last executing test programs: 3m8.561295784s ago: executing program 1 (id=4989): socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x10000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) syz_open_dev$sg(0x0, 0x1000, 0x644000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000000c0)=[{0xb, 0x28, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}, {0x4, 0xc0, 0x7f, 0x87, @tick=0x7, {0x7, 0x5}, {0xf7, 0x1}, @quote={{0x4, 0x3}, 0xcaa1}}, {0x9, 0x8, 0x8c, 0x3, @tick=0xe0b38cd0, {0x12, 0x5}, {0x40, 0x8}, @addr={0x6, 0x6}}], 0x54) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) 3m5.931263951s ago: executing program 1 (id=4999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@raw={0xfe, 0x3, "dd3edd197045"}) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000680)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x7fff, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) dup(0xffffffffffffffff) syz_io_uring_setup(0x40003422, &(0x7f0000000380)={0x0, 0x5079, 0x8000, 0xffffffff, 0x286}, &(0x7f0000000340), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r6) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r8, 0x540b, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m4.175548516s ago: executing program 1 (id=5004): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x500}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x88}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x7, 0x1, 0x0, 0x1f, 0x64}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1c00}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) accept4(r5, 0x0, 0x0, 0x0) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x23) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r2, @ANYRES32=r4], 0x0) 3m4.045723737s ago: executing program 1 (id=5005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008c"]) 3m3.781736553s ago: executing program 1 (id=5009): socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x10000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) syz_open_dev$sg(0x0, 0x1000, 0x644000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000000c0)=[{0xb, 0x28, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}, {0x4, 0xc0, 0x7f, 0x87, @tick=0x7, {0x7, 0x5}, {0xf7, 0x1}, @quote={{0x4, 0x3}, 0xcaa1}}, {0x9, 0x8, 0x8c, 0x3, @tick=0xe0b38cd0, {0x12, 0x5}, {0x40, 0x8}, @addr={0x6, 0x6}}], 0x54) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) 3m1.7634355s ago: executing program 1 (id=5017): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x2e5f, &(0x7f00000002c0)={0x0, 0x3cb9, 0x1000, 0x800003, 0x3ba, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000140)={0x980914, 0xf9}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, r0, 0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r4, 0x47f6, 0xfffffffe, 0x2, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000000)=0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f0000000080)=0x7) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r11, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r11, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x4d) timer_settime(r10, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x23c, 0x240, 0x240, 0x23c, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x12c, 0x0, {}, [@common=@inet=@socket3={{0x24}}, @common=@unspec=@physdev={{0x64}, {'sit0\x00', {}, 'erspan0\x00', {}, 0x6, 0x1c}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x0, 0x6}, {0x4}, {0x3, 0x0, 0x3}, 0xe}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x40, 0x0}, 0xff, 0xff, 'hsr0\x00', 'batadv0\x00', {0xff}, {}, 0x2, 0x3, 0x78}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x4, 0x2, 0x0, 0x2], 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x2, 0x0, 0x4], 0x0, 0x1}, {0x2, [0x7, 0x0, 0x1, 0x0, 0x1], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x32c) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) 2m46.682507995s ago: executing program 32 (id=5017): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x2e5f, &(0x7f00000002c0)={0x0, 0x3cb9, 0x1000, 0x800003, 0x3ba, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000140)={0x980914, 0xf9}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, r0, 0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r4, 0x47f6, 0xfffffffe, 0x2, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000000)=0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f0000000080)=0x7) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r11, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r11, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x4d) timer_settime(r10, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x23c, 0x240, 0x240, 0x23c, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x12c, 0x0, {}, [@common=@inet=@socket3={{0x24}}, @common=@unspec=@physdev={{0x64}, {'sit0\x00', {}, 'erspan0\x00', {}, 0x6, 0x1c}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x0, 0x6}, {0x4}, {0x3, 0x0, 0x3}, 0xe}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x40, 0x0}, 0xff, 0xff, 'hsr0\x00', 'batadv0\x00', {0xff}, {}, 0x2, 0x3, 0x78}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x4, 0x2, 0x0, 0x2], 0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x2, 0x0, 0x4], 0x0, 0x1}, {0x2, [0x7, 0x0, 0x1, 0x0, 0x1], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x32c) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) 12.244572013s ago: executing program 0 (id=5634): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) capset(0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xdb0d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 11.46384725s ago: executing program 2 (id=5636): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000001400)={0x0, 0xd80e, 0x3010, 0xfffffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x4, @loopback, 0x8}}}, 0x80, 0x0}, 0x0, 0x40, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5a, &(0x7f0000000580)=ANY=[@ANYBLOB="5a03f34c2a690f9ede0600000000000000a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b5013a6212e814d37637d351fcd98c90e4fdfaaf16079e116382e7c5d3d57b4e88f26024cfb18dce543"]}]}) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) (async, rerun: 32) r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc029fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000340)={0x40, 0xe, 0x2, '!['}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711041000000000026000000000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 9.195396723s ago: executing program 4 (id=5642): syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7276, 0x800, 0x4, 0x316}, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4090, 0xffa}], 0x1}}, {{&(0x7f00000000c0), 0x6e, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x40}}], 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8000, @loopback, 0x5}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000003980)=0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x10}, 0x19}, 0x0) 9.105960345s ago: executing program 0 (id=5643): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38380000001a00010000000000000000000a0080", @ANYRES32=0x0, @ANYBLOB="0000000014000100200100000000000000000000000000020800020006000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "37bb54f0"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) write$UHID_CREATE(r0, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x200002, 0x1635}}, 0x11c) write$UHID_INPUT(r0, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 8.987619339s ago: executing program 2 (id=5645): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x70ad2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff93}}, {0x8, 0xb, 0x2}, {0x6}}]}, 0x4c}}, 0x4040000) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r3 = syz_open_pts(r0, 0x900) dup3(r3, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0x6, 0xffff, 0x3, 0x6, 0x4, "1dbc2e2db3983c75"}) 8.756087605s ago: executing program 4 (id=5646): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) r3 = msgget$private(0x0, 0x684) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x10}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) msgrcv(r3, 0x0, 0x0, 0x1, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[], 0x8, 0x800) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x4}]) 8.46731549s ago: executing program 2 (id=5647): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x6c, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x81e3, 0x0, 0x1, {0x22, 0x43}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x2321c0, 0xdc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r1, r2, 0x6700000000000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x1, 0x9, "ea569e0473b913328b"}, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) 7.191157487s ago: executing program 3 (id=5650): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0xa888, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 6.69988391s ago: executing program 3 (id=5651): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x181440, 0x18) openat(r0, 0x0, 0x1652c0, 0xc) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x0) write$tcp_congestion(r3, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xc, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x502, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r10 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r8, r8, 0x0, 0x9) 6.069056513s ago: executing program 4 (id=5654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x238, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x184, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x1}]}]}, 0x238}}, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) ioctl$VT_WAITACTIVE(r1, 0x5607) 5.734736093s ago: executing program 2 (id=5655): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff000000000800000000000000"], 0x34}}, 0x0) 5.691623172s ago: executing program 0 (id=5656): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x20}, 0x4000000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000004240)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000073000040"]) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xd0}}, 0x24000800) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) pselect6(0x40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x20}, 0x0, 0x0) unshare(0x6a040000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap(&(0x7f0000236000/0x1000)=nil, 0x1000, 0x3, 0x30, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x20028004) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 5.470815352s ago: executing program 4 (id=5658): socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) open(&(0x7f00000008c0)='.\x00', 0x20, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.412650973s ago: executing program 2 (id=5659): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001880)={0xc, {"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", 0x1000}}, 0x1006) ioctl$TCFLSH(r1, 0x540b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe02020000052406000005240002000d240f01bfffffff000000000004241302042407"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x4, 0xb49, 0x9, 0x1, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, 0x0) r6 = syz_open_dev$video(0x0, 0x8082007c, 0x121000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000040)={0x6, 0x30324c4a, 0x281, 0x1e0, 0x0, @stepwise={{0xc9, 0xfffffffa}, {0xe, 0x3}, {0x2, 0x5}}}) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) keyctl$join(0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r8 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) setsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f0000000140)=0xa, 0x4) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(r7, 0x289e0cb5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.971937691s ago: executing program 5 (id=5660): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0x2, 0x7) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x54}}, 0x80) 4.857079761s ago: executing program 3 (id=5661): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f00000048c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x4010) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000031) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17ff000000000000ac0aacb1f320950000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ppoll(&(0x7f00000002c0)=[{r6, 0xa100}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) 4.645554635s ago: executing program 5 (id=5662): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 4.453620784s ago: executing program 0 (id=5663): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002780)=""/129, 0x81}], 0x1, 0x10001, 0x8000007) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80041272, &(0x7f0000000140)) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r6, 0x0, 0xff) syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) listen(r0, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200000040ac05590240f20002030109022400010167700009040006010301020909210500a001223c0f0905810310000e046e4de7c50354fd7513864246ef30c0cb38e84ae6631a517c5542bd18edf3ab7b18c895e4d730b30617cff74a047edfffefc46e8ee7ac9c9f67abfc16f1d61799ca3b512098039ce7f64a97fac7"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000040)='x', 0x1, 0x0, 0x0, 0x0) 4.251450102s ago: executing program 5 (id=5664): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000280)={0x9, "a73071b1bbd4971cd33d2f3c036cc983b6c7dec17a088ac45988be35f16f0d83", 0x800, 0x8, 0x278, 0x4, 0x3}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0xa114, r1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc00e}, 0x0) (async) r7 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20000000) (async) eventfd(0x7fffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000015}, 0x84) 3.920063125s ago: executing program 4 (id=5665): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x6c, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x81e3, 0x0, 0x1, {0x22, 0x43}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x2321c0, 0xdc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r1, r2, 0x6700000000000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x1, 0x9, "ea569e0473b913328b"}, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) 3.684750728s ago: executing program 3 (id=5666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x10002ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0xa5, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002480)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10000000, 0x4, 0x5389a6f5, 0x4f60, 0x8, {0x2, 0x1, 0x2, 0x3, 0x8, 0x5}, {0x8, 0x1, 0x8, 0xff80, 0x8, 0x1ff}, 0x10, 0x7, 0xe}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) (fail_nth: 13) 2.923636002s ago: executing program 3 (id=5667): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38380000001a00010000000000000000000a0080", @ANYRES32=0x0, @ANYBLOB="0000000014000100200100000000000000000000000000020800020006000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "37bb54f0"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) write$UHID_CREATE(r0, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x200002, 0x1635}}, 0x11c) write$UHID_INPUT(r0, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 2.403838313s ago: executing program 2 (id=5668): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, 0x0, 0x0, 0x14a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2788a8451f8100260008004580003c0064000000019078ac1e0001ac1e0101040090780000000040147000006500066221000564010102ac1414aa44001253e000200280007fffac1e010100007fffac14142a000000"], 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000ab"], 0x0}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r6, 0x10001, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x28}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x28004021) sendmsg$NL80211_CMD_CONNECT(r8, 0x0, 0x48880) readv(r5, 0x0, 0x0) 1.89368545s ago: executing program 5 (id=5669): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff000000000800000000000000"], 0x34}}, 0x0) 1.662031238s ago: executing program 5 (id=5670): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000c0000000000000000950000000000009059a89f17cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x10}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.26914408s ago: executing program 0 (id=5671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000027400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.07206391s ago: executing program 4 (id=5672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000200)="f9", 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)="26db", 0x2}, {&(0x7f00000001c0)="ca", 0x1}, {&(0x7f00000011c0)="b488", 0x2}, {&(0x7f0000001440)='4', 0x1}], 0x7, 0x3) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x20, 0x1c, "fe04a3ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000018000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac000000000000000000110000000000000000000000000000000000000000000500", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r10 = syz_io_uring_setup(0x53c1, &(0x7f0000000540)={0x0, 0x9064, 0x20000, 0x4, 