last executing test programs: 5m2.947257416s ago: executing program 0 (id=828): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2000000) 4m59.755980211s ago: executing program 0 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000300000018000180140002006e657464657673696d30000000000000080006009288dd4e080008"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 4m59.590865187s ago: executing program 0 (id=851): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x5, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x40, 0xff}, &(0x7f00000002c0)=0x8) syz_usb_control_io(r2, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xe211}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x1) write$qrtrtun(r5, 0x0, 0xffffff9a) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', @link_local}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="00400000000000000a004e20ffffffdbff", @ANYBLOB="915be95680c817fe75f03b85824be41e8cd3d5584a64e57c1296ede62a59394e37ff57d5ae0b69a7ad63c8c9a76ab021972f6c52941f25601e7a93c1907fb58326856ff661d816a57cc635714d56a464c82df17b8e75a09bcf05fbf438dcda8281aa20c7f94ec516e9b98cc11843cacbb4b01ac2639b2a7d"], 0x210) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="07000800060406000000140004009de3b6f797800180c200000e884800000000111f0b77691250e8cb6a8066c1d001a1311e2739288014e23b5b29e54307a40f472e7af07ec92bbc2573070097f79296"], 0x50) 4m57.408640421s ago: executing program 0 (id=866): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x11000000, &(0x7f0000000400)={[{@dyn}]}) 4m57.30096163s ago: executing program 0 (id=867): sysfs$2(0x2, 0x81, &(0x7f0000000000)=""/64) writev(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x75b7, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0x2) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x4380b311, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) 4m56.980720587s ago: executing program 0 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300) 4m56.730856936s ago: executing program 32 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300) 2m17.425164354s ago: executing program 2 (id=1725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfb010016e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e94d52bb50b43066c1de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, r2, 0x0, 0x800, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\"\x00', @ANYBLOB='\a\x00)'], 0x38}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 2m17.364644373s ago: executing program 2 (id=1726): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3000000) 2m14.14737888s ago: executing program 2 (id=1736): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2m13.338897558s ago: executing program 2 (id=1739): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x20000000, &(0x7f0000000400)={[{@dyn}]}) 2m13.188437805s ago: executing program 2 (id=1740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x300) 2m11.546656091s ago: executing program 2 (id=1742): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) read(r0, &(0x7f0000000080)=""/33, 0x21) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04601c0c"], 0x7) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xc, @sliced={0x9, [0x4, 0xb, 0x5, 0x9, 0x1, 0x3, 0x3e5, 0x4, 0x2, 0x1000, 0x4, 0xffff, 0xd, 0x4, 0x3, 0xfce, 0x8, 0x7, 0x4, 0x8, 0x4, 0xffff, 0x3, 0x54, 0x180, 0x38a3, 0x7, 0x4, 0x61, 0x2, 0x2, 0x7ff, 0xf44b, 0x4, 0x9, 0x2, 0x3, 0x6, 0xfc00, 0x8, 0x0, 0x3e56, 0x0, 0x9, 0x800, 0x1, 0x84dc, 0x81], 0x1}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @default, r2}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ecc000d04"], 0x45) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m11.291215761s ago: executing program 33 (id=1742): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) read(r0, &(0x7f0000000080)=""/33, 0x21) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04601c0c"], 0x7) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xc, @sliced={0x9, [0x4, 0xb, 0x5, 0x9, 0x1, 0x3, 0x3e5, 0x4, 0x2, 0x1000, 0x4, 0xffff, 0xd, 0x4, 0x3, 0xfce, 0x8, 0x7, 0x4, 0x8, 0x4, 0xffff, 0x3, 0x54, 0x180, 0x38a3, 0x7, 0x4, 0x61, 0x2, 0x2, 0x7ff, 0xf44b, 0x4, 0x9, 0x2, 0x3, 0x6, 0xfc00, 0x8, 0x0, 0x3e56, 0x0, 0x9, 0x800, 0x1, 0x84dc, 0x81], 0x1}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @default, r2}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ecc000d04"], 0x45) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.284198813s ago: executing program 4 (id=2548): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) dup(r0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0) 6.115823642s ago: executing program 3 (id=2563): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) (async) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="711f66", 0x3}, 0x1, 0x0, 0x0, 0x20040040}, 0x4044014) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x2, 0xe5}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0xc000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) (async) listen(r1, 0x6) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r2, 0x0, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000000)=0xffff, 0x4) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3a0, 0x1d0, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@private=0xa010101, @remote, 0x0, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x1, 0x6, 0x800, 0x2, 0x400, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x111}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@arp={@remote, @empty, 0xffffff00, 0xff000000, 0x10, 0xc, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x27e, 0x6, 0xb4, 0xb, 0x7, 0x8001, 'macvlan1\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x412}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x31}, @local, 0xff, 0x0, 0xd, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3e53, 0x7, 0x100, 0x2, 0x7ff, 0x22, 'caif0\x00', 'veth0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000d, 0x30, r5, 0xe513000) (async) fadvise64(r5, 0x92, 0x5, 0x2) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xceb, @empty}, 0x1c) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r5, 0xa4717000) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000001600)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) syz_clone(0x200000, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0) 6.014689147s ago: executing program 3 (id=2564): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x2066012, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000003, 0x1, 0x2, '\x00', 0x8}}, 0x2a) (fail_nth: 1) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000f4ffffff0300000000200000000000000000000000000000000000000200000000000000002000000400000002000000000000000000000000000002000000000000000002000000000000000000000000000000000000000004000000000000feffffff020000000040000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="0020000000000000000000000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 5.498147884s ago: executing program 3 (id=2567): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) 5.440598547s ago: executing program 5 (id=2568): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="5800000014fe192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 5.368624709s ago: executing program 5 (id=2569): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = epoll_create(0x400) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xf0, 0x9, [{{0x9, 0x4, 0x0, 0xca, 0x2, 0x7, 0x1, 0x3, 0xf2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x80, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x5, 0x2f}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x6, 0x6, 0x81, 0x8}, 0x99, &(0x7f00000000c0)={0x5, 0xf, 0x99, 0x3, [@generic={0x66, 0x10, 0x3, "c43ffe62dcdbf8a78de0731c760cdb4611fc2eca56f040bbac13acae0dc708e853e536d0e83e525e3b61145e731fd29df70bb668785f1e165958a048cb8997b0f83c6c0a5329e9bd7bf7b023ccdcd107f398f9bb23e8dbc37747007dd2512e0071d402"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10081, 0xff00, 0x8, [0xf, 0xc0, 0x0, 0xff000f, 0xf, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xe, 0x0, 0x7be2}]}, 0xa, [{0x9e, &(0x7f0000000200)=@string={0x9e, 0x3, "c77bdcedf545777a6bad7c04f726bde3b0f703a48a1f545572e439c24b18783dfbfe46b66f8e7775b62a60612beee8a4aa24507d0f2a51db8abd83871530d6ca8da3b13e78530be2154fcaba293112ff9772df39baee5889214161ff1c8c6c8d93257f383792e057ee61783467bef72a853d65466557c1f6d5444b54c522104fc188cb2e22bba8c5f76b6ead12a7c2a0e6e459dc6678d7e86f38e483"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x447}}, {0x56, &(0x7f0000000300)=@string={0x56, 0x3, "0fb7df9980e66baff4ef321fc487be53e0aea70d03844372a40a3d3d9484493c440a8fb8f2ec5e141884fc06285dfa4c334dc5b3592ab25db4e580a3783f359b805f1fe05aaa5731e7818af433ff91556a5c7a01"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}, {0xfffffffffffffe0d, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_ep_read(r2, 0x2, 0xed, &(0x7f0000000600)=""/237) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 5.090010304s ago: executing program 3 (id=2572): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x8400, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000400)={"430c593adc0e51f3167ee0399efacbd9d1d737166a888b33b284bf2eb96d2714", r3, 0xffffffffffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x0, 0x3c}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000140)=0x376) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xebfc) ppoll(&(0x7f0000000000)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) 4.960728828s ago: executing program 3 (id=2574): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2120) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x80, 0x0, 0xfffffffffffffdde}, 0x44014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2009) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x5, "fc244dd894"}, 0x0}) 4.21493382s ago: executing program 4 (id=2578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (fail_nth: 4) 3.997891641s ago: executing program 4 (id=2579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, r2, 0x0, 0x800, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYBLOB='\a\x00)'], 0x38}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 3.641267925s ago: executing program 4 (id=2580): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4000) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/4106, 0x100a}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000001fc0)=""/224, 0xe0}, {&(0x7f0000000100)=""/195, 0xc3}], 0x4}, 0x4}], 0x4, 0x120, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) r3 = fsopen(&(0x7f00000002c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008000, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'macvtap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 3.450375954s ago: executing program 5 (id=2581): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@arm64={0x6, 0x8, 0x4, '\x00', 0x6}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.449992533s ago: executing program 1 (id=2582): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = dup3(0xffffffffffffffff, r0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0x1a, 0x29, 0x20, 0x17cc, 0x1000, 0xc561, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x94, 0x2, 0x0, 0x91, 0x85, 0x8d}}]}}]}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x8, 0x1, 0x6}}) 3.41673726s ago: executing program 5 (id=2583): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x4, @none, "0b00986f909ce20ce56a31866bd5c63f81df0f54365c0c43a4fa3c174bb2eea510346bc91ab5942a3659e56891a0c76ba197e2ee9bc37f4242a489b2c479456e3f780c4ef488a855b64af6fd6b5e00fa95996271048f6f161a12f61b7fe603443b33fce9c232f081d032d34d58e6de0c34c98cb664c7c286f21deb072aa6b3c2a44f8a439c937a498074f4926b41cb21b88d0369fd402e486348f057352dcab1eb2a83b28b382951560280b956edceb863883a64a0869e36f7c220a6c303d4063b1ad0fa6b876eb36c44011d8455576c408a48b5ebcbd0140108375c4ca5e5e0a213713debf34813ca8214fb6697af782afb6ea666d6eea5"}}}, 0x102) syz_open_dev$sg(&(0x7f0000001180), 0xf474, 0x4800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @empty}}}, 0x90) r4 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0xd0, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0x2, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x2, 0x1b}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x5, 0xb, 0xff, 0x7}, 0x5c, &(0x7f0000000100)={0x5, 0xf, 0x5c, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1d, 0x3, 0x2, 0xf00, 0x39d, [0x3fff, 0xc000, 0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x1, 0xf0f, 0x5, [0xf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5, 0x31, 0x5, 0xf3}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x8002, 0x0, 0x7fff, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "a889a5d87fdb315c9d8eb71d5fb55aa5"}]}, 0x1, [{0xad, &(0x7f0000000380)=@string={0xad, 0x3, "a06d0af2f2c4873b9448d88b5f298a50bbd9f9047c63738450b9c143f09ce816c4d1538e34e08a828cb5a15fadaf3173c8c1df1fd5d34cdf14bb7aca1023503cc2d3c920a50a4d6c975306469cb5c7273ec132915c420ed389ec77c129c454f18e2002e255ec15f2ff53c4761fa3123462a75798320c7f94d0ce5914845a1d0d5827329239007e1bc4cfe6f241f8be0cf2de4914b5cbf6fb3fc9929ac4db101d7f5c90d6e18b238d9a2946"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x0, 0x24, 0x42, {0x42, 0x3, "bb1f3703c2c227c738bac4aee53cb6afe7199ef8b9f65f07aacc16344c7b2312217c5cdcb0ebb7b48a4dc18122e521e5a6a5676fa56459acb5a45d5004d6ecf0"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000640)={0x40, 0x13, 0x86, "5180bce503923f337abf786eeee4d737f06e131baf2f65d504f06952d40ade0470560f45880ef742d31f0e4b17cb4df1bf271ad3ee4b6bf2363390f16ffd205f95e4c24953f0113c7b6990f40d24ac25bf66227233968bb965bdc3ae18ef0663b2bc723120f2e8e295b073a47f23da0e59320a5231bbe31ff952544321029962bea58fe1a1d3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7d}, &(0x7f0000000700)={0x20, 0x0, 0x102, {0x100, "d3b2c1780fa1ba4113fed4bdc213e1adee5c8e855af2567e77a904aaa4efe16bfbb773774e7484232da9b549bc5885a1c3621e892c355221d3c4b11d01336d980df718cd5242166ac7d4005d6962af398278f36414098e0f6ae23579eef314889a01a8cc8ec71dae21cb2e4d281b4debedbc0f468d4ccc39dc7cd1ed836c3257217c8a3f490ccb80a7c03a0999e84f13160477328fab4533e2296b1cd577b780e8ac9fe97d7468dba8dd86cf2d930599ded604315e7aef12241c2056922c7b706505ba4bcd0729288832eb722bf4da7c564dd3877f6c7d3a443c3effe6c1519692c7233b665f42b0e1a5121e0dac85f4434a8f1717ea233f6d0b122735a719bf"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0xff}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 3.05682732s ago: executing program 4 (id=2584): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x6, 0xfffffffd, 0x7, 0x5, "fd2d920801f67fcb3678000000045184097e20", 0x10000, 0x3ff}) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ftruncate(0xffffffffffffffff, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.992531365s ago: executing program 3 (id=2585): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x4, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0xdffffffa]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) copy_file_range(r2, 0x0, r2, 0x0, 0x40000011, 0x2000000) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000440d09ff"], 0x40}, 0x20002880) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x60, 0x9, 0x80, {0x80, 0x3, "50ce79371569a12ee57af4d4525eaf1b0bc4df66e2ecaf6e2aa57b58be3c0de3ff33f1321e79e36b61f15b28407b74959ff5c01c8544ae74c52d978ce9e0d4f382f92c9a351e743f531e8593fb6535adca34feaa8e9cf407a39ebdb1ba71b292ff3e403140e3f1c88e8105cfdf2792e0008b4b23622da2d1b160d12a6487"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, 'T%g\x00'}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xce}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x30, 0xf, 0x9b, "77a55cd75b66b7c18a34dedced5594142dc06b0cdf6cee79a22604d7cd79c7ab6b0373213d684b77c23ed017bb8d0137b9ae2bcb8d4a6c31bfa786fb21185e90c88c4f1832d8f06c5610ca3e065d33a9d64b790db550e42af1bb72c6c4e72e999fd286836f33e7bda095d4e03433f75c12be10aad497d9f1082c3001f5a5a2ae8ce8722b86477c36866ba89ff99ce3387f4daa576be5e3c2160bad"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x1, 0x1b, "3567c08cd5b08bd3ae629b982010ca9092b268672d4303a570552d"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0040, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000300)={'veth1_vlan\x00', 0xb0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.789431765s ago: executing program 4 (id=2586): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) dup(r0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0) 2.050407098s ago: executing program 1 (id=2587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff6f) setreuid(0x0, r2) ioprio_set$uid(0x0, r2, 0x2004) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f00000008c0)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file1\x00') getdents(r4, 0x0, 0x54) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r7, 0x0, 0x0, 0xc0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14000000140009002dbd700000000000c6563509000000"], 0x14}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r8, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r10, r10], &(0x7f0000000580), 0x0, 0x2}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0xc1086201, 0x20002000) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000140)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000806010200000000000000000000000005000100070000009f648c8bc1d696e51e99153824a4290c4a64700f5faad9f30f4fe1cb"], 0x1c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 1.936556683s ago: executing program 1 (id=2588): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000100)=0xb0e, 0x4) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x2208080, 0x0) 1.756020072s ago: executing program 1 (id=2589): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000052c0)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x804) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x98ae, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)='/', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x9}, 0x8) fadvise64(r2, 0x92, 0x5, 0x2) userfaultfd(0x801) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000100)) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x15, @broadcast, 'macvtap0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xffff8000, 0x10001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x93771000) fcntl$setstatus(r7, 