last executing test programs: 11.558806519s ago: executing program 4 (id=975): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000085000000000000100000001800018014000200000000000008000a000900"/46], 0x34}}, 0x4044890) socket$inet_tcp(0x2, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x80000) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7}) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r5, 0x1, 0xc7, &(0x7f0000000080)=""/199) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) 9.878586129s ago: executing program 1 (id=981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x4}, &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={r5, 0x7, 0x10, 0x9, 0xff}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={r7, 0xb}, &(0x7f0000000500)=0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, 0xffffffffffffffff, 0x0) kexec_load(0x8, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000580)="7c4fd4008610d507280729dbb03e2b159cfa5218e75a82a89a29d562935f9a0026e3e04607c2f126162e492c400fc203bc14f2cd2fa99d2531322eba3477f1821e418b21fa6da92deb8c0025b1cb3a00d577a247c7da8e3967d19a699415e58cf34a2a7a221c86f3ecade13ca44c2ee48ff23242e73a6ef32bb37fd78671ba571e3f4e44b73a0cf0315b7f84c21d176160b47fd376eae7a6654752d1743d401a633d4902daf0e1c47c8641962f4fbe429bcee7579145915ddc9ca8073c594118b9c2", 0xc2, 0x8, 0x6}, {&(0x7f00000000c0)="920a00ee6af410d570e2a441f09f7736d0d8b59db0c144774372bb0183e2669793365b9195ecbd0bf3d94fb088c35e726a1ad0", 0x33, 0x9, 0xffffffff}, {&(0x7f0000000680)="1a65b5e95420f54e12327d41ec4ace2b4aff789a83ae767967fe2368780f9999fafc32efbf12c24ecd2b1e5c444175019118dbfa9626734bb721b2efb84ed3a5d30b08e7ea346c9e9e6e", 0x4a, 0x9, 0xdde}], 0x30000) 9.130420061s ago: executing program 2 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000140), 0x105000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000001c0)={0x14}) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e20, 0x40, @private1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x20, 0x29, 0x32, {@remote}}}], 0x20}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf253900000008000300", @ANYRES32=r4, @ANYBLOB="1400ed1c57a4417a5a8010000180131293d035d97ce34288cff68d0053479200e5f55dd0d84268135a78718e136fc4b400000089bf86caef5cf0d08f92c60791fdaabb5bcb4a9033553622401c12b9509daf300cc59c465071892a2512183cdce917ccc39324c359017de588e23c0fbef50956c5a6e74c1804259d76dbf7c291f7ec34dcc501069ddc3b546e65d136d3ca3d85"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 9.038139209s ago: executing program 2 (id=985): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x40) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000740)) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140)) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x200080) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000700)={0x2, 0x5}, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000780)={0x0, 0x6, 0x2, 0x7, 0x3, 0x6e}, &(0x7f00000007c0)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000800)={r5, 0x81, 0x0, 0xfff, 0xf}, &(0x7f0000000840)=0x18) fcntl$notify(r4, 0x402, 0x8000003d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x1, 0x0}, 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007f00000000100000fffffeff1865000000000000000000000800000002a55896010000009500000010000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x5, 0x2, 0x6}, {0x3, 0x5, 0xc, 0x9}], 0x10, 0x7, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES8], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x40}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4008, r0}, 0x14) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r10, &(0x7f0000000180)="15", 0x1, 0xc001, &(0x7f0000000240)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) setsockopt(r10, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000100), &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', r3, @fallback, r4, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x9, 0x26d, 0x1}, 0x10, r6, r7, 0xa, &(0x7f0000000540)=[r9], &(0x7f0000000580)=[{0x1, 0x1, 0x1, 0x6}, {0x3, 0x1, 0x5, 0x2}, {0x3, 0x1, 0xd, 0x3}, {0x3, 0x1, 0x1, 0x1}, {0x1, 0x5, 0x9, 0xa}, {0x0, 0x4, 0x5, 0x3}, {0x1, 0x5, 0x9, 0x7}, {0x2, 0x4, 0xe, 0xa}, {0x5, 0x3, 0x2}, {0x4, 0x4, 0x7}], 0x10, 0x3, @void, @value}, 0x94) ioctl$USBDEVFS_RESET(r0, 0x5514) 7.926090669s ago: executing program 4 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x100, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '/dev/sg#\x00', 0x3a, '.', 0x3a, './file0', 0x3a, [0x50, 0x0]}, 0x33) 7.716160807s ago: executing program 4 (id=989): openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="10000000", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) 6.72977475s ago: executing program 1 (id=992): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/tty/drivers\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400"], 0x1c}}, 0x804) 6.411582071s ago: executing program 4 (id=997): r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)="a56180230d47710fd32447da1c306fe5d3a5da8abdf210b48eb11b4557818671e7c41377d2d908fd0fb0f4d2da48530968e405c50bd92eea2f6935a60b4ec22375b6d810bd5c357e833a29cc21d911d642aa6a2fe017afd06ac63a440b4282e14129b417b092b439f17a4aa57269f8600e6d38b725be4828467a14b793c71f32b243408514e3", 0x86}, {&(0x7f0000000500)="4210dcafdb4e50af21fcae41655f8bcb42ead2e771f652ddcc39a9456813ca114d98a252c5afcc7245850aae630183c3e11489c637d9b71464f0fb364b73288165066dd3ee643b7401d6dd78da4334140a0bdfa514d3d6f61d8bf506a9f3b76b00a972b746ff0e579bee5b04f22691f0e35264734c48daf0", 0x78}, {&(0x7f00000003c0)="27c7a83fadecf71684fb44174b80d26e1cecf75721390bf27aff8f91a59c378fe839d02f00478a71", 0x28}, {&(0x7f0000000580)="0c2ddd4b33920bc4a5c06e1acd1d552939e0d835059a92f63b623245877b522a6f00c64b3d9663f7eef9ab33f8e309fecf507bf39f6dc16050ab327188b15a7e146345e94d5bee2927d88366f99f3453b02614a04ecb0df273be338608378865d459cbdfe48171b3af8d24f5ebba1feeed31920cbb0579465e6e5e84a5c735fd790c281a82b6c3f7f019ef85cdb5046889eb111fc6c9ed005b03de5d866ea6ef6cf9204cf76a673b473989395edfdc5354d2cc65a7c385847148a391f7f838f1613642b8b53827a5f5a52d05f6626c0aeb2fe1d423e99b658a1f16f8f2c3e9221a07e0", 0xe3}, {&(0x7f0000000680)="d2a6560b0b4ed6c31fcb6544d5b7120be96cdef4db901ef038968bd5daac92552bd8c111d3ee64edcca04c862f2a51c1b5e8", 0x32}, {&(0x7f00000006c0)="39bea392ac322df17af826f9581cb374288a4ea3d8cfd081ea59850872cb1341854f2952efd1742b06b1927e75ee01c677c90937cb66d876bdbb2764eb38d7cc554141f33ebb942bd9ab28faf821ddf3d99156faacda8a32db9c40b6f037e9b7f116c4ccf631979bc1ecd2b549b025a9a38fe849173ea2c140cb146bfce96a6394f837ae6576f724c94585111547d61796f04d8dd8a2b03aa561db8627b4894a66e9392e2c0375cf7ba60c23104fb432757969ee8ace", 0xb6}, {&(0x7f0000000900)="fe1d4cf2b6433ed057bc11387d31b4ec8386eb1e296c34a0be2a9ca0377ff8dcc8b2a6fa28bb127822c5275a40661ab230ec4f1d81e8ffbb3532c40f8da961cfb23c49e244c2bb46a5aaecdaf7e7758b2f43e846d8f2541bac0aeb6c9ca6251aa2c0cf390508aa8bac8692bb244fa3ef06457d5f93041e33004fb8e3956eacbaeeea63ad76358b370727ed43f84423aa4fc6eb0aaba6f29a73966a2c1e94ca31743e1e355b53227b55e38069ada0d66f72ff38a5e9e21cb0d420c29b47ad8a3b2fad3305f4e3963254ea665d7a848b0e9bb93d92d56cd15c342d8a5e8b8b977394527785d37b5c1fce79b362", 0xec}], 0x7, &(0x7f0000000a00)=[{0x2c, 0x84, 0x0, "08281b5e96828b812052827fae38d83dae666796f748f2a3c1153c0ba5c90c86"}, {0x94, 0x102, 0x6, "472208c9ba0e6519099a57cbf04630eeee34b2f57058fe197c2d0cccc276b670c1662479f7b36e232545cf611608dae13f8872c7b2a812b5d80ad8bc9874caa97266efea47de952d06747c388c4c746725451057814ecb52f800fa07b5fbefb25b536f953d2339e543b96f1a3e1019c324be4924f025d3c739ca286e746b05affb0b62dfb03d05"}, {0x48, 0x103, 0x4, "e9cf7badc9f9bc4f3a2e8a2ff57a7104b92a686cd92610940f72b33ccead232107bb5b5f3b8bb5cc36f1414736ffa5756aa1c2129e276c45f3b664"}], 0x108}, 0x8000) syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x820, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00e8ffffff00000000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/39, 0x27}, 0x8}], 0x1, 0x10002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) capset(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000140)={0x7ffffff, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff10000040"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x61659570, 0x22, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x10, 0x8000, 0x4, 0xfffff94c}}) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800) ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000000080)={0x0, 0x9, 0x8, 0xe2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18) socket$inet_tcp(0x2, 0x1, 0x0) 5.883836281s ago: executing program 2 (id=1000): r0 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0xf003}, 0x0, {0x0, r3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYRESOCT=r3], 0x6c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x5, 0x40) ptrace(0x11, r5) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 5.834002656s ago: executing program 0 (id=1001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x40400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x61) socket$inet(0x2, 0x1, 0x9) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0x0, '.\x00'}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b70200001400", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008580453010011000000010902"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165", 0xc) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8916, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) write$binfmt_aout(r7, 0x0, 0xffffffdb) pread64(r5, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 5.623702826s ago: executing program 2 (id=1002): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010000e00000402505"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r5, 0x4}, &(0x7f0000000140)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={r5, 0x7, 0x10, 0x9, 0xff}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={r7, 0xb}, &(0x7f0000000500)=0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, 0xffffffffffffffff, 0x0) kexec_load(0x8, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000580)="7c4fd4008610d507280729dbb03e2b159cfa5218e75a82a89a29d562935f9a0026e3e04607c2f126162e492c400fc203bc14f2cd2fa99d2531322eba3477f1821e418b21fa6da92deb8c0025b1cb3a00d577a247c7da8e3967d19a699415e58cf34a2a7a221c86f3ecade13ca44c2ee48ff23242e73a6ef32bb37fd78671ba571e3f4e44b73a0cf0315b7f84c21d176160b47fd376eae7a6654752d1743d401a633d4902daf0e1c47c8641962f4fbe429bcee7579145915ddc9ca8073c594118b9c2", 0xc2, 0x8, 0x6}, {&(0x7f00000000c0)="920a00ee6af410d570e2a441f09f7736d0d8b59db0c144774372bb0183e2669793365b9195ecbd0bf3d94fb088c35e726a1ad0", 0x33, 0x9, 0xffffffff}, {&(0x7f0000000680)="1a65b5e95420f54e12327d41ec4ace2b4aff789a83ae767967fe2368780f9999fafc32efbf12c24ecd2b1e5c444175019118dbfa9626734bb721b2efb84ed3a5d30b08e7ea346c9e9e6e", 0x4a, 0x9, 0xdde}], 0x30000) 5.453406488s ago: executing program 3 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12", 0x26, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0x1, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x4, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.388744073s ago: executing program 1 (id=1005): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x11\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 5.324292009s ago: executing program 4 (id=1006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, r3, 0x0, 0x30, 0x2, 0x0, 0x1, r3}]) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r10, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r10, 0x40045431, 0x0) syz_open_pts(r10, 0x0) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000009, 0x1010, 0xffffffffffffffff, 0x0) 5.211421452s ago: executing program 1 (id=1007): syz_open_dev$dri(&(0x7f0000000000), 0x1756c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x1000000, 0x2000000000, 0x451, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x9, 0xffffffff}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd700004000000050000e6070009000200000008000c000000000008000b00000000000600010007000000"], 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) 5.15433576s ago: executing program 3 (id=1008): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = dup(r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="8bfa4c696170000000000000cee6048965b449b87d4e545dec54cb5318e1c60600000e1f5b2f5932b3cdd6260dc302a93b761f5fd755735c9eee3c73354c6e442794cb0a29cfdc35ca146c107bdb01ef19e95acb0f7bdda9fa67df182ea2dfb475a0eacaf7c446276a341f25dae537a693e6dac82f24fbb3ff936d317f8b2632be4a806a6a039284c61e2e5d9bf9c2692311e0b6e0974926408e95a4911dba8eac8cd90ee0e32e56682ea6d53ad446ee42fbb53b9449fd2a36771962789a278563861fc609b8b3979c3281fd19f40ed6d36e47b7db561618b70bfd36590da4c83bb54d9f3a077fe869"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0xc0b0) r4 = socket(0x15, 0x5, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x1, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000100)={0x4b29241a6eaffd29, 0x8080000, 0x401, 0x1, 0x8001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x1, 0x22c843) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xa9d3, 0x10100, 0x3, 0x0, 0x0, r9}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x10, 0x0, 0x0}) 4.902384117s ago: executing program 3 (id=1009): r0 = syz_io_uring_setup(0x160c, &(0x7f00000002c0)={0x0, 0x4, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r7}) read$dsp(r4, &(0x7f00000012c0)=""/4110, 0x4bc) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='\"'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2002d3e, 0x0, 0x50, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 4.223486117s ago: executing program 3 (id=1010): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@loopback}, {@in=@empty, 0x0, 0x3c}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x6}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x8, 0xaa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x1]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x30008890) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev, 0x6}}, 0x9, 0x7, 0x0, 0x0, 0x54}, 0x9c) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) lseek(r5, 0x164, 0x0) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xad}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x7}, 0x1c) 4.031436402s ago: executing program 4 (id=1011): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@loopback}, {@in=@empty, 0x0, 0x3c}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x6}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x8, 0xaa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x1]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x30008890) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev, 0x6}}, 0x9, 0x7, 0x0, 0x0, 0x54}, 0x9c) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) lseek(r5, 0x164, 0x0) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xad}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x7}, 0x1c) 3.74245399s ago: executing program 1 (id=1012): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4000000000003, {0x1, 0x3, 0x0, 0x0, 0x80000000, 0x0, {0x6, 0x8000, 0x2, 0x7, 0xb, 0x3, 0x0, 0x4000, 0x200000, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x751c786c02b50be0, 0xffffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101001, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006f8db4088205e82806f50102030109021b0001000000000904000001fff14c0009050e9b"], 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410181, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="bcaa5af3eb0acba108c8", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) set_thread_area(&(0x7f0000000000)={0xffffffff, 0x0, 0x402, 0x1}) open(&(0x7f0000000940)='./file0\x00', 0x5bf403, 0xa7) shmget$private(0x0, 0x3000, 0x4c, &(0x7f000030c000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x708, 0x41e3, 0x0, 0x0, 0x0) 3.225647632s ago: executing program 0 (id=1013): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x27a, 0x2313040, 0x4, 0x4, 0x0, 0xdffffffc, 0x0, 0x0, 0x40, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008080)="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", 0x2000, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x2) 2.403363733s ago: executing program 2 (id=1014): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) close_range(r0, r0, 0x2) r1 = openat$audio1(0xffffffffffffff9c, 0x0, 0x203a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8, 0x100000, 0x7, 0x3, 0x5, 0x9, 0x0, 0x0, 0x8, 0xa4}}, 0x50) 2.27748436s ago: executing program 0 (id=1015): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/tty/drivers\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400"], 0x1c}}, 0x804) 2.105343994s ago: executing program 2 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030500000000000000000000fbffffffffff070001"], 