last executing test programs: 12m16.30778911s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="5d5800000000000014000300697076bb47e8b415b368e0ca94db1237516c616e31000000"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f0000000a00), 0x0, 0xfffffffffffffffe, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfe, 0x0, 0x2, 0x1, 0x8001, 0xfffe}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1, 0x0, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r6, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30046041) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000300)=0xa, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) 12m15.259514098s ago: executing program 3 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x48) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)='n', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/anycast6\x00') preadv(r4, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 12m13.577611926s ago: executing program 3 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x700, 0xa000, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x83, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4018, r4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 12m11.318739886s ago: executing program 3 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x700, 0xa000, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x83, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4018, r4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 12m9.467339738s ago: executing program 3 (id=36): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x400000000001, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0xe9) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f00000000c0)={0x6, 0x0, 0x8}) 12m2.103146937s ago: executing program 3 (id=45): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x2, 0x5004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c67728871756f74615f626c6f636b5f686172646c696d69743d2c00"]) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x2f7e, &(0x7f0000000180)=""/171) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 11m46.168006759s ago: executing program 32 (id=45): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x2, 0x5004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c67728871756f74615f626c6f636b5f686172646c696d69743d2c00"]) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x2f7e, &(0x7f0000000180)=""/171) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9.799366412s ago: executing program 1 (id=1843): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000540)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.421666234s ago: executing program 1 (id=1846): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 8.704083395s ago: executing program 4 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0)={0xa, 0x1, 0xd26f, 0x3, 0x1, 0x2, 0x9}, 0xc) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x5450, 0x3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x3, 0x0, @mcast2, 0x1000000}, {0x2, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x10}, 0x3}, r5}}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xf6e4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x10001, 0x2}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206050000500000000000000000000005000400000000000900020073797a30000000000c00078008000640000000d2050005000000000005000100060000000d000300686173683a6d61", @ANYRES32], 0x54}}, 0x0) 7.74922013s ago: executing program 4 (id=1853): r0 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) syz_open_dev$dri(0x0, 0x16, 0x300) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x0) 7.187640737s ago: executing program 0 (id=1855): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) pipe2$9p(0x0, 0x4000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) 6.651591722s ago: executing program 4 (id=1856): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x600) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000300), &(0x7f0000000000)) 6.559853939s ago: executing program 2 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) pipe(&(0x7f00000000c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) 5.467653661s ago: executing program 1 (id=1858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 5.150103341s ago: executing program 5 (id=1859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.008224862s ago: executing program 2 (id=1860): r0 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) tkill(r0, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) r4 = socket$kcm(0x10, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x44, 0x0, 0x0) 4.539834517s ago: executing program 5 (id=1861): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000014, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x400000000000000) (fail_nth: 1) 4.425922769s ago: executing program 1 (id=1862): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x1f6}) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = io_uring_setup(0x30d5, &(0x7f0000000000)={0x0, 0x0, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000180)) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0xf, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="670000007d0100000052000c007f0000000202000000020000000000000000000004060000002300000000000000000000800f002f6465762f6370752f232f6d73720001002900000f002f6465762f6370752f232f6d72000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=0x0], 0x67) read$msr(r4, &(0x7f0000019380)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r4, 0xfffffffffffffffd, 0x0) read$FUSE(r3, &(0x7f0000005dc0)={0x2020}, 0x2020) 4.311961108s ago: executing program 0 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000008, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4c401}, 0x4040140) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = epoll_create(0x9) r4 = dup2(r2, r3) (async) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040)={0x2002}) r6 = fcntl$dupfd(r4, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000001480)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x10}) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0xd) (async) getpid() (async) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$inet6(r6, &(0x7f0000000700)={&(0x7f0000000180)={0xa, 0x4e23, 0x7, @private1, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000001c0)="5eff027d53217f8b33bc43e8009b0c6d4e29ddb050", 0x15}, {&(0x7f0000000240)="7c669742f0830e19dcb8c5b6ea1e0b25e8a7ab10c8b97dc4e4ba0fa27f3a9d1a92d1cf9907aef9f16640371ccbf56029f7d446da45f09c743f21b99ab9d29d93defa65130672816badd9493dab7f9633383e249bd1cda711f440b90239e18073adc51ed105b6540d685509", 0x6b}, {&(0x7f0000000300)="30162d14c0d2cf85f957ef76ebffb3e7674b4db06ded14a3175322608f36c0dfa9169bed867120bc3799a85bf9ae03854efcc267e872cc47dfe453ea90125da65cefc356efb29848e78d30424abd81dc00ab0ebf47104fbcc405040e3de9de0a575db399af745d29f5507ea404e95dddffdb148ce163a057f21388638460cfe76b0dfb89333cff892d12c461f5ee7fea89d741dfcb3c2a01c0ce2755fd8b9f14ac8a5063aa51389011f2e5c6e0ff04c6c5399f9c002ef49a05d64d4dd9", 0xbd}, {&(0x7f00000003c0)="609f5b3868de04df645005ac216eb8f3bfcd3db8710af437b785a1b92962ee84c041635b807e130a432fc377672a", 0x2e}], 0x5, &(0x7f0000000640)=[@dstopts={{0x90, 0x29, 0x37, {0x1d, 0xe, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0xfc, 0x400, [0xd37, 0x5, 0xdd7, 0x9, 0x7, 0xffff, 0x6, 0x4, 0x5, 0x3]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa, 0x1, [0x8, 0x52a]}}]}}}], 0x90}, 0x4000040) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.964174254s ago: executing program 5 (id=1864): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080)=r7, 0x12) 3.89077912s ago: executing program 2 (id=1865): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x300, 0x0, 0xffffffff, 0xfa000, 0x173180}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000743bafaf912d11300e188dc64da53c7f80023bf8cc7c195226d96cd7c51cb82c462c9073f0000584743f0eb2f70ef1425d054cd1855b0635f2af09b15195a7057f207ace2b533263fd5052c2fbefe7a313fa9a57d0f23c3e56a39cdc96bbcdf7190bccce0c4f0e96de89bf13c738f2b6f1949fc869e02f92ea4286a0c32e37c416fd893756c02ecb7bdaee0f0854840410a95997710699f1542a4de9b5589ffc8a2ec11b727a1c1a9673491afda2b7845e51971c25a481cba756", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090001000000"], 0x34}}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5200}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000900020073797a3100000000050004000000000005000500020000000c00030068617300000000050001000700000000000000000000001000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000000)={r9, r10, 0x1, 0x0, 0x3}) r11 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r11, 0x0, 0xffffffef) 3.714885898s ago: executing program 1 (id=1866): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffeff, 0x9, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffde, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x80, &(0x7f0000000140)="b45606054ea42f761b89196811292f5a860445ee6d6e49bbbf4b08fe9139cc8d2dd7d127273b6589942afd56c903c1a1290fcb4c8df50cb73783218bd238b2bbe3d033a08d3b648e8bd21f133d97bf428e03e37944bb846f11cf33918d0b09603b64576bdccbf7ab36bbd87fa4f19fb46691e5559082c4056d1ede5d5606f638", 0xd4, 0x0, &(0x7f0000000540)="51f8d296999ad57fd85221410a057f4811ccbc7f9ad41c4802b9d3b9852e7f5c2e7c06a9b5c78b1fc92bb0d12d3d5012b04353dffc1b50a3b8f9b15370977696033abe69f33c25632a026aa94b9644e0e0434a8f7d332007d0af7ec6fef79b98508bd3f0052662833892f5ec5fa37dc22d3358bc62d9e22894279c8997f77007fa3f92827be31ce2649e95e46a9dc461b818c0c18597ccb57c9af65528a4ab150082d3b04eeff2e78d14e874647f1e062bb0e223828cfe86cc429a0e673263f110e458ca1c5d393e3755637ce4d368a560298374"}) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x40010020, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.64799775s ago: executing program 0 (id=1867): r0 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) syz_open_dev$dri(0x0, 0x16, 0x300) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x0) 3.647110064s ago: executing program 4 (id=1868): connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYBLOB="e5fda988000000001800128008000100767469000c0002"], 0x40}}, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$alg(0x26, 0x5, 0x0) 2.823109795s ago: executing program 5 (id=1869): keyctl$join(0x1, 0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000), 0x0, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380"], 0xc8}}, 0x0) (fail_nth: 1) 2.035760297s ago: executing program 2 (id=1870): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x14, 0x2000c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0xe8}, 0x1, 0x0, 0x0, 0x24048000}, 0x2000d004) accept$alg(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x352c, 0xf01b, 0x41, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x108) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x2710}, 0x10) sendmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x5b4}, {{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @private=0xa010102}, 0x2, 0x0, 0x2, 0x3}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)="edace1db925d8535d9d30244fda29cd66bd43ba7ade8b9cac144b182750dc63ebf7d46485fa7bb4913ce65c5ef4a8ee1fbbb11f8991211b15ff5db366495fd8ab9d751739e9d50", 0x47}, {&(0x7f0000000500)="26e9ba67afcec539699a134e8c211c22fce11189059f44a05904ab00223a6ef437372bf89c1a85bbbbb47f9ff60edf647816e3ac4ae5ba54de6b02eb72a75db9481932a139867e074fe319c7a600beb40833c1619e0a939e84fa954c4a55dbd37eab7682ff7acc8c7db1b3f665538631d5f5cb8a95bae8e8ec27817df6f368b43d61c8a665bf465196cd69c5b25c65e5ce09e89776930b28eb99ae0b9c9d81a9", 0xa0}], 0x2, &(0x7f00000005c0)=[{0x108, 0x0, 0x101, "634352b018090b7963f838771fc5e2a9397b049f139cd44621f499054bf53226b20fb0d7c0303d4ba0aad58ecef0945df6c9e248d08fc4e0fc6cc29131ffd184a486f1ec5cc057f8c8b7d55e278a4c6c7c6d602578b1459019094e6da3117e19f23b53138cdaa96269e0cb02d56a99e8a46d1b00faefb7d2a1218f86b51f5224fc8cdc5db83b18a861720433f8147b07f60535fa40c599e811ba0f0f40666e850dd8bb8d5b6ce53434c89f876d5d8a5c709cec804ec294dd8d4a641f7f6be57b83b51e7c10b383feac83a3437563788e3969b704a5f433570a362698d344339849ef41b2579758cee422c41f15408ab367c039dd53"}, {0x98, 0x109, 0x9, "31b02cbc3daa6ab978bf1147bc2ad46641649f1749ef5f5720207ba74b050d72c485ccd88ad4ec70d78b1e9636dcb6ca6ece5ff769a28174eecd16b89ccc8d6ddaa656719e92e45e2aa5ecb651732cbae37d3d99029dbbb6322f2d4cd3e8e0619ddf1b0bb199a8334698b3d28552c06c123e5d294bb184e802778b64cc3c34b642be1673c1"}, {0xa0, 0x16, 0x3, "edb5674f29edbca680c6c506f883c0eabca96a3e9be6763b3121a7c740deb085d214b6a210741fcfa438cc67039da39182a7ed7a5c3b834f7158845f35437cdd83521b5d663a8375bfbaa67a71968a2383d41d744b1406cbcc7bd8c6fd95b36030f63d0dfcb4b0a689ca281c6c6e2564cded00c932cbfa59ff32db86d99d176e0fff436e3b6aea8c1edb6bba"}], 0x240}}, {{&(0x7f0000000440)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)="d78b7e0740f494c070a38f8f67047ff305221e26d0edb10ba935192a67a56c99ca8a9b19e4ba1f4e6def543b31b91e7b85e61e22ee34e97befd089ad4c1932bdd092ac0ca0", 0x45}, {&(0x7f0000000880)="44997f676cbe2e52512f247ef6afb23f57001ad089c5338dd603fb0aa280ab07cf251ac53d2e30ff3381426440d0325b702770d94fc3bf264253e30901763620d97a69616d363af266da9e9d507d87df51", 0x51}, {&(0x7f0000000900)="a2d6899723f57061707d8f37f26d71ef538c1ee9c0a16a3ef510d12c9fdbaf3a351191e05f7ae5e80187198e10b65347f9d2e09bdcb890b1d32cb73c4e26c8ef1268d931668f039c83fefef46632900fc3af425432dbb82aac9de4b6333a9efc605d903ca65e28733e2246cff9d6832e4f8d719ccb", 0x75}, {&(0x7f0000000980)="c37d9ffe79e962a1d6232f535a4686bd3d1add1063c95594d2b3ab790b8f0f68f16e8f0bbe457b73d16795d445f3b57e1957d76af0de9d9f66e8e5bf2aaa38037d3ff128af6f3f6c1ebd325a0d34ad6217f84c6ef58a2f471d5cad14ef74e31616531a543b16bdce97c381f06c46bfa08e8b81b743729efb3d1bfff3dc8511f97dc2f6efa3d425965ec0b6e5725de061f3cf7e8f306a283181a6602016c037cb94c6082439ad5c327c41", 0xaa}, {&(0x7f0000000a40)="e98e27e476d69633975f6f24f1bbfc1ffb605c2432a8c155519403cccce6963ded2cb081776583a451c46b", 0x2b}], 0x5}}], 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ed0000/0x4000)=nil, 0x4000}, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 1.991071184s ago: executing program 0 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x7c, r1, 0x1, 0x41, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.823459788s ago: executing program 4 (id=1872): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffeff, 0x9, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffde, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x100, 0x70bd2d, 0x25dfdbfe, {{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0x7, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r6, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x80, &(0x7f0000000140)="b45606054ea42f761b89196811292f5a860445ee6d6e49bbbf4b08fe9139cc8d2dd7d127273b6589942afd56c903c1a1290fcb4c8df50cb73783218bd238b2bbe3d033a08d3b648e8bd21f133d97bf428e03e37944bb846f11cf33918d0b09603b64576bdccbf7ab36bbd87fa4f19fb46691e5559082c4056d1ede5d5606f638", 0xd4, 0x0, &(0x7f0000000540)="51f8d296999ad57fd85221410a057f4811ccbc7f9ad41c4802b9d3b9852e7f5c2e7c06a9b5c78b1fc92bb0d12d3d5012b04353dffc1b50a3b8f9b15370977696033abe69f33c25632a026aa94b9644e0e0434a8f7d332007d0af7ec6fef79b98508bd3f0052662833892f5ec5fa37dc22d3358bc62d9e22894279c8997f77007fa3f92827be31ce2649e95e46a9dc461b818c0c18597ccb57c9af65528a4ab150082d3b04eeff2e78d14e874647f1e062bb0e223828cfe86cc429a0e673263f110e458ca1c5d393e3755637ce4d368a560298374"}) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x40010020, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.429358825s ago: executing program 1 (id=1873): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) pipe2$9p(0x0, 0x4000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) 1.285794711s ago: executing program 2 (id=1874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 1.18002973s ago: executing program 0 (id=1875): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa0041) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r1, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/llc/socket\x00') ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000001c0)) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x1) r4 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r4, &(0x7f0000000200)=@l2={{0x1, 0x3a, 0x8000, 0x3a, 0x400, 0x3a, 0x0, 0x3a, 0x6c45, 0x3a, 0x8, 0x3a, 0x2, 0x3a, 0x4}, 0x2f, 0xdb, 0x20, '/dev/snd/midiC#D#\x00'}, 0xc0) 1.05447043s ago: executing program 5 (id=1876): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x1f6}) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = io_uring_setup(0x30d5, &(0x7f0000000000)={0x0, 0x0, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000180)) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0xf, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="670000007d0100000052000c007f0000000202000000020000000000000000000004060000002300000000000000000000800f002f6465762f6370752f232f6d73720001002900000f002f6465762f6370752f232f6d72000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=0x0], 0x67) read$msr(r4, &(0x7f0000019380)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r4, 0xfffffffffffffffd, 0x0) read$FUSE(r3, &(0x7f0000005dc0)={0x2020}, 0x2020) 436.798837ms ago: executing program 2 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="000000000980ffff", 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000240)='0', 0x1) (fail_nth: 1) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) openat$hwrng(0xffffffffffffff9c, 0x0, 0x4600, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000bc0)={0x8, 0x6, 0x3, 0x5ab, 0x9}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000800)={0x14, &(0x7f0000000580)={0x0, 0xf, 0xe, {0xe, 0x3, "d9532ca12de51bf774b8c26e"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, 0x0, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x200, 0x1, 0x1, 0x5, 0xe6c, 0x100, 0x3, 0xfffffff1, 0x7, 0x8, 0x1ff, 0x7}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10001, 0x40000) read$usbmon(r6, &(0x7f0000000140)=""/144, 0x90) syz_usb_control_io(r4, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000005c0)={0x40, 0xb, 0x31, "0a05ee0f8a83f613c503438733373ea60a2c6f1bdb4760e0c33f8db0b734a09ad8e9a948cc29f355f61f2e6b74f1f023cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, 