0x4, 0x2800) 259.648038ms ago: executing program 1 (id=2590): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 136.698434ms ago: executing program 5 (id=2591): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@arm64={0x6, 0x8, 0x4, '\x00', 0x6}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 74.312338ms ago: executing program 1 (id=2592): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2b}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008811}, 0x20000000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="008d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}], 0x1}, 0x40012100) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES64=r5], 0x2c}], 0x1}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="00110f0000003f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000ac0)={0x60, 0x5, 0x10, "04332ae495f42cc5a335fdd7ff59c05d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x18) unshare(0x2030080) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') openat2(r8, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) unshare(0x800) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x8, 0x0, &(0x7f0000000040)) 0s ago: executing program 5 (id=2593): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f", 0x5}], 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x40, 0x7, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) (async) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f", 0x5}], 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x40, 0x7, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (async) kernel console output (not intermixed with test programs): 5d0 [ 415.789919][T12628] ? tomoyo_domain+0xd9/0x130 [ 415.789948][T12628] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 415.789981][T12628] tomoyo_path_number_perm+0x1e8/0x5a0 [ 415.790013][T12628] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 415.790061][T12628] ? __lock_acquire+0xab9/0xd20 [ 415.790108][T12628] ? __fget_files+0x2a/0x420 [ 415.790144][T12628] ? __fget_files+0x2a/0x420 [ 415.790174][T12628] ? __fget_files+0x3a0/0x420 [ 415.790204][T12628] ? __fget_files+0x2a/0x420 [ 415.790240][T12628] security_file_ioctl+0xcb/0x2d0 [ 415.790270][T12628] __se_sys_ioctl+0x47/0x170 [ 415.790299][T12628] do_syscall_64+0xfa/0x3b0 [ 415.790330][T12628] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.790360][T12628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.790381][T12628] ? clear_bhb_loop+0x60/0xb0 [ 415.790407][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.790428][T12628] RIP: 0033:0x7f9a2b18e9a9 [ 415.790448][T12628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.790466][T12628] RSP: 002b:00007f9a2bf45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.790488][T12628] RAX: ffffffffffffffda RBX: 00007f9a2b3b5fa0 RCX: 00007f9a2b18e9a9 [ 415.790503][T12628] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 415.790516][T12628] RBP: 00007f9a2bf45090 R08: 0000000000000000 R09: 0000000000000000 [ 415.790527][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.790537][T12628] R13: 0000000000000000 R14: 00007f9a2b3b5fa0 R15: 00007ffe4c3266b8 [ 415.790562][T12628] [ 415.790583][T12628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.109739][ T1162] tipc: Subscription rejected, illegal request [ 416.503109][ T43] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 416.658258][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 416.667593][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.675915][ T43] usb 4-1: Product: syz [ 416.680153][ T43] usb 4-1: Manufacturer: syz [ 416.685549][ T43] usb 4-1: SerialNumber: syz [ 416.703278][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 416.721736][ T5935] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.846663][ T5906] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 416.870859][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 416.879560][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 416.919216][ T5906] usb 5-1: USB disconnect, device number 66 [ 417.222362][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 417.222383][ T30] audit: type=1107 audit(1753277015.863:61): pid=12656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7_؉6(LYF3,i,Ų3ɽ?DvmejF r' [ 417.347312][ T9] usb 4-1: USB disconnect, device number 62 [ 417.543266][ T5906] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 417.603159][ T5937] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 417.707585][ T5906] usb 5-1: not running at top speed; connect to a high speed hub [ 417.717119][ T5906] usb 5-1: config 8 has an invalid interface number: 170 but max is 0 [ 417.725980][ T5906] usb 5-1: config 8 has no interface number 0 [ 417.732880][ T5906] usb 5-1: config 8 interface 170 has no altsetting 0 [ 417.742187][ T5906] usb 5-1: New USB device found, idVendor=2345, idProduct=a8d9, bcdDevice=33.5c [ 417.751478][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.759588][ T5906] usb 5-1: Product: syz [ 417.763951][ T5906] usb 5-1: Manufacturer: syz [ 417.768605][ T5906] usb 5-1: SerialNumber: syz [ 417.773238][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 417.780861][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.792162][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.804479][ T5935] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 417.813404][ T5935] ath9k_htc: Failed to initialize the device [ 417.819742][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 417.831610][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 417.831637][ T5937] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 417.850605][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.873778][ T5937] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 417.882958][ T5937] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.897978][ T5937] usb 6-1: Manufacturer: syz [ 417.909004][ T5937] usb 6-1: config 0 descriptor?? [ 417.947899][T12667] /dev/rnullb0: Can't open blockdev [ 418.016324][ T5906] usb 5-1: USB disconnect, device number 67 [ 418.384502][ T5937] rc_core: IR keymap rc-hauppauge not found [ 418.390486][ T5937] Registered IR keymap rc-empty [ 418.395733][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.423259][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.444351][ T5937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 418.457789][ T5937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 418.472295][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.493435][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.514943][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.533447][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.553226][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.583244][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.606637][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.633332][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.653202][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.683168][ T5937] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.711415][ T5937] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 418.728791][ T5937] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 418.742905][ T5937] usb 6-1: USB disconnect, device number 22 [ 420.099254][T12710] binder: 12709:12710 unknown command 0 [ 420.106577][T12710] binder: 12709:12710 ioctl c0306201 2000000003c0 returned -22 [ 420.249492][T12715] binder_alloc: 12714: binder_alloc_buf, no vma [ 420.336580][T12717] input: syz0 as /devices/virtual/input/input42 [ 420.516995][T12721] FAULT_INJECTION: forcing a failure. [ 420.516995][T12721] name failslab, interval 1, probability 0, space 0, times 0 [ 420.563175][T12721] CPU: 0 UID: 0 PID: 12721 Comm: syz.3.2251 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 420.563206][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.563220][T12721] Call Trace: [ 420.563230][T12721] [ 420.563238][T12721] dump_stack_lvl+0x189/0x250 [ 420.563273][T12721] ? __pfx____ratelimit+0x10/0x10 [ 420.563304][T12721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.563334][T12721] ? __pfx__printk+0x10/0x10 [ 420.563366][T12721] ? __pfx___might_resched+0x10/0x10 [ 420.563393][T12721] ? fs_reclaim_acquire+0x7d/0x100 [ 420.563426][T12721] should_fail_ex+0x414/0x560 [ 420.563454][T12721] ? __pfx_kernfs_test_super+0x10/0x10 [ 420.563475][T12721] should_failslab+0xa8/0x100 [ 420.563503][T12721] __kmalloc_cache_noprof+0x70/0x3d0 [ 420.563526][T12721] ? alloc_super+0x59/0x970 [ 420.563551][T12721] ? __pfx_kernfs_test_super+0x10/0x10 [ 420.563572][T12721] alloc_super+0x59/0x970 [ 420.563595][T12721] ? do_raw_spin_unlock+0x122/0x240 [ 420.563628][T12721] ? __pfx_kernfs_test_super+0x10/0x10 [ 420.563649][T12721] sget_fc+0x329/0xa40 [ 420.563675][T12721] ? __pfx_kernfs_set_super+0x10/0x10 [ 420.563698][T12721] kernfs_get_tree+0x1eb/0x920 [ 420.563724][T12721] ? __pfx_kernfs_get_tree+0x10/0x10 [ 420.563744][T12721] ? rcu_is_watching+0x15/0xb0 [ 420.563774][T12721] ? apparmor_capable+0x137/0x1b0 [ 420.563802][T12721] sysfs_get_tree+0x46/0x110 [ 420.563827][T12721] vfs_get_tree+0x8f/0x2b0 [ 420.563860][T12721] vfs_cmd_create+0xa2/0x200 [ 420.563887][T12721] __se_sys_fsconfig+0x78e/0x8d0 [ 420.563917][T12721] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 420.563938][T12721] ? ksys_write+0x22a/0x250 [ 420.563968][T12721] ? __pfx_ksys_write+0x10/0x10 [ 420.563993][T12721] ? rcu_is_watching+0x15/0xb0 [ 420.564025][T12721] ? do_syscall_64+0xbe/0x3b0 [ 420.564054][T12721] ? __x64_sys_fsconfig+0x20/0xc0 [ 420.564080][T12721] do_syscall_64+0xfa/0x3b0 [ 420.564118][T12721] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.564147][T12721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.564169][T12721] ? clear_bhb_loop+0x60/0xb0 [ 420.564195][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.564215][T12721] RIP: 0033:0x7f9a2b18e9a9 [ 420.564233][T12721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.564251][T12721] RSP: 002b:00007f9a2bf45038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 420.564273][T12721] RAX: ffffffffffffffda RBX: 00007f9a2b3b5fa0 RCX: 00007f9a2b18e9a9 [ 420.564288][T12721] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 420.564301][T12721] RBP: 00007f9a2bf45090 R08: 0000000000000000 R09: 0000000000000000 [ 420.564314][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.564327][T12721] R13: 0000000000000000 R14: 00007f9a2b3b5fa0 R15: 00007ffe4c3266b8 [ 420.564360][T12721] [ 421.183107][ T5937] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 421.321175][T12739] /dev/rnullb0: Can't open blockdev [ 421.351604][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.372594][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.399621][ T5937] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 421.414814][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 421.427075][ T5937] usb 4-1: SerialNumber: syz [ 421.654053][ T5937] usb 4-1: 0:2 : does not exist [ 421.677370][ T5937] usb 4-1: USB disconnect, device number 63 [ 421.719805][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.001828][T12758] FAULT_INJECTION: forcing a failure. [ 422.001828][T12758] name failslab, interval 1, probability 0, space 0, times 0 [ 422.017660][T12758] CPU: 0 UID: 0 PID: 12758 Comm: syz.1.2264 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 422.017691][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.017705][T12758] Call Trace: [ 422.017715][T12758] [ 422.017724][T12758] dump_stack_lvl+0x189/0x250 [ 422.017760][T12758] ? __pfx____ratelimit+0x10/0x10 [ 422.017791][T12758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.017820][T12758] ? __pfx__printk+0x10/0x10 [ 422.017853][T12758] ? __pfx___might_resched+0x10/0x10 [ 422.017879][T12758] ? fs_reclaim_acquire+0x7d/0x100 [ 422.017918][T12758] should_fail_ex+0x414/0x560 [ 422.017951][T12758] should_failslab+0xa8/0x100 [ 422.017978][T12758] __kmalloc_noprof+0xcb/0x4f0 [ 422.018001][T12758] ? tomoyo_encode+0x28b/0x550 [ 422.018025][T12758] tomoyo_encode+0x28b/0x550 [ 422.018051][T12758] tomoyo_realpath_from_path+0x58d/0x5d0 [ 422.018083][T12758] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 422.018112][T12758] tomoyo_path_number_perm+0x1e8/0x5a0 [ 422.018144][T12758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.018192][T12758] ? __lock_acquire+0xab9/0xd20 [ 422.018238][T12758] ? __fget_files+0x2a/0x420 [ 422.018273][T12758] ? __fget_files+0x2a/0x420 [ 422.018302][T12758] ? __fget_files+0x3a0/0x420 [ 422.018331][T12758] ? __fget_files+0x2a/0x420 [ 422.018365][T12758] security_file_ioctl+0xcb/0x2d0 [ 422.018393][T12758] __se_sys_ioctl+0x47/0x170 [ 422.018420][T12758] do_syscall_64+0xfa/0x3b0 [ 422.018449][T12758] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.018477][T12758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.018498][T12758] ? clear_bhb_loop+0x60/0xb0 [ 422.018522][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.018543][T12758] RIP: 0033:0x7f4f4878e9a9 [ 422.018558][T12758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.018570][T12758] RSP: 002b:00007f4f49517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.018587][T12758] RAX: ffffffffffffffda RBX: 00007f4f489b5fa0 RCX: 00007f4f4878e9a9 [ 422.018598][T12758] RDX: 0000200000000180 RSI: 0000000000003b86 RDI: 0000000000000003 [ 422.018608][T12758] RBP: 00007f4f49517090 R08: 0000000000000000 R09: 0000000000000000 [ 422.018617][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.018626][T12758] R13: 0000000000000000 R14: 00007f4f489b5fa0 R15: 00007ffc84045e98 [ 422.018649][T12758] [ 422.018666][T12758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.643252][ T5906] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 422.767957][T12778] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.777588][T12778] /dev/rnullb0: Can't open blockdev [ 422.813497][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.832796][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.833489][ T5937] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 422.855611][ T5906] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.878204][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 422.886746][ T5906] usb 6-1: SerialNumber: syz [ 423.006780][ T5937] usb 2-1: config 126 has an invalid interface number: 6 but max is 0 [ 423.015398][ T5937] usb 2-1: config 126 has no interface number 0 [ 423.021727][ T5937] usb 2-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=ba.b6 [ 423.031241][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.103515][ T5935] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 423.116346][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.125439][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.142206][ T5906] usb 6-1: 0:2 : does not exist [ 423.161122][ T5906] usb 6-1: USB disconnect, device number 23 [ 423.191364][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.247520][T12769] /dev/rnullb0: Can't open blockdev [ 423.255664][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.266910][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.277910][ T5935] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.287537][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.295827][ T5935] usb 4-1: SerialNumber: syz [ 423.518554][ T5935] usb 4-1: 0:2 : does not exist [ 423.537223][ T5935] usb 4-1: USB disconnect, device number 64 [ 423.576028][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.943202][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 424.112670][ T43] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 424.132803][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.150854][ T43] usb 6-1: config 0 descriptor?? [ 424.822802][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.845322][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.850172][T10460] bridge0: port 3(syz_tun) entered disabled state [ 424.856234][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.877623][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.880546][T10460] syz_tun (unregistering): left allmulticast mode [ 424.887043][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.909244][T10460] syz_tun (unregistering): left promiscuous mode [ 424.929350][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.930645][T10460] bridge0: port 3(syz_tun) entered disabled state [ 424.941354][ T5167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.951180][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.963264][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.972321][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.168280][T12804] binder_alloc: 12802: binder_alloc_buf size 4294971104 failed, no address space [ 425.182388][T12804] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 425.341288][T12800] chnl_net:caif_netlink_parms(): no params data found [ 425.407197][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2276'. [ 425.409402][ T5937] usb 2-1: string descriptor 0 read error: -71 [ 425.503179][ T43] usb 6-1: Cannot set autoneg [ 425.508176][ T43] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 425.556667][ T43] usb 6-1: USB disconnect, device number 24 [ 425.568682][ T5937] usb 2-1: USB disconnect, device number 54 [ 425.696798][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.705630][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.714289][T12800] bridge_slave_0: entered allmulticast mode [ 425.722396][T12800] bridge_slave_0: entered promiscuous mode [ 425.736632][T12800] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.747076][T12800] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.757619][T12800] bridge_slave_1: entered allmulticast mode [ 425.770934][T12800] bridge_slave_1: entered promiscuous mode [ 425.836519][T12800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.850470][T12800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.895026][T12819] FAULT_INJECTION: forcing a failure. [ 425.895026][T12819] name failslab, interval 1, probability 0, space 0, times 0 [ 425.909328][T12819] CPU: 1 UID: 0 PID: 12819 Comm: syz.1.2287 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 425.909358][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.909372][T12819] Call Trace: [ 425.909380][T12819] [ 425.909390][T12819] dump_stack_lvl+0x189/0x250 [ 