9baa88c3f681901864e38c439cc114ec7580fea9131b554843902904211e2f28e8d2c066a3761aa076577458fbb3683fc2c4a18b93aaa343d27e232fa11a649b0dab7c2e83b76c446968ae8a99f3ca5743fe0f1eecef48e7e06695f380f434e591f14540d5e92da29a97d0677311da9e34f1a1691d3593cc6f74d0394b46e74278205dca9c89f6d2f117cedbc70d1e3289d3fa23480be98e377b15ce6054e3e33dc8c5d1ce804606c86c98230d8702427243b05edbb392f9304b9015008733c0a52e8fd4f74ccbb374496cda1abac59fa1052306b77ecd2025b7f6ce38327ff0bf5a7f183729442c13dc8b1b944b9ea3c3833a11f5334fca329cabf8a7e9120a9d96f0bec9cb64dc7e9456fdee5151be1c9f574b509f081655dbe9f2bd8c948e98f1db4e1a7d2ed5af95fa13a55a2639b0bf0d5a575287dbd71cd192be0e1b6f5f6c12e751e4a65799420957145d20097cff8b3b86308a336f10e413db27fbbf080ba97dfdc8a3e01d63d672ac05e6fb3733afb14f2acbbb350188f9194c66139b87e23788716c1941cc768dc0c34dd35848a42a568ba49cbc0226ee61695fbf7feebb933f5389b1d38ea93008cb08b16d2a261ace3cb988bf673fd16e18bdaaad1be4f4cc6394b454ec5022577b7e6f65aaa7998005803b072be1b5d7c437b5aa003968bbe6eedade30b9b995ce9f54ab2fd37da2de0278219a779957a3c0daf684c31a2cfb3e57f0175e28d3ab2e0693a4225937013019773555cfd63234251c08531075d3f0de35780902c6443a126c599e49fbe3e020786099ee941c1683009540640f06852812abfb128b494e6f913edad2c1072b220537483dbc8fe8bbb405c282bc1649ee16fc5480d5ef13704006b4bc985211e7704668f790db2ecfcef79953276aca4112aa5984ad818b28d73c1376e12cb43e9765fb17a7255e5a7fd57628e2c3d00e046b8dc0e12cc0a3be8e0da882873a6a18698229243db199a3b26afc03fcdf532090ceb3e249b6f19b4e8402296030042924259b683ebdf68fc274432377d87252d506a8c2f5f6c088a4248274a5752655f3ff1a0d79b2dd1d7100a2fee9e4cbe5babe852159e6321ea6e29fcebff46ea2802c5faf066cd334237919a503b5a562e3106f899cd1d62a400f0b8e43f316962b4641344534fa6dec71d5723f0ff4fd037c2e3932c0d9063ba636975fd1b8c5bea4a2fb9d53eb0682fca49e26e4a9b65b35378e0e4d055b0b501322c52d9ec900ee120d697dac611b55ce3ac628c07d6a5a0d52b714df8edb51f1a6ae45a25ee43c1792c8f1ea95ea24655a88844e81a1bc0f75c82edb5a0b10fd586cf6401ee87e68e8dcecc9ae670c0a71266858ceeedc2e2f0b38e8cd5363b926cfb71455a88ae7ff485c52797e860d73967971d09fb2e65fb612163f34edcbcfc813957579c3681122b575af443763d6fd5748b5fe2407e6162b1f07448bcfdfb871a432248b2d9dde04944e029aaf026274495bf2a283db2d76d17ddcbdfa1f263ebcd04398e733c1517bd764a9caf27d1dd14750e5dc10d49adf29416a14b475b8308f749dd4d1f90cb65dc956d331d6b6c1cf24e6774e29a4e79028dc34a5ce3f5bde0b2b0c69c3336a0daf1bc6e612a46216d303b456487cea05006550b11be7a0211658ee2a683a1574ce4061f72cd7574d5af6c860e03882296fbde66c85aa8a85c9de799f5d83e2e01c8ecd13a15b0c3c72695358fb4d2ccf6224a45d820dd89e36e66d0a5eda07df66a68b24f111cabfaf2d37698b70348f8df4673a28d511d6cbb7590bbe1192ebb55ccf8e9fd618000239a594d2c57304bcedbaeb116870b23728494497afced271408ecbbe0c923400d86e7654d09fe2d204c41032669d6d818e0bc298240693f21fe171f7989191d7eb5bdd2981da20fbe61d7067a372c5476bf255c2b1b8502ae369fd99409deb4dfabe2eb82c2b5c4068249325455942fb84967dbafdd90a094182375a73a13eee7ab5a83b9a5eaa1cbaa90ad9293b8e5c1437fa8b42e9d777d5d790c00fe4a39d449220ea4140511b04d8c1c9e59c15f1fcf265b4cc3e0526135b0c512e61e6bb016d87ec62deee312fb093413f250d2b8476bdd5a8ae4725305f6b85428a42f84438241f3d68e231584d3a69946faefcc6bfff5a75051fb3f34ff0be7656b293db2c2139996b9dfcb3b53b84e0f5007e6a2181819c73db10c65ee05369365e8e6557547d807c21362b675d83d3613abee8d7b7d3a74a1e69e0785a8aa4373d1f67edc2d5af633a81bdefa9858c0d0a553ffd7e929f301e575fbc1ac7af5871ea4e510980e2b8fcdbf9c2216f3d73c2777a989d324c7a2df7f06b87076ea04be57f5fc4f48c7bb5c80360a8761743e5d7d6ae76f9b671c253e7ac2727ab718b7339250b946b6c2a418c894d48f19f594071168c2da09f0aa7ef35ae778ab4c1fc684b1c0a9b5c66e15ab92a4bac0d6d12c76b31bb56708d09f716c237a456f810e0dbbf3ac0aeafad75e27a522563a19be66ea05f35b23723934f7a12c1e1c9a5c427a037dd9f75dc9960d49b48fc20910c7a8aa51c79882bcac75797911d676ad2c31dcead6cd6ffb424e1ee2b076c45fb6fb62f845fe3c8c24f596f4d921168f65162280736d713d11aa02f9b7b02f47972abd3679b1897504b8f809d8d1044fad4d04406a3ed0c124bcd8337628f993393e9b94eb42a3d6ac5802e0172749ae6f1ec6dd22f4d32bc009deea5dc22daf041f8e8fa206dd5a975584107a81bd033b3d8f8d4d66da8705713ca9a71b8f7668ee7bd4cbc960eaa89228de6dcec53ff9fcfb858fddf73cc825bf3d0cdaf4592e60619e3a666a86391149dedeafce8c76fa6cb19008d48b301efec7232b20d48da6701239725848406a28a36c901e62d0759e2a086cd3bfb54185fafd6d2c6972adc6d76e2c58838a5b103fd2fb821fe9467ed840aabb8db5d0897bc9e48ece09098c57df591065e20a923796e00b17d208ff39867913b15fdb9eddefc8fd828f5abd82e26e9cb62c1d917864e0fde219bac453f0598cc4d8bcf6f759e0c7b667c556cb8e1b4b46af29e37b996f0f5f0871169366feb56a5c84854903c315c729dc494b8f0982eaa178a4225e3fc89c7b216a74b34a12bc452fbe54f11fe5aceb1467729f32ecd658b1fc3230c5b07496f0ec97549988fd0ccf95f01a95467eb9cd21b3386f5d0de538ac9941cb22fa457da9395996e6a090c072be1d2c2d2963e695d3cdb5375f5da299b5efea5ec32546fd36d4ed8b10dd14f94298f0973fcb935f981aa2ebc71aacca31470d33b12b43478caddc41f4262f05d106a417f8c304fbd5d1214a2ce9e95acedb4ae29c89fca58742ca207e9d972ce871a09e71f1e80c4a5cf8a248b900f7acfa8a253ffc82d8977a303822b365d2113a6e01c59ab41c9bfc7316393a423618cdc08de3e834b02d88ee169d84ce1ca3e26dbec65a7b796c91a37ada6ff3796e6a1a427add5c6ccca900369484b4626bd27d776fc73867e4264ccf17653d298725f56f92e9ef64c1b16ff4018330e5625b3a58e9b32285d7ea086035451fbfbd275443a59d80aa44a80b8b1d07c412fa6b6f6a3709c3fd4b3036e17e0624d0ed4fca3f5856e363e33a984c4cc08a5c40c16f50b7a1a11bc8f035d833b2f5f357116e20813cc718df7611efb3fcc9e9d71c3b5662118ce181e308528b156ffdd480d5208ef33fb68bdeb5ac7a4be8b08dea0c2f60430a1eef099b0270d8c63a997890136ef7800204b730b8679a4f0be51a16e3a7ddb36a36b3c2c3b28dc3a5a51ccc7dfb0c098c5d46a7f0cc19b3cdfffd5c9e96fd649c8f769954089816f5a393fd7590df49a4ffd5b554daa5fed16937679cc1c59adf4f2b35b652b2162cd75cc06f811a9b9c583db30197d46c347377edabc75840bae2ecfca6a33b76ac7ec16a89616ac9c5fcd69f62ccb9da58b3703d1b6d81e6cc294e2ae63c85bbe6612a240be5687448b09552e326adb479c20d25771a7cce65f316276ea4febccc8d0671d3f7b89e3860527932d50358f61dfc57ecea5e5e7a514ec31fc4fc99632b924f25abdfcab63b18d9b8f34b882e1b00adfe9465990374411604fa1ce59e906848cf44a73030f3dc84bbef85c208d39a1fcfeef247282cb7a307c314548042e24dd80eeb2530081305c6f9d18394ac4924b540f007df6d7e80c4eab56482a94aefe9288392fbdf599707e19fc50f7754226f6778eb9401f887fe1deb9d9bcbe35c979954ae22597f636869c8843767355e85fa45273788cb43ec3bea0a74f243f5d1840c087e43c0f39a2b61481a9edc8030e3dcd42657905179c2b03348c2cdc2a7f8b9eea3652984cf7ae0f827c8eea183c32dc0586efd646a4863d74bafc76cb86109d18027531a28f1e5d42f27c76f6b871a4e762268c2be77f4b3061d62300d7a6af893126cd9d027890f83ce8b0c763f7fcd15f661fa57bf182c756de530065577d97c4e1c9d52d5847926600fc90070e5c3092129a4c87ee589292a31caa10ca61b269e4e9756f49cfe2b9c8e48afe99bccb723007580dc69df68158169b3b880a683be132afb10d375e26ca56a503c22a281f57a6c07e0a7ca6e8817679166f78af04b42a0ef886ce782a5e2c6f4755cbee4e62c4315e62d6e294423b34991f3c1847e20cc1ff5ffb80a725ee28ccef8a897e4ed24fc224266fbae8c5211102d81d40c1cf53c2fb1919c802a6a947d83992ddeaadfd771811dcf74894e32ae6eba1896220f0c4eb4985ab38d633410a1c4c47d2409bd54689252f09250c0c650e03b4cc1db9f68525d66864a8d9d8f512711e14d530665e37f70bdf286f1dea3b88dbb494520f56381fe82935c5a8313edcc92658b32419251063ce1d3b0c91f2e235baa5c79cbc7db9715722ea4ff5b106c65615e6c439df019cddba3f48fb441f7dffcb968dc6487ea78c37ffe2941841ad4c4282517f662065ab574bf077c53965e8a364b9db2b0adf8a7e74693ae1fb7a7fe4a7403eced2a74f3bad5efaa9cc6f7ebe33cf779c21a6278e9043999d33f030ef5b6d55a72514552480b1061f487e18bf5069bf741ee4fd0fbb999fbc183cc840b0317cd5d5d8fecc1f3f91bb5f2ad320339aff5c884f4c31f4877d59642e3ea0e3af659299aaea96ef7302910089560be252eac73213f80d334adaa8747cb9e3b9e4fab9b203448e276576e049c3b661ccdf75e0b386f6f865a1faf0c277b1fb39d84dcaf31b5ff4bbd6454a4052fac9e7d1825c178cdac4d6adb0785409c2e58d47e7ecdf909457f990fe7fe32c93f3185f55321cea4da51e3645cca3869ca44787108e9e5cfa8d9d575f2cdd2376226fdb9812cd20623b5e594ca7584cff342a52126dbdadfc348e3fcbec4bdf64f454f00f21889a8bd93a461ac51bfc76d7ccf96c6e1e79bdc2ca184d01d81422dfa068a4b4cef06bfa2742db2e3f9f25d93d5be6655d9f5b77252b124ec1cd67d73936fff40033056d13740b7f09c2ef057f9670e1f0cb8b81ca13c495a1463bff9f42aae53abe981263defd8b104e5ba6cd077859821bd8191e3622f7e8354b0ca6b5fe1481b5aaeed5009f08bd3370b4d8e5f152d8fc1ad9224c8d9b7a2497a2bf2421d2762bf29236c6f292911392969f2d5aa78b20b2e6d03cbcb32c21267bdc136dbe5444386e2fefa3709ef801c45a77964d3dfb13bcc20971cda7581aefb49dc03076c892c035cf963cf5047b2a468900a9769b3e9e47ef4c2edd13f2c7d1e7d0ccdf15d0e68484f0d1b3a1f54bb98dcf11be6655ca21358b39421bc80d649242eb15aab0bda45f318faf2557a5311fcfc51a7947b6ea9e071593274389931887f045e71dd0e1600c0ec940b20e177805d29b4f6fb2cc0d1ed7ef888122d4f6329188185a1bc563b0f785d135966df5ead0fa8fe219c46afe450a290dac0f8d7b973e802b94b3bef23b34b076fc3e228ad3ec7f81c92d67bbff339154a44ed74179a1252d0f619fa6f1cab8c47b5125b6ba7c60c2e1063857f21be81e75e889f58dbb832ee530abe43030e605e060d7cd1fc299d25fd4a6cfec335559cea3cf574ad333f3795ebdfa3344595353c70168b34cd6bd4d967a1ad78ef0cd63fbc9e51835505f154cf867a1389ff9800eb9d3af5d746dc9778304d4fe46940eaa0fbfecfb0b0b740167012fc0dfc00f957520e14810374e15048b0eb32547c781ca329ce67db5a61037466061925c6edca686449e411bac0fac4c57ed2e3507ff26998d6d2729a9f9e6d339d3655f4d1c4065500a46da24331365890ca8b1d6fe11aab8c0668a095b9f983de52f024a08f5f2d93799f851bfc60db3089b88af333e178a07f1ed953e38e6c5c12296d33abfb932442ca6f7222535473805b864befc0bf079147326c003c46841778eec7c61e378a9949d4c1c53a2cd657cf3ab955eeb4ed46c88a85f73af8d20a40a31b394213046ee0d15c5eb587458dcfb1278e9d3dedf3e68f313880dabea21866d9156717039e737305108ac94c25f1ad5937b7728f495e29db91bf3a3cc000bef85415cfde70fc7ce7d7234a987dace74ad55a597a9dad06c1dab4081132f4f8e508173a838241cfc955c652373535a2e55ad73655a6e27a031007e00f8e37aee94ce3857f3c3f24bde842015559c73c3e05e2b7afabb037f8365a314ae634de2f6ced6c431071c75a863b52c6528b996638fe537c05569d9b1ccd5d7f4baa99f283810b2da77a4b9a35d0fd64d42456aca6c50424a9e486b5bd31dba186e9c2559a8cc06805b2d3790be49ce914f249e79f8f821f8d428510b0e8ed67edb7831cd2032d8ce5636b5101b72e21e74485909f50ec35574fd6eb56bdd232c1d584c382ea4503fa2206f2b6b7b289408966ff786e42cf467cd68db3639dc7bc73f7bad609b39c2c6f5b743890827f825ceafbfdd8c2f31da88258b77a67802da2e95751609f16d662766e73783cf71e1924b57359aa9f9983a68f4fdfe9ec26cd468e7295dd0d9c7389f2335d47c478df124fe54bb3462ff37f3b2e0b3e0f415ac0838013f748b320918830e73563af62acead286abc42e6ad2daceec316bfc297963de9d48378dc017985fe24c20629c1a8c6c1c67eda03209da07696e33bac9061ab2fbc5b8825c27b7ec05d2962c9449b3603608c6c0b6589d729fc2ffe94992c936cd130baf125e81818c29672068bac6fe4aa39c9bcec75eef7e03405b5488318c32753f0fb6c2094eab21529e4811649431f1d65b2c8e173efd3bda023f513d1daff8dc092b4e9bb7e039e586e73d4d998af6fa54a6f552bf21628cb02578243e10dd31d3ef04e11e4ebfe55fdeda67e49f4e930d6593beff4e36df0f84e24a2c8a6d39130c88b71a092c0fddd4267e45e515166bc65f1ba16d8a07d527c76665a52a2432acdb466e6893bbbc3895a5ede98e84e5b9f27c4c49087858a847a5021d1a3e15ee3438a1211376a19f0ec43b04e2ff1a07c327903fe1ca680185677ff19ba41cd4eff21c08cec80af7070c0d6aab7168ba546e021d50b8db0ac3a690dc8929489810eed8c566158b72afdbc78a3918524cad7b5edf0b6511ca6b4e5809785b06d768fd2fdcd2e764a1f12f0690572f13867c8f4b1a5cb83c509dabf1549a07993ea58a0bdbe640cc4c16e0bc9fbf861e9e3bff84955817ad19f40f40b707ec6dcff80709ed5359c145c607751a462471bada6b9ee07181bad4a25d5229a348c504585a66a1d7876876745ab86f59b3a5e98a4c2aa7d0d883c58efc77f9814185b73a87bc23dd1c64b013b53f28a837dcc50582c0d5f8b15e958ff7068cf064e75c1865f4893026818d6dcb0eacaca3b1bc7d84188b1d4a33e82d715a18028f7293fa0684e8045aa97a416ab32337cb978c100dfd5a181012cb7a971004b35ea20a4285454781001b77f5963d4c90a7842b62dfcb1a31523ef4e67e690fc1c6e869e4fd5d9b0f6e013c56c76abfe7288d10a170669e108da06acca41adc48d98b4b4e58851db0894c8603fde20a2b5abdf1cc2829cecbcf9a6f054daddf9b5e987d2fcd8bbe0c788067d0f259f453a3ab251ed7751d2daeae49874239fa5955eb43b41916c0430fc9dc49369f540ffe65432b9757a28bd9b6c9b3820aa14b62def485322c549d67bfb11318877ef3e5e88b09e9b92eb09d31dce451c61c6a8c16d1a623d180cb4890390d7496551ffdca8b1b17b42b684fab73d79a557be5cfa04a73879d349aeb2e5a6663667f2e6e45c1bfab740eefd97270e0b70fdd577a7862d28e769105c448a8715870ae89990894869ece5dcfe9a8632d07b3577ab685c8541400ee80e2f14db921835c0eebceab91752d4f65676f86a3c6b8f66403fd6d02cd7925561b84a776da1eb64db193dfa95075e5d68b94103c94da6b2373f2ced0a4fd8fe447424a3accd7e6e7fdab35f87e9c87232e32eba6290bd24f6a7b14223eb447f49250af788dd291296cec57c30f3363787f5067784a9b395b992d1add27633df34825cdaa7021ba276a011ae419d7847c4a71b3c063df8f5b61a5e08213c71c7881e307e4597c1c30dc36e14d45144302862d32966fae399dd50222d581c99ba2c0b62fde8ff9af3f9bb93a869e3f6e0d1eb0ad56ee6cf7b0a42580596bdf411b449996361fefa805243f8df5a3546f426469d8af77e5610370f5210a7b280e744167162e3bb45ffb2c62f34c6c9f1e38b4cb2ebf133985db718fc8b2165d219a0ed1b0e166f9f0c1fb901d7af027813568e6ff4e96dec214efcbe664fea7f6e5f20389a669d17b02b79f55aeabbf2ee2133c28b8a3dc99add057802346099bf5246a89a310e8f2fadc7b2c8488dcc4d594fd2d43835a2b6aa4b83ab0581ce3ecc4f564556a54b694198af932f6e62f0d8da72b0b584fcd18bfd720d87fc7d3fcfcb242b61a5823230686b4c7f720f4cb26cb6a4a1e43c5722c2ffb0a54155752dc52767925b3ae2803282dca2d244575699a79b1d92145120e803e7cb2f2dcc5ccdfd3c5de5d50dd992f3f7a028a8fee5d217de80c3c4a242c05e5a1c7241fb7e2ad674d35dd056eddfc0038bea6804e1fb53ea073a79a2fab66e68ad9a13a09571f3192258257f421333f7426254d0b1c7fb267e134516b3a6e629be1813d458e115857bf35585b2d844285334c67d09e55209159b14c21987ff379bf9a3001e360f54a4bffdb757c8bf90550956f0354ab1e506c074cf6f8498dfa0dae22e05a4c73f7624997dd0e74618b363de37f70d531f93fc5882a86e86b9e3086da764fc7e1f7e34f37bac3f5df9f7506eb022fd8687bb1fca79dae1ab8f37c3f15871bc643e82cbf7d325e73e2fa3dc79dd6b333dac1045f1f47552e05452d6b178d9b2734e9e39358af1329744844376f1737709037956da8b27389b143312f0301c15505c754287d266b1d433ab61a3695d52533c6fb6f6aea6100d182025a5951044f93ceaa12e735d8d5fd74ca37be58ca04661fff1d330c29a18cab4377409194a2b5d257994975aab86415e050d3a1bf56b0d03d1048d9504e8ecdad31b0a947a4736c45b9bc78949bcc5008cdc2f4dd02200873d1db4cf5453e0f62823f7dd5058c755a6cd9488705b47e118ee39bd7498b0ac6346e8798f4e960232d23d5730a8b9bdaaad83fc9ec97174d5f68fda2788085d47ced0812441925a900fc1f6ca98b7954a4e77408daaf31c04104ba743919d732482a11fa89244b0721a462dc17993515cae328d24e610c3b4c68a534c6329d29b0ac08863401e41018345bd98a26ba9fc890bf493841a86425ea39dd2baf241b199a99465617a7500d7d02f85b9e598a99977e028ecb0eb647cfb2eb7df16cefef34f5b61742b067970d7b289dca446d5ffadc2b591b9f35c3559db3029ab20e91cd658b806a3b3a0008c64f16a3f6bd328f26d550874d642d7fd06e8644e713efe957ef7b26960142d72a140e94458adbc5fc8034b95424af8d4bed977d7da9abc813b6f991a60f5ed461bd3fa13a402e9f8c1bdb7a1cbc9b0db23aa3abe55d26cc60bfbd5", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0xc0046686, 0x0)