0x2b1, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x118, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) write$UHID_CREATE2(r3, 0x0, 0x118) syz_io_uring_submit(r13, r12, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r10, 0x47fb, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 835.879341ms ago: executing program 5 (id=5673): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x214}) close(r2) ioctl$TCSETSW2(r1, 0x5425, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f00, 0x3f00, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x4b4, 0xffffffff, 0x324, 0x324, 0x0, 0xffffffff, 0xffffffff, 0x3ec, 0x3ec, 0x3ec, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @dev={0xfe, 0x80, '\x00', 0xa}, [0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 'macvlan0\x00', 'batadv0\x00', {}, {}, 0x73, 0xd, 0x6, 0x10}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@dst={{0x48}, {0x7ab, 0x2, 0x1, [0xff80, 0x9, 0x3c, 0xfe00, 0x4, 0xffff, 0x0, 0xf4b7, 0x6, 0x10, 0x7, 0x80, 0xb, 0xfff, 0x7ff, 0x4d65], 0x8}}, @common=@inet=@recent1={{0x104}, {0x2, 0x7, 0x0, 0x1, 'syz1\x00', 0x47, [0xff000000, 0x0, 0xff000000, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 'netpci0\x00', {0x8}}}}, {{@ipv6={@mcast2, @local, [0xffffff00, 0xffffff00, 0x0, 0xff], [0x0, 0xff, 0xffffffff, 0xff], 'pimreg1\x00', 'wg2\x00', {0xff}, {}, 0x2b, 0x36, 0x0, 0x1}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x29}, [0xff, 0xffffffff, 0xffffff00], [0xff, 0xff, 0x0, 0xffffffff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x4, 0x7, 0x79}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x510) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x6, 0xdddd0000, 0x1000, &(0x7f0000627000/0x1000)=nil}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000840), 0x2c8, 0x100) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_io_uring_setup(0x200000a0, &(0x7f0000000240)={0x0, 0x5d6, 0x1, 0x5, 0x133, 0x0, r2}, &(0x7f00000008c0)=0x0, &(0x7f0000000880)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) io_uring_enter(r8, 0x5a99, 0x8404, 0x0, 0x0, 0x0) 639.81808ms ago: executing program 0 (id=5674): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@local}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ppoll(&(0x7f0000001ac0)=[{r1, 0x5525e084823c9d09}], 0x1, &(0x7f0000001b40), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x8, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) execve(0x0, 0x0, &(0x7f0000000280)) writev(r5, &(0x7f0000000280), 0x26) munlock(&(0x7f0000ffa000/0x1000)=nil, 0x800000000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="100040000000000007000000"], 0x10}}], 0x1, 0x44008004) write$binfmt_misc(r7, &(0x7f0000000300), 0xfdef) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f00000004c0)=""/7, 0x7}], 0x11}, 0x4}], 0x2, 0x60, 0x0) 0s ago: executing program 3 (id=5675): socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x3dfc, &(0x7f0000000740)={0x0, 0xffffe, 0x10300, 0x2, 0x397}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000680)=""/159, &(0x7f0000000100)=""/45}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1}) r4 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 [ 1192.368493][T13414] bcm5974 3-1:1.0: could not read from device [ 1192.423169][T13414] udevd[13414]: Error opening device "/dev/input/event4": No such file or directory [ 1192.452626][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1192.489738][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1192.497954][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1192.506534][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1192.629723][T23249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.641368][T23249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.652369][T23249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.661296][T23249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.941076][T23251] FAULT_INJECTION: forcing a failure. [ 1192.941076][T23251] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.955590][T23251] CPU: 0 UID: 0 PID: 23251 Comm: syz.2.5363 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1192.955629][T23251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1192.955641][T23251] Call Trace: [ 1192.955650][T23251] [ 1192.955659][T23251] dump_stack_lvl+0x189/0x250 [ 1192.955690][T23251] ? __pfx____ratelimit+0x10/0x10 [ 1192.955722][T23251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.955747][T23251] ? __pfx__printk+0x10/0x10 [ 1192.955776][T23251] ? __pfx___might_resched+0x10/0x10 [ 1192.955801][T23251] ? fs_reclaim_acquire+0x7d/0x100 [ 1192.955834][T23251] should_fail_ex+0x414/0x560 [ 1192.955869][T23251] should_failslab+0xa8/0x100 [ 1192.955897][T23251] __kmalloc_noprof+0xcb/0x4f0 [ 1192.955921][T23251] ? sock_kmalloc+0xd6/0x160 [ 1192.955953][T23251] sock_kmalloc+0xd6/0x160 [ 1192.955985][T23251] skcipher_recvmsg+0x55c/0x11c0 [ 1192.956039][T23251] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1192.956074][T23251] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1192.956101][T23251] ? security_socket_recvmsg+0x7e/0x2e0 [ 1192.956123][T23251] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1192.956154][T23251] sock_recvmsg+0x22c/0x270 [ 1192.956179][T23251] ____sys_recvmsg+0x1c9/0x460 [ 1192.956216][T23251] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1192.956250][T23251] ? get_compat_msghdr+0x37e/0x4a0 [ 1192.956290][T23251] ? get_pid_task+0x20/0x1f0 [ 1192.956328][T23251] ___sys_recvmsg+0x1b5/0x510 [ 1192.956363][T23251] ? __pfx____sys_recvmsg+0x10/0x10 [ 1192.956420][T23251] ? __fget_files+0x3a0/0x420 [ 1192.956457][T23251] __sys_recvmsg+0x161/0x220 [ 1192.956485][T23251] ? __pfx___sys_recvmsg+0x10/0x10 [ 1192.956531][T23251] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1192.956553][T23251] ? lockdep_hardirqs_on+0x9c/0x150 [ 1192.956587][T23251] __do_fast_syscall_32+0xb6/0x2b0 [ 1192.956610][T23251] ? lockdep_hardirqs_on+0x9c/0x150 [ 1192.956646][T23251] do_fast_syscall_32+0x34/0x80 [ 1192.956666][T23251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1192.956690][T23251] RIP: 0023:0xf7f32539 [ 1192.956709][T23251] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1192.956726][T23251] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1192.956749][T23251] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 1192.956763][T23251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1192.956776][T23251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1192.956788][T23251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1192.956801][T23251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1192.956834][T23251] [ 1193.230826][ C0] vkms_vblank_simulate: vblank timer overrun [ 1193.595765][T18461] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1193.776976][T18460] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1193.944314][T23269] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1194.014513][T23269] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1194.026333][ T30] audit: type=1326 audit(1752342182.663:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.177613][T18460] usb 5-1: device descriptor read/64, error -71 [ 1194.506504][ T30] audit: type=1326 audit(1752342182.673:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.535784][T23269] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1194.576954][T23269] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1194.603943][ T30] audit: type=1326 audit(1752342182.673:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.626594][T18460] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1194.663817][T23274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.693775][T23274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.709927][ T30] audit: type=1326 audit(1752342182.673:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.770283][ T30] audit: type=1326 audit(1752342182.673:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.819440][ T30] audit: type=1326 audit(1752342182.673:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.865746][ T30] audit: type=1326 audit(1752342182.673:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.888290][T18460] usb 5-1: device descriptor read/64, error -71 [ 1194.924116][ T30] audit: type=1326 audit(1752342182.673:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1194.968509][ T30] audit: type=1326 audit(1752342182.673:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1195.006053][T18460] usb usb5-port1: attempt power cycle [ 1195.059810][ T30] audit: type=1326 audit(1752342182.673:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23266 comm="syz.5.5367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1195.414321][T18460] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1195.474296][T18460] usb 5-1: device descriptor read/8, error -71 [ 1195.564869][T23287] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1195.627310][T23279] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1195.735963][T18460] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1195.767483][T18460] usb 5-1: device descriptor read/8, error -71 [ 1195.883801][T18460] usb usb5-port1: unable to enumerate USB device [ 1195.956759][T16341] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1196.125737][T16341] usb 3-1: Using ep0 maxpacket: 32 [ 1196.134132][T16341] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1196.143423][T16341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.154319][T16341] usb 3-1: config 0 descriptor?? [ 1196.366483][T16341] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1197.079993][T23315] program syz.4.5380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.781905][T14573] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1197.973839][T23327] nvme_fabrics: unknown parameter or missing value 's^ЁИГ╪▓}Ж%┐Л√ нїСa╝Съ═?ZрЮD=ыr#ЪKЬ░E:)°hЭ╨ю_╣╦g Ю▐p8ОТчвd'ўf(╙ТЛо' in ctrl creation request [ 1198.605656][T18487] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1198.855768][T18487] usb 5-1: device descriptor read/64, error -71 [ 1199.137791][T18487] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1199.600027][T18487] usb 5-1: device descriptor read/64, error -71 [ 1199.816040][T18487] usb usb5-port1: attempt power cycle [ 1200.165830][T18487] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1200.336436][T18487] usb 5-1: device descriptor read/8, error -71 [ 1200.625717][T18487] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1200.656172][T18487] usb 5-1: device descriptor read/8, error -71 [ 1200.776581][T18487] usb usb5-port1: unable to enumerate USB device [ 1201.161863][T23373] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1201.172525][T23373] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1201.186973][T23373] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5397'. [ 1201.197905][T23373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5397'. [ 1202.426721][T23394] netlink: 'syz.4.5404': attribute type 10 has an invalid length. [ 1202.438629][T23394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5404'. [ 1202.495806][T23395] vivid-004: disconnect [ 1202.515016][T23394] team0: entered promiscuous mode [ 1202.520534][T23394] team0: entered allmulticast mode [ 1202.536907][T23394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.549432][T23394] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1202.753031][T18460] usb 6-1: USB disconnect, device number 6 [ 1203.173864][T23392] vivid-004: reconnect [ 1203.964051][ T8858] bridge_slave_1: left allmulticast mode [ 1203.981754][ T8858] bridge_slave_1: left promiscuous mode [ 1204.002277][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.040664][ T8858] bridge_slave_0: left allmulticast mode [ 1204.067905][ T8858] bridge_slave_0: left promiscuous mode [ 1204.094227][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.666348][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1204.694915][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1204.815903][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1204.824698][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1204.841190][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.641126][ T8858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.653602][ T8858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.670352][ T8858] bond0 (unregistering): Released all slaves [ 1205.684209][T23408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5410'. [ 1205.761636][T23426] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5412'. [ 1205.847639][T23426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1206.128793][ T8858] hsr_slave_0: left promiscuous mode [ 1206.145801][ T8858] hsr_slave_1: left promiscuous mode [ 1206.151846][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.175955][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.958012][ T5167] Bluetooth: hci3: command tx timeout [ 1207.217190][ T8858] team0 (unregistering): Port device team_slave_1 removed [ 1207.305089][ T8858] team0 (unregistering): Port device team_slave_0 removed [ 1207.717009][T18487] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1207.914429][T18487] usb 5-1: config 0 has no interfaces? [ 1207.928856][T18487] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1207.938440][T18487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.947126][T18487] usb 5-1: Product: syz [ 1207.951491][T18487] usb 5-1: Manufacturer: syz [ 1207.956878][T18487] usb 5-1: SerialNumber: syz [ 1207.979388][T18487] usb 5-1: config 0 descriptor?? [ 1208.868587][ T8858] IPVS: stop unused estimator thread 0... [ 1208.931568][T23433] chnl_net:caif_netlink_parms(): no params data found [ 1209.036493][ T5167] Bluetooth: hci3: command tx timeout [ 1209.477944][T23433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.487443][T23433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.586137][T23433] bridge_slave_0: entered allmulticast mode [ 1209.594954][T23433] bridge_slave_0: entered promiscuous mode [ 1209.628807][T23499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5424'. [ 1209.680985][T23433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.691996][T23433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.700266][T23433] bridge_slave_1: entered allmulticast mode [ 1209.726387][T23433] bridge_slave_1: entered promiscuous mode [ 1209.752699][T23499] tipc: Resetting bearer [ 1210.191718][T23499] tipc: Disabling bearer [ 1210.455504][T18461] usb 5-1: USB disconnect, device number 73 [ 1210.553362][T23433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.614874][T23433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.117343][ T5167] Bluetooth: hci3: command tx timeout [ 1211.276240][T23433] team0: Port device team_slave_0 added [ 1211.321803][T23433] team0: Port device team_slave_1 added [ 1211.492647][T23433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.522609][T23433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.639398][T23433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.681563][T23433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.703336][T23433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.817351][T23433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.006817][T23533] fuse: Unknown parameter 'fv' [ 1212.039151][T23433] hsr_slave_0: entered promiscuous mode [ 1212.050018][T23433] hsr_slave_1: entered promiscuous mode [ 1212.072586][T23433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.090700][T23433] Cannot create hsr debugfs directory [ 1213.315950][ T5167] Bluetooth: hci3: command tx timeout [ 1213.322371][T18486] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1213.339213][T16341] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1213.354427][T18486] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1213.371521][T16341] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1213.389725][T18486] usb 4-1: USB disconnect, device number 84 [ 1213.398719][T16341] usb 3-1: USB disconnect, device number 82 [ 1213.785852][T18486] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1214.006559][T18486] usb 4-1: config 0 has no interfaces? [ 1214.140304][T18486] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1214.178279][T23433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1214.247267][T23433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1214.259551][T18486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.296813][T23433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1214.325007][T18486] usb 4-1: Product: syz [ 1214.329813][T23433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1214.335603][T18486] usb 4-1: Manufacturer: syz [ 1214.347141][T18486] usb 4-1: SerialNumber: syz [ 1214.370537][T18486] usb 4-1: config 0 descriptor?? [ 1214.515959][T18460] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1214.814420][T18460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.825873][T18460] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1214.835176][T18460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.866553][T23567] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1214.871087][T18460] usb 3-1: config 0 descriptor?? [ 