0x0, 0x4008040) 132.744135ms ago: executing program 0 (id=1878): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x22200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x3, 0xa000000, 0x8000, 0x3, 0x2f52}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 132.030354ms ago: executing program 4 (id=1879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xc, 0x1c000, @l2={'ib', 0x3a, 'geneve1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040c4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00ae06", @ANYRES16=r2, @ANYBLOB="000229bd7000fedbdf251100000008003900a8000000050033000000000008002b0001010000"], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x44080) 0s ago: executing program 5 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x6, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x4000}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='btrfs_sync_fs\x00', r0, 0x0, 0x8000000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ftruncate(r6, 0x8001) socket$isdn_base(0x22, 0x3, 0x0) gettid() r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0xc, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) kernel console output (not intermixed with test programs): 1] usb 5-1: config 0 has no interface number 0 [ 604.594122][ T5951] usb 5-1: config 0 interface 184 has no altsetting 0 [ 604.749303][ T5951] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 604.780308][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.798669][ T5951] usb 5-1: Product: syz [ 604.804905][ T5951] usb 5-1: Manufacturer: syz [ 604.809823][ T5951] usb 5-1: SerialNumber: syz [ 604.830951][ T5951] usb 5-1: config 0 descriptor?? [ 604.858337][ T5951] smsc75xx v1.0.0 [ 604.862631][ T5951] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 605.312801][ T5951] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 605.347968][ T5849] usb 6-1: 0:2 : does not exist [ 605.371502][ T5951] usb 5-1: USB disconnect, device number 30 [ 605.408241][ T5849] usb 6-1: USB disconnect, device number 25 [ 605.566007][ T9065] udevd[9065]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.516259][ T6161] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 606.956518][ T6161] usb 3-1: Using ep0 maxpacket: 32 [ 607.139829][ T6161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.337793][ T6161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.533770][ T6161] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 607.543744][ T6161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.560849][ T6161] usb 3-1: config 0 descriptor?? [ 607.780639][ T6161] koneplus 0003:1E7D:2D51.000C: item fetching failed at offset 1/5 [ 607.794194][ T6161] koneplus 0003:1E7D:2D51.000C: parse failed [ 607.803730][ T6161] koneplus 0003:1E7D:2D51.000C: probe with driver koneplus failed with error -22 [ 608.026123][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 608.196244][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 608.204364][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 608.233138][ T10] usb 2-1: config 0 has no interface number 0 [ 608.243511][ T5923] usb 3-1: USB disconnect, device number 24 [ 608.253193][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 608.288119][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 608.303753][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 608.315705][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.331286][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 608.340459][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.362209][ T10] usb 2-1: config 0 descriptor?? [ 608.383282][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 609.634275][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'. [ 609.704369][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'. [ 609.815893][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 610.365680][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 610.379796][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 610.410333][T10958] xt_hashlimit: max too large, truncated to 1048576 [ 610.419366][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 610.435414][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.446038][T10958] FAULT_INJECTION: forcing a failure. [ 610.446038][T10958] name failslab, interval 1, probability 0, space 0, times 0 [ 610.467350][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.488897][T10958] CPU: 0 UID: 0 PID: 10958 Comm: syz.5.1251 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 610.488923][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.488935][T10958] Call Trace: [ 610.488944][T10958] [ 610.488952][T10958] dump_stack_lvl+0x189/0x250 [ 610.488980][T10958] ? __pfx____ratelimit+0x10/0x10 [ 610.489011][T10958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.489033][T10958] ? __pfx__printk+0x10/0x10 [ 610.489064][T10958] ? __pfx___might_resched+0x10/0x10 [ 610.489084][T10958] ? fs_reclaim_acquire+0x7d/0x100 [ 610.489113][T10958] should_fail_ex+0x414/0x560 [ 610.489146][T10958] should_failslab+0xa8/0x100 [ 610.489168][T10958] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 610.489188][T10958] ? __d_alloc+0x31/0x6f0 [ 610.489219][T10958] __d_alloc+0x31/0x6f0 [ 610.489243][T10958] ? __lock_acquire+0xab9/0xd20 [ 610.489264][T10958] d_alloc_parallel+0xe0/0x14e0 [ 610.489291][T10958] ? smack_log+0xef/0x3f0 [ 610.489320][T10958] ? __pfx_smack_log+0x10/0x10 [ 610.489347][T10958] ? smk_access+0x14c/0x4e0 [ 610.489376][T10958] ? __lock_acquire+0xab9/0xd20 [ 610.489396][T10958] ? __pfx_d_alloc_parallel+0x10/0x10 [ 610.489421][T10958] ? look_up_lock_class+0x74/0x170 [ 610.489447][T10958] ? __raw_spin_lock_init+0x45/0x100 [ 610.489474][T10958] ? __init_waitqueue_head+0xa9/0x150 [ 610.489506][T10958] __lookup_slow+0x116/0x3d0 [ 610.489545][T10958] ? __pfx___lookup_slow+0x10/0x10 [ 610.489587][T10958] ? bpf_lsm_inode_permission+0x9/0x20 [ 610.489606][T10958] ? security_inode_permission+0xb7/0x310 [ 610.489633][T10958] ? down_read+0x1ad/0x2e0 [ 610.489671][T10958] lookup_slow+0x53/0x70 [ 610.489697][T10958] walk_component+0x2d2/0x400 [ 610.489720][T10958] ? path_lookupat+0x156/0x430 [ 610.489747][T10958] path_lookupat+0x163/0x430 [ 610.489780][T10958] filename_lookup+0x212/0x570 [ 610.489812][T10958] ? __pfx_filename_lookup+0x10/0x10 [ 610.489863][T10958] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 610.489879][T10958] ? getname_kernel+0x146/0x2f0 [ 610.489908][T10958] ? getname_kernel+0x20e/0x2f0 [ 610.489938][T10958] kern_path+0x35/0x50 [ 610.489963][T10958] bpf_prog_get_type_path+0x9b/0x260 [ 610.489985][T10958] ? __pfx_bpf_prog_get_type_path+0x10/0x10 [ 610.490015][T10958] ? rcu_is_watching+0x15/0xb0 [ 610.490040][T10958] bpf_mt_check_v1+0x158/0x350 [ 610.490067][T10958] ? __pfx_bpf_mt_check_v1+0x10/0x10 [ 610.490094][T10958] ? xt_find_match+0x1f7/0x250 [ 610.490136][T10958] xt_check_match+0x3ce/0xab0 [ 610.490165][T10958] ? __pfx___mutex_lock+0x10/0x10 [ 610.490190][T10958] ? __pfx_xt_check_match+0x10/0x10 [ 610.490223][T10958] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 610.490255][T10958] ? xt_find_match+0x1f7/0x250 [ 610.490291][T10958] translate_table+0x150b/0x2000 [ 610.490347][T10958] ? __pfx_translate_table+0x10/0x10 [ 610.490380][T10958] ? __might_fault+0xb0/0x130 [ 610.490420][T10958] ? _copy_from_user+0x94/0xb0 [ 610.490453][T10958] do_ipt_set_ctl+0x967/0xcd0 [ 610.490487][T10958] ? rcu_is_watching+0x15/0xb0 [ 610.490507][T10958] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 610.490554][T10958] ? __pfx___mutex_lock+0x10/0x10 [ 610.490577][T10958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.490630][T10958] nf_setsockopt+0x26c/0x290 [ 610.490669][T10958] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 610.490705][T10958] do_sock_setsockopt+0x179/0x1b0 [ 610.490743][T10958] __x64_sys_setsockopt+0x13f/0x1b0 [ 610.490778][T10958] do_syscall_64+0xfa/0x3b0 [ 610.490802][T10958] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.490826][T10958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.490849][T10958] ? clear_bhb_loop+0x60/0xb0 [ 610.490872][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.490890][T10958] RIP: 0033:0x7f8f4b98ebe9 [ 610.490908][T10958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.490925][T10958] RSP: 002b:00007f8f4c734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 610.490946][T10958] RAX: ffffffffffffffda RBX: 00007f8f4bbb6090 RCX: 00007f8f4b98ebe9 [ 610.490961][T10958] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.490973][T10958] RBP: 00007f8f4c734090 R08: 0000000000000548 R09: 0000000000000000 [ 610.490986][T10958] R10: 0000200000002480 R11: 0000000000000246 R12: 0000000000000002 [ 610.490998][T10958] R13: 00007f8f4bbb6128 R14: 00007f8f4bbb6090 R15: 00007fff9948a6b8 [ 610.491032][T10958] [ 610.491659][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 612.634026][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.770405][ T10] usb 5-1: can't set config #16, error -71 [ 612.847896][ T10] usb 5-1: USB disconnect, device number 31 [ 612.935009][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 612.971423][ T5923] usb 2-1: USB disconnect, device number 21 [ 612.982653][ T5923] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 613.045634][T10980] netlink: 'syz.5.1258': attribute type 11 has an invalid length. [ 613.053513][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1258'. [ 613.367312][T10986] input: syz1 as /devices/virtual/input/input11 [ 613.661313][T10993] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1263'. [ 616.689671][T11014] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 616.845329][ T5951] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 617.146992][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 617.230617][ T5951] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 617.278356][T11014] cramfs: wrong magic [ 617.466314][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 617.484928][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 617.583794][ T5951] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.940656][T11023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.944964][ T5951] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 617.986722][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.306903][ T5951] usb 6-1: GET_CAPABILITIES returned 0 [ 618.336901][ T5951] usbtmc 6-1:16.0: can't read capabilities [ 618.476406][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 618.487814][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.594876][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 618.711214][T11032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.766391][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 618.792347][ T30] audit: type=1326 audit(1755041387.623:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11035 comm="syz.4.1274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd0758ebe9 code=0x0 [ 618.826505][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.892224][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.952020][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.983900][ T5908] usb 6-1: USB disconnect, device number 26 [ 618.994559][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.009816][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.023334][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.265949][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 620.271520][ T10] usbtmc 2-1:16.0: can't read capabilities [ 620.373255][T11056] overlay: Unknown parameter 'pcr' [ 620.579586][T11030] FAULT_INJECTION: forcing a failure. [ 620.579586][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 621.366440][T11030] CPU: 0 UID: 0 PID: 11030 Comm: syz.1.1273 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 621.366465][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.366477][T11030] Call Trace: [ 621.366484][T11030] [ 621.366493][T11030] dump_stack_lvl+0x189/0x250 [ 621.366518][T11030] ? __pfx____ratelimit+0x10/0x10 [ 621.366537][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.366555][T11030] ? __pfx__printk+0x10/0x10 [ 621.366575][T11030] ? __pfx___might_resched+0x10/0x10 [ 621.366587][T11030] ? fs_reclaim_acquire+0x7d/0x100 [ 621.366601][T11030] should_fail_ex+0x414/0x560 [ 621.366616][T11030] should_failslab+0xa8/0x100 [ 621.366629][T11030] __kmalloc_noprof+0xcb/0x4f0 [ 621.366638][T11030] ? kfree+0x4d/0x440 [ 621.366652][T11030] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.366668][T11030] tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.366682][T11030] ? tomoyo_domain+0xda/0x130 [ 621.366698][T11030] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 621.366709][T11030] tomoyo_path_number_perm+0x1e8/0x5a0 [ 621.366721][T11030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.366741][T11030] ? __lock_acquire+0xab9/0xd20 [ 621.366763][T11030] ? __fget_files+0x2a/0x420 [ 621.366776][T11030] ? __fget_files+0x2a/0x420 [ 621.366786][T11030] ? __fget_files+0x3a0/0x420 [ 621.366796][T11030] ? __fget_files+0x2a/0x420 [ 621.366809][T11030] security_file_ioctl+0xcb/0x2d0 [ 621.366823][T11030] __se_sys_ioctl+0x47/0x170 [ 621.366840][T11030] do_syscall_64+0xfa/0x3b0 [ 621.366851][T11030] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.366862][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.366871][T11030] ? clear_bhb_loop+0x60/0xb0 [ 621.366884][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.366893][T11030] RIP: 0033:0x7f17ca98ebe9 [ 621.366903][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.366912][T11030] RSP: 002b:00007f17cb72b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.366924][T11030] RAX: ffffffffffffffda RBX: 00007f17cabb5fa0 RCX: 00007f17ca98ebe9 [ 621.366932][T11030] RDX: 0000200000000040 RSI: 0000000040015b0b RDI: 0000000000000004 [ 621.366939][T11030] RBP: 00007f17cb72b090 R08: 0000000000000000 R09: 0000000000000000 [ 621.366945][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.366951][T11030] R13: 00007f17cabb6038 R14: 00007f17cabb5fa0 R15: 00007ffc51793cc8 [ 621.366967][T11030] [ 621.813534][T11030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.358570][ T6161] usb 2-1: USB disconnect, device number 22 [ 622.492307][T11056] sctp: failed to load transform for md5: -2 [ 622.613341][T11077] FAULT_INJECTION: forcing a failure. [ 622.613341][T11077] name failslab, interval 1, probability 0, space 0, times 0 [ 622.626437][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.2.1284 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 622.626464][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.626476][T11077] Call Trace: [ 622.626484][T11077] [ 622.626492][T11077] dump_stack_lvl+0x189/0x250 [ 622.626519][T11077] ? __pfx____ratelimit+0x10/0x10 [ 622.626540][T11077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.626562][T11077] ? __pfx__printk+0x10/0x10 [ 622.626591][T11077] ? __pfx___might_resched+0x10/0x10 [ 622.626612][T11077] ? fs_reclaim_acquire+0x7d/0x100 [ 622.626641][T11077] should_fail_ex+0x414/0x560 [ 622.626666][T11077] should_failslab+0xa8/0x100 [ 622.626690][T11077] __kmalloc_noprof+0xcb/0x4f0 [ 622.626708][T11077] ? tomoyo_encode+0x28b/0x550 [ 622.626738][T11077] tomoyo_encode+0x28b/0x550 [ 622.626768][T11077] tomoyo_realpath_from_path+0x58d/0x5d0 [ 622.626796][T11077] ? tomoyo_domain+0xda/0x130 [ 622.626827][T11077] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 622.626849][T11077] tomoyo_path_number_perm+0x1e8/0x5a0 [ 622.626872][T11077] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 622.626895][T11077] ? trace_sched_exit_tp+0x38/0x120 [ 622.626924][T11077] ? __schedule+0x16c8/0x4c90 [ 622.626954][T11077] ? trace_irq_disable+0x37/0x110 [ 622.627017][T11077] ? security_file_ioctl+0x19/0x2d0 [ 622.627045][T11077] security_file_ioctl+0xcb/0x2d0 [ 622.627069][T11077] __se_sys_ioctl+0x47/0x170 [ 622.627100][T11077] do_syscall_64+0xfa/0x3b0 [ 622.627123][T11077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.627142][T11077] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 622.627160][T11077] ? clear_bhb_loop+0x60/0xb0 [ 622.627184][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.627203][T11077] RIP: 0033:0x7f014e18ebe9 [ 622.627220][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.627237][T11077] RSP: 002b:00007f014f056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.627257][T11077] RAX: ffffffffffffffda RBX: 00007f014e3b6180 RCX: 00007f014e18ebe9 [ 622.627272][T11077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 622.627284][T11077] RBP: 00007f014f056090 R08: 0000000000000000 R09: 0000000000000000 [ 622.627296][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.627308][T11077] R13: 00007f014e3b6218 R14: 00007f014e3b6180 R15: 00007fffed96ccb8 [ 622.627341][T11077] [ 622.627467][T11077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.879047][T11077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 624.356854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.496830][T11099] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 624.504517][ T6161] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 624.520347][T11099] cramfs: wrong magic [ 625.214004][ T6161] usb 2-1: Using ep0 maxpacket: 8 [ 625.233289][ T6161] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.457568][ T6161] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 625.529941][ T6161] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 625.558855][ T6161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.571099][ T6161] usb 2-1: Product: syz [ 625.576525][ T6161] usb 2-1: Manufacturer: syz [ 625.581388][ T6161] usb 2-1: SerialNumber: syz [ 625.609558][ T6161] usb 2-1: config 0 descriptor?? [ 626.055804][T11116] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1294'. [ 626.091950][T11120] netlink: 'syz.4.1296': attribute type 30 has an invalid length. [ 626.111064][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 626.143199][T11120] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 626.168537][T11120] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 626.263100][ T5908] usb 2-1: USB disconnect, device number 23 [ 628.883783][ T5908] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 629.446383][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 629.480792][ T30] audit: type=1326 audit(1755041398.324:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.502395][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.553910][ T30] audit: type=1326 audit(1755041398.324:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.576285][ T5908] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 629.585643][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.593822][ T5908] usb 6-1: Product: syz [ 629.598061][ T5908] usb 6-1: Manufacturer: syz [ 629.602802][ T30] audit: type=1326 audit(1755041398.324:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.633714][ T5908] usb 6-1: SerialNumber: syz [ 629.661802][ T5908] usb 6-1: config 0 descriptor?? [ 629.684871][ T30] audit: type=1326 audit(1755041398.324:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.728736][ T30] audit: type=1326 audit(1755041398.324:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.773974][ T5951] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 629.793519][ T30] audit: type=1326 audit(1755041398.324:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.893243][ T30] audit: type=1326 audit(1755041398.324:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.916123][ T30] audit: type=1326 audit(1755041398.324:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.938651][ T30] audit: type=1326 audit(1755041398.324:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 629.960638][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 629.967912][ T30] audit: type=1326 audit(1755041398.324:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11153 comm="syz.4.