425.909425][T12819] ? __pfx____ratelimit+0x10/0x10 [ 425.909456][T12819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.909494][T12819] ? __pfx__printk+0x10/0x10 [ 425.909530][T12819] ? __pfx___might_resched+0x10/0x10 [ 425.909561][T12819] should_fail_ex+0x414/0x560 [ 425.909592][T12819] ? vmemdup_user+0x26/0xd0 [ 425.909621][T12819] should_failslab+0xa8/0x100 [ 425.909648][T12819] __kvmalloc_node_noprof+0x161/0x5f0 [ 425.909673][T12819] ? vmemdup_user+0x26/0xd0 [ 425.909707][T12819] vmemdup_user+0x26/0xd0 [ 425.909737][T12819] path_setxattrat+0x244/0x3a0 [ 425.909771][T12819] ? __pfx_path_setxattrat+0x10/0x10 [ 425.909792][T12819] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 425.909851][T12819] ? ksys_write+0x22a/0x250 [ 425.909880][T12819] ? __pfx_ksys_write+0x10/0x10 [ 425.909904][T12819] ? rcu_is_watching+0x15/0xb0 [ 425.909936][T12819] __x64_sys_setxattr+0xbc/0xe0 [ 425.909973][T12819] do_syscall_64+0xfa/0x3b0 [ 425.910003][T12819] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.910033][T12819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.910053][T12819] ? clear_bhb_loop+0x60/0xb0 [ 425.910079][T12819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.910100][T12819] RIP: 0033:0x7f4f4878e9a9 [ 425.910119][T12819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.910137][T12819] RSP: 002b:00007f4f49517038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 425.910159][T12819] RAX: ffffffffffffffda RBX: 00007f4f489b5fa0 RCX: 00007f4f4878e9a9 [ 425.910175][T12819] RDX: 0000200000000d00 RSI: 0000200000000200 RDI: 0000200000000100 [ 425.910190][T12819] RBP: 00007f4f49517090 R08: 0000000000000002 R09: 0000000000000000 [ 425.910204][T12819] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 425.910218][T12819] R13: 0000000000000000 R14: 00007f4f489b5fa0 R15: 00007ffc84045e98 [ 425.910250][T12819] [ 425.929343][T12800] team0: Port device team_slave_0 added [ 426.147473][T12800] team0: Port device team_slave_1 added [ 426.193088][ T5937] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 426.222287][T12800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.224989][T12827] sctp: [Deprecated]: syz.1.2289 (pid 12827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.224989][T12827] Use struct sctp_sack_info instead [ 426.234322][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.272808][T12800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.312144][T12800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.336533][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.357882][ T5937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.378795][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.388575][T12800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.438911][ T5937] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.448391][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.463072][ T5937] usb 5-1: SerialNumber: syz [ 426.548089][T12800] hsr_slave_0: entered promiscuous mode [ 426.557130][T12800] hsr_slave_1: entered promiscuous mode [ 426.564555][T12800] debugfs: 'hsr0' already exists in 'hsr' [ 426.570485][T12800] Cannot create hsr debugfs directory [ 426.707546][ T5937] usb 5-1: 0:2 : does not exist [ 426.757257][ T5937] usb 5-1: USB disconnect, device number 68 [ 426.822150][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.904392][T12836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 426.961766][T12800] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.005456][ T5167] Bluetooth: hci4: command tx timeout [ 427.025135][T12800] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.140443][T12800] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.179381][T12844] FAULT_INJECTION: forcing a failure. [ 427.179381][T12844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.194532][T12844] CPU: 0 UID: 0 PID: 12844 Comm: syz.1.2297 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 427.194564][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.194579][T12844] Call Trace: [ 427.194587][T12844] [ 427.194597][T12844] dump_stack_lvl+0x189/0x250 [ 427.194631][T12844] ? __pfx____ratelimit+0x10/0x10 [ 427.194663][T12844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.194693][T12844] ? __pfx__printk+0x10/0x10 [ 427.194737][T12844] should_fail_ex+0x414/0x560 [ 427.194769][T12844] strncpy_from_user+0x36/0x290 [ 427.194800][T12844] getname_flags+0xf3/0x540 [ 427.194825][T12844] __se_sys_statx+0xb5/0x240 [ 427.194851][T12844] ? __pfx___se_sys_statx+0x10/0x10 [ 427.194874][T12844] ? __fget_files+0x3a0/0x420 [ 427.194913][T12844] ? fput+0xa0/0xd0 [ 427.194934][T12844] ? ksys_write+0x22a/0x250 [ 427.194964][T12844] ? __pfx_ksys_write+0x10/0x10 [ 427.194997][T12844] ? do_syscall_64+0xbe/0x3b0 [ 427.195027][T12844] ? __x64_sys_statx+0x20/0xc0 [ 427.195051][T12844] do_syscall_64+0xfa/0x3b0 [ 427.195081][T12844] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.195110][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.195130][T12844] ? clear_bhb_loop+0x60/0xb0 [ 427.195156][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.195175][T12844] RIP: 0033:0x7f4f4878e9a9 [ 427.195191][T12844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.195208][T12844] RSP: 002b:00007f4f465f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 427.195229][T12844] RAX: ffffffffffffffda RBX: 00007f4f489b6080 RCX: 00007f4f4878e9a9 [ 427.195244][T12844] RDX: 0000000000000100 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 427.195258][T12844] RBP: 00007f4f465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.195272][T12844] R10: 0000000000000801 R11: 0000000000000246 R12: 0000000000000001 [ 427.195285][T12844] R13: 0000000000000001 R14: 00007f4f489b6080 R15: 00007ffc84045e98 [ 427.195323][T12844] [ 427.202488][T12800] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.369950][T12846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2299'. [ 427.678474][T12800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.708174][T12800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.729831][T12800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.742145][T12800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.908029][T12868] 9pnet_fd: Insufficient options for proto=fd [ 427.948785][T12800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.956933][T12870] qnx4: no qnx4 filesystem (no root dir). [ 428.002540][T12800] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.054382][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.061585][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.079013][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.086244][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.139237][T12876] FAT-fs (rnullb0): bogus number of reserved sectors [ 428.152096][T12876] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 428.189483][T12876] FAT-fs (rnullb0): bogus number of reserved sectors [ 428.197658][T12876] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 428.310402][T12882] FAULT_INJECTION: forcing a failure. [ 428.310402][T12882] name failslab, interval 1, probability 0, space 0, times 0 [ 428.343192][T12882] CPU: 1 UID: 0 PID: 12882 Comm: syz.1.2309 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 428.343223][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.343236][T12882] Call Trace: [ 428.343246][T12882] [ 428.343255][T12882] dump_stack_lvl+0x189/0x250 [ 428.343293][T12882] ? __pfx____ratelimit+0x10/0x10 [ 428.343324][T12882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.343354][T12882] ? __pfx__printk+0x10/0x10 [ 428.343391][T12882] ? __pfx___might_resched+0x10/0x10 [ 428.343423][T12882] should_fail_ex+0x414/0x560 [ 428.343455][T12882] should_failslab+0xa8/0x100 [ 428.343482][T12882] __kmalloc_noprof+0xcb/0x4f0 [ 428.343514][T12882] ? __kasan_kmalloc+0x93/0xb0 [ 428.343535][T12882] ? nla_strdup+0x9d/0x140 [ 428.343569][T12882] nla_strdup+0x9d/0x140 [ 428.343602][T12882] nf_tables_newtable+0x491/0x1890 [ 428.343647][T12882] nfnetlink_rcv+0x112f/0x2520 [ 428.343711][T12882] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 428.343756][T12882] ? ref_tracker_free+0x63a/0x7d0 [ 428.343818][T12882] ? __netlink_deliver_tap+0x807/0x850 [ 428.343860][T12882] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.343892][T12882] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.343929][T12882] netlink_unicast+0x759/0x8e0 [ 428.343971][T12882] netlink_sendmsg+0x805/0xb30 [ 428.344013][T12882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.344049][T12882] ? aa_sock_msg_perm+0xf1/0x1d0 [ 428.344082][T12882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.344112][T12882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.344145][T12882] __sock_sendmsg+0x219/0x270 [ 428.344178][T12882] ____sys_sendmsg+0x505/0x830 [ 428.344208][T12882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.344242][T12882] ? import_iovec+0x74/0xa0 [ 428.344270][T12882] ___sys_sendmsg+0x21f/0x2a0 [ 428.344296][T12882] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.344361][T12882] ? __fget_files+0x2a/0x420 [ 428.344391][T12882] ? __fget_files+0x3a0/0x420 [ 428.344434][T12882] __x64_sys_sendmsg+0x19b/0x260 [ 428.344461][T12882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.344502][T12882] ? __pfx_ksys_write+0x10/0x10 [ 428.344536][T12882] ? do_syscall_64+0xbe/0x3b0 [ 428.344571][T12882] do_syscall_64+0xfa/0x3b0 [ 428.344602][T12882] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.344630][T12882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.344651][T12882] ? clear_bhb_loop+0x60/0xb0 [ 428.344677][T12882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.344698][T12882] RIP: 0033:0x7f4f4878e9a9 [ 428.344717][T12882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.344736][T12882] RSP: 002b:00007f4f49517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.344759][T12882] RAX: ffffffffffffffda RBX: 00007f4f489b5fa0 RCX: 00007f4f4878e9a9 [ 428.344776][T12882] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 428.344789][T12882] RBP: 00007f4f49517090 R08: 0000000000000000 R09: 0000000000000000 [ 428.344803][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.344816][T12882] R13: 0000000000000000 R14: 00007f4f489b5fa0 R15: 00007ffc84045e98 [ 428.344850][T12882] [ 428.353673][ T5906] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 428.714743][T12887] XFS (nbd1): no-recovery mounts must be read-only. [ 428.749994][T12800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.825542][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 428.838659][T12800] veth0_vlan: entered promiscuous mode [ 428.843577][ T5906] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 428.852345][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.868072][T12800] veth1_vlan: entered promiscuous mode [ 428.879517][ T5906] usb 6-1: config 0 has no interface number 0 [ 428.891777][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 428.907105][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.919838][ T5906] usb 6-1: Product: syz [ 428.928463][ T5906] usb 6-1: Manufacturer: syz [ 428.942224][ T5906] usb 6-1: SerialNumber: syz [ 428.956604][ T5906] usb 6-1: config 0 descriptor?? [ 428.976331][T12800] veth0_macvtap: entered promiscuous mode [ 428.991651][T12800] veth1_macvtap: entered promiscuous mode [ 429.022608][T12800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.045849][T12800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.081395][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.093457][ T5167] Bluetooth: hci4: command tx timeout [ 429.120794][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.155859][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.177287][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.204605][ T5906] usb 6-1: Found UVC 0.00 device syz (046d:08d3) [ 429.212759][ T5906] usb 6-1: No valid video chain found. [ 429.232219][ T5906] usb 6-1: USB disconnect, device number 25 [ 429.246381][T12900] FAULT_INJECTION: forcing a failure. [ 429.246381][T12900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.255963][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.269305][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 429.277683][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.286066][T12900] CPU: 1 UID: 0 PID: 12900 Comm: syz.1.2315 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 429.286106][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.286120][T12900] Call Trace: [ 429.286129][T12900] [ 429.286138][T12900] dump_stack_lvl+0x189/0x250 [ 429.286173][T12900] ? __pfx____ratelimit+0x10/0x10 [ 429.286204][T12900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.286234][T12900] ? __pfx__printk+0x10/0x10 [ 429.286265][T12900] ? __might_fault+0xb0/0x130 [ 429.286301][T12900] should_fail_ex+0x414/0x560 [ 429.286334][T12900] _copy_from_user+0x2d/0xb0 [ 429.286359][T12900] sctp_getsockopt_maxseg+0x178/0x6c0 [ 429.286393][T12900] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 429.286436][T12900] sctp_getsockopt+0x933/0xb60 [ 429.286456][T12900] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 429.286490][T12900] do_sock_getsockopt+0x372/0x450 [ 429.286517][T12900] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 429.286539][T12900] ? do_syscall_64+0xa0/0x3b0 [ 429.286570][T12900] ? __fget_files+0x3a0/0x420 [ 429.286601][T12900] ? __fget_files+0x2a/0x420 [ 429.286641][T12900] __x64_sys_getsockopt+0x1a5/0x250 [ 429.286663][T12900] ? do_syscall_64+0xa0/0x3b0 [ 429.286696][T12900] ? do_syscall_64+0xa0/0x3b0 [ 429.286731][T12900] do_syscall_64+0xfa/0x3b0 [ 429.286760][T12900] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.286790][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.286812][T12900] ? clear_bhb_loop+0x60/0xb0 [ 429.286838][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.286859][T12900] RIP: 0033:0x7f4f4878e9a9 [ 429.286877][T12900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.286894][T12900] RSP: 002b:00007f4f465f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 429.286917][T12900] RAX: ffffffffffffffda RBX: 00007f4f489b6080 RCX: 00007f4f4878e9a9 [ 429.286933][T12900] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000004 [ 429.286946][T12900] RBP: 00007f4f465f6090 R08: 0000200000000180 R09: 0000000000000000 [ 429.286960][T12900] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.286974][T12900] R13: 0000000000000000 R14: 00007f4f489b6080 R15: 00007ffc84045e98 [ 429.287007][T12900] [ 429.566664][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.578137][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.603142][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 429.610736][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.625306][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.636292][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 429.653992][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.675324][ T9] usb 5-1: config 0 descriptor?? [ 429.698963][ T9] hub 5-1:0.0: USB hub found [ 430.093726][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 430.339089][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 430.348801][T12919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2321'. [ 430.355519][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 430.382388][T12918] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2321'. [ 430.392121][T12919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2321'. [ 430.405075][ T9] usb 5-1: USB disconnect, device number 69 [ 430.707883][T12930] /dev/rnullb0: Can't open blockdev [ 430.740347][T12930] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2326' sets config #6 [ 431.175529][ T5167] Bluetooth: hci4: command tx timeout [ 431.933215][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 431.947900][ T5935] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 432.074638][ T9] usb 5-1: device descriptor read/64, error -71 [ 432.083218][ T5935] usb 6-1: device descriptor read/64, error -71 [ 432.323080][ T5935] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 432.323416][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 432.413213][ T5906] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 432.463165][ T5935] usb 6-1: device descriptor read/64, error -71 [ 432.483949][ T9] usb 5-1: device descriptor read/64, error -71 [ 432.543060][ T5906] usb 4-1: device descriptor read/64, error -71 [ 432.576708][ T5935] usb usb6-port1: attempt power cycle [ 432.593524][ T9] usb usb5-port1: attempt power cycle [ 432.783093][ T5906] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 432.913173][ T5906] usb 4-1: device descriptor read/64, error -71 [ 432.923171][ T5935] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 432.934390][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 432.954020][ T9] usb 5-1: device descriptor read/8, error -71 [ 432.954441][ T5935] usb 6-1: device descriptor read/8, error -71 [ 433.024752][ T5906] usb usb4-port1: attempt power cycle [ 433.193381][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 433.215172][ T5935] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 433.218438][ T9] usb 5-1: device descriptor read/8, error -71 [ 433.237512][ T5935] usb 6-1: device descriptor read/8, error -71 [ 433.243802][ T5167] Bluetooth: hci4: command tx timeout [ 433.335961][ T9] usb usb5-port1: unable to enumerate USB device [ 433.363166][ T5906] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 433.363555][ T5935] usb usb6-port1: unable to enumerate USB device [ 433.383771][ T5906] usb 4-1: device descriptor read/8, error -71 [ 433.623099][ T5906] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 433.645097][ T5906] usb 4-1: device descriptor read/8, error -71 [ 433.753433][ T5906] usb usb4-port1: unable to enumerate USB device [ 434.353493][ T5935] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 434.515310][ T5935] usb 5-1: device descriptor read/64, error -71 [ 434.630736][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.639375][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.647345][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.659165][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.669867][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.753843][ T5935] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 