1214.937600][T23567] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1214.946016][T23567] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1215.514369][T23433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.956267][T23433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.003073][T21336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.010283][T21336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.105535][T18461] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1216.140819][T21338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.148255][T21338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.295839][T18461] usb 5-1: config 0 has no interfaces? [ 1216.307765][T18461] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1216.317346][T18461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.371319][T18461] usb 5-1: Product: syz [ 1216.412168][T18461] usb 5-1: Manufacturer: syz [ 1216.458141][T18461] usb 5-1: SerialNumber: syz [ 1216.513027][T18461] usb 5-1: config 0 descriptor?? [ 1216.778660][T23585] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1217.047659][T17051] usb 4-1: USB disconnect, device number 85 [ 1217.478533][T18460] usbhid 3-1:0.0: can't add hid device: -71 [ 1217.485796][T18460] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1217.574036][T18460] usb 3-1: USB disconnect, device number 83 [ 1217.865291][T23433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.064706][T23433] veth0_vlan: entered promiscuous mode [ 1218.143838][T23433] veth1_vlan: entered promiscuous mode [ 1218.308321][T23433] veth0_macvtap: entered promiscuous mode [ 1218.333177][T23433] veth1_macvtap: entered promiscuous mode [ 1218.361691][T23433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.450797][T23433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.492019][T23433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.534767][T18461] usb 5-1: USB disconnect, device number 74 [ 1218.549051][T23433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.569929][T23433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.609063][T23433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.797391][T16341] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 1218.903923][T21341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.934874][T21341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.039768][T16341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.050346][T16341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1219.059773][T16341] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1219.098366][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.109100][T16341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1219.121010][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.131338][T16341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1219.153166][T16341] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1219.174162][T16341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.367796][T23619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1219.391287][T16341] hub 4-1:1.0: bad descriptor, ignoring hub [ 1219.409233][T16341] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1219.446228][T16341] cdc_wdm 4-1:1.0: skipping garbage [ 1219.461806][T16341] cdc_wdm 4-1:1.0: skipping garbage [ 1219.598046][T23619] FAULT_INJECTION: forcing a failure. [ 1219.598046][T23619] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.612138][T23625] delete_channel: no stack [ 1219.622030][T16341] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1219.638865][T16341] cdc_wdm 4-1:1.0: Unknown control protocol [ 1219.693994][T23619] CPU: 1 UID: 0 PID: 23619 Comm: syz.3.5444 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1219.694025][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.694038][T23619] Call Trace: [ 1219.694047][T23619] [ 1219.694056][T23619] dump_stack_lvl+0x189/0x250 [ 1219.694087][T23619] ? __pfx____ratelimit+0x10/0x10 [ 1219.694118][T23619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.694143][T23619] ? __pfx__printk+0x10/0x10 [ 1219.694175][T23619] ? __pfx___might_resched+0x10/0x10 [ 1219.694199][T23619] ? fs_reclaim_acquire+0x7d/0x100 [ 1219.694244][T23619] should_fail_ex+0x414/0x560 [ 1219.694280][T23619] should_failslab+0xa8/0x100 [ 1219.694309][T23619] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1219.694333][T23619] ? security_file_alloc+0x34/0x330 [ 1219.694370][T23619] security_file_alloc+0x34/0x330 [ 1219.694398][T23619] init_file+0x93/0x2f0 [ 1219.694431][T23619] alloc_empty_file+0x6e/0x1d0 [ 1219.694463][T23619] path_openat+0x107/0x3830 [ 1219.694483][T23619] ? arch_stack_walk+0xfc/0x150 [ 1219.694540][T23619] ? kasan_save_track+0x4f/0x80 [ 1219.694561][T23619] ? kasan_save_track+0x3e/0x80 [ 1219.694580][T23619] ? __kasan_slab_alloc+0x6c/0x80 [ 1219.694603][T23619] ? getname_flags+0xb8/0x540 [ 1219.694631][T23619] ? __pfx_path_openat+0x10/0x10 [ 1219.694648][T23619] ? do_fast_syscall_32+0x34/0x80 [ 1219.694668][T23619] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.694716][T23619] do_filp_open+0x1fa/0x410 [ 1219.694734][T23619] ? __lock_acquire+0xab9/0xd20 [ 1219.694758][T23619] ? __pfx_do_filp_open+0x10/0x10 [ 1219.694805][T23619] ? _raw_spin_unlock+0x28/0x50 [ 1219.694832][T23619] ? alloc_fd+0x64c/0x6c0 [ 1219.694870][T23619] do_sys_openat2+0x121/0x1c0 [ 1219.694905][T23619] ? __pfx_do_sys_openat2+0x10/0x10 [ 1219.694940][T23619] ? ksys_write+0x22a/0x250 [ 1219.694971][T23619] __ia32_compat_sys_openat+0x131/0x160 [ 1219.694999][T23619] __do_fast_syscall_32+0xb6/0x2b0 [ 1219.695021][T23619] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.695056][T23619] do_fast_syscall_32+0x34/0x80 [ 1219.695078][T23619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.695103][T23619] RIP: 0023:0xf70ae539 [ 1219.695122][T23619] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1219.695140][T23619] RSP: 002b:00000000f509e100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1219.695163][T23619] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f509e150 [ 1219.695179][T23619] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7413ff4 [ 1219.695193][T23619] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1219.695204][T23619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1219.695226][T23619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.695258][T23619] [ 1219.973153][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.129650][T16341] usb 4-1: USB disconnect, device number 86 [ 1220.623663][T23662] FAULT_INJECTION: forcing a failure. [ 1220.623663][T23662] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1220.638179][T23662] CPU: 1 UID: 0 PID: 23662 Comm: syz.0.5452 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1220.638206][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1220.638219][T23662] Call Trace: [ 1220.638228][T23662] [ 1220.638236][T23662] dump_stack_lvl+0x189/0x250 [ 1220.638266][T23662] ? __pfx____ratelimit+0x10/0x10 [ 1220.638298][T23662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.638322][T23662] ? __pfx__printk+0x10/0x10 [ 1220.638358][T23662] ? __task_pid_nr_ns+0x28/0x470 [ 1220.638392][T23662] should_fail_ex+0x414/0x560 [ 1220.638428][T23662] futex_lock_pi_atomic+0xd2/0xd60 [ 1220.638468][T23662] futex_lock_pi+0x23d/0xa60 [ 1220.638499][T23662] ? _parse_integer_limit+0x1ae/0x1f0 [ 1220.638538][T23662] ? __pfx_futex_lock_pi+0x10/0x10 [ 1220.638602][T23662] ? __pfx_futex_wake_mark+0x10/0x10 [ 1220.638629][T23662] ? vfs_write+0x8d8/0xa90 [ 1220.638665][T23662] ? ksys_write+0x1cb/0x250 [ 1220.638693][T23662] do_futex+0x2fb/0x420 [ 1220.638721][T23662] ? __pfx_vfs_write+0x10/0x10 [ 1220.638748][T23662] ? __pfx_do_futex+0x10/0x10 [ 1220.638787][T23662] __se_sys_futex_time32+0x360/0x3e0 [ 1220.638818][T23662] ? fput+0xa0/0xd0 [ 1220.638851][T23662] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1220.638888][T23662] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1220.638910][T23662] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1220.638953][T23662] __do_fast_syscall_32+0xb6/0x2b0 [ 1220.638976][T23662] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.639012][T23662] do_fast_syscall_32+0x34/0x80 [ 1220.639034][T23662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1220.639059][T23662] RIP: 0023:0xf708e539 [ 1220.639077][T23662] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1220.639096][T23662] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1220.639120][T23662] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000008 [ 1220.639135][T23662] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1220.639147][T23662] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1220.639159][T23662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1220.639172][T23662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1220.639201][T23662] [ 1220.874380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.880596][T16341] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1221.025519][T18486] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1221.170626][T23665] loop4: detected capacity change from 0 to 524255232 [ 1221.215531][T16341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.220372][T23665] FAULT_INJECTION: forcing a failure. [ 1221.220372][T23665] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.238431][T16341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1221.247995][T18486] usb 6-1: device descriptor read/64, error -71 [ 1221.260937][T18488] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1221.272783][T16341] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1221.306525][T16341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1221.320808][T16341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1221.332661][T23665] CPU: 1 UID: 0 PID: 23665 Comm: syz.2.5451 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1221.332689][T23665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1221.332701][T23665] Call Trace: [ 1221.332707][T23665] [ 1221.332712][T23665] dump_stack_lvl+0x189/0x250 [ 1221.332732][T23665] ? __pfx____ratelimit+0x10/0x10 [ 1221.332753][T23665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1221.332768][T23665] ? __pfx__printk+0x10/0x10 [ 1221.332787][T23665] ? __pfx___might_resched+0x10/0x10 [ 1221.332801][T23665] ? fs_reclaim_acquire+0x7d/0x100 [ 1221.332821][T23665] should_fail_ex+0x414/0x560 [ 1221.332842][T23665] should_failslab+0xa8/0x100 [ 1221.332860][T23665] __kmalloc_noprof+0xcb/0x4f0 [ 1221.332874][T23665] ? tomoyo_encode+0x28b/0x550 [ 1221.332888][T23665] tomoyo_encode+0x28b/0x550 [ 1221.332904][T23665] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1221.332922][T23665] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1221.332939][T23665] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1221.332960][T23665] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1221.332994][T23665] ? __lock_acquire+0xab9/0xd20 [ 1221.333019][T23665] ? __fget_files+0x2a/0x420 [ 1221.333039][T23665] ? __fget_files+0x3a0/0x420 [ 1221.333054][T23665] ? __fget_files+0x2a/0x420 [ 1221.333072][T23665] security_file_ioctl_compat+0xcb/0x2d0 [ 1221.333090][T23665] __ia32_compat_sys_ioctl+0x128/0x840 [ 1221.333106][T23665] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1221.333120][T23665] ? __fget_files+0x3a0/0x420 [ 1221.333140][T23665] ? fput+0xa0/0xd0 [ 1221.333158][T23665] ? ksys_write+0x22a/0x250 [ 1221.333176][T23665] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1221.333190][T23665] ? lockdep_hardirqs_on+0x9c/0x150 [ 1221.333222][T23665] __do_fast_syscall_32+0xb6/0x2b0 [ 1221.333236][T23665] ? lockdep_hardirqs_on+0x9c/0x150 [ 1221.333257][T23665] do_fast_syscall_32+0x34/0x80 [ 1221.333270][T23665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.333286][T23665] RIP: 0023:0xf7f32539 [ 1221.333298][T23665] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1221.333309][T23665] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1221.333324][T23665] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c02 [ 1221.333333][T23665] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.333341][T23665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.333348][T23665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1221.333355][T23665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.333375][T23665] [ 1221.333391][T23665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1221.372440][T16341] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1221.617001][T23670] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1221.801724][T23665] loop4: detected capacity change from 524255232 to 524287935 [ 1221.850341][T18488] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1221.918540][T18488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1221.935596][T18486] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1222.158393][T18488] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1222.191748][T18488] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1222.222278][T18488] usb 5-1: Product: syz [ 1222.226683][T18486] usb 6-1: device descriptor read/64, error -71 [ 1222.233159][T18488] usb 5-1: Manufacturer: syz [ 1222.243180][T18488] usb 5-1: SerialNumber: syz [ 1222.249861][T16341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.281412][T18488] usb 5-1: config 0 descriptor?? [ 1222.291720][T18488] usb 5-1: can't set config #0, error -71 [ 1222.299661][T16341] usb 4-1: can't set config #1, error -71 [ 1222.307286][T18488] usb 5-1: USB disconnect, device number 75 [ 1222.317110][T16341] usb 4-1: USB disconnect, device number 87 [ 1222.356072][T18486] usb usb6-port1: attempt power cycle [ 1222.725525][T18486] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1222.836649][T18486] usb 6-1: device descriptor read/8, error -71 [ 1224.096201][T18461] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1224.325693][T17051] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1224.572252][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1224.572266][ T30] audit: type=1326 audit(1752342213.233:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23724 comm="syz.0.5466" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 1224.606304][T18461] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1224.634589][T23727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1224.688582][T23727] FAULT_INJECTION: forcing a failure. [ 1224.688582][T23727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.705619][T17051] usb 4-1: config 0 has no interfaces? [ 1224.706600][T23727] CPU: 0 UID: 0 PID: 23727 Comm: syz.2.5465 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1224.706626][T23727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1224.706638][T23727] Call Trace: [ 1224.706646][T23727] [ 1224.706654][T23727] dump_stack_lvl+0x189/0x250 [ 1224.706681][T23727] ? __pfx____ratelimit+0x10/0x10 [ 1224.706711][T23727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.706732][T23727] ? __pfx__printk+0x10/0x10 [ 1224.706758][T23727] ? __might_fault+0xb0/0x130 [ 1224.706792][T23727] should_fail_ex+0x414/0x560 [ 1224.706823][T23727] _copy_from_iter+0x1db/0x16f0 [ 1224.706848][T23727] ? rcu_is_watching+0x15/0xb0 [ 1224.706871][T23727] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1224.706902][T23727] ? __pfx__copy_from_iter+0x10/0x10 [ 1224.706923][T23727] ? __build_skb_around+0x257/0x3e0 [ 1224.706949][T23727] ? netlink_sendmsg+0x642/0xb30 [ 1224.706971][T23727] ? skb_put+0x11b/0x210 [ 1224.706996][T23727] netlink_sendmsg+0x6b2/0xb30 [ 1224.707028][T23727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1224.707053][T23727] ? __import_iovec+0x5d4/0x7f0 [ 1224.707072][T23727] ? aa_sock_msg_perm+0x94/0x160 [ 1224.707101][T23727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1224.707127][T23727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1224.707151][T23727] __sock_sendmsg+0x21c/0x270 [ 1224.707173][T23727] ____sys_sendmsg+0x505/0x830 [ 1224.707203][T23727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.707242][T23727] ___sys_sendmsg+0x21f/0x2a0 [ 1224.707268][T23727] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.707328][T23727] ? __fget_files+0x2a/0x420 [ 1224.707351][T23727] ? __fget_files+0x3a0/0x420 [ 1224.707385][T23727] __sys_sendmsg+0x164/0x220 [ 1224.707410][T23727] ? __pfx___sys_sendmsg+0x10/0x10 [ 1224.707448][T23727] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1224.707468][T23727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.707499][T23727] __do_fast_syscall_32+0xb6/0x2b0 [ 1224.707518][T23727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.707549][T23727] do_fast_syscall_32+0x34/0x80 [ 1224.707568][T23727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.707590][T23727] RIP: 0023:0xf7f32539 [ 1224.707607][T23727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1224.707629][T23727] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1224.707651][T23727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1224.707665][T23727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1224.707676][T23727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1224.707687][T23727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1224.707699][T23727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.707727][T23727] [ 