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 630.003555][ T5951] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 630.012970][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.041776][ T5951] usb 5-1: Product: syz [ 630.063705][ T5951] usb 5-1: Manufacturer: syz [ 630.220033][ T5951] usb 5-1: SerialNumber: syz [ 630.272181][ T5951] usb 5-1: config 0 descriptor?? [ 630.454839][T11163] netlink: 'syz.0.1306': attribute type 32 has an invalid length. [ 630.528089][ T5951] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 630.545206][ T5951] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 630.571618][ T5951] usb 5-1: USB disconnect, device number 32 [ 630.589537][T11167] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1308'. [ 630.815062][ T5908] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 630.985653][ T6161] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 631.145540][ T6161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.159845][ T6161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.176315][ T6161] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.185635][ T6161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.196991][ T6161] usb 2-1: SerialNumber: syz [ 631.380454][ T5951] usb 6-1: USB disconnect, device number 27 [ 631.872106][T11192] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 632.005274][T11193] loop6: detected capacity change from 0 to 63 [ 632.424710][ T9074] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.435324][ T9074] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.505816][ T9074] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.548339][ T9074] Buffer I/O error on dev loop6, logical block 0, async page read [ 632.584079][ T9074] Buffer I/O error on dev loop6, logical block 0, async page read [ 634.085532][T11201] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1317'. [ 634.654986][ T6161] usb 2-1: 0:2 : does not exist [ 634.697212][ T6161] usb 2-1: unit 5 not found! [ 634.782642][ T6161] usb 2-1: USB disconnect, device number 24 [ 634.916156][ T9065] udevd[9065]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.075902][ T5908] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 637.356867][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 637.356887][ T30] audit: type=1326 audit(1755041406.155:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11219 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 637.689173][ T5908] usb 6-1: no configurations [ 637.697119][ T5908] usb 6-1: can't read configurations, error -22 [ 638.348880][ T5908] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 639.112903][T11246] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1329'. [ 639.151972][T11246] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1329'. [ 639.318290][ T30] audit: type=1326 audit(1755041408.165:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11247 comm="syz.5.1330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f4b98ebe9 code=0x0 [ 641.472290][ T5923] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 641.817010][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.964849][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.133247][ T5923] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 642.147095][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.158121][ T5923] usb 2-1: config 0 descriptor?? [ 642.513867][ T5923] zydacron 0003:13EC:0006.000D: item fetching failed at offset 2/5 [ 642.554398][ T5923] zydacron 0003:13EC:0006.000D: parse failed [ 642.563380][ T5923] zydacron 0003:13EC:0006.000D: probe with driver zydacron failed with error -22 [ 642.716620][ T5923] usb 2-1: USB disconnect, device number 25 [ 642.970004][T11296] FAULT_INJECTION: forcing a failure. [ 642.970004][T11296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 642.983460][T11296] CPU: 1 UID: 0 PID: 11296 Comm: syz.0.1341 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 642.983485][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.983497][T11296] Call Trace: [ 642.983507][T11296] [ 642.983516][T11296] dump_stack_lvl+0x189/0x250 [ 642.983544][T11296] ? __pfx____ratelimit+0x10/0x10 [ 642.983565][T11296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.983587][T11296] ? __pfx__printk+0x10/0x10 [ 642.983613][T11296] ? fs_reclaim_acquire+0x7d/0x100 [ 642.983644][T11296] should_fail_ex+0x414/0x560 [ 642.983670][T11296] prepare_alloc_pages+0x213/0x610 [ 642.983702][T11296] __alloc_frozen_pages_noprof+0x123/0x370 [ 642.983731][T11296] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 642.983766][T11296] ? policy_nodemask+0x27c/0x720 [ 642.983793][T11296] alloc_pages_mpol+0x232/0x4a0 [ 642.983819][T11296] alloc_pages_noprof+0xa9/0x190 [ 642.983840][T11296] get_zeroed_page_noprof+0x1a/0x90 [ 642.983865][T11296] rds_cong_from_addr+0xd8/0x370 [ 642.983890][T11296] rds_cong_get_maps+0x53/0xb0 [ 642.983910][T11296] __rds_conn_create+0x9a9/0x2060 [ 642.983929][T11296] ? __rds_conn_create+0x2e3/0x2060 [ 642.983964][T11296] ? __pfx___rds_conn_create+0x10/0x10 [ 642.984000][T11296] rds_conn_create_outgoing+0x43/0x60 [ 642.984025][T11296] rds_sendmsg+0x1001/0x1f00 [ 642.984068][T11296] ? __pfx_rds_sendmsg+0x10/0x10 [ 642.984102][T11296] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 642.984133][T11296] ? __lock_acquire+0xab9/0xd20 [ 642.984153][T11296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.984172][T11296] ? __pfx_rds_sendmsg+0x10/0x10 [ 642.984197][T11296] __sock_sendmsg+0x21c/0x270 [ 642.984224][T11296] ____sys_sendmsg+0x505/0x830 [ 642.984259][T11296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.984298][T11296] ? import_iovec+0x74/0xa0 [ 642.984329][T11296] ___sys_sendmsg+0x21f/0x2a0 [ 642.984359][T11296] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.984402][T11296] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 642.984458][T11296] ? __fget_files+0x2a/0x420 [ 642.984479][T11296] ? __fget_files+0x3a0/0x420 [ 642.984512][T11296] __x64_sys_sendmsg+0x19b/0x260 [ 642.984544][T11296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.984584][T11296] ? __pfx_ksys_write+0x10/0x10 [ 642.984608][T11296] ? do_syscall_64+0xbe/0x3b0 [ 642.984633][T11296] do_syscall_64+0xfa/0x3b0 [ 642.984656][T11296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.984674][T11296] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 642.984693][T11296] ? clear_bhb_loop+0x60/0xb0 [ 642.984716][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.984735][T11296] RIP: 0033:0x7f7a3378ebe9 [ 642.984753][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.984770][T11296] RSP: 002b:00007f7a319f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.984792][T11296] RAX: ffffffffffffffda RBX: 00007f7a339b6180 RCX: 00007f7a3378ebe9 [ 642.984806][T11296] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 000000000000000a [ 642.984819][T11296] RBP: 00007f7a319f6090 R08: 0000000000000000 R09: 0000000000000000 [ 642.984831][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 642.984843][T11296] R13: 00007f7a339b6218 R14: 00007f7a339b6180 R15: 00007ffcbefbe9d8 [ 642.984875][T11296] [ 643.324047][T11296] tty tty1: ldisc open failed (-12), clearing slot 0 [ 644.280418][T11307] program syz.0.1344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.708749][T11313] tmpfs: Bad value for 'mpol' [ 644.873273][T11311] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 644.880670][T11311] cramfs: wrong magic [ 645.453603][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 645.976771][ T5951] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 646.144275][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 646.165636][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.212851][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.254671][ T5951] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 646.412749][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.452918][ T5951] usb 2-1: config 0 descriptor?? [ 646.899644][ T5951] hid (null): unknown global tag 0xe [ 646.949597][ T5951] aquacomputer_d5next 0003:0C70:F0B6.000E: unknown global tag 0xe [ 647.170420][ T5951] aquacomputer_d5next 0003:0C70:F0B6.000E: item 0 1 1 14 parsing failed [ 647.193099][ T5951] aquacomputer_d5next 0003:0C70:F0B6.000E: probe with driver aquacomputer_d5next failed with error -22 [ 647.216156][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.263276][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.576155][ T5951] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 649.956722][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.968275][ T5951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 650.008307][ T5951] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 650.050651][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.077746][ T5951] usb 3-1: config 0 descriptor?? [ 650.327444][ T6161] usb 2-1: USB disconnect, device number 26 [ 651.936390][ T30] audit: type=1326 audit(1755041420.787:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11363 comm="syz.0.1359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a3378ebe9 code=0x0 [ 652.393414][T11384] lo speed is unknown, defaulting to 1000 [ 652.410757][T11384] lo speed is unknown, defaulting to 1000 [ 652.425576][T11384] lo speed is unknown, defaulting to 1000 [ 652.900256][T11384] infiniband syz0: set active [ 652.905316][T11384] infiniband syz0: added lo [ 652.927272][T11384] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 652.930892][T11384] infiniband syz0: Couldn't open port 1 [ 652.968863][T11384] RDS/IB: syz0: added [ 652.973458][T11384] smc: adding ib device syz0 with port count 1 [ 652.979787][T11384] smc: ib device syz0 port 1 has pnetid [ 653.076672][T11385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.117224][T11384] lo speed is unknown, defaulting to 1000 [ 653.241408][T11384] lo speed is unknown, defaulting to 1000 [ 653.365052][T11384] lo speed is unknown, defaulting to 1000 [ 653.489282][T11384] lo speed is unknown, defaulting to 1000 [ 653.610978][T11384] lo speed is unknown, defaulting to 1000 [ 653.805059][ T5894] lo speed is unknown, defaulting to 1000 [ 653.823699][ T6161] lo speed is unknown, defaulting to 1000 [ 654.143909][ T5894] usb 3-1: USB disconnect, device number 25 [ 655.541898][T11410] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1369'. [ 655.579786][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 655.861129][ T5908] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 656.053571][ T5908] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 656.104071][ T5908] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 656.160878][ T5908] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 656.170947][ T5894] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 656.178955][ T5908] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 656.197242][ T5908] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 656.209929][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.360935][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 656.368566][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.383275][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.393841][ T5894] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 656.403725][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.441832][ T5894] usb 2-1: config 0 descriptor?? [ 656.524946][ T5908] ath6kl: Failed to submit usb control message: -71 [ 656.556412][ T5908] ath6kl: unable to send the bmi data to the device: -71 [ 656.575071][ T5908] ath6kl: Unable to send get target info: -71 [ 656.632126][ T5908] ath6kl: Failed to init ath6kl core: -71 [ 656.688887][ T5908] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 656.738023][ T5908] usb 6-1: USB disconnect, device number 30 [ 656.881666][ T5894] hid (null): unknown global tag 0xe [ 656.914808][ T5894] aquacomputer_d5next 0003:0C70:F0B6.000F: unknown global tag 0xe [ 656.927899][ T5894] aquacomputer_d5next 0003:0C70:F0B6.000F: item 0 1 1 14 parsing failed [ 656.971284][ T5894] aquacomputer_d5next 0003:0C70:F0B6.000F: probe with driver aquacomputer_d5next failed with error -22 [ 658.263637][T11471] overlay: Unknown parameter 'pcr' [ 658.848745][ T10] usb 2-1: USB disconnect, device number 27 [ 659.186952][T11471] sctp: failed to load transform for md5: -2 [ 660.453063][T11489] 9pnet_fd: Insufficient options for proto=fd [ 660.484374][T11489] netlink: 'syz.2.1384': attribute type 12 has an invalid length. [ 660.976090][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1388'. [ 661.127874][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 661.900593][T11519] overlay: Unknown parameter 'pcr' [ 662.092456][T11522] MTD: Couldn't look up '/dev/sg0': -15 [ 663.755636][T11549] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 666.496098][T11592] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 666.539058][T11592] cramfs: wrong magic [ 668.192369][ T6122] Bluetooth: (null): Invalid header checksum [ 668.210689][ T6122] Bluetooth: (null): Invalid header checksum [ 668.301076][ T3080] Bluetooth: (null): Invalid header checksum [ 668.420893][ T3080] Bluetooth: (null): Invalid header checksum [ 668.531174][ T12] Bluetooth: (null): Invalid header checksum [ 668.651799][ T36] Bluetooth: (null): Invalid header checksum [ 669.252095][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 669.460753][T11638] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 669.492904][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 669.509304][T11638] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1424'. [ 669.540904][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.188685][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 670.236905][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.287114][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.326482][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 670.374714][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 670.397482][ T10] usb 2-1: Product: syz [ 670.413778][ T10] usb 2-1: Manufacturer: syz [ 670.429638][T11387] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 670.548727][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 670.560105][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 670.569434][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 670.577083][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 670.620775][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1427'. [ 670.654603][ T49] bond0: (slave wlan1): link status definitely down, disabling slave [ 670.838670][T11387] usb 5-1: device descriptor read/64, error -71 [ 670.946040][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1427'. [ 670.988069][T11651] input: syz1 as /devices/virtual/input/input13 [ 671.546693][T11625] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 671.696709][ T10] usb 2-1: USB disconnect, device number 28 [ 671.768979][T11387] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 672.442711][ T3080] Bluetooth: (null): Invalid header checksum [ 672.467708][T11387] usb 5-1: device descriptor read/64, error -71 [ 672.479508][ T3080] Bluetooth: (null): Invalid header checksum [ 672.553989][ T49] Bluetooth: (null): Invalid header checksum [ 672.693502][T11387] usb usb5-port1: attempt power cycle [ 673.238636][T11387] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 673.279646][T11387] usb 5-1: Using ep0 maxpacket: 16 [ 673.323684][T11387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 673.383731][T11387] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.415307][T11387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.443907][T11387] usb 5-1: Product: syz [ 673.461728][T11387] usb 5-1: Manufacturer: syz [ 673.467153][T11387] usb 5-1: SerialNumber: syz [ 673.495201][T11387] usb 5-1: config 0 descriptor?? [ 673.514832][T11387] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 673.534496][T11387] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 673.611569][T11693] vimc link validate: Scaler:src:510x2160 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 674.278743][T11387] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 674.798121][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 675.133404][T11387] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 675.160184][T11387] em28xx 5-1:0.0: board has no eeprom [ 675.248590][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 