5.218241346s ago: executing program 1 (id=2881):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"})

5.0640689s ago: executing program 1 (id=2882):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81)
r1 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x0, 0x3, 0x2, 0x0, 'syz0\x00', 0xd3}, 0x1, 0x200, 0x2, r1, 0x0, 0x3, 'syz0\x00', 0x0})
readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xb4, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x80, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x79, 0x5, "49875f2cf855d01f2b96f023208f4b17dc03e5ea5b2d68245cede43804e9edaebbb2271700b05c856a2e071f9cb167e8fa4ad863af243045951fe1e10f6c631fc55b3ca6abea984f690c173a3f6db7c57337bf44860cf2b43de6a6c251b529d1ad4beed7d581b5199d860bfc997f0842781adfd6fe"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040800}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000009c0)={{0x8, 0x0, 0x4, 0xfffeffff, '\x00', 0x7}, 0x1, [0x7, 0x1, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x3, 0xa969, 0x4, 0xd, 0x9, 0xa, 0x7, 0xbcc, 0x0, 0xffffffffffffffff, 0x325a, 0x3, 0x1b1059c3, 0x3, 0x8, 0x1, 0x8, 0x2, 0x9, 0x5, 0x8, 0x800, 0xd35f, 0x7, 0x6, 0x0, 0xb, 0x6, 0x100000000, 0x0, 0x1, 0x1, 0x9, 0x1000004, 0xdd3, 0x4, 0x100, 0x9, 0xde7, 0x80, 0x93, 0x8, 0x3, 0x9, 0x7fffffff, 0x376, 0x800, 0xc4dd, 0x6, 0x9, 0x7ff, 0x0, 0x2, 0x200, 0x9, 0x200, 0x8c5, 0x1, 0x0, 0x8, 0x7f, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0xbbd, 0x4d3f97e3, 0x0, 0x0, 0x7, 0x8, 0x23e, 0x6, 0x8, 0x9108, 0x3, 0x5, 0x1ff, 0x40, 0x7, 0x5, 0x1, 0x8, 0x8, 0x8000000000000000, 0x6, 0x6, 0xce37, 0xb81, 0x200, 0x0, 0x800000000, 0x6, 0xb, 0x8000000000000001, 0x9c4f, 0xe0000, 0xc08f, 0x8, 0xc, 0x9, 0x6, 0x5, 0x1, 0xe4, 0x6, 0x875f, 0x0, 0x9, 0x8, 0xeb, 0x70, 0x2, 0x7fffffff, 0x10000, 0xfffffffffffffff8, 0x5, 0x4, 0x4, 0x5, 0x80]})

4.449938283s ago: executing program 2 (id=2883):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.788998864s ago: executing program 7 (id=2888):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0})
preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000002100)=""/4105, 0x1009}], 0x2, 0xfffffffc, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_io_uring_setup(0x58c3, &(0x7f0000000040)={0x0, 0x1fb4, 0x8, 0xfffffffc, 0x25e}, &(0x7f0000ffe000), &(0x7f0000000000))
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)

3.631830249s ago: executing program 5 (id=2889):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000c400)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0xc0046686, 0x0)

3.559802752s ago: executing program 5 (id=2890):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140c, 0x10, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34325852}})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401002bbd7000000000000800010000000000080003"], 0x20}}, 0x0)

3.470166916s ago: executing program 5 (id=2891):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b2000093"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0xd1c})
syz_usb_connect$cdc_ncm(0x5, 0x84, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0xd, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c590c35092"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x87, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@country_functional={0xc, 0x24, 0x7, 0x5, 0x101, [0xff6b, 0x200, 0x8]}, @call_mgmt={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xfd, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x23, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd2, 0x0, 0x81}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x8, 0x5, 0x40, 0xa}, 0x12c, &(0x7f0000000300)={0x5, 0xf, 0x12c, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x0, 0xf07, 0x5, [0xcf, 0xc0, 0x3ff0, 0x30]}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x10000, 0xff00, 0x589, [0xf0, 0x3f30, 0xc00f, 0x3f00, 0x30, 0xc00f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x81, 0xc, 0x7}, @generic={0xda, 0x10, 0xa, "6460293a21709d903b4f2f30f18171ace2c359e6a22cb93f7faf26ba85d5861e2c1ad73fd8ff2427b967444cbf1430e495edc4dac4944efe8b56ec4fd5a7ad82bc2051013b3b020242d37ac352f8036d150c50dc7c79088d976ac24496c0a9ad577b439dc19316f6e48a089a95d78a1942c3991796e67360d8cac45004cdb75696d38883eba3db78ae123bdf6594974eea9d01892fa047848bf1701957442beba82a7381733cfafcccc3985181e9cba0ca4d56bd0e7d6bbe47e77651e97c89437db0855f1671365145c14fc7503b4b3acb62cdc51861e1"}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x408}}]})

2.336750734s ago: executing program 1 (id=2892):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9741, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x2040)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988ca", 0xe}], 0x1)

1.939562762s ago: executing program 7 (id=2893):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401002bbd7000000000000800010000000000080003"], 0x20}}, 0x0) (fail_nth: 5)

1.458210663s ago: executing program 7 (id=2894):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0xca55, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)

1.441262188s ago: executing program 7 (id=2895):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x290e4, 0x0)

1.355083333s ago: executing program 2 (id=2896):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)}], 0x1}}], 0x1, 0x24048084)

1.267858983s ago: executing program 7 (id=2897):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xbd7e3000)
futex(0x0, 0x100, 0x2, &(0x7f00000017c0), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)

1.212669074s ago: executing program 2 (id=2898):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000c400)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0xc0046686, 0x0)

1.171890072s ago: executing program 7 (id=2899):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.031676286s ago: executing program 2 (id=2900):
r0 = socket$inet(0x2, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
shutdown(r0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

538.196858ms ago: executing program 5 (id=2901):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000200)="66b98400004066b80400000066ba000000000f3066b9670b000066b80500000066ba000000000f3066b8791a00000f23d00f21f866351000000f0f23f80fe4eac1550a440f01c266b8020000000f23d00f21f86635000000080f23f82e660f5e2e0a0067660f38034d970f2064", 0x6d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

428.414236ms ago: executing program 5 (id=2902):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x0, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x8e, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})

277.646502ms ago: executing program 5 (id=2903):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0x10])
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x9, 0x34])

19.602559ms ago: executing program 2 (id=2904):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x0)

0s ago: executing program 2 (id=2905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x431, 0x70bd2b, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

kernel console output (not intermixed with test programs):