1225.004127][T18461] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1225.068117][T18461] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f2.40 [ 1225.093494][T18461] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1225.114480][T18461] usb 5-1: Product: syz [ 1225.124034][T18461] usb 5-1: SerialNumber: syz [ 1225.708254][T17051] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1225.717632][T17051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.746340][T17051] usb 4-1: Product: syz [ 1225.750551][T17051] usb 4-1: Manufacturer: syz [ 1225.775796][T17051] usb 4-1: SerialNumber: syz [ 1225.806701][T17051] usb 4-1: config 0 descriptor?? [ 1226.384742][T23719] misc userio: No port type given on /dev/userio [ 1226.409408][T23719] misc userio: The device must be registered before sending interrupts [ 1226.942107][T18461] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input174 [ 1226.977924][ T5202] bcm5974 5-1:1.0: could not read from device [ 1227.014506][ T5202] bcm5974 5-1:1.0: could not read from device [ 1227.017709][T18461] usb 5-1: USB disconnect, device number 76 [ 1227.475493][T18486] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1227.593772][T18487] usb 4-1: USB disconnect, device number 88 [ 1227.645542][T18486] usb 6-1: Using ep0 maxpacket: 32 [ 1227.653161][T18486] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1227.664380][T18486] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1227.694032][T18486] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1227.706064][T18486] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1227.745526][T18486] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1227.760318][T18486] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1227.770190][T18486] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1227.795775][T18486] usb 6-1: Product: syz [ 1227.805935][T18486] usb 6-1: Manufacturer: syz [ 1227.810559][T18486] usb 6-1: SerialNumber: syz [ 1228.125035][T18486] usb 6-1: config 0 descriptor?? [ 1228.153824][T18486] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1228.225545][T18487] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1228.246550][T18486] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1228.375542][T18487] usb 4-1: Using ep0 maxpacket: 32 [ 1228.390260][T18487] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1228.416349][T23764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.429855][T18487] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 1228.463441][T23764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.479668][T18487] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1228.502052][T18487] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1228.523842][T18487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.553310][T18487] usb 4-1: Product: ъХЛяЩз▀│ю║Ау║▒с╝отЫ╝сХ╜рнТтК┐щЭпщ┐еьЖгфЪ░юЛЪь╢июЬжф░УюРЪщ╕║р╗пцж╜шж▓ъЕРюЦТр╗ЭъЗЛъК╡чШкх╖░ц╡мюЯ┐яФ╛шЮ▓чп╕эЖбшПНсЖгц╖дуНФшР╛ыХРяЭФюЧ▓уХЮуО╖у╣пшКВя▓ЫыгЪы▓│р╛╕щЯ╕хЬ╛яЫ│эЯ╡ьЙ╗ю┐ЬхХ╜фазцг╖ь╢Цув╝эЕ║ъЛеыМРхнШчлТхПЦу░отШояЗ╗фЯ┤ыизэЖ╜ы║Гу▒║ф╖иукЪтоСь╢ИсзДы╛╗ъиофР╖ыВ╖р╢ЙэДШуТ┤ужИц╢Г [ 1228.664148][T18487] usb 4-1: Manufacturer: ╨Я [ 1228.669407][T18487] usb 4-1: SerialNumber: ╨е [ 1228.705965][T23778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1228.713379][T23778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1228.976897][T23793] fuse: Unknown parameter 'f' [ 1229.040865][T23793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1229.105877][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1229.105884][T18486] usb 6-1: USB disconnect, device number 11 [ 1229.123285][T23789] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1229.168409][T18486] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1230.013584][T23806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1231.145506][T18461] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1231.229791][T18487] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 9 proto 3 vid 0x0525 pid 0xA4A8 [ 1231.251035][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.293958][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.335724][T18487] usb 4-1: USB disconnect, device number 89 [ 1231.335812][T18461] usb 6-1: Using ep0 maxpacket: 32 [ 1231.350657][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.387564][T18487] usblp0: removed [ 1231.391340][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.443845][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.479210][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.515530][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.601474][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.644614][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.675490][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.682982][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.733337][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.867821][T16341] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x0 [ 1231.907755][T16341] hid-generic 00A0:0008:0003.0026: hidraw0: HID v2000.02 Device [syz1] on syz1 [ 1231.929813][T23831] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5484'. [ 1231.939020][T18487] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1232.282215][T18487] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1232.339885][T18487] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1232.420941][T18487] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f2.40 [ 1232.441236][T23832] fido_id[23832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1232.490558][T18487] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1232.538788][T23834] FAULT_INJECTION: forcing a failure. [ 1232.538788][T23834] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.551695][T23834] CPU: 1 UID: 0 PID: 23834 Comm: syz.0.5487 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1232.551714][T23834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1232.551722][T23834] Call Trace: [ 1232.551728][T23834] [ 1232.551733][T23834] dump_stack_lvl+0x189/0x250 [ 1232.551753][T23834] ? __pfx____ratelimit+0x10/0x10 [ 1232.551777][T23834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1232.551792][T23834] ? __pfx__printk+0x10/0x10 [ 1232.551813][T23834] ? __pfx___might_resched+0x10/0x10 [ 1232.551831][T23834] should_fail_ex+0x414/0x560 [ 1232.551852][T23834] should_failslab+0xa8/0x100 [ 1232.551870][T23834] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1232.551885][T23834] ? __alloc_skb+0x112/0x2d0 [ 1232.551898][T23834] ? kasan_quarantine_put+0xdd/0x220 [ 1232.551914][T23834] __alloc_skb+0x112/0x2d0 [ 1232.551931][T23834] inet_netconf_notify_devconf+0x173/0x240 [ 1232.551953][T23834] inetdev_event+0x77f/0x15b0 [ 1232.551975][T23834] ? __pfx_inetdev_event+0x10/0x10 [ 1232.551999][T23834] notifier_call_chain+0x1b3/0x3e0 [ 1232.552019][T23834] unregister_netdevice_many_notify+0x15d8/0x2320 [ 1232.552047][T23834] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1232.552069][T23834] ? __lock_acquire+0xab9/0xd20 [ 1232.552087][T23834] ? __lock_acquire+0xab9/0xd20 [ 1232.552100][T23834] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1232.552130][T23834] unregister_netdevice_queue+0x33c/0x380 [ 1232.552151][T23834] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1232.552168][T23834] ? bpf_lsm_capable+0x9/0x20 [ 1232.552182][T23834] ? security_capable+0x7e/0x2e0 [ 1232.552204][T23834] ip_tunnel_ctl+0x217/0xc30 [ 1232.552220][T23834] ipgre_tunnel_ctl+0x2ef/0x5c0 [ 1232.552244][T23834] ip_tunnel_siocdevprivate+0xf5/0x180 [ 1232.552258][T23834] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 1232.552277][T23834] ? netdev_name_node_lookup+0xdf/0x120 [ 1232.552299][T23834] dev_ifsioc+0xb57/0xf00 [ 1232.552318][T23834] dev_ioctl+0x84c/0x1150 [ 1232.552333][T23834] sock_ioctl+0x719/0x790 [ 1232.552353][T23834] ? __pfx_sock_ioctl+0x10/0x10 [ 1232.552381][T23834] compat_sock_ioctl+0x285/0xc80 [ 1232.552403][T23834] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1232.552424][T23834] ? __fget_files+0x3a0/0x420 [ 1232.552439][T23834] ? __fget_files+0x2a/0x420 [ 1232.552457][T23834] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1232.552473][T23834] __ia32_compat_sys_ioctl+0x540/0x840 [ 1232.552488][T23834] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1232.552502][T23834] ? __fget_files+0x3a0/0x420 [ 1232.552521][T23834] ? irqentry_exit+0x74/0x90 [ 1232.552532][T23834] ? lockdep_hardirqs_on+0x9c/0x150 [ 1232.552564][T23834] __do_fast_syscall_32+0xb6/0x2b0 [ 1232.552577][T23834] ? lockdep_hardirqs_on+0x9c/0x150 [ 1232.552597][T23834] do_fast_syscall_32+0x34/0x80 [ 1232.552610][T23834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1232.552625][T23834] RIP: 0023:0xf708e539 [ 1232.552637][T23834] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1232.552648][T23834] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1232.552662][T23834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f2 [ 1232.552671][T23834] RDX: 0000000080000780 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.552679][T23834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.552686][T23834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1232.552693][T23834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1232.552711][T23834] [ 1232.934018][T18487] usb 4-1: Product: syz [ 1232.994377][T18487] usb 4-1: SerialNumber: syz [ 1233.355838][T17051] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1233.454339][T23840] loop4: detected capacity change from 0 to 524255232 [ 1233.556888][T17051] usb 5-1: Using ep0 maxpacket: 16 [ 1233.605522][T18461] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1233.617369][T18461] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1233.635224][T17051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.659588][T17051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.671880][T18461] usb 6-1: can't read configurations, error -71 [ 1233.712226][T17051] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1233.798344][T17051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.907495][T17051] usb 5-1: config 0 descriptor?? [ 1234.434370][T23851] FAULT_INJECTION: forcing a failure. [ 1234.434370][T23851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.490865][T17051] gt683r_led 0003:1770:FF00.0027: ignoring exceeding usage max [ 1234.536797][T17051] gt683r_led 0003:1770:FF00.0027: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 1234.575506][T23851] CPU: 0 UID: 0 PID: 23851 Comm: syz.0.5492 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1234.575540][T23851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1234.575554][T23851] Call Trace: [ 1234.575563][T23851] [ 1234.575573][T23851] dump_stack_lvl+0x189/0x250 [ 1234.575608][T23851] ? __pfx____ratelimit+0x10/0x10 [ 1234.575640][T23851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.575665][T23851] ? __pfx__printk+0x10/0x10 [ 1234.575694][T23851] ? __might_fault+0xb0/0x130 [ 1234.575730][T23851] should_fail_ex+0x414/0x560 [ 1234.575767][T23851] _copy_from_user+0x2d/0xb0 [ 1234.575792][T23851] get_compat_msghdr+0xad/0x4a0 [ 1234.575828][T23851] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1234.575868][T23851] ? rcu_is_watching+0x15/0xb0 [ 1234.575891][T23851] ? ___sys_recvmsg+0x1c4/0x510 [ 1234.575927][T23851] ___sys_recvmsg+0x17f/0x510 [ 1234.575960][T23851] ? __pfx____sys_recvmsg+0x10/0x10 [ 1234.576016][T23851] ? __fget_files+0x3a0/0x420 [ 1234.576055][T23851] do_recvmmsg+0x36a/0x770 [ 1234.576093][T23851] ? __pfx_do_recvmmsg+0x10/0x10 [ 1234.576132][T23851] ? __pfx_vfs_write+0x10/0x10 [ 1234.576171][T23851] __sys_recvmmsg+0x19d/0x280 [ 1234.576200][T23851] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1234.576224][T23851] ? ksys_write+0x22a/0x250 [ 1234.576258][T23851] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1234.576292][T23851] __do_fast_syscall_32+0xb6/0x2b0 [ 1234.576313][T23851] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.576346][T23851] do_fast_syscall_32+0x34/0x80 [ 1234.576366][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1234.576390][T23851] RIP: 0023:0xf708e539 [ 1234.576410][T23851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1234.576427][T23851] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1234.576450][T23851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1234.576465][T23851] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1234.576479][T23851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1234.576492][T23851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1234.576505][T23851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1234.576533][T23851] [ 1234.871294][T23838] input: syz0 as /devices/virtual/input/input175 [ 1235.183293][ T30] audit: type=1326 audit(1752342223.843:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23856 comm="syz.2.5494" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x0 [ 1235.288331][T17051] usb 5-1: USB disconnect, device number 77 [ 1235.311888][T18461] gt683r_led 0003:1770:FF00.0027: failed to send set report request: -19 [ 1235.327450][T18461] gt683r_led 0003:1770:FF00.0027: failed to send set report request: -19 [ 1235.364827][T18487] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input176 [ 1235.419857][ T5202] bcm5974 4-1:1.0: could not read from device [ 1235.433536][ T5202] bcm5974 4-1:1.0: could not read from device [ 1235.437408][T18487] usb 4-1: USB disconnect, device number 90 [ 1235.455231][ T5202] bcm5974 4-1:1.0: could not read from device [ 1235.555490][T18486] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1235.715674][T18486] usb 3-1: Using ep0 maxpacket: 16 [ 1236.579486][T23881] FAULT_INJECTION: forcing a failure. [ 1236.579486][T23881] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.627026][T23881] CPU: 1 UID: 0 PID: 23881 Comm: syz.4.5498 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1236.627066][T23881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1236.627079][T23881] Call Trace: [ 1236.627088][T23881] [ 1236.627097][T23881] dump_stack_lvl+0x189/0x250 [ 1236.627127][T23881] ? __pfx____ratelimit+0x10/0x10 [ 1236.627159][T23881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.627184][T23881] ? __pfx__printk+0x10/0x10 [ 1236.627215][T23881] ? __pfx___might_resched+0x10/0x10 [ 1236.627239][T23881] ? fs_reclaim_acquire+0x7d/0x100 [ 1236.627272][T23881] should_fail_ex+0x414/0x560 [ 1236.627309][T23881] should_failslab+0xa8/0x100 [ 1236.627336][T23881] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1236.627360][T23881] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1236.627394][T23881] radix_tree_node_alloc+0x7e/0x3a0 [ 1236.627428][T23881] idr_get_free+0x2b3/0xa70 [ 1236.627473][T23881] idr_alloc_u32+0x159/0x2d0 [ 1236.627510][T23881] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1236.627554][T23881] tcf_idr_check_alloc+0x5de/0x7b0 [ 1236.627585][T23881] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 1236.627614][T23881] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1236.627644][T23881] ? do_raw_read_unlock+0x3d/0x80 [ 1236.627674][T23881] ? load_metalist+0x49a/0x4f0 [ 1236.627704][T23881] tcf_ife_init+0x37c/0xd60 [ 1236.627740][T23881] ? __pfx_tcf_ife_init+0x10/0x10 [ 1236.627786][T23881] ? nla_memcpy+0x5b/0xc0 [ 1236.627816][T23881] tcf_action_init_1+0x460/0x6d0 [ 1236.627843][T23881] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1236.627862][T23881] ? _raw_read_unlock+0x28/0x50 [ 1236.627888][T23881] ? tc_action_load_ops+0x214/0x4e0 [ 1236.627932][T23881] ? __nla_parse+0x40/0x60 [ 1236.627955][T23881] tcf_action_init+0x2cf/0xab0 [ 1236.627978][T23881] ? kernel_text_address+0xa5/0xe0 [ 1236.628002][T23881] ? __pfx_tcf_action_init+0x10/0x10 [ 1236.628067][T23881] ? __mutex_trylock_common+0x153/0x260 [ 1236.628131][T23881] tcf_exts_validate_ex+0x223/0x530 [ 1236.628161][T23881] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1236.628188][T23881] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 1236.628209][T23881] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1236.628252][T23881] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 1236.628291][T23881] mall_change+0x473/0x8f0 [ 1236.628326][T23881] ? __pfx_mall_change+0x10/0x10 [ 1236.628369][T23881] tc_new_tfilter+0xdca/0x15b0 [ 1236.628427][T23881] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1236.628491][T23881] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1236.628518][T23881] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1236.628544][T23881] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1236.628565][T23881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1236.628605][T23881] netlink_rcv_skb+0x205/0x470 [ 1236.628630][T23881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1236.628653][T23881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1236.628693][T23881] ? netlink_deliver_tap+0x2e/0x1b0 [ 1236.628715][T23881] ? netlink_deliver_tap+0x2e/0x1b0 [ 1236.628751][T23881] netlink_unicast+0x75c/0x8e0 [ 1236.628786][T23881] netlink_sendmsg+0x805/0xb30 [ 