675.261914][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 675.301682][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 675.312789][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.324942][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.341539][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.351169][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.581334][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 675.626408][ T10] usbtmc 3-1:16.0: can't read capabilities [ 675.762992][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 675.887105][ T6161] usb 3-1: USB disconnect, device number 26 [ 676.165420][T11724] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1444'. [ 676.247285][T11669] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 676.519741][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805699f400: rx timeout, send abort [ 676.708265][T11387] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 676.736628][T11387] em28xx 5-1:0.0: dvb set to bulk mode. [ 676.867039][ T6161] em28xx 5-1:0.0: Binding DVB extension [ 677.029593][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805699f400: abort rx timeout. Force session deactivation [ 677.228276][T11387] usb 5-1: USB disconnect, device number 35 [ 677.249541][T11387] em28xx 5-1:0.0: Disconnecting em28xx [ 677.313148][T11737] FAULT_INJECTION: forcing a failure. [ 677.313148][T11737] name failslab, interval 1, probability 0, space 0, times 0 [ 677.326630][T11737] CPU: 0 UID: 0 PID: 11737 Comm: syz.4.1445 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 677.326655][T11737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.326667][T11737] Call Trace: [ 677.326675][T11737] [ 677.326683][T11737] dump_stack_lvl+0x189/0x250 [ 677.326708][T11737] ? __pfx____ratelimit+0x10/0x10 [ 677.326729][T11737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.326750][T11737] ? __pfx__printk+0x10/0x10 [ 677.326776][T11737] ? __pfx___might_resched+0x10/0x10 [ 677.326797][T11737] ? fs_reclaim_acquire+0x7d/0x100 [ 677.326823][T11737] should_fail_ex+0x414/0x560 [ 677.326847][T11737] should_failslab+0xa8/0x100 [ 677.326869][T11737] __kmalloc_cache_noprof+0x70/0x3d0 [ 677.326887][T11737] ? snd_seq_prioq_new+0x47/0xa0 [ 677.326917][T11737] snd_seq_prioq_new+0x47/0xa0 [ 677.326948][T11737] snd_seq_queue_alloc+0x12f/0x790 [ 677.326972][T11737] ? snd_seq_ioctl_create_queue+0x24/0x3c0 [ 677.326999][T11737] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 677.327024][T11737] snd_seq_oss_open+0x5e0/0xea0 [ 677.327055][T11737] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 677.327075][T11737] ? irqentry_exit+0x74/0x90 [ 677.327095][T11737] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.327122][T11737] ? preempt_schedule+0xae/0xc0 [ 677.327142][T11737] ? preempt_schedule_common+0x83/0xd0 [ 677.327174][T11737] ? preempt_schedule_thunk+0x16/0x30 [ 677.327226][T11737] ? __pfx___mutex_lock+0x10/0x10 [ 677.327244][T11737] ? irqentry_exit+0x74/0x90 [ 677.327267][T11737] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 677.327288][T11737] ? __pfx_free_devinfo+0x10/0x10 [ 677.327310][T11737] ? __pfx_odev_open+0x10/0x10 [ 677.327328][T11737] ? soundcore_open+0x2da/0x490 [ 677.327353][T11737] odev_open+0x67/0xa0 [ 677.327369][T11737] chrdev_open+0x4c9/0x5e0 [ 677.327393][T11737] ? __pfx_chrdev_open+0x10/0x10 [ 677.327421][T11737] ? __pfx_chrdev_open+0x10/0x10 [ 677.327439][T11737] do_dentry_open+0xdf0/0x1970 [ 677.327478][T11737] vfs_open+0x3b/0x340 [ 677.327498][T11737] ? path_openat+0x2ecd/0x3830 [ 677.327527][T11737] path_openat+0x2ee5/0x3830 [ 677.327557][T11737] ? rcu_is_watching+0x15/0xb0 [ 677.327579][T11737] ? trace_sched_exit_tp+0x38/0x120 [ 677.327633][T11737] ? __pfx_path_openat+0x10/0x10 [ 677.327660][T11737] ? __pfx___schedule+0x10/0x10 [ 677.327686][T11737] ? irqentry_exit+0x74/0x90 [ 677.327711][T11737] do_filp_open+0x1fa/0x410 [ 677.327741][T11737] ? __pfx_do_filp_open+0x10/0x10 [ 677.327764][T11737] ? preempt_schedule_common+0x83/0xd0 [ 677.327806][T11737] ? _raw_spin_unlock+0x3f/0x50 [ 677.327832][T11737] ? alloc_fd+0x64c/0x6c0 [ 677.327864][T11737] do_sys_openat2+0x121/0x1c0 [ 677.327889][T11737] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.327914][T11737] ? ksys_write+0x22a/0x250 [ 677.327932][T11737] ? __pfx_ksys_write+0x10/0x10 [ 677.327953][T11737] ? rcu_is_watching+0x15/0xb0 [ 677.327975][T11737] __x64_sys_openat+0x138/0x170 [ 677.328004][T11737] do_syscall_64+0xfa/0x3b0 [ 677.328025][T11737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.328043][T11737] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 677.328061][T11737] ? clear_bhb_loop+0x60/0xb0 [ 677.328084][T11737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.328106][T11737] RIP: 0033:0x7fbd0758ebe9 [ 677.328122][T11737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.328138][T11737] RSP: 002b:00007fbd0833a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 677.328158][T11737] RAX: ffffffffffffffda RBX: 00007fbd077b6180 RCX: 00007fbd0758ebe9 [ 677.328172][T11737] RDX: 00000000001e4011 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 677.328186][T11737] RBP: 00007fbd0833a090 R08: 0000000000000000 R09: 0000000000000000 [ 677.328197][T11737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.328208][T11737] R13: 00007fbd077b6218 R14: 00007fbd077b6180 R15: 00007ffde2ac9398 [ 677.328238][T11737] [ 677.407618][ T6161] em28xx 5-1:0.0: Registering input extension [ 678.490869][T11387] em28xx 5-1:0.0: Closing input extension [ 678.531764][T11387] em28xx 5-1:0.0: Freeing device [ 680.338328][ T6161] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 681.071140][ T6161] usb 6-1: Using ep0 maxpacket: 16 [ 681.237614][ T6161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 681.284795][ T6161] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 681.301959][ T6161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.314613][ T6161] usb 6-1: Product: syz [ 681.360893][ T6161] usb 6-1: Manufacturer: syz [ 681.479218][ T6161] usb 6-1: SerialNumber: syz [ 681.506593][ T6161] usb 6-1: config 0 descriptor?? [ 681.534560][ T6161] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 681.598857][T11780] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1458'. [ 682.197699][ T5908] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 682.234873][ T6161] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 682.311824][T11782] FAULT_INJECTION: forcing a failure. [ 682.311824][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 682.324750][T11782] CPU: 1 UID: 0 PID: 11782 Comm: syz.0.1462 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 682.324778][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.324790][T11782] Call Trace: [ 682.324799][T11782] [ 682.324807][T11782] dump_stack_lvl+0x189/0x250 [ 682.324835][T11782] ? __pfx____ratelimit+0x10/0x10 [ 682.324857][T11782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.324877][T11782] ? __pfx__printk+0x10/0x10 [ 682.324910][T11782] ? __pfx___might_resched+0x10/0x10 [ 682.324937][T11782] should_fail_ex+0x414/0x560 [ 682.324964][T11782] should_failslab+0xa8/0x100 [ 682.324988][T11782] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 682.325009][T11782] ? __alloc_skb+0x112/0x2d0 [ 682.325041][T11782] __alloc_skb+0x112/0x2d0 [ 682.325073][T11782] netlink_dump+0x1b1/0xe60 [ 682.325114][T11782] ? __pfx_netlink_dump+0x10/0x10 [ 682.325156][T11782] ? genl_start+0x499/0x6c0 [ 682.325186][T11782] __netlink_dump_start+0x5cb/0x7e0 [ 682.325222][T11782] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 682.325249][T11782] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 682.325268][T11782] ? genl_get_cmd+0x7d9/0x910 [ 682.325291][T11782] ? __pfx___mutex_lock+0x10/0x10 [ 682.325314][T11782] ? __pfx_genl_start+0x10/0x10 [ 682.325331][T11782] ? __pfx_genl_dumpit+0x10/0x10 [ 682.325349][T11782] ? __pfx_genl_done+0x10/0x10 [ 682.325386][T11782] genl_rcv_msg+0x5da/0x790 [ 682.325415][T11782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.325432][T11782] ? ref_tracker_free+0x63a/0x7d0 [ 682.325453][T11782] ? __pfx_tipc_nl_media_dump+0x10/0x10 [ 682.325478][T11782] ? __pfx_ref_tracker_free+0x10/0x10 [ 682.325519][T11782] netlink_rcv_skb+0x205/0x470 [ 682.325547][T11782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.325569][T11782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.325615][T11782] ? down_read+0x1ad/0x2e0 [ 682.325641][T11782] genl_rcv+0x28/0x40 [ 682.325659][T11782] netlink_unicast+0x75c/0x8e0 [ 682.325699][T11782] netlink_sendmsg+0x805/0xb30 [ 682.325734][T11782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.325768][T11782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.325788][T11782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.325817][T11782] __sock_sendmsg+0x21c/0x270 [ 682.325844][T11782] ____sys_sendmsg+0x505/0x830 [ 682.325881][T11782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.325921][T11782] ? import_iovec+0x74/0xa0 [ 682.325953][T11782] ___sys_sendmsg+0x21f/0x2a0 [ 682.325985][T11782] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.326058][T11782] ? __fget_files+0x2a/0x420 [ 682.326078][T11782] ? __fget_files+0x3a0/0x420 [ 682.326113][T11782] __x64_sys_sendmsg+0x19b/0x260 [ 682.326146][T11782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.326191][T11782] ? __pfx_ksys_write+0x10/0x10 [ 682.326207][T11782] ? rcu_is_watching+0x15/0xb0 [ 682.326233][T11782] ? do_syscall_64+0xbe/0x3b0 [ 682.326258][T11782] do_syscall_64+0xfa/0x3b0 [ 682.326279][T11782] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.326298][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.326318][T11782] ? clear_bhb_loop+0x60/0xb0 [ 682.326342][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.326361][T11782] RIP: 0033:0x7f7a3378ebe9 [ 682.326379][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.326396][T11782] RSP: 002b:00007f7a3454a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.326415][T11782] RAX: ffffffffffffffda RBX: 00007f7a339b5fa0 RCX: 00007f7a3378ebe9 [ 682.326428][T11782] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000005 [ 682.326440][T11782] RBP: 00007f7a3454a090 R08: 0000000000000000 R09: 0000000000000000 [ 682.326451][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.326463][T11782] R13: 00007f7a339b6038 R14: 00007f7a339b5fa0 R15: 00007ffcbefbe9d8 [ 682.326493][T11782] [ 682.717823][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 682.725019][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.736479][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.749995][ T5908] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 682.785021][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.805196][ T5908] usb 3-1: config 0 descriptor?? [ 683.180793][ T6161] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 683.241812][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.283306][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.199640][ T6161] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 684.209551][ T6161] em28xx 6-1:0.0: board has no eeprom [ 684.912298][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 684.979018][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 685.068823][ T5908] usb 3-1: USB disconnect, device number 27 [ 685.316125][T11761] em28xx 6-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 685.377355][ T6161] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 685.385421][ T6161] em28xx 6-1:0.0: dvb set to bulk mode. [ 685.782990][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.797116][ T5849] em28xx 6-1:0.0: Binding DVB extension [ 685.866762][ T6161] usb 6-1: USB disconnect, device number 31 [ 685.917641][ T6161] em28xx 6-1:0.0: Disconnecting em28xx [ 686.055633][ T5849] em28xx 6-1:0.0: Registering input extension [ 686.219108][ T6161] em28xx 6-1:0.0: Closing input extension [ 687.303576][T11825] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 687.311474][T11825] cramfs: wrong magic [ 687.488960][ T6161] em28xx 6-1:0.0: Freeing device [ 688.217320][ T5923] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 688.635419][ T6161] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 688.757959][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 688.789125][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.822162][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.852774][ T5923] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 688.896986][ T6161] usb 5-1: Using ep0 maxpacket: 16 [ 689.048270][ T6161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 689.058058][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.316216][ T5923] usb 3-1: config 0 descriptor?? [ 689.356980][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1486'. [ 689.364671][ T6161] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 689.410140][ T6161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.426713][ T6161] usb 5-1: Product: syz [ 689.446874][ T6161] usb 5-1: Manufacturer: syz [ 689.453946][ T6161] usb 5-1: SerialNumber: syz [ 689.494189][ T6161] usb 5-1: config 0 descriptor?? [ 689.508217][ T6161] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 689.518598][ T6161] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 689.991031][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.084351][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.465508][T11880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.478170][ T6161] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 690.561347][T11882] netlink: 'syz.5.1491': attribute type 1 has an invalid length. [ 690.896885][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.163945][ T6161] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 691.173766][ T6161] em28xx 5-1:0.0: board has no eeprom [ 691.421078][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 691.477579][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 691.517543][ T5923] usb 3-1: USB disconnect, device number 28 [ 691.546639][ T6161] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 691.584232][ T6161] em28xx 5-1:0.0: dvb set to bulk mode. [ 691.664125][T11387] em28xx 5-1:0.0: Binding DVB extension [ 691.685586][ T6161] usb 5-1: USB disconnect, device number 36 [ 691.701809][ T6161] em28xx 5-1:0.0: Disconnecting em28xx [ 691.789439][T11387] em28xx 5-1:0.0: Registering input extension [ 691.800110][ T6161] em28xx 5-1:0.0: Closing input extension [ 693.393550][ T6161] em28xx 5-1:0.0: Freeing device [ 694.966058][T11927] netlink: 'syz.0.1500': attribute type 14 has an invalid length. [ 698.108157][T11952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.347816][ T5908] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 699.138127][ T5923] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 699.346765][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 699.505732][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.516833][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 699.535205][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.547917][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 699.577672][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 699.587965][ T5908] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 699.599169][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.028087][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.049587][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.075008][ T5908] usb 6-1: config 0 descriptor?? [ 700.084360][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.117192][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.278560][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 700.305825][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 700.344466][ T5908] usb 6-1: USB disconnect, device number 32 [ 700.391410][ T5923] usb 5-1: GET_CAPABILITIES returned 0 [ 700.429771][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 700.727097][ T5923] usb 5-1: USB disconnect, device number 37 [ 702.275111][ T3080] Bluetooth: (null): Invalid header checksum [ 702.289704][ T3080] Bluetooth: (null): Invalid header checksum [ 702.465932][ T3080] Bluetooth: (null): Invalid header checksum [ 702.473844][ T3080] Bluetooth: (null): Invalid header checksum [ 705.081345][T12004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.610735][T12004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.012987][T12004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.476644][T12004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.414084][T12004] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.195287][T12004] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.259863][T12004] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.287711][T12004] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.353394][ T49] Bluetooth: (null): Invalid header checksum [ 713.368872][ T49] Bluetooth: (null): Invalid header checksum [ 713.427132][ T50] Bluetooth: (null): Invalid header checksum [ 713.692173][ T49] Bluetooth: (null): Invalid header checksum [ 713.725645][ T49] Bluetooth: (null): Invalid header checksum [ 715.387971][T12115] lo speed is unknown, defaulting to 1000 [ 716.603927][ T30] audit: type=1326 audit(1755041490.406:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12128 comm="syz.0.1557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a3378ebe9 code=0x0 [ 720.067699][T12162] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 720.067699][T12162] program syz.1.1563 not setting count and/or reply_len properly [ 720.100324][T12162] FAULT_INJECTION: forcing a failure. [ 720.100324][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 720.114244][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.1.1563 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 720.114269][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.114280][T12162] Call Trace: [ 720.114288][T12162] [ 720.114296][T12162] dump_stack_lvl+0x189/0x250 [ 720.114324][T12162] ? __pfx____ratelimit+0x10/0x10 [ 720.114345][T12162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.114366][T12162] ? __pfx__printk+0x10/0x10 [ 720.114414][T12162] should_fail_ex+0x414/0x560 [ 