975] gspca_stk1135: serial bus timeout: status=0x00
[  547.576815][ T6975] gspca_stk1135: Sensor read failed
[  547.582186][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  547.588555][ T6975] gspca_stk1135: Sensor read failed
[  547.594132][ T6975] gspca_stk1135: Detected sensor type unknown (0x0)
[  547.600779][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  547.607309][ T6975] gspca_stk1135: Sensor read failed
[  547.612746][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  547.619119][ T6975] gspca_stk1135: Sensor read failed
[  547.624999][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  547.631361][ T6975] gspca_stk1135: Sensor write failed
[  547.636837][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  547.644759][ T6975] gspca_stk1135: Sensor write failed
[  547.650190][ T6975] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  547.673809][ T6975] usb 6-1: USB disconnect, device number 29
[  547.682940][T13224] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  547.691922][   T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  547.832131][   T10] usb 2-1: device descriptor read/64, error -71
[  547.996107][T13567] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  548.074423][   T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  548.106927][T13571] QAT: Invalid ioctl -1071581943
[  548.211937][   T10] usb 2-1: device descriptor read/64, error -71
[  548.302708][T13224] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  548.322259][   T10] usb usb2-port1: attempt power cycle
[  548.451910][T13224] usb 8-1: Using ep0 maxpacket: 32
[  548.461225][T13224] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  548.479888][T13224] usb 8-1: config 0 has no interface number 0
[  548.488047][T13224] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  548.509453][T13224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.517829][T13224] usb 8-1: Product: syz
[  548.523068][T13224] usb 8-1: Manufacturer: syz
[  548.527900][T13224] usb 8-1: SerialNumber: syz
[  548.535438][T13224] usb 8-1: config 0 descriptor??
[  548.544515][T13224] smsc95xx v2.0.0
[  548.671982][   T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  548.702231][ T5904] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  548.712763][   T10] usb 2-1: device descriptor read/8, error -71
[  548.945751][T13224] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  548.959273][   T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  548.966987][T13224] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  548.992656][   T10] usb 2-1: device descriptor read/8, error -71
[  549.103584][   T10] usb usb2-port1: unable to enumerate USB device
[  549.217380][T13582] /dev/rnullb0: Can't open blockdev
[  549.531945][ T5890] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  549.682051][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  549.691632][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.702986][ T5890] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  549.712307][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.725619][ T5890] usb 6-1: config 0 descriptor??
[  549.906798][   T10] usb 3-1: USB disconnect, device number 38
[  549.917193][   T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  549.971603][T13586] FAULT_INJECTION: forcing a failure.
[  549.971603][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.992431][T13586] CPU: 1 UID: 0 PID: 13586 Comm: syz.2.2601 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  549.992478][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  549.992491][T13586] Call Trace:
[  549.992499][T13586]  <TASK>
[  549.992508][T13586]  dump_stack_lvl+0x189/0x250
[  549.992536][T13586]  ? __pfx____ratelimit+0x10/0x10
[  549.992559][T13586]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.992581][T13586]  ? __pfx__printk+0x10/0x10
[  549.992616][T13586]  should_fail_ex+0x414/0x560
[  549.992651][T13586]  _copy_to_user+0x31/0xb0
[  549.992674][T13586]  simple_read_from_buffer+0xe1/0x170
[  549.992703][T13586]  proc_fail_nth_read+0x1df/0x250
[  549.992733][T13586]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  549.992762][T13586]  ? rw_verify_area+0x258/0x650
[  549.992782][T13586]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  549.992810][T13586]  vfs_read+0x1fd/0x980
[  549.992836][T13586]  ? __pfx___mutex_lock+0x10/0x10
[  549.992859][T13586]  ? __pfx_vfs_read+0x10/0x10
[  549.992882][T13586]  ? __fget_files+0x2a/0x420
[  549.992911][T13586]  ? __fget_files+0x3a0/0x420
[  549.992934][T13586]  ? __fget_files+0x2a/0x420
[  549.992966][T13586]  ksys_read+0x145/0x250
[  549.992990][T13586]  ? __pfx_ksys_read+0x10/0x10
[  549.993017][T13586]  ? do_syscall_64+0xbe/0x3b0
[  549.993043][T13586]  do_syscall_64+0xfa/0x3b0
[  549.993060][T13586]  ? lockdep_hardirqs_on+0x9c/0x150
[  549.993076][T13586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.993091][T13586]  ? clear_bhb_loop+0x60/0xb0
[  549.993113][T13586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.993132][T13586] RIP: 0033:0x7f457dd8d33c
[  549.993150][T13586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  549.993169][T13586] RSP: 002b:00007f457ebce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  549.993190][T13586] RAX: ffffffffffffffda RBX: 00007f457dfb5fa0 RCX: 00007f457dd8d33c
[  549.993206][T13586] RDX: 000000000000000f RSI: 00007f457ebce0a0 RDI: 0000000000000004
[  549.993220][T13586] RBP: 00007f457ebce090 R08: 0000000000000000 R09: 0000000000000000
[  549.993233][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.993245][T13586] R13: 0000000000000000 R14: 00007f457dfb5fa0 R15: 00007fffcbc10e78
[  549.993276][T13586]  </TASK>
[  550.001145][T13224] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  550.157521][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.160496][T13224] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  550.179143][    C1] vkms_vblank_simulate: vblank timer overrun
[  550.193464][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.271509][    C1] vkms_vblank_simulate: vblank timer overrun
[  550.277410][T13224] usb 8-1: USB disconnect, device number 44
[  550.298511][T13590] fuse: Bad value for 'fd'
[  550.577836][T13599] FAULT_INJECTION: forcing a failure.
[  550.577836][T13599] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  550.591216][T13599] CPU: 1 UID: 0 PID: 13599 Comm: syz.1.2606 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  550.591242][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  550.591257][T13599] Call Trace:
[  550.591266][T13599]  <TASK>
[  550.591275][T13599]  dump_stack_lvl+0x189/0x250
[  550.591308][T13599]  ? __pfx____ratelimit+0x10/0x10
[  550.591329][T13599]  ? __pfx_dump_stack_lvl+0x10/0x10
[  550.591350][T13599]  ? __pfx__printk+0x10/0x10
[  550.591371][T13599]  ? fs_reclaim_acquire+0x7d/0x100
[  550.591401][T13599]  should_fail_ex+0x414/0x560
[  550.591436][T13599]  prepare_alloc_pages+0x213/0x610
[  550.591466][T13599]  __alloc_frozen_pages_noprof+0x123/0x370
[  550.591501][T13599]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  550.591523][T13599]  ? put_dec_trunc8+0x5a/0x340
[  550.591553][T13599]  ? __asan_memset+0x22/0x50
[  550.591586][T13599]  ? policy_nodemask+0x27c/0x720
[  550.591610][T13599]  alloc_pages_mpol+0x232/0x4a0
[  550.591634][T13599]  alloc_pages_noprof+0xa9/0x190
[  550.591649][T13599]  __pud_alloc+0x3a/0x260
[  550.591662][T13599]  __handle_mm_fault+0x33a0/0x5440
[  550.591684][T13599]  ? mt_find+0x15c/0x5f0
[  550.591697][T13599]  ? __pfx___handle_mm_fault+0x10/0x10
[  550.591722][T13599]  ? find_vma+0xe7/0x160
[  550.591730][T13599]  ? __pfx_find_vma+0x10/0x10
[  550.591742][T13599]  handle_mm_fault+0x40a/0x8e0
[  550.591763][T13599]  do_user_addr_fault+0x764/0x1390
[  550.591791][T13599]  exc_page_fault+0x76/0xf0
[  550.591813][T13599]  asm_exc_page_fault+0x26/0x30
[  550.591830][T13599] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  550.591856][T13599] Code: ff 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  550.591873][T13599] RSP: 0018:ffffc9000b89fb88 EFLAGS: 00050202
[  550.591889][T13599] RAX: ffffffff84cd7801 RBX: 0000000000000044 RCX: 0000000000000044
[  550.591903][T13599] RDX: 0000000000000000 RSI: ffff88806ac1e000 RDI: 0000200000000000
[  550.591915][T13599] RBP: ffffc9000b89fd30 R08: ffff88806ac1e043 R09: 1ffff1100d583c08
[  550.591930][T13599] R10: dffffc0000000000 R11: ffffed100d583c09 R12: 0000200000000044
[  550.591943][T13599] R13: 00007ffffffff000 R14: ffff88806ac1e000 R15: 0000200000000000
[  550.591966][T13599]  ? _copy_to_user+0x41/0xb0
[  550.591987][T13599]  _copy_to_user+0x8a/0xb0
[  550.591998][T13599]  syslog_print_all+0x237/0x3e0
[  550.592013][T13599]  ? __pfx_syslog_print_all+0x10/0x10
[  550.592032][T13599]  ? bpf_lsm_capable+0x9/0x20
[  550.592043][T13599]  ? security_capable+0x7e/0x2e0
[  550.592059][T13599]  do_syslog+0x375/0x760
[  550.592071][T13599]  ? __pfx_do_syslog+0x10/0x10
[  550.592081][T13599]  ? __fget_files+0x3a0/0x420
[  550.592098][T13599]  ? fput+0xa0/0xd0
[  550.592113][T13599]  ? ksys_write+0x22a/0x250
[  550.592125][T13599]  ? __pfx_ksys_write+0x10/0x10
[  550.592140][T13599]  __x64_sys_syslog+0x7c/0x90
[  550.592151][T13599]  do_syscall_64+0xfa/0x3b0
[  550.592163][T13599]  ? lockdep_hardirqs_on+0x9c/0x150
[  550.592173][T13599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.592184][T13599]  ? clear_bhb_loop+0x60/0xb0
[  550.592197][T13599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.592207][T13599] RIP: 0033:0x7f746178e929
[  550.592217][T13599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  550.592226][T13599] RSP: 002b:00007f74626b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  550.592236][T13599] RAX: ffffffffffffffda RBX: 00007f74619b5fa0 RCX: 00007f746178e929
[  550.592244][T13599] RDX: 00000000000000b8 RSI: 0000200000000000 RDI: 0000000000000004
[  550.592250][T13599] RBP: 00007f74626b9090 R08: 0000000000000000 R09: 0000000000000000
[  550.592257][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.592263][T13599] R13: 0000000000000001 R14: 00007f74619b5fa0 R15: 00007ffd5c35d7a8
[  550.592279][T13599]  </TASK>
[  550.969737][    C1] vkms_vblank_simulate: vblank timer overrun
[  551.078890][T13602] overlayfs: failed to get inode (-116)
[  551.090772][T13602] overlayfs: failed to get inode (-116)
[  551.106733][ T5890] usbhid 6-1:0.0: can't add hid device: -71
[  551.113484][ T5890] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  551.125390][ T5890] usb 6-1: USB disconnect, device number 30
[  551.134157][ T1642] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  551.218563][T13607] netlink: 'syz.7.2610': attribute type 83 has an invalid length.
[  551.293904][ T1642] usb 3-1: Using ep0 maxpacket: 32
[  551.295758][T13611] fuse: Bad value for 'fd'
[  551.303006][ T1642] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  551.315394][ T1642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.323597][ T1642] usb 3-1: Product: syz
[  551.328689][ T1642] usb 3-1: Manufacturer: syz
[  551.333333][ T1642] usb 3-1: SerialNumber: syz
[  551.341372][ T1642] usb 3-1: config 0 descriptor??
[  551.350235][ T1642] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  551.385070][T13613] /dev/rnullb0: Can't open blockdev
[  551.409684][T13615] syzkaller1: entered promiscuous mode
[  551.418811][T13615] syzkaller1: entered allmulticast mode
[  551.626970][T13622] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  551.796346][T13629] overlay: Unknown parameter 'subj_user'
[  551.852124][   T48] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  551.942707][ T5890] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  551.997732][T13637] fuse: Bad value for 'fd'
[  552.031932][   T48] usb 8-1: Using ep0 maxpacket: 8
[  552.049282][   T48] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  552.058624][   T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.075866][   T48] usb 8-1: Product: syz
[  552.080182][   T48] usb 8-1: Manufacturer: syz
[  552.091658][   T48] usb 8-1: SerialNumber: syz
[  552.100018][   T48] usb 8-1: config 0 descriptor??
[  552.106000][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  552.125146][ T5890] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  552.138068][ T5890] usb 2-1: config 0 has no interface number 0
[  552.151050][ T5890] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  552.164007][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.175541][ T5890] usb 2-1: Product: syz
[  552.179791][ T5890] usb 2-1: Manufacturer: syz
[  552.187545][ T5890] usb 2-1: SerialNumber: syz
[  552.222796][ T5890] usb 2-1: config 0 descriptor??
[  552.240993][ T5890] smsc95xx v2.0.0
[  552.318708][   T48] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  552.631686][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  552.633757][   T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  552.643861][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  552.804752][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  552.817061][   T10] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  552.826514][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.837544][   T10] usb 6-1: config 0 descriptor??
[  552.843526][T13643] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  553.261967][   T10] hid_parser_main: 2 callbacks suppressed
[  553.261989][   T10] belkin 0003:050D:3201.0025: unknown main item tag 0x0
[  553.282116][   T10] belkin 0003:050D:3201.0025: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.5-1/input0
[  553.468612][   T10] usb 6-1: USB disconnect, device number 31
[  553.688386][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  553.699610][ T5890] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  553.712596][ T5890] usb 2-1: USB disconnect, device number 36
[  554.305654][T13655] syzkaller1: entered promiscuous mode
[  554.305679][T13655] syzkaller1: entered allmulticast mode
[  554.354992][   T48] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  554.367969][   T48] usb 8-1: USB disconnect, device number 45
[  554.481087][T13660] FAULT_INJECTION: forcing a failure.
[  554.481087][T13660] name failslab, interval 1, probability 0, space 0, times 0
[  554.493920][T13660] CPU: 0 UID: 0 PID: 13660 Comm: syz.1.2633 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  554.493948][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  554.493961][T13660] Call Trace:
[  554.493972][T13660]  <TASK>
[  554.493981][T13660]  dump_stack_lvl+0x189/0x250
[  554.494008][T13660]  ? __pfx____ratelimit+0x10/0x10
[  554.494023][T13660]  ? __pfx_dump_stack_lvl+0x10/0x10
[  554.494035][T13660]  ? __pfx__printk+0x10/0x10
[  554.494050][T13660]  ? __pfx___might_resched+0x10/0x10
[  554.494060][T13660]  ? fs_reclaim_acquire+0x7d/0x100
[  554.494080][T13660]  should_fail_ex+0x414/0x560
[  554.494115][T13660]  should_failslab+0xa8/0x100
[  554.494138][T13660]  __kmalloc_noprof+0xcb/0x4f0
[  554.494156][T13660]  ? kfree+0x4d/0x440
[  554.494176][T13660]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  554.494196][T13660]  tomoyo_realpath_from_path+0xe3/0x5d0
[  554.494212][T13660]  ? tomoyo_domain+0xd9/0x130
[  554.494229][T13660]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  554.494248][T13660]  tomoyo_path_number_perm+0x1e8/0x5a0
[  554.494271][T13660]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  554.494310][T13660]  ? __lock_acquire+0xab9/0xd20
[  554.494341][T13660]  ? __fget_files+0x2a/0x420
[  554.494356][T13660]  ? __fget_files+0x2a/0x420
[  554.494368][T13660]  ? __fget_files+0x3a0/0x420
[  554.494381][T13660]  ? __fget_files+0x2a/0x420
[  554.494409][T13660]  security_file_ioctl+0xcb/0x2d0
[  554.494442][T13660]  __se_sys_ioctl+0x47/0x170
[  554.494473][T13660]  do_syscall_64+0xfa/0x3b0
[  554.494485][T13660]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.494496][T13660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.494507][T13660]  ? clear_bhb_loop+0x60/0xb0
[  554.494523][T13660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.494539][T13660] RIP: 0033:0x7f746178e929
[  554.494556][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  554.494574][T13660] RSP: 002b:00007f74626b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  554.494597][T13660] RAX: ffffffffffffffda RBX: 00007f74619b5fa0 RCX: 00007f746178e929
[  554.494613][T13660] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000003
[  554.494624][T13660] RBP: 00007f74626b9090 R08: 0000000000000000 R09: 0000000000000000
[  554.494631][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.494637][T13660] R13: 0000000000000000 R14: 00007f74619b5fa0 R15: 00007ffd5c35d7a8
[  554.494653][T13660]  </TASK>
[  554.494673][T13660] ERROR: Out of memory at tomoyo_realpath_from_path.
[  554.591136][ T1642] gspca_stk1135: reg_w 0x353 err -71
[  554.694278][    C1] vkms_vblank_simulate: vblank timer overrun
[  554.766071][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766088][ T1642] gspca_stk1135: Sensor write failed
[  554.766114][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766126][ T1642] gspca_stk1135: Sensor write failed
[  554.766153][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766164][ T1642] gspca_stk1135: Sensor read failed
[  554.766191][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766202][ T1642] gspca_stk1135: Sensor read failed
[  554.766211][ T1642] gspca_stk1135: Detected sensor type unknown (0x0)
[  554.766244][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766255][ T1642] gspca_stk1135: Sensor read failed
[  554.766281][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766291][ T1642] gspca_stk1135: Sensor read failed
[  554.766318][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766329][ T1642] gspca_stk1135: Sensor write failed
[  554.766356][ T1642] gspca_stk1135: serial bus timeout: status=0x00
[  554.766368][ T1642] gspca_stk1135: Sensor write failed
[  554.766439][ T1642] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  554.770416][ T1642] usb 3-1: USB disconnect, device number 39
[  555.128398][T13671] FAULT_INJECTION: forcing a failure.
[  555.128398][T13671] name failslab, interval 1, probability 0, space 0, times 0
[  555.141278][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.7.2638 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  555.141306][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  555.141319][T13671] Call Trace:
[  555.141326][T13671]  <TASK>
[  555.141335][T13671]  dump_stack_lvl+0x189/0x250
[  555.141361][T13671]  ? __pfx____ratelimit+0x10/0x10
[  555.141383][T13671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  555.141403][T13671]  ? __pfx__printk+0x10/0x10
[  555.141428][T13671]  ? __pfx___might_resched+0x10/0x10
[  555.141450][T13671]  should_fail_ex+0x414/0x560
[  555.141480][T13671]  should_failslab+0xa8/0x100
[  555.141519][T13671]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  555.141538][T13671]  ? __alloc_skb+0x112/0x2d0
[  555.141565][T13671]  __alloc_skb+0x112/0x2d0
[  555.141593][T13671]  netlink_sendmsg+0x5c6/0xb30
[  555.141625][T13671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  555.141657][T13671]  ? aa_sock_msg_perm+0xf1/0x1d0
[  555.141682][T13671]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  555.141707][T13671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  555.141730][T13671]  __sock_sendmsg+0x219/0x270
[  555.141754][T13671]  ____sys_sendmsg+0x505/0x830
[  555.141789][T13671]  ? __pfx_____sys_sendmsg+0x10/0x10
[  555.141821][T13671]  ? import_iovec+0x74/0xa0
[  555.141841][T13671]  ___sys_sendmsg+0x21f/0x2a0
[  555.141870][T13671]  ? __pfx____sys_sendmsg+0x10/0x10
[  555.141928][T13671]  ? __fget_files+0x2a/0x420
[  555.141952][T13671]  ? __fget_files+0x3a0/0x420
[  555.141984][T13671]  __x64_sys_sendmsg+0x19b/0x260
[  555.142013][T13671]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  555.142048][T13671]  ? __pfx_ksys_write+0x10/0x10
[  555.142068][T13671]  ? rcu_is_watching+0x15/0xb0
[  555.142093][T13671]  ? do_syscall_64+0xbe/0x3b0
[  555.142120][T13671]  do_syscall_64+0xfa/0x3b0
[  555.142141][T13671]  ? lockdep_hardirqs_on+0x9c/0x150
[  555.142162][T13671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.142181][T13671]  ? clear_bhb_loop+0x60/0xb0
[  555.142206][T13671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.142226][T13671] RIP: 0033:0x7fc5a2d8e929
[  555.142244][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  555.142261][T13671] RSP: 002b:00007fc5a3b5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  555.142283][T13671] RAX: ffffffffffffffda RBX: 00007fc5a2fb5fa0 RCX: 00007fc5a2d8e929
[  555.142299][T13671] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  555.142312][T13671] RBP: 00007fc5a3b5d090 R08: 0000000000000000 R09: 0000000000000000
[  555.142325][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.142337][T13671] R13: 0000000000000000 R14: 00007fc5a2fb5fa0 R15: 00007ffc5e586418
[  555.142368][T13671]  </TASK>
[  555.408102][    C1] vkms_vblank_simulate: vblank timer overrun
[  555.632830][T13686] syzkaller0: entered promiscuous mode
[  555.638332][T13686] syzkaller0: entered allmulticast mode
[  555.682016][ T1642] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  555.743654][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  555.832451][ T1642] usb 6-1: Using ep0 maxpacket: 32
[  555.840494][ T1642] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  555.848763][ T1642] usb 6-1: config 0 has no interface number 0
[  555.857130][ T1642] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  555.867521][ T1642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.878736][ T1642] usb 6-1: Product: syz