0x20}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) 1.04133255s ago: executing program 3 (id=1017): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x8) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000019c0)=[{0xc, 0x29, 0x4}], 0xc}}], 0x1, 0x4000000) 874.452215ms ago: executing program 3 (id=1018): openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="10000000", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6}, 0x14) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x378, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x364, 0x1, [@m_gact={0x1dc, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x1af, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x40, 0xa, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0xd, 0x6, "266510c489ea5b3a4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x114, 0x13, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x4, 0x3, 0x7, 0x294cce70}, 0x3}}]}, {0xc9, 0x6, "81453f804a82cb6aee040cab1a26b8e22ec8166344fb4905e0eaf17ba33cdd74ed4974df2bc7764a4edc7b4bcc0919a48f180d201a029d98fff52fcc74742c1f8046a7cc4c0299095ebfedcd454245cf40d13f04487991b233521bd7d84c14634f205a01a4efc1ad124fd2fa7a3531cba90bcad77a49d3ea7c4024b9e84989237e9a85f534af4f014ece00409ec392e998988a5277aecaaca8b5cfdeea0cd1c2f8fcd578f8365f3145eb85493988b34a825b0bd810229fe3c7bf594620d65d4cef2585995b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) 678.78795ms ago: executing program 0 (id=1019): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x40101283, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 566.801384ms ago: executing program 0 (id=1020): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x24, r0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010) (fail_nth: 7) 39.96648ms ago: executing program 0 (id=1021): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x17, 0x5}}, 0x20) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8f2e10859ff00224ad54afac11d03229c993c5240f45f818a01177d3d458dd4992861ac00000000000800", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffffe]}}) 0s ago: executing program 1 (id=1022): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4000000000003, {0x1, 0x3, 0x0, 0x0, 0x80000000, 0x0, {0x6, 0x8000, 0x2, 0x7, 0xb, 0x3, 0x0, 0x4000, 0x200000, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x751c786c02b50be0, 0xffffffff}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006f8db4088205e82806f50102030109021b0001000000000904000001fff14c0009050e9b"], 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410181, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="bcaa5af3eb0acba108c8", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) set_thread_area(&(0x7f0000000000)={0xffffffff, 0x0, 0x402, 0x1}) open(&(0x7f0000000940)='./file0\x00', 0x5bf403, 0xa7) shmget$private(0x0, 0x3000, 0x4c, &(0x7f000030c000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180), &(0x7f00000001c0)) kernel console output (not intermixed with test programs): f47539 [ 226.653640][ T7902] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 226.653665][ T7902] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 226.653686][ T7902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 226.653699][ T7902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.653710][ T7902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.653720][ T7902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.653731][ T7902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.653757][ T7902] [ 226.811882][ T7904] fuse: Bad value for 'fd' [ 226.926712][ T10] usb 2-1: can't read configurations, error -22 [ 227.097746][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 227.173304][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 227.181362][ T10] usb 2-1: can't read configurations, error -22 [ 227.191656][ T10] usb usb2-port1: unable to enumerate USB device [ 227.502933][ T7919] CIFS: VFS: Malformed UNC in devname [ 229.477820][ T5925] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 229.638941][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 229.660378][ T7953] fuse: Bad value for 'fd' [ 229.690102][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 229.701847][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 229.714881][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 229.739702][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.763216][ T5925] usb 2-1: Product: syz [ 229.781456][ T5925] usb 2-1: Manufacturer: syz [ 229.787853][ T5925] usb 2-1: SerialNumber: syz [ 229.809755][ T5925] usb 2-1: config 0 descriptor?? [ 229.836261][ T7955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.604'. [ 229.850176][ T7955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.857803][ T7955] IPv6: NLM_F_CREATE should be set when creating new route [ 230.273058][ T7968] fuse: Bad value for 'user_id' [ 230.649333][ T7968] fuse: Bad value for 'user_id' [ 230.811334][ T7975] CIFS: VFS: Malformed UNC in devname [ 231.944822][ T7980] fuse: Unknown parameter 'fd0x0000000000000004' [ 232.114896][ T5925] usb 2-1: USB disconnect, device number 31 [ 232.221283][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.248578][ T5897] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 232.418063][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 232.457025][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 232.527932][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 232.581407][ T7987] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.601826][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 232.605760][ T7989] fuse: Unknown parameter '0x0000000000000003' [ 232.611660][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.625366][ T5897] usb 5-1: Product: syz [ 232.629827][ T5897] usb 5-1: Manufacturer: syz [ 232.638989][ T5897] usb 5-1: SerialNumber: syz [ 232.651089][ T5897] usb 5-1: config 0 descriptor?? [ 232.822750][ T7993] netlink: 88 bytes leftover after parsing attributes in process `syz.3.616'. [ 232.877698][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 232.961125][ T7999] fuse: Bad value for 'user_id' [ 232.967450][ T7999] fuse: Bad value for 'user_id' [ 233.060527][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.072187][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 233.083763][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.093730][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.266301][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.280119][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.289247][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.297250][ T10] usb 2-1: Manufacturer: syz [ 233.323078][ T10] usb 2-1: config 0 descriptor?? [ 233.611130][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.694979][ T8006] sctp: [Deprecated]: syz.2.620 (pid 8006) Use of int in maxseg socket option. [ 233.694979][ T8006] Use struct sctp_assoc_value instead [ 233.798599][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.888871][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.352154][ T5924] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.377236][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.417442][ T5924] usb 4-1: config 0 descriptor?? [ 234.868441][ T5924] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 234.882910][ T5924] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 234.916316][ T5924] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 235.248050][ T5897] usb 5-1: USB disconnect, device number 28 [ 235.342400][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.107730][ T10] rc_core: IR keymap rc-hauppauge not found [ 236.114452][ T10] Registered IR keymap rc-empty [ 236.121323][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.337715][ T5897] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 236.349566][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.369575][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 236.396625][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 236.468858][ T8031] CIFS: VFS: Malformed UNC in devname [ 236.661652][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.687781][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.709788][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.767505][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.792475][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.830709][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.910695][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.948050][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.967804][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.992427][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 237.020681][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 237.054073][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.115044][ T10] usb 2-1: USB disconnect, device number 32 [ 237.259241][ T5904] usb 4-1: USB disconnect, device number 22 [ 237.418859][ T8040] fuse: Unknown parameter '0x0000000000000003' [ 238.023539][ T8059] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 238.037674][ T5924] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 238.059186][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'. [ 238.083267][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'. [ 238.111621][ T8061] openvswitch: netlink: Key type 173 is out of range max 32 [ 238.204196][ T8063] netlink: 'syz.1.636': attribute type 2 has an invalid length. [ 238.212225][ T8063] netlink: 'syz.1.636': attribute type 8 has an invalid length. [ 238.220387][ T8063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.636'. [ 238.255976][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 238.262803][ T5924] usb 3-1: no configurations [ 238.274257][ T5924] usb 3-1: can't read configurations, error -22 [ 238.297908][ T5917] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 238.447675][ T5924] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 238.470362][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.480716][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 238.492121][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.503094][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 238.522413][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.685558][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 238.696461][ T5924] usb 3-1: no configurations [ 238.702261][ T5924] usb 3-1: can't read configurations, error -22 [ 238.709716][ T5917] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.718415][ T5924] usb usb3-port1: attempt power cycle [ 238.723974][ T5917] usb 1-1: Manufacturer: syz [ 238.736222][ T5917] usb 1-1: config 0 descriptor?? [ 238.978403][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 239.077755][ T5924] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 239.111215][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 239.117447][ T5924] usb 3-1: no configurations [ 239.127165][ T5924] usb 3-1: can't read configurations, error -22 [ 239.236208][ T8077] fuse: Unknown parameter '0x0000000000000003' [ 239.304032][ T5924] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 239.358523][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 239.364722][ T5924] usb 3-1: no configurations [ 239.372168][ T5924] usb 3-1: can't read configurations, error -22 [ 239.393145][ T5924] usb usb3-port1: unable to enumerate USB device [ 239.449042][ T8082] CIFS: VFS: Malformed UNC in devname [ 240.787689][ T5904] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 240.947687][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 240.987034][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 241.014252][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 241.286003][ T5904] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 241.353484][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.385092][ T5904] usb 2-1: Product: syz [ 241.399073][ T5904] usb 2-1: Manufacturer: syz [ 241.419024][ T5904] usb 2-1: SerialNumber: syz [ 241.458884][ T5904] usb 2-1: config 0 descriptor?? [ 241.537844][ T5917] rc_core: IR keymap rc-hauppauge not found [ 241.549537][ T5917] Registered IR keymap rc-empty [ 241.555371][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 241.555387][ T30] audit: type=1326 audit(1750122916.431:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 241.560225][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.601120][ T30] audit: type=1326 audit(1750122916.431:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 241.634285][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.680834][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 241.755676][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 241.780821][ T30] audit: type=1326 audit(1750122916.471:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.080069][ T30] audit: type=1326 audit(1750122916.471:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.080362][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.270234][ T8115] fuse: Bad value for 'user_id' [ 242.275131][ T8115] fuse: Bad value for 'user_id' [ 242.297977][ T30] audit: type=1326 audit(1750122916.471:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.347774][ T30] audit: type=1326 audit(1750122916.521:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.369899][ T30] audit: type=1326 audit(1750122916.521:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.395977][ T30] audit: type=1326 audit(1750122916.521:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.396955][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.481696][ T30] audit: type=1326 audit(1750122916.521:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.559685][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.597782][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.603479][ T30] audit: type=1326 audit(1750122916.521:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 242.640393][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.680563][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.742406][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 242.907622][ T5925] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 243.037711][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.112611][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.157711][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 243.162989][ T5917] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.183670][ T5925] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 243.197336][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 243.207746][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.223890][ T5917] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 243.239850][ T5925] usb 5-1: Product: syz [ 243.246152][ T5917] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 243.256268][ T8128] openvswitch: netlink: Message has 4 unknown bytes. [ 243.267438][ T5925] usb 5-1: Manufacturer: syz [ 243.276378][ T5925] usb 5-1: SerialNumber: syz [ 243.357989][ T5917] usb 1-1: USB disconnect, device number 31 [ 243.368767][ T5925] usb 5-1: config 0 descriptor?? [ 243.771383][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 243.949526][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 243.959143][ T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 243.968070][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 243.981539][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 243.993260][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 244.010528][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 244.091628][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.145333][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.168780][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.231633][ T5925] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 244.313696][ T5904] usb 2-1: USB disconnect, device number 33 [ 244.338905][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.382876][ T5925] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 244.435913][ T8124] FAULT_INJECTION: forcing a failure. [ 244.435913][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.455608][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.494363][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 244.502285][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: syz.4.652 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 244.502302][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.502318][ T8124] Call Trace: [ 244.502326][ T8124] [ 244.502331][ T8124] dump_stack_lvl+0x189/0x250 [ 244.502352][ T8124] ? __pfx____ratelimit+0x10/0x10 [ 244.502369][ T8124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.502385][ T8124] ? __pfx__printk+0x10/0x10 [ 244.502396][ T8124] ? __might_fault+0xb0/0x130 [ 