1236.628821][T23881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.628848][T23881] ? __import_iovec+0x5d4/0x7f0 [ 1236.628868][T23881] ? aa_sock_msg_perm+0x94/0x160 [ 1236.628898][T23881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1236.628927][T23881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.628952][T23881] __sock_sendmsg+0x21c/0x270 [ 1236.628975][T23881] ____sys_sendmsg+0x505/0x830 [ 1236.629006][T23881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1236.629058][T23881] ___sys_sendmsg+0x21f/0x2a0 [ 1236.629086][T23881] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.629154][T23881] ? __fget_files+0x2a/0x420 [ 1236.629178][T23881] ? __fget_files+0x3a0/0x420 [ 1236.629218][T23881] __sys_sendmsg+0x164/0x220 [ 1236.629246][T23881] ? __pfx___sys_sendmsg+0x10/0x10 [ 1236.629288][T23881] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1236.629308][T23881] ? lockdep_hardirqs_on+0x9c/0x150 [ 1236.629340][T23881] __do_fast_syscall_32+0xb6/0x2b0 [ 1236.629360][T23881] ? lockdep_hardirqs_on+0x9c/0x150 [ 1236.629394][T23881] do_fast_syscall_32+0x34/0x80 [ 1236.629413][T23881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1236.629437][T23881] RIP: 0023:0xf7f41539 [ 1236.629454][T23881] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1236.629471][T23881] RSP: 002b:00000000f504555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1236.629492][T23881] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000580 [ 1236.629506][T23881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1236.629517][T23881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1236.629529][T23881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1236.629540][T23881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.629572][T23881] [ 1237.999145][T18486] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1238.057991][T18486] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1238.091789][T18486] usb 3-1: can't read configurations, error -71 [ 1238.335546][T17051] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1238.505499][T17051] usb 4-1: Using ep0 maxpacket: 32 [ 1238.539153][T17051] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1238.588839][T17051] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1238.632976][T17051] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1238.734991][T17051] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1238.758887][T17051] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1238.776782][T17051] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1238.788125][T17051] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1238.800515][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.806871][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.814610][T17051] usb 4-1: Product: syz [ 1238.819173][T17051] usb 4-1: Manufacturer: syz [ 1239.061208][T17051] usb 4-1: SerialNumber: syz [ 1239.116818][T17051] usb 4-1: config 0 descriptor?? [ 1239.217725][T17051] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1239.278840][T17051] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1239.426004][T23900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.450279][T23900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.152767][T23926] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1240.167033][T18460] usb 4-1: USB disconnect, device number 91 [ 1240.173047][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1240.202822][T18460] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1240.887777][T23934] FAULT_INJECTION: forcing a failure. [ 1240.887777][T23934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.932801][T23934] CPU: 0 UID: 0 PID: 23934 Comm: syz.2.5512 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1240.932833][T23934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1240.932847][T23934] Call Trace: [ 1240.932856][T23934] [ 1240.932864][T23934] dump_stack_lvl+0x189/0x250 [ 1240.932892][T23934] ? __pfx____ratelimit+0x10/0x10 [ 1240.932924][T23934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1240.932949][T23934] ? __pfx__printk+0x10/0x10 [ 1240.932977][T23934] ? __might_fault+0xb0/0x130 [ 1240.933013][T23934] should_fail_ex+0x414/0x560 [ 1240.933047][T23934] _copy_from_iter+0x1db/0x16f0 [ 1240.933075][T23934] ? rcu_is_watching+0x15/0xb0 [ 1240.933101][T23934] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1240.933126][T23934] ? __pfx__copy_from_iter+0x10/0x10 [ 1240.933150][T23934] ? __build_skb_around+0x257/0x3e0 [ 1240.933178][T23934] ? netlink_sendmsg+0x642/0xb30 [ 1240.933201][T23934] ? skb_put+0x11b/0x210 [ 1240.933229][T23934] netlink_sendmsg+0x6b2/0xb30 [ 1240.933265][T23934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.933293][T23934] ? __import_iovec+0x5d4/0x7f0 [ 1240.933315][T23934] ? aa_sock_msg_perm+0x94/0x160 [ 1240.933346][T23934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1240.933376][T23934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.933409][T23934] __sock_sendmsg+0x21c/0x270 [ 1240.933432][T23934] ____sys_sendmsg+0x505/0x830 [ 1240.933465][T23934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1240.933510][T23934] ___sys_sendmsg+0x21f/0x2a0 [ 1240.933539][T23934] ? __pfx____sys_sendmsg+0x10/0x10 [ 1240.933603][T23934] ? __fget_files+0x2a/0x420 [ 1240.933629][T23934] ? __fget_files+0x3a0/0x420 [ 1240.933668][T23934] __sys_sendmsg+0x164/0x220 [ 1240.933696][T23934] ? __pfx___sys_sendmsg+0x10/0x10 [ 1240.933739][T23934] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1240.933772][T23934] ? lockdep_hardirqs_on+0x9c/0x150 [ 1240.933804][T23934] __do_fast_syscall_32+0xb6/0x2b0 [ 1240.933827][T23934] ? lockdep_hardirqs_on+0x9c/0x150 [ 1240.933861][T23934] do_fast_syscall_32+0x34/0x80 [ 1240.933882][T23934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.933906][T23934] RIP: 0023:0xf7f32539 [ 1240.933925][T23934] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1240.933943][T23934] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1240.933967][T23934] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800006c0 [ 1240.933981][T23934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.933993][T23934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.934005][T23934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1240.934017][T23934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.934048][T23934] [ 1241.503750][T23946] fuse: Bad value for 'group_id' [ 1241.508938][T23946] fuse: Bad value for 'group_id' [ 1241.535304][T23946] fuse: Bad value for 'fd' [ 1243.148809][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.205608][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.213076][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.249630][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.266480][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.302700][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.316936][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.324745][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.332849][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.343181][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.356096][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.366216][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5521'. [ 1243.403359][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.442049][T18486] hid-generic 00A0:0008:0003.0028: unknown main item tag 0x0 [ 1243.497969][T18486] hid-generic 00A0:0008:0003.0028: hidraw0: HID v2000.02 Device [syz1] on syz1 [ 1243.715536][T18461] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1243.952633][T23897] syz.0.5503 (23897): drop_caches: 3 [ 1244.012829][T18461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.046528][T18461] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1244.055954][T18461] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.079029][T18461] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.088361][T18461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.099912][T18461] usb 3-1: Product: ╤М [ 1244.108761][T18461] usb 3-1: Manufacturer: ╤Ж [ 1244.113336][T18461] usb 3-1: SerialNumber: чо║хОпщКПхЩ╖яайтЬБсССуТПшФЯх▒Ьс┐Ръ│Йъ▒ГцЩвьЖЩумГцеСщВХсПЙч║жюЛЫцТШукАэВжче┤чЛ╖увФч┤┐юСмш╖┤скЕъЛбщж╡ьЬКюгЧшАИщЬЦтмЧэЪЭюаЦсИСю╡ФщГнукШфШГхЧМрмЛхЫСс▒пу╛лчл╡чгШцБЫщИаяоЮуЮПщнйшЮ╡р╡╗ю╝ЦэЙЭяЖНс║╕фнПсм▓ыОвф╝лр╖╣фй╗тЬа├ЖшЭЛш╖в╪ощ│ЭяпМсбЧтТ┐ю▓нщЬЖя╣БщиПхвАс▓Ую╢Шъд╗ъае╪лч║мш╗▓ы║Еъ┤┐яласИпьВ╖тгХф╖йщЙУх▒ХшЫ╡ъжпр▒В [ 1244.244114][ T30] audit: type=1326 audit(1752342232.903:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23979 comm="syz.5.5525" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709e539 code=0x0 [ 1244.464481][T18461] usb 3-1: 0:2 : does not exist [ 1244.551110][T18461] usb 3-1: USB disconnect, device number 86 [ 1244.717340][T20992] udevd[20992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1245.125544][T18461] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1245.212120][T18486] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1245.311238][T18461] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.321712][T18461] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1245.339733][T18461] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1245.350041][T18461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.368252][T18461] usb 4-1: config 0 descriptor?? [ 1245.401087][T18486] usb 5-1: Using ep0 maxpacket: 8 [ 1245.408945][T18486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.424893][T18486] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1245.451187][T18486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.464198][T18486] usb 5-1: config 0 descriptor?? [ 1245.475975][T18460] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1245.644972][T18460] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1245.677786][T18486] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1245.722968][T18460] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1245.765718][T18461] usb 4-1: USB disconnect, device number 92 [ 1245.773139][T18460] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1245.787441][T18460] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1245.801648][T18460] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1245.849228][T18460] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1245.858661][T18460] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1245.867554][T18460] usb 3-1: Product: syz [ 1245.871954][T18460] usb 3-1: Manufacturer: syz [ 1245.917037][T18460] cdc_wdm 3-1:1.0: skipping garbage [ 1245.954615][T18460] cdc_wdm 3-1:1.0: skipping garbage [ 1245.981184][T17051] usb 5-1: USB disconnect, device number 78 [ 1245.981203][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1246.003068][T18460] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1246.044598][T18460] cdc_wdm 3-1:1.0: Unknown control protocol [ 1246.506014][T24010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.514900][T24010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.098958][T18486] usb 3-1: USB disconnect, device number 87 [ 1247.182991][ T30] audit: type=1326 audit(1752342235.843:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24014 comm="syz.5.5534" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 1247.439787][T24025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5535'. [ 1247.537235][T18460] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1248.685474][T18460] usb 6-1: Using ep0 maxpacket: 16 [ 1249.215499][T18486] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1249.365580][T18486] usb 3-1: Using ep0 maxpacket: 8 [ 1249.376508][T18486] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1249.389626][T18486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.417011][T18486] usb 3-1: Product: syz [ 1249.433631][T18486] usb 3-1: Manufacturer: syz [ 1249.459676][T18486] usb 3-1: SerialNumber: syz [ 1249.496069][T18486] usb 3-1: config 0 descriptor?? [ 1249.565701][T16341] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1249.722991][T18486] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1249.731990][T16341] usb 4-1: Using ep0 maxpacket: 16 [ 1249.761914][T16341] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1249.788162][T16341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.810696][T16341] usb 4-1: Product: syz [ 1249.832016][T16341] usb 4-1: Manufacturer: syz [ 1249.844448][T16341] usb 4-1: SerialNumber: syz [ 1249.890076][T16341] usb 4-1: config 0 descriptor?? [ 1249.926896][T24035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.949013][T24035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.950202][T16341] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1250.018587][T16341] usb 4-1: Detected FT4233HP [ 1250.164315][T18460] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1250.182242][T16341] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1250.206043][T18460] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1250.228104][T16341] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1250.347219][T18460] usb 6-1: can't read configurations, error -71 [ 1250.795008][T24051] FAULT_INJECTION: forcing a failure. [ 1250.795008][T24051] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.819300][T24051] CPU: 0 UID: 0 PID: 24051 Comm: syz.5.5544 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1250.819336][T24051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1250.819349][T24051] Call Trace: [ 1250.819358][T24051] [ 1250.819367][T24051] dump_stack_lvl+0x189/0x250 [ 1250.819398][T24051] ? __pfx____ratelimit+0x10/0x10 [ 1250.819431][T24051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.819456][T24051] ? __pfx__printk+0x10/0x10 [ 1250.819514][T24051] ? ref_tracker_alloc+0x318/0x460 [ 1250.819549][T24051] should_fail_ex+0x414/0x560 [ 1250.819583][T24051] should_failslab+0xa8/0x100 [ 1250.819611][T24051] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1250.819633][T24051] ? skb_clone+0x212/0x3a0 [ 1250.819664][T24051] skb_clone+0x212/0x3a0 [ 1250.819694][T24051] __netlink_deliver_tap+0x404/0x850 [ 1250.819732][T24051] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.819759][T24051] netlink_deliver_tap+0x19c/0x1b0 [ 1250.819785][T24051] netlink_unicast+0x730/0x8e0 [ 1250.819821][T24051] netlink_sendmsg+0x805/0xb30 [ 1250.819859][T24051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.819897][T24051] ? aa_sock_msg_perm+0x94/0x160 [ 1250.819930][T24051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1250.819959][T24051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.819985][T24051] __sock_sendmsg+0x21c/0x270 [ 1250.820010][T24051] sock_sendmsg+0x158/0x230 [ 1250.820044][T24051] ? __pfx_sock_sendmsg+0x10/0x10 [ 1250.820091][T24051] ? __asan_memset+0x22/0x50 [ 1250.820112][T24051] ? iov_iter_bvec+0xb8/0x180 [ 1250.820138][T24051] splice_to_socket+0x8ff/0xf10 [ 1250.820192][T24051] ? __pfx_splice_to_socket+0x10/0x10 [ 1250.820214][T24051] ? aa_file_perm+0x3e7/0xed0 [ 1250.820264][T24051] ? get_pid_task+0x20/0x1f0 [ 1250.820312][T24051] ? bpf_lsm_file_permission+0x9/0x20 [ 1250.820331][T24051] ? security_file_permission+0x75/0x290 [ 1250.820359][T24051] ? rw_verify_area+0x258/0x650 [ 1250.820384][T24051] ? __pfx_splice_to_socket+0x10/0x10 [ 1250.820407][T24051] do_splice+0xc79/0x1660 [ 1250.820460][T24051] ? __pfx_do_splice+0x10/0x10 [ 1250.820497][T24051] __se_sys_splice+0x2e1/0x460 [ 1250.820532][T24051] ? __pfx___se_sys_splice+0x10/0x10 [ 1250.820562][T24051] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1250.820583][T24051] ? __ia32_sys_splice+0x21/0xf0 [ 1250.820614][T24051] __do_fast_syscall_32+0xb6/0x2b0 [ 1250.820635][T24051] ? lockdep_hardirqs_on+0x9c/0x150 [ 1250.820671][T24051] do_fast_syscall_32+0x34/0x80 [ 1250.820692][T24051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1250.820716][T24051] RIP: 0023:0xf709e539 [ 1250.820735][T24051] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1250.820753][T24051] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 1250.820777][T24051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1250.820791][T24051] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000000000b [ 1250.820803][T24051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.820816][T24051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1250.820828][T24051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.820861][T24051] [ 1251.357086][T18486] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1251.371354][T18486] usb 3-1: USB disconnect, device number 88 [ 1251.465314][T24061] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1251.487148][T24061] netlink: 'syz.0.5545': attribute type 1 has an invalid length. [ 1251.575320][T24065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1252.292964][T18486] usb 4-1: USB disconnect, device number 93 [ 1252.301524][T18486] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1252.313875][T18486] ftdi_sio 4-1:0.0: device disconnected [ 1252.411156][T24061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.635186][ T5167] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1252.722816][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5551'. [ 