[  555.884034][ T1642] usb 6-1: Manufacturer: syz
[  555.894977][ T1642] usb 6-1: SerialNumber: syz
[  555.909419][ T1642] usb 6-1: config 0 descriptor??
[  555.917887][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.921182][ T1642] smsc95xx v2.0.0
[  555.943927][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.963979][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  555.977524][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  555.987261][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.025426][   T10] usb 2-1: config 0 descriptor??
[  556.332064][ T1642] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  556.343003][ T1642] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  556.481528][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  556.489608][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  556.507600][   T10] usb 2-1: USB disconnect, device number 37
[  557.408617][ T1642] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  557.427499][ T1642] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  557.440748][ T1642] usb 6-1: USB disconnect, device number 32
[  557.845502][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2643'.
[  557.872715][T13699] syzkaller1: entered promiscuous mode
[  557.878364][T13699] syzkaller1: entered allmulticast mode
[  558.008931][T13706] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  558.016594][T13706] /dev/rnullb0: Can't open blockdev
[  558.422073][   T10] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  558.460762][T13726] /dev/rnullb0: Can't open blockdev
[  558.540474][T13730] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  558.560751][T13724] syzkaller0: entered promiscuous mode
[  558.567974][T13724] syzkaller0: entered allmulticast mode
[  558.585835][   T10] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  558.613035][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  558.619708][   T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  558.651026][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.674703][   T10] usb 6-1: config 0 descriptor??
[  558.681120][T13715] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  558.847509][ T1642] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  558.892496][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2659'.
[  559.007193][ T1642] usb 2-1: Using ep0 maxpacket: 32
[  559.023704][ T1642] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  559.032300][ T1642] usb 2-1: config 0 has no interface number 0
[  559.041166][ T1642] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  559.050451][ T1642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.058694][ T1642] usb 2-1: Product: syz
[  559.063910][ T1642] usb 2-1: Manufacturer: syz
[  559.068525][ T1642] usb 2-1: SerialNumber: syz
[  559.076099][ T1642] usb 2-1: config 0 descriptor??
[  559.095024][ T1642] smsc95xx v2.0.0
[  559.197299][   T10] lenovo 0003:17EF:60B5.0026: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.5-1/input0
[  559.459723][ T5843] Bluetooth: hci1: unexpected event for opcode 0x1003
[  559.507724][ T1642] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  559.522922][ T1642] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  559.993885][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  560.574111][ T1642] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  560.587020][ T1642] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  560.614348][ T1642] usb 2-1: USB disconnect, device number 38
[  561.240345][T13756] binder_alloc: 13755: pid 13755 spamming oneway? 1 buffers allocated for a total size of 4096
[  561.441953][ T1642] usb 6-1: USB disconnect, device number 33
[  561.660894][T13766] syzkaller0: entered promiscuous mode
[  561.688808][T13766] syzkaller0: entered allmulticast mode
[  561.849107][T13778] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  562.152536][T13224] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  562.316456][T13224] usb 2-1: Using ep0 maxpacket: 32
[  562.335769][T13224] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  562.343985][T13224] usb 2-1: config 0 has no interface number 0
[  562.354535][T13224] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  562.366995][T13224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.375357][T13224] usb 2-1: Product: syz
[  562.379554][T13224] usb 2-1: Manufacturer: syz
[  562.384793][T13224] usb 2-1: SerialNumber: syz
[  562.402519][T13224] usb 2-1: config 0 descriptor??
[  562.410480][T13224] smsc95xx v2.0.0
[  562.823441][T13224] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  562.834601][T13224] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  563.029723][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.036439][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.506372][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  563.526569][ T5843] Bluetooth: hci1: Injecting HCI hardware error event
[  563.534579][ T5843] Bluetooth: hci1: hardware error 0x00
[  563.884147][T13224] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  563.905656][T13224] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  563.927366][T13224] usb 2-1: USB disconnect, device number 39
[  563.938846][T13789] syzkaller0: entered promiscuous mode
[  563.952620][T13789] syzkaller0: entered allmulticast mode
[  564.054610][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  564.197725][T13797] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  564.207384][    T9] usb 3-1: Using ep0 maxpacket: 32
[  564.212949][T13797] /dev/rnullb0: Can't open blockdev
[  564.226862][    T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  564.246915][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.262247][    T9] usb 3-1: Product: syz
[  564.272162][    T9] usb 3-1: Manufacturer: syz
[  564.276818][    T9] usb 3-1: SerialNumber: syz
[  564.285549][    T9] usb 3-1: config 0 descriptor??
[  564.315236][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  564.352794][T13799] FAULT_INJECTION: forcing a failure.
[  564.352794][T13799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  564.366307][T13799] CPU: 0 UID: 0 PID: 13799 Comm: syz.5.2681 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  564.366334][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  564.366345][T13799] Call Trace:
[  564.366354][T13799]  <TASK>
[  564.366362][T13799]  dump_stack_lvl+0x189/0x250
[  564.366389][T13799]  ? __pfx____ratelimit+0x10/0x10
[  564.366412][T13799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.366431][T13799]  ? __pfx__printk+0x10/0x10
[  564.366450][T13799]  ? __might_fault+0xb0/0x130
[  564.366477][T13799]  should_fail_ex+0x414/0x560
[  564.366509][T13799]  _copy_from_user+0x2d/0xb0
[  564.366528][T13799]  proc_setintf+0x8f/0x300
[  564.366555][T13799]  ? __pfx_proc_setintf+0x10/0x10
[  564.366589][T13799]  usbdev_ioctl+0x9ab/0x20c0
[  564.366621][T13799]  ? __pfx_usbdev_ioctl+0x10/0x10
[  564.366642][T13799]  ? __fget_files+0x2a/0x420
[  564.366665][T13799]  ? __fget_files+0x3a0/0x420
[  564.366688][T13799]  ? __fget_files+0x2a/0x420
[  564.366715][T13799]  ? bpf_lsm_file_ioctl+0x9/0x20
[  564.366744][T13799]  ? __pfx_usbdev_ioctl+0x10/0x10
[  564.366767][T13799]  __se_sys_ioctl+0xfc/0x170
[  564.366789][T13799]  do_syscall_64+0xfa/0x3b0
[  564.366810][T13799]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.366831][T13799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.366850][T13799]  ? clear_bhb_loop+0x60/0xb0
[  564.366875][T13799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.366894][T13799] RIP: 0033:0x7f3531d8e929
[  564.366913][T13799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.366931][T13799] RSP: 002b:00007f352fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  564.366954][T13799] RAX: ffffffffffffffda RBX: 00007f3531fb5fa0 RCX: 00007f3531d8e929
[  564.366968][T13799] RDX: 0000200000000100 RSI: 0000000080085504 RDI: 0000000000000003
[  564.366981][T13799] RBP: 00007f352fbf6090 R08: 0000000000000000 R09: 0000000000000000
[  564.366993][T13799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.367004][T13799] R13: 0000000000000000 R14: 00007f3531fb5fa0 R15: 00007ffc5b7ec608
[  564.367031][T13799]  </TASK>
[  564.581286][    C0] vkms_vblank_simulate: vblank timer overrun
[  564.870160][T13810] FAULT_INJECTION: forcing a failure.
[  564.870160][T13810] name failslab, interval 1, probability 0, space 0, times 0
[  564.887850][T13807] usb usb1: usbfs: process 13807 (syz.5.2683) did not claim interface 0 before use
[  564.906389][T13810] CPU: 1 UID: 0 PID: 13810 Comm: syz.1.2686 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  564.906419][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  564.906432][T13810] Call Trace:
[  564.906440][T13810]  <TASK>
[  564.906449][T13810]  dump_stack_lvl+0x189/0x250
[  564.906476][T13810]  ? __pfx____ratelimit+0x10/0x10
[  564.906498][T13810]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.906520][T13810]  ? __pfx__printk+0x10/0x10
[  564.906547][T13810]  ? __pfx___might_resched+0x10/0x10
[  564.906571][T13810]  should_fail_ex+0x414/0x560
[  564.906606][T13810]  should_failslab+0xa8/0x100
[  564.906629][T13810]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  564.906649][T13810]  ? __alloc_skb+0x112/0x2d0
[  564.906678][T13810]  __alloc_skb+0x112/0x2d0
[  564.906705][T13810]  netlink_sendmsg+0x5c6/0xb30
[  564.906738][T13810]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.906764][T13810]  ? aa_sock_msg_perm+0xf1/0x1d0
[  564.906789][T13810]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  564.906815][T13810]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.906839][T13810]  __sock_sendmsg+0x219/0x270
[  564.906863][T13810]  ____sys_sendmsg+0x505/0x830
[  564.906895][T13810]  ? __pfx_____sys_sendmsg+0x10/0x10
[  564.906930][T13810]  ? import_iovec+0x74/0xa0
[  564.906952][T13810]  ___sys_sendmsg+0x21f/0x2a0
[  564.906990][T13810]  ? __pfx____sys_sendmsg+0x10/0x10
[  564.907052][T13810]  ? __fget_files+0x2a/0x420
[  564.907075][T13810]  ? __fget_files+0x3a0/0x420
[  564.907109][T13810]  __x64_sys_sendmsg+0x19b/0x260
[  564.907138][T13810]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  564.907174][T13810]  ? __pfx_ksys_write+0x10/0x10
[  564.907193][T13810]  ? rcu_is_watching+0x15/0xb0
[  564.907218][T13810]  ? do_syscall_64+0xbe/0x3b0
[  564.907244][T13810]  do_syscall_64+0xfa/0x3b0
[  564.907265][T13810]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.907285][T13810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.907305][T13810]  ? clear_bhb_loop+0x60/0xb0
[  564.907330][T13810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.907349][T13810] RIP: 0033:0x7f746178e929
[  564.907366][T13810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.907384][T13810] RSP: 002b:00007f74626b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  564.907405][T13810] RAX: ffffffffffffffda RBX: 00007f74619b5fa0 RCX: 00007f746178e929
[  564.907420][T13810] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  564.907432][T13810] RBP: 00007f74626b9090 R08: 0000000000000000 R09: 0000000000000000
[  564.907445][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.907457][T13810] R13: 0000000000000000 R14: 00007f74619b5fa0 R15: 00007ffd5c35d7a8
[  564.907487][T13810]  </TASK>
[  565.466682][   T48] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  565.586902][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  565.624600][   T48] usb 2-1: Using ep0 maxpacket: 32
[  565.631610][   T48] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  565.640635][   T48] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  565.667937][   T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  565.679556][   T48] usb 2-1: config 1 has no interface number 0
[  565.696762][   T48] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  565.729187][   T48] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  565.749646][   T48] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  565.773816][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.799053][   T48] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  566.129235][   T48] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  567.187595][ T5890] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  567.618255][ T5904] usb 2-1: USB disconnect, device number 40
[  567.634268][ T5904] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  567.656090][T13826] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  567.951967][   T10] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  567.991975][T13224] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  568.075432][    T9] gspca_stk1135: reg_w 0x353 err -71
[  568.081959][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.089697][    T9] gspca_stk1135: Sensor write failed
[  568.095189][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.101559][    T9] gspca_stk1135: Sensor write failed
[  568.107021][   T10] usb 8-1: Using ep0 maxpacket: 32
[  568.112353][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.118710][    T9] gspca_stk1135: Sensor read failed
[  568.126096][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.133339][    T9] gspca_stk1135: Sensor read failed
[  568.139074][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  568.151676][   T10] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  568.161114][   T10] usb 8-1: config 0 has no interface number 0
[  568.167609][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.176710][    T9] gspca_stk1135: Sensor read failed
[  568.184931][   T10] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  568.194154][T13224] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  568.205625][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.213736][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.220079][    T9] gspca_stk1135: Sensor read failed
[  568.226896][T13224] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  568.236948][   T10] usb 8-1: Product: syz
[  568.241133][   T10] usb 8-1: Manufacturer: syz
[  568.245875][T13224] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  568.255023][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.261359][    T9] gspca_stk1135: Sensor write failed
[  568.266796][   T10] usb 8-1: SerialNumber: syz
[  568.271579][T13224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.281401][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  568.288847][   T10] usb 8-1: config 0 descriptor??
[  568.294193][    T9] gspca_stk1135: Sensor write failed
[  568.309837][   T10] smsc95xx v2.0.0
[  568.316117][T13833] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  568.332129][    T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  568.354123][T13224] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  568.363621][    T9] usb 3-1: USB disconnect, device number 40
[  568.547663][ T5890] usb 6-1: USB disconnect, device number 34
[  568.670279][T13844] syzkaller0: entered promiscuous mode
[  568.676147][T13844] syzkaller0: entered allmulticast mode
[  568.710801][   T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  568.725675][   T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  569.787686][   T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  569.801592][   T10] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  569.823710][   T10] usb 8-1: USB disconnect, device number 46
[  571.361056][T13868] netlink: 'syz.2.2702': attribute type 10 has an invalid length.
[  571.369756][T13868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2702'.
[  571.380596][T13868] batman_adv: batadv0: Adding interface: hsr_slave_1
[  571.388044][T13872] overlayfs: missing 'workdir'
[  571.398288][T13868] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  571.458177][T13868] batman_adv: batadv0: Interface activated: hsr_slave_1
[  571.484259][T13877] /dev/rnullb0: Can't open blockdev
[  571.584237][T13882] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  571.598658][T13881] FAULT_INJECTION: forcing a failure.
[  571.598658][T13881] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  571.630881][T13881] CPU: 1 UID: 0 PID: 13881 Comm: syz.1.2707 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  571.630908][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  571.630921][T13881] Call Trace:
[  571.630928][T13881]  <TASK>
[  571.630937][T13881]  dump_stack_lvl+0x189/0x250
[  571.630963][T13881]  ? __pfx____ratelimit+0x10/0x10
[  571.630984][T13881]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.631004][T13881]  ? __pfx__printk+0x10/0x10
[  571.631026][T13881]  ? __might_fault+0xb0/0x130
[  571.631054][T13881]  should_fail_ex+0x414/0x560
[  571.631086][T13881]  _copy_from_user+0x2d/0xb0
[  571.631107][T13881]  binder_ioctl_write_read+0x124/0xa000
[  571.631140][T13881]  ? is_bpf_text_address+0x292/0x2b0
[  571.631167][T13881]  ? is_bpf_text_address+0x26/0x2b0
[  571.631199][T13881]  ? kernel_text_address+0xa5/0xe0
[  571.631226][T13881]  ? __kernel_text_address+0xd/0x40
[  571.631250][T13881]  ? unwind_get_return_address+0x4d/0x90
[  571.631270][T13881]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  571.631294][T13881]  ? arch_stack_walk+0xfc/0x150
[  571.631327][T13881]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  571.631349][T13881]  ? stack_trace_save+0x9c/0xe0
[  571.631375][T13881]  ? stack_depot_save_flags+0x40/0x900
[  571.631403][T13881]  ? kasan_save_track+0x4f/0x80
[  571.631439][T13881]  ? kasan_save_track+0x3e/0x80
[  571.631466][T13881]  ? kasan_save_free_info+0x46/0x50
[  571.631489][T13881]  ? __kasan_slab_free+0x62/0x70
[  571.631505][T13881]  ? kfree+0x18e/0x440
[  571.631532][T13881]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  571.631550][T13881]  ? security_file_ioctl+0xcb/0x2d0
[  571.631578][T13881]  ? __se_sys_ioctl+0x47/0x170
[  571.631594][T13881]  ? do_syscall_64+0xfa/0x3b0
[  571.631614][T13881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.631643][T13881]  ? __lock_acquire+0xab9/0xd20
[  571.631670][T13881]  ? binder_debug+0x13f/0x1b0
[  571.631697][T13881]  ? __pfx_binder_debug+0x10/0x10
[  571.631717][T13881]  ? do_raw_spin_lock+0x121/0x290
[  571.631758][T13881]  ? _raw_spin_unlock+0x28/0x50
[  571.631775][T13881]  ? binder_get_thread+0x178/0x6d0
[  571.631802][T13881]  binder_ioctl+0x3e0/0x19c0
[  571.631822][T13881]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  571.631840][T13881]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  571.631859][T13881]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[  571.631875][T13881]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  571.631896][T13881]  ? __pfx_binder_ioctl+0x10/0x10
[  571.631933][T13881]  ? __lock_acquire+0xab9/0xd20
[  571.631981][T13881]  ? __fget_files+0x2a/0x420
[  571.632008][T13881]  ? __fget_files+0x2a/0x420
[  571.632030][T13881]  ? __fget_files+0x3a0/0x420
[  571.632053][T13881]  ? __fget_files+0x2a/0x420
[  571.632080][T13881]  ? bpf_lsm_file_ioctl+0x9/0x20
[  571.632108][T13881]  ? __pfx_binder_ioctl+0x10/0x10
[  571.632131][T13881]  __se_sys_ioctl+0xfc/0x170
[  571.632152][T13881]  do_syscall_64+0xfa/0x3b0
[  571.632173][T13881]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.632194][T13881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.632213][T13881]  ? clear_bhb_loop+0x60/0xb0
[  571.632237][T13881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.632256][T13881] RIP: 0033:0x7f746178e929
[  571.632274][T13881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.632292][T13881] RSP: 002b:00007f74626b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  571.632314][T13881] RAX: ffffffffffffffda RBX: 00007f74619b5fa0 RCX: 00007f746178e929
[  571.632330][T13881] RDX: 0000200000001040 RSI: 00000000c0306201 RDI: 0000000000000003
[  571.632343][T13881] RBP: 00007f74626b9090 R08: 0000000000000000 R09: 0000000000000000
[  571.632356][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.632368][T13881] R13: 0000000000000000 R14: 00007f74619b5fa0 R15: 00007ffd5c35d7a8
[  571.632398][T13881]  </TASK>
[  572.021746][T13891] No control pipe specified
[  572.042036][T13881] binder: 13880:13881 ioctl c0306201 200000001040 returned -14
[  572.162398][T13224] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[  572.219821][T13893] syzkaller0: entered promiscuous mode
[  572.238468][T13893] syzkaller0: entered allmulticast mode
[  572.331058][T13224] usb 8-1: Using ep0 maxpacket: 32
[  572.339813][T13902] overlayfs: missing 'lowerdir'
[  572.347090][T13224] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  572.355323][T13224] usb 8-1: config 0 has no interface number 0
[  572.372790][T13224] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  572.392549][T13224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.400680][T13224] usb 8-1: Product: syz
[  572.416930][T13224] usb 8-1: Manufacturer: syz
[  572.427376][T13224] usb 8-1: SerialNumber: syz
[  572.435243][T13224] usb 8-1: config 0 descriptor??
[  572.457063][T13224] smsc95xx v2.0.0
[  572.513017][ T5890] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  572.692132][ T5890] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  572.701229][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.709842][ T5890] usb 3-1: Product: syz
[  572.714736][ T5890] usb 3-1: Manufacturer: syz
[  572.719436][ T5890] usb 3-1: SerialNumber: syz
[  572.721970][   T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  572.729451][ T5890] usb 3-1: config 0 descriptor??