244.502411][ T8124] should_fail_ex+0x414/0x560 [ 244.502427][ T8124] _copy_from_user+0x2d/0xb0 [ 244.502439][ T8124] memdup_user+0x5e/0xd0 [ 244.502453][ T8124] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 244.502472][ T8124] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 244.502487][ T8124] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 244.502501][ T8124] ? __fget_files+0x3a0/0x420 [ 244.502512][ T8124] ? __fget_files+0x2a/0x420 [ 244.502525][ T8124] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 244.502542][ T8124] __ia32_compat_sys_ioctl+0x543/0x840 [ 244.502560][ T8124] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 244.502575][ T8124] ? __fget_files+0x3a0/0x420 [ 244.502589][ T8124] ? fput+0xa0/0xd0 [ 244.502602][ T8124] ? ksys_write+0x22a/0x250 [ 244.502615][ T8124] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 244.502631][ T8124] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.502647][ T8124] __do_fast_syscall_32+0xb6/0x2b0 [ 244.502661][ T8124] do_fast_syscall_32+0x34/0x80 [ 244.502670][ T8124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.502683][ T8124] RIP: 0023:0xf7f47539 [ 244.502693][ T8124] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.502703][ T8124] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 244.502715][ T8124] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 244.502722][ T8124] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.502728][ T8124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.502734][ T8124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.502740][ T8124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.502754][ T8124] [ 244.503483][ T10] usbtmc 3-1:16.0: can't read capabilities [ 244.799166][ T5925] usb 5-1: media controller created [ 244.819985][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.902533][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 244.910611][ T5925] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 244.923988][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 244.936339][ T8138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.655'. [ 244.999593][ T5925] usb 5-1: USB disconnect, device number 29 [ 245.073159][ T8138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'. [ 245.082658][ T8138] bridge_slave_1: left allmulticast mode [ 245.088785][ T8138] bridge_slave_1: left promiscuous mode [ 245.153981][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.263338][ T8138] bridge_slave_0: left allmulticast mode [ 245.269569][ T8138] bridge_slave_0: left promiscuous mode [ 245.276176][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.391844][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 245.708050][ T8143] CIFS: VFS: Malformed UNC in devname [ 245.975470][ T10] usb 3-1: USB disconnect, device number 30 [ 246.527749][ T5904] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 246.712586][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 246.761040][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 246.770582][ T5904] usb 3-1: can't read configurations, error -61 [ 246.920520][ T5904] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 247.049377][ T5925] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 247.137844][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 247.146661][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 247.166779][ T5904] usb 3-1: can't read configurations, error -61 [ 247.191182][ T5904] usb usb3-port1: attempt power cycle [ 247.238723][ T5925] usb 4-1: config 0 has no interfaces? [ 247.253155][ T5925] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.268273][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.313493][ T5925] usb 4-1: Product: syz [ 247.323606][ T5925] usb 4-1: Manufacturer: syz [ 247.338378][ T5925] usb 4-1: SerialNumber: syz [ 247.354411][ T5925] usb 4-1: config 0 descriptor?? [ 247.497692][ T5924] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 247.587779][ T5904] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 247.673916][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.762940][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 247.790995][ T8168] kernel profiling enabled (shift: 17) [ 247.866644][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.867362][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 247.885455][ T5904] usb 3-1: can't read configurations, error -61 [ 247.887116][ T5924] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 247.935671][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.984469][ T5955] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 248.080046][ T5904] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 248.100068][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.131073][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 248.137900][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 248.145769][ T5904] usb 3-1: can't read configurations, error -61 [ 248.149104][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.167233][ T5904] usb usb3-port1: unable to enumerate USB device [ 248.236782][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 248.459497][ T5955] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 248.468669][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.511670][ T5924] usb 2-1: config 0 descriptor?? [ 248.516947][ T5955] usb 1-1: Product: syz [ 248.530094][ T5955] usb 1-1: Manufacturer: syz [ 248.537808][ T5955] usb 1-1: SerialNumber: syz [ 248.594434][ T5955] usb 1-1: config 0 descriptor?? [ 248.846257][ T5955] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.926875][ T5924] chicony 0003:04F2:0418.000B: reserved main item tag 0xe [ 248.958656][ T5924] chicony 0003:04F2:0418.000B: hidraw0: USB HID v0.01 Device [HID 04f2:0418] on usb-dummy_hcd.1-1/input0 [ 249.120860][ T8177] openvswitch: netlink: Key type 173 is out of range max 32 [ 249.151883][ T5924] usb 2-1: USB disconnect, device number 34 [ 250.060660][ T5904] usb 4-1: USB disconnect, device number 23 [ 250.090060][ T5955] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 250.250086][ T8186] fuse: Bad value for 'fd' [ 250.550556][ T5904] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 250.606342][ T1214] usb 1-1: USB disconnect, device number 32 [ 250.707720][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 250.717729][ T5925] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 250.729266][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 250.760548][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 250.793357][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 250.805383][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.815991][ T5904] usb 4-1: Product: syz [ 250.825010][ T5904] usb 4-1: Manufacturer: syz [ 250.925848][ T5925] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 251.329995][ T8201] CIFS: VFS: Malformed UNC in devname [ 251.335557][ T5904] usb 4-1: SerialNumber: syz [ 251.346298][ T5904] usb 4-1: config 0 descriptor?? [ 251.411076][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.754464][ T8206] fuse: Bad value for 'user_id' [ 251.761357][ T5925] usb 2-1: config 0 descriptor?? [ 251.777228][ T8206] fuse: Bad value for 'user_id' [ 252.027758][ T5897] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 252.048435][ T5925] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 252.152200][ T5925] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 252.167233][ T5925] [drm] Initialized udl on minor 2 [ 252.206917][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 252.227034][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.249761][ T5897] usb 1-1: config 0 descriptor?? [ 252.302691][ T5897] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 252.497852][ T8204] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.500904][ T5925] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 252.891954][ T5897] pwc: Failed to set LED on/off time (-71) [ 252.975337][ T5897] pwc: send_video_command error -71 [ 252.985008][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 252.994669][ T5897] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 253.000664][ T5925] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 253.033153][ T5924] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.055483][ T5924] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 253.082059][ T5925] usb 2-1: USB disconnect, device number 35 [ 253.090590][ T5897] usb 1-1: USB disconnect, device number 33 [ 253.217709][ T5926] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 253.491282][ T5926] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 253.549799][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 253.590278][ T5926] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.793889][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 253.793906][ T30] audit: type=1326 audit(1750122928.671:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 253.834451][ T5926] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.834475][ T30] audit: type=1326 audit(1750122928.671:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 253.927386][ T30] audit: type=1326 audit(1750122928.711:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 253.949553][ T5926] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.950317][ T30] audit: type=1326 audit(1750122928.711:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 253.973135][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.017705][ T30] audit: type=1326 audit(1750122928.711:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 254.039893][ T30] audit: type=1326 audit(1750122928.711:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 254.064063][ T30] audit: type=1326 audit(1750122928.711:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 254.093750][ T30] audit: type=1326 audit(1750122928.711:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 254.121905][ T30] audit: type=1326 audit(1750122928.711:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 254.144491][ T30] audit: type=1326 audit(1750122928.791:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 254.166642][ T5904] usb 4-1: USB disconnect, device number 24 [ 254.173940][ T5955] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 254.183314][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.192494][ T5926] usb 3-1: invalid MIDI out EP 0 [ 254.278808][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.349326][ T5955] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.367490][ T5955] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= e.63 [ 254.378709][ T5955] usb 2-1: New USB device strings: Mfr=138, Product=166, SerialNumber=0 [ 254.412207][ T5955] usb 2-1: Product: syz [ 254.417115][ T5955] usb 2-1: Manufacturer: syz [ 254.443976][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.446247][ T5955] usb 2-1: config 0 descriptor?? [ 254.495229][ T5926] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 254.512171][ T5955] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 254.526828][ T5926] usb 3-1: USB disconnect, device number 35 [ 254.557724][ T5897] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 254.721981][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 254.745932][ T5897] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 254.776651][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.811397][ T5897] usb 5-1: Product: syz [ 254.829995][ T5897] usb 5-1: Manufacturer: syz [ 254.834867][ T5897] usb 5-1: SerialNumber: syz [ 254.856113][ T5897] usb 5-1: config 0 descriptor?? [ 254.891260][ T5897] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 255.114917][ T8236] fuse: Bad value for 'fd' [ 255.278541][ T8241] CIFS: VFS: Malformed UNC in devname [ 255.430777][ T5926] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 255.607884][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 255.618989][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 255.633102][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 255.646236][ T5926] usb 4-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 255.662470][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.672294][ T5926] usb 4-1: Product: syz [ 255.676749][ T5926] usb 4-1: Manufacturer: syz [ 255.683875][ T5926] usb 4-1: SerialNumber: syz [ 255.695515][ T5926] usb 4-1: config 0 descriptor?? [ 255.771119][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.777840][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.030859][ T8245] fuse: Bad value for 'user_id' [ 256.091068][ T8245] fuse: Bad value for 'user_id' [ 256.208096][ T5897] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 256.760510][ T5897] usb 2-1: USB disconnect, device number 36 [ 256.767708][ T5955] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 256.960416][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 256.975715][ T5955] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.999338][ T5955] usb 3-1: config 0 has no interface number 0 [ 257.014385][ T5955] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.040973][ T5955] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.058514][ T5955] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 257.069488][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.083555][ T5955] usb 3-1: config 0 descriptor?? [ 257.207818][ T5897] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 257.304962][ T5924] usb 5-1: USB disconnect, device number 30 [ 257.378367][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 257.393322][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.414165][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 257.469732][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 257.538451][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 257.617796][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.663247][ T5897] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 257.672555][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 257.680777][ T5897] usb 2-1: Product: syz [ 257.685049][ T5897] usb 2-1: Manufacturer: syz [ 257.689826][ T5897] usb 2-1: SerialNumber: syz [ 257.710126][ T5897] usb 2-1: config 0 descriptor?? [ 257.791225][ T8265] FAULT_INJECTION: forcing a failure. [ 257.791225][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.825757][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.4.694 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 257.825785][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.825797][ T8265] Call Trace: [ 257.825805][ T8265] [ 257.825813][ T8265] dump_stack_lvl+0x189/0x250 [ 257.825851][ T8265] ? __pfx____ratelimit+0x10/0x10 [ 257.825886][ T8265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.825915][ T8265] ? __pfx__printk+0x10/0x10 [ 257.825936][ T8265] ? __might_fault+0xb0/0x130 [ 257.825965][ T8265] should_fail_ex+0x414/0x560 [ 257.825994][ T8265] _copy_from_iter+0x1db/0x16f0 [ 257.826027][ T8265] ? rcu_is_watching+0x15/0xb0 [ 257.826057][ T8265] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 257.826079][ T8265] ? __pfx__copy_from_iter+0x10/0x10 [ 257.826109][ T8265] ? __build_skb_around+0x257/0x3e0 [ 257.826134][ T8265] ? netlink_sendmsg+0x642/0xb30 [ 257.826155][ T8265] ? skb_put+0x11b/0x210 [ 257.826181][ T8265] netlink_sendmsg+0x6b2/0xb30 [ 257.826212][ T8265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.826237][ T8265] ? __import_iovec+0x5d4/0x7f0 [ 257.826254][ T8265] ? aa_sock_msg_perm+0x94/0x160 [ 257.826280][ T8265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.826304][ T8265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.826327][ T8265] __sock_sendmsg+0x21c/0x270 [ 257.826359][ T8265] ____sys_sendmsg+0x505/0x830 [ 257.826389][ T8265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.826429][ T8265] ___sys_sendmsg+0x21f/0x2a0 [ 257.826456][ T8265] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.826514][ T8265] ? __fget_files+0x2a/0x420 [ 257.826535][ T8265] ? __fget_files+0x3a0/0x420 [ 257.826567][ T8265] __sys_sendmsg+0x164/0x220 [ 257.826592][ T8265] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.826630][ T8265] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 257.826660][ T8265] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.826690][ T8265] __do_fast_syscall_32+0xb6/0x2b0 [ 257.826709][ T8265] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.826740][ T8265] do_fast_syscall_32+0x34/0x80 [ 257.826758][ T8265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.826781][ T8265] RIP: 0023:0xf7f47539 [ 257.826798][ T8265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 257.826814][ T8265] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 257.826835][ T8265] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 257.826848][ T8265] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.826860][ T8265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.826871][ T8265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.826889][ T8265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.826916][ T8265] [ 258.125118][ T5926] usb 4-1: USB disconnect, device number 25 [ 258.150003][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.238265][ T5955] uclogic 0003:28BD:0071.000C: pen parameters not found [ 258.268154][ T5955] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 258.309115][ T5897] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 258.318161][ T5897] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 258.412845][ T8259] netlink: 'syz.0.692': attribute type 12 has an invalid length. [ 258.582511][ T5897] usb 3-1: USB disconnect, device number 36 [ 258.749003][ T8267] netlink: 164 bytes leftover after parsing attributes in process `syz.1.691'. [ 258.775880][ T8267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'. [ 258.898314][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 258.929597][ T8277] CIFS: VFS: Malformed UNC in devname [ 259.139157][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 259.167657][ T10] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 259.182624][ T10] usb 5-1: config 0 has no interface number 0 [ 259.235591][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=d0.68 [ 259.284477][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.333559][ T10] usb 5-1: Product: syz [ 259.347447][ T10] usb 5-1: Manufacturer: syz [ 259.372536][ T10] usb 5-1: SerialNumber: syz [ 259.438827][ T10] usb 5-1: config 0 descriptor?? [ 259.511934][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 259.613304][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.622112][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.738289][ T8272] loop7: detected capacity change from 0 to 16384 [ 259.894449][ T10] gspca_sn9c2028: read1 error -71 [ 259.904441][ T10] gspca_sn9c2028: read1 error -71 [ 259.969234][ T10] gspca_sn9c2028: read1 error -71 [ 260.040207][ T10] sn9c2028 5-1:0.123: probe with driver sn9c2028 failed with error -71 [ 260.077286][ T10] usb 5-1: USB disconnect, device number 31 [ 260.864112][ T5924] usb 2-1: USB disconnect, device number 37 [ 261.765376][ T8315] FAULT_INJECTION: forcing a failure. [ 261.765376][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.835373][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.1.708 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 261.835400][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.835412][ T8315] Call Trace: [ 261.835420][ T8315] [ 261.835427][ T8315] dump_stack_lvl+0x189/0x250 [ 261.835459][ T8315] ? __pfx____ratelimit+0x10/0x10 [ 261.835485][ T8315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.835511][ T8315] ? __pfx__printk+0x10/0x10 [ 261.835530][ T8315] ? __might_fault+0xb0/0x130 [ 261.835559][ T8315] should_fail_ex+0x414/0x560 [ 261.835591][ T8315] _copy_from_iter+0x1db/0x16f0 [ 261.835627][ T8315] ? __pfx__copy_from_iter+0x10/0x10 [ 261.835652][ T8315] ? file_tty_write+0x2a8/0x990 [ 261.835677][ T8315] ? file_tty_write+0x2a8/0x990 [ 261.835707][ T8315] ? file_tty_write+0x2e8/0x990 [ 261.835735][ T8315] ? rcu_is_watching+0x15/0xb0 [ 261.835764][ T8315] ? kfree+0x4d/0x440 [ 261.835798][ T8315] file_tty_write+0x486/0x990 [ 261.835838][ T8315] vfs_write+0x548/0xa90 [ 261.835861][ T8315] ? __pfx_tty_write+0x10/0x10 [ 261.835886][ T8315] ? __pfx_vfs_write+0x10/0x10 [ 261.835921][ T8315] ? __fget_files+0x2a/0x420 [ 261.835948][ T8315] ksys_write+0x145/0x250 [ 261.835967][ T8315] ? __pfx_ksys_write+0x10/0x10 [ 261.835985][ T8315] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 261.836016][ T8315] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.836047][ T8315] __do_fast_syscall_32+0xb6/0x2b0 [ 261.836066][ T8315] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.836096][ T8315] do_fast_syscall_32+0x34/0x80 [ 261.836115][ T8315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.836138][ T8315] RIP: 0023:0xf7fe8539 [ 261.836154][ T8315] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 261.836171][ T8315] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 261.836191][ T8315] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 261.836205][ T8315] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.836217][ T8315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.836227][ T8315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.836239][ T8315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.836268][ T8315] [ 262.181831][ T8322] FAULT_INJECTION: forcing a failure. [ 262.181831][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.214157][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.0.711 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 262.214186][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.214198][ T8322] Call Trace: [ 262.214206][ T8322] [ 262.214214][ T8322] dump_stack_lvl+0x189/0x250 [ 262.214261][ T8322] ? __pfx____ratelimit+0x10/0x10 [ 262.214290][ T8322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.214318][ T8322] ? __pfx__printk+0x10/0x10 [ 262.214340][ T8322] ? __might_fault+0xb0/0x130 [ 262.214371][ T8322] should_fail_ex+0x414/0x560 [ 262.214400][ T8322] _copy_to_iter+0x3f5/0x16f0 [ 262.214432][ T8322] ? timers_stop+0x1a7/0x1f0 [ 262.214464][ T8322] ? __pfx__copy_to_iter+0x10/0x10 [ 262.214492][ T8322] ? traverse+0x537/0x570 [ 262.214532][ T8322] seq_read_iter+0x2e4/0xe10 [ 262.214562][ T8322] ? _parse_integer_limit+0x1ae/0x1f0 [ 262.214593][ T8322] ? __asan_memset+0x22/0x50 [ 262.214626][ T8322] seq_read+0x2e2/0x3d0 [ 262.214662][ T8322] ? __pfx_seq_read+0x10/0x10 [ 262.214703][ T8322] ? rw_verify_area+0x258/0x650 [ 262.214735][ T8322] vfs_readv+0x5a7/0x850 [ 262.214759][ T8322] ? __pfx_seq_read+0x10/0x10 [ 262.214789][ T8322] ? __pfx_vfs_readv+0x10/0x10 [ 262.214827][ T8322] ? __fget_files+0x2a/0x420 [ 262.214853][ T8322] ? __fget_files+0x3a0/0x420 [ 262.214873][ T8322] ? __fget_files+0x2a/0x420 [ 262.214908][ T8322] __ia32_compat_sys_preadv+0x1bf/0x2c0 [ 262.214934][ T8322] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 262.214959][ T8322] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 262.214989][ T8322] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.215020][ T8322] __do_fast_syscall_32+0xb6/0x2b0 [ 262.215040][ T8322] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.215072][ T8322] do_fast_syscall_32+0x34/0x80 [ 262.215091][ T8322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.215115][ T8322] RIP: 0023:0xf7fc4539 [ 262.215131][ T8322] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 262.215149][ T8322] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 262.215169][ T8322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 262.215183][ T8322] RDX: 0000000000000001 RSI: 0000000000000045 RDI: 0000000000000000 [ 262.215195][ T8322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.215207][ T8322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.215224][ T8322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.215253][ T8322] [ 262.684901][ T8330] CIFS: VFS: Malformed UNC in devname [ 263.078378][ T1214] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 263.260474][ T1214] usb 4-1: Using ep0 maxpacket: 16 [ 263.269892][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.285965][ T1214] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 263.315718][ T1214] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.347612][ T1214] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 263.395593][ T1214] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 263.414118][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.437612][ T1214] usb 4-1: Product: syz [ 263.441833][ T1214] usb 4-1: Manufacturer: syz [ 263.475593][ T1214] usb 4-1: SerialNumber: syz [ 263.489999][ T8350] vivid-001: disconnect [ 263.503083][ T8350] vivid-001: reconnect [ 263.529123][ T1214] usb 4-1: config 0 descriptor?? [ 263.554074][ T1214] usb 4-1: selecting invalid altsetting 1 [ 263.570112][ T1214] usb 4-1: Can not set alternate setting to 1, error: -22 [ 263.587505][ T1214] synaptics_usb 4-1:0.0: probe with driver synaptics_usb failed with error -22 [ 263.783162][ T10] usb 4-1: USB disconnect, device number 26 [ 263.810724][ T5897] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 263.989611][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.038285][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 264.065154][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 264.079365][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 264.091965][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.142647][ T5897] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 264.180362][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 264.200673][ T5897] usb 2-1: Product: syz [ 264.204949][ T5897] usb 2-1: Manufacturer: syz [ 264.212958][ T5897] usb 2-1: SerialNumber: syz [ 264.229645][ T5897] usb 2-1: config 0 descriptor?? [ 264.487126][ T5926] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 264.512439][ T5897] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 264.613971][ T5897] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 264.805293][ T5897] radio-si470x 2-1:0.0: software version 183, hardware version 139 [ 264.829160][ T5926] usb 3-1: config 0 has no interfaces? [ 264.863444][ T8371] FAULT_INJECTION: forcing a failure. [ 264.863444][ T8371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.866447][ T5897] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 264.877821][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.4.729 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 264.877848][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.877860][ T8371] Call Trace: [ 264.877867][ T8371] [ 264.877878][ T8371] dump_stack_lvl+0x189/0x250 [ 264.877911][ T8371] ? __pfx____ratelimit+0x10/0x10 [ 264.877939][ T8371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.877967][ T8371] ? __pfx__printk+0x10/0x10 [ 264.877997][ T8371] ? fs_reclaim_acquire+0x7d/0x100 [ 264.878028][ T8371] should_fail_ex+0x414/0x560 [ 264.878057][ T8371] prepare_alloc_pages+0x213/0x610 [ 264.878086][ T8371] __alloc_frozen_pages_noprof+0x123/0x370 [ 264.878114][ T8371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 264.878141][ T8371] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.878171][ T8371] ? policy_nodemask+0x27c/0x720 [ 264.878188][ T8371] ? __lock_acquire+0xab9/0xd20 [ 264.878218][ T8371] alloc_pages_mpol+0x232/0x4a0 [ 264.878242][ T8371] vma_alloc_folio_noprof+0xe4/0x200 [ 264.878264][ T8371] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 264.878295][ T8371] folio_prealloc+0x30/0x180 [ 264.878316][ T8371] __handle_mm_fault+0x2c88/0x5620 [ 264.878364][ T8371] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.878404][ T8371] ? follow_page_pte+0x8d6/0x14b0 [ 264.878441][ T8371] handle_mm_fault+0x40a/0x8e0 [ 264.878479][ T8371] __get_user_pages+0x1af4/0x30b0 [ 264.878538][ T8371] ? __pfx___get_user_pages+0x10/0x10 [ 264.878572][ T8371] get_user_pages_remote+0x2f9/0xaa0 [ 264.878609][ T8371] ? __pfx_get_user_pages_remote+0x10/0x10 [ 264.878639][ T8371] ? mmap_read_lock_maybe_expand+0x250/0x3c0 [ 264.878664][ T8371] get_arg_page+0x104/0x330 [ 264.878693][ T8371] ? __pfx_get_arg_page+0x10/0x10 [ 264.878729][ T8371] copy_strings+0x33f/0x560 [ 264.878762][ T8371] do_execveat_common+0x43d/0x6a0 [ 264.878791][ T8371] __ia32_compat_sys_execve+0x99/0xb0 [ 264.878811][ T8371] __do_fast_syscall_32+0xb6/0x2b0 [ 264.878830][ T8371] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.878860][ T8371] do_fast_syscall_32+0x34/0x80 [ 264.878878][ T8371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.878899][ T8371] RIP: 0023:0xf7f47539 [ 264.878916][ T8371] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 264.878932][ T8371] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 264.878952][ T8371] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 264.878965][ T8371] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.878977][ T8371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.878993][ T8371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 264.879004][ T8371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.879031][ T8371] [ 264.940896][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 265.034610][ T5897] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 265.363316][ T8384] CIFS: VFS: Malformed UNC in devname [ 265.454793][ T8385] openvswitch: netlink: Key type 173 is out of range max 32 [ 265.816737][ T8390] netlink: 'syz.4.734': attribute type 2 has an invalid length. [ 265.858748][ T5897] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 265.870755][ T5897] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 265.893466][ T5897] usb 2-1: USB disconnect, device number 38 [ 265.913250][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.945966][ T5926] usb 3-1: Product: syz [ 265.956790][ T5926] usb 3-1: Manufacturer: syz [ 265.995035][ T5926] usb 3-1: SerialNumber: syz [ 266.099022][ T5926] usb 3-1: config 0 descriptor?? [ 266.187822][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 266.485190][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.507146][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.538471][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.589743][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.615946][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.642716][ T10] usb 5-1: config 0 descriptor?? [ 266.764385][ T8394] loop5: detected capacity change from 0 to 1015 [ 266.986749][ T8396] fuse: Unknown parameter '0x0000000000000004' [ 267.244340][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x3 [ 267.253195][ T10] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 267.277976][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 267.357782][ T5926] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 267.517640][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 267.544078][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 267.593725][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 267.636040][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 267.661300][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.683874][ T5924] usb 3-1: USB disconnect, device number 37 [ 267.713968][ T5926] usb 1-1: Product: syz [ 267.758372][ T5926] usb 1-1: Manufacturer: syz [ 267.766850][ T5926] usb 1-1: SerialNumber: syz [ 267.811306][ T5926] usb 1-1: config 0 descriptor?? [ 268.141347][ T8405] fuse: Bad value for 'user_id' [ 268.146835][ T8405] fuse: Bad value for 'user_id' [ 268.178199][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 268.178217][ T30] audit: type=1326 audit(1750122943.061:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.2.740" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 268.367044][ T10] usb 5-1: USB disconnect, device number 32 [ 268.630608][ T1214] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 268.819103][ T1214] usb 3-1: device descriptor read/64, error -71 [ 269.089814][ T1214] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 269.210731][ T8429] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 269.233730][ T8429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.744'. [ 269.317968][ T1214] usb 3-1: device descriptor read/64, error -71 [ 269.469243][ T1214] usb usb3-port1: attempt power cycle [ 269.898113][ T5926] usb 1-1: USB disconnect, device number 34 [ 269.898386][ T1214] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 269.957703][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 269.966899][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.987905][ T1214] usb 3-1: device descriptor read/8, error -71 [ 270.089563][ T5924] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 270.147693][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 270.169474][ T10] usb 2-1: config 0 has no interfaces? [ 270.180492][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.208167][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.212216][ T8442] FAULT_INJECTION: forcing a failure. [ 270.212216][ T8442] name failslab, interval 1, probability 0, space 0, times 0 [ 270.216187][ T10] usb 2-1: Product: syz [ 270.216205][ T10] usb 2-1: Manufacturer: syz [ 270.216220][ T10] usb 2-1: SerialNumber: syz [ 270.238446][ T1214] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 270.250155][ T10] usb 2-1: config 0 descriptor?? [ 270.251894][ T8442] CPU: 1 UID: 0 PID: 8442 Comm: syz.4.749 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 270.251922][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.251935][ T8442] Call Trace: [ 270.251942][ T8442] [ 270.251950][ T8442] dump_stack_lvl+0x189/0x250 [ 270.251983][ T8442] ? __pfx____ratelimit+0x10/0x10 [ 270.252012][ T8442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.252039][ T8442] ? __pfx__printk+0x10/0x10 [ 270.252057][ T8442] ? tomoyo_socket_listen_permission+0x24b/0x330 [ 270.252088][ T8442] ? look_up_lock_class+0x74/0x170 [ 270.252122][ T8442] should_fail_ex+0x414/0x560 [ 270.252150][ T8442] should_failslab+0xa8/0x100 [ 270.252171][ T8442] __kmalloc_noprof+0xcb/0x4f0 [ 270.252188][ T8442] ? io_alloc_ocqe+0x6f/0x550 [ 270.252216][ T8442] io_alloc_ocqe+0x6f/0x550 [ 270.252237][ T8442] ? io_cqe_cache_refill+0x1a8/0x240 [ 270.252264][ T8442] io_cqe_overflow_locked+0x26/0x40 [ 270.252293][ T8442] __io_submit_flush_completions+0x248/0xe40 [ 270.252317][ T8442] ? io_issue_sqe+0x5bf/0xfd0 [ 270.252346][ T8442] io_submit_sqes+0x181b/0x1c50 [ 270.252395][ T8442] __se_sys_io_uring_enter+0x2df/0x2b20 [ 270.252436][ T8442] ? ksys_write+0x1cb/0x250 [ 270.252456][ T8442] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 270.252483][ T8442] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 270.252501][ T8442] ? __pfx_vfs_write+0x10/0x10 [ 270.252531][ T8442] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.252553][ T8442] ? __fget_files+0x3a0/0x420 [ 270.252579][ T8442] ? fput+0xa0/0xd0 [ 270.252603][ T8442] ? ksys_write+0x22a/0x250 [ 270.252627][ T8442] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 270.252655][ T8442] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 270.252681][ T8442] __do_fast_syscall_32+0xb6/0x2b0 [ 270.252700][ T8442] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.252730][ T8442] do_fast_syscall_32+0x34/0x80 [ 270.252748][ T8442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.252769][ T8442] RIP: 0023:0xf7f47539 [ 270.252786][ T8442] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 270.252802][ T8442] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 270.252822][ T8442] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002d3e [ 270.252835][ T8442] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 270.252846][ T8442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.252856][ T8442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.252868][ T8442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.252895][ T8442] [ 270.305283][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.394258][ T1214] usb 3-1: device descriptor read/8, error -71 [ 270.557671][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.575178][ T5924] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 270.593718][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.602341][ T5924] usb 4-1: Product: syz [ 270.606533][ T5924] usb 4-1: Manufacturer: syz [ 270.612851][ T5924] usb 4-1: SerialNumber: syz [ 270.697847][ T5924] usb 4-1: config 0 descriptor?? [ 270.699646][ T1214] usb usb3-port1: unable to enumerate USB device [ 270.710536][ T5924] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 270.739822][ T5924] usb 4-1: No valid video chain found. [ 270.742180][ T8448] openvswitch: netlink: Key type 173 is out of range max 32 [ 270.796447][ T5955] usb 2-1: USB disconnect, device number 39 [ 271.184006][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.213609][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.512273][ T1214] usb 4-1: USB disconnect, device number 27 [ 271.873645][ T8464] bridge1: entered promiscuous mode [ 272.398017][ T8469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.752'. [ 273.061189][ T8478] FAULT_INJECTION: forcing a failure. [ 273.061189][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 273.091170][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.0.759 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 273.091198][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.091209][ T8478] Call Trace: [ 273.091216][ T8478] [ 273.091224][ T8478] dump_stack_lvl+0x189/0x250 [ 273.091257][ T8478] ? __pfx____ratelimit+0x10/0x10 [ 273.091285][ T8478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.091314][ T8478] ? __pfx__printk+0x10/0x10 [ 273.091340][ T8478] ? __pfx___might_resched+0x10/0x10 [ 273.091373][ T8478] should_fail_ex+0x414/0x560 [ 273.091402][ T8478] should_failslab+0xa8/0x100 [ 273.091424][ T8478] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 273.091444][ T8478] ? __alloc_skb+0x112/0x2d0 [ 273.091477][ T8478] __alloc_skb+0x112/0x2d0 [ 273.091502][ T8478] netlink_sendmsg+0x5c6/0xb30 [ 273.091534][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.091560][ T8478] ? __import_iovec+0x5d4/0x7f0 [ 273.091577][ T8478] ? aa_sock_msg_perm+0x94/0x160 [ 273.091603][ T8478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.091627][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.091650][ T8478] __sock_sendmsg+0x21c/0x270 [ 273.091683][ T8478] ____sys_sendmsg+0x505/0x830 [ 273.091712][ T8478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.091752][ T8478] ___sys_sendmsg+0x21f/0x2a0 [ 273.091778][ T8478] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.091837][ T8478] ? __fget_files+0x2a/0x420 [ 273.091855][ T8478] ? __fget_files+0x3a0/0x420 [ 273.091881][ T8478] __sys_sendmsg+0x164/0x220 [ 273.091905][ T8478] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.091941][ T8478] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.091970][ T8478] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.091996][ T8478] __do_fast_syscall_32+0xb6/0x2b0 [ 273.092015][ T8478] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.092045][ T8478] do_fast_syscall_32+0x34/0x80 [ 273.092064][ T8478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.092083][ T8478] RIP: 0023:0xf7fc4539 [ 273.092101][ T8478] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.092117][ T8478] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 273.092136][ T8478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 273.092150][ T8478] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.092160][ T8478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.092170][ T8478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.092181][ T8478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.092206][ T8478] [ 274.266135][ T8505] fuse: Unknown parameter 'user_i00000000000000000000' [ 274.923238][ T8517] sctp: [Deprecated]: syz.3.772 (pid 8517) Use of int in maxseg socket option. [ 274.923238][ T8517] Use struct sctp_assoc_value instead [ 275.340142][ T5897] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 275.529684][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 275.561770][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 275.587805][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 275.607745][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 275.636297][ T5897] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 275.645938][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.670615][ T5897] usb 4-1: Product: syz [ 275.720093][ T5897] usb 4-1: Manufacturer: syz [ 275.734471][ T5897] usb 4-1: SerialNumber: syz [ 275.760535][ T5897] usb 4-1: config 0 descriptor?? [ 275.817308][ T5897] iguanair 4-1:0.0: failed to get version [ 275.827029][ T5897] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 275.844666][ T8536] openvswitch: netlink: Key type 173 is out of range max 32 [ 275.858191][ T8533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'. [ 275.889910][ T8533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.776'. [ 275.997465][ T5897] usb 4-1: USB disconnect, device number 28 [ 276.874124][ T8543] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 276.993080][ T8528] syz.2.776 (8528): drop_caches: 2 [ 277.327878][ T5917] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 277.332217][ T8552] tipc: Started in network mode [ 277.341486][ T8552] tipc: Node identity 2, cluster identity 4711 [ 277.419043][ T8552] tipc: Node number set to 2 [ 277.560294][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.570876][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 277.591316][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.619454][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 277.668254][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.679298][ T5917] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 277.687399][ T5917] usb 4-1: Manufacturer: syz [ 277.703919][ T5917] usb 4-1: config 0 descriptor?? [ 278.759600][ T5955] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 278.932867][ T5955] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 278.953372][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.966014][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 278.982513][ T5955] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 279.006315][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.041361][ T5955] usb 2-1: config 0 descriptor?? [ 279.227855][ T5924] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 279.289183][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.324755][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.533570][ T5924] usb 5-1: config 0 has no interfaces? [ 279.548865][ T5924] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 279.558958][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.570124][ T5924] usb 5-1: Product: syz [ 279.578670][ T5924] usb 5-1: Manufacturer: syz [ 279.583464][ T5924] usb 5-1: SerialNumber: syz [ 279.622587][ T5924] usb 5-1: config 0 descriptor?? [ 279.898096][ T8577] pimreg: entered allmulticast mode [ 279.906492][ T8577] pimreg: left allmulticast mode [ 280.058025][ T5897] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 280.223920][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 280.275623][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 280.311616][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.331998][ T5897] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 280.340427][ T5897] usb 1-1: config 7 has no interface number 0 [ 280.346691][ T5897] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 280.357697][ T5917] rc_core: IR keymap rc-hauppauge not found [ 280.371414][ T5897] usb 1-1: config 7 interface 187 has no altsetting 0 [ 280.378650][ T5917] Registered IR keymap rc-empty [ 280.378820][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.398432][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.423119][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 280.475790][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 280.501340][ T5897] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 280.511316][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.519717][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.532754][ T5897] usb 1-1: Product: syz [ 280.542369][ T5897] usb 1-1: Manufacturer: syz [ 280.549920][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.559485][ T5897] usb 1-1: SerialNumber: syz [ 280.577789][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.589584][ T8586] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 280.598648][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.617759][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.638527][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.667933][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.700112][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.727752][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.749869][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 280.763993][ T8596] netlink: 96 bytes leftover after parsing attributes in process `syz.2.796'. [ 280.775642][ T5917] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 280.801052][ T5917] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 280.804112][ T5897] usb 1-1: Limiting number of CPorts to U8_MAX [ 280.825377][ T5917] usb 4-1: USB disconnect, device number 29 [ 280.855376][ T5897] usb 1-1: Unknown endpoint type found, address 0x07 [ 280.889179][ T5897] usb 1-1: Not enough endpoints found in device, aborting! [ 281.066403][ T1214] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 281.237785][ T1214] usb 3-1: Using ep0 maxpacket: 32 [ 281.251885][ T1214] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 281.262146][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.278344][ T1214] usb 3-1: config 0 descriptor?? [ 281.347747][ T5897] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 281.486906][ T1214] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 281.497797][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 281.504635][ T1214] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 281.517962][ T1214] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 281.535233][ T5897] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 281.551114][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.559426][ T5897] usb 4-1: Product: syz [ 281.563637][ T5897] usb 4-1: Manufacturer: syz [ 281.569495][ T5897] usb 4-1: SerialNumber: syz [ 281.572832][ T5955] usbhid 2-1:0.0: can't add hid device: -71 [ 281.585468][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 281.587304][ T5897] r8152-cfgselector 4-1: Unknown version 0x0000 [ 281.606507][ T5955] usb 2-1: USB disconnect, device number 40 [ 281.616106][ T5897] r8152-cfgselector 4-1: config 0 descriptor?? [ 281.674367][ T8600] netlink: 72 bytes leftover after parsing attributes in process `syz.1.798'. [ 281.685945][ T8601] netlink: 72 bytes leftover after parsing attributes in process `syz.1.798'. [ 281.742511][ T8596] xt_CONNSECMARK: invalid mode: 0 [ 281.854775][ T8606] netlink: 'syz.1.799': attribute type 13 has an invalid length. [ 282.000255][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.017128][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.045265][ T5955] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 282.135813][ T8606] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.146297][ T8606] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.155327][ T8606] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.164339][ T8606] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.373754][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 282.386478][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 282.417780][ T5917] usb 5-1: USB disconnect, device number 33 [ 282.424878][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 282.504778][ T10] usb 1-1: USB disconnect, device number 35 [ 283.193730][ T8632] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.806' sets config #1 [ 284.051220][ T8646] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 284.074309][ T8645] fuse: Unknown parameter '0x0000000000000004' [ 284.143224][ T8646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.280088][ T8649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.332261][ T8649] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 284.348476][ T8649] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 284.462716][ T8646] gretap1: entered promiscuous mode [ 284.510729][ T8646] bond1: (slave gretap1): making interface the new active one [ 284.537296][ T8646] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 284.607739][ T5917] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 284.879926][ T8653] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 284.957676][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 284.980989][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 285.157640][ T5924] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 285.165409][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 285.354218][ T5917] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 285.368593][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.377489][ T5917] usb 2-1: Product: syz [ 285.387367][ T5917] usb 2-1: Manufacturer: syz [ 285.392954][ T5917] usb 2-1: SerialNumber: syz [ 285.403024][ T5917] usb 2-1: config 0 descriptor?? [ 285.416231][ T5924] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.425760][ T5924] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 285.438898][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.449496][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 285.461330][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 285.481754][ T5924] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.496666][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.507733][ T5955] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 285.537791][ T5924] usb 5-1: Product: syz [ 285.542005][ T5924] usb 5-1: Manufacturer: syz [ 285.640986][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 285.646275][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 285.702522][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 285.703749][ T8665] fuse: Bad value for 'user_id' [ 285.715102][ T8665] fuse: Bad value for 'user_id' [ 