1252.748334][T18487] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1252.774330][T24084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5551'. [ 1252.939099][T18487] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.023059][T18487] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1253.114638][T18487] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1253.157960][T18487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.194633][T24065] bond0 (unregistering): Released all slaves [ 1253.211247][T18487] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1253.306189][ T30] audit: type=1326 audit(1752342241.903:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24086 comm="syz.3.5552" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 1253.374432][T18487] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1253.580335][T24092] input: syz0 as /devices/virtual/input/input177 [ 1253.587336][T16341] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1253.778196][T16341] usb 4-1: Using ep0 maxpacket: 16 [ 1254.172176][T24101] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1254.515602][T17051] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1254.625297][T24108] io-wq is not configured for unbound workers [ 1254.680648][T17051] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 1254.720704][T17051] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.736167][T18486] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 1254.738439][T17051] usb 6-1: config 135 has no interface number 0 [ 1254.751483][T17051] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.770498][T17051] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1254.780266][T17051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.788722][T17051] usb 6-1: Product: syz [ 1254.793202][T17051] usb 6-1: Manufacturer: syz [ 1254.798511][T17051] usb 6-1: SerialNumber: syz [ 1254.826319][T17051] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 1254.840126][T17051] usb 6-1: No valid video chain found. [ 1254.905759][T18486] usb 5-1: Invalid ep0 maxpacket: 64 [ 1255.075772][T18486] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1255.101259][T17051] usb 6-1: USB disconnect, device number 16 [ 1255.235531][T18486] usb 5-1: Invalid ep0 maxpacket: 64 [ 1255.241600][T18486] usb usb5-port1: attempt power cycle [ 1255.606030][T18486] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 1255.657198][T18486] usb 5-1: Invalid ep0 maxpacket: 64 [ 1255.679720][T17051] usb 3-1: USB disconnect, device number 89 [ 1255.805949][T18486] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 1255.836386][T18486] usb 5-1: Invalid ep0 maxpacket: 64 [ 1255.849693][T18486] usb usb5-port1: unable to enumerate USB device [ 1256.079322][T24121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5562'. [ 1256.146702][T16341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1256.174752][T16341] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1256.213042][T16341] usb 4-1: can't read configurations, error -71 [ 1257.109448][T24136] Cannot find del_set index 0 as target [ 1257.345101][T24143] FAULT_INJECTION: forcing a failure. [ 1257.345101][T24143] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.362189][T24143] CPU: 0 UID: 0 PID: 24143 Comm: syz.4.5569 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1257.362219][T24143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1257.362230][T24143] Call Trace: [ 1257.362239][T24143] [ 1257.362249][T24143] dump_stack_lvl+0x189/0x250 [ 1257.362278][T24143] ? __pfx____ratelimit+0x10/0x10 [ 1257.362309][T24143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1257.362331][T24143] ? __pfx__printk+0x10/0x10 [ 1257.362364][T24143] ? __pfx___might_resched+0x10/0x10 [ 1257.362386][T24143] ? fs_reclaim_acquire+0x7d/0x100 [ 1257.362418][T24143] should_fail_ex+0x414/0x560 [ 1257.362452][T24143] should_failslab+0xa8/0x100 [ 1257.362481][T24143] __kmalloc_cache_noprof+0x70/0x3d0 [ 1257.362505][T24143] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1257.362534][T24143] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1257.362567][T24143] sctp_association_new+0x15d3/0x25f0 [ 1257.362610][T24143] sctp_connect_new_asoc+0x2c5/0x690 [ 1257.362641][T24143] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1257.362665][T24143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1257.362696][T24143] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1257.362716][T24143] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1257.362743][T24143] sctp_sendmsg+0x155c/0x2810 [ 1257.362783][T24143] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1257.362821][T24143] ? aa_sk_perm+0x81e/0x950 [ 1257.362856][T24143] ? __pfx_aa_sk_perm+0x10/0x10 [ 1257.362887][T24143] ? sock_rps_record_flow+0x19/0x410 [ 1257.362920][T24143] ? inet_sendmsg+0x2f4/0x370 [ 1257.362944][T24143] __sock_sendmsg+0x19c/0x270 [ 1257.362969][T24143] __sys_sendto+0x3bd/0x520 [ 1257.362996][T24143] ? __pfx___sys_sendto+0x10/0x10 [ 1257.363016][T24143] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1257.363050][T24143] ? __fget_files+0x3a0/0x420 [ 1257.363087][T24143] ? ksys_write+0x22a/0x250 [ 1257.363120][T24143] __ia32_sys_sendto+0xdd/0x100 [ 1257.363154][T24143] __do_fast_syscall_32+0xb6/0x2b0 [ 1257.363175][T24143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1257.363208][T24143] do_fast_syscall_32+0x34/0x80 [ 1257.363229][T24143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1257.363251][T24143] RIP: 0023:0xf7f41539 [ 1257.363270][T24143] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1257.363288][T24143] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1257.363309][T24143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1257.363323][T24143] RDX: 0000000000000001 RSI: 0000000000040050 RDI: 0000000080000040 [ 1257.363335][T24143] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1257.363347][T24143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1257.363359][T24143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1257.363389][T24143] [ 1257.793106][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1257.844221][T24150] libceph: resolve '0' (ret=-3): failed [ 1257.853497][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1257.908257][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1257.987807][T24148] netlink: 111 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1258.278920][T24156] FAULT_INJECTION: forcing a failure. [ 1258.278920][T24156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.301467][ T30] audit: type=1326 audit(1752342246.963:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24154 comm="syz.4.5574" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x0 [ 1258.323613][T24156] CPU: 1 UID: 0 PID: 24156 Comm: syz.2.5573 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1258.323642][T24156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1258.323655][T24156] Call Trace: [ 1258.323665][T24156] [ 1258.323674][T24156] dump_stack_lvl+0x189/0x250 [ 1258.323705][T24156] ? __pfx____ratelimit+0x10/0x10 [ 1258.323737][T24156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.323761][T24156] ? __pfx__printk+0x10/0x10 [ 1258.323789][T24156] ? __might_fault+0xb0/0x130 [ 1258.323826][T24156] should_fail_ex+0x414/0x560 [ 1258.323861][T24156] _copy_from_iter+0x1db/0x16f0 [ 1258.323887][T24156] ? rcu_is_watching+0x15/0xb0 [ 1258.323914][T24156] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1258.323941][T24156] ? __pfx__copy_from_iter+0x10/0x10 [ 1258.323964][T24156] ? __build_skb_around+0x257/0x3e0 [ 1258.323993][T24156] ? netlink_sendmsg+0x642/0xb30 [ 1258.324016][T24156] ? skb_put+0x11b/0x210 [ 1258.324044][T24156] netlink_sendmsg+0x6b2/0xb30 [ 1258.324080][T24156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.324108][T24156] ? __import_iovec+0x5d4/0x7f0 [ 1258.324128][T24156] ? aa_sock_msg_perm+0x94/0x160 [ 1258.324159][T24156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1258.324188][T24156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.324215][T24156] __sock_sendmsg+0x21c/0x270 [ 1258.324238][T24156] ____sys_sendmsg+0x505/0x830 [ 1258.324271][T24156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1258.324317][T24156] ___sys_sendmsg+0x21f/0x2a0 [ 1258.324345][T24156] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.324413][T24156] ? __fget_files+0x2a/0x420 [ 1258.324438][T24156] ? __fget_files+0x3a0/0x420 [ 1258.324477][T24156] __sys_sendmsg+0x164/0x220 [ 1258.324505][T24156] ? __pfx___sys_sendmsg+0x10/0x10 [ 1258.324548][T24156] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1258.324577][T24156] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.324611][T24156] __do_fast_syscall_32+0xb6/0x2b0 [ 1258.324632][T24156] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.324666][T24156] do_fast_syscall_32+0x34/0x80 [ 1258.324687][T24156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1258.324710][T24156] RIP: 0023:0xf7f32539 [ 1258.324728][T24156] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1258.324746][T24156] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1258.324768][T24156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1258.324783][T24156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1258.324795][T24156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1258.324806][T24156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1258.324819][T24156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1258.324849][T24156] [ 1258.632140][T24164] program syz.5.5577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1258.843401][T24171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1258.886198][T16341] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1258.947241][T17051] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1259.035631][T16341] usb 6-1: Using ep0 maxpacket: 32 [ 1259.045003][T16341] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1259.060449][T16341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1259.084566][T16341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1259.104154][T16341] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1259.105507][T17051] usb 5-1: Using ep0 maxpacket: 16 [ 1259.113957][T16341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.190329][T16341] usb 6-1: config 0 descriptor?? [ 1259.208919][T24164] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1259.226740][T16341] hub 6-1:0.0: USB hub found [ 1259.429502][T16341] hub 6-1:0.0: 2 ports detected [ 1259.871951][T16341] hub 6-1:0.0: set hub depth failed [ 1259.887608][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5580'. [ 1259.892957][T16341] usb 6-1: USB disconnect, device number 17 [ 1259.900324][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5580'. [ 1259.925797][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5580'. [ 1260.335737][T18460] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1260.445798][T24187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1260.502852][T24179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.531442][T24179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.588594][T18460] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1260.610627][T24191] netlink: 'syz.2.5581': attribute type 10 has an invalid length. [ 1260.632681][T18460] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1260.645893][T18460] usb 4-1: can't read configurations, error -71 [ 1260.713327][T24195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5581'. [ 1260.713669][T24191] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1260.749968][T24195] syz_tun: left allmulticast mode [ 1260.762780][T24195] syz_tun: left promiscuous mode [ 1260.769998][T24195] bridge0: port 3(syz_tun) entered disabled state [ 1260.782252][T24195] bridge_slave_1: left allmulticast mode [ 1260.788266][T24195] bridge_slave_1: left promiscuous mode [ 1260.799143][T24195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.811936][T24195] bridge_slave_0: left allmulticast mode [ 1260.819348][T24195] bridge_slave_0: left promiscuous mode [ 1260.830439][T24195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.872378][T24195] bond0: (slave bridge0): Releasing backup interface [ 1261.245600][T18461] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1261.332111][T17051] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1261.361028][T17051] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1261.390804][T17051] usb 5-1: can't read configurations, error -71 [ 1261.426101][T18461] usb 6-1: Using ep0 maxpacket: 8 [ 1261.454904][T18461] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1261.486490][T18461] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1261.500609][T18461] usb 6-1: Product: syz [ 1261.504861][T18461] usb 6-1: Manufacturer: syz [ 1261.511455][T18461] usb 6-1: SerialNumber: syz [ 1261.540608][T18461] usb 6-1: config 0 descriptor?? [ 1261.577690][T18461] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1261.702903][ T30] audit: type=1800 audit(1752342250.363:1948): pid=24209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5589" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1261.828011][T17051] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1261.988770][T17051] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1262.005221][T17051] usb 5-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1262.033234][T17051] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1262.057691][T17051] usb 5-1: string descriptor 0 read error: -22 [ 1262.075113][T17051] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 1262.084451][T17051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.095782][T18461] gspca_zc3xx: reg_w_i err -110 [ 1262.103480][T18461] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1262.108067][T24205] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1262.155121][T17051] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input178 [ 1262.336503][T24205] netlink: 'syz.4.5588': attribute type 27 has an invalid length. [ 1262.345214][T24205] team0: left promiscuous mode [ 1262.350171][T24205] team0: left allmulticast mode [ 1262.581453][ T5202] bcm5974 5-1:1.0: could not read from device [ 1262.621626][ T5202] bcm5974 5-1:1.0: could not read from device [ 1262.647578][T17051] usb 5-1: USB disconnect, device number 84 [ 1262.657230][ T5202] bcm5974 5-1:1.0: could not read from device [ 1262.664054][ T5202] bcm5974 5-1:1.0: could not read from device [ 1262.721288][T20992] udevd[20992]: Error opening device "/dev/input/event4": No such file or directory [ 1262.734740][T20992] udevd[20992]: Unable to EVIOCGABS device "/dev/input/event4" [ 1262.754601][T20992] udevd[20992]: Unable to EVIOCGABS device "/dev/input/event4" [ 1262.765162][T20992] udevd[20992]: Unable to EVIOCGABS device "/dev/input/event4" [ 1262.783353][T20992] udevd[20992]: Unable to EVIOCGABS device "/dev/input/event4" [ 1263.256738][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1263.962067][T16341] usb 6-1: USB disconnect, device number 18 [ 1264.284722][T24223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5592'. [ 1264.348774][ T5167] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1264.766364][T18461] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1264.779004][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5596'. [ 1264.947024][T18461] usb 4-1: Using ep0 maxpacket: 16 [ 1265.120688][T24241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1265.127368][T24241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1265.143206][T18461] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1265.152638][T18461] usb 4-1: config 0 has no interface number 0 [ 1265.161130][T18461] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 254, setting to 64 [ 1265.173128][T24241] vhci_hcd vhci_hcd.0: Device attached [ 1265.204932][T18461] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1265.215196][T18461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.237027][T18461] usb 4-1: Product: syz [ 1265.251527][T18461] usb 4-1: Manufacturer: syz [ 1265.273661][T18461] usb 4-1: SerialNumber: syz [ 1265.307706][T18461] usb 4-1: config 0 descriptor?? [ 1265.316848][ T30] audit: type=1326 audit(1752342253.983:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24245 comm="syz.5.5598" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 1265.402532][T18461] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1265.426222][T17051] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1265.434812][T18460] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1265.590404][ T8858] bridge_slave_1: left allmulticast mode [ 1265.616604][ T8858] bridge_slave_1: left promiscuous mode [ 1265.636339][T18460] usb 3-1: Using ep0 maxpacket: 32 [ 1265.640238][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.664940][T18460] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1265.666658][ T8858] bridge_slave_0: left allmulticast mode [ 1265.683736][ T8858] bridge_slave_0: left promiscuous mode [ 1265.692400][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.741922][T18460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.765566][T10809] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1265.802726][T18460] usb 