[  572.855815][T13224] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  572.866932][T13224] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  572.893915][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.906174][   T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  572.915473][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.934516][   T10] usb 6-1: config 0 descriptor??
[  572.952874][ T5890] usb 3-1: f81604_read: reg: 105 failed: -EPROTO
[  572.963457][ T5890] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  572.971162][ T5890] f81604 3-1:0.0: probe with driver f81604 failed with error -71
[  572.985616][ T5890] usb 3-1: USB disconnect, device number 41
[  573.150293][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  573.167546][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  573.189265][   T10] usb 6-1: USB disconnect, device number 35
[  573.595759][T13906] binder: BINDER_SET_CONTEXT_MGR already set
[  573.605239][T13906] binder: 13905:13906 ioctl 4018620d 200000000040 returned -16
[  573.652040][   T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  573.832042][   T10] usb 6-1: Using ep0 maxpacket: 32
[  573.845767][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.872162][   T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  573.897469][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.921708][   T10] usb 6-1: config 0 descriptor??
[  573.942861][T13224] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  573.963552][   T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  573.976645][T13224] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  573.997686][   T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  574.020335][T13224] usb 8-1: USB disconnect, device number 47
[  574.199525][   T48] usb 6-1: USB disconnect, device number 36
[  574.217495][   T48] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  574.251966][ T6975] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  574.412107][ T6975] usb 3-1: Using ep0 maxpacket: 32
[  574.424604][ T6975] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  574.437442][ T6975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.446523][ T6975] usb 3-1: Product: syz
[  574.450909][ T6975] usb 3-1: Manufacturer: syz
[  574.456839][ T6975] usb 3-1: SerialNumber: syz
[  574.475758][ T6975] usb 3-1: config 0 descriptor??
[  574.496383][ T6975] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  574.929610][T13925] overlayfs: missing 'lowerdir'
[  575.045954][T13927] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  575.046684][T13928] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  575.059510][T13927] /dev/rnullb0: Can't open blockdev
[  575.071689][T13928] /dev/rnullb0: Can't open blockdev
[  575.122992][T13930] /dev/rnullb0: Can't open blockdev
[  575.297251][T13940] syzkaller1: entered promiscuous mode
[  575.303181][T13940] syzkaller1: entered allmulticast mode
[  575.391963][ T1642] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  575.498820][T13946] overlayfs: missing 'lowerdir'
[  575.556528][ T1642] usb 2-1: Using ep0 maxpacket: 32
[  575.567533][ T1642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.584656][ T1642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  575.597662][ T1642] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  575.610922][ T1642] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  575.620338][ T1642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.635098][ T1642] usb 2-1: config 0 descriptor??
[  575.658709][T13948] syzkaller0: entered promiscuous mode
[  575.666830][T13948] syzkaller0: entered allmulticast mode
[  576.231906][ T5890] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  576.397622][ T5890] usb 6-1: config 0 has no interfaces?
[  576.408281][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  576.422583][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  576.431619][ T5890] usb 6-1: Product: syz
[  576.451926][ T5890] usb 6-1: Manufacturer: syz
[  576.479060][ T5890] usb 6-1: config 0 descriptor??
[  577.163541][T13224] usb 6-1: USB disconnect, device number 37
[  577.516422][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2737'.
[  577.786603][ T6975] gspca_stk1135: reg_w 0x353 err -71
[  577.794225][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.800710][ T6975] gspca_stk1135: Sensor write failed
[  577.806795][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.817923][ T6975] gspca_stk1135: Sensor write failed
[  577.827098][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.834260][ T6975] gspca_stk1135: Sensor read failed
[  577.839776][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.853606][ T6975] gspca_stk1135: Sensor read failed
[  577.861089][ T6975] gspca_stk1135: Detected sensor type unknown (0x0)
[  577.874522][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.887654][ T6975] gspca_stk1135: Sensor read failed
[  577.901608][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.909718][ T6975] gspca_stk1135: Sensor read failed
[  577.918748][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.928862][ T6975] gspca_stk1135: Sensor write failed
[  577.938269][ T6975] gspca_stk1135: serial bus timeout: status=0x00
[  577.945035][ T6975] gspca_stk1135: Sensor write failed
[  577.957175][ T6975] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  577.970391][ T6975] usb 3-1: USB disconnect, device number 42
[  578.479602][ T1642] usbhid 2-1:0.0: can't add hid device: -71
[  578.500597][ T1642] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  578.508756][T13968] netlink: 'syz.7.2740': attribute type 10 has an invalid length.
[  578.532145][T13968] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2740'.
[  578.536813][ T1642] usb 2-1: USB disconnect, device number 41
[  578.615421][T13971] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  578.649890][T13971] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  578.761579][T13978] binder: 13977:13978 ioctl c0306201 200000000080 returned -14
[  578.954821][ T6975] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  578.970313][T13989] /dev/rnullb0: Can't open blockdev
[  579.000226][T13987] syzkaller0: entered promiscuous mode
[  579.009490][T13987] syzkaller0: entered allmulticast mode
[  579.028118][T13992] FAULT_INJECTION: forcing a failure.
[  579.028118][T13992] name failslab, interval 1, probability 0, space 0, times 0
[  579.041133][T13992] CPU: 1 UID: 0 PID: 13992 Comm: syz.2.2751 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  579.041161][T13992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  579.041173][T13992] Call Trace:
[  579.041181][T13992]  <TASK>
[  579.041189][T13992]  dump_stack_lvl+0x189/0x250
[  579.041217][T13992]  ? __pfx____ratelimit+0x10/0x10
[  579.041239][T13992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  579.041261][T13992]  ? __pfx__printk+0x10/0x10
[  579.041288][T13992]  ? __pfx___might_resched+0x10/0x10
[  579.041312][T13992]  should_fail_ex+0x414/0x560
[  579.041347][T13992]  should_failslab+0xa8/0x100
[  579.041370][T13992]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  579.041391][T13992]  ? __alloc_skb+0x112/0x2d0
[  579.041419][T13992]  __alloc_skb+0x112/0x2d0
[  579.041447][T13992]  netlink_sendmsg+0x5c6/0xb30
[  579.041480][T13992]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.041507][T13992]  ? aa_sock_msg_perm+0xf1/0x1d0
[  579.041533][T13992]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  579.041558][T13992]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.041582][T13992]  __sock_sendmsg+0x219/0x270
[  579.041606][T13992]  ____sys_sendmsg+0x505/0x830
[  579.041639][T13992]  ? __pfx_____sys_sendmsg+0x10/0x10
[  579.041675][T13992]  ? import_iovec+0x74/0xa0
[  579.041697][T13992]  ___sys_sendmsg+0x21f/0x2a0
[  579.041726][T13992]  ? __pfx____sys_sendmsg+0x10/0x10
[  579.041794][T13992]  ? __fget_files+0x2a/0x420
[  579.041817][T13992]  ? __fget_files+0x3a0/0x420
[  579.041845][T13992]  __x64_sys_sendmsg+0x19b/0x260
[  579.041871][T13992]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  579.041904][T13992]  ? __pfx_ksys_write+0x10/0x10
[  579.041928][T13992]  ? rcu_is_watching+0x15/0xb0
[  579.041953][T13992]  ? do_syscall_64+0xbe/0x3b0
[  579.041978][T13992]  do_syscall_64+0xfa/0x3b0
[  579.041999][T13992]  ? lockdep_hardirqs_on+0x9c/0x150
[  579.042018][T13992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.042036][T13992]  ? clear_bhb_loop+0x60/0xb0
[  579.042060][T13992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.042077][T13992] RIP: 0033:0x7f457dd8e929
[  579.042093][T13992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.042112][T13992] RSP: 002b:00007f457ebce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.042133][T13992] RAX: ffffffffffffffda RBX: 00007f457dfb5fa0 RCX: 00007f457dd8e929
[  579.042149][T13992] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  579.042163][T13992] RBP: 00007f457ebce090 R08: 0000000000000000 R09: 0000000000000000
[  579.042175][T13992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.042188][T13992] R13: 0000000000000000 R14: 00007f457dfb5fa0 R15: 00007fffcbc10e78
[  579.042219][T13992]  </TASK>
[  579.335476][ T6975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.359821][ T6975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.379352][ T6975] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  579.382034][ T5890] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  579.424295][ T6975] usb 8-1: New USB device found, idVendor=047f, idProduct=feff, bcdDevice=ff.ff
[  579.433925][ T6975] usb 8-1: New USB device strings: Mfr=247, Product=0, SerialNumber=0
[  579.442602][ T6975] usb 8-1: Manufacturer: syz
[  579.450486][ T6975] usb 8-1: config 0 descriptor??
[  579.572147][ T5890] usb 6-1: Using ep0 maxpacket: 32
[  579.579541][ T5890] usb 6-1: config 1 has an invalid interface number: 233 but max is 0
[  579.587870][ T5890] usb 6-1: config 1 has no interface number 0
[  579.596410][ T5890] usb 6-1: config 1 interface 233 has no altsetting 0
[  579.605895][ T5890] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac
[  579.615112][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.623195][ T5890] usb 6-1: Product: syz
[  579.627474][ T5890] usb 6-1: Manufacturer: syz
[  579.632181][ T5890] usb 6-1: SerialNumber: syz
[  579.651941][ T1642] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  579.812710][ T1642] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  579.830382][ T1642] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  579.841381][ T1642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  579.860356][ T1642] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  579.873475][ T5890] imon_raw 6-1:1.233: IR endpoint missing
[  579.886376][ T5890] usb 6-1: USB disconnect, device number 38
[  579.889620][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  579.892926][ T1642] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  579.911101][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  579.919409][ T1642] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  579.932107][ T1642] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  579.934588][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  579.940314][ T1642] usb 3-1: Product: syz
[  579.952579][ T1642] usb 3-1: Manufacturer: syz
[  579.969481][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  579.978716][ T1642] cdc_wdm 3-1:1.0: skipping garbage
[  579.987014][ T1642] cdc_wdm 3-1:1.0: skipping garbage
[  579.989027][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  580.001669][ T1642] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  580.008351][ T1642] cdc_wdm 3-1:1.0: Unknown control protocol
[  580.015170][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  580.035250][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  580.052905][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  580.060352][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  580.080414][ T6975] plantronics 0003:047F:FEFF.0027: unknown main item tag 0x0
[  580.113888][ T6975] plantronics 0003:047F:FEFF.0027: hiddev1,hidraw0: USB HID v0.40 Device [syz] on usb-dummy_hcd.7-1/input0
[  580.136619][ T6975] usb 8-1: USB disconnect, device number 48
[  580.262599][T13996] fido_id[13996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  580.435977][T13998] netlink: 'syz.5.2753': attribute type 10 has an invalid length.
[  580.445503][    C1] cdc_wdm 3-1:1.0: Unexpected error -71
[  580.446784][T13224] usb 3-1: USB disconnect, device number 43
[  580.451145][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  580.463590][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  580.469662][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  580.719353][T14002] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2754'.
[  580.855521][T14004] __vm_enough_memory: pid: 14004, comm: syz.7.2754, bytes: 21199613517824 not enough memory for the allocation
[  581.757124][T13998] team0: Port device team_slave_0 removed
[  581.966080][T14021] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  581.975065][T14021] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  582.364452][ T1642] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[  582.391961][ T5890] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  582.402879][ T5839] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  582.452037][ T6975] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[  582.534611][ T1642] usb 3-1: config 0 has an invalid interface number: 144 but max is 0
[  582.544095][ T1642] usb 3-1: config 0 has no interface number 0
[  582.562157][ T5839] usb 6-1: Using ep0 maxpacket: 32
[  582.569061][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  582.577582][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.589083][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.599154][ T5839] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  582.608506][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.613789][ T6975] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  582.619548][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.636125][ T6975] usb 8-1: config 0 interface 0 has no altsetting 0
[  582.637692][ T5890] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00
[  582.655416][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.665571][ T5839] usb 6-1: config 0 descriptor??
[  582.668036][ T6975] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  582.684948][ T6975] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  582.697622][ T6975] usb 8-1: Product: syz
[  582.703112][ T5890] usb 2-1: config 0 descriptor??
[  582.705777][ T6975] usb 8-1: Manufacturer: syz
[  582.714291][ T6975] usb 8-1: SerialNumber: syz
[  582.728680][ T6975] usb 8-1: config 0 descriptor??
[  582.738960][ T6975] usb 8-1: selecting invalid altsetting 0
[  582.940145][ T6975] usb 8-1: USB disconnect, device number 49
[  583.280194][ T5839] ft260 0003:0403:6030.0028: chip code: 6424 8183
[  583.329453][ T5890] usbhid 2-1:0.0: can't add hid device: -71
[  583.336258][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  583.349760][ T5890] usb 2-1: USB disconnect, device number 42
[  583.487197][ T5839] ft260 0003:0403:6030.0028: failed to retrieve system status
[  583.500340][ T5839] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -71
[  583.516032][ T5839] usb 6-1: USB disconnect, device number 39
[  583.732718][T14035] syzkaller0: entered promiscuous mode
[  583.738228][T14035] syzkaller0: entered allmulticast mode
[  583.896746][T14037] fuse: Unknown parameter 'grou00000000000000000000'
[  584.292030][ T6975] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  584.432102][ T6975] usb 2-1: device descriptor read/64, error -71
[  584.502006][T13224] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  584.662016][T13224] usb 6-1: Using ep0 maxpacket: 16
[  584.677691][T13224] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  584.687031][ T6975] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  584.701169][T13224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.710939][T13224] usb 6-1: Product: syz
[  584.715475][T13224] usb 6-1: Manufacturer: syz
[  584.720130][T13224] usb 6-1: SerialNumber: syz
[  584.832070][ T6975] usb 2-1: device descriptor read/64, error -71
[  584.940429][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.952625][ T6975] usb usb2-port1: attempt power cycle
[  584.969090][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.997910][T13224] usb 6-1: USB disconnect, device number 40
[  585.149381][ T1642] usb 3-1: New USB device found, idVendor=2357, idProduct=010b, bcdDevice=17.23
[  585.169143][ T1642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.198007][ T1642] usb 3-1: config 0 descriptor??
[  585.205196][ T1642] usb 3-1: can't set config #0, error -71
[  585.223621][ T1642] usb 3-1: USB disconnect, device number 44
[  585.312033][ T6975] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  585.353008][ T6975] usb 2-1: device descriptor read/8, error -71
[  585.615102][ T6975] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  585.645426][ T6975] usb 2-1: device descriptor read/8, error -71
[  585.691622][T14056] syz.5.2776: attempt to access beyond end of device
[  585.691622][T14056] loop5: rw=0, sector=2, nr_sectors = 1 limit=0
[  585.775504][ T6975] usb usb2-port1: unable to enumerate USB device
[  585.797965][T14058] fuse: Unknown parameter 'grou00000000000000000000'
[  585.989424][T14063] FAULT_INJECTION: forcing a failure.
[  585.989424][T14063] name failslab, interval 1, probability 0, space 0, times 0
[  586.002592][T14063] CPU: 1 UID: 0 PID: 14063 Comm: syz.5.2779 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  586.002618][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  586.002630][T14063] Call Trace:
[  586.002639][T14063]  <TASK>
[  586.002648][T14063]  dump_stack_lvl+0x189/0x250
[  586.002675][T14063]  ? __pfx____ratelimit+0x10/0x10
[  586.002698][T14063]  ? __pfx_dump_stack_lvl+0x10/0x10
[  586.002719][T14063]  ? __pfx__printk+0x10/0x10
[  586.002756][T14063]  should_fail_ex+0x414/0x560
[  586.002792][T14063]  should_failslab+0xa8/0x100
[  586.002816][T14063]  __kmalloc_cache_noprof+0x70/0x3d0
[  586.002836][T14063]  ? sctp_add_bind_addr+0x8c/0x370
[  586.002861][T14063]  sctp_add_bind_addr+0x8c/0x370
[  586.002886][T14063]  sctp_copy_local_addr_list+0x30b/0x4e0
[  586.002910][T14063]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  586.002932][T14063]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  586.002958][T14063]  ? sctp_v4_is_any+0x35/0x60
[  586.002979][T14063]  ? sctp_copy_one_addr+0x93/0x360
[  586.003004][T14063]  sctp_bind_addr_copy+0xb3/0x3c0
[  586.003027][T14063]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  586.003061][T14063]  sctp_connect_new_asoc+0x2e0/0x690
[  586.003091][T14063]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  586.003118][T14063]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  586.003144][T14063]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  586.003167][T14063]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  586.003191][T14063]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  586.003217][T14063]  ? security_sctp_bind_connect+0x7e/0x2e0
[  586.003251][T14063]  sctp_sendmsg+0x155c/0x2810
[  586.003290][T14063]  ? __pfx_sctp_sendmsg+0x10/0x10
[  586.003318][T14063]  ? aa_sk_perm+0x81e/0x950
[  586.003346][T14063]  ? __pfx_aa_sk_perm+0x10/0x10
[  586.003371][T14063]  ? sock_rps_record_flow+0x19/0x410
[  586.003399][T14063]  ? inet_sendmsg+0x2f4/0x370
[  586.003416][T14063]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.003442][T14063]  __sock_sendmsg+0x19c/0x270
[  586.003466][T14063]  __sys_sendto+0x3bd/0x520
[  586.003493][T14063]  ? __pfx___sys_sendto+0x10/0x10
[  586.003515][T14063]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  586.003552][T14063]  ? __fget_files+0x3a0/0x420
[  586.003588][T14063]  ? ksys_write+0x22a/0x250
[  586.003612][T14063]  ? __pfx_ksys_write+0x10/0x10
[  586.003639][T14063]  __x64_sys_sendto+0xde/0x100
[  586.003667][T14063]  do_syscall_64+0xfa/0x3b0
[  586.003688][T14063]  ? lockdep_hardirqs_on+0x9c/0x150
[  586.003709][T14063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.003729][T14063]  ? clear_bhb_loop+0x60/0xb0
[  586.003753][T14063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.003773][T14063] RIP: 0033:0x7f3531d8e929
[  586.003791][T14063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.003809][T14063] RSP: 002b:00007f352fbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  586.003829][T14063] RAX: ffffffffffffffda RBX: 00007f3531fb6080 RCX: 00007f3531d8e929
[  586.003845][T14063] RDX: 0000000000000006 RSI: 0000200000000580 RDI: 0000000000000003
[  586.003858][T14063] RBP: 00007f352fbd5090 R08: 0000200000000680 R09: 0000000000000010
[  586.003872][T14063] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  586.003885][T14063] R13: 0000000000000001 R14: 00007f3531fb6080 R15: 00007ffc5b7ec608
[  586.003914][T14063]  </TASK>
[  586.335212][    C1] vkms_vblank_simulate: vblank timer overrun
[  586.616534][T14071] FAULT_INJECTION: forcing a failure.
[  586.616534][T14071] name failslab, interval 1, probability 0, space 0, times 0
[  586.630167][T14071] CPU: 1 UID: 0 PID: 14071 Comm: syz.2.2783 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  586.630194][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  586.630207][T14071] Call Trace:
[  586.630214][T14071]  <TASK>
[  586.630223][T14071]  dump_stack_lvl+0x189/0x250
[  586.630249][T14071]  ? __pfx____ratelimit+0x10/0x10
[  586.630271][T14071]  ? __pfx_dump_stack_lvl+0x10/0x10
[  586.630286][T14071]  ? __pfx__printk+0x10/0x10