285.829739][ T5955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.839011][ T5955] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 285.847166][ T5955] usb 4-1: config 7 has no interface number 0 [ 285.862254][ T5924] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 285.904958][ T5924] cdc_wdm 5-1:1.0: Unknown control protocol [ 285.917283][ T5955] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 285.997609][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.019879][ T5955] usb 4-1: Product: syz [ 286.024126][ T5955] usb 4-1: Manufacturer: syz [ 286.119739][ T5955] usb 4-1: SerialNumber: syz [ 286.139191][ T9] usb 5-1: USB disconnect, device number 34 [ 286.140169][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 286.151956][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 286.158062][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 286.374592][ T8654] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 286.508457][ T5955] usb 4-1: USB disconnect, device number 31 [ 287.429581][ T5917] usb 2-1: USB disconnect, device number 41 [ 287.465157][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.751885][ T8723] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 291.018941][ T8730] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[8730] [ 291.067803][ T5897] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 291.146577][ T30] audit: type=1800 audit(1750122966.021:652): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.828" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 291.327879][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.359870][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.370582][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.390901][ T5897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.420465][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.471858][ T5897] usb 4-1: config 0 descriptor?? [ 291.567712][ T5955] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 291.744389][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 291.753209][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 291.765083][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 291.792179][ T5955] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 291.806743][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.825275][ T5955] usb 2-1: Product: syz [ 291.829923][ T5955] usb 2-1: Manufacturer: syz [ 291.841969][ T5955] usb 2-1: SerialNumber: syz [ 291.860077][ T5955] usb 2-1: config 0 descriptor?? [ 291.886322][ T5897] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x3 [ 291.897465][ T5897] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 291.929649][ T5897] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 292.383881][ T8755] fuse: Bad value for 'user_id' [ 292.407863][ T8755] fuse: Bad value for 'user_id' [ 293.342285][ T10] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 294.398405][ T5955] usb 2-1: USB disconnect, device number 42 [ 294.474155][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.404705][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 296.230068][ T5904] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 296.307658][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 296.390655][ T5904] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 296.413408][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.463726][ T5904] usb 1-1: config 0 has no interface number 0 [ 296.472433][ T9] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 296.482161][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 296.497817][ T5904] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 296.511769][ T9] usb 5-1: can't read configurations, error -61 [ 296.521808][ T5904] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 296.536224][ T5904] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.549938][ T5904] usb 1-1: config 0 interface 52 has no altsetting 0 [ 296.559620][ T5904] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 296.569219][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 296.577323][ T5904] usb 1-1: SerialNumber: syz [ 296.591620][ T5904] usb 1-1: config 0 descriptor?? [ 296.650041][ T5897] usb 4-1: USB disconnect, device number 32 [ 296.663007][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 296.812334][ T5904] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 296.823389][ T5904] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 296.838411][ T9] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 296.851796][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 296.860161][ T9] usb 5-1: can't read configurations, error -61 [ 296.870113][ T9] usb usb5-port1: attempt power cycle [ 297.020840][ T5924] usb 1-1: USB disconnect, device number 36 [ 297.207735][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 297.229336][ T9] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 297.238925][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 297.246531][ T9] usb 5-1: can't read configurations, error -61 [ 297.378677][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 297.410235][ T9] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 297.430010][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 297.438009][ T9] usb 5-1: can't read configurations, error -61 [ 297.445549][ T9] usb usb5-port1: unable to enumerate USB device [ 297.548935][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 297.560290][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 297.601679][ T8799] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 297.877665][ T9] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 297.947654][ T5904] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 298.017605][ T9] usb 2-1: device descriptor read/64, error -71 [ 298.230901][ T5904] usb 4-1: device descriptor read/64, error -71 [ 298.368713][ T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 298.487678][ T5904] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 298.509031][ T9] usb 2-1: device descriptor read/64, error -71 [ 298.628911][ T9] usb usb2-port1: attempt power cycle [ 298.657870][ T5904] usb 4-1: device descriptor read/64, error -71 [ 298.705158][ T8811] "syz.2.862" (8811) uses obsolete ecb(arc4) skcipher [ 298.757249][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.864'. [ 298.784175][ T5904] usb usb4-port1: attempt power cycle [ 298.997892][ T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 299.018272][ T9] usb 2-1: device descriptor read/8, error -71 [ 299.079035][ T8827] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 299.107724][ T8827] netlink: 17 bytes leftover after parsing attributes in process `syz.0.865'. [ 299.128401][ T5904] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 299.204522][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 299.247614][ T5904] usb 4-1: device descriptor read/8, error -71 [ 299.287754][ T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 299.310557][ T9] usb 2-1: device descriptor read/8, error -71 [ 299.505857][ T9] usb usb2-port1: unable to enumerate USB device [ 299.557654][ T5904] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 299.578386][ T5904] usb 4-1: device descriptor read/8, error -71 [ 299.838089][ T5904] usb usb4-port1: unable to enumerate USB device [ 300.222004][ T8844] fuse: Unknown parameter 'fd0x0000000000000004' [ 300.617758][ T5904] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 301.023818][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 301.037712][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 301.064499][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 301.078041][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 301.088429][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.096518][ T5904] usb 4-1: Product: syz [ 301.101317][ T5904] usb 4-1: Manufacturer: syz [ 301.106101][ T5904] usb 4-1: SerialNumber: syz [ 301.261896][ T5904] usb 4-1: config 0 descriptor?? [ 301.657779][ T5955] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 301.798458][ T8869] fuse: Bad value for 'user_id' [ 301.852058][ T8869] fuse: Bad value for 'user_id' [ 301.933316][ T5955] usb 2-1: config 0 has no interfaces? [ 301.942066][ T5955] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 301.965691][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.986838][ T5955] usb 2-1: Product: syz [ 301.997751][ T5955] usb 2-1: Manufacturer: syz [ 302.015977][ T5955] usb 2-1: SerialNumber: syz [ 302.045485][ T5955] usb 2-1: config 0 descriptor?? [ 303.477751][ T5904] usb 4-1: USB disconnect, device number 37 [ 303.563159][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.634064][ T8879] block device autoloading is deprecated and will be removed. [ 304.134403][ T5904] usb 2-1: USB disconnect, device number 47 [ 304.238998][ T8894] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[8894] [ 304.769164][ T8904] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 304.859525][ T5936] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 304.997672][ T5936] usb 4-1: device descriptor read/64, error -71 [ 305.165190][ T5955] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 305.331077][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.337631][ T5936] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 305.341624][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 305.438675][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.517683][ T5936] usb 4-1: device descriptor read/64, error -71 [ 305.555256][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 305.570742][ T5955] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.580562][ T5955] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.588965][ T5955] usb 2-1: Manufacturer: syz [ 305.603403][ T5955] usb 2-1: config 0 descriptor?? [ 305.631639][ T5936] usb usb4-port1: attempt power cycle [ 305.977654][ T5936] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 306.008809][ T5936] usb 4-1: device descriptor read/8, error -71 [ 306.047888][ T8920] netlink: 'syz.2.890': attribute type 2 has an invalid length. [ 306.149168][ T8920] tipc: Enabling of bearer rejected, failed to enable media [ 306.286415][ T5936] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 306.340156][ T5936] usb 4-1: device descriptor read/8, error -71 [ 306.448798][ T5936] usb usb4-port1: unable to enumerate USB device [ 307.195317][ T8945] netlink: 'syz.0.896': attribute type 3 has an invalid length. [ 307.203437][ T8945] netlink: 666 bytes leftover after parsing attributes in process `syz.0.896'. [ 308.119168][ T5955] rc_core: IR keymap rc-hauppauge not found [ 308.126000][ T5955] Registered IR keymap rc-empty [ 308.145937][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.217055][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.248804][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 308.285760][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 308.666266][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.717686][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.880475][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.909067][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.949511][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.070220][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.097675][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.135875][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.170456][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.218036][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.236740][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 309.269882][ T5955] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 309.284489][ T5955] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.298396][ T5955] usb 2-1: USB disconnect, device number 48 [ 309.509225][ T8949] netlink: 'syz.3.898': attribute type 12 has an invalid length. [ 309.517013][ T8949] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.898'. [ 309.628596][ T5955] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 309.787737][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 309.801927][ T5955] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 309.847724][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.855965][ T5955] usb 2-1: Product: syz [ 309.884966][ T5955] usb 2-1: Manufacturer: syz [ 309.917697][ T5955] usb 2-1: SerialNumber: syz [ 309.931309][ T5955] usb 2-1: config 0 descriptor?? [ 309.945646][ T5955] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 310.457900][ T5955] gspca_sonixj: reg_w1 err -110 [ 310.517731][ T5955] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 310.662217][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.693105][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.000325][ T8989] loop8: detected capacity change from 0 to 7 [ 311.021316][ T8989] Dev loop8: unable to read RDB block 7 [ 311.027094][ T8989] loop8: unable to read partition table [ 311.059301][ T8989] loop8: partition table beyond EOD, truncated [ 311.065543][ T8989] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.133276][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 311.150799][ T8990] Dev loop8: unable to read RDB block 7 [ 311.156514][ T8990] loop8: unable to read partition table [ 311.162420][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 311.173270][ T8990] loop8: partition table beyond EOD, truncated [ 311.202459][ T8990] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.470293][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.481691][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.697667][ T5955] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 311.708029][ T5917] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 311.821256][ T9] usb 2-1: USB disconnect, device number 49 [ 311.849909][ T5955] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 311.858583][ T5917] usb 1-1: device descriptor read/64, error -71 [ 311.876715][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.903952][ T5955] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 311.914680][ T5955] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 311.926236][ T5955] usb 4-1: Manufacturer: syz [ 311.946785][ T5955] usb 4-1: config 0 descriptor?? [ 312.117993][ T5917] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 312.200890][ T5955] rc_core: IR keymap rc-hauppauge not found [ 312.248512][ T5955] Registered IR keymap rc-empty [ 312.258806][ T5955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 312.279023][ T5917] usb 1-1: device descriptor read/64, error -71 [ 312.287444][ T5955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 312.312630][ T5955] usb 4-1: USB disconnect, device number 42 [ 312.327643][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 312.388661][ T5917] usb usb1-port1: attempt power cycle [ 312.488276][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 312.502940][ T9] usb 2-1: config 0 has no interfaces? [ 312.511933][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 312.521708][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.537826][ T9] usb 2-1: Product: syz [ 312.560715][ T9] usb 2-1: Manufacturer: syz [ 312.579429][ T9] usb 2-1: SerialNumber: syz [ 312.596399][ T9] usb 2-1: config 0 descriptor?? [ 312.767723][ T5917] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 312.886778][ T5917] usb 1-1: device descriptor read/8, error -71 [ 313.074524][ T5924] usb 2-1: USB disconnect, device number 50 [ 313.132937][ T5917] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 313.200685][ T5917] usb 1-1: device descriptor read/8, error -71 [ 313.266949][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.921'. [ 313.293627][ T30] audit: type=1800 audit(1750122988.171:653): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.920" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 313.314991][ T5917] usb usb1-port1: unable to enumerate USB device [ 313.657333][ T9031] bridge0: entered allmulticast mode [ 313.669367][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 313.679227][ T9031] bridge0: left allmulticast mode [ 313.855296][ T9035] CIFS: VFS: Malformed UNC in devname [ 314.231497][ T9037] fuse: Bad value for 'group_id' [ 314.244313][ T9037] fuse: Bad value for 'group_id' [ 314.623226][ T9047] bridge2: entered promiscuous mode [ 314.718641][ T9049] openvswitch: netlink: Key type 173 is out of range max 32 [ 315.049734][ T5924] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 315.219672][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.261722][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 315.284882][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.298784][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 