720.114441][T12162] should_failslab+0xa8/0x100 [ 720.114463][T12162] __kmalloc_noprof+0xcb/0x4f0 [ 720.114481][T12162] ? blk_rq_map_user_iov+0x3f7/0x18c0 [ 720.114502][T12162] ? blk_rq_map_user_iov+0x556/0x18c0 [ 720.114529][T12162] blk_rq_map_user_iov+0x556/0x18c0 [ 720.114571][T12162] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 720.114613][T12162] ? import_ubuf+0xfb/0x1d0 [ 720.114642][T12162] blk_rq_map_user_io+0x252/0x3a0 [ 720.114664][T12162] ? __pfx___mutex_trylock_common+0x10/0x10 [ 720.114692][T12162] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 720.114713][T12162] ? rcu_is_watching+0x15/0xb0 [ 720.114743][T12162] ? sg_common_write+0xb85/0x13d0 [ 720.114774][T12162] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 720.114795][T12162] ? preempt_schedule_thunk+0x16/0x30 [ 720.114824][T12162] ? __pfx___mutex_lock+0x10/0x10 [ 720.114845][T12162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 720.114866][T12162] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 720.114902][T12162] ? sg_link_reserve+0x28e/0x540 [ 720.114934][T12162] sg_common_write+0xcd8/0x13d0 [ 720.114979][T12162] ? __pfx_sg_common_write+0x10/0x10 [ 720.115020][T12162] sg_write+0xacd/0xea0 [ 720.115054][T12162] ? __pfx_sg_write+0x10/0x10 [ 720.115083][T12162] ? rcu_is_watching+0x15/0xb0 [ 720.115131][T12162] ? __pfx_sg_write+0x10/0x10 [ 720.115152][T12162] ? __pfx_sg_write+0x10/0x10 [ 720.115176][T12162] ? vfs_write+0x261/0xa90 [ 720.115199][T12162] ? __pfx_sg_write+0x10/0x10 [ 720.115224][T12162] vfs_write+0x27e/0xa90 [ 720.115252][T12162] ? __pfx_vfs_write+0x10/0x10 [ 720.115271][T12162] ? __fget_files+0x2a/0x420 [ 720.115296][T12162] ? __fget_files+0x2a/0x420 [ 720.115316][T12162] ? __fget_files+0x3a0/0x420 [ 720.115335][T12162] ? __fget_files+0x2a/0x420 [ 720.115366][T12162] ksys_write+0x145/0x250 [ 720.115392][T12162] ? __pfx_ksys_write+0x10/0x10 [ 720.115422][T12162] do_syscall_64+0xfa/0x3b0 [ 720.115444][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.115462][T12162] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 720.115481][T12162] ? clear_bhb_loop+0x60/0xb0 [ 720.115504][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.115522][T12162] RIP: 0033:0x7f17ca98ebe9 [ 720.115539][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.115555][T12162] RSP: 002b:00007f17c8bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 720.115576][T12162] RAX: ffffffffffffffda RBX: 00007f17cabb6180 RCX: 00007f17ca98ebe9 [ 720.115590][T12162] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000006 [ 720.115602][T12162] RBP: 00007f17c8bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 720.115615][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.115626][T12162] R13: 00007f17cabb6218 R14: 00007f17cabb6180 R15: 00007ffc51793cc8 [ 720.115657][T12162] [ 724.156687][ T1154] Bluetooth: (null): Invalid header checksum [ 724.200007][ T1154] Bluetooth: (null): Invalid header checksum [ 724.341982][T12205] FAULT_INJECTION: forcing a failure. [ 724.341982][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 724.485102][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.5.1574 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 724.485131][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.485144][T12205] Call Trace: [ 724.485152][T12205] [ 724.485161][T12205] dump_stack_lvl+0x189/0x250 [ 724.485188][T12205] ? __pfx____ratelimit+0x10/0x10 [ 724.485209][T12205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.485229][T12205] ? __pfx__printk+0x10/0x10 [ 724.485255][T12205] ? __pfx___might_resched+0x10/0x10 [ 724.485286][T12205] ? fs_reclaim_acquire+0x7d/0x100 [ 724.485314][T12205] should_fail_ex+0x414/0x560 [ 724.485341][T12205] should_failslab+0xa8/0x100 [ 724.485364][T12205] __kmalloc_noprof+0xcb/0x4f0 [ 724.485385][T12205] ? tomoyo_encode+0x28b/0x550 [ 724.485415][T12205] tomoyo_encode+0x28b/0x550 [ 724.485443][T12205] ? tomoyo_mount_permission+0x27a/0x970 [ 724.485466][T12205] tomoyo_mount_permission+0x331/0x970 [ 724.485497][T12205] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 724.485540][T12205] ? hook_sb_mount+0x1da/0x350 [ 724.485568][T12205] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 724.485630][T12205] security_sb_mount+0xec/0x350 [ 724.485662][T12205] path_mount+0xbc/0xfe0 [ 724.485681][T12205] ? user_path_at+0x44/0x60 [ 724.485704][T12205] ? kmem_cache_free+0x18f/0x400 [ 724.485734][T12205] __se_sys_mount+0x317/0x410 [ 724.485763][T12205] ? __pfx___se_sys_mount+0x10/0x10 [ 724.485791][T12205] ? do_syscall_64+0xbe/0x3b0 [ 724.485811][T12205] ? __x64_sys_mount+0x20/0xc0 [ 724.485836][T12205] do_syscall_64+0xfa/0x3b0 [ 724.485858][T12205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.485876][T12205] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 724.485895][T12205] ? clear_bhb_loop+0x60/0xb0 [ 724.485919][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.485937][T12205] RIP: 0033:0x7f8f4b98ebe9 [ 724.485954][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.485971][T12205] RSP: 002b:00007f8f4c755038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 724.485992][T12205] RAX: ffffffffffffffda RBX: 00007f8f4bbb5fa0 RCX: 00007f8f4b98ebe9 [ 724.486007][T12205] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 724.486020][T12205] RBP: 00007f8f4c755090 R08: 00002000000004c0 R09: 0000000000000000 [ 724.486033][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.486045][T12205] R13: 00007f8f4bbb6038 R14: 00007f8f4bbb5fa0 R15: 00007fff9948a6b8 [ 724.486078][T12205] [ 725.027290][T12210] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 725.027290][T12210] program syz.2.1575 not setting count and/or reply_len properly [ 725.653672][T12217] FAULT_INJECTION: forcing a failure. [ 725.653672][T12217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.668126][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.5.1577 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 725.668151][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.668163][T12217] Call Trace: [ 725.668170][T12217] [ 725.668179][T12217] dump_stack_lvl+0x189/0x250 [ 725.668205][T12217] ? __pfx____ratelimit+0x10/0x10 [ 725.668226][T12217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.668247][T12217] ? __pfx__printk+0x10/0x10 [ 725.668271][T12217] ? __might_fault+0xb0/0x130 [ 725.668302][T12217] should_fail_ex+0x414/0x560 [ 725.668327][T12217] _copy_from_user+0x2d/0xb0 [ 725.668354][T12217] restore_altstack+0x9d/0x4b0 [ 725.668379][T12217] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 725.668412][T12217] ? __pfx_restore_altstack+0x10/0x10 [ 725.668442][T12217] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.668460][T12217] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.668483][T12217] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 725.668516][T12217] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.668536][T12217] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 725.668563][T12217] ? _raw_spin_unlock_irq+0x2e/0x50 [ 725.668580][T12217] ? signal_setup_done+0x230/0x310 [ 725.668605][T12217] ? __lock_acquire+0xab9/0xd20 [ 725.668644][T12217] ? __task_pid_nr_ns+0x28/0x470 [ 725.668680][T12217] ? do_syscall_64+0xbe/0x3b0 [ 725.668705][T12217] do_syscall_64+0xfa/0x3b0 [ 725.668725][T12217] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.668744][T12217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.668763][T12217] ? clear_bhb_loop+0x60/0xb0 [ 725.668786][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.668804][T12217] RIP: 0033:0x7f8f4b92add9 [ 725.668822][T12217] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 725.668838][T12217] RSP: 002b:00007f8f4c754a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 725.668858][T12217] RAX: ffffffffffffffda RBX: 00007f8f4bbb5fa0 RCX: 00007f8f4b92add9 [ 725.668878][T12217] RDX: 00007f8f4c754a80 RSI: 00007f8f4c754bb0 RDI: 0000000000000021 [ 725.668892][T12217] RBP: 00007f8f4c755090 R08: 0000000000000000 R09: 0000000000000000 [ 725.668904][T12217] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 725.668916][T12217] R13: 00007f8f4bbb6038 R14: 00007f8f4bbb5fa0 R15: 00007fff9948a6b8 [ 725.668947][T12217] [ 726.356408][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 729.215421][T12254] netlink: 876 bytes leftover after parsing attributes in process `syz.1.1588'. [ 729.695287][ T5908] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 730.901791][T12264] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 730.909873][T12264] cramfs: wrong magic [ 731.118931][ T5908] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 731.130058][ T5908] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 731.143178][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 731.152760][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.185315][ T5908] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 731.195049][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 731.203144][ T5908] usb 3-1: Product: syz [ 731.207623][ T5908] usb 3-1: Manufacturer: syz [ 731.248717][ T5908] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 731.945184][ T5923] usb 3-1: USB disconnect, device number 29 [ 733.992131][ T1138] Bluetooth: (null): Invalid header checksum [ 734.049463][ T1138] Bluetooth: (null): Invalid header checksum [ 734.112649][ T1138] Bluetooth: (null): Invalid header checksum [ 735.614196][ T6161] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 735.859986][T12308] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1602'. [ 736.014272][ T6161] usb 6-1: Using ep0 maxpacket: 32 [ 736.021336][ T6161] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 736.030075][ T6161] usb 6-1: config 0 has no interface number 0 [ 736.044110][ T6161] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.064094][ T6161] usb 6-1: config 0 interface 85 has no altsetting 0 [ 736.197557][ T6161] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 736.207375][ T6161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.218337][ T6161] usb 6-1: Product: syz [ 736.222541][ T6161] usb 6-1: Manufacturer: syz [ 736.227533][ T6161] usb 6-1: SerialNumber: syz [ 736.243010][ T6161] usb 6-1: config 0 descriptor?? [ 736.319298][T12316] netlink: 'syz.1.1604': attribute type 6 has an invalid length. [ 736.879392][T12330] overlay: Unknown parameter 'pcr' [ 736.947881][T12332] MTD: Couldn't look up '/dev/sg0': -15 [ 737.080398][ T6161] appletouch 6-1:0.85: Geyser mode initialized. [ 737.105379][ T5849] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 737.137272][ T6161] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input17 [ 737.294585][ T5849] usb 2-1: Using ep0 maxpacket: 16 [ 737.511642][ T5849] usb 2-1: config 0 has no interfaces? [ 738.041342][ T5849] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 738.421172][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.816897][ T5849] usb 2-1: Product: syz [ 739.064100][ T5849] usb 2-1: Manufacturer: syz [ 739.069034][ T5849] usb 2-1: SerialNumber: syz [ 739.411219][ T5849] usb 2-1: config 0 descriptor?? [ 739.694940][ T5849] usb 6-1: USB disconnect, device number 33 [ 740.083095][ T6161] usb 2-1: USB disconnect, device number 29 [ 740.703846][ T5849] appletouch 6-1:0.85: input: appletouch disconnected [ 743.841545][ T1138] Bluetooth: (null): Invalid header checksum [ 743.852308][ T1138] Bluetooth: (null): Invalid header checksum [ 743.860807][ T1138] Bluetooth: (null): Invalid header checksum [ 743.882670][ T1138] Bluetooth: (null): Invalid header checksum [ 743.891007][ T1138] Bluetooth: (null): Invalid header checksum [ 743.898713][ T1138] Bluetooth: (null): Invalid header checksum [ 743.977939][ T1138] Bluetooth: (null): Invalid header checksum [ 747.219693][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.226302][T12435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 750.821946][T12440] 9pnet_fd: Insufficient options for proto=fd [ 758.909311][T12515] fuse: blksize only supported for fuseblk [ 764.210714][ T30] audit: type=1326 audit(1755041538.066:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12546 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b98ebe9 code=0x7ffc0000 [ 764.283225][ T30] audit: type=1326 audit(1755041538.066:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12546 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f8f4b98ebe9 code=0x7ffc0000 [ 764.396823][T12563] vlan2: entered allmulticast mode [ 764.402010][ T30] audit: type=1326 audit(1755041538.066:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12546 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b98ebe9 code=0x7ffc0000 [ 764.424260][T12563] erspan0: entered allmulticast mode [ 764.454089][ T30] audit: type=1326 audit(1755041538.066:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12546 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f4b98ebe9 code=0x7ffc0000 [ 764.485266][T12562] evm: overlay not supported [ 764.956517][T12566] x_tables: duplicate underflow at hook 1 [ 765.018928][ T30] audit: type=1326 audit(1755041538.066:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12546 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b98ebe9 code=0x7ffc0000 [ 765.112605][ T30] audit: type=1326 audit(1755041538.066:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12546 comm="syz.5.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b98ebe9 code=0x7ffc0000 [ 765.234159][T11387] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 765.395973][T11387] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.735094][T11387] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.764692][T11387] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 765.773894][T11387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.812509][T11387] usb 6-1: Product: syz [ 765.817372][T11387] usb 6-1: Manufacturer: syz [ 765.822050][T11387] usb 6-1: SerialNumber: syz [ 766.657595][T11387] usb 6-1: 0:2 : does not exist [ 767.178541][T11387] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 767.236705][T11387] usb 6-1: USB disconnect, device number 34 [ 767.365544][T12568] udevd[12568]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.107272][T12587] overlay: Unknown parameter 'pcr' [ 768.521838][T12589] MTD: Couldn't look up '/dev/sg0': -15 [ 770.021155][T12607] FAULT_INJECTION: forcing a failure. [ 770.021155][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 770.043018][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 770.106779][T12607] CPU: 1 UID: 0 PID: 12607 Comm: syz.0.1676 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 770.106805][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 770.106816][T12607] Call Trace: [ 770.106824][T12607] [ 770.106834][T12607] dump_stack_lvl+0x189/0x250 [ 770.106863][T12607] ? __pfx____ratelimit+0x10/0x10 [ 770.106885][T12607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.106910][T12607] ? __pfx__printk+0x10/0x10 [ 770.106942][T12607] ? __pfx___might_resched+0x10/0x10 [ 770.106970][T12607] should_fail_ex+0x414/0x560 [ 770.106995][T12607] ? nf_tables_newchain+0x1b7e/0x2900 [ 770.107024][T12607] should_failslab+0xa8/0x100 [ 770.107048][T12607] __kvmalloc_node_noprof+0x161/0x5f0 [ 770.107071][T12607] ? nf_tables_newchain+0x1b7e/0x2900 [ 770.107106][T12607] nf_tables_newchain+0x1b7e/0x2900 [ 770.107153][T12607] ? __pfx_nf_tables_newchain+0x10/0x10 [ 770.107219][T12607] ? nfnl_pernet+0x23/0x240 [ 770.107252][T12607] ? __nla_parse+0x40/0x60 [ 770.107280][T12607] nfnetlink_rcv+0x112f/0x2520 [ 770.107337][T12607] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 770.107377][T12607] ? ref_tracker_free+0x63a/0x7d0 [ 770.107432][T12607] ? __netlink_deliver_tap+0x807/0x850 [ 770.107469][T12607] ? netlink_deliver_tap+0x2e/0x1b0 [ 770.107495][T12607] ? netlink_deliver_tap+0x2e/0x1b0 [ 770.107528][T12607] netlink_unicast+0x75c/0x8e0 [ 770.107566][T12607] netlink_sendmsg+0x805/0xb30 [ 770.107604][T12607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.107641][T12607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 770.107662][T12607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.107697][T12607] __sock_sendmsg+0x21c/0x270 [ 770.107724][T12607] ____sys_sendmsg+0x505/0x830 [ 770.107760][T12607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.107800][T12607] ? import_iovec+0x74/0xa0 [ 770.107829][T12607] ___sys_sendmsg+0x21f/0x2a0 [ 770.107861][T12607] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.107928][T12607] ? __fget_files+0x2a/0x420 [ 770.107949][T12607] ? __fget_files+0x3a0/0x420 [ 770.107983][T12607] __x64_sys_sendmsg+0x19b/0x260 [ 770.108015][T12607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 770.108056][T12607] ? __pfx_ksys_write+0x10/0x10 [ 770.108081][T12607] ? do_syscall_64+0xbe/0x3b0 [ 770.108108][T12607] do_syscall_64+0xfa/0x3b0 [ 770.108128][T12607] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.108149][T12607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.108168][T12607] ? clear_bhb_loop+0x60/0xb0 [ 770.108192][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.108211][T12607] RIP: 0033:0x7f7a3378ebe9 [ 770.108228][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.108246][T12607] RSP: 002b:00007f7a3454a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.108267][T12607] RAX: ffffffffffffffda RBX: 00007f7a339b5fa0 RCX: 00007f7a3378ebe9 [ 770.108282][T12607] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 770.108296][T12607] RBP: 00007f7a3454a090 R08: 0000000000000000 R09: 0000000000000000 [ 770.108308][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.108321][T12607] R13: 00007f7a339b6038 R14: 00007f7a339b5fa0 R15: 00007ffcbefbe9d8 [ 770.108353][T12607] [ 770.427147][ T6161] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 770.595078][T12612] 9pnet_fd: Insufficient options for proto=fd [ 770.604398][ T6161] usb 5-1: Using ep0 maxpacket: 32 [ 770.610965][ T6161] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 770.623458][ T6161] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 770.632559][ T6161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.640698][ T6161] usb 5-1: Product: syz [ 770.644898][ T6161] usb 5-1: Manufacturer: syz [ 770.649475][ T6161] usb 5-1: SerialNumber: syz [ 770.656293][ T6161] usb 5-1: config 0 descriptor?? [ 770.663687][ T6161] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 770.672508][ T6161] usb 5-1: unsupported MDLM descriptors [ 772.427120][ T5849] usb 5-1: USB disconnect, device number 38 [ 773.316307][T12638] mmap: syz.5.1682 (12638) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 773.767534][T12640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.876044][T12653] loop2: detected capacity change from 0 to 7 [ 774.892478][T12653] Dev loop2: unable to read RDB block 7 [ 774.909081][T12653] loop2: AHDI p1 p2 p3 [ 774.950001][T12653] loop2: partition table partially beyond EOD, truncated [ 775.078271][T12664] pim6reg: entered allmulticast mode [ 775.120985][T12653] loop2: p1 start 1601398130 is beyond EOD, truncated [ 775.140503][T12653] loop2: p2 start 1702059890 is beyond EOD, truncated [ 776.173186][T12655] pim6reg: left allmulticast mode [ 777.416299][T12689] 9pnet_fd: Insufficient options for proto=fd [ 778.964326][T12704] xt_connbytes: Forcing CT accounting to be enabled [ 778.971883][T12704] set match dimension is over the limit! [ 779.394469][T12711] FAULT_INJECTION: forcing a failure. [ 779.394469][T12711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.407700][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.1.1700 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 779.407724][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.407734][T12711] Call Trace: [ 779.407741][T12711] [ 779.407749][T12711] dump_stack_lvl+0x189/0x250 [ 779.407779][T12711] ? __pfx____ratelimit+0x10/0x10 [ 779.407794][T12711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.407806][T12711] ? __pfx__printk+0x10/0x10 [ 779.407819][T12711] ? __might_fault+0xb0/0x130 [ 779.407836][T12711] should_fail_ex+0x414/0x560 [ 779.407850][T12711] _copy_from_iter+0x1db/0x16f0 [ 779.407868][T12711] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.407880][T12711] ? __pfx__copy_from_iter+0x10/0x10 [ 779.407895][T12711] ? netlink_sendmsg+0x6a2/0xb30 [ 779.407915][T12711] netlink_sendmsg+0x6b2/0xb30 [ 779.407928][T12711] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.407943][T12711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.407959][T12711] ? __pfx_bpf_lsm_socket_sendmsg+0x10/0x10 [ 779.407971][T12711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.407989][T12711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.408003][T12711] __sock_sendmsg+0x21c/0x270 [ 779.408018][T12711] ____sys_sendmsg+0x505/0x830 [ 779.408036][T12711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.408056][T12711] ? import_iovec+0x74/0xa0 [ 779.408072][T12711] ___sys_sendmsg+0x21f/0x2a0 [ 779.408089][T12711] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.408124][T12711] ? __fget_files+0x2a/0x420 [ 779.408135][T12711] ? __fget_files+0x3a0/0x420 [ 779.408152][T12711] __x64_sys_sendmsg+0x19b/0x260 [ 779.408168][T12711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.408197][T12711] do_syscall_64+0xfa/0x3b0 [ 779.408209][T12711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.408219][T12711] ? asm_sysvec_call_function_single+0x1a/0x20 [ 779.408229][T12711] ? clear_bhb_loop+0x60/0xb0 [ 779.408241][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.408251][T12711] RIP: 0033:0x7f17ca98ebe9 [ 779.408261][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.408270][T12711] RSP: 002b:00007f17c8bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.408282][T12711] RAX: ffffffffffffffda RBX: 00007f17cabb6180 RCX: 00007f17ca98ebe9 [ 779.408289][T12711] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 779.408296][T12711] RBP: 00007f17c8bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 779.408302][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.408308][T12711] R13: 00007f17cabb6218 R14: 00007f17cabb6180 R15: 00007ffc51793cc8 [ 779.408324][T12711] [ 780.484547][ T5849] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 780.787479][ T5849] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 780.818024][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 780.833572][ T5849] usb 2-1: Product: syz [ 780.878193][ T5849] usb 2-1: Manufacturer: syz [ 780.882922][ T5849] usb 2-1: SerialNumber: syz [ 780.917729][ T5849] usb 2-1: config 0 descriptor?? [ 780.979533][ T5849] mvusb_mdio 2-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 781.160856][ T5916] usb 2-1: USB disconnect, device number 30 [ 781.963730][ T6161] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 782.134127][ T6161] usb 6-1: Using ep0 maxpacket: 16 [ 782.159974][ T6161] usb 6-1: config 0 has no interfaces? [ 782.176832][ T6161] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 782.260622][ T6161] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.427164][ T6161] usb 6-1: config 0 descriptor?? [ 782.463325][ T30] audit: type=1326 audit(1755041556.316:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.665106][ T30] audit: type=1326 audit(1755041556.346:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.701504][ T30] audit: type=1326 audit(1755041556.376:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.730976][ T30] audit: type=1326 audit(1755041556.376:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.756837][ T30] audit: type=1326 audit(1755041556.396:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.782539][ T30] audit: type=1326 audit(1755041556.396:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.843627][ T30] audit: type=1326 audit(1755041556.426:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 782.898211][ T30] audit: type=1326 audit(1755041556.426:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 783.014079][ T5916] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 783.048504][ T30] audit: type=1326 audit(1755041556.426:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 783.226980][ T30] audit: type=1326 audit(1755041556.446:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 783.357781][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 783.457275][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 783.469115][ T5916] usb 5-1: config 0 has no interface number 0 [ 783.486673][ T5916] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.516088][ T5916] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 783.546599][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.570249][ T5916] usb 5-1: config 0 descriptor?? [ 783.602258][ T5916] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 783.627306][ T6161] usb 6-1: USB disconnect, device number 35 [ 783.925377][ T5916] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 784.503134][T12784] binder_alloc: 12782: binder_alloc_buf, no vma [ 784.795311][ T5916] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 784.924749][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.066730][ T5916] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 785.082896][ T5916] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 785.145226][ T5916] usb 3-1: Manufacturer: syz [ 785.175530][ T5916] usb 3-1: config 0 descriptor?? [ 785.234349][ T5908] usb 5-1: USB disconnect, device number 39 [ 785.484753][ T5849] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 785.768253][ T5849] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 785.790315][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.794142][ T5916] rc_core: IR keymap rc-hauppauge not found [ 785.813112][ T5849] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 785.822735][ T5849] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 785.831854][ T5916] Registered IR keymap rc-empty [ 785.834358][ T5849] usb 2-1: Manufacturer: syz [ 785.846336][ T5849] usb 2-1: config 0 descriptor?? [ 785.923916][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 785.984435][T12803] input: syz0 as /devices/virtual/input/input19 [ 786.386736][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 786.475842][ T5849] rc_core: IR keymap rc-hauppauge not found [ 786.519613][ T5916] usb 3-1: USB disconnect, device number 30 [ 786.529493][ T5849] Registered IR keymap rc-empty [ 786.703787][ T5849] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 786.726126][ T5849] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input20 [ 786.816449][T12816] FAULT_INJECTION: forcing a failure. [ 786.816449][T12816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.829613][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz.2.1730 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 786.829640][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.829652][T12816] Call Trace: [ 786.829661][T12816] [ 786.829669][T12816] dump_stack_lvl+0x189/0x250 [ 786.829695][T12816] ? __pfx____ratelimit+0x10/0x10 [ 786.829716][T12816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.829738][T12816] ? __pfx__printk+0x10/0x10 [ 786.829763][T12816] ? __might_fault+0xb0/0x130 [ 786.829794][T12816] should_fail_ex+0x414/0x560 [ 786.829819][T12816] _copy_from_iter+0x1db/0x16f0 [ 786.829847][T12816] ? rcu_is_watching+0x15/0xb0 [ 786.829870][T12816] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 786.829892][T12816] ? __pfx__copy_from_iter+0x10/0x10 [ 786.829918][T12816] ? __build_skb_around+0x257/0x3e0 [ 786.829949][T12816] ? netlink_sendmsg+0x642/0xb30 [ 786.829974][T12816] ? skb_put+0x11b/0x210 [ 786.830004][T12816] netlink_sendmsg+0x6b2/0xb30 [ 786.830041][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.830074][T12816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 786.830093][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.830127][T12816] __sock_sendmsg+0x21c/0x270 [ 786.830154][T12816] ____sys_sendmsg+0x505/0x830 [ 786.830189][T12816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.830227][T12816] ? import_iovec+0x74/0xa0 [ 786.830257][T12816] ___sys_sendmsg+0x21f/0x2a0 [ 786.830288][T12816] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.830354][T12816] ? __fget_files+0x2a/0x420 [ 786.830374][T12816] ? __fget_files+0x3a0/0x420 [ 786.830407][T12816] __x64_sys_sendmsg+0x19b/0x260 [ 786.830438][T12816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 786.830477][T12816] ? __pfx_ksys_write+0x10/0x10 [ 786.830501][T12816] ? do_syscall_64+0xbe/0x3b0 [ 786.830527][T12816] do_syscall_64+0xfa/0x3b0 [ 786.830549][T12816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.830567][T12816] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 786.830586][T12816] ? clear_bhb_loop+0x60/0xb0 [ 786.830609][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.830628][T12816] RIP: 0033:0x7f014e18ebe9 [ 786.830645][T12816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.830662][T12816] RSP: 002b:00007f014f056038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.830682][T12816] RAX: ffffffffffffffda RBX: 00007f014e3b6180 RCX: 00007f014e18ebe9 [ 786.830697][T12816] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 786.830709][T12816] RBP: 00007f014f056090 R08: 0000000000000000 R09: 0000000000000000 [ 786.830721][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.830732][T12816] R13: 00007f014e3b6218 R14: 00007f014e3b6180 R15: 00007fffed96ccb8 [ 786.830764][T12816] [ 787.213937][ T5849] usb 2-1: USB disconnect, device number 31 [ 788.854138][ T5849] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 789.015794][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.028241][ T5849] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 789.047836][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.057358][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.065788][ T5849] usb 5-1: Product: syz [ 789.070185][ T5849] usb 5-1: Manufacturer: syz [ 789.078090][ T5849] usb 5-1: SerialNumber: syz [ 789.444122][T11387] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 789.604304][T11387] usb 2-1: Using ep0 maxpacket: 32 [ 789.611099][T11387] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 789.619460][T11387] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 789.628367][T11387] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 789.636872][T11387] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 789.645931][T11387] usb 2-1: config 0 has no interface number 0 [ 789.652147][T11387] usb 2-1: config 0 has no interface number 1 [ 789.658501][T11387] usb 2-1: config 0 interface 238 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 789.669819][T11387] usb 2-1: config 0 interface 238 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 789.680625][T11387] usb 2-1: config 0 interface 238 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 789.690654][T11387] usb 2-1: config 0 interface 238 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 789.701579][T11387] usb 2-1: config 0 interface 238 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 789.713080][T11387] usb 2-1: config 0 interface 238 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 11 [ 789.728422][T11387] usb 2-1: too many endpoints for config 0 interface 12 altsetting 175: 209, using maximum allowed: 30 [ 789.740317][T11387] usb 2-1: config 0 interface 12 altsetting 175 has a duplicate endpoint with address 0x3, skipping [ 789.752481][T11387] usb 2-1: config 0 interface 12 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 209 [ 789.767149][T11387] usb 2-1: config 0 interface 238 has no altsetting 0 [ 789.774383][T11387] usb 2-1: config 0 interface 12 has no altsetting 0 [ 789.784630][T11387] usb 2-1: New USB device found, idVendor=2001, idProduct=3703, bcdDevice=ce.8d [ 789.796428][T11387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.806046][T11387] usb 2-1: Product: syz [ 789.810412][T11387] usb 2-1: Manufacturer: syz [ 789.815758][T11387] usb 2-1: SerialNumber: syz [ 789.823215][T12854] block nbd5: not configured, cannot reconfigure [ 789.825244][T11387] usb 2-1: config 0 descriptor?? [ 790.050278][T12850] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 790.058367][T12850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1740'. [ 790.070725][T12850] team0: entered promiscuous mode [ 790.075896][T12850] team_slave_0: entered promiscuous mode [ 790.093758][T12850] team_slave_1: entered promiscuous mode [ 790.173623][ T5849] cdc_ncm 5-1:1.0: bind() failure [ 790.198337][T12850] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 790.406738][T12850] team0: entered allmulticast mode [ 790.454945][ T5849] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 790.521683][T12850] team_slave_0: entered allmulticast mode [ 790.555782][T12850] team_slave_1: entered allmulticast mode [ 790.561573][T12850] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 790.569593][T12850] bridge0: port 3(team0) entered blocking state [ 790.576627][T12850] bridge0: port 3(team0) entered disabled state [ 790.587747][T12850] bridge0: port 3(team0) entered blocking state [ 790.594155][T12850] bridge0: port 3(team0) entered forwarding state [ 790.602421][ T5849] cdc_ncm 5-1:1.1: bind() failure [ 790.628619][ T5849] usb 5-1: USB disconnect, device number 40 [ 790.662787][T11387] usb 2-1: USB disconnect, device number 32 [ 794.564961][T12900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 794.566621][T12906] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.571662][T12900] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 794.594238][T12900] vhci_hcd vhci_hcd.0: Device attached [ 794.623498][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.633044][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.643273][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.658740][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.669320][T12900] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 794.675938][T12900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 794.684597][T12900] vhci_hcd vhci_hcd.0: Device attached [ 794.691868][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.705150][T12900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.735203][T12907] vhci_hcd: connection closed [ 794.735483][ T13] vhci_hcd: stop threads [ 794.750300][T12904] vhci_hcd: connection closed [ 794.765281][ T5908] vhci_hcd: vhci_device speed not set [ 794.791315][ T13] vhci_hcd: release socket [ 794.812257][ T13] vhci_hcd: disconnect device [ 794.833923][ T13] vhci_hcd: stop threads [ 794.858447][ T13] vhci_hcd: release socket [ 794.884620][ T5908] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 794.898177][ T13] vhci_hcd: disconnect device [ 795.090139][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 796.774123][ T5916] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 797.064636][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 797.245250][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 797.361179][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 797.405564][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.452003][ T5916] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.524128][ T5916] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 797.567416][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.818887][ T5916] usb 6-1: GET_CAPABILITIES returned 0 [ 798.257455][ T5916] usbtmc 6-1:16.0: can't read capabilities [ 798.411926][T12952] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 798.419912][T12952] cramfs: wrong magic [ 798.857098][ T5916] usb 6-1: USB disconnect, device number 36 [ 799.172440][T12958] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1768'. [ 799.182058][T12958] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1768'. [ 799.191827][T12958] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1768'. [ 800.124138][ T5908] vhci_hcd: vhci_device speed not set [ 800.495761][T12966] MTD: Couldn't look up '/dev/sg0': -15 [ 802.338598][T12991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.889312][T12999] MTD: Couldn't look up '/dev/sg0': -15 [ 803.792714][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.542027][T13019] netlink: 'syz.5.1784': attribute type 1 has an invalid length. [ 804.550576][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1784'. [ 805.176966][T13019] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.050341][T13033] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1788'. [ 