[  586.630301][T14071]  ? ref_tracker_alloc+0x318/0x460
[  586.630315][T14071]  should_fail_ex+0x414/0x560
[  586.630334][T14071]  should_failslab+0xa8/0x100
[  586.630347][T14071]  kmem_cache_alloc_noprof+0x73/0x3c0
[  586.630363][T14071]  ? skb_clone+0x212/0x3a0
[  586.630381][T14071]  skb_clone+0x212/0x3a0
[  586.630398][T14071]  __netlink_deliver_tap+0x404/0x850
[  586.630425][T14071]  ? netlink_deliver_tap+0x2e/0x1b0
[  586.630438][T14071]  netlink_deliver_tap+0x19c/0x1b0
[  586.630450][T14071]  netlink_unicast+0x72f/0x8d0
[  586.630467][T14071]  netlink_sendmsg+0x805/0xb30
[  586.630484][T14071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.630498][T14071]  ? aa_sock_msg_perm+0xf1/0x1d0
[  586.630512][T14071]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.630526][T14071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.630539][T14071]  __sock_sendmsg+0x219/0x270
[  586.630551][T14071]  ____sys_sendmsg+0x505/0x830
[  586.630569][T14071]  ? __pfx_____sys_sendmsg+0x10/0x10
[  586.630588][T14071]  ? import_iovec+0x74/0xa0
[  586.630601][T14071]  ___sys_sendmsg+0x21f/0x2a0
[  586.630616][T14071]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.630650][T14071]  ? __fget_files+0x2a/0x420
[  586.630665][T14071]  ? __fget_files+0x3a0/0x420
[  586.630683][T14071]  __x64_sys_sendmsg+0x19b/0x260
[  586.630699][T14071]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  586.630718][T14071]  ? __pfx_ksys_write+0x10/0x10
[  586.630728][T14071]  ? rcu_is_watching+0x15/0xb0
[  586.630741][T14071]  ? do_syscall_64+0xbe/0x3b0
[  586.630755][T14071]  do_syscall_64+0xfa/0x3b0
[  586.630766][T14071]  ? lockdep_hardirqs_on+0x9c/0x150
[  586.630777][T14071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.630788][T14071]  ? clear_bhb_loop+0x60/0xb0
[  586.630800][T14071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.630810][T14071] RIP: 0033:0x7f457dd8e929
[  586.630821][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.630831][T14071] RSP: 002b:00007f457ebce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.630844][T14071] RAX: ffffffffffffffda RBX: 00007f457dfb5fa0 RCX: 00007f457dd8e929
[  586.630852][T14071] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003
[  586.630859][T14071] RBP: 00007f457ebce090 R08: 0000000000000000 R09: 0000000000000000
[  586.630865][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.630872][T14071] R13: 0000000000000000 R14: 00007f457dfb5fa0 R15: 00007fffcbc10e78
[  586.630888][T14071]  </TASK>
[  587.068840][ T6975] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  587.128425][T14082] fuse: Unknown parameter 'grou00000000000000000000'
[  587.233514][ T6975] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  587.264972][ T6975] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  587.292379][ T6975] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  587.312890][ T6975] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  587.322204][ T6975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.383921][ T6975] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  587.507205][ T8042] udevd[8042]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  587.544492][ T6975] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12
[  587.574706][T14091] syzkaller0: entered promiscuous mode
[  587.611980][T14091] syzkaller0: entered allmulticast mode
[  587.652660][T14097] FAULT_INJECTION: forcing a failure.
[  587.652660][T14097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.691649][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0403
[  587.701974][T14097] CPU: 0 UID: 0 PID: 14097 Comm: syz.1.2791 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  587.702005][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  587.702018][T14097] Call Trace:
[  587.702026][T14097]  <TASK>
[  587.702035][T14097]  dump_stack_lvl+0x189/0x250
[  587.702063][T14097]  ? __pfx____ratelimit+0x10/0x10
[  587.702083][T14097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  587.702103][T14097]  ? __pfx__printk+0x10/0x10
[  587.702126][T14097]  ? __might_fault+0xb0/0x130
[  587.702156][T14097]  should_fail_ex+0x414/0x560
[  587.702196][T14097]  _copy_from_user+0x2d/0xb0
[  587.702217][T14097]  input_event_from_user+0xb2/0x280
[  587.702244][T14097]  ? __pfx_input_event_from_user+0x10/0x10
[  587.702274][T14097]  ? input_inject_event+0xbc/0x320
[  587.702306][T14097]  evdev_write+0x2a6/0x480
[  587.702336][T14097]  ? __pfx_evdev_write+0x10/0x10
[  587.702360][T14097]  ? bpf_lsm_file_permission+0x9/0x20
[  587.702387][T14097]  ? security_file_permission+0x75/0x290
[  587.702419][T14097]  ? rw_verify_area+0x258/0x650
[  587.702439][T14097]  ? __pfx_evdev_write+0x10/0x10
[  587.702463][T14097]  vfs_write+0x27b/0xa90
[  587.702494][T14097]  ? __pfx_vfs_write+0x10/0x10
[  587.702517][T14097]  ? __fget_files+0x2a/0x420
[  587.702545][T14097]  ? __fget_files+0x2a/0x420
[  587.702575][T14097]  ? __fget_files+0x3a0/0x420
[  587.702598][T14097]  ? __fget_files+0x2a/0x420
[  587.702631][T14097]  ksys_write+0x145/0x250
[  587.702655][T14097]  ? __pfx_ksys_write+0x10/0x10
[  587.702674][T14097]  ? rcu_is_watching+0x15/0xb0
[  587.702699][T14097]  ? do_syscall_64+0xbe/0x3b0
[  587.702725][T14097]  do_syscall_64+0xfa/0x3b0
[  587.702745][T14097]  ? lockdep_hardirqs_on+0x9c/0x150
[  587.702766][T14097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.702786][T14097]  ? clear_bhb_loop+0x60/0xb0
[  587.702810][T14097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.702829][T14097] RIP: 0033:0x7f746178e929
[  587.702847][T14097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  587.702865][T14097] RSP: 002b:00007f74626b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  587.702887][T14097] RAX: ffffffffffffffda RBX: 00007f74619b5fa0 RCX: 00007f746178e929
[  587.702903][T14097] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008
[  587.702917][T14097] RBP: 00007f74626b9090 R08: 0000000000000000 R09: 0000000000000000
[  587.702930][T14097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.702943][T14097] R13: 0000000000000000 R14: 00007f74619b5fa0 R15: 00007ffd5c35d7a8
[  587.702975][T14097]  </TASK>
[  587.929227][T14102] mmap: syz.7.2781 (14102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  587.992735][T14101] /dev/rnullb0: Can't open blockdev
[  588.181995][ T1642] usb 8-1: USB disconnect, device number 50
[  588.321267][T14108] fuse: Unknown parameter 'group_i00000000000000000000'
[  588.415967][ T6975] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  588.564349][ T6975] usb 3-1: device descriptor read/64, error -71
[  588.732698][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  588.821911][ T6975] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  588.871922][ T5890] usb 2-1: device descriptor read/64, error -71
[  588.973856][ T6975] usb 3-1: device descriptor read/64, error -71
[  589.119109][ T6975] usb usb3-port1: attempt power cycle
[  589.121980][ T5890] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  589.154575][T14118] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  589.164564][T14118] /dev/rnullb0: Can't open blockdev
[  589.271930][ T5890] usb 2-1: device descriptor read/64, error -71
[  589.392311][ T5890] usb usb2-port1: attempt power cycle
[  589.485980][ T6975] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  589.512741][ T6975] usb 3-1: device descriptor read/8, error -71
[  589.724265][T14125] /dev/rnullb0: Can't open blockdev
[  589.757979][ T6975] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  589.761892][ T5890] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  589.787016][ T6975] usb 3-1: device descriptor read/8, error -71
[  589.823204][ T5890] usb 2-1: device descriptor read/8, error -71
[  589.903867][ T6975] usb usb3-port1: unable to enumerate USB device
[  590.065930][ T5890] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  590.102404][ T5890] usb 2-1: device descriptor read/8, error -71
[  590.223799][ T5890] usb usb2-port1: unable to enumerate USB device
[  590.349756][T14127] fuse: Unknown parameter 'group_i00000000000000000000'
[  590.434883][T14131] FAULT_INJECTION: forcing a failure.
[  590.434883][T14131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.453150][T14131] CPU: 1 UID: 0 PID: 14131 Comm: syz.7.2806 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  590.453178][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  590.453189][T14131] Call Trace:
[  590.453198][T14131]  <TASK>
[  590.453206][T14131]  dump_stack_lvl+0x189/0x250
[  590.453233][T14131]  ? __pfx____ratelimit+0x10/0x10
[  590.453254][T14131]  ? __pfx_dump_stack_lvl+0x10/0x10
[  590.453275][T14131]  ? __pfx__printk+0x10/0x10
[  590.453309][T14131]  should_fail_ex+0x414/0x560
[  590.453350][T14131]  _copy_to_user+0x31/0xb0
[  590.453369][T14131]  simple_read_from_buffer+0xe1/0x170
[  590.453395][T14131]  proc_fail_nth_read+0x1df/0x250
[  590.453422][T14131]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  590.453450][T14131]  ? rw_verify_area+0x258/0x650
[  590.453471][T14131]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  590.453497][T14131]  vfs_read+0x1fd/0x980
[  590.453521][T14131]  ? __pfx___mutex_lock+0x10/0x10
[  590.453543][T14131]  ? __pfx_vfs_read+0x10/0x10
[  590.453562][T14131]  ? __fget_files+0x2a/0x420
[  590.453588][T14131]  ? __fget_files+0x3a0/0x420
[  590.453611][T14131]  ? __fget_files+0x2a/0x420
[  590.453640][T14131]  ksys_read+0x145/0x250
[  590.453655][T14131]  ? __fget_files+0x3a0/0x420
[  590.453680][T14131]  ? __pfx_ksys_read+0x10/0x10
[  590.453705][T14131]  ? do_syscall_64+0xbe/0x3b0
[  590.453732][T14131]  do_syscall_64+0xfa/0x3b0
[  590.453752][T14131]  ? lockdep_hardirqs_on+0x9c/0x150
[  590.453771][T14131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.453790][T14131]  ? clear_bhb_loop+0x60/0xb0
[  590.453813][T14131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.453831][T14131] RIP: 0033:0x7fc5a2d8d33c
[  590.453847][T14131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  590.453863][T14131] RSP: 002b:00007fc5a3b5d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  590.453881][T14131] RAX: ffffffffffffffda RBX: 00007fc5a2fb5fa0 RCX: 00007fc5a2d8d33c
[  590.453895][T14131] RDX: 000000000000000f RSI: 00007fc5a3b5d0a0 RDI: 0000000000000006
[  590.453906][T14131] RBP: 00007fc5a3b5d090 R08: 0000000000000000 R09: 0000000000000000
[  590.453918][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.453929][T14131] R13: 0000000000000000 R14: 00007fc5a2fb5fa0 R15: 00007ffc5e586418
[  590.453958][T14131]  </TASK>
[  590.724611][T14139] FAULT_INJECTION: forcing a failure.
[  590.724611][T14139] name failslab, interval 1, probability 0, space 0, times 0
[  590.739375][T14139] CPU: 0 UID: 0 PID: 14139 Comm: syz.5.2809 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  590.739404][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  590.739416][T14139] Call Trace:
[  590.739424][T14139]  <TASK>
[  590.739433][T14139]  dump_stack_lvl+0x189/0x250
[  590.739461][T14139]  ? __pfx____ratelimit+0x10/0x10
[  590.739482][T14139]  ? __pfx_dump_stack_lvl+0x10/0x10
[  590.739504][T14139]  ? __pfx__printk+0x10/0x10
[  590.739534][T14139]  ? ref_tracker_alloc+0x318/0x460
[  590.739558][T14139]  should_fail_ex+0x414/0x560
[  590.739593][T14139]  should_failslab+0xa8/0x100
[  590.739617][T14139]  kmem_cache_alloc_noprof+0x73/0x3c0
[  590.739647][T14139]  ? skb_clone+0x212/0x3a0
[  590.739679][T14139]  skb_clone+0x212/0x3a0
[  590.739710][T14139]  __netlink_deliver_tap+0x404/0x850
[  590.739747][T14139]  ? netlink_deliver_tap+0x2e/0x1b0
[  590.739771][T14139]  netlink_deliver_tap+0x19c/0x1b0
[  590.739795][T14139]  netlink_unicast+0x72f/0x8d0
[  590.739827][T14139]  netlink_sendmsg+0x805/0xb30
[  590.739861][T14139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.739888][T14139]  ? aa_sock_msg_perm+0xf1/0x1d0
[  590.739913][T14139]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  590.739939][T14139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.739964][T14139]  __sock_sendmsg+0x219/0x270
[  590.739988][T14139]  ____sys_sendmsg+0x505/0x830
[  590.740020][T14139]  ? __pfx_____sys_sendmsg+0x10/0x10
[  590.740057][T14139]  ? import_iovec+0x74/0xa0
[  590.740080][T14139]  ___sys_sendmsg+0x21f/0x2a0
[  590.740110][T14139]  ? __pfx____sys_sendmsg+0x10/0x10
[  590.740176][T14139]  ? __fget_files+0x2a/0x420
[  590.740200][T14139]  ? __fget_files+0x3a0/0x420
[  590.740235][T14139]  __x64_sys_sendmsg+0x19b/0x260
[  590.740266][T14139]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  590.740309][T14139]  ? __pfx_ksys_write+0x10/0x10
[  590.740327][T14139]  ? rcu_is_watching+0x15/0xb0
[  590.740352][T14139]  ? do_syscall_64+0xbe/0x3b0
[  590.740378][T14139]  do_syscall_64+0xfa/0x3b0
[  590.740399][T14139]  ? lockdep_hardirqs_on+0x9c/0x150
[  590.740419][T14139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.740439][T14139]  ? clear_bhb_loop+0x60/0xb0
[  590.740463][T14139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.740482][T14139] RIP: 0033:0x7f3531d8e929
[  590.740500][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.740517][T14139] RSP: 002b:00007f352fbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  590.740538][T14139] RAX: ffffffffffffffda RBX: 00007f3531fb5fa0 RCX: 00007f3531d8e929
[  590.740554][T14139] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004
[  590.740567][T14139] RBP: 00007f352fbf6090 R08: 0000000000000000 R09: 0000000000000000
[  590.740580][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.740592][T14139] R13: 0000000000000000 R14: 00007f3531fb5fa0 R15: 00007ffc5b7ec608
[  590.740619][T14139]  </TASK>
[  591.082953][T14141] FAULT_INJECTION: forcing a failure.
[  591.082953][T14141] name failslab, interval 1, probability 0, space 0, times 0
[  591.096046][T14141] CPU: 0 UID: 0 PID: 14141 Comm: syz.5.2810 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  591.096072][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  591.096083][T14141] Call Trace:
[  591.096090][T14141]  <TASK>
[  591.096098][T14141]  dump_stack_lvl+0x189/0x250
[  591.096124][T14141]  ? __pfx____ratelimit+0x10/0x10
[  591.096145][T14141]  ? __pfx_dump_stack_lvl+0x10/0x10
[  591.096165][T14141]  ? __pfx__printk+0x10/0x10
[  591.096193][T14141]  ? atomic_notifier_call_chain+0x26/0x180
[  591.096213][T14141]  ? atomic_notifier_call_chain+0x26/0x180
[  591.096235][T14141]  should_fail_ex+0x414/0x560
[  591.096277][T14141]  should_failslab+0xa8/0x100
[  591.096300][T14141]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  591.096320][T14141]  ? __alloc_skb+0x112/0x2d0
[  591.096339][T14141]  ? rht_lock+0xff/0x220
[  591.096359][T14141]  __alloc_skb+0x112/0x2d0
[  591.096386][T14141]  fdb_notify+0xa6/0x160
[  591.096415][T14141]  fdb_delete+0xec4/0x1160
[  591.096448][T14141]  ? fdb_delete+0x39a/0x1160
[  591.096480][T14141]  ? __pfx_fdb_delete+0x10/0x10
[  591.096506][T14141]  ? netlink_deliver_tap+0x19c/0x1b0
[  591.096527][T14141]  ? netlink_unicast+0x72f/0x8d0
[  591.096548][T14141]  ? br_fdb_flush+0x2fe/0x4b0
[  591.096579][T14141]  br_fdb_flush+0x334/0x4b0
[  591.096610][T14141]  ? br_fdb_flush+0x2c/0x4b0
[  591.096644][T14141]  br_fdb_delete_bulk+0x949/0xc90
[  591.096679][T14141]  ? __pfx_br_fdb_delete_bulk+0x10/0x10
[  591.096708][T14141]  ? __pfx___nla_validate_parse+0x10/0x10
[  591.096737][T14141]  ? aa_get_newest_label+0xf7/0x5d0
[  591.096760][T14141]  ? __pfx_aa_get_newest_label+0x10/0x10
[  591.096798][T14141]  ? apparmor_capable+0x137/0x1b0
[  591.096830][T14141]  ? __nla_parse+0x40/0x60
[  591.096853][T14141]  rtnl_fdb_del+0x78f/0xa90
[  591.096881][T14141]  ? __pfx_rtnl_fdb_del+0x10/0x10
[  591.096937][T14141]  ? __pfx_rtnl_fdb_del+0x10/0x10
[  591.096959][T14141]  rtnetlink_rcv_msg+0x779/0xb70
[  591.096986][T14141]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  591.097007][T14141]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  591.097027][T14141]  ? ref_tracker_free+0x63a/0x7d0
[  591.097045][T14141]  ? __copy_skb_header+0xa7/0x550
[  591.097073][T14141]  ? __pfx_ref_tracker_free+0x10/0x10
[  591.097094][T14141]  ? __skb_clone+0x63/0x7a0
[  591.097129][T14141]  netlink_rcv_skb+0x205/0x470
[  591.097152][T14141]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  591.097178][T14141]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  591.097215][T14141]  ? netlink_deliver_tap+0x2e/0x1b0
[  591.097237][T14141]  ? netlink_deliver_tap+0x2e/0x1b0
[  591.097271][T14141]  netlink_unicast+0x758/0x8d0
[  591.097303][T14141]  netlink_sendmsg+0x805/0xb30
[  591.097337][T14141]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.097363][T14141]  ? __lock_acquire+0xab9/0xd20
[  591.097390][T14141]  ? aa_sock_msg_perm+0xf1/0x1d0
[  591.097415][T14141]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  591.097440][T14141]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.097465][T14141]  __sock_sendmsg+0x219/0x270
[  591.097489][T14141]  sock_write_iter+0x258/0x330
[  591.097522][T14141]  ? __pfx_sock_write_iter+0x10/0x10
[  591.097563][T14141]  ? bpf_lsm_file_permission+0x9/0x20
[  591.097589][T14141]  ? security_file_permission+0x75/0x290
[  591.097623][T14141]  vfs_write+0x548/0xa90
[  591.097647][T14141]  ? __pfx_sock_write_iter+0x10/0x10
[  591.097677][T14141]  ? __pfx_vfs_write+0x10/0x10
[  591.097707][T14141]  ? __fget_files+0x2a/0x420
[  591.097739][T14141]  ksys_write+0x145/0x250
[  591.097761][T14141]  ? __pfx_ksys_write+0x10/0x10
[  591.097779][T14141]  ? rcu_is_watching+0x15/0xb0
[  591.097802][T14141]  ? do_syscall_64+0xbe/0x3b0
[  591.097827][T14141]  do_syscall_64+0xfa/0x3b0
[  591.097846][T14141]  ? lockdep_hardirqs_on+0x9c/0x150
[  591.097867][T14141]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.097886][T14141]  ? clear_bhb_loop+0x60/0xb0
[  591.097910][T14141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.097929][T14141] RIP: 0033:0x7f3531d8e929
[  591.097947][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.097965][T14141] RSP: 002b:00007f352fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  591.097987][T14141] RAX: ffffffffffffffda RBX: 00007f3531fb5fa0 RCX: 00007f3531d8e929
[  591.098001][T14141] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003
[  591.098015][T14141] RBP: 00007f352fbf6090 R08: 0000000000000000 R09: 0000000000000000
[  591.098028][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.098040][T14141] R13: 0000000000000000 R14: 00007f3531fb5fa0 R15: 00007ffc5b7ec608
[  591.098070][T14141]  </TASK>
[  591.721510][T14150] fuse: Unknown parameter 'group_i00000000000000000000'
[  591.738790][T14146] syzkaller0: entered promiscuous mode
[  591.744405][T14146] syzkaller0: entered allmulticast mode
[  592.046063][T14161] ieee802154 phy0 wpan0: encryption failed: -22
[  592.362131][ T5839] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  592.545274][ T5839] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  592.579092][ T5839] usb 6-1: config 6 has no interface number 0
[  592.587283][ T5839] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  592.605782][ T5839] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  592.617729][ T5839] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  592.629767][ T5839] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  592.642865][ T5839] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  592.652408][ T5839] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  592.660504][ T5839] usb 6-1: Product: syz
[  592.665398][ T5839] usb 6-1: Manufacturer: syz
[  592.670002][ T5839] usb 6-1: SerialNumber: syz
[  592.707154][ T5839] hso 6-1:6.2: Failed to find BULK IN ep
[  592.911011][T14170] bpf: Bad value for 'gid'
[  592.916801][T14164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.925892][T14164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.140420][T14175] /dev/rnullb0: Can't open blockdev
[  593.915986][ T1642] usb 6-1: USB disconnect, device number 41
[  594.069532][T14181] fuse: Unknown parameter 'group_id00000000000000000000'
[  594.285995][T14193] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  594.311901][ T5890] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  594.327789][T14193] syzkaller0: entered promiscuous mode
[  594.335462][T14193] syzkaller0: entered allmulticast mode
[  594.472166][ T1642] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  594.498132][ T5890] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  594.517621][ T5890] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  594.541847][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  594.566660][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  594.581611][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  594.605208][ T5890] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  594.633790][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  594.651104][ T5890] usb 2-1: Product: syz
[  594.655464][ T1642] usb 3-1: Using ep0 maxpacket: 8
[  594.661665][ T5890] usb 2-1: Manufacturer: syz
[  594.667970][ T1642] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  594.680846][ T1642] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  594.696361][ T5890] cdc_wdm 2-1:1.0: skipping garbage
[  594.701594][ T5890] cdc_wdm 2-1:1.0: skipping garbage
[  594.712736][ T1642] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  594.724678][ T1642] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  594.738043][ T5890] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  594.745466][ T5890] cdc_wdm 2-1:1.0: Unknown control protocol
[  594.759561][ T1642] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  594.767485][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2831'.