315.313809][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.323681][ T5924] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.333037][ T5924] usb 5-1: Manufacturer: syz [ 315.344486][ T5924] usb 5-1: config 0 descriptor?? [ 315.577710][ T5917] psmouse serio2: Failed to reset mouse on : -5 [ 316.088013][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 316.247631][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 316.254978][ T9] usb 4-1: config 0 has no interfaces? [ 316.263279][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.281155][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.300085][ T9] usb 4-1: Product: syz [ 316.309362][ T9] usb 4-1: Manufacturer: syz [ 316.317906][ T9] usb 4-1: SerialNumber: syz [ 316.335434][ T9] usb 4-1: config 0 descriptor?? [ 316.563524][ T5955] usb 4-1: USB disconnect, device number 43 [ 317.212065][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.220237][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.246345][ T9066] FAULT_INJECTION: forcing a failure. [ 317.246345][ T9066] name failslab, interval 1, probability 0, space 0, times 0 [ 317.278345][ T9066] CPU: 0 UID: 0 PID: 9066 Comm: syz.3.934 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 317.278371][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.278388][ T9066] Call Trace: [ 317.278397][ T9066] [ 317.278405][ T9066] dump_stack_lvl+0x189/0x250 [ 317.278440][ T9066] ? __pfx____ratelimit+0x10/0x10 [ 317.278470][ T9066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.278486][ T9066] ? __pfx__printk+0x10/0x10 [ 317.278500][ T9066] ? __pfx___might_resched+0x10/0x10 [ 317.278519][ T9066] should_fail_ex+0x414/0x560 [ 317.278540][ T9066] should_failslab+0xa8/0x100 [ 317.278563][ T9066] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 317.278584][ T9066] ? __alloc_skb+0x112/0x2d0 [ 317.278609][ T9066] __alloc_skb+0x112/0x2d0 [ 317.278628][ T9066] netlink_sendmsg+0x5c6/0xb30 [ 317.278646][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.278659][ T9066] ? __import_iovec+0x5d4/0x7f0 [ 317.278668][ T9066] ? aa_sock_msg_perm+0x94/0x160 [ 317.278685][ T9066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.278709][ T9066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.278736][ T9066] __sock_sendmsg+0x21c/0x270 [ 317.278768][ T9066] ____sys_sendmsg+0x505/0x830 [ 317.278785][ T9066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.278806][ T9066] ___sys_sendmsg+0x21f/0x2a0 [ 317.278820][ T9066] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.278870][ T9066] ? __fget_files+0x2a/0x420 [ 317.278891][ T9066] ? __fget_files+0x3a0/0x420 [ 317.278920][ T9066] __sys_sendmsg+0x164/0x220 [ 317.278935][ T9066] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.278955][ T9066] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 317.278971][ T9066] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.278995][ T9066] __do_fast_syscall_32+0xb6/0x2b0 [ 317.279014][ T9066] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.279043][ T9066] do_fast_syscall_32+0x34/0x80 [ 317.279059][ T9066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.279080][ T9066] RIP: 0023:0xf708e539 [ 317.279095][ T9066] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 317.279110][ T9066] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 317.279131][ T9066] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 317.279144][ T9066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.279154][ T9066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.279165][ T9066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.279177][ T9066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.279205][ T9066] [ 317.545960][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.680959][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 317.899997][ T5924] rc_core: IR keymap rc-hauppauge not found [ 317.918155][ T5924] Registered IR keymap rc-empty [ 317.926855][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 317.958277][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.031580][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 318.271996][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 318.320434][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.378491][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.411828][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.459228][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.492936][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.539267][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.578217][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.647689][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.768455][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.868527][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 318.970311][ T5924] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 319.040697][ T5924] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.119470][ T5924] usb 5-1: USB disconnect, device number 39 [ 319.447751][ T5917] misc userio: Buffer overflowed, userio client isn't keeping up [ 319.879014][ T5904] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 320.039790][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 320.046565][ T5904] usb 4-1: config 0 has no interfaces? [ 320.054213][ T5904] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.063676][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.071823][ T5904] usb 4-1: Product: syz [ 320.076047][ T5904] usb 4-1: Manufacturer: syz [ 320.081436][ T5904] usb 4-1: SerialNumber: syz [ 320.089709][ T5904] usb 4-1: config 0 descriptor?? [ 320.303095][ T5904] usb 4-1: USB disconnect, device number 44 [ 320.520538][ T5917] input: PS/2 Generic Mouse as /devices/serio2/input/input34 [ 320.544146][ T9148] FAULT_INJECTION: forcing a failure. [ 320.544146][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.582331][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.4.947 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 320.582359][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.582370][ T9148] Call Trace: [ 320.582378][ T9148] [ 320.582387][ T9148] dump_stack_lvl+0x189/0x250 [ 320.582420][ T9148] ? __pfx____ratelimit+0x10/0x10 [ 320.582448][ T9148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.582476][ T9148] ? __pfx__printk+0x10/0x10 [ 320.582496][ T9148] ? __might_fault+0xb0/0x130 [ 320.582524][ T9148] should_fail_ex+0x414/0x560 [ 320.582554][ T9148] _copy_from_user+0x2d/0xb0 [ 320.582574][ T9148] sk_setsockopt+0x276/0x2d30 [ 320.582599][ T9148] ? register_lock_class+0x51/0x320 [ 320.582629][ T9148] ? __pfx_sk_setsockopt+0x10/0x10 [ 320.582651][ T9148] ? __lock_acquire+0xab9/0xd20 [ 320.582686][ T9148] ? __local_bh_enable_ip+0x12d/0x1c0 [ 320.582714][ T9148] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.582743][ T9148] ? __local_bh_enable_ip+0x12d/0x1c0 [ 320.582770][ T9148] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 320.582823][ T9148] vsock_connectible_setsockopt+0x215/0x7b0 [ 320.582857][ T9148] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 320.582886][ T9148] ? __lock_acquire+0xab9/0xd20 [ 320.582914][ T9148] ? aa_sock_opt_perm+0x74/0x110 [ 320.582940][ T9148] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 320.582963][ T9148] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 320.582993][ T9148] do_sock_setsockopt+0x257/0x3e0 [ 320.583020][ T9148] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 320.583041][ T9148] ? __fget_files+0x2a/0x420 [ 320.583072][ T9148] ? __fget_files+0x3a0/0x420 [ 320.583092][ T9148] ? __fget_files+0x2a/0x420 [ 320.583120][ T9148] __ia32_sys_setsockopt+0x18b/0x220 [ 320.583150][ T9148] __do_fast_syscall_32+0xb6/0x2b0 [ 320.583168][ T9148] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.583199][ T9148] do_fast_syscall_32+0x34/0x80 [ 320.583217][ T9148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.583241][ T9148] RIP: 0023:0xf7f47539 [ 320.583257][ T9148] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 320.583275][ T9148] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 320.583295][ T9148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 320.583307][ T9148] RDX: 0000000000000012 RSI: 0000000080000040 RDI: 0000000000000004 [ 320.583319][ T9148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.583329][ T9148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.583341][ T9148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.583367][ T9148] [ 320.777633][ T5917] psmouse serio2: Failed to enable mouse on [ 321.206632][ T30] audit: type=1326 audit(1750122996.081:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 321.394515][ T30] audit: type=1326 audit(1750122996.081:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 321.510533][ T30] audit: type=1326 audit(1750122996.081:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 321.550337][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 321.933856][ T30] audit: type=1326 audit(1750122996.081:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 321.958016][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 321.959421][ T30] audit: type=1326 audit(1750122996.081:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 321.990427][ T30] audit: type=1326 audit(1750122996.111:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 322.012867][ T30] audit: type=1326 audit(1750122996.111:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 322.035732][ T30] audit: type=1326 audit(1750122996.141:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 322.076443][ T30] audit: type=1326 audit(1750122996.151:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 322.180616][ T30] audit: type=1326 audit(1750122996.151:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe8539 code=0x7ffc0000 [ 322.202471][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.303308][ T9164] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 323.117629][ T5936] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 323.250002][ T5936] usb 1-1: device descriptor read/64, error -71 [ 323.517619][ T5936] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 323.657681][ T5936] usb 1-1: device descriptor read/64, error -71 [ 323.779885][ T5917] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 323.780109][ T5936] usb usb1-port1: attempt power cycle [ 323.917672][ T5917] usb 4-1: device descriptor read/64, error -71 [ 324.017734][ T5904] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 324.127858][ T5936] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 324.158411][ T5936] usb 1-1: device descriptor read/8, error -71 [ 324.158991][ T5917] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 324.168550][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 324.180304][ T5904] usb 5-1: config 0 has no interfaces? [ 324.188133][ T5904] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 324.197323][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.206518][ T5904] usb 5-1: Product: syz [ 324.216593][ T5904] usb 5-1: Manufacturer: syz [ 324.221399][ T5904] usb 5-1: SerialNumber: syz [ 324.232642][ T5904] usb 5-1: config 0 descriptor?? [ 324.307836][ T5917] usb 4-1: device descriptor read/64, error -71 [ 324.339622][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.368731][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 324.376367][ T9] usb 2-1: can't read configurations, error -71 [ 324.397893][ T5936] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 324.453286][ T5936] usb 1-1: device descriptor read/8, error -71 [ 324.457867][ T5917] usb usb4-port1: attempt power cycle [ 324.498950][ T9210] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 324.500740][ T5904] usb 5-1: USB disconnect, device number 40 [ 324.506627][ T9210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.573642][ T5936] usb usb1-port1: unable to enumerate USB device [ 324.579196][ T9208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3527266299 (28218130392 ns) > initial count (9270480872 ns). Using initial count to start timer. [ 324.817639][ T5917] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 324.850631][ T5917] usb 4-1: device descriptor read/8, error -71 [ 325.111719][ T5917] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 325.148539][ T5917] usb 4-1: device descriptor read/8, error -71 [ 325.217630][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 325.268078][ T5917] usb usb4-port1: unable to enumerate USB device [ 325.275048][ T9221] vlan0: entered promiscuous mode [ 325.280664][ T9221] vlan0: entered allmulticast mode [ 325.285783][ T9221] veth0_vlan: entered allmulticast mode [ 325.391971][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.411777][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 325.421342][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 325.432099][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.440649][ T9] usb 2-1: Product: syz [ 325.444930][ T9] usb 2-1: Manufacturer: syz [ 325.449981][ T9] usb 2-1: SerialNumber: syz [ 325.458409][ T9] usb 2-1: config 0 descriptor?? [ 325.472641][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 325.486811][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 325.498142][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 325.515352][ T9] usb 2-1: media controller created [ 325.551974][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.618705][ T9] DVB: Unable to find symbol tda10046_attach() [ 325.632698][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 325.643534][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 326.327595][ T5917] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 326.481376][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 326.493781][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.508700][ T5917] usb 4-1: config 0 descriptor?? [ 326.521643][ T5917] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 326.724296][ T9237] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.740608][ T5917] pwc: Failed to set LED on/off time (-71) [ 326.752400][ T5917] pwc: send_video_command error -71 [ 326.759134][ T5917] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 326.763382][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 326.767796][ T5917] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 326.782518][ T9240] netlink: 39 bytes leftover after parsing attributes in process `syz.4.972'. [ 326.789324][ T5917] usb 4-1: USB disconnect, device number 49 [ 326.925169][ T9245] netlink: 'syz.0.973': attribute type 21 has an invalid length. [ 327.267654][ T5917] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 327.327730][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 327.421598][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 327.442389][ T9] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 327.453952][ T5917] usb 1-1: config 0 has no interfaces? [ 327.467581][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.506734][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.520850][ T5917] usb 1-1: Product: syz [ 327.521114][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.525044][ T5917] usb 1-1: Manufacturer: syz [ 327.525063][ T5917] usb 1-1: SerialNumber: syz [ 327.628205][ T10] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 327.637648][ T10] usb 5-1: config 6 has no interface number 0 [ 327.664224][ T10] usb 5-1: config 6 interface 200 has no altsetting 0 [ 327.702014][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 327.712345][ T5917] usb 1-1: config 0 descriptor?? [ 327.718525][ T9] usb 2-1: USB disconnect, device number 52 [ 327.746802][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.775309][ T10] usb 5-1: Product: syz [ 327.805949][ T10] usb 5-1: Manufacturer: syz [ 327.827881][ T10] usb 5-1: SerialNumber: syz [ 327.844793][ T9261] openvswitch: netlink: Key type 173 is out of range max 32 [ 328.468650][ T5936] usb 1-1: USB disconnect, device number 45 [ 329.002734][ T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 329.016938][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 329.033549][ T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 329.046238][ T10] usb 5-1: media controller created [ 329.081606][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.212637][ T10] dvb-usb: recv bulk message failed: -22 [ 329.558012][ T5917] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 329.707648][ T5917] usb 2-1: device descriptor read/64, error -71 [ 329.957615][ T5917] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 330.087799][ T5917] usb 2-1: device descriptor read/64, error -71 [ 330.200622][ T5917] usb usb2-port1: attempt power cycle [ 330.493491][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 330.505184][ T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 