806.184267][T11387] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 806.374366][T11387] usb 5-1: Using ep0 maxpacket: 32 [ 806.391684][T11387] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 806.414066][T11387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.454266][T11387] usb 5-1: config 0 descriptor?? [ 806.486707][T11387] gspca_main: sunplus-2.14.0 probing 041e:400b [ 806.514601][ T5908] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 806.675093][ T5908] usb 2-1: device descriptor read/64, error -71 [ 806.904273][T11387] gspca_sunplus: reg_w_riv err -71 [ 806.910083][T11387] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 806.921188][T11387] usb 5-1: USB disconnect, device number 41 [ 806.924134][ T5908] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 807.184439][ T5908] usb 2-1: device descriptor read/64, error -71 [ 807.262329][T13051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.456816][ T5908] usb usb2-port1: attempt power cycle [ 807.914220][ T5908] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 807.948895][ T5908] usb 2-1: device descriptor read/8, error -71 [ 807.981485][T13061] FAULT_INJECTION: forcing a failure. [ 807.981485][T13061] name failslab, interval 1, probability 0, space 0, times 0 [ 807.995606][T13061] CPU: 0 UID: 0 PID: 13061 Comm: syz.2.1794 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 807.995632][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.995645][T13061] Call Trace: [ 807.995653][T13061] [ 807.995661][T13061] dump_stack_lvl+0x189/0x250 [ 807.995687][T13061] ? __pfx____ratelimit+0x10/0x10 [ 807.995708][T13061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.995730][T13061] ? __pfx__printk+0x10/0x10 [ 807.995761][T13061] ? __pfx___might_resched+0x10/0x10 [ 807.995781][T13061] ? fs_reclaim_acquire+0x7d/0x100 [ 807.995810][T13061] should_fail_ex+0x414/0x560 [ 807.995836][T13061] should_failslab+0xa8/0x100 [ 807.995858][T13061] kmem_cache_alloc_noprof+0x73/0x3c0 [ 807.995877][T13061] ? __rds_conn_create+0x7ca/0x2060 [ 807.995902][T13061] __rds_conn_create+0x7ca/0x2060 [ 807.995920][T13061] ? __rds_conn_create+0x2e3/0x2060 [ 807.995955][T13061] ? __pfx___rds_conn_create+0x10/0x10 [ 807.995972][T13061] ? irqentry_exit+0x74/0x90 [ 807.995992][T13061] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.996025][T13061] rds_conn_create_outgoing+0x43/0x60 [ 807.996050][T13061] rds_sendmsg+0x1001/0x1f00 [ 807.996088][T13061] ? rcu_is_watching+0x15/0xb0 [ 807.996111][T13061] ? __pfx_rds_sendmsg+0x10/0x10 [ 807.996134][T13061] ? preempt_schedule_irq+0xde/0x150 [ 807.996153][T13061] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 807.996183][T13061] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 807.996221][T13061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.996240][T13061] ? __pfx_rds_sendmsg+0x10/0x10 [ 807.996265][T13061] __sock_sendmsg+0x21c/0x270 [ 807.996292][T13061] ____sys_sendmsg+0x505/0x830 [ 807.996327][T13061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.996366][T13061] ? import_iovec+0x74/0xa0 [ 807.996396][T13061] ___sys_sendmsg+0x21f/0x2a0 [ 807.996427][T13061] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.996459][T13061] ? irqentry_exit+0x74/0x90 [ 807.996518][T13061] ? __fget_files+0x2a/0x420 [ 807.996539][T13061] ? __fget_files+0x3a0/0x420 [ 807.996571][T13061] __x64_sys_sendmsg+0x19b/0x260 [ 807.996598][T13061] ? schedule+0x165/0x360 [ 807.996618][T13061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.996667][T13061] ? do_syscall_64+0xbe/0x3b0 [ 807.996693][T13061] do_syscall_64+0xfa/0x3b0 [ 807.996715][T13061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.996733][T13061] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 807.996751][T13061] ? clear_bhb_loop+0x60/0xb0 [ 807.996775][T13061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.996794][T13061] RIP: 0033:0x7f014e18ebe9 [ 807.996811][T13061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.996828][T13061] RSP: 002b:00007f014f056038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.996849][T13061] RAX: ffffffffffffffda RBX: 00007f014e3b6180 RCX: 00007f014e18ebe9 [ 807.996864][T13061] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 807.996877][T13061] RBP: 00007f014f056090 R08: 0000000000000000 R09: 0000000000000000 [ 807.996889][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.996900][T13061] R13: 00007f014e3b6218 R14: 00007f014e3b6180 R15: 00007fffed96ccb8 [ 807.996933][T13061] [ 808.708024][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.403109][ T5908] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 809.856518][ T5908] usb 2-1: device not accepting address 36, error -71 [ 810.059032][ T5908] usb usb2-port1: unable to enumerate USB device [ 810.060205][T13068] syz_tun: entered allmulticast mode [ 810.397775][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 810.397822][ T30] audit: type=1326 audit(1755041584.166:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13072 comm="syz.5.1798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b98ebe9 code=0x0 [ 810.807229][T13069] syz_tun: left allmulticast mode [ 810.955361][ T5908] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 811.091143][T13083] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 811.134267][T13083] cramfs: wrong magic [ 811.162609][ T5908] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 811.177865][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.189453][ T5908] usb 2-1: config 0 has no interface number 0 [ 811.485515][ T5908] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 811.581708][ T5908] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 812.386757][ T5908] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 812.784114][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.834264][ T5908] usb 2-1: Product: syz [ 812.848827][ T5908] usb 2-1: Manufacturer: syz [ 812.862388][ T5908] usb 2-1: SerialNumber: syz [ 812.890890][ T5908] usb 2-1: config 0 descriptor?? [ 812.906286][ T5908] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 813.030927][T13097] netlink: 'syz.2.1805': attribute type 2 has an invalid length. [ 813.199103][T13101] netlink: 4276 bytes leftover after parsing attributes in process `syz.5.1807'. [ 813.212530][T13101] netlink: 4276 bytes leftover after parsing attributes in process `syz.5.1807'. [ 813.223951][T13101] netlink: 396 bytes leftover after parsing attributes in process `syz.5.1807'. [ 813.605757][T13106] usb 2-1: USB disconnect, device number 37 [ 813.671585][ T30] audit: type=1326 audit(1755041587.526:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 813.734526][T13097] þ: entered promiscuous mode [ 813.744396][ T30] audit: type=1326 audit(1755041587.526:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 813.895633][ T30] audit: type=1326 audit(1755041587.526:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 813.921305][ T30] audit: type=1326 audit(1755041587.526:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 814.604267][ T30] audit: type=1326 audit(1755041587.556:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 814.626058][ T30] audit: type=1326 audit(1755041587.556:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 814.648689][ T30] audit: type=1326 audit(1755041587.556:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 814.670376][ T30] audit: type=1326 audit(1755041587.556:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 814.692220][ T30] audit: type=1326 audit(1755041587.556:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13102 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0758ebe9 code=0x7ffc0000 [ 814.779962][T13126] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 814.824055][T13126] cramfs: wrong magic [ 814.884371][ T5849] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 815.296574][ T5849] usb 3-1: device descriptor read/64, error -71 [ 815.324921][T13129] lo speed is unknown, defaulting to 1000 [ 815.535205][ T5849] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 815.567940][T11387] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 815.845630][ T5849] usb 3-1: device descriptor read/64, error -71 [ 815.992890][T11387] usb 2-1: config 0 has no interfaces? [ 816.028463][T11387] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 816.053362][T11387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.076999][T11387] usb 2-1: Product: syz [ 816.082448][T11387] usb 2-1: Manufacturer: syz [ 816.089618][T11387] usb 2-1: SerialNumber: syz [ 816.095696][ T5849] usb usb3-port1: attempt power cycle [ 816.107011][T11387] usb 2-1: config 0 descriptor?? [ 817.023428][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 817.023444][ T30] audit: type=1326 audit(1755041590.876:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13150 comm="syz.0.1817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a3378ebe9 code=0x0 [ 817.888309][T13151] Can't find ip_set type haÿÿÿÿ [ 818.614212][ T5849] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 818.894417][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 819.088914][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 819.097774][ T5849] usb 5-1: can't read configurations, error -61 [ 819.304083][ T5849] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 819.479897][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 819.541525][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 819.568777][ T5849] usb 5-1: can't read configurations, error -61 [ 819.634471][ T5849] usb usb5-port1: attempt power cycle [ 819.687669][ T5916] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 819.915058][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 819.922521][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 819.941181][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 819.952366][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.965829][ T5916] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.991870][ T5916] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 820.013217][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.045134][T11387] usb 2-1: USB disconnect, device number 38 [ 820.106782][ T5849] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 820.139957][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 820.159610][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 820.181514][ T5849] usb 5-1: can't read configurations, error -61 [ 820.241730][ T5916] usb 6-1: GET_CAPABILITIES returned 0 [ 820.260372][ T5916] usbtmc 6-1:16.0: can't read capabilities [ 820.344140][ T5849] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 820.375908][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 820.392240][ T5849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 820.410742][ T5849] usb 5-1: can't read configurations, error -61 [ 820.417928][ T5849] usb usb5-port1: unable to enumerate USB device [ 820.418139][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.468034][ T5849] usb 6-1: USB disconnect, device number 37 [ 821.579602][ T30] audit: type=1326 audit(1755041595.436:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13198 comm="syz.0.1831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a3378ebe9 code=0x0 [ 821.885158][T13215] syz.1.1835: attempt to access beyond end of device [ 821.885158][T13215] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 821.898633][T13215] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 822.164536][ T5916] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 822.304347][ T5916] usb 2-1: device descriptor read/64, error -71 [ 822.485312][T13219] binder: BINDER_SET_CONTEXT_MGR already set [ 822.491702][T13219] binder: 13216:13219 ioctl 4018620d 200000004a80 returned -16 [ 822.624872][ T5916] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 822.951340][ T5916] usb 2-1: device descriptor read/64, error -71 [ 823.110789][ T5916] usb usb2-port1: attempt power cycle [ 823.864135][ T5916] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 823.896692][ T5916] usb 2-1: device descriptor read/8, error -71 [ 824.747918][ T36] Bluetooth: (null): Invalid header checksum [ 824.837853][ T5916] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 824.845691][ T36] Bluetooth: (null): Invalid header checksum [ 824.851780][ T36] Bluetooth: (null): Invalid header checksum [ 824.860375][ T36] Bluetooth: (null): Invalid header checksum [ 824.866814][ T36] Bluetooth: (null): Invalid header checksum [ 825.094283][ T5916] usb 2-1: device not accepting address 42, error -71 [ 825.103532][ T5916] usb usb2-port1: unable to enumerate USB device [ 825.107591][T13247] tipc: Started in network mode [ 825.130228][T13247] tipc: Node identity 5a16eb74ecb2, cluster identity 4711 [ 825.146283][T13247] tipc: Enabled bearer , priority 0 [ 825.156852][T13247] syzkaller0: entered promiscuous mode [ 825.162403][T13247] syzkaller0: entered allmulticast mode [ 825.219334][T13247] tipc: Resetting bearer [ 825.264643][T13246] tipc: Resetting bearer [ 825.389328][T13246] tipc: Disabling bearer [ 825.434993][ T1138] Bluetooth: (null): Invalid header checksum [ 825.774605][ T1138] Bluetooth: (null): Invalid header checksum [ 826.384408][ T30] audit: type=1326 audit(1755041600.236:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13260 comm="syz.4.1848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd0758ebe9 code=0x0 [ 826.644951][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 826.807882][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 826.832214][ T9] usb 6-1: can't read configurations, error -22 [ 826.964383][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 827.126612][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 827.154471][ T9] usb 6-1: can't read configurations, error -22 [ 827.182816][ T9] usb usb6-port1: attempt power cycle [ 827.534182][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 827.562496][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 827.574161][ T9] usb 6-1: can't read configurations, error -22 [ 828.124622][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 828.149518][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 828.160455][ T9] usb 6-1: can't read configurations, error -22 [ 828.176618][ T9] usb usb6-port1: unable to enumerate USB device [ 828.191168][T13289] tipc: Started in network mode [ 828.197960][T13289] tipc: Node identity 6afbef0eb3fc, cluster identity 4711 [ 828.205556][T13289] tipc: Enabled bearer , priority 0 [ 828.213348][T13289] syzkaller0: entered promiscuous mode [ 828.223615][T13289] syzkaller0: entered allmulticast mode [ 828.969153][ T30] audit: type=1326 audit(1755041602.816:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 828.991824][T13288] tipc: Resetting bearer [ 828.994067][ T30] audit: type=1326 audit(1755041602.826:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.042918][ T30] audit: type=1326 audit(1755041602.826:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.067254][T13288] tipc: Disabling bearer [ 829.106551][ T30] audit: type=1326 audit(1755041602.826:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.190233][ T30] audit: type=1326 audit(1755041602.826:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.340826][ T30] audit: type=1326 audit(1755041602.826:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.377718][ T30] audit: type=1326 audit(1755041602.826:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.427803][ T30] audit: type=1326 audit(1755041602.826:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 829.462884][ T30] audit: type=1326 audit(1755041602.826:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.2.