[  594.781898][ T1642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.034847][ T1642] usb 3-1: GET_CAPABILITIES returned 0
[  595.040396][ T1642] usbtmc 3-1:16.0: can't read capabilities
[  595.333600][ T5890] usb 3-1: USB disconnect, device number 49
[  596.163180][T14207] fuse: Unknown parameter 'group_id00000000000000000000'
[  596.323580][T14210] /dev/rnullb0: Can't open blockdev
[  596.881307][T14224] FAULT_INJECTION: forcing a failure.
[  596.881307][T14224] name failslab, interval 1, probability 0, space 0, times 0
[  596.921752][T14226] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  596.939314][T14224] CPU: 1 UID: 0 PID: 14224 Comm: syz.7.2841 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  596.939343][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  596.939356][T14224] Call Trace:
[  596.939364][T14224]  <TASK>
[  596.939373][T14224]  dump_stack_lvl+0x189/0x250
[  596.939400][T14224]  ? __pfx____ratelimit+0x10/0x10
[  596.939423][T14224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  596.939445][T14224]  ? __pfx__printk+0x10/0x10
[  596.939473][T14224]  ? ref_tracker_alloc+0x318/0x460
[  596.939498][T14224]  should_fail_ex+0x414/0x560
[  596.939531][T14224]  should_failslab+0xa8/0x100
[  596.939554][T14224]  kmem_cache_alloc_noprof+0x73/0x3c0
[  596.939591][T14224]  ? skb_clone+0x212/0x3a0
[  596.939623][T14224]  skb_clone+0x212/0x3a0
[  596.939655][T14224]  __netlink_deliver_tap+0x404/0x850
[  596.939691][T14224]  ? netlink_deliver_tap+0x2e/0x1b0
[  596.939714][T14224]  netlink_deliver_tap+0x19c/0x1b0
[  596.939735][T14224]  netlink_unicast+0x72f/0x8d0
[  596.939763][T14224]  netlink_sendmsg+0x805/0xb30
[  596.939796][T14224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.939822][T14224]  ? aa_sock_msg_perm+0xf1/0x1d0
[  596.939846][T14224]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  596.939872][T14224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.939895][T14224]  __sock_sendmsg+0x219/0x270
[  596.939919][T14224]  ____sys_sendmsg+0x505/0x830
[  596.939953][T14224]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.939989][T14224]  ? import_iovec+0x74/0xa0
[  596.940012][T14224]  ___sys_sendmsg+0x21f/0x2a0
[  596.940045][T14224]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.940107][T14224]  ? __fget_files+0x2a/0x420
[  596.940130][T14224]  ? __fget_files+0x3a0/0x420
[  596.940164][T14224]  __x64_sys_sendmsg+0x19b/0x260
[  596.940192][T14224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  596.940227][T14224]  ? __pfx_ksys_write+0x10/0x10
[  596.940245][T14224]  ? rcu_is_watching+0x15/0xb0
[  596.940270][T14224]  ? do_syscall_64+0xbe/0x3b0
[  596.940297][T14224]  do_syscall_64+0xfa/0x3b0
[  596.940318][T14224]  ? lockdep_hardirqs_on+0x9c/0x150
[  596.940339][T14224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.940358][T14224]  ? clear_bhb_loop+0x60/0xb0
[  596.940383][T14224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.940402][T14224] RIP: 0033:0x7fc5a2d8e929
[  596.940420][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.940438][T14224] RSP: 002b:00007fc5a3b5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.940460][T14224] RAX: ffffffffffffffda RBX: 00007fc5a2fb5fa0 RCX: 00007fc5a2d8e929
[  596.940476][T14224] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  596.940489][T14224] RBP: 00007fc5a3b5d090 R08: 0000000000000000 R09: 0000000000000000
[  596.940502][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.940514][T14224] R13: 0000000000000000 R14: 00007fc5a2fb5fa0 R15: 00007ffc5e586418
[  596.940546][T14224]  </TASK>
[  596.952992][T14228] fuse: Unknown parameter 'group_id00000000000000000000'
[  597.100625][T14233] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  597.235257][T13224] usb 2-1: USB disconnect, device number 51
[  597.348851][T14235] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  597.429031][T14235] syzkaller0: entered promiscuous mode
[  597.450612][T14235] syzkaller0: entered allmulticast mode
[  597.467378][T14238] /dev/rnullb0: Can't open blockdev
[  597.502473][ T5890] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  597.701911][ T5890] usb 3-1: Using ep0 maxpacket: 32
[  597.709165][ T5890] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  597.722632][ T5890] usb 3-1: config 0 has no interface number 0
[  597.731545][ T5890] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  597.740926][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.754301][ T5890] usb 3-1: Product: syz
[  597.758568][ T5890] usb 3-1: Manufacturer: syz
[  597.764662][ T5890] usb 3-1: SerialNumber: syz
[  597.772643][ T5890] usb 3-1: config 0 descriptor??
[  597.780990][ T5890] smsc95xx v2.0.0
[  597.893412][ T1642] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  598.072019][ T1642] usb 2-1: Using ep0 maxpacket: 16
[  598.079243][ T1642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.098374][ T1642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  598.116811][ T1642] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  598.137204][ T1642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.151187][ T1642] usb 2-1: config 0 descriptor??
[  598.197437][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  598.223009][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  598.588650][ T1642] playstation 0003:054C:05C4.0029: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[  598.770690][ T1642] playstation 0003:054C:05C4.0029: Invalid reportID received, expected 18 got 0
[  598.782983][ T1642] playstation 0003:054C:05C4.0029: Failed to retrieve DualShock4 pairing info: -22
[  598.797895][ T1642] playstation 0003:054C:05C4.0029: Failed to get MAC address from DualShock4
[  598.809557][ T1642] playstation 0003:054C:05C4.0029: Failed to create dualshock4.
[  598.854568][ T1642] playstation 0003:054C:05C4.0029: probe with driver playstation failed with error -22
[  598.978767][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.994369][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.030932][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.051403][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.282636][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  599.306551][ T1642] usb 2-1: USB disconnect, device number 52
[  599.312914][ T5890] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  599.338801][ T5890] usb 3-1: USB disconnect, device number 50
[  599.470655][T14261] fuse: Bad value for 'user_id'
[  599.477697][T14261] fuse: Bad value for 'user_id'
[  599.596786][T14263] FAULT_INJECTION: forcing a failure.
[  599.596786][T14263] name failslab, interval 1, probability 0, space 0, times 0
[  599.611693][T14263] CPU: 1 UID: 0 PID: 14263 Comm: syz.7.2854 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  599.611720][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  599.611732][T14263] Call Trace:
[  599.611741][T14263]  <TASK>
[  599.611749][T14263]  dump_stack_lvl+0x189/0x250
[  599.611775][T14263]  ? __pfx____ratelimit+0x10/0x10
[  599.611800][T14263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  599.611819][T14263]  ? __pfx__printk+0x10/0x10
[  599.611842][T14263]  ? __pfx___might_resched+0x10/0x10
[  599.611860][T14263]  ? fs_reclaim_acquire+0x7d/0x100
[  599.611886][T14263]  should_fail_ex+0x414/0x560
[  599.611918][T14263]  should_failslab+0xa8/0x100
[  599.611939][T14263]  __kmalloc_noprof+0xcb/0x4f0
[  599.611956][T14263]  ? security_task_alloc+0x4d/0x360
[  599.611972][T14263]  ? perf_event_init_task+0x12d/0x4b0
[  599.612002][T14263]  security_task_alloc+0x4d/0x360
[  599.612023][T14263]  copy_process+0x1530/0x3c00
[  599.612058][T14263]  ? copy_process+0x97f/0x3c00
[  599.612085][T14263]  ? __pfx_copy_process+0x10/0x10
[  599.612115][T14263]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  599.612138][T14263]  vhost_task_create+0x1c4/0x290
[  599.612160][T14263]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  599.612184][T14263]  ? __pfx_vhost_task_create+0x10/0x10
[  599.612212][T14263]  ? __pfx_vhost_task_fn+0x10/0x10
[  599.612243][T14263]  ? kasan_save_track+0x4f/0x80
[  599.612267][T14263]  ? kasan_save_track+0x3e/0x80
[  599.612298][T14263]  kvm_mmu_post_init_vm+0x147/0x2b0
[  599.612326][T14263]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  599.612357][T14263]  ? __mutex_trylock_common+0x153/0x260
[  599.612381][T14263]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  599.612407][T14263]  ? rcu_is_watching+0x15/0xb0
[  599.612425][T14263]  ? look_up_lock_class+0x74/0x170
[  599.612447][T14263]  ? register_lock_class+0x51/0x320
[  599.612477][T14263]  ? __lock_acquire+0xab9/0xd20
[  599.612531][T14263]  kvm_vcpu_ioctl+0x95c/0xe90
[  599.612558][T14263]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  599.612577][T14263]  ? __lock_acquire+0xab9/0xd20
[  599.612621][T14263]  ? __fget_files+0x2a/0x420
[  599.612647][T14263]  ? __fget_files+0x2a/0x420
[  599.612675][T14263]  ? __fget_files+0x3a0/0x420
[  599.612695][T14263]  ? __fget_files+0x2a/0x420
[  599.612721][T14263]  ? bpf_lsm_file_ioctl+0x9/0x20
[  599.612747][T14263]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  599.612768][T14263]  __se_sys_ioctl+0xfc/0x170
[  599.612788][T14263]  do_syscall_64+0xfa/0x3b0
[  599.612808][T14263]  ? lockdep_hardirqs_on+0x9c/0x150
[  599.612827][T14263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.612845][T14263]  ? clear_bhb_loop+0x60/0xb0
[  599.612867][T14263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.612884][T14263] RIP: 0033:0x7fc5a2d8e929
[  599.612900][T14263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  599.612917][T14263] RSP: 002b:00007fc5a3b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  599.612937][T14263] RAX: ffffffffffffffda RBX: 00007fc5a2fb5fa0 RCX: 00007fc5a2d8e929
[  599.612951][T14263] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  599.612963][T14263] RBP: 00007fc5a3b5d090 R08: 0000000000000000 R09: 0000000000000000
[  599.612975][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.612986][T14263] R13: 0000000000000000 R14: 00007fc5a2fb5fa0 R15: 00007ffc5e586418
[  599.613015][T14263]  </TASK>
[  600.579573][T14282] fuse: Bad value for 'user_id'
[  600.597686][T14282] fuse: Bad value for 'user_id'
[  600.782175][T14289] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  600.972137][ T1642] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  601.043089][T14292] /dev/rnullb0: Can't open blockdev
[  601.132032][ T5890] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  601.163664][ T1642] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.185808][ T1642] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  601.206563][ T1642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.218130][ T1642] usb 2-1: config 0 descriptor??
[  601.231163][ T1642] pwc: Askey VC010 type 2 USB webcam detected.
[  601.322335][ T5890] usb 8-1: Using ep0 maxpacket: 32
[  601.329968][ T5890] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  601.338232][ T5890] usb 8-1: config 0 has no interface number 0
[  601.347086][ T5890] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  601.356312][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.364459][ T5890] usb 8-1: Product: syz
[  601.368715][ T5890] usb 8-1: Manufacturer: syz
[  601.373412][ T5890] usb 8-1: SerialNumber: syz
[  601.380330][ T5890] usb 8-1: config 0 descriptor??
[  601.388912][ T5890] smsc95xx v2.0.0
[  601.432151][ T6975] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  601.531963][ T5942] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  601.594556][ T6975] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  601.603522][ T6975] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  601.615181][ T6975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  601.624509][ T6975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  601.635710][ T6975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  601.648282][ T1642] pwc: recv_control_msg error -32 req 02 val 2b00
[  601.649361][ T6975] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  601.660608][ T1642] pwc: recv_control_msg error -32 req 02 val 2700
[  601.664677][ T6975] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  601.675029][ T1642] pwc: recv_control_msg error -32 req 02 val 2c00
[  601.678830][ T6975] usb 6-1: Product: syz
[  601.689162][ T6975] usb 6-1: Manufacturer: syz
[  601.698878][ T1642] pwc: recv_control_msg error -32 req 04 val 1000
[  601.703651][ T6975] cdc_wdm 6-1:1.0: skipping garbage
[  601.710493][ T1642] pwc: recv_control_msg error -32 req 04 val 1300
[  601.714218][ T6975] cdc_wdm 6-1:1.0: skipping garbage
[  601.717394][ T5942] usb 3-1: Using ep0 maxpacket: 32
[  601.729915][ T1642] pwc: recv_control_msg error -32 req 04 val 1400
[  601.731342][ T6975] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  601.737465][ T5942] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  601.747777][ T6975] cdc_wdm 6-1:1.0: Unknown control protocol
[  601.750986][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.768539][ T1642] pwc: recv_control_msg error -32 req 02 val 2000
[  601.775831][ T5942] usb 3-1: config 0 has no interface number 0
[  601.782882][ T5942] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0xC has invalid wMaxPacketSize 0
[  601.793877][ T5890] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  601.804752][ T5942] usb 3-1: config 0 interface 8 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  601.820214][ T5890] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  601.829636][ T5942] usb 3-1: config 0 interface 8 has no altsetting 0
[  601.841446][ T5942] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  601.850777][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.859130][ T5942] usb 3-1: Product: syz
[  601.863697][ T5942] usb 3-1: Manufacturer: syz
[  601.868315][ T5942] usb 3-1: SerialNumber: syz
[  601.876514][ T5942] usb 3-1: config 0 descriptor??
[  601.983658][ T1642] pwc: recv_control_msg error -71 req 04 val 1500
[  601.991571][ T1642] pwc: recv_control_msg error -71 req 02 val 2500
[  602.001491][ T1642] pwc: recv_control_msg error -71 req 02 val 2400
[  602.009707][ T1642] pwc: recv_control_msg error -71 req 02 val 2600
[  602.017961][ T1642] pwc: recv_control_msg error -71 req 02 val 2900
[  602.025030][ T1642] pwc: recv_control_msg error -71 req 02 val 2800
[  602.032290][ T1642] pwc: recv_control_msg error -71 req 04 val 1100
[  602.039161][ T1642] pwc: recv_control_msg error -71 req 04 val 1200
[  602.047831][ T1642] pwc: Registered as video103.
[  602.065275][ T1642] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52
[  602.092354][T14301] /dev/rnullb0: Can't open blockdev
[  602.104194][ T1642] usb 2-1: USB disconnect, device number 53
[  602.125115][ T5942] ath6kl: Failed to submit usb control message: -71
[  602.147095][ T5942] ath6kl: unable to send the bmi data to the device: -71
[  602.167979][ T5942] ath6kl: Unable to send get target info: -71
[  602.188018][ T5942] ath6kl: Failed to init ath6kl core: -71
[  602.211407][ T5942] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71
[  602.247280][ T5942] usb 3-1: USB disconnect, device number 51
[  602.591670][T14307] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2870'.
[  602.619953][   T10] usb 6-1: USB disconnect, device number 42
[  602.686105][T14309] fuse: Bad value for 'user_id'
[  602.691015][T14309] fuse: Bad value for 'user_id'
[  602.842509][ T6975] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  602.857654][ T5890] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  602.869023][ T5890] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  602.883730][ T5890] usb 8-1: USB disconnect, device number 51
[  602.971946][T13224] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  603.001931][ T6975] usb 2-1: Using ep0 maxpacket: 32
[  603.008870][ T6975] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  603.017384][ T6975] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  603.026826][ T6975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  603.035852][ T6975] usb 2-1: config 1 has no interface number 0
[  603.043155][ T6975] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  603.054337][ T6975] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  603.067690][ T6975] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  603.076821][ T6975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.096334][ T6975] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  603.143923][T13224] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  603.154671][T13224] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  603.168482][T13224] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  603.177628][T13224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.204709][T13224] usbtmc 3-1:16.0: bulk endpoints not found
[  603.299606][ T6975] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  603.429955][T14315] FAULT_INJECTION: forcing a failure.
[  603.429955][T14315] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  603.443462][T14315] CPU: 1 UID: 0 PID: 14315 Comm: syz.7.2874 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  603.443491][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  603.443504][T14315] Call Trace:
[  603.443513][T14315]  <TASK>
[  603.443521][T14315]  dump_stack_lvl+0x189/0x250
[  603.443548][T14315]  ? __pfx____ratelimit+0x10/0x10
[  603.443570][T14315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.443591][T14315]  ? __pfx__printk+0x10/0x10
[  603.443616][T14315]  ? fs_reclaim_acquire+0x7d/0x100
[  603.443647][T14315]  should_fail_ex+0x414/0x560
[  603.443682][T14315]  prepare_alloc_pages+0x213/0x610
[  603.443713][T14315]  __alloc_frozen_pages_noprof+0x123/0x370
[  603.443743][T14315]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  603.443778][T14315]  ? policy_nodemask+0x27c/0x720
[  603.443795][T14315]  ? do_raw_spin_lock+0x121/0x290
[  603.443824][T14315]  alloc_pages_mpol+0x232/0x4a0
[  603.443851][T14315]  alloc_pages_noprof+0xa9/0x190
[  603.443874][T14315]  __pmd_alloc+0x3a/0x3b0
[  603.443896][T14315]  __handle_mm_fault+0x9ad/0x5440
[  603.443938][T14315]  ? __pfx___handle_mm_fault+0x10/0x10
[  603.443984][T14315]  ? find_vma+0xe7/0x160
[  603.444002][T14315]  ? __pfx_find_vma+0x10/0x10
[  603.444024][T14315]  handle_mm_fault+0x40a/0x8e0
[  603.444064][T14315]  do_user_addr_fault+0x764/0x1390
[  603.444109][T14315]  exc_page_fault+0x76/0xf0
[  603.444132][T14315]  asm_exc_page_fault+0x26/0x30
[  603.444157][T14315] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  603.444186][T14315] Code: ff 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  603.444200][T14315] RSP: 0018:ffffc9000d1c7b88 EFLAGS: 00050202
[  603.444217][T14315] RAX: ffffffff84cd7801 RBX: 0000000000000044 RCX: 0000000000000044
[  603.444231][T14315] RDX: 0000000000000000 RSI: ffff888029ace000 RDI: 0000200000000000
[  603.444244][T14315] RBP: ffffc9000d1c7d30 R08: ffff888029ace043 R09: 1ffff11005359c08
[  603.444260][T14315] R10: dffffc0000000000 R11: ffffed1005359c09 R12: 0000200000000044
[  603.444275][T14315] R13: 00007ffffffff000 R14: ffff888029ace000 R15: 0000200000000000
[  603.444299][T14315]  ? _copy_to_user+0x41/0xb0
[  603.444325][T14315]  _copy_to_user+0x8a/0xb0
[  603.444346][T14315]  syslog_print_all+0x237/0x3e0
[  603.444373][T14315]  ? __pfx_syslog_print_all+0x10/0x10
[  603.444409][T14315]  ? bpf_lsm_capable+0x9/0x20
[  603.444428][T14315]  ? security_capable+0x7e/0x2e0
[  603.444457][T14315]  do_syslog+0x375/0x760
[  603.444479][T14315]  ? __pfx_do_syslog+0x10/0x10
[  603.444498][T14315]  ? __fget_files+0x3a0/0x420
[  603.444527][T14315]  ? fput+0xa0/0xd0
[  603.444552][T14315]  ? ksys_write+0x22a/0x250
[  603.444575][T14315]  ? __pfx_ksys_write+0x10/0x10
[  603.444602][T14315]  __x64_sys_syslog+0x7c/0x90
[  603.444622][T14315]  do_syscall_64+0xfa/0x3b0
[  603.444643][T14315]  ? lockdep_hardirqs_on+0x9c/0x150
[  603.444661][T14315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.444677][T14315]  ? clear_bhb_loop+0x60/0xb0
[  603.444697][T14315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.444712][T14315] RIP: 0033:0x7fc5a2d8e929
[  603.444726][T14315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  603.444740][T14315] RSP: 002b:00007fc5a3b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  603.444756][T14315] RAX: ffffffffffffffda RBX: 00007fc5a2fb5fa0 RCX: 00007fc5a2d8e929
[  603.444771][T14315] RDX: 00000000000000b8 RSI: 0000200000000000 RDI: 0000000000000004
[  603.444783][T14315] RBP: 00007fc5a3b5d090 R08: 0000000000000000 R09: 0000000000000000
[  603.444793][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.444803][T14315] R13: 0000000000000001 R14: 00007fc5a2fb5fa0 R15: 00007ffc5e586418
[  603.444829][T14315]  </TASK>
[  603.818240][T13224] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  603.884176][T14319] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  603.922691][T14319] syzkaller0: entered promiscuous mode
[  603.928191][T14319] syzkaller0: entered allmulticast mode
[  604.006091][T13224] usb 6-1: Using ep0 maxpacket: 8
[  604.030590][T13224] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  604.039854][T13224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.068305][T13224] usb 6-1: config 0 descriptor??
[  604.084349][ T5890] usb 2-1: USB disconnect, device number 54
[  604.098123][ T5890] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  604.487954][T14313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.505952][T14313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.734969][T13224] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  604.755619][T13224] asix 6-1:0.0: probe with driver asix failed with error -32