3-1: config 0 descriptor?? [ 1265.841031][T18460] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1265.882865][T18460] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1265.925565][T18460] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 1265.939890][T10809] usb 6-1: Using ep0 maxpacket: 16 [ 1266.205601][T17051] usb 37-1: device descriptor read/64, error -71 [ 1266.445737][T17051] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1266.485597][T21338] usb 4-1: Failed to submit usb control message: -71 [ 1266.493329][T21338] usb 4-1: unable to send the bmi data to the device: -71 [ 1266.506824][T21338] usb 4-1: unable to get target info from device [ 1266.513213][T21338] usb 4-1: could not get target info (-71) [ 1266.517163][T18460] usb 4-1: USB disconnect, device number 98 [ 1266.562651][T24261] FAULT_INJECTION: forcing a failure. [ 1266.562651][T24261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.565667][T21338] usb 4-1: could not probe fw (-71) [ 1266.586706][T18486] usb 3-1: USB disconnect, device number 90 [ 1266.601312][T24242] vhci_hcd: connection reset by peer [ 1266.613293][T21338] vhci_hcd: stop threads [ 1266.628654][T21338] vhci_hcd: release socket [ 1266.633597][T21338] vhci_hcd: disconnect device [ 1266.650619][T24261] CPU: 1 UID: 0 PID: 24261 Comm: syz.4.5601 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1266.650649][T24261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1266.650663][T24261] Call Trace: [ 1266.650672][T24261] [ 1266.650681][T24261] dump_stack_lvl+0x189/0x250 [ 1266.650711][T24261] ? __pfx____ratelimit+0x10/0x10 [ 1266.650748][T24261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.650771][T24261] ? __pfx__printk+0x10/0x10 [ 1266.650813][T24261] should_fail_ex+0x414/0x560 [ 1266.650849][T24261] _copy_to_user+0x31/0xb0 [ 1266.650877][T24261] simple_read_from_buffer+0xe1/0x170 [ 1266.650909][T24261] proc_fail_nth_read+0x1df/0x250 [ 1266.650942][T24261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1266.650974][T24261] ? rw_verify_area+0x258/0x650 [ 1266.650997][T24261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1266.651025][T24261] vfs_read+0x200/0x980 [ 1266.651055][T24261] ? __pfx___mutex_lock+0x10/0x10 [ 1266.651076][T24261] ? __pfx_vfs_read+0x10/0x10 [ 1266.651101][T24261] ? __fget_files+0x2a/0x420 [ 1266.651133][T24261] ? __fget_files+0x3a0/0x420 [ 1266.651157][T24261] ? __fget_files+0x2a/0x420 [ 1266.651194][T24261] ksys_read+0x145/0x250 [ 1266.651219][T24261] ? __pfx_ksys_read+0x10/0x10 [ 1266.651244][T24261] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1266.651264][T24261] ? lockdep_hardirqs_on+0x9c/0x150 [ 1266.651298][T24261] __do_fast_syscall_32+0xb6/0x2b0 [ 1266.651328][T24261] do_fast_syscall_32+0x34/0x80 [ 1266.651349][T24261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.651372][T24261] RIP: 0023:0xf7f41539 [ 1266.651391][T24261] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1266.651409][T24261] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1266.651432][T24261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 1266.651446][T24261] RDX: 000000000000000f RSI: 00000000f73d3ff4 RDI: 0000000000000000 [ 1266.651458][T24261] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1266.651470][T24261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1266.651482][T24261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.651523][T24261] [ 1267.337406][T24263] could not allocate digest TFM handle tgr128-generic [ 1267.509455][T24271] FAULT_INJECTION: forcing a failure. [ 1267.509455][T24271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.540837][T24271] CPU: 1 UID: 0 PID: 24271 Comm: syz.4.5604 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1267.540868][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1267.540880][T24271] Call Trace: [ 1267.540888][T24271] [ 1267.540898][T24271] dump_stack_lvl+0x189/0x250 [ 1267.540930][T24271] ? __pfx____ratelimit+0x10/0x10 [ 1267.540959][T24271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1267.540981][T24271] ? __pfx__printk+0x10/0x10 [ 1267.541006][T24271] ? __might_fault+0xb0/0x130 [ 1267.541041][T24271] should_fail_ex+0x414/0x560 [ 1267.541073][T24271] _copy_from_iter+0x1db/0x16f0 [ 1267.541097][T24271] ? rcu_is_watching+0x15/0xb0 [ 1267.541120][T24271] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1267.541144][T24271] ? __pfx__copy_from_iter+0x10/0x10 [ 1267.541165][T24271] ? __build_skb_around+0x257/0x3e0 [ 1267.541191][T24271] ? netlink_sendmsg+0x642/0xb30 [ 1267.541211][T24271] ? skb_put+0x11b/0x210 [ 1267.541237][T24271] netlink_sendmsg+0x6b2/0xb30 [ 1267.541270][T24271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.541296][T24271] ? __import_iovec+0x5d4/0x7f0 [ 1267.541315][T24271] ? aa_sock_msg_perm+0x94/0x160 [ 1267.541343][T24271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1267.541370][T24271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.541393][T24271] __sock_sendmsg+0x21c/0x270 [ 1267.541415][T24271] ____sys_sendmsg+0x505/0x830 [ 1267.541446][T24271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1267.541498][T24271] ___sys_sendmsg+0x21f/0x2a0 [ 1267.541525][T24271] ? __pfx____sys_sendmsg+0x10/0x10 [ 1267.541589][T24271] ? __fget_files+0x2a/0x420 [ 1267.541612][T24271] ? __fget_files+0x3a0/0x420 [ 1267.541648][T24271] __sys_sendmsg+0x164/0x220 [ 1267.541674][T24271] ? __pfx___sys_sendmsg+0x10/0x10 [ 1267.541713][T24271] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1267.541732][T24271] ? lockdep_hardirqs_on+0x9c/0x150 [ 1267.541763][T24271] __do_fast_syscall_32+0xb6/0x2b0 [ 1267.541784][T24271] ? lockdep_hardirqs_on+0x9c/0x150 [ 1267.541815][T24271] do_fast_syscall_32+0x34/0x80 [ 1267.541834][T24271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1267.541857][T24271] RIP: 0023:0xf7f41539 [ 1267.541875][T24271] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1267.541892][T24271] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1267.541913][T24271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1267.541927][T24271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.541938][T24271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.541950][T24271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1267.541961][T24271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.541990][T24271] [ 1267.955529][T18460] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1268.096073][T24275] binder: 24274:24275 ioctl c0306201 80000640 returned -22 [ 1268.126070][T18460] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1268.134398][T18460] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.144636][T18460] usb 4-1: config 0 has no interface number 0 [ 1268.154510][T18460] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1268.168004][T18460] usb 4-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1268.195593][T18460] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1268.204895][T18460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.262757][T18460] usb 4-1: config 0 descriptor?? [ 1268.271128][T10809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1268.309695][T18460] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1268.318350][T10809] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1268.342389][T10809] usb 6-1: can't read configurations, error -71 [ 1268.534094][T18486] usb 4-1: USB disconnect, device number 99 [ 1268.743571][ T8858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.756027][ T8858] bond_slave_0: left promiscuous mode [ 1268.765309][ T8858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.774646][ T8858] bond_slave_1: left promiscuous mode [ 1268.782131][ T8858] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1268.791513][ T8858] batadv0: left promiscuous mode [ 1268.797266][ T8858] bond0 (unregistering): Released all slaves [ 1268.814021][ T8858] bond1 (unregistering): Released all slaves [ 1268.885794][T10809] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1268.935681][ T8858] tipc: Left network mode [ 1269.075501][T10809] usb 6-1: Using ep0 maxpacket: 16 [ 1269.084602][T10809] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.106644][T10809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1269.167112][T10809] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.219940][T10809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.277403][T10809] usb 6-1: Product: syz [ 1269.281667][T10809] usb 6-1: Manufacturer: syz [ 1269.298612][T10809] usb 6-1: SerialNumber: syz [ 1269.345590][T18460] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1269.495492][T18460] usb 5-1: Using ep0 maxpacket: 16 [ 1269.507959][T18460] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.521238][T24286] netlink: 'syz.5.5609': attribute type 1 has an invalid length. [ 1269.545442][T18460] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1269.625896][T18460] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1269.655532][T18460] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1269.669585][T18460] usb 5-1: Product: syz [ 1269.673847][T18460] usb 5-1: Manufacturer: syz [ 1269.691774][T10809] usb 6-1: 0:2 : does not exist [ 1269.758209][T18460] usb 5-1: SerialNumber: syz [ 1269.763300][T10809] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1269.799402][T18460] usb 5-1: config 0 descriptor?? [ 1269.916897][T10809] usb 6-1: USB disconnect, device number 20 [ 1270.110191][T20992] udevd[20992]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.242133][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.336903][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.826955][T24326] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1270.838945][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1271.588517][T17051] vhci_hcd: vhci_device speed not set [ 1271.653604][ T8858] team0 (unregistering): Port device team_slave_1 removed [ 1271.722431][ T8858] team0 (unregistering): Port device C removed [ 1272.072886][T18486] usb 5-1: USB disconnect, device number 85 [ 1272.303441][T24314] syzkaller1: entered promiscuous mode [ 1272.315023][T24314] syzkaller1: entered allmulticast mode [ 1272.475121][ T30] audit: type=1326 audit(1752342261.133:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24338 comm="syz.5.5619" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 1273.056613][T18461] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1273.286568][T18461] usb 6-1: Using ep0 maxpacket: 16 [ 1274.383069][T24374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1274.439341][T24374] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1274.492887][T24374] netlink: 'syz.3.5624': attribute type 5 has an invalid length. [ 1274.533759][T24374] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1275.065539][T18486] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1275.183631][T24389] --map-set only usable from mangle table [ 1275.246476][T18486] usb 3-1: Using ep0 maxpacket: 16 [ 1275.262927][T18486] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1275.278608][T18486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.305638][T18486] usb 3-1: Product: syz [ 1275.310139][T18486] usb 3-1: Manufacturer: syz [ 1275.314769][T18486] usb 3-1: SerialNumber: syz [ 1275.373132][T18486] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1275.386646][T18486] r8152-cfgselector 3-1: config 0 descriptor?? [ 1275.472455][T18461] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.483095][T18461] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1275.507396][T18461] usb 6-1: can't read configurations, error -71 [ 1275.520711][T24396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1276.106629][T10809] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1276.183936][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1276.275464][T10809] usb 5-1: Using ep0 maxpacket: 8 [ 1276.288411][T10809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1276.299096][T10809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.309596][T10809] usb 5-1: Product: syz [ 1276.313898][T10809] usb 5-1: Manufacturer: syz [ 1276.318873][T10809] usb 5-1: SerialNumber: syz [ 1276.334051][T10809] usb 5-1: config 0 descriptor?? [ 1276.554923][T10809] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1276.915553][T18461] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 1277.069349][T18461] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1277.082150][T18461] usb 4-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1277.099885][T18461] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1277.117002][T18461] usb 4-1: string descriptor 0 read error: -22 [ 1277.123963][T18461] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 1277.134152][T18461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.153092][T24423] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1277.169848][T10809] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1277.225235][T18461] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input179 [ 1277.242380][T10809] usb 5-1: USB disconnect, device number 86 [ 1277.343749][ T30] audit: type=1326 audit(1752342266.003:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5634" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x0 [ 1277.430334][T24423] netlink: 'syz.3.5633': attribute type 27 has an invalid length. [ 1277.453915][T24423] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1277.471959][T24423] vxcan3: left promiscuous mode [ 1277.513955][T24423] gretap2: left promiscuous mode [ 1277.763171][ T5202] bcm5974 4-1:1.0: could not read from device [ 1277.793711][ T5202] bcm5974 4-1:1.0: could not read from device [ 1277.811033][T18461] usb 4-1: USB disconnect, device number 100 [ 1277.897584][T13414] udevd[13414]: Error opening device "/dev/input/event4": No such file or directory [ 1277.938689][T16341] r8152-cfgselector 3-1: USB disconnect, device number 92 [ 1277.968001][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1277.995978][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1278.021847][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1278.040739][T13414] udevd[13414]: Unable to EVIOCGABS device "/dev/input/event4" [ 1278.058300][T13414] udevd[13414]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1278.119709][ T5217] udevd[5217]: worker [13414] terminated by signal 6 (Aborted) [ 1278.140571][ T5217] udevd[5217]: worker [13414] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input179/event4' [ 1278.617605][T16341] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1278.809178][T16341] usb 3-1: Using ep0 maxpacket: 8 [ 1278.827594][T16341] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1279.165846][T16341] usb 3-1: config 2 has no interface number 0 [ 1279.182376][T16341] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1279.198317][T16341] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1279.207909][T16341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.235795][T16341] usb 3-1: Product: syz [ 1279.255687][T16341] usb 3-1: Manufacturer: syz [ 1279.260362][T16341] usb 3-1: SerialNumber: syz [ 1279.364498][T24473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5639'. [ 1279.373621][T24473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5639'. [ 1279.419336][T24473] dummy0: entered promiscuous mode [ 1279.437282][T24473] bond0: entered promiscuous mode [ 1279.442486][T24473] bond_slave_0: entered promiscuous mode [ 1279.453818][T24473] bond_slave_1: entered promiscuous mode [ 1279.481567][T24473] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1279.515721][T24473] Cannot create hsr debugfs directory [ 1279.981808][T16341] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1280.014272][T16341] usb 3-1: USB disconnect, device number 93 [ 1280.071898][ T30] audit: type=1326 audit(1752342268.713:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24479 comm="syz.5.5640" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 1280.385582][T10809] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1280.575553][T10809] usb 6-1: Using ep0 maxpacket: 16 [ 1280.694958][T24501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1280.767298][T24500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1281.535580][T18461] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1281.744259][T18461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1281.806745][T18461] usb 3-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1281.833121][T18461] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1282.033760][T18461] usb 3-1: string descriptor 0 read error: -22 [ 1282.041064][T18461] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 1282.052139][T18461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.070941][T24512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1282.129284][T18461] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input180 [ 1282.198462][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.219059][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.228872][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.242655][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.260193][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.282906][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.333896][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.345680][T24512] netlink: 