330.557774][ T5917] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 330.574818][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 330.608668][ T5917] usb 2-1: device descriptor read/8, error -71 [ 330.651459][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 330.669623][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 330.718161][ T10] usb 5-1: USB disconnect, device number 41 [ 330.768639][ T5936] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 330.858007][ T5917] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 330.909956][ T5917] usb 2-1: device descriptor read/8, error -71 [ 330.953205][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 330.965202][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 330.990402][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.016479][ T5936] usb 4-1: config 0 descriptor?? [ 331.020142][ T5917] usb usb2-port1: unable to enumerate USB device [ 331.049612][ T5936] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 331.071692][ T9295] CIFS: VFS: Malformed UNC in devname [ 331.231218][ T9287] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.235701][ T5936] pwc: Failed to set LED on/off time (-71) [ 331.248750][ T5936] pwc: send_video_command error -71 [ 331.248768][ T5936] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 331.248878][ T5936] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 331.254822][ T5936] usb 4-1: USB disconnect, device number 50 [ 332.050243][ T9308] bridge0: Device is already in use. [ 332.147637][ T5917] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 332.307619][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 332.314694][ T5917] usb 2-1: config 0 has no interfaces? [ 332.330548][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.347606][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.355850][ T5917] usb 2-1: Product: syz [ 332.360392][ T5917] usb 2-1: Manufacturer: syz [ 332.365068][ T5917] usb 2-1: SerialNumber: syz [ 332.372887][ T5917] usb 2-1: config 0 descriptor?? [ 332.396664][ T9317] bond0: entered promiscuous mode [ 332.401979][ T9317] bond_slave_0: entered promiscuous mode [ 332.409161][ T9317] bond_slave_1: entered promiscuous mode [ 332.587807][ T5936] usb 2-1: USB disconnect, device number 57 [ 332.805373][ T9327] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1000'. [ 332.997739][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 333.160523][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 333.182037][ T10] usb 1-1: config 0 has no interfaces? [ 333.201625][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice=11.00 [ 333.211255][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.236822][ T10] usb 1-1: config 0 descriptor?? [ 333.258670][ T9341] libceph: resolve '4..' (ret=-3): failed [ 333.397024][ T9347] ptp: physical clock is free running [ 333.463389][ T5835] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 333.463446][ T5835] Bluetooth: hci0: Malformed LE Event: 0x0d [ 333.790388][ T5936] usb 1-1: USB disconnect, device number 46 [ 334.024340][ T9359] netlink: 'syz.1.1007': attribute type 9 has an invalid length. [ 334.831263][ T9365] openvswitch: netlink: Key type 173 is out of range max 32 [ 335.306238][ T9375] openvswitch: netlink: Key type 173 is out of range max 32 [ 335.447742][ T5917] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 335.609125][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 335.616492][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 335.639054][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 335.654738][ T5917] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 335.665777][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.675780][ T5917] usb 2-1: Product: syz [ 335.682082][ T5917] usb 2-1: Manufacturer: syz [ 335.691342][ T5917] usb 2-1: SerialNumber: syz [ 335.707394][ T5917] usb 2-1: config 0 descriptor?? [ 336.058031][ T9373] fuse: Bad value for 'user_id' [ 336.063002][ T9373] fuse: Bad value for 'user_id' [ 336.620222][ T9385] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 336.787593][ T5936] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 336.957891][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 336.965139][ T5936] usb 1-1: config 0 has no interfaces? [ 336.985313][ T5936] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.005568][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.022796][ T5936] usb 1-1: Product: syz [ 337.032177][ T5936] usb 1-1: Manufacturer: syz [ 337.043138][ T5936] usb 1-1: SerialNumber: syz [ 337.064734][ T5936] usb 1-1: config 0 descriptor?? [ 337.294822][ T5936] usb 1-1: USB disconnect, device number 47 [ 337.539720][ T9387] binder: BINDER_SET_CONTEXT_MGR already set [ 337.547028][ T9387] binder: 9386:9387 ioctl 4018620d 80000040 returned -16 [ 337.556053][ T9387] syz_tun: entered allmulticast mode [ 337.570626][ T9387] syz_tun: left allmulticast mode [ 337.767255][ T9391] CIFS: VFS: Malformed UNC in devname [ 337.994806][ T9395] FAULT_INJECTION: forcing a failure. [ 337.994806][ T9395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.008668][ T9395] CPU: 0 UID: 0 PID: 9395 Comm: syz.0.1020 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 338.008696][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.008709][ T9395] Call Trace: [ 338.008717][ T9395] [ 338.008725][ T9395] dump_stack_lvl+0x189/0x250 [ 338.008759][ T9395] ? __pfx____ratelimit+0x10/0x10 [ 338.008788][ T9395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.008817][ T9395] ? __pfx__printk+0x10/0x10 [ 338.008851][ T9395] should_fail_ex+0x414/0x560 [ 338.008880][ T9395] _copy_to_user+0x31/0xb0 [ 338.008902][ T9395] simple_read_from_buffer+0xe1/0x170 [ 338.008926][ T9395] proc_fail_nth_read+0x1df/0x250 [ 338.008951][ T9395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.008975][ T9395] ? rw_verify_area+0x258/0x650 [ 338.009002][ T9395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.009027][ T9395] vfs_read+0x200/0x980 [ 338.009061][ T9395] ? __pfx___mutex_lock+0x10/0x10 [ 338.009080][ T9395] ? __pfx_vfs_read+0x10/0x10 [ 338.009111][ T9395] ? __fget_files+0x2a/0x420 [ 338.009136][ T9395] ? __fget_files+0x3a0/0x420 [ 338.009156][ T9395] ? __fget_files+0x2a/0x420 [ 338.009195][ T9395] ksys_read+0x145/0x250 [ 338.009215][ T9395] ? __pfx_ksys_read+0x10/0x10 [ 338.009235][ T9395] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 338.009266][ T9395] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.009299][ T9395] __do_fast_syscall_32+0xb6/0x2b0 [ 338.009319][ T9395] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.009350][ T9395] do_fast_syscall_32+0x34/0x80 [ 338.009369][ T9395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.009392][ T9395] RIP: 0023:0xf7fc4539 [ 338.009409][ T9395] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 338.009425][ T9395] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 338.009445][ T9395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 338.009458][ T9395] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 338.009470][ T9395] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 338.009481][ T9395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 338.009492][ T9395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.009521][ T9395] [ 338.495469][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.527373][ T5917] usb 2-1: USB disconnect, device number 58 [ 338.606930][ T9400] ================================================================== [ 338.615066][ T9400] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 338.622451][ T9400] Read of size 1 at addr ffff888076c9e060 by task syz.0.1021/9400 [ 338.630241][ T9400] [ 338.632552][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.1021 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 338.632566][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.632573][ T9400] Call Trace: [ 338.632579][ T9400] [ 338.632584][ T9400] dump_stack_lvl+0x189/0x250 [ 338.632604][ T9400] ? __kasan_check_byte+0x12/0x40 [ 338.632616][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.632631][ T9400] ? lock_release+0x4b/0x3e0 [ 338.632646][ T9400] ? __virt_addr_valid+0x4a5/0x5c0 [ 338.632657][ T9400] print_report+0xd2/0x2b0 [ 338.632670][ T9400] ? _raw_spin_lock+0x2e/0x40 [ 338.632683][ T9400] kasan_report+0x118/0x150 [ 338.632693][ T9400] ? _raw_spin_lock+0x2e/0x40 [ 338.632706][ T9400] ? __futex_pivot_hash+0x226/0x460 [ 338.632718][ T9400] __kasan_check_byte+0x2a/0x40 [ 338.632728][ T9400] lock_acquire+0x8d/0x360 [ 338.632740][ T9400] ? futex_hash_allocate+0x7eb/0xba0 [ 338.632752][ T9400] _raw_spin_lock+0x2e/0x40 [ 338.632765][ T9400] ? __futex_pivot_hash+0x226/0x460 [ 338.632774][ T9400] __futex_pivot_hash+0x226/0x460 [ 338.632787][ T9400] futex_hash_allocate+0xa6b/0xba0 [ 338.632799][ T9400] ? __pfx_futex_hash_allocate+0x10/0x10 [ 338.632809][ T9400] ? __pfx_var_wake_function+0x10/0x10 [ 338.632821][ T9400] ? static_key_count+0x41/0x70 [ 338.632831][ T9400] ? security_task_prctl+0x163/0x190 [ 338.632846][ T9400] __se_sys_prctl+0x9e8/0x1940 [ 338.632859][ T9400] ? __pfx___se_sys_prctl+0x10/0x10 [ 338.632871][ T9400] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 338.632888][ T9400] ? __ia32_sys_prctl+0x20/0xc0 [ 338.632901][ T9400] __do_fast_syscall_32+0xb6/0x2b0 [ 338.632911][ T9400] do_fast_syscall_32+0x34/0x80 [ 338.632920][ T9400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.632934][ T9400] RIP: 0023:0xf7fc4539 [ 338.632944][ T9400] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 338.632953][ T9400] RSP: 002b:00000000f50c555c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 338.632964][ T9400] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 338.632971][ T9400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.632977][ T9400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.632983][ T9400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 338.632989][ T9400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.632998][ T9400] [ 338.633002][ T9400] [ 338.880048][ T9400] Allocated by task 9398: [ 338.884538][ T9400] kasan_save_track+0x3e/0x80 [ 338.889218][ T9400] __kasan_kmalloc+0x93/0xb0 [ 338.893796][ T9400] __kvmalloc_node_noprof+0x30d/0x5f0 [ 338.899595][ T9400] futex_hash_allocate+0x3f4/0xba0 [ 338.904698][ T9400] __se_sys_prctl+0x9e8/0x1940 [ 338.909633][ T9400] __do_fast_syscall_32+0xb6/0x2b0 [ 338.914735][ T9400] do_fast_syscall_32+0x34/0x80 [ 338.919577][ T9400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.925899][ T9400] [ 338.928213][ T9400] The buggy address belongs to the object at ffff888076c9e000 [ 338.928213][ T9400] which belongs to the cache kmalloc-cg-64 of size 64 [ 338.942346][ T9400] The buggy address is located 32 bytes to the right of [ 338.942346][ T9400] allocated 64-byte region [ffff888076c9e000, ffff888076c9e040) [ 338.956832][ T9400] [ 338.959154][ T9400] The buggy address belongs to the physical page: [ 338.965562][ T9400] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076c9e500 pfn:0x76c9e [ 338.975613][ T9400] memcg:ffff88803388e601 [ 338.979841][ T9400] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 338.987286][ T9400] page_type: f5(slab) [ 338.991259][ T9400] raw: 00fff00000000000 ffff88801a449c80 ffffea0000be4040 0000000000000003 [ 338.999834][ T9400] raw: ffff888076c9e500 000000008020001f 00000000f5000000 ffff88803388e601 [ 339.008404][ T9400] page dumped because: kasan: bad access detected [ 339.014816][ T9400] page_owner tracks the page as allocated [ 339.020517][ T9400] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9151, tgid 9150 (syz.0.948), ts 320998805952, free_ts 320964264539 [ 339.039695][ T9400] post_alloc_hook+0x240/0x2a0 [ 339.044452][ T9400] get_page_from_freelist+0x21e4/0x22c0 [ 339.050001][ T9400] __alloc_frozen_pages_noprof+0x181/0x370 [ 339.055811][ T9400] alloc_pages_mpol+0x232/0x4a0 [ 339.060656][ T9400] allocate_slab+0x8a/0x3b0 [ 339.065157][ T9400] ___slab_alloc+0xbfc/0x1480 [ 339.069827][ T9400] __kvmalloc_node_noprof+0x429/0x5f0 [ 339.075187][ T9400] nf_hook_entries_grow+0x27c/0x710 [ 339.080379][ T9400] __nf_register_net_hook+0x2c9/0x930 [ 339.085742][ T9400] nf_register_net_hook+0xb2/0x190 [ 339.090846][ T9400] nft_register_flowtable_net_hooks+0x371/0x800 [ 339.097083][ T9400] nf_tables_newflowtable+0x187b/0x20d0 [ 339.102627][ T9400] nfnetlink_rcv+0x1132/0x2520 [ 339.107387][ T9400] netlink_unicast+0x758/0x8d0 [ 339.112148][ T9400] netlink_sendmsg+0x805/0xb30 [ 339.116905][ T9400] __sock_sendmsg+0x21c/0x270 [ 339.121584][ T9400] page last free pid 5206 tgid 5206 stack trace: [ 339.127899][ T9400] __free_frozen_pages+0xc71/0xe70 [ 339.133006][ T9400] __slab_free+0x326/0x400 [ 339.137589][ T9400] qlist_free_all+0x97/0x140 [ 339.142197][ T9400] kasan_quarantine_reduce+0x148/0x160 [ 339.147680][ T9400] __kasan_slab_alloc+0x22/0x80 [ 339.152534][ T9400] __kmalloc_noprof+0x224/0x4f0 [ 339.157560][ T9400] tomoyo_realpath_from_path+0xe3/0x5d0 [ 339.163116][ T9400] tomoyo_path_perm+0x213/0x4b0 [ 339.167960][ T9400] security_inode_getattr+0x12f/0x330 [ 339.173330][ T9400] __x64_sys_newfstat+0xfc/0x200 [ 339.178272][ T9400] do_syscall_64+0xfa/0x3b0 [ 339.183117][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.189003][ T9400] [ 339.191315][ T9400] Memory state around the buggy address: [ 339.196945][ T9400] ffff888076c9df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.205016][ T9400] ffff888076c9df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.213083][ T9400] >ffff888076c9e000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 339.221142][ T9400] ^ [ 339.228327][ T9400] ffff888076c9e080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 339.236382][ T9400] ffff888076c9e100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 339.244428][ T9400] ================================================================== [ 339.254066][ T9400] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 339.261309][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.0.1021 Not tainted 6.16.0-rc2-syzkaller-00015-g44a5ab7a7958 #0 PREEMPT(full) [ 339.273386][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.283433][ T9400] Call Trace: [ 339.286704][ T9400] [ 339.289651][ T9400] dump_stack_lvl+0x99/0x250 [ 339.294232][ T9400] ? __asan_memcpy+0x40/0x70 [ 339.298806][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.303990][ T9400] ? __pfx__printk+0x10/0x10 [ 339.308566][ T9400] panic+0x2db/0x790 [ 339.312448][ T9400] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.317806][ T9400] ? __pfx_panic+0x10/0x10 [ 339.322209][ T9400] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 339.328093][ T9400] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 339.333994][ T9400] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.340396][ T9400] ? _raw_spin_lock+0x2e/0x40 [ 339.345056][ T9400] check_panic_on_warn+0x89/0xb0 [ 339.350504][ T9400] ? _raw_spin_lock+0x2e/0x40 [ 339.355167][ T9400] end_report+0x78/0x160 [ 339.359396][ T9400] kasan_report+0x129/0x150 [ 339.364057][ T9400] ? _raw_spin_lock+0x2e/0x40 [ 339.368729][ T9400] ? __futex_pivot_hash+0x226/0x460 [ 339.373910][ T9400] __kasan_check_byte+0x2a/0x40 [ 339.378741][ T9400] lock_acquire+0x8d/0x360 [ 339.383142][ T9400] ? futex_hash_allocate+0x7eb/0xba0 [ 339.388410][ T9400] _raw_spin_lock+0x2e/0x40 [ 339.392900][ T9400] ? __futex_pivot_hash+0x226/0x460 [ 339.398095][ T9400] __futex_pivot_hash+0x226/0x460 [ 339.403118][ T9400] futex_hash_allocate+0xa6b/0xba0 [ 339.408223][ T9400] ? __pfx_futex_hash_allocate+0x10/0x10 [ 339.413861][ T9400] ? __pfx_var_wake_function+0x10/0x10 [ 339.419316][ T9400] ? static_key_count+0x41/0x70 [ 339.424241][ T9400] ? security_task_prctl+0x163/0x190 [ 339.429515][ T9400] __se_sys_prctl+0x9e8/0x1940 [ 339.434267][ T9400] ? __pfx___se_sys_prctl+0x10/0x10 [ 339.439631][ T9400] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 339.446206][ T9400] ? __ia32_sys_prctl+0x20/0xc0 [ 339.451046][ T9400] __do_fast_syscall_32+0xb6/0x2b0 [ 339.456139][ T9400] do_fast_syscall_32+0x34/0x80 [ 339.460973][ T9400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.467289][ T9400] RIP: 0023:0xf7fc4539 [ 339.471344][ T9400] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 339.490934][ T9400] RSP: 002b:00000000f50c555c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 339.499330][ T9400] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 339.507284][ T9400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.515244][ T9400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.523215][ T9400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.531344][ T9400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.539308][ T9400] [ 339.542463][ T9400] Kernel Offset: disabled [ 339.546778][ T9400] Rebooting in 86400 seconds..