[  604.774183][T14324] /dev/rnullb0: Can't open blockdev
[  604.944218][T14328] /dev/rnullb0: Can't open blockdev
[  605.030027][T14330] fuse: Bad value for 'fd'
[  605.277252][T14335] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present
[  605.593843][ T5890] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  605.606648][T14337] /dev/rnullb0: Can't open blockdev
[  605.775551][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  605.796401][ T5942] usb 3-1: USB disconnect, device number 52
[  605.814102][ T5890] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  605.842531][ T5890] usb 2-1: config 0 has no interface number 0
[  605.876992][ T5890] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  605.892606][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.901119][ T5890] usb 2-1: Product: syz
[  605.909502][ T5890] usb 2-1: Manufacturer: syz
[  605.917143][ T5890] usb 2-1: SerialNumber: syz
[  605.941679][ T5890] usb 2-1: config 0 descriptor??
[  605.950935][ T5890] smsc95xx v2.0.0
[  606.194382][ T5942] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  606.352393][ T5942] usb 3-1: device descriptor read/64, error -71
[  606.360102][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  606.371182][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  606.427080][T14346] /dev/rnullb0: Can't open blockdev
[  606.622747][ T5942] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  606.650835][ T1642] usb 6-1: USB disconnect, device number 43
[  606.703508][T14354] fuse: Bad value for 'fd'
[  606.764488][T13224] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  606.781980][ T5942] usb 3-1: device descriptor read/64, error -71
[  606.912720][ T5942] usb usb3-port1: attempt power cycle
[  606.921921][T13224] usb 8-1: Using ep0 maxpacket: 16
[  606.931277][T13224] usb 8-1: config 0 has an invalid interface number: 214 but max is 0
[  606.939909][T13224] usb 8-1: config 0 has no interface number 0
[  606.946514][T13224] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  606.960532][T13224] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  606.969810][T13224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.978035][T13224] usb 8-1: Product: syz
[  606.982350][T13224] usb 8-1: Manufacturer: syz
[  606.986956][T13224] usb 8-1: SerialNumber: syz
[  606.994632][T13224] usb 8-1: config 0 descriptor??
[  607.162099][ T1642] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  607.272771][ T5942] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  607.312820][ T5942] usb 3-1: device descriptor read/8, error -71
[  607.333921][ T1642] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.348364][ T1642] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.358790][ T1642] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  607.372144][ T1642] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  607.381551][ T1642] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.392895][ T1642] usb 6-1: config 0 descriptor??
[  607.410822][ T5890] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  607.431389][ T5890] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  607.457062][ T5890] usb 2-1: USB disconnect, device number 55
[  607.561988][ T5942] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  607.600237][ T5942] usb 3-1: device descriptor read/8, error -71
[  607.713470][ T5942] usb usb3-port1: unable to enumerate USB device
[  607.757697][T13224] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71
[  607.780499][T13224] usb 8-1: USB disconnect, device number 52
[  607.809092][ T1642] hid_parser_main: 6 callbacks suppressed
[  607.809107][ T1642] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  607.826706][ T1642] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  607.835237][ T1642] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  607.844405][ T1642] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  607.852971][ T1642] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  607.860400][ T1642] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[  607.879223][ T1642] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  607.995189][T14362] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  608.033335][T14362] syzkaller0: entered promiscuous mode
[  608.038922][T14362] syzkaller0: entered allmulticast mode
[  608.115582][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.129176][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.419051][T14365] FAULT_INJECTION: forcing a failure.
[  608.419051][T14365] name failslab, interval 1, probability 0, space 0, times 0
[  608.436450][T14365] CPU: 1 UID: 0 PID: 14365 Comm: syz.7.2893 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  608.436477][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  608.436489][T14365] Call Trace:
[  608.436497][T14365]  <TASK>
[  608.436506][T14365]  dump_stack_lvl+0x189/0x250
[  608.436534][T14365]  ? __pfx____ratelimit+0x10/0x10
[  608.436554][T14365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  608.436572][T14365]  ? __pfx__printk+0x10/0x10
[  608.436597][T14365]  ? __pfx___might_resched+0x10/0x10
[  608.436613][T14365]  ? fs_reclaim_acquire+0x7d/0x100
[  608.436638][T14365]  should_fail_ex+0x414/0x560
[  608.436669][T14365]  should_failslab+0xa8/0x100
[  608.436690][T14365]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  608.436708][T14365]  ? __alloc_skb+0x112/0x2d0
[  608.436733][T14365]  __alloc_skb+0x112/0x2d0
[  608.436757][T14365]  netlink_ack+0x146/0xa50
[  608.436776][T14365]  ? __up_read+0x280/0x680
[  608.436797][T14365]  ? __pfx___up_read+0x10/0x10
[  608.436825][T14365]  rdma_nl_rcv+0x3c8/0x980
[  608.436857][T14365]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  608.436876][T14365]  ? __lock_acquire+0xab9/0xd20
[  608.436919][T14365]  ? netlink_deliver_tap+0x2e/0x1b0
[  608.436938][T14365]  ? netlink_deliver_tap+0x2e/0x1b0
[  608.436963][T14365]  netlink_unicast+0x758/0x8d0
[  608.437000][T14365]  netlink_sendmsg+0x805/0xb30
[  608.437029][T14365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  608.437053][T14365]  ? aa_sock_msg_perm+0xf1/0x1d0
[  608.437076][T14365]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  608.437099][T14365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  608.437121][T14365]  __sock_sendmsg+0x219/0x270
[  608.437141][T14365]  ____sys_sendmsg+0x505/0x830
[  608.437171][T14365]  ? __pfx_____sys_sendmsg+0x10/0x10
[  608.437203][T14365]  ? import_iovec+0x74/0xa0
[  608.437223][T14365]  ___sys_sendmsg+0x21f/0x2a0
[  608.437248][T14365]  ? __pfx____sys_sendmsg+0x10/0x10
[  608.437305][T14365]  ? __fget_files+0x2a/0x420
[  608.437326][T14365]  ? __fget_files+0x3a0/0x420
[  608.437357][T14365]  __x64_sys_sendmsg+0x19b/0x260
[  608.437384][T14365]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  608.437417][T14365]  ? __pfx_ksys_write+0x10/0x10
[  608.437434][T14365]  ? rcu_is_watching+0x15/0xb0
[  608.437456][T14365]  ? do_syscall_64+0xbe/0x3b0
[  608.437480][T14365]  do_syscall_64+0xfa/0x3b0
[  608.437498][T14365]  ? lockdep_hardirqs_on+0x9c/0x150
[  608.437516][T14365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.437533][T14365]  ? clear_bhb_loop+0x60/0xb0
[  608.437554][T14365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.437572][T14365] RIP: 0033:0x7fc5a2d8e929
[  608.437607][T14365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.437622][T14365] RSP: 002b:00007fc5a3b5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  608.437642][T14365] RAX: ffffffffffffffda RBX: 00007fc5a2fb5fa0 RCX: 00007fc5a2d8e929
[  608.437656][T14365] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  608.437668][T14365] RBP: 00007fc5a3b5d090 R08: 0000000000000000 R09: 0000000000000000
[  608.437679][T14365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.437690][T14365] R13: 0000000000000000 R14: 00007fc5a2fb5fa0 R15: 00007ffc5e586418
[  608.437717][T14365]  </TASK>
[  608.755470][    C1] vkms_vblank_simulate: vblank timer overrun
[  609.196923][T14377] fuse: Bad value for 'fd'
[  609.410648][ T1642] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[  609.575570][ T1642] usb 8-1: Using ep0 maxpacket: 32
[  609.597899][ T1642] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  609.614303][ T1642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.622566][ T1642] usb 8-1: Product: syz
[  609.626803][ T1642] usb 8-1: Manufacturer: syz
[  609.631416][ T1642] usb 8-1: SerialNumber: syz
[  609.657860][ T1642] usb 8-1: config 0 descriptor??
[  609.669978][ T1642] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  610.015208][ T5890] usb 6-1: USB disconnect, device number 44
[  610.330524][T14395] ==================================================================
[  610.338648][T14395] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160
[  610.346580][T14395] Read of size 8 at addr ffff88801cb4b430 by task syz.2.2905/14395
[  610.354508][T14395] 
[  610.356840][T14395] CPU: 0 UID: 0 PID: 14395 Comm: syz.2.2905 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  610.356861][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  610.356874][T14395] Call Trace:
[  610.356885][T14395]  <TASK>
[  610.356894][T14395]  dump_stack_lvl+0x189/0x250
[  610.356921][T14395]  ? __virt_addr_valid+0x1c8/0x5c0
[  610.356943][T14395]  ? rcu_is_watching+0x15/0xb0
[  610.356955][T14395]  ? __kasan_check_byte+0x12/0x40
[  610.356966][T14395]  ? __pfx_dump_stack_lvl+0x10/0x10
[  610.356976][T14395]  ? rcu_is_watching+0x15/0xb0
[  610.356986][T14395]  ? lock_release+0x4b/0x3e0
[  610.357001][T14395]  ? __virt_addr_valid+0x1c8/0x5c0
[  610.357022][T14395]  ? __virt_addr_valid+0x4a5/0x5c0
[  610.357046][T14395]  print_report+0xd2/0x2b0
[  610.357074][T14395]  ? pause_parse_request+0x40/0x160
[  610.357094][T14395]  kasan_report+0x118/0x150
[  610.357106][T14395]  ? pause_parse_request+0x40/0x160
[  610.357118][T14395]  ? __pfx_pause_parse_request+0x10/0x10
[  610.357128][T14395]  pause_parse_request+0x40/0x160
[  610.357139][T14395]  ? __pfx_pause_parse_request+0x10/0x10
[  610.357150][T14395]  ethnl_default_set_doit+0x2be/0xa40
[  610.357174][T14395]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  610.357209][T14395]  genl_family_rcv_msg_doit+0x212/0x300
[  610.357241][T14395]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  610.357261][T14395]  ? bpf_lsm_capable+0x9/0x20
[  610.357271][T14395]  ? security_capable+0x7e/0x2e0
[  610.357283][T14395]  genl_rcv_msg+0x60e/0x790
[  610.357298][T14395]  ? __pfx_genl_rcv_msg+0x10/0x10
[  610.357320][T14395]  ? ref_tracker_free+0x63a/0x7d0
[  610.357341][T14395]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  610.357367][T14395]  ? __pfx_ref_tracker_free+0x10/0x10
[  610.357391][T14395]  netlink_rcv_skb+0x205/0x470
[  610.357406][T14395]  ? __pfx_genl_rcv_msg+0x10/0x10
[  610.357420][T14395]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  610.357434][T14395]  ? down_read+0x1ad/0x2e0
[  610.357471][T14395]  genl_rcv+0x28/0x40
[  610.357498][T14395]  netlink_unicast+0x758/0x8d0
[  610.357530][T14395]  netlink_sendmsg+0x805/0xb30
[  610.357555][T14395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  610.357573][T14395]  ? aa_sock_msg_perm+0xf1/0x1d0
[  610.357586][T14395]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  610.357600][T14395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  610.357618][T14395]  __sock_sendmsg+0x219/0x270
[  610.357640][T14395]  ____sys_sendmsg+0x505/0x830
[  610.357669][T14395]  ? __pfx_____sys_sendmsg+0x10/0x10
[  610.357700][T14395]  ? import_iovec+0x74/0xa0
[  610.357712][T14395]  ___sys_sendmsg+0x21f/0x2a0
[  610.357726][T14395]  ? __pfx____sys_sendmsg+0x10/0x10
[  610.357746][T14395]  ? __fget_files+0x2a/0x420
[  610.357760][T14395]  ? __fget_files+0x3a0/0x420
[  610.357787][T14395]  __x64_sys_sendmsg+0x19b/0x260
[  610.357816][T14395]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  610.357846][T14395]  ? rcu_is_watching+0x15/0xb0
[  610.357860][T14395]  ? do_syscall_64+0xbe/0x3b0
[  610.357873][T14395]  do_syscall_64+0xfa/0x3b0
[  610.357884][T14395]  ? lockdep_hardirqs_on+0x9c/0x150
[  610.357895][T14395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.357906][T14395]  ? clear_bhb_loop+0x60/0xb0
[  610.357925][T14395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.357945][T14395] RIP: 0033:0x7f457dd8e929
[  610.357965][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  610.357983][T14395] RSP: 002b:00007f457ebce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  610.358005][T14395] RAX: ffffffffffffffda RBX: 00007f457dfb5fa0 RCX: 00007f457dd8e929
[  610.358013][T14395] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003
[  610.358021][T14395] RBP: 00007f457de10b39 R08: 0000000000000000 R09: 0000000000000000
[  610.358027][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.358040][T14395] R13: 0000000000000000 R14: 00007f457dfb5fa0 R15: 00007fffcbc10e78
[  610.358051][T14395]  </TASK>
[  610.358055][T14395] 
[  610.461933][ T5890] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  610.465693][T14395] Allocated by task 14395:
[  610.465708][T14395]  kasan_save_track+0x3e/0x80
[  610.465741][T14395]  __kasan_kmalloc+0x93/0xb0
[  610.635045][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  610.636854][T14395]  __kmalloc_noprof+0x27a/0x4f0
[  610.636881][T14395]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  610.636910][T14395]  genl_family_rcv_msg_doit+0xb8/0x300
[  610.642041][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  610.646585][T14395]  genl_rcv_msg+0x60e/0x790
[  610.646619][T14395]  netlink_rcv_skb+0x205/0x470
[  610.646638][T14395]  genl_rcv+0x28/0x40
[  610.654306][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  610.657359][T14395]  netlink_unicast+0x758/0x8d0
[  610.657383][T14395]  netlink_sendmsg+0x805/0xb30
[  610.657403][T14395]  __sock_sendmsg+0x219/0x270
[  610.657437][T14395]  ____sys_sendmsg+0x505/0x830
[  610.664232][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  610.667710][T14395]  ___sys_sendmsg+0x21f/0x2a0
[  610.667740][T14395]  __x64_sys_sendmsg+0x19b/0x260
[  610.667764][T14395]  do_syscall_64+0xfa/0x3b0
[  610.692923][ T5890] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  610.695758][T14395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.695786][T14395] 
[  610.695793][T14395] The buggy address belongs to the object at ffff88801cb4b400
[  610.695793][T14395]  which belongs to the cache kmalloc-64 of size 64
[  610.695810][T14395] The buggy address is located 8 bytes to the right of
[  610.695810][T14395]  allocated 40-byte region [ffff88801cb4b400, ffff88801cb4b428)
[  610.704278][ T5890] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  610.711736][T14395] 
[  610.711747][T14395] The buggy address belongs to the physical page:
[  610.711766][T14395] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cb4b
[  610.711787][T14395] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  610.711803][T14395] page_type: f5(slab)
[  610.711820][T14395] raw: 00fff00000000000 ffff88801a8418c0 ffffea00009f96c0 dead000000000005
[  610.711836][T14395] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[  610.711846][T14395] page dumped because: kasan: bad access detected
[  610.711862][T14395] page_owner tracks the page as allocated
[  610.711871][T14395] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 26, tgid 26 (kdevtmpfs), ts 4147604145, free_ts 0
[  610.725354][ T5890] usb 6-1: Manufacturer: syz
[  610.727786][T14395]  post_alloc_hook+0x240/0x2a0
[  610.727811][T14395]  get_page_from_freelist+0x21e4/0x22c0
[  610.727835][T14395]  __alloc_frozen_pages_noprof+0x181/0x370
[  610.753530][ T5890] usb 6-1: config 0 descriptor??
[  610.757676][T14395]  alloc_pages_mpol+0x232/0x4a0
[  610.757699][T14395]  allocate_slab+0x8a/0x370
[  610.757722][T14395]  ___slab_alloc+0xbeb/0x1410
[  611.038083][T14395]  __kmalloc_noprof+0x305/0x4f0
[  611.042930][T14395]  security_inode_init_security+0x107/0x3f0
[  611.048832][T14395]  shmem_mknod+0x1f6/0x3e0
[  611.051934][ T5890] rc_core: IR keymap rc-hauppauge not found
[  611.053254][T14395]  shmem_mkdir+0x33/0x70
[  611.053280][T14395]  vfs_mkdir+0x303/0x510
[  611.053298][T14395]  devtmpfs_work_loop+0x2ef/0xd20
[  611.059368][ T5890] Registered IR keymap rc-empty
[  611.063390][T14395]  devtmpfsd+0x4d/0x50
[  611.063409][T14395]  kthread+0x711/0x8a0
[  611.063430][T14395]  ret_from_fork+0x3fc/0x770
[  611.063455][T14395]  ret_from_fork_asm+0x1a/0x30
[  611.063477][T14395] page_owner free stack trace missing
[  611.063487][T14395] 
[  611.063492][T14395] Memory state around the buggy address:
[  611.070412][ T5890] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  611.072718][T14395]  ffff88801cb4b300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  611.072735][T14395]  ffff88801cb4b380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  611.072747][T14395] >ffff88801cb4b400: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  611.072758][T14395]                                      ^
[  611.072769][T14395]  ffff88801cb4b480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  611.072781][T14395]  ffff88801cb4b500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  611.072791][T14395] ==================================================================
[  611.163750][T14395] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  611.163774][T14395] CPU: 0 UID: 0 PID: 14395 Comm: syz.2.2905 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) 
[  611.163801][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  611.163814][T14395] Call Trace:
[  611.163823][T14395]  <TASK>
[  611.163831][T14395]  dump_stack_lvl+0x99/0x250
[  611.163859][T14395]  ? __asan_memcpy+0x40/0x70
[  611.163888][T14395]  ? __pfx_dump_stack_lvl+0x10/0x10
[  611.163911][T14395]  ? __pfx__printk+0x10/0x10
[  611.163939][T14395]  panic+0x2db/0x790
[  611.163960][T14395]  ? __pfx_panic+0x10/0x10
[  611.163981][T14395]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  611.164002][T14395]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  611.164021][T14395]  ? print_memory_metadata+0x314/0x400
[  611.164051][T14395]  ? pause_parse_request+0x40/0x160
[  611.164072][T14395]  check_panic_on_warn+0x89/0xb0
[  611.164099][T14395]  ? pause_parse_request+0x40/0x160
[  611.164120][T14395]  end_report+0x78/0x160
[  611.164140][T14395]  kasan_report+0x129/0x150
[  611.164162][T14395]  ? pause_parse_request+0x40/0x160
[  611.164186][T14395]  ? __pfx_pause_parse_request+0x10/0x10
[  611.164207][T14395]  pause_parse_request+0x40/0x160
[  611.164230][T14395]  ? __pfx_pause_parse_request+0x10/0x10
[  611.164251][T14395]  ethnl_default_set_doit+0x2be/0xa40
[  611.164277][T14395]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  611.164311][T14395]  genl_family_rcv_msg_doit+0x212/0x300
[  611.164342][T14395]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  611.164376][T14395]  ? bpf_lsm_capable+0x9/0x20
[  611.164396][T14395]  ? security_capable+0x7e/0x2e0
[  611.164421][T14395]  genl_rcv_msg+0x60e/0x790
[  611.164451][T14395]  ? __pfx_genl_rcv_msg+0x10/0x10
[  611.164478][T14395]  ? ref_tracker_free+0x63a/0x7d0
[  611.164498][T14395]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  611.164523][T14395]  ? __pfx_ref_tracker_free+0x10/0x10
[  611.164548][T14395]  netlink_rcv_skb+0x205/0x470
[  611.164575][T14395]  ? __pfx_genl_rcv_msg+0x10/0x10
[  611.164606][T14395]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  611.164631][T14395]  ? down_read+0x1ad/0x2e0
[  611.164654][T14395]  genl_rcv+0x28/0x40
[  611.164677][T14395]  netlink_unicast+0x758/0x8d0
[  611.384601][T14395]  netlink_sendmsg+0x805/0xb30
[  611.389387][T14395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  611.394687][T14395]  ? aa_sock_msg_perm+0xf1/0x1d0
[  611.399633][T14395]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  611.404922][T14395]  ? __pfx_netlink_sendmsg+0x10/0x10
[  611.410206][T14395]  __sock_sendmsg+0x219/0x270
[  611.414879][T14395]  ____sys_sendmsg+0x505/0x830
[  611.419655][T14395]  ? __pfx_____sys_sendmsg+0x10/0x10
[  611.424961][T14395]  ? import_iovec+0x74/0xa0
[  611.429468][T14395]  ___sys_sendmsg+0x21f/0x2a0
[  611.434156][T14395]  ? __pfx____sys_sendmsg+0x10/0x10
[  611.439372][T14395]  ? __fget_files+0x2a/0x420
[  611.443964][T14395]  ? __fget_files+0x3a0/0x420
[  611.448655][T14395]  __x64_sys_sendmsg+0x19b/0x260
[  611.453782][T14395]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  611.459246][T14395]  ? rcu_is_watching+0x15/0xb0
[  611.464001][T14395]  ? do_syscall_64+0xbe/0x3b0
[  611.468684][T14395]  do_syscall_64+0xfa/0x3b0
[  611.473181][T14395]  ? lockdep_hardirqs_on+0x9c/0x150
[  611.478791][T14395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.484856][T14395]  ? clear_bhb_loop+0x60/0xb0
[  611.489534][T14395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.495437][T14395] RIP: 0033:0x7f457dd8e929
[  611.499857][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.519470][T14395] RSP: 002b:00007f457ebce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  611.527892][T14395] RAX: ffffffffffffffda RBX: 00007f457dfb5fa0 RCX: 00007f457dd8e929
[  611.535862][T14395] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003
[  611.543918][T14395] RBP: 00007f457de10b39 R08: 0000000000000000 R09: 0000000000000000
[  611.551890][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  611.559853][T14395] R13: 0000000000000000 R14: 00007f457dfb5fa0 R15: 00007fffcbc10e78
[  611.567823][T14395]  </TASK>
[  611.571126][T14395] Kernel Offset: disabled
[  611.575449][T14395] Rebooting in 86400 seconds..