'syz.2.5647': attribute type 27 has an invalid length. [ 1282.378855][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.433481][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.463797][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.494693][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.521291][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.541798][T18460] hid-generic 00A0:0008:0003.0029: unknown main item tag 0x0 [ 1282.580810][T18460] hid-generic 00A0:0008:0003.0029: hidraw0: HID v2000.02 Device [syz1] on syz1 [ 1282.683409][ T5202] bcm5974 3-1:1.0: could not read from device [ 1282.737785][ T5202] bcm5974 3-1:1.0: could not read from device [ 1282.784658][T18461] usb 3-1: USB disconnect, device number 94 [ 1282.887173][T21900] udevd[21900]: Error opening device "/dev/input/event4": No such file or directory [ 1283.033449][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1283.074393][T10809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1283.088819][T10809] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1283.100596][T24528] fido_id[24528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1283.135940][T10809] usb 6-1: can't read configurations, error -71 [ 1283.326716][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1283.334511][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1283.507016][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1284.415741][T18486] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1284.566988][T18486] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.567010][T18486] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.567838][T18486] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1284.567856][T18486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1284.567869][T18486] usb 5-1: SerialNumber: syz [ 1284.675743][T16341] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1284.801710][T18486] usb 5-1: 0:2 : does not exist [ 1284.867474][T16341] usb 3-1: Using ep0 maxpacket: 16 [ 1284.892294][T18486] usb 5-1: USB disconnect, device number 87 [ 1284.910337][T16341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.910380][T16341] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1284.910426][T16341] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1284.941622][T16341] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1284.941700][T16341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1284.941725][T16341] usb 3-1: SerialNumber: syz [ 1284.990601][T16341] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1284.990629][T16341] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1284.990656][T16341] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1285.078269][T20992] udevd[20992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1285.359318][ T30] audit: type=1800 audit(1752342274.003:1953): pid=24565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5659" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1285.832547][T16341] usb 3-1: USB disconnect, device number 95 [ 1285.924321][T24603] FAULT_INJECTION: forcing a failure. [ 1285.924321][T24603] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.943467][T24603] CPU: 0 UID: 0 PID: 24603 Comm: syz.3.5666 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1285.943497][T24603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1285.943510][T24603] Call Trace: [ 1285.943519][T24603] [ 1285.943528][T24603] dump_stack_lvl+0x189/0x250 [ 1285.943558][T24603] ? __pfx____ratelimit+0x10/0x10 [ 1285.943587][T24603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1285.943607][T24603] ? __pfx__printk+0x10/0x10 [ 1285.943633][T24603] ? __pfx___might_resched+0x10/0x10 [ 1285.943653][T24603] ? fs_reclaim_acquire+0x7d/0x100 [ 1285.943682][T24603] should_fail_ex+0x414/0x560 [ 1285.943711][T24603] should_failslab+0xa8/0x100 [ 1285.943735][T24603] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1285.943755][T24603] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1285.943785][T24603] radix_tree_node_alloc+0x7e/0x3a0 [ 1285.943816][T24603] idr_get_free+0x2b3/0xa70 [ 1285.943854][T24603] idr_alloc_u32+0x159/0x2d0 [ 1285.943885][T24603] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1285.943916][T24603] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 1285.943946][T24603] tcf_idr_check_alloc+0x5de/0x7b0 [ 1285.943972][T24603] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 1285.943997][T24603] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1285.944025][T24603] ? __nla_parse+0x40/0x60 [ 1285.944047][T24603] tcf_police_init+0x235/0x13c0 [ 1285.944075][T24603] ? __pfx_tcf_police_init+0x10/0x10 [ 1285.944091][T24603] ? __lock_acquire+0xab9/0xd20 [ 1285.944142][T24603] ? tc_action_load_ops+0x18a/0x4e0 [ 1285.944165][T24603] tcf_action_init_1+0x2a5/0x6d0 [ 1285.944189][T24603] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1285.944205][T24603] ? _raw_read_unlock+0x28/0x50 [ 1285.944229][T24603] ? tc_action_load_ops+0x214/0x4e0 [ 1285.944281][T24603] tcf_exts_validate_ex+0x2dd/0x530 [ 1285.944301][T24603] ? __sock_sendmsg+0x21c/0x270 [ 1285.944316][T24603] ? ____sys_sendmsg+0x505/0x830 [ 1285.944334][T24603] ? ___sys_sendmsg+0x21f/0x2a0 [ 1285.944359][T24603] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 1285.944408][T24603] tcf_exts_validate+0x42/0x60 [ 1285.944433][T24603] fw_set_parms+0x18d/0x8c0 [ 1285.944450][T24603] ? __kasan_kmalloc+0x93/0xb0 [ 1285.944471][T24603] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1285.944492][T24603] ? __pfx_fw_set_parms+0x10/0x10 [ 1285.944522][T24603] fw_change+0x3c4/0xeb0 [ 1285.944550][T24603] ? __pfx_fw_change+0x10/0x10 [ 1285.944584][T24603] tc_new_tfilter+0xdca/0x15b0 [ 1285.944636][T24603] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1285.944693][T24603] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1285.944715][T24603] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1285.944737][T24603] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1285.944754][T24603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1285.944790][T24603] netlink_rcv_skb+0x205/0x470 [ 1285.944812][T24603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1285.944832][T24603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1285.944865][T24603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1285.944885][T24603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1285.944911][T24603] netlink_unicast+0x75c/0x8e0 [ 1285.944940][T24603] netlink_sendmsg+0x805/0xb30 [ 1285.944971][T24603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.944994][T24603] ? __import_iovec+0x5d4/0x7f0 [ 1285.945012][T24603] ? aa_sock_msg_perm+0x94/0x160 [ 1285.945039][T24603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1285.945064][T24603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.945085][T24603] __sock_sendmsg+0x21c/0x270 [ 1285.945105][T24603] ____sys_sendmsg+0x505/0x830 [ 1285.945132][T24603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1285.945171][T24603] ___sys_sendmsg+0x21f/0x2a0 [ 1285.945195][T24603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.945255][T24603] ? __fget_files+0x2a/0x420 [ 1285.945286][T24603] ? __fget_files+0x3a0/0x420 [ 1285.945318][T24603] __sys_sendmsg+0x164/0x220 [ 1285.945342][T24603] ? __pfx___sys_sendmsg+0x10/0x10 [ 1285.945388][T24603] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1285.945409][T24603] ? lockdep_hardirqs_on+0x9c/0x150 [ 1285.945441][T24603] __do_fast_syscall_32+0xb6/0x2b0 [ 1285.945463][T24603] ? lockdep_hardirqs_on+0x9c/0x150 [ 1285.945497][T24603] do_fast_syscall_32+0x34/0x80 [ 1285.945519][T24603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.945543][T24603] RIP: 0023:0xf70ae539 [ 1285.945562][T24603] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1285.945582][T24603] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1285.945605][T24603] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 1285.945621][T24603] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.945634][T24603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.945646][T24603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1285.945660][T24603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.945694][T24603] [ 1286.905741][T18486] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1287.097741][T18486] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1287.144219][T18486] usb 5-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1287.169853][T18486] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1287.200042][T18486] usb 5-1: string descriptor 0 read error: -22 [ 1287.212369][T18486] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 1287.244695][T18486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.325873][T24600] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1287.402311][T18486] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input181 [ 1287.505738][ T5920] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1287.605339][T24600] netlink: 'syz.4.5665': attribute type 27 has an invalid length. [ 1287.697886][ T5920] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1287.746548][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.851100][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1287.931478][ T5202] bcm5974 5-1:1.0: could not read from device [ 1287.932698][T10809] usb 5-1: USB disconnect, device number 88 [ 1287.952232][ T5920] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1287.962107][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.972098][T21900] bcm5974 5-1:1.0: could not read from device [ 1288.019886][ T5920] usb 3-1: config 0 descriptor?? [ 1288.117837][T21900] udevd[21900]: Error opening device "/dev/input/event4": No such file or directory [ 1288.138066][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1288.239671][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.257637][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1288.274007][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.315683][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1288.317152][T24629] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5671'. [ 1288.323577][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.353360][T21900] udevd[21900]: Unable to EVIOCGABS device "/dev/input/event4" [ 1288.363434][T21900] udevd[21900]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1288.377007][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.423110][T24629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.423295][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.431057][T24629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.461436][ T5920] holtek_kbd 0003:04D9:A055.002B: bogus close delimiter [ 1288.491292][ T5920] holtek_kbd 0003:04D9:A055.002B: item 0 4 2 10 parsing failed [ 1288.501266][ T5217] udevd[5217]: worker [21900] terminated by signal 6 (Aborted) [ 1288.512376][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.522415][ T5217] udevd[5217]: worker [21900] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input181/event4' [ 1288.539995][ T5920] holtek_kbd 0003:04D9:A055.002B: probe with driver holtek_kbd failed with error -22 [ 1288.551608][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.562298][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.595134][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.655522][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.683640][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.710031][T24635] loop9: detected capacity change from 0 to 7 [ 1288.721880][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.729715][T24635] Dev loop9: unable to read RDB block 7 [ 1288.735567][T24635] loop9: unable to read partition table [ 1288.742501][T24635] loop9: partition table beyond EOD, truncated [ 1288.752347][T18486] hid-generic 00A0:0008:0003.002A: unknown main item tag 0x0 [ 1288.761739][T24635] loop_reread_partitions: partition scan of loop9 (■глx№        ) failed (rc=-5) [ 1288.803686][T18486] hid-generic 00A0:0008:0003.002A: hidraw0: HID v2000.02 Device [syz1] on syz1 [ 1289.267890][T24641] fido_id[24641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1289.720900][T24653] ------------[ cut here ]------------ [ 1289.727713][T24653] kernel BUG at mm/hugetlb.c:2346! [ 1289.732839][T24653] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1289.739090][T24653] CPU: 0 UID: 0 PID: 24653 Comm: syz.3.5675 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 1289.751170][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1289.761324][T24653] RIP: 0010:alloc_hugetlb_folio_reserve+0xc3/0xd0 [ 1289.767745][T24653] Code: e8 52 ca a2 ff 48 c7 c7 00 67 e1 8d e8 c6 69 54 09 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2e ca a2 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1289.787388][T24653] RSP: 0018:ffffc90004c576a8 EFLAGS: 00010087 [ 1289.793455][T24653] RAX: ffffffff821d6c42 RBX: ffffffff99b150e8 RCX: 0000000000080000 [ 1289.801428][T24653] RDX: ffffc9000bef9000 RSI: 00000000000003e6 RDI: 00000000000003e7 [ 1289.809420][T24653] RBP: 0000000000142cc0 R08: ffffea000538002f R09: 1ffffd4000a70005 [ 1289.817407][T24653] R10: dffffc0000000000 R11: fffff94000a70006 R12: dffffc0000000000 [ 1289.825463][T24653] R13: 1ffffffff3362a1d R14: ffffea0005380000 R15: 0000000000000000 [ 1289.833436][T24653] FS: 0000000000000000(0000) GS:ffff888125c1b000(0063) knlGS:00000000f509eb40 [ 1289.842373][T24653] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1289.848955][T24653] CR2: 000000000c3cd2b3 CR3: 000000002e732000 CR4: 00000000003526f0 [ 1289.856930][T24653] Call Trace: [ 1289.860208][T24653] [ 1289.863135][T24653] memfd_alloc_folio+0x20f/0x3f0 [ 1289.868093][T24653] ? memfd_pin_folios+0xa4e/0xf60 [ 1289.873116][T24653] memfd_pin_folios+0xa65/0xf60 [ 1289.877965][T24653] ? kasan_save_track+0x4f/0x80 [ 1289.882814][T24653] ? __kasan_kmalloc+0x93/0xb0 [ 1289.887579][T24653] ? __pfx_memfd_pin_folios+0x10/0x10 [ 1289.892952][T24653] ? shmem_mapping+0xd/0x50 [ 1289.897454][T24653] ? memfd_fcntl+0x239/0x630 [ 1289.902046][T24653] ? down_read+0x1ad/0x2e0 [ 1289.906458][T24653] udmabuf_create+0x7b5/0xf70 [ 1289.911161][T24653] ? __pfx_udmabuf_create+0x10/0x10 [ 1289.916360][T24653] udmabuf_ioctl+0x1d1/0x2c0 [ 1289.921034][T24653] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1289.926141][T24653] ? __fget_files+0x2a/0x420 [ 1289.930732][T24653] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1289.936286][T24653] __ia32_compat_sys_ioctl+0x540/0x840 [ 1289.941744][T24653] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1289.947720][T24653] ? __se_sys_futex_time32+0x360/0x3e0 [ 1289.953178][T24653] ? rcu_is_watching+0x15/0xb0 [ 1289.957937][T24653] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1289.964531][T24653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.969727][T24653] __do_fast_syscall_32+0xb6/0x2b0 [ 1289.974830][T24653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.980037][T24653] do_fast_syscall_32+0x34/0x80 [ 1289.984881][T24653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1289.991207][T24653] RIP: 0023:0xf70ae539 [ 1289.995274][T24653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1290.014887][T24653] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1290.023304][T24653] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040187542 [ 1290.031356][T24653] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.039342][T24653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.047393][T24653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1290.055358][T24653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.063432][T24653] [ 1290.066542][T24653] Modules linked in: [ 1290.070613][T24653] ---[ end trace 0000000000000000 ]--- [ 1290.076059][T24653] RIP: 0010:alloc_hugetlb_folio_reserve+0xc3/0xd0 [ 1290.082476][T24653] Code: e8 52 ca a2 ff 48 c7 c7 00 67 e1 8d e8 c6 69 54 09 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 2e ca a2 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1290.102190][T24653] RSP: 0018:ffffc90004c576a8 EFLAGS: 00010087 [ 1290.108258][T24653] RAX: ffffffff821d6c42 RBX: ffffffff99b150e8 RCX: 0000000000080000 [ 1290.116245][T24653] RDX: ffffc9000bef9000 RSI: 00000000000003e6 RDI: 00000000000003e7 [ 1290.124305][T24653] RBP: 0000000000142cc0 R08: ffffea000538002f R09: 1ffffd4000a70005 [ 1290.132271][T24653] R10: dffffc0000000000 R11: fffff94000a70006 R12: dffffc0000000000 [ 1290.140254][T24653] R13: 1ffffffff3362a1d R14: ffffea0005380000 R15: 0000000000000000 [ 1290.148237][T24653] FS: 0000000000000000(0000) GS:ffff888125c1b000(0063) knlGS:00000000f509eb40 [ 1290.157162][T24653] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1290.163740][T24653] CR2: 000000000c3cd2b3 CR3: 000000002e732000 CR4: 00000000003526f0 [ 1290.171714][T24653] Kernel panic - not syncing: Fatal exception [ 1290.178185][T24653] Kernel Offset: disabled [ 1290.182508][T24653] Rebooting in 86400 seconds..