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014e18ebe9 code=0x7fc00000 [ 830.753113][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1864'. [ 830.936655][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'. [ 832.930804][T13348] FAULT_INJECTION: forcing a failure. [ 832.930804][T13348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.944061][T13348] CPU: 1 UID: 0 PID: 13348 Comm: syz.5.1869 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 832.944086][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.944097][T13348] Call Trace: [ 832.944105][T13348] [ 832.944113][T13348] dump_stack_lvl+0x189/0x250 [ 832.944143][T13348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.944161][T13348] ? __pfx__printk+0x10/0x10 [ 832.944189][T13348] ? __might_fault+0xb0/0x130 [ 832.944214][T13348] should_fail_ex+0x414/0x560 [ 832.944238][T13348] _copy_from_user+0x2d/0xb0 [ 832.944265][T13348] ___sys_sendmsg+0x158/0x2a0 [ 832.944298][T13348] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.944364][T13348] ? __fget_files+0x2a/0x420 [ 832.944385][T13348] ? __fget_files+0x3a0/0x420 [ 832.944417][T13348] __x64_sys_sendmsg+0x19b/0x260 [ 832.944449][T13348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.944476][T13348] ? irqentry_exit+0x74/0x90 [ 832.944514][T13348] ? do_syscall_64+0xbe/0x3b0 [ 832.944540][T13348] do_syscall_64+0xfa/0x3b0 [ 832.944562][T13348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.944581][T13348] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 832.944599][T13348] ? clear_bhb_loop+0x60/0xb0 [ 832.944623][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.944642][T13348] RIP: 0033:0x7f8f4b98ebe9 [ 832.944659][T13348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.944678][T13348] RSP: 002b:00007f8f4c713038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.944699][T13348] RAX: ffffffffffffffda RBX: 00007f8f4bbb6180 RCX: 00007f8f4b98ebe9 [ 832.944714][T13348] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 832.944727][T13348] RBP: 00007f8f4c713090 R08: 0000000000000000 R09: 0000000000000000 [ 832.944739][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.944751][T13348] R13: 00007f8f4bbb6218 R14: 00007f8f4bbb6180 R15: 00007fff9948a6b8 [ 832.944789][T13348] [ 834.563354][T13368] FAULT_INJECTION: forcing a failure. [ 834.563354][T13368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.625056][T13372] tipc: Enabled bearer , priority 12 [ 834.637338][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.2.1877 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 834.637363][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.637376][T13368] Call Trace: [ 834.637396][T13368] [ 834.637405][T13368] dump_stack_lvl+0x189/0x250 [ 834.637433][T13368] ? __pfx____ratelimit+0x10/0x10 [ 834.637455][T13368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.637476][T13368] ? __pfx__printk+0x10/0x10 [ 834.637502][T13368] ? __might_fault+0xb0/0x130 [ 834.637535][T13368] should_fail_ex+0x414/0x560 [ 834.637562][T13368] _copy_from_user+0x2d/0xb0 [ 834.637590][T13368] simple_attr_write_xsigned+0x154/0x300 [ 834.637619][T13368] ? __pfx_simple_attr_write_xsigned+0x10/0x10 [ 834.637637][T13368] ? rcu_read_lock_any_held+0xb3/0x120 [ 834.637661][T13368] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 834.637694][T13368] debugfs_attr_write+0x76/0x130 [ 834.637716][T13368] ? __pfx_debugfs_attr_write+0x10/0x10 [ 834.637740][T13368] vfs_write+0x27e/0xa90 [ 834.637768][T13368] ? __pfx_vfs_write+0x10/0x10 [ 834.637788][T13368] ? __fget_files+0x2a/0x420 [ 834.637816][T13368] ? __fget_files+0x3a0/0x420 [ 834.637835][T13368] ? __fget_files+0x2a/0x420 [ 834.637866][T13368] ksys_write+0x145/0x250 [ 834.637888][T13368] ? __pfx_ksys_write+0x10/0x10 [ 834.637904][T13368] ? rcu_is_watching+0x15/0xb0 [ 834.637930][T13368] ? do_syscall_64+0xbe/0x3b0 [ 834.637956][T13368] do_syscall_64+0xfa/0x3b0 [ 834.637974][T13368] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.637994][T13368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.638013][T13368] ? clear_bhb_loop+0x60/0xb0 [ 834.638037][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.638056][T13368] RIP: 0033:0x7f014e18ebe9 [ 834.638073][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.638090][T13368] RSP: 002b:00007f014f098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.638110][T13368] RAX: ffffffffffffffda RBX: 00007f014e3b5fa0 RCX: 00007f014e18ebe9 [ 834.638124][T13368] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 834.638136][T13368] RBP: 00007f014f098090 R08: 0000000000000000 R09: 0000000000000000 [ 834.638148][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.638160][T13368] R13: 00007f014e3b6038 R14: 00007f014e3b5fa0 R15: 00007fffed96ccb8 [ 834.638194][T13368] [ 834.880111][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.902754][T13373] sp0: Synchronizing with TNC [ 834.914426][ T1138] [ 834.916792][ T1138] ===================================================== [ 834.923701][ T1138] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 834.931162][ T1138] 6.16.0-syzkaller #0 Not tainted [ 834.936188][ T1138] ----------------------------------------------------- [ 834.943106][ T1138] kworker/u8:5/1138 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 834.950885][ T1138] ffffffff8ecdf378 (disc_data_lock#2){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 834.960722][ T1138] [ 834.960722][ T1138] and this task is already holding: [ 834.968086][ T1138] ffffffff99dc2bd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 834.977368][ T1138] which would create a new lock dependency: [ 834.983229][ T1138] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 834.991126][ T1138] [ 834.991126][ T1138] but this new dependency connects a HARDIRQ-irq-safe lock: [ 835.000566][ T1138] (&port_lock_key){-.-.}-{3:3} [ 835.000581][ T1138] [ 835.000581][ T1138] ... which became HARDIRQ-irq-safe at: [ 835.013212][ T1138] lock_acquire+0x120/0x360 [ 835.017791][ T1138] _raw_spin_lock_irqsave+0xa7/0xf0 [ 835.023066][ T1138] serial8250_handle_irq+0x6b/0xbb0 [ 835.028428][ T1138] serial8250_default_handle_irq+0xbf/0x1b0 [ 835.034388][ T1138] serial8250_interrupt+0xa2/0x1d0 [ 835.039565][ T1138] __handle_irq_event_percpu+0x289/0x980 [ 835.045266][ T1138] handle_irq_event+0x8b/0x1e0 [ 835.050122][ T1138] handle_edge_irq+0x267/0x9c0 [ 835.054952][ T1138] __common_interrupt+0x140/0x250 [ 835.060049][ T1138] common_interrupt+0xb6/0xe0 [ 835.064808][ T1138] asm_common_interrupt+0x26/0x40 [ 835.069897][ T1138] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 835.075685][ T1138] uart_port_unlock_deref+0x111/0x2f0 [ 835.081128][ T1138] uart_write+0xe8/0x130 [ 835.085436][ T1138] n_tty_write+0xd35/0x11d0 [ 835.090017][ T1138] file_tty_write+0x500/0x990 [ 835.094758][ T1138] vfs_write+0x54b/0xa90 [ 835.099082][ T1138] ksys_write+0x145/0x250 [ 835.103474][ T1138] do_syscall_64+0xfa/0x3b0 [ 835.108044][ T1138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.114002][ T1138] [ 835.114002][ T1138] to a HARDIRQ-irq-unsafe lock: [ 835.121018][ T1138] (disc_data_lock#2){.+.+}-{3:3} [ 835.121042][ T1138] [ 835.121042][ T1138] ... which became HARDIRQ-irq-unsafe at: [ 835.133908][ T1138] ... [ 835.133914][ T1138] lock_acquire+0x120/0x360 [ 835.141239][ T1138] _raw_read_lock+0x36/0x50 [ 835.145812][ T1138] sixpack_receive_buf+0x5c/0x1450 [ 835.151004][ T1138] tty_ldisc_receive_buf+0x116/0x160 [ 835.156362][ T1138] tty_port_default_receive_buf+0x6e/0xa0 [ 835.162181][ T1138] flush_to_ldisc+0x24a/0x720 [ 835.166941][ T1138] process_scheduled_works+0xade/0x17b0 [ 835.172564][ T1138] worker_thread+0x8a0/0xda0 [ 835.177218][ T1138] kthread+0x70e/0x8a0 [ 835.181361][ T1138] ret_from_fork+0x3fc/0x770 [ 835.186009][ T1138] ret_from_fork_asm+0x1a/0x30 [ 835.190839][ T1138] [ 835.190839][ T1138] other info that might help us debug this: [ 835.190839][ T1138] [ 835.201216][ T1138] Possible interrupt unsafe locking scenario: [ 835.201216][ T1138] [ 835.209622][ T1138] CPU0 CPU1 [ 835.214972][ T1138] ---- ---- [ 835.220349][ T1138] lock(disc_data_lock#2); [ 835.224843][ T1138] local_irq_disable(); [ 835.231580][ T1138] lock(&port_lock_key); [ 835.238410][ T1138] lock(disc_data_lock#2); [ 835.245419][ T1138] [ 835.248856][ T1138] lock(&port_lock_key); [ 835.253338][ T1138] [ 835.253338][ T1138] *** DEADLOCK *** [ 835.253338][ T1138] [ 835.261487][ T1138] 6 locks held by kworker/u8:5/1138: [ 835.266825][ T1138] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.278483][ T1138] #1: ffffc90003e4fbc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.290812][ T1138] #2: ffff888024660ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x720 [ 835.299853][ T1138] #3: ffff8880332110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 835.309140][ T1138] #4: ffffffff99dc2bd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 835.319292][ T1138] #5: ffff8880332110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 835.328592][ T1138] [ 835.328592][ T1138] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 835.339058][ T1138] -> (&port_lock_key){-.-.}-{3:3} { [ 835.344263][ T1138] IN-HARDIRQ-W at: [ 835.348227][ T1138] lock_acquire+0x120/0x360 [ 835.354444][ T1138] _raw_spin_lock_irqsave+0xa7/0xf0 [ 835.361295][ T1138] serial8250_handle_irq+0x6b/0xbb0 [ 835.368121][ T1138] serial8250_default_handle_irq+0xbf/0x1b0 [ 835.375663][ T1138] serial8250_interrupt+0xa2/0x1d0 [ 835.382417][ T1138] __handle_irq_event_percpu+0x289/0x980 [ 835.389679][ T1138] handle_irq_event+0x8b/0x1e0 [ 835.396072][ T1138] handle_edge_irq+0x267/0x9c0 [ 835.402461][ T1138] __common_interrupt+0x140/0x250 [ 835.409236][ T1138] common_interrupt+0xb6/0xe0 [ 835.415572][ T1138] asm_common_interrupt+0x26/0x40 [ 835.422270][ T1138] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 835.429627][ T1138] uart_port_unlock_deref+0x111/0x2f0 [ 835.436635][ T1138] uart_write+0xe8/0x130 [ 835.442510][ T1138] n_tty_write+0xd35/0x11d0 [ 835.448652][ T1138] file_tty_write+0x500/0x990 [ 835.454985][ T1138] vfs_write+0x54b/0xa90 [ 835.460891][ T1138] ksys_write+0x145/0x250 [ 835.466865][ T1138] do_syscall_64+0xfa/0x3b0 [ 835.473022][ T1138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.480656][ T1138] IN-SOFTIRQ-W at: [ 835.484622][ T1138] lock_acquire+0x120/0x360 [ 835.490761][ T1138] _raw_spin_lock_irqsave+0xa7/0xf0 [ 835.497601][ T1138] serial8250_handle_irq+0x6b/0xbb0 [ 835.504446][ T1138] serial8250_default_handle_irq+0xbf/0x1b0 [ 835.511967][ T1138] serial8250_interrupt+0xa2/0x1d0 [ 835.518721][ T1138] __handle_irq_event_percpu+0x289/0x980 [ 835.525983][ T1138] handle_irq_event+0x8b/0x1e0 [ 835.532375][ T1138] handle_edge_irq+0x267/0x9c0 [ 835.538778][ T1138] __common_interrupt+0x140/0x250 [ 835.545437][ T1138] common_interrupt+0x5e/0xe0 [ 835.551760][ T1138] asm_common_interrupt+0x26/0x40 [ 835.558447][ T1138] lock_acquire+0x70/0x360 [ 835.564490][ T1138] unwind_next_frame+0xc2/0x2390 [ 835.571141][ T1138] arch_stack_walk+0x11c/0x150 [ 835.577531][ T1138] stack_trace_save+0x9c/0xe0 [ 835.583848][ T1138] kasan_save_track+0x3e/0x80 [ 835.590155][ T1138] kasan_save_free_info+0x46/0x50 [ 835.596810][ T1138] __kasan_slab_free+0x62/0x70 [ 835.603221][ T1138] kmem_cache_free+0x18f/0x400 [ 835.609636][ T1138] __tlb_remove_table+0x81/0x3b0 [ 835.616219][ T1138] tlb_remove_table_rcu+0x85/0x100 [ 835.622968][ T1138] rcu_core+0xca5/0x1710 [ 835.628844][ T1138] handle_softirqs+0x283/0x870 [ 835.635239][ T1138] __irq_exit_rcu+0xca/0x1f0 [ 835.641553][ T1138] irq_exit_rcu+0x9/0x30 [ 835.647510][ T1138] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 835.654773][ T1138] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.662380][ T1138] kasan_check_range+0x1d6/0x2c0 [ 835.668969][ T1138] __asan_memset+0x22/0x50 [ 835.675102][ T1138] unwind_next_frame+0xc98/0x2390 [ 835.681771][ T1138] arch_stack_walk+0x11c/0x150 [ 835.688180][ T1138] stack_trace_save+0x9c/0xe0 [ 835.694702][ T1138] kasan_save_track+0x3e/0x80 [ 835.701106][ T1138] __kasan_kmalloc+0x93/0xb0 [ 835.707327][ T1138] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 835.715371][ T1138] kmalloc_reserve+0x136/0x290 [ 835.721771][ T1138] __alloc_skb+0x142/0x2d0 [ 835.727848][ T1138] alloc_skb_with_frags+0xca/0x890 [ 835.734594][ T1138] sock_alloc_send_pskb+0x857/0x990 [ 835.741456][ T1138] unix_dgram_sendmsg+0x451/0x17d0 [ 835.748209][ T1138] __sock_sendmsg+0x21c/0x270 [ 835.754536][ T1138] __sys_sendto+0x3bd/0x520 [ 835.760700][ T1138] __x64_sys_sendto+0xde/0x100 [ 835.767107][ T1138] do_syscall_64+0xfa/0x3b0 [ 835.773243][ T1138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.780771][ T1138] INITIAL USE at: [ 835.784655][ T1138] lock_acquire+0x120/0x360 [ 835.790702][ T1138] _raw_spin_lock_irqsave+0xa7/0xf0 [ 835.797446][ T1138] serial8250_do_set_termios+0x4bb/0x1c20 [ 835.804709][ T1138] uart_set_options+0x3c2/0x5b0 [ 835.811108][ T1138] serial8250_console_setup+0x2f4/0x3c0 [ 835.818211][ T1138] univ8250_console_setup+0x43a/0x540 [ 835.825122][ T1138] try_enable_preferred_console+0x4e4/0x650 [ 835.832561][ T1138] register_console+0x551/0xf90 [ 835.838970][ T1138] univ8250_console_init+0x52/0x90 [ 835.845638][ T1138] console_init+0x1a1/0x670 [ 835.851713][ T1138] start_kernel+0x2cc/0x500 [ 835.857862][ T1138] x86_64_start_reservations+0x24/0x30 [ 835.864887][ T1138] x86_64_start_kernel+0x143/0x1c0 [ 835.871561][ T1138] common_startup_64+0x13e/0x147 [ 835.878064][ T1138] } [ 835.880545][ T1138] ... key at: [] port_lock_key+0x0/0x20 [ 835.888211][ T1138] [ 835.888211][ T1138] the dependencies between the lock to be acquired [ 835.888219][ T1138] and HARDIRQ-irq-unsafe lock: [ 835.901696][ T1138] -> (disc_data_lock#2){.+.+}-{3:3} { [ 835.907065][ T1138] HARDIRQ-ON-R at: [ 835.911026][ T1138] lock_acquire+0x120/0x360 [ 835.917176][ T1138] _raw_read_lock+0x36/0x50 [ 835.923329][ T1138] sixpack_receive_buf+0x5c/0x1450 [ 835.930079][ T1138] tty_ldisc_receive_buf+0x116/0x160 [ 835.937006][ T1138] tty_port_default_receive_buf+0x6e/0xa0 [ 835.944384][ T1138] flush_to_ldisc+0x24a/0x720 [ 835.950693][ T1138] process_scheduled_works+0xade/0x17b0 [ 835.957868][ T1138] worker_thread+0x8a0/0xda0 [ 835.964086][ T1138] kthread+0x70e/0x8a0 [ 835.969803][ T1138] ret_from_fork+0x3fc/0x770 [ 835.976033][ T1138] ret_from_fork_asm+0x1a/0x30 [ 835.982452][ T1138] SOFTIRQ-ON-R at: [ 835.986416][ T1138] lock_acquire+0x120/0x360 [ 835.992561][ T1138] _raw_read_lock+0x36/0x50 [ 835.998697][ T1138] sixpack_receive_buf+0x5c/0x1450 [ 836.005527][ T1138] tty_ldisc_receive_buf+0x116/0x160 [ 836.012465][ T1138] tty_port_default_receive_buf+0x6e/0xa0 [ 836.019831][ T1138] flush_to_ldisc+0x24a/0x720 [ 836.026145][ T1138] process_scheduled_works+0xade/0x17b0 [ 836.033337][ T1138] worker_thread+0x8a0/0xda0 [ 836.039593][ T1138] kthread+0x70e/0x8a0 [ 836.045298][ T1138] ret_from_fork+0x3fc/0x770 [ 836.051880][ T1138] ret_from_fork_asm+0x1a/0x30 [ 836.058286][ T1138] INITIAL USE at: [ 836.062270][ T1138] lock_acquire+0x120/0x360 [ 836.068322][ T1138] _raw_write_lock_irq+0xa2/0xf0 [ 836.074807][ T1138] sixpack_close+0x2c/0x280 [ 836.080876][ T1138] tty_ldisc_kill+0xa3/0x1a0 [ 836.087013][ T1138] tty_ldisc_release+0x1a4/0x200 [ 836.093495][ T1138] tty_release_struct+0x2a/0xd0 [ 836.099890][ T1138] tty_release+0xcb0/0x1640 [ 836.105935][ T1138] __fput+0x449/0xa70 [ 836.111463][ T1138] task_work_run+0x1d1/0x260 [ 836.117620][ T1138] exit_to_user_mode_loop+0xec/0x110 [ 836.124451][ T1138] do_syscall_64+0x2bd/0x3b0 [ 836.130583][ T1138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.138103][ T1138] INITIAL READ USE at: [ 836.142421][ T1138] lock_acquire+0x120/0x360 [ 836.148895][ T1138] _raw_read_lock+0x36/0x50 [ 836.155371][ T1138] sixpack_receive_buf+0x5c/0x1450 [ 836.162461][ T1138] tty_ldisc_receive_buf+0x116/0x160 [ 836.169726][ T1138] tty_port_default_receive_buf+0x6e/0xa0 [ 836.177424][ T1138] flush_to_ldisc+0x24a/0x720 [ 836.184092][ T1138] process_scheduled_works+0xade/0x17b0 [ 836.191616][ T1138] worker_thread+0x8a0/0xda0 [ 836.198196][ T1138] kthread+0x70e/0x8a0 [ 836.204243][ T1138] ret_from_fork+0x3fc/0x770 [ 836.210810][ T1138] ret_from_fork_asm+0x1a/0x30 [ 836.217552][ T1138] } [ 836.220047][ T1138] ... key at: [] disc_data_lock+0x18/0x100 [ 836.227922][ T1138] ... acquired at: [ 836.231875][ T1138] lock_acquire+0x120/0x360 [ 836.236616][ T1138] _raw_read_lock+0x36/0x50 [ 836.241270][ T1138] sixpack_write_wakeup+0x30/0x480 [ 836.246535][ T1138] tty_wakeup+0xbb/0x100 [ 836.250930][ T1138] tty_port_default_wakeup+0xa2/0xf0 [ 836.256392][ T1138] serial8250_tx_chars+0x72e/0x970 [ 836.261670][ T1138] __start_tx+0x33b/0x480 [ 836.266163][ T1138] __uart_start+0x23f/0x440 [ 836.270817][ T1138] uart_write+0xdc/0x130 [ 836.275209][ T1138] sixpack_receive_buf+0x447/0x1450 [ 836.280566][ T1138] tty_ldisc_receive_buf+0x116/0x160 [ 836.286004][ T1138] tty_port_default_receive_buf+0x6e/0xa0 [ 836.291884][ T1138] flush_to_ldisc+0x24a/0x720 [ 836.296715][ T1138] process_scheduled_works+0xade/0x17b0 [ 836.302425][ T1138] worker_thread+0x8a0/0xda0 [ 836.307168][ T1138] kthread+0x70e/0x8a0 [ 836.311398][ T1138] ret_from_fork+0x3fc/0x770 [ 836.316166][ T1138] ret_from_fork_asm+0x1a/0x30 [ 836.321104][ T1138] [ 836.323423][ T1138] [ 836.323423][ T1138] stack backtrace: [ 836.329370][ T1138] CPU: 1 UID: 0 PID: 1138 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 836.329385][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.329392][ T1138] Workqueue: events_unbound flush_to_ldisc [ 836.329410][ T1138] Call Trace: [ 836.329417][ T1138] [ 836.329423][ T1138] dump_stack_lvl+0x189/0x250 [ 836.329435][ T1138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.329446][ T1138] ? __pfx__printk+0x10/0x10 [ 836.329461][ T1138] validate_chain+0x1f05/0x2140 [ 836.329478][ T1138] __lock_acquire+0xab9/0xd20 [ 836.329489][ T1138] ? sixpack_write_wakeup+0x30/0x480 [ 836.329503][ T1138] lock_acquire+0x120/0x360 [ 836.329511][ T1138] ? sixpack_write_wakeup+0x30/0x480 [ 836.329526][ T1138] ? ldsem_down_read_trylock+0x137/0x1a0 [ 836.329536][ T1138] ? tty_ldisc_ref+0x1c/0x90 [ 836.329549][ T1138] _raw_read_lock+0x36/0x50 [ 836.329558][ T1138] ? sixpack_write_wakeup+0x30/0x480 [ 836.329572][ T1138] sixpack_write_wakeup+0x30/0x480 [ 836.329586][ T1138] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 836.329600][ T1138] tty_wakeup+0xbb/0x100 [ 836.329612][ T1138] tty_port_default_wakeup+0xa2/0xf0 [ 836.329627][ T1138] serial8250_tx_chars+0x72e/0x970 [ 836.329646][ T1138] __start_tx+0x33b/0x480 [ 836.329661][ T1138] __uart_start+0x23f/0x440 [ 836.329675][ T1138] uart_write+0xdc/0x130 [ 836.329688][ T1138] sixpack_receive_buf+0x447/0x1450 [ 836.329707][ T1138] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 836.329721][ T1138] tty_ldisc_receive_buf+0x116/0x160 [ 836.329736][ T1138] tty_port_default_receive_buf+0x6e/0xa0 [ 836.329752][ T1138] flush_to_ldisc+0x24a/0x720 [ 836.329768][ T1138] ? process_scheduled_works+0x9ef/0x17b0 [ 836.329778][ T1138] process_scheduled_works+0xade/0x17b0 [ 836.329794][ T1138] ? __pfx_process_scheduled_works+0x10/0x10 [ 836.329807][ T1138] worker_thread+0x8a0/0xda0 [ 836.329823][ T1138] kthread+0x70e/0x8a0 [ 836.329836][ T1138] ? __pfx_worker_thread+0x10/0x10 [ 836.329846][ T1138] ? __pfx_kthread+0x10/0x10 [ 836.329858][ T1138] ? _raw_spin_unlock_irq+0x23/0x50 [ 836.329867][ T1138] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.329876][ T1138] ? __pfx_kthread+0x10/0x10 [ 836.329888][ T1138] ret_from_fork+0x3fc/0x770 [ 836.329898][ T1138] ? __pfx_ret_from_fork+0x10/0x10 [ 836.329908][ T1138] ? __switch_to_asm+0x39/0x70 [ 836.329920][ T1138] ? __switch_to_asm+0x33/0x70 [ 836.329931][ T1138] ? __pfx_kthread+0x10/0x10 [ 836.329943][ T1138] ret_from_fork_asm+0x1a/0x30 [ 836.329959][ T1138] [ 836.330138][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.573689][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.581255][ T5916] tipc: Node number set to 3064261492 [ 836.714045][ T5916] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 836.883710][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.319486][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.334034][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.342055][ T5916] usb 3-1: Product: syz [ 837.346346][ T5916] usb 3-1: Manufacturer: syz [ 837.350958][ T5916] usb 3-1: SerialNumber: syz [ 837.540222][T13375] base_sock_release(ffff888056533000) sk=ffff88807ab1c000 [ 837.557955][ T5916] cdc_ncm 3-1:1.0: bind() failure [ 837.565990][ T5916] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 837.572905][ T5916] cdc_ncm 3-1:1.1: bind() failure [ 837.585035][ T5916] usb 3-1: USB disconnect, device number 34