434.842570][ T1162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.925061][ T5935] usb 5-1: device descriptor read/64, error -71 [ 434.948579][ T1162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.037398][ T1162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.050337][ T5935] usb usb5-port1: attempt power cycle [ 435.068386][T12982] chnl_net:caif_netlink_parms(): no params data found [ 435.129948][ T1162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.231736][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.241120][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.249748][T12982] bridge_slave_0: entered allmulticast mode [ 435.251415][T12995] FAULT_INJECTION: forcing a failure. [ 435.251415][T12995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.258706][T12982] bridge_slave_0: entered promiscuous mode [ 435.275839][T12995] CPU: 1 UID: 0 PID: 12995 Comm: syz.3.2350 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 435.275872][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.275889][T12995] Call Trace: [ 435.275899][T12995] [ 435.275910][T12995] dump_stack_lvl+0x189/0x250 [ 435.275951][T12995] ? __pfx____ratelimit+0x10/0x10 [ 435.275986][T12995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.276015][T12995] ? __pfx__printk+0x10/0x10 [ 435.276044][T12995] ? __might_fault+0xb0/0x130 [ 435.276080][T12995] should_fail_ex+0x414/0x560 [ 435.276112][T12995] _copy_from_user+0x2d/0xb0 [ 435.276137][T12995] sctp_getsockopt_maxseg+0x178/0x6c0 [ 435.276173][T12995] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 435.276216][T12995] sctp_getsockopt+0x933/0xb60 [ 435.276235][T12995] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 435.276270][T12995] do_sock_getsockopt+0x372/0x450 [ 435.276297][T12995] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 435.276319][T12995] ? do_syscall_64+0xa0/0x3b0 [ 435.276349][T12995] ? __fget_files+0x3a0/0x420 [ 435.276379][T12995] ? __fget_files+0x2a/0x420 [ 435.276418][T12995] __x64_sys_getsockopt+0x1a5/0x250 [ 435.276439][T12995] ? do_syscall_64+0xa0/0x3b0 [ 435.276476][T12995] ? do_syscall_64+0xa0/0x3b0 [ 435.276517][T12995] do_syscall_64+0xfa/0x3b0 [ 435.276552][T12995] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.276583][T12995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.276608][T12995] ? clear_bhb_loop+0x60/0xb0 [ 435.276636][T12995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.276660][T12995] RIP: 0033:0x7ff65e98e9a9 [ 435.276691][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.276710][T12995] RSP: 002b:00007ff65f8bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 435.276737][T12995] RAX: ffffffffffffffda RBX: 00007ff65ebb5fa0 RCX: 00007ff65e98e9a9 [ 435.276755][T12995] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000004 [ 435.276769][T12995] RBP: 00007ff65f8bc090 R08: 0000200000000180 R09: 0000000000000000 [ 435.276785][T12995] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.276804][T12995] R13: 0000000000000000 R14: 00007ff65ebb5fa0 R15: 00007ffc416b0b18 [ 435.276840][T12995] [ 435.413429][ T5935] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 435.423798][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.475284][ T5935] usb 5-1: device descriptor read/8, error -71 [ 435.487605][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.533225][T12982] bridge_slave_1: entered allmulticast mode [ 435.544503][T12982] bridge_slave_1: entered promiscuous mode [ 435.621453][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.636487][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.753821][ T5935] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 435.789601][ T5935] usb 5-1: device descriptor read/8, error -71 [ 435.791162][T12982] team0: Port device team_slave_0 added [ 435.839807][T12982] team0: Port device team_slave_1 added [ 435.903832][ T5935] usb usb5-port1: unable to enumerate USB device [ 435.980362][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.990096][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.020571][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.035324][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.042466][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.069404][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.115928][ T1162] bridge_slave_1: left allmulticast mode [ 436.121644][ T1162] bridge_slave_1: left promiscuous mode [ 436.139948][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.188167][ T1162] bridge_slave_0: left allmulticast mode [ 436.205631][ T1162] bridge_slave_0: left promiscuous mode [ 436.226975][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.473902][ T5935] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 436.638900][ T5935] usb 4-1: no configurations [ 436.643959][ T5935] usb 4-1: can't read configurations, error -22 [ 436.766299][ T5849] Bluetooth: hci0: command tx timeout [ 436.804975][ T5935] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 436.880590][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.896192][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.906951][ T1162] bond0 (unregistering): Released all slaves [ 436.991771][ T5935] usb 4-1: no configurations [ 437.004404][ T5935] usb 4-1: can't read configurations, error -22 [ 437.011362][ T5935] usb usb4-port1: attempt power cycle [ 437.084574][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2357'. [ 437.162261][T12982] hsr_slave_0: entered promiscuous mode [ 437.187351][T12982] hsr_slave_1: entered promiscuous mode [ 437.202617][T12982] debugfs: 'hsr0' already exists in 'hsr' [ 437.223462][T12982] Cannot create hsr debugfs directory [ 437.386154][ T5935] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 437.400410][ T1162] hsr_slave_0: left promiscuous mode [ 437.416445][ T5935] usb 4-1: no configurations [ 437.421233][ T5935] usb 4-1: can't read configurations, error -22 [ 437.431386][ T1162] hsr_slave_1: left promiscuous mode [ 437.440946][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.450786][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.453167][ T5906] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 437.468164][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.480231][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.518570][ T1162] veth1_macvtap: left promiscuous mode [ 437.526752][ T1162] veth0_macvtap: left promiscuous mode [ 437.532468][ T1162] veth1_vlan: left promiscuous mode [ 437.542953][ T1162] veth0_vlan: left promiscuous mode [ 437.543552][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 437.573625][ T5935] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 437.610016][ T5935] usb 4-1: no configurations [ 437.617000][ T5935] usb 4-1: can't read configurations, error -22 [ 437.619070][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.636810][ T5935] usb usb4-port1: unable to enumerate USB device [ 437.659694][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.687107][ T5906] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 437.712686][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.723703][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 437.744107][ T5906] usb 6-1: SerialNumber: syz [ 437.749381][ T9] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 437.778018][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 437.796959][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 437.821565][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.833051][ T9] usb 5-1: Product: syz [ 437.837330][ T9] usb 5-1: Manufacturer: syz [ 437.855583][ T9] usb 5-1: SerialNumber: syz [ 437.991778][ T5906] usb 6-1: 0:2 : does not exist [ 438.063196][ T5906] usb 6-1: USB disconnect, device number 30 [ 438.146511][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.426538][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 438.476487][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 438.845416][ T5849] Bluetooth: hci0: command tx timeout [ 439.387651][ T1162] IPVS: stop unused estimator thread 0... [ 440.049309][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.056206][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.263126][T13070] FAULT_INJECTION: forcing a failure. [ 440.263126][T13070] name failslab, interval 1, probability 0, space 0, times 0 [ 440.288361][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input43 [ 440.302490][T13070] CPU: 1 UID: 0 PID: 13070 Comm: syz.5.2365 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 440.302524][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.302539][T13070] Call Trace: [ 440.302548][T13070] [ 440.302557][T13070] dump_stack_lvl+0x189/0x250 [ 440.302593][T13070] ? __pfx____ratelimit+0x10/0x10 [ 440.302624][T13070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.302653][T13070] ? __pfx__printk+0x10/0x10 [ 440.302697][T13070] should_fail_ex+0x414/0x560 [ 440.302730][T13070] should_failslab+0xa8/0x100 [ 440.302758][T13070] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 440.302783][T13070] ? __alloc_skb+0x112/0x2d0 [ 440.302809][T13070] __alloc_skb+0x112/0x2d0 [ 440.302833][T13070] _sctp_make_chunk+0x5e/0x430 [ 440.302871][T13070] sctp_make_init+0x58b/0xd30 [ 440.302913][T13070] ? __pfx_sctp_make_init+0x10/0x10 [ 440.302943][T13070] ? arch_stack_walk+0xfc/0x150 [ 440.302992][T13070] ? stack_trace_save+0x9c/0xe0 [ 440.303026][T13070] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 440.303054][T13070] sctp_do_sm+0x1e4/0x5a20 [ 440.303079][T13070] ? __pfx_sctp_pname+0x10/0x10 [ 440.303106][T13070] ? kasan_save_track+0x3e/0x80 [ 440.303127][T13070] ? sctp_stream_init_ext+0x57/0x180 [ 440.303151][T13070] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 440.303170][T13070] ? sctp_sendmsg+0x1941/0x2810 [ 440.303187][T13070] ? __sock_sendmsg+0x19c/0x270 [ 440.303211][T13070] ? __sys_sendto+0x3bd/0x520 [ 440.303230][T13070] ? do_syscall_64+0xfa/0x3b0 [ 440.303258][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.303281][T13070] ? __pfx_sctp_do_sm+0x10/0x10 [ 440.303347][T13070] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 440.303384][T13070] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 440.303412][T13070] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 440.303431][T13070] ? __asan_memcpy+0x40/0x70 [ 440.303468][T13070] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 440.303506][T13070] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 440.303526][T13070] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 440.303548][T13070] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 440.303570][T13070] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 440.303588][T13070] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 440.303611][T13070] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 440.303631][T13070] ? security_sctp_bind_connect+0x7e/0x2e0 [ 440.303660][T13070] sctp_sendmsg+0x1941/0x2810 [ 440.303695][T13070] ? __pfx_sctp_sendmsg+0x10/0x10 [ 440.303720][T13070] ? aa_sk_perm+0x81e/0x950 [ 440.303755][T13070] ? __pfx_aa_sk_perm+0x10/0x10 [ 440.303788][T13070] ? sock_rps_record_flow+0x19/0x410 [ 440.303817][T13070] ? inet_sendmsg+0x2f4/0x370 [ 440.303841][T13070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.303875][T13070] __sock_sendmsg+0x19c/0x270 [ 440.303907][T13070] __sys_sendto+0x3bd/0x520 [ 440.303930][T13070] ? __pfx___sys_sendto+0x10/0x10 [ 440.303947][T13070] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 440.304001][T13070] ? __fget_files+0x3a0/0x420 [ 440.304043][T13070] ? ksys_write+0x22a/0x250 [ 440.304074][T13070] ? __pfx_ksys_write+0x10/0x10 [ 440.304099][T13070] ? rcu_is_watching+0x15/0xb0 [ 440.304132][T13070] __x64_sys_sendto+0xde/0x100 [ 440.304157][T13070] do_syscall_64+0xfa/0x3b0 [ 440.304187][T13070] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.304216][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.304237][T13070] ? clear_bhb_loop+0x60/0xb0 [ 440.304263][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.304284][T13070] RIP: 0033:0x7fc4b9f8e9a9 [ 440.304303][T13070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.304322][T13070] RSP: 002b:00007fc4bae6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 440.304344][T13070] RAX: ffffffffffffffda RBX: 00007fc4ba1b5fa0 RCX: 00007fc4b9f8e9a9 [ 440.304360][T13070] RDX: 000000000000fffd RSI: 0000200000000080 RDI: 0000000000000003 [ 440.304374][T13070] RBP: 00007fc4bae6a090 R08: 0000200000000140 R09: 000000000000001c [ 440.304389][T13070] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 440.304402][T13070] R13: 0000000000000000 R14: 00007fc4ba1b5fa0 R15: 00007ffd33dd90d8 [ 440.304436][T13070] [ 440.377052][ T9] usb 5-1: USB disconnect, device number 78 [ 440.422428][ T5202] bcm5974 5-1:1.0: could not read from device [ 440.579749][T12982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.772695][T12982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.837433][T12982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.874685][T12982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.925268][ T5849] Bluetooth: hci0: command tx timeout [ 441.053348][ T5935] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 441.099065][T12982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.108286][T13088] autofs: Unknown parameter '' [ 441.140687][T12982] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.158968][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.166191][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.186825][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.194060][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.234822][ T5935] usb 6-1: no configurations [ 441.239489][ T5935] usb 6-1: can't read configurations, error -22 [ 441.293134][ T983] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 441.404985][ T5935] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 441.446418][ T983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.466664][ T983] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.487859][ T983] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 441.507875][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 441.528117][ T983] usb 4-1: SerialNumber: syz [ 441.605803][ T5935] usb 6-1: no configurations [ 441.620691][ T5935] usb 6-1: can't read configurations, error -22 [ 441.703788][ T5935] usb usb6-port1: attempt power cycle [ 441.851063][ T983] usb 4-1: 0:2 : does not exist [ 441.884461][T13107] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2372'. [ 441.940416][ T983] usb 4-1: USB disconnect, device number 73 [ 441.989152][T12982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.060046][ T5935] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 442.106249][ T5935] usb 6-1: no configurations [ 442.110908][ T5935] usb 6-1: can't read configurations, error -22 [ 442.138429][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 442.237038][T12982] veth0_vlan: entered promiscuous mode [ 442.263730][ T5935] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 442.287461][T12982] veth1_vlan: entered promiscuous mode [ 442.323836][ T5935] usb 6-1: no configurations [ 442.328486][ T5935] usb 6-1: can't read configurations, error -22 [ 442.349262][ T5935] usb usb6-port1: unable to enumerate USB device [ 442.367091][T13116] fuse: Bad value for 'user_id' [ 442.372092][T13116] fuse: Bad value for 'user_id' [ 442.388462][T12982] veth0_macvtap: entered promiscuous mode [ 442.408338][T12982] veth1_macvtap: entered promiscuous mode [ 442.413557][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 442.482409][T12982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.539429][T12982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.571813][ T3473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.582181][ T3473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.625211][ T3473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.645154][ T3473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.670874][T13123] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 442.690289][T13123] UDF-fs: Scanning with blocksize 4096 failed [ 442.869195][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.890359][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.968511][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.992419][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.003612][ T5849] Bluetooth: hci0: command tx timeout [ 443.387908][T13154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2384'. [ 443.423867][T13154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2384'. [ 443.445934][T13154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2384'. [ 443.479112][T13154] /dev/rnullb0: Can't open blockdev [ 443.543264][ T5935] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 443.727806][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.755245][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.785423][ T5935] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 443.802756][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.824135][ T5935] usb 4-1: SerialNumber: syz [ 443.855809][ T5937] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 444.030380][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.065230][ T5935] usb 4-1: 0:2 : does not exist [ 444.071245][ T5937] usb 2-1: not running at top speed; connect to a high speed hub [ 444.091277][ T5937] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 444.125038][ T5937] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 444.159194][ T5935] usb 4-1: USB disconnect, device number 74 [ 444.166036][ T5937] usb 2-1: can't read configurations, error -22 [ 444.239994][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.343824][ T5937] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 444.517261][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.536616][ T5937] usb 2-1: not running at top speed; connect to a high speed hub [ 444.552747][ T5937] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 444.566903][ T5937] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 444.585565][ T5937] usb 2-1: can't read configurations, error -22 [ 444.599122][ T5937] usb usb2-port1: attempt power cycle [ 444.966299][ T5937] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 445.007597][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.041763][ T5937] usb 2-1: not running at top speed; connect to a high speed hub [ 445.072344][ T5937] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 445.100135][ T5937] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 445.111215][ T5937] usb 2-1: can't read configurations, error -22 [ 445.255207][ T5937] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 445.263087][ T5935] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 445.295654][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.304768][ T5937] usb 2-1: not running at top speed; connect to a high speed hub [ 445.314057][ T5937] usb 2-1: too many configurations: 253, using maximum allowed: 8 [ 445.343446][ T5937] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 445.360828][ T5937] usb 2-1: can't read configurations, error -22 [ 445.379628][ T5937] usb usb2-port1: unable to enumerate USB device [ 445.435313][ T5935] usb 4-1: no configurations [ 445.440156][ T5935] usb 4-1: can't read configurations, error -22 [ 445.584904][ T5935] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 445.763691][ T5935] usb 4-1: no configurations [ 445.768587][ T5935] usb 4-1: can't read configurations, error -22 [ 445.794554][ T5935] usb usb4-port1: attempt power cycle [ 446.153271][ T5935] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 446.194626][ T5935] usb 4-1: no configurations [ 446.199332][ T5935] usb 4-1: can't read configurations, error -22 [ 446.343915][ T5935] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 446.374442][ T5935] usb 4-1: no configurations [ 446.379097][ T5935] usb 4-1: can't read configurations, error -22 [ 446.393592][ T5935] usb usb4-port1: unable to enumerate USB device [ 446.407234][ T5937] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 446.597509][ T5937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.608108][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.620062][ T5937] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.631784][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.642570][ T5937] usb 5-1: SerialNumber: syz [ 446.651564][T13243] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20003 [ 446.660897][T13243] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2403'. [ 446.851022][T13254] gfs2: not a GFS2 filesystem [ 446.911478][ T5937] usb 5-1: 0:2 : does not exist [ 446.955460][ T5937] usb 5-1: USB disconnect, device number 79 [ 446.990924][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.313469][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 447.473608][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 447.487668][ T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 447.512316][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.549502][ T9] usb 6-1: config 0 descriptor?? [ 447.559969][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 447.961311][ T9] gspca_vc032x: reg_w err -71 [ 447.976446][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 447.982029][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 447.988594][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 447.994838][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.000157][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.013963][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.022724][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.033976][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.056431][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.071938][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.086154][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.103648][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.108997][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.122288][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.139431][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.154697][T13291] FAULT_INJECTION: forcing a failure. [ 448.154697][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 448.170778][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.177502][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.183105][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 448.185603][T13291] CPU: 1 UID: 0 PID: 13291 Comm: syz.3.2419 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 448.185636][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.185652][T13291] Call Trace: [ 448.185663][T13291] [ 448.185676][T13291] dump_stack_lvl+0x189/0x250 [ 448.185721][T13291] ? __pfx____ratelimit+0x10/0x10 [ 448.185757][T13291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.185791][T13291] ? __pfx__printk+0x10/0x10 [ 448.185830][T13291] ? __pfx___might_resched+0x10/0x10 [ 448.185878][T13291] ? fs_reclaim_acquire+0x7d/0x100 [ 448.185915][T13291] should_fail_ex+0x414/0x560 [ 448.185951][T13291] ? nf_hook_entries_grow+0x27c/0x710 [ 448.185984][T13291] should_failslab+0xa8/0x100 [ 448.186017][T13291] __kvmalloc_node_noprof+0x161/0x5f0 [ 448.186045][T13291] ? nf_hook_entries_grow+0x27c/0x710 [ 448.186080][T13291] ? rhltable_insert_key+0x1b6/0x1350 [ 448.186114][T13291] nf_hook_entries_grow+0x27c/0x710 [ 448.186165][T13291] __nf_register_net_hook+0x2c9/0x930 [ 448.186212][T13291] nf_register_net_hook+0xb2/0x190 [ 448.186250][T13291] nf_tables_newchain+0x2469/0x2900 [ 448.186303][T13291] ? __pfx_nf_tables_newchain+0x10/0x10 [ 448.186375][T13291] ? nfnl_pernet+0x23/0x240 [ 448.186417][T13291] ? __nla_parse+0x40/0x60 [ 448.186455][T13291] nfnetlink_rcv+0x112f/0x2520 [ 448.186526][T13291] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 448.186580][T13291] ? ref_tracker_free+0x63a/0x7d0 [ 448.186649][T13291] ? __netlink_deliver_tap+0x807/0x850 [ 448.186697][T13291] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.186731][T13291] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.186774][T13291] netlink_unicast+0x759/0x8e0 [ 448.186820][T13291] netlink_sendmsg+0x805/0xb30 [ 448.186868][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.186909][T13291] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.186946][T13291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.186979][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.187015][T13291] __sock_sendmsg+0x219/0x270 [ 448.187050][T13291] ____sys_sendmsg+0x505/0x830 [ 448.187084][T13291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.187121][T13291] ? import_iovec+0x74/0xa0 [ 448.187153][T13291] ___sys_sendmsg+0x21f/0x2a0 [ 448.187189][T13291] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.187261][T13291] ? __fget_files+0x2a/0x420 [ 448.187318][T13291] ? __fget_files+0x3a0/0x420 [ 448.187375][T13291] __x64_sys_sendmsg+0x19b/0x260 [ 448.187408][T13291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.187448][T13291] ? __pfx_ksys_write+0x10/0x10 [ 448.187475][T13291] ? rcu_is_watching+0x15/0xb0 [ 448.187511][T13291] ? do_syscall_64+0xbe/0x3b0 [ 448.187552][T13291] do_syscall_64+0xfa/0x3b0 [ 448.187583][T13291] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.187615][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.187639][T13291] ? clear_bhb_loop+0x60/0xb0 [ 448.187668][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.187692][T13291] RIP: 0033:0x7ff65e98e9a9 [ 448.187713][T13291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.187735][T13291] RSP: 002b:00007ff65f8bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.187761][T13291] RAX: ffffffffffffffda RBX: 00007ff65ebb5fa0 RCX: 00007ff65e98e9a9 [ 448.187777][T13291] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000005 [ 448.187799][T13291] RBP: 00007ff65f8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 448.187813][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.187828][T13291] R13: 0000000000000000 R14: 00007ff65ebb5fa0 R15: 00007ffc416b0b18 [ 448.187865][T13291] [ 448.545156][ T5906] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 448.553488][ T9] gspca_vc032x: Unknown sensor... [ 448.563142][ T9] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 448.583804][ T9] usb 6-1: USB disconnect, device number 35 [ 448.703098][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 448.714881][ T5906] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 448.722313][T13295] Can't find a SQUASHFS superblock on rnullb0 [ 448.735271][ T5906] usb 5-1: config 0 has no interface number 0 [ 448.741432][ T5906] usb 5-1: config 0 interface 184 has no altsetting 0 [ 448.780790][ T5906] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 448.793042][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.826893][ T5906] usb 5-1: Product: syz [ 448.827467][T13299] FAULT_INJECTION: forcing a failure. [ 448.827467][T13299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.831112][ T5906] usb 5-1: Manufacturer: syz [ 448.831133][ T5906] usb 5-1: SerialNumber: syz [ 448.861789][T13299] CPU: 1 UID: 0 PID: 13299 Comm: syz.3.2423 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 448.861817][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.861830][T13299] Call Trace: [ 448.861838][T13299] [ 448.861847][T13299] dump_stack_lvl+0x189/0x250 [ 448.861882][T13299] ? __pfx____ratelimit+0x10/0x10 [ 448.861913][T13299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.861943][T13299] ? __pfx__printk+0x10/0x10 [ 448.861987][T13299] should_fail_ex+0x414/0x560 [ 448.862020][T13299] _copy_to_user+0x31/0xb0 [ 448.862047][T13299] simple_read_from_buffer+0xe1/0x170 [ 448.862082][T13299] proc_fail_nth_read+0x1b3/0x220 [ 448.862109][T13299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.862136][T13299] ? rw_verify_area+0x2a6/0x4d0 [ 448.862161][T13299] ? __lock_acquire+0xab9/0xd20 [ 448.862183][T13299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.862207][T13299] vfs_read+0x1fd/0x980 [ 448.862231][T13299] ? fdget_pos+0x247/0x320 [ 448.862253][T13299] ? __pfx___mutex_lock+0x10/0x10 [ 448.862292][T13299] ? __pfx_vfs_read+0x10/0x10 [ 448.862320][T13299] ? __fget_files+0x2a/0x420 [ 448.862355][T13299] ? __fget_files+0x3a0/0x420 [ 448.862384][T13299] ? __fget_files+0x2a/0x420 [ 448.862424][T13299] ksys_read+0x145/0x250 [ 448.862451][T13299] ? __pfx_ksys_read+0x10/0x10 [ 448.862483][T13299] ? do_syscall_64+0xbe/0x3b0 [ 448.862517][T13299] do_syscall_64+0xfa/0x3b0 [ 448.862546][T13299] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.862573][T13299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.862594][T13299] ? clear_bhb_loop+0x60/0xb0 [ 448.862618][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.862638][T13299] RIP: 0033:0x7ff65e98d3bc [ 448.862657][T13299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.862675][T13299] RSP: 002b:00007ff65f8bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.862696][T13299] RAX: ffffffffffffffda RBX: 00007ff65ebb5fa0 RCX: 00007ff65e98d3bc [ 448.862711][T13299] RDX: 000000000000000f RSI: 00007ff65f8bc0a0 RDI: 0000000000000004 [ 448.862723][T13299] RBP: 00007ff65f8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 448.862736][T13299] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 448.862749][T13299] R13: 0000000000000000 R14: 00007ff65ebb5fa0 R15: 00007ffc416b0b18 [ 448.862780][T13299] [ 448.862923][ T5906] usb 5-1: config 0 descriptor?? [ 449.125143][ T5906] smsc75xx v1.0.0 [ 449.263286][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 449.357995][T13307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.445365][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 449.465312][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.479612][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 449.488719][ T9] usb 2-1: can't read configurations, error -71 [ 449.511005][T13307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.587932][T13307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.633685][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 449.675230][T13307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.778600][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.796553][ T1162] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.810079][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.822670][ T1107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.831335][ T10] usb 6-1: config 0 has no interfaces? [ 449.837578][ T10] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 449.846988][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.847747][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.871407][ T10] usb 6-1: config 0 descriptor?? [ 450.038469][T13316] input: syz1 as /devices/virtual/input/input45 [ 450.126721][ T5906] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 450.153168][ T5906] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.327755][ T5906] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 450.342347][ T5906] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 450.352756][ T5906] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 450.364254][ T5906] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 450.387771][ T5906] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 450.420132][ T5906] usb 5-1: USB disconnect, device number 80 [ 450.501889][T13330] FAULT_INJECTION: forcing a failure. [ 450.501889][T13330] name failslab, interval 1, probability 0, space 0, times 0 [ 450.516967][T13330] CPU: 0 UID: 0 PID: 13330 Comm: syz.3.2434 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 450.516998][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.517011][T13330] Call Trace: [ 450.517020][T13330] [ 450.517030][T13330] dump_stack_lvl+0x189/0x250 [ 450.517065][T13330] ? __pfx____ratelimit+0x10/0x10 [ 450.517097][T13330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.517128][T13330] ? __pfx__printk+0x10/0x10 [ 450.517165][T13330] ? __pfx___might_resched+0x10/0x10 [ 450.517191][T13330] ? fs_reclaim_acquire+0x7d/0x100 [ 450.517225][T13330] should_fail_ex+0x414/0x560 [ 450.517259][T13330] should_failslab+0xa8/0x100 [ 450.517287][T13330] __kmalloc_noprof+0xcb/0x4f0 [ 450.517310][T13330] ? iter_file_splice_write+0x1cb/0x1000 [ 450.517346][T13330] iter_file_splice_write+0x1cb/0x1000 [ 450.517407][T13330] ? __pfx_iter_file_splice_write+0x10/0x10 [ 450.517447][T13330] ? rcu_read_lock_any_held+0xb3/0x120 [ 450.517477][T13330] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 450.517508][T13330] ? ovl_real_file_path+0x145/0x310 [ 450.517537][T13330] backing_file_splice_write+0x3be/0x5e0 [ 450.517575][T13330] ovl_splice_write+0x3b7/0x4e0 [ 450.517606][T13330] ? __lock_acquire+0xab9/0xd20 [ 450.517636][T13330] ? __pfx_ovl_splice_write+0x10/0x10 [ 450.517670][T13330] ? __pfx_ovl_file_end_write+0x10/0x10 [ 450.517693][T13330] ? rcu_read_lock_any_held+0xb3/0x120 [ 450.517746][T13330] ? __pfx_ovl_splice_write+0x10/0x10 [ 450.517781][T13330] direct_splice_actor+0xfe/0x160 [ 450.517816][T13330] splice_direct_to_actor+0x5a8/0xcc0 [ 450.517870][T13330] ? __pfx_direct_splice_actor+0x10/0x10 [ 450.517901][T13330] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 450.517945][T13330] do_splice_direct+0x181/0x270 [ 450.517979][T13330] ? __pfx_do_splice_direct+0x10/0x10 [ 450.518011][T13330] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 450.518052][T13330] ? rw_verify_area+0x255/0x4d0 [ 450.518084][T13330] do_sendfile+0x4da/0x7e0 [ 450.518116][T13330] ? __pfx_do_sendfile+0x10/0x10 [ 450.518161][T13330] __se_sys_sendfile64+0xd9/0x190 [ 450.518198][T13330] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 450.518228][T13330] ? rcu_is_watching+0x15/0xb0 [ 450.518262][T13330] ? do_syscall_64+0xbe/0x3b0 [ 450.518299][T13330] do_syscall_64+0xfa/0x3b0 [ 450.518329][T13330] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.518359][T13330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.518381][T13330] ? clear_bhb_loop+0x60/0xb0 [ 450.518408][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.518430][T13330] RIP: 0033:0x7ff65e98e9a9 [ 450.518450][T13330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.518468][T13330] RSP: 002b:00007ff65f8bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 450.518492][T13330] RAX: ffffffffffffffda RBX: 00007ff65ebb5fa0 RCX: 00007ff65e98e9a9 [ 450.518508][T13330] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 450.518522][T13330] RBP: 00007ff65f8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 450.518535][T13330] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 450.518548][T13330] R13: 0000000000000000 R14: 00007ff65ebb5fa0 R15: 00007ffc416b0b18 [ 450.518581][T13330] [ 451.235503][T13342] FAULT_INJECTION: forcing a failure. [ 451.235503][T13342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.301352][T13342] CPU: 1 UID: 0 PID: 13342 Comm: syz.3.2437 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 451.301383][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.301397][T13342] Call Trace: [ 451.301405][T13342] [ 451.301415][T13342] dump_stack_lvl+0x189/0x250 [ 451.301448][T13342] ? __pfx____ratelimit+0x10/0x10 [ 451.301496][T13342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.301526][T13342] ? __pfx__printk+0x10/0x10 [ 451.301558][T13342] ? fs_reclaim_acquire+0x7d/0x100 [ 451.301595][T13342] should_fail_ex+0x414/0x560 [ 451.301627][T13342] prepare_alloc_pages+0x213/0x610 [ 451.301664][T13342] __alloc_frozen_pages_noprof+0x123/0x370 [ 451.301698][T13342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.301737][T13342] ? policy_nodemask+0x27c/0x720 [ 451.301758][T13342] ? __lock_acquire+0xab9/0xd20 [ 451.301788][T13342] alloc_pages_mpol+0x232/0x4a0 [ 451.301818][T13342] vma_alloc_folio_noprof+0xe4/0x200 [ 451.301844][T13342] ? page_table_check_set+0x18d/0x730 [ 451.301869][T13342] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 451.301914][T13342] folio_prealloc+0x30/0x180 [ 451.301942][T13342] __handle_mm_fault+0x2ab9/0x5440 [ 451.301982][T13342] ? __pfx___handle_mm_fault+0x10/0x10 [ 451.302020][T13342] ? follow_page_pte+0x7ef/0x13e0 [ 451.302053][T13342] handle_mm_fault+0x40a/0x8e0 [ 451.302087][T13342] __get_user_pages+0x1699/0x2ce0 [ 451.302147][T13342] populate_vma_page_range+0x29f/0x3a0 [ 451.302172][T13342] ? __pfx_populate_vma_page_range+0x10/0x10 [ 451.302190][T13342] ? apply_vma_lock_flags+0x344/0x3c0 [ 451.302227][T13342] ? down_read+0x1ad/0x2e0 [ 451.302250][T13342] __mm_populate+0x24c/0x380 [ 451.302273][T13342] ? __pfx___mm_populate+0x10/0x10 [ 451.302296][T13342] ? up_write+0x1c4/0x420 [ 451.302332][T13342] do_mlock+0x625/0x740 [ 451.302372][T13342] ? __pfx_do_mlock+0x10/0x10 [ 451.302403][T13342] ? fput+0xa0/0xd0 [ 451.302425][T13342] ? ksys_write+0x22a/0x250 [ 451.302455][T13342] ? __pfx_ksys_write+0x10/0x10 [ 451.302479][T13342] ? rcu_is_watching+0x15/0xb0 [ 451.302516][T13342] __x64_sys_mlock+0x60/0x70 [ 451.302545][T13342] do_syscall_64+0xfa/0x3b0 [ 451.302574][T13342] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.302602][T13342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.302622][T13342] ? clear_bhb_loop+0x60/0xb0 [ 451.302648][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.302670][T13342] RIP: 0033:0x7ff65e98e9a9 [ 451.302688][T13342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.302705][T13342] RSP: 002b:00007ff65f8bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 451.302728][T13342] RAX: ffffffffffffffda RBX: 00007ff65ebb5fa0 RCX: 00007ff65e98e9a9 [ 451.302744][T13342] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 451.302758][T13342] RBP: 00007ff65f8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 451.302771][T13342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.302783][T13342] R13: 0000000000000000 R14: 00007ff65ebb5fa0 R15: 00007ffc416b0b18 [ 451.302820][T13342] [ 452.384516][ T5937] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 452.419288][ T5913] usb 6-1: USB disconnect, device number 36 [ 452.543063][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 452.551233][ T5937] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 452.563092][ T5937] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 452.572079][ T5937] usb 4-1: config 1 has no interface number 1 [ 452.581192][ T5937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.590384][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.598536][ T5937] usb 4-1: Product: 뚋㧋࿍䌵ሾ걈듈䴉㚘劣康㺸࠲䏮NJ臣糆貛愱ᴜ濃୆ڳ䩓䖜璟㒽 [ 452.619170][ T5937] usb 4-1: Manufacturer: z⿐첟મ殲웅ꓨ淡帾㛍ꌨ捹컡趎 [ 452.627905][ T5937] usb 4-1: SerialNumber: 켓ᙱ亏滶䘲㖛䕊墫ീ狨ꘪ毄さ칗冈ࢄ噭冝쯨效옸ᴆ뙨孄䋺磉愧톍줾褶쐋衫̆챇껴Ⴋ者鴤杗槝ᩪ燞ꑠ淟蝩粹腸懲ﾛ鼞븼⍶㴆释桒葀鯉췹ꆵ忰෌೿볫㎍꧷ඞ醺ਕ [ 452.793109][ T5913] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 452.863139][T13374] block nbd1: Device being setup by another task [ 452.877835][T13372] block nbd1: shutting down sockets [ 452.891281][ T5937] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 452.945381][ T5937] usb 4-1: USB disconnect, device number 79 [ 452.963513][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 452.976157][ T5913] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 452.996523][ T5913] usb 6-1: config 0 has no interface number 0 [ 453.016320][ T5913] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.031206][ T5913] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 453.045841][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.056520][ T5913] usb 6-1: Product: syz [ 453.060729][ T5913] usb 6-1: Manufacturer: syz [ 453.067087][ T5913] usb 6-1: SerialNumber: syz [ 453.080035][ T5913] usb 6-1: config 0 descriptor?? [ 453.099757][ T5913] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 453.110320][ T5913] em28xx 6-1:0.132: Video interface 132 found: [ 453.125323][T13376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.215328][T13376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.305126][T13376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.391598][T13376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.491013][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.501149][ T5913] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 453.512901][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.533562][ T1107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.571839][ T1107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.901339][T13393] loop4: detected capacity change from 0 to 2560 [ 453.919302][T10695] buffer_io_error: 5 callbacks suppressed [ 453.919320][T10695] Buffer I/O error on dev loop4, logical block 0, async page read [ 453.939524][T10695] Buffer I/O error on dev loop4, logical block 0, async page read [ 453.949920][T10695] Buffer I/O error on dev loop4, logical block 0, async page read [ 453.959344][T10695] Buffer I/O error on dev loop4, logical block 0, async page read [ 453.973601][T10695] Buffer I/O error on dev loop4, logical block 0, async page read [ 454.094481][ T5937] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 454.286104][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.299333][ T5937] usb 2-1: config 0 has no interfaces? [ 454.308496][ T5937] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 454.322486][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.336900][ T5937] usb 2-1: config 0 descriptor?? [ 454.543592][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 454.673109][ T9] usb 5-1: device descriptor read/64, error -71 [ 454.746288][ T5913] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 454.759203][ T5913] em28xx 6-1:0.132: board has no eeprom [ 454.806872][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2459'. [ 454.823190][ T5913] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 454.831232][ T5913] em28xx 6-1:0.132: analog set to bulk mode. [ 454.838759][ T893] em28xx 6-1:0.132: Registering V4L2 extension [ 454.874232][ T5913] usb 6-1: USB disconnect, device number 37 [ 454.881627][ T5913] em28xx 6-1:0.132: Disconnecting em28xx [ 454.910817][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2460'. [ 454.913898][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 454.989582][ T893] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 455.002879][ T893] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 455.013672][ T893] em28xx 6-1:0.132: No AC97 audio processor [ 455.023051][ T893] usb 6-1: Decoder not found [ 455.027682][ T893] em28xx 6-1:0.132: failed to create media graph [ 455.034463][ T893] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 455.042860][ T893] em28xx 6-1:0.132: Remote control support is not available for this card. [ 455.053343][ T5913] em28xx 6-1:0.132: Closing input extension [ 455.060572][ T9] usb 5-1: device descriptor read/64, error -71 [ 455.071022][ T5913] em28xx 6-1:0.132: Freeing device [ 455.173728][ T9] usb usb5-port1: attempt power cycle [ 455.514311][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 455.537233][ T9] usb 5-1: device descriptor read/8, error -71 [ 455.783229][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 455.804315][ T9] usb 5-1: device descriptor read/8, error -71 [ 455.913639][ T9] usb usb5-port1: unable to enumerate USB device [ 456.905406][ T5937] usb 2-1: USB disconnect, device number 61 [ 457.215948][T13444] FAULT_INJECTION: forcing a failure. [ 457.215948][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 457.229338][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.1.2469 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 457.229367][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.229380][T13444] Call Trace: [ 457.229390][T13444] [ 457.229399][T13444] dump_stack_lvl+0x189/0x250 [ 457.229433][T13444] ? __pfx____ratelimit+0x10/0x10 [ 457.229465][T13444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.229495][T13444] ? __pfx__printk+0x10/0x10 [ 457.229529][T13444] ? __pfx___might_resched+0x10/0x10 [ 457.229556][T13444] ? fs_reclaim_acquire+0x7d/0x100 [ 457.229589][T13444] should_fail_ex+0x414/0x560 [ 457.229621][T13444] should_failslab+0xa8/0x100 [ 457.229658][T13444] __kmalloc_noprof+0xcb/0x4f0 [ 457.229682][T13444] ? tomoyo_encode+0x28b/0x550 [ 457.229707][T13444] tomoyo_encode+0x28b/0x550 [ 457.229733][T13444] tomoyo_realpath_from_path+0x58d/0x5d0 [ 457.229756][T13444] ? tomoyo_domain+0xd9/0x130 [ 457.229783][T13444] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 457.229811][T13444] tomoyo_path_number_perm+0x1e8/0x5a0 [ 457.229843][T13444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 457.229890][T13444] ? __lock_acquire+0xab9/0xd20 [ 457.229937][T13444] ? __fget_files+0x2a/0x420 [ 457.229994][T13444] ? __fget_files+0x2a/0x420 [ 457.230024][T13444] ? __fget_files+0x3a0/0x420 [ 457.230054][T13444] ? __fget_files+0x2a/0x420 [ 457.230090][T13444] security_file_ioctl+0xcb/0x2d0 [ 457.230119][T13444] __se_sys_ioctl+0x47/0x170 [ 457.230148][T13444] do_syscall_64+0xfa/0x3b0 [ 457.230178][T13444] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.230208][T13444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.230236][T13444] ? clear_bhb_loop+0x60/0xb0 [ 457.230263][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.230283][T13444] RIP: 0033:0x7f52c738e9a9 [ 457.230302][T13444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.230321][T13444] RSP: 002b:00007f52c815e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.230344][T13444] RAX: ffffffffffffffda RBX: 00007f52c75b5fa0 RCX: 00007f52c738e9a9 [ 457.230360][T13444] RDX: 0000200000000380 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 457.230375][T13444] RBP: 00007f52c815e090 R08: 0000000000000000 R09: 0000000000000000 [ 457.230388][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.230401][T13444] R13: 0000000000000000 R14: 00007f52c75b5fa0 R15: 00007ffd0f8be978 [ 457.230434][T13444] [ 457.230457][T13444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.790597][T13461] FAULT_INJECTION: forcing a failure. [ 457.790597][T13461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.806361][T13461] CPU: 1 UID: 0 PID: 13461 Comm: syz.1.2475 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 457.806391][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.806405][T13461] Call Trace: [ 457.806414][T13461] [ 457.806424][T13461] dump_stack_lvl+0x189/0x250 [ 457.806459][T13461] ? __pfx____ratelimit+0x10/0x10 [ 457.806490][T13461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.806519][T13461] ? __pfx__printk+0x10/0x10 [ 457.806563][T13461] should_fail_ex+0x414/0x560 [ 457.806595][T13461] __kvm_read_guest_page+0x18d/0x240 [ 457.806631][T13461] kvm_vcpu_read_guest+0x75/0x150 [ 457.806667][T13461] read_emulate+0x2c/0x50 [ 457.806697][T13461] emulator_read_write_onepage+0x6a3/0xa10 [ 457.806738][T13461] emulator_read_write+0x1c9/0x560 [ 457.806772][T13461] ? __pfx_emulator_read_emulated+0x10/0x10 [ 457.806805][T13461] segmented_read+0x1b7/0x3f0 [ 457.806845][T13461] x86_emulate_insn+0x315/0x3bf0 [ 457.806884][T13461] ? rcu_is_watching+0x15/0xb0 [ 457.806916][T13461] x86_emulate_instruction+0xd1a/0x1ef0 [ 457.806964][T13461] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 457.806996][T13461] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 457.807029][T13461] ? __pfx_kvm_fast_pio+0x10/0x10 [ 457.807065][T13461] ? __lock_acquire+0xab9/0xd20 [ 457.807094][T13461] ? handle_io+0x1e3/0x270 [ 457.807113][T13461] ? __pfx_handle_io+0x10/0x10 [ 457.807131][T13461] vmx_handle_exit+0x1090/0x18a0 [ 457.807171][T13461] ? vcpu_run+0x35f2/0x6fa0 [ 457.807206][T13461] vcpu_run+0x434f/0x6fa0 [ 457.807248][T13461] ? vcpu_run+0x35f2/0x6fa0 [ 457.807324][T13461] ? __pfx_vcpu_run+0x10/0x10 [ 457.807351][T13461] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 457.807391][T13461] ? rcu_is_watching+0x15/0xb0 [ 457.807427][T13461] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 457.807464][T13461] ? __mutex_trylock_common+0x153/0x260 [ 457.807497][T13461] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 457.807528][T13461] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 457.807562][T13461] ? rcu_is_watching+0x15/0xb0 [ 457.807588][T13461] ? trace_contention_end+0x39/0x120 [ 457.807617][T13461] ? __mutex_lock+0x335/0x1360 [ 457.807655][T13461] ? kasan_quarantine_put+0xdd/0x220 [ 457.807679][T13461] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 457.807714][T13461] ? __pfx___mutex_lock+0x10/0x10 [ 457.807747][T13461] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 457.807780][T13461] ? do_vfs_ioctl+0xbe8/0x1430 [ 457.807808][T13461] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 457.807839][T13461] kvm_vcpu_ioctl+0x95c/0xe90 [ 457.807876][T13461] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 457.807905][T13461] ? __lock_acquire+0xab9/0xd20 [ 457.807951][T13461] ? __fget_files+0x2a/0x420 [ 457.807985][T13461] ? __fget_files+0x2a/0x420 [ 457.808015][T13461] ? __fget_files+0x3a0/0x420 [ 457.808045][T13461] ? __fget_files+0x2a/0x420 [ 457.808080][T13461] ? bpf_lsm_file_ioctl+0x9/0x20 [ 457.808102][T13461] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 457.808133][T13461] __se_sys_ioctl+0xf9/0x170 [ 457.808162][T13461] do_syscall_64+0xfa/0x3b0 [ 457.808192][T13461] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.808222][T13461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.808243][T13461] ? clear_bhb_loop+0x60/0xb0 [ 457.808275][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.808295][T13461] RIP: 0033:0x7f52c738e9a9 [ 457.808315][T13461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.808334][T13461] RSP: 002b:00007f52c815e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.808357][T13461] RAX: ffffffffffffffda RBX: 00007f52c75b5fa0 RCX: 00007f52c738e9a9 [ 457.808373][T13461] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 457.808386][T13461] RBP: 00007f52c815e090 R08: 0000000000000000 R09: 0000000000000000 [ 457.808400][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.808412][T13461] R13: 0000000000000000 R14: 00007f52c75b5fa0 R15: 00007ffd0f8be978 [ 457.808446][T13461] [ 458.201365][ T5906] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 458.293567][T13471] tmpfs: Bad value for 'nr_blocks' [ 458.367005][ T5906] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 458.385828][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.450960][ T5906] usb 6-1: config 0 descriptor?? [ 458.686009][ T5906] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 459.076394][ T5913] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 459.108349][T13491] /dev/rnullb0: Can't open blockdev [ 459.235891][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.259155][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.291412][ T5913] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 459.303500][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 459.323651][ T5913] usb 4-1: SerialNumber: syz [ 459.344108][T13495] batadv_slave_1: entered promiscuous mode [ 459.487540][T13494] batadv_slave_1: left promiscuous mode [ 459.587627][ T5913] usb 4-1: 0:2 : does not exist [ 459.653770][ T5913] usb 4-1: USB disconnect, device number 80 [ 459.709401][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.824686][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 459.949803][ T5906] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 459.960079][ T5906] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 459.970772][ T5906] asix 6-1:0.0: probe with driver asix failed with error -71 [ 459.982844][ T5906] usb 6-1: USB disconnect, device number 38 [ 459.997803][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 460.010793][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 460.022699][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 460.032999][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 460.042057][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.054882][T13499] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 460.066516][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.144636][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 460.232134][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 460.313309][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 460.327040][ T9] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 460.335455][ T9] usb 2-1: config 0 has no interface number 0 [ 460.341587][ T9] usb 2-1: config 0 interface 69 has no altsetting 0 [ 460.358809][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 2.bf [ 460.368098][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.377149][ T9] usb 2-1: Product: syz [ 460.381365][ T9] usb 2-1: Manufacturer: syz [ 460.386365][ T9] usb 2-1: SerialNumber: syz [ 460.394475][ T9] usb 2-1: config 0 descriptor?? [ 460.605056][T13504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.620827][T13504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.647407][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 460.655126][ T5913] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 460.676974][ T9] gspca_sn9c2028: read1 error -71 [ 460.687754][ T9] gspca_sn9c2028: read1 error -71 [ 460.695633][ T9] gspca_sn9c2028: read1 error -71 [ 460.712479][ T9] sn9c2028 2-1:0.69: probe with driver sn9c2028 failed with error -71 [ 460.729984][ T9] usb 2-1: USB disconnect, device number 62 [ 460.842186][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2499'. [ 460.853126][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 460.860815][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.874123][ T5913] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 460.884764][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.914597][ T5913] usb 4-1: config 0 descriptor?? [ 461.169634][ T5913] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 461.377156][ T9] usb 4-1: USB disconnect, device number 81 [ 461.377974][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 461.426126][T13531] block device autoloading is deprecated and will be removed. [ 461.530009][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 461.593166][ T5913] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 461.723464][ T5913] usb 6-1: device descriptor read/64, error -71 [ 461.943786][ T5906] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 461.963829][ T5913] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 462.093199][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 462.103338][ T5913] usb 6-1: device descriptor read/64, error -71 [ 462.110796][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.122781][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.135374][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 462.144541][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.166864][ T5906] usb 2-1: config 0 descriptor?? [ 462.182527][ T5906] hub 2-1:0.0: USB hub found [ 462.213444][ T5913] usb usb6-port1: attempt power cycle [ 462.383794][ T5906] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 462.427201][T13546] block device autoloading is deprecated and will be removed. [ 462.553341][ T5913] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 462.646601][T10842] usb 5-1: USB disconnect, device number 85 [ 462.653092][ T5913] usb 6-1: device descriptor read/8, error -71 [ 462.734391][T13553] netlink: 'syz.3.2511': attribute type 10 has an invalid length. [ 462.758070][T13553] team0: Cannot enslave team device to itself [ 462.826849][ T5906] hid-generic 0003:046D:C31C.0017: item fetching failed at offset 0/1 [ 462.853199][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2513'. [ 462.854057][ T5906] hid-generic 0003:046D:C31C.0017: probe with driver hid-generic failed with error -22 [ 462.914017][ T5913] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 462.954614][ T5913] usb 6-1: device descriptor read/8, error -71 [ 462.976282][T13559] Can't find a SQUASHFS superblock on rnullb0 [ 463.063913][ T5913] usb usb6-port1: unable to enumerate USB device [ 463.140014][ T983] usb 2-1: USB disconnect, device number 63 [ 463.923236][ T983] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 464.076524][ T983] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 464.096455][ T983] usb 2-1: config 0 has no interface number 0 [ 464.107524][ T983] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 464.147142][ T983] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 464.160399][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.170400][ T983] usb 2-1: Product: syz [ 464.177389][ T983] usb 2-1: Manufacturer: syz [ 464.182167][ T983] usb 2-1: SerialNumber: syz [ 464.199751][ T983] usb 2-1: config 0 descriptor?? [ 464.207406][T13572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.226858][ T983] ums-karma 2-1:0.46: USB Mass Storage device detected [ 464.286762][ T983] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5 [ 464.461966][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.471024][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.480225][T13572] vxfs: WRONG superblock magic 00000000 at 1 [ 464.486619][T13572] vxfs: WRONG superblock magic 00000000 at 8 [ 464.492842][T13572] vxfs: can't find superblock. [ 464.561729][ T5906] usb 2-1: USB disconnect, device number 64 [ 464.733419][T13588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2525'. [ 464.769638][T13584] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2525'. [ 464.798010][T13584] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2525'. [ 465.033132][ T5913] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 465.183480][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 465.190333][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.197405][T13607] binder: 13606:13607 ioctl c0306201 2000000000c0 returned -14 [ 465.203721][ T5913] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 465.220689][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.229647][ T5906] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 465.243676][ T5913] usb 6-1: config 0 descriptor?? [ 465.376936][ T983] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 465.395135][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 465.407619][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 465.420018][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 465.439341][ T5906] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 465.454273][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.462645][ T5906] usb 4-1: Product: syz [ 465.471425][ T5906] usb 4-1: Manufacturer: syz [ 465.478003][ T5906] usb 4-1: SerialNumber: syz [ 465.492384][ T5906] usb 4-1: config 0 descriptor?? [ 465.518115][ T5906] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 465.546424][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 465.568058][ T983] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 465.579266][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.592500][ T983] usb 5-1: Product: syz [ 465.600617][ T983] usb 5-1: Manufacturer: syz [ 465.605527][ T983] usb 5-1: SerialNumber: syz [ 465.713475][T13600] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 465.720673][T13600] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 465.731874][ T5906] usb 4-1: USB disconnect, device number 82 [ 465.875902][ T5913] usb 6-1: USB disconnect, device number 43 [ 466.202542][ T983] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 466.212325][ T983] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 466.228537][ T983] usb 5-1: USB disconnect, device number 86 [ 466.299997][T13618] 9pnet_fd: Insufficient options for proto=fd [ 466.309468][T13618] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 466.316667][T13618] VFS: Can't find a romfs filesystem on dev rnullb0. [ 466.316667][T13618] [ 466.465551][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2538'. [ 466.581796][T13632] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 466.589583][T13632] UDF-fs: Scanning with blocksize 4096 failed [ 466.696532][T13634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2542'. [ 466.743973][ T983] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 466.816074][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 466.905651][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.937395][ T983] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 466.950396][ T983] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 466.962574][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.976512][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 466.994844][ T24] usb 6-1: config index 0 descriptor too short (expected 4096, got 18) [ 467.007939][ T983] usb 2-1: config 0 descriptor?? [ 467.016218][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 467.028110][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.041892][ T24] usb 6-1: Product: syz [ 467.046568][ T24] usb 6-1: Manufacturer: syz [ 467.051394][ T24] usb 6-1: SerialNumber: syz [ 467.065190][ T24] usb 6-1: config 0 descriptor?? [ 467.081922][ T24] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 467.104870][T13640] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 467.278011][ T983] Bluetooth: Can't get state to change to load configuration err [ 467.300671][ T24] pwc: Failed to set LED on/off time (-71) [ 467.313150][ T983] Bluetooth: Loading sysconfig file failed [ 467.319260][ T983] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 467.328915][ T24] pwc: send_video_command error -71 [ 467.340478][ T983] usb 2-1: USB disconnect, device number 65 [ 467.346740][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 467.362084][ T24] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 467.380710][ T24] usb 6-1: USB disconnect, device number 44 [ 467.503095][ T5913] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 467.532716][T13658] binder: 13657:13658 ioctl c0306201 200000000080 returned -14 [ 467.643466][ T5913] usb 5-1: device descriptor read/64, error -71 [ 467.893137][ T5913] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 467.917851][T13668] hfs: can't find a HFS filesystem on dev rnullb0 [ 468.023108][ T5913] usb 5-1: device descriptor read/64, error -71 [ 468.064538][T13671] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 468.071685][T13671] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 468.136536][ T5913] usb usb5-port1: attempt power cycle [ 468.444885][T13685] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.483408][ T5913] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 468.519382][ T5913] usb 5-1: device descriptor read/8, error -71 [ 468.668700][T13691] FAULT_INJECTION: forcing a failure. [ 468.668700][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 468.696581][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.3.2564 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 468.696612][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.696625][T13691] Call Trace: [ 468.696634][T13691] [ 468.696643][T13691] dump_stack_lvl+0x189/0x250 [ 468.696678][T13691] ? __pfx____ratelimit+0x10/0x10 [ 468.696709][T13691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.696751][T13691] ? __pfx__printk+0x10/0x10 [ 468.696786][T13691] ? __pfx___might_resched+0x10/0x10 [ 468.696811][T13691] ? fs_reclaim_acquire+0x7d/0x100 [ 468.696843][T13691] should_fail_ex+0x414/0x560 [ 468.696875][T13691] should_failslab+0xa8/0x100 [ 468.696902][T13691] __kmalloc_noprof+0xcb/0x4f0 [ 468.696924][T13691] ? fuse_dev_do_write+0x1a92/0x4da0 [ 468.696952][T13691] fuse_dev_do_write+0x1a92/0x4da0 [ 468.696985][T13691] ? __lock_acquire+0xab9/0xd20 [ 468.697019][T13691] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 468.697050][T13691] ? aa_file_perm+0x13e/0x11b0 [ 468.697072][T13691] ? aa_file_perm+0x13e/0x11b0 [ 468.697093][T13691] ? aa_file_perm+0x3ed/0x11b0 [ 468.697115][T13691] ? _parse_integer_limit+0x1ae/0x1f0 [ 468.697153][T13691] ? __lock_acquire+0xab9/0xd20 [ 468.697179][T13691] ? __pfx_aa_file_perm+0x10/0x10 [ 468.697217][T13691] fuse_dev_write+0x146/0x1d0 [ 468.697238][T13691] ? __pfx_fuse_dev_write+0x10/0x10 [ 468.697267][T13691] ? bpf_lsm_file_permission+0x9/0x20 [ 468.697286][T13691] ? security_file_permission+0x75/0x290 [ 468.697322][T13691] vfs_write+0x54b/0xa90 [ 468.697354][T13691] ? __pfx_fuse_dev_write+0x10/0x10 [ 468.697376][T13691] ? __pfx_vfs_write+0x10/0x10 [ 468.697414][T13691] ? __fget_files+0x2a/0x420 [ 468.697455][T13691] ksys_write+0x145/0x250 [ 468.697485][T13691] ? __pfx_ksys_write+0x10/0x10 [ 468.697509][T13691] ? rcu_is_watching+0x15/0xb0 [ 468.697542][T13691] ? do_syscall_64+0xbe/0x3b0 [ 468.697577][T13691] do_syscall_64+0xfa/0x3b0 [ 468.697606][T13691] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.697636][T13691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.697656][T13691] ? clear_bhb_loop+0x60/0xb0 [ 468.697682][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.697702][T13691] RIP: 0033:0x7ff65e98e9a9 [ 468.697721][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.697745][T13691] RSP: 002b:00007ff65f89b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.697768][T13691] RAX: ffffffffffffffda RBX: 00007ff65ebb6080 RCX: 00007ff65e98e9a9 [ 468.697785][T13691] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 468.697798][T13691] RBP: 00007ff65f89b090 R08: 0000000000000000 R09: 0000000000000000 [ 468.697812][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.697824][T13691] R13: 0000000000000000 R14: 00007ff65ebb6080 R15: 00007ffc416b0b18 [ 468.697857][T13691] [ 469.053063][ T5913] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 469.076869][ T5913] usb 5-1: device descriptor read/8, error -71 [ 469.193464][ T5913] usb usb5-port1: unable to enumerate USB device [ 469.513081][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 469.663089][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 469.674284][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.685647][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.699219][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.709280][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.719362][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.741789][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.751229][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.759837][ T24] usb 6-1: Manufacturer: syz [ 469.769744][ T24] usb 6-1: config 0 descriptor?? [ 469.793249][ T5913] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 469.945223][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.956548][ T10] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 469.964480][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.974527][ T5913] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 469.984887][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.006485][ T5913] usb 4-1: config 0 descriptor?? [ 470.063210][ T24] rc_core: IR keymap rc-hauppauge not found [ 470.069196][ T24] Registered IR keymap rc-empty [ 470.075002][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.093308][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.116014][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 470.130860][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 470.148724][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.158169][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.166868][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 470.175093][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.179725][ T10] usb 2-1: config 6 has an invalid interface number: 150 but max is 0 [ 470.190812][ T10] usb 2-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 470.193287][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.200990][ T10] usb 2-1: config 6 has no interface number 0 [ 470.214565][ T10] usb 2-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 470.225797][ T10] usb 2-1: config 6 interface 150 has no altsetting 0 [ 470.239299][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76 [ 470.248480][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.257339][ T10] usb 2-1: Product: syz [ 470.261577][ T10] usb 2-1: Manufacturer: syz [ 470.266327][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.277367][ T10] usb 2-1: SerialNumber: syz [ 470.283290][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.313386][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.337989][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.386313][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.413163][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.433209][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 470.453649][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.459118][ T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 470.466450][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.477375][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.481954][ T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 470.485330][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.507475][ T24] usb 6-1: USB disconnect, device number 45 [ 470.519859][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.535136][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.542446][ T5913] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 470.565987][ T10] usb 2-1: USB disconnect, device number 66 [ 470.608537][ T5913] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 470.644890][T13713] netlink: 'syz.3.2574': attribute type 4 has an invalid length. [ 470.653172][T13713] netlink: 'syz.3.2574': attribute type 8 has an invalid length. [ 470.661676][T13713] netlink: 'syz.3.2574': attribute type 9 has an invalid length. [ 470.677591][T13713] netlink: 'syz.3.2574': attribute type 10 has an invalid length. [ 470.691258][T13713] netlink: 'syz.3.2574': attribute type 11 has an invalid length. [ 470.699682][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 470.931588][ T5913] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 470.946947][ T5913] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 470.957307][ T5913] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 470.969441][ T5913] usb 4-1: USB disconnect, device number 83 [ 471.333098][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 471.373072][ T5937] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 471.483068][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 471.500634][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.528825][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.544229][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 471.557806][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.558951][T13743] exFAT-fs (rnullb0): invalid boot record signature [ 471.569478][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.584244][T13742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 471.592577][T13743] exFAT-fs (rnullb0): failed to read boot sector [ 471.594988][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.599824][T13742] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 471.609144][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.616093][T13743] exFAT-fs (rnullb0): failed to recognize exfat type [ 471.630484][ T5937] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.640300][T13742] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 471.649591][ T24] usb 2-1: Manufacturer: syz [ 471.658364][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.662116][T13742] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 471.674796][ T24] usb 2-1: config 0 descriptor?? [ 471.681170][ T5937] usb 6-1: config 0 descriptor?? [ 471.692051][T13742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 471.704271][T13742] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 471.711027][T13742] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 471.719576][ T5937] hub 6-1:0.0: USB hub found [ 471.731074][T13742] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 471.738004][T13742] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 471.744893][T13742] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 471.894136][T13736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.904816][T13736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.905384][ T5935] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 471.920731][ T10] usb 2-1: USB disconnect, device number 67 [ 471.920956][ T5937] hub 6-1:0.0: 1 port detected [ 472.053141][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 472.103321][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 472.110310][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.120859][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.140545][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.150889][ T5935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.161316][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.177357][ T5935] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.186529][ T5935] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.194707][ T24] usb 5-1: device descriptor read/64, error -71 [ 472.202119][ T5935] usb 4-1: Manufacturer: syz [ 472.210066][ T5935] usb 4-1: config 0 descriptor?? [ 472.433218][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 472.493329][ T5935] rc_core: IR keymap rc-hauppauge not found [ 472.499324][ T5935] Registered IR keymap rc-empty [ 472.512642][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.536401][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.556425][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.574420][ T24] usb 5-1: device descriptor read/64, error -71 [ 472.579245][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.582790][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 472.601270][ T5937] hub 6-1:0.0: activate --> -90 [ 472.615493][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 472.628447][T13742] netlink: 'syz.3.2585': attribute type 1 has an invalid length. [ 472.638432][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.639598][T13742] netlink: 'syz.3.2585': attribute type 4 has an invalid length. [ 472.660355][T13742] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2585'. [ 472.671545][T13754] /dev/sg0: Can't lookup blockdev [ 472.677921][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.703259][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.713797][ T24] usb usb5-port1: attempt power cycle [ 472.737942][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.780140][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.803277][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.063134][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 473.273153][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.644735][ T5937] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 473.758869][ T24] usb 5-1: device descriptor read/8, error -71 [ 474.043898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.052889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.061880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.070917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.080290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.089794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.098818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.107809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.116781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.193279][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.223137][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.253137][ T5935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 474.294337][ T5935] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 474.304325][ T5935] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 474.330534][T13766] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 474.355134][T13766] syz.1.2590: attempt to access beyond end of device [ 474.355134][T13766] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 474.433355][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 474.453786][T10842] usb 6-1: USB disconnect, device number 46 [ 474.467866][ T24] usb 5-1: device descriptor read/8, error -71 [ 474.572379][T10842] usb 4-1: USB disconnect, device number 84 [ 474.576034][T13772] sp0: Synchronizing with TNC [ 474.586951][ T1107] [ 474.589302][ T1107] ===================================================== [ 474.596346][ T1107] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 474.603840][ T1107] 6.16.0-rc6-next-20250718-syzkaller #0 Not tainted [ 474.610502][ T1107] ----------------------------------------------------- [ 474.617452][ T1107] kworker/u8:6/1107 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 474.625277][ T1107] ffffffff8f10e598 (disc_data_lock#2){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 474.634988][ T1107] [ 474.634988][ T1107] and this task is already holding: [ 474.642354][ T1107] ffffffff9a2700d8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 474.651702][ T1107] which would create a new lock dependency: [ 474.657617][ T1107] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 474.665477][ T1107] [ 474.665477][ T1107] but this new dependency connects a HARDIRQ-irq-safe lock: [ 474.674934][ T1107] (&port_lock_key){-.-.}-{3:3} [ 474.674961][ T1107] [ 474.674961][ T1107] ... which became HARDIRQ-irq-safe at: [ 474.687689][ T1107] lock_acquire+0x120/0x360 [ 474.692302][ T1107] _raw_spin_lock_irqsave+0xa7/0xf0 [ 474.697597][ T1107] serial8250_handle_irq+0x6b/0xbb0 [ 474.702975][ T1107] serial8250_default_handle_irq+0xbf/0x1e0 [ 474.709053][ T1107] serial8250_interrupt+0x8d/0x160 [ 474.714265][ T1107] __handle_irq_event_percpu+0x28c/0x980 [ 474.720004][ T1107] handle_irq_event+0x8b/0x1e0 [ 474.724887][ T1107] handle_edge_irq+0x267/0x9e0 [ 474.729745][ T1107] __common_interrupt+0x143/0x250 [ 474.734861][ T1107] common_interrupt+0xb6/0xe0 [ 474.739650][ T1107] asm_common_interrupt+0x26/0x40 [ 474.744764][ T1107] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 474.750579][ T1107] uart_port_unlock_deref+0x111/0x2f0 [ 474.756073][ T1107] uart_write+0xe8/0x130 [ 474.760414][ T1107] n_tty_write+0xd29/0x1200 [ 474.765008][ T1107] file_tty_write+0x551/0xa20 [ 474.769797][ T1107] vfs_write+0x54b/0xa90 [ 474.774137][ T1107] ksys_write+0x145/0x250 [ 474.778560][ T1107] do_syscall_64+0xfa/0x3b0 [ 474.783161][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.789140][ T1107] [ 474.789140][ T1107] to a HARDIRQ-irq-unsafe lock: [ 474.796156][ T1107] (disc_data_lock#2){.+.+}-{3:3} [ 474.796189][ T1107] [ 474.796189][ T1107] ... which became HARDIRQ-irq-unsafe at: [ 474.809091][ T1107] ... [ 474.809099][ T1107] lock_acquire+0x120/0x360 [ 474.816267][ T1107] _raw_read_lock+0x36/0x50 [ 474.820890][ T1107] sixpack_write_wakeup+0x30/0x480 [ 474.826099][ T1107] tty_wakeup+0xbe/0x100 [ 474.830439][ T1107] tty_port_default_wakeup+0xa2/0xf0 [ 474.835813][ T1107] tty_ldisc_hangup+0xdd/0x4b0 [ 474.840677][ T1107] __tty_hangup+0x40c/0x680 [ 474.845270][ T1107] tty_ioctl+0x757/0xde0 [ 474.849602][ T1107] __se_sys_ioctl+0xf9/0x170 [ 474.854315][ T1107] do_syscall_64+0xfa/0x3b0 [ 474.858942][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.864925][ T1107] [ 474.864925][ T1107] other info that might help us debug this: [ 474.864925][ T1107] [ 474.875193][ T1107] Possible interrupt unsafe locking scenario: [ 474.875193][ T1107] [ 474.883513][ T1107] CPU0 CPU1 [ 474.888996][ T1107] ---- ---- [ 474.894363][ T1107] lock(disc_data_lock#2); [ 474.898882][ T1107] local_irq_disable(); [ 474.905659][ T1107] lock(&port_lock_key); [ 474.912517][ T1107] lock(disc_data_lock#2); [ 474.919566][ T1107] [ 474.923032][ T1107] lock(&port_lock_key); [ 474.927548][ T1107] [ 474.927548][ T1107] *** DEADLOCK *** [ 474.927548][ T1107] [ 474.935693][ T1107] 6 locks held by kworker/u8:6/1107: [ 474.940980][ T1107] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.952700][ T1107] #1: ffffc90003b57bc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.964390][ T1107] #2: ffff888142358ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x6e0 [ 474.973481][ T1107] #3: ffff88806100d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 474.982809][ T1107] #4: ffffffff9a2700d8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 474.992599][ T1107] #5: ffff88806100d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 475.002039][ T1107] [ 475.002039][ T1107] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 475.012641][ T1107] -> (&port_lock_key){-.-.}-{3:3} { [ 475.017943][ T1107] IN-HARDIRQ-W at: [ 475.021946][ T1107] lock_acquire+0x120/0x360 [ 475.028197][ T1107] _raw_spin_lock_irqsave+0xa7/0xf0 [ 475.035075][ T1107] serial8250_handle_irq+0x6b/0xbb0 [ 475.041933][ T1107] serial8250_default_handle_irq+0xbf/0x1e0 [ 475.049523][ T1107] serial8250_interrupt+0x8d/0x160 [ 475.056298][ T1107] __handle_irq_event_percpu+0x28c/0x980 [ 475.063598][ T1107] handle_irq_event+0x8b/0x1e0 [ 475.070029][ T1107] handle_edge_irq+0x267/0x9e0 [ 475.076489][ T1107] __common_interrupt+0x143/0x250 [ 475.083184][ T1107] common_interrupt+0xb6/0xe0 [ 475.089548][ T1107] asm_common_interrupt+0x26/0x40 [ 475.096253][ T1107] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 475.103639][ T1107] uart_port_unlock_deref+0x111/0x2f0 [ 475.110679][ T1107] uart_write+0xe8/0x130 [ 475.116584][ T1107] n_tty_write+0xd29/0x1200 [ 475.122742][ T1107] file_tty_write+0x551/0xa20 [ 475.129080][ T1107] vfs_write+0x54b/0xa90 [ 475.134979][ T1107] ksys_write+0x145/0x250 [ 475.140971][ T1107] do_syscall_64+0xfa/0x3b0 [ 475.147136][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.154681][ T1107] IN-SOFTIRQ-W at: [ 475.158666][ T1107] lock_acquire+0x120/0x360 [ 475.164823][ T1107] _raw_spin_lock_irqsave+0xa7/0xf0 [ 475.171687][ T1107] serial8250_handle_irq+0x6b/0xbb0 [ 475.178548][ T1107] serial8250_default_handle_irq+0xbf/0x1e0 [ 475.186103][ T1107] serial8250_interrupt+0x8d/0x160 [ 475.192873][ T1107] __handle_irq_event_percpu+0x28c/0x980 [ 475.200168][ T1107] handle_irq_event+0x8b/0x1e0 [ 475.206598][ T1107] handle_edge_irq+0x267/0x9e0 [ 475.213023][ T1107] __common_interrupt+0x143/0x250 [ 475.219701][ T1107] common_interrupt+0xb6/0xe0 [ 475.226059][ T1107] asm_common_interrupt+0x26/0x40 [ 475.232734][ T1107] unwind_get_return_address+0x56/0x90 [ 475.239852][ T1107] arch_stack_walk+0xfc/0x150 [ 475.246190][ T1107] stack_trace_save+0x9c/0xe0 [ 475.252533][ T1107] kasan_save_track+0x3e/0x80 [ 475.258862][ T1107] kasan_save_free_info+0x46/0x50 [ 475.265546][ T1107] __kasan_slab_free+0x62/0x70 [ 475.271964][ T1107] kfree+0x18e/0x440 [ 475.277517][ T1107] slab_free_after_rcu_debug+0x60/0x2a0 [ 475.284727][ T1107] rcu_core+0xca5/0x1710 [ 475.290628][ T1107] handle_softirqs+0x286/0x870 [ 475.297048][ T1107] run_ksoftirqd+0x9b/0x100 [ 475.303217][ T1107] smpboot_thread_fn+0x53f/0xa60 [ 475.309810][ T1107] kthread+0x70e/0x8a0 [ 475.315539][ T1107] ret_from_fork+0x3f9/0x770 [ 475.321789][ T1107] ret_from_fork_asm+0x1a/0x30 [ 475.328212][ T1107] INITIAL USE at: [ 475.332806][ T1107] lock_acquire+0x120/0x360 [ 475.338972][ T1107] _raw_spin_lock_irqsave+0xa7/0xf0 [ 475.345744][ T1107] serial8250_do_set_termios+0x4b1/0x1c10 [ 475.353031][ T1107] uart_set_options+0x3c2/0x5b0 [ 475.359459][ T1107] serial8250_console_setup+0x2f4/0x3c0 [ 475.366571][ T1107] univ8250_console_setup+0x43a/0x540 [ 475.373520][ T1107] try_enable_preferred_console+0x4e4/0x650 [ 475.381005][ T1107] register_console+0x551/0xf90 [ 475.387465][ T1107] univ8250_console_init+0x52/0x90 [ 475.394161][ T1107] console_init+0x1a1/0x670 [ 475.400263][ T1107] start_kernel+0x2cc/0x500 [ 475.406348][ T1107] x86_64_start_reservations+0x24/0x30 [ 475.413404][ T1107] x86_64_start_kernel+0x143/0x1c0 [ 475.420190][ T1107] common_startup_64+0x13e/0x147 [ 475.426707][ T1107] } [ 475.429215][ T1107] ... key at: [] port_lock_key+0x0/0x20 [ 475.437008][ T1107] [ 475.437008][ T1107] the dependencies between the lock to be acquired [ 475.437023][ T1107] and HARDIRQ-irq-unsafe lock: [ 475.450662][ T1107] -> (disc_data_lock#2){.+.+}-{3:3} { [ 475.456155][ T1107] HARDIRQ-ON-R at: [ 475.460137][ T1107] lock_acquire+0x120/0x360 [ 475.466302][ T1107] _raw_read_lock+0x36/0x50 [ 475.472470][ T1107] sixpack_write_wakeup+0x30/0x480 [ 475.479258][ T1107] tty_wakeup+0xbe/0x100 [ 475.485163][ T1107] tty_port_default_wakeup+0xa2/0xf0 [ 475.492105][ T1107] tty_ldisc_hangup+0xdd/0x4b0 [ 475.498532][ T1107] __tty_hangup+0x40c/0x680 [ 475.504692][ T1107] tty_ioctl+0x757/0xde0 [ 475.510581][ T1107] __se_sys_ioctl+0xf9/0x170 [ 475.516824][ T1107] do_syscall_64+0xfa/0x3b0 [ 475.522992][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.530536][ T1107] SOFTIRQ-ON-R at: [ 475.534522][ T1107] lock_acquire+0x120/0x360 [ 475.540677][ T1107] _raw_read_lock+0x36/0x50 [ 475.546837][ T1107] sixpack_write_wakeup+0x30/0x480 [ 475.553611][ T1107] tty_wakeup+0xbe/0x100 [ 475.559543][ T1107] tty_port_default_wakeup+0xa2/0xf0 [ 475.566481][ T1107] tty_ldisc_hangup+0xdd/0x4b0 [ 475.572906][ T1107] __tty_hangup+0x40c/0x680 [ 475.579081][ T1107] tty_ioctl+0x757/0xde0 [ 475.585013][ T1107] __se_sys_ioctl+0xf9/0x170 [ 475.591279][ T1107] do_syscall_64+0xfa/0x3b0 [ 475.597442][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.604990][ T1107] INITIAL USE at: [ 475.608897][ T1107] lock_acquire+0x120/0x360 [ 475.614971][ T1107] _raw_write_lock_irq+0xa2/0xf0 [ 475.621487][ T1107] sixpack_close+0x2c/0x280 [ 475.627576][ T1107] tty_ldisc_kill+0xa3/0x1a0 [ 475.633747][ T1107] tty_ldisc_hangup+0x3a2/0x4b0 [ 475.640181][ T1107] __tty_hangup+0x40c/0x680 [ 475.646262][ T1107] tty_ioctl+0x757/0xde0 [ 475.652071][ T1107] __se_sys_ioctl+0xf9/0x170 [ 475.658230][ T1107] do_syscall_64+0xfa/0x3b0 [ 475.664307][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.671764][ T1107] INITIAL READ USE at: [ 475.676096][ T1107] lock_acquire+0x120/0x360 [ 475.682600][ T1107] _raw_read_lock+0x36/0x50 [ 475.689257][ T1107] sixpack_write_wakeup+0x30/0x480 [ 475.696394][ T1107] tty_wakeup+0xbe/0x100 [ 475.702658][ T1107] tty_port_default_wakeup+0xa2/0xf0 [ 475.709949][ T1107] tty_ldisc_hangup+0xdd/0x4b0 [ 475.716729][ T1107] __tty_hangup+0x40c/0x680 [ 475.723236][ T1107] tty_ioctl+0x757/0xde0 [ 475.729475][ T1107] __se_sys_ioctl+0xf9/0x170 [ 475.736065][ T1107] do_syscall_64+0xfa/0x3b0 [ 475.742574][ T1107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.750464][ T1107] } [ 475.752989][ T1107] ... key at: [] disc_data_lock+0x18/0x100 [ 475.760886][ T1107] ... acquired at: [ 475.764687][ T1107] lock_acquire+0x120/0x360 [ 475.769367][ T1107] _raw_read_lock+0x36/0x50 [ 475.774051][ T1107] sixpack_write_wakeup+0x30/0x480 [ 475.779347][ T1107] tty_wakeup+0xbe/0x100 [ 475.783784][ T1107] tty_port_default_wakeup+0xa2/0xf0 [ 475.789255][ T1107] serial8250_tx_chars+0x72e/0x970 [ 475.794643][ T1107] __start_tx+0x33b/0x480 [ 475.799148][ T1107] __uart_start+0x23c/0x460 [ 475.803838][ T1107] uart_write+0xdc/0x130 [ 475.808268][ T1107] sixpack_receive_buf+0x447/0x1450 [ 475.813646][ T1107] tty_ldisc_receive_buf+0x116/0x160 [ 475.819197][ T1107] tty_port_default_receive_buf+0x6e/0xa0 [ 475.825089][ T1107] flush_to_ldisc+0x24a/0x6e0 [ 475.829938][ T1107] process_scheduled_works+0xade/0x17b0 [ 475.835666][ T1107] worker_thread+0x8a0/0xda0 [ 475.840522][ T1107] kthread+0x70e/0x8a0 [ 475.844794][ T1107] ret_from_fork+0x3f9/0x770 [ 475.849561][ T1107] ret_from_fork_asm+0x1a/0x30 [ 475.854505][ T1107] [ 475.856829][ T1107] [ 475.856829][ T1107] stack backtrace: [ 475.862720][ T1107] CPU: 0 UID: 0 PID: 1107 Comm: kworker/u8:6 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 475.862741][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.862754][ T1107] Workqueue: events_unbound flush_to_ldisc [ 475.862789][ T1107] Call Trace: [ 475.862798][ T1107] [ 475.862806][ T1107] dump_stack_lvl+0x189/0x250 [ 475.862832][ T1107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.862855][ T1107] ? __pfx__printk+0x10/0x10 [ 475.862883][ T1107] validate_chain+0x1f05/0x2140 [ 475.862915][ T1107] __lock_acquire+0xab9/0xd20 [ 475.862937][ T1107] ? sixpack_write_wakeup+0x30/0x480 [ 475.862962][ T1107] lock_acquire+0x120/0x360 [ 475.862980][ T1107] ? sixpack_write_wakeup+0x30/0x480 [ 475.863004][ T1107] ? ldsem_down_read_trylock+0x137/0x1a0 [ 475.863030][ T1107] ? tty_ldisc_ref+0x1c/0x90 [ 475.863055][ T1107] _raw_read_lock+0x36/0x50 [ 475.863077][ T1107] ? sixpack_write_wakeup+0x30/0x480 [ 475.863097][ T1107] sixpack_write_wakeup+0x30/0x480 [ 475.863120][ T1107] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 475.863142][ T1107] tty_wakeup+0xbe/0x100 [ 475.863164][ T1107] tty_port_default_wakeup+0xa2/0xf0 [ 475.863183][ T1107] serial8250_tx_chars+0x72e/0x970 [ 475.863216][ T1107] __start_tx+0x33b/0x480 [ 475.863234][ T1107] __uart_start+0x23c/0x460 [ 475.863259][ T1107] uart_write+0xdc/0x130 [ 475.863285][ T1107] sixpack_receive_buf+0x447/0x1450 [ 475.863316][ T1107] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 475.863338][ T1107] tty_ldisc_receive_buf+0x116/0x160 [ 475.863356][ T1107] tty_port_default_receive_buf+0x6e/0xa0 [ 475.863374][ T1107] flush_to_ldisc+0x24a/0x6e0 [ 475.863393][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 475.863414][ T1107] process_scheduled_works+0xade/0x17b0 [ 475.863446][ T1107] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.863471][ T1107] worker_thread+0x8a0/0xda0 [ 475.863492][ T1107] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 475.863517][ T1107] ? __kthread_parkme+0x7b/0x200 [ 475.863541][ T1107] kthread+0x70e/0x8a0 [ 475.863566][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 475.863585][ T1107] ? __pfx_kthread+0x10/0x10 [ 475.863609][ T1107] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.863630][ T1107] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.863652][ T1107] ? __pfx_kthread+0x10/0x10 [ 475.863675][ T1107] ret_from_fork+0x3f9/0x770 [ 475.863696][ T1107] ? __pfx_ret_from_fork+0x10/0x10 [ 475.863718][ T1107] ? __switch_to_asm+0x39/0x70 [ 475.863733][ T1107] ? __switch_to_asm+0x33/0x70 [ 475.863747][ T1107] ? __pfx_kthread+0x10/0x10 [ 475.863769][ T1107] ret_from_fork_asm+0x1a/0x30 [ 475.863790][ T1107] [ 475.877941][ T24] usb usb5-port1: unable to enumerate USB device [ 475.910126][T13774] No control pipe specified [ 476.055514][ T5935] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 476.142483][ T5937] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 476.293057][ T5937] usb 6-1: device descriptor read/64, error -71 [ 476.324587][ T5935] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 476.333835][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.343930][ T5935] usb 2-1: config 0 descriptor?? [ 476.351398][ T5935] cp210x 2-1:0.0: cp210x converter detected [ 476.544440][ T5937] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 476.683095][ T5937] usb 6-1: device descriptor read/64, error -71 [ 476.757095][T13770] netlink: 'syz.1.2592': attribute type 29 has an invalid length. [ 476.765673][T13770] netlink: 'syz.1.2592': attribute type 29 has an invalid length. [ 476.774531][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'. [ 476.785210][ T5935] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 476.803207][ T5937] usb usb6-port1: attempt power cycle [ 476.997969][ T5935] usb 2-1: cp210x converter now attached to ttyUSB0 [ 477.143153][ T5937] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 477.165402][ T5937] usb 6-1: device descriptor read/8, error -71 [ 477.200744][ T5935] usb 2-1: USB disconnect, device number 68 [ 477.208849][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 477.220441][ T5935] cp210x 2-1:0.0: device disconnected [ 477.403287][ T5937] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 477.423738][ T5937] usb 6-1: device descriptor read/8, error -71 [ 477.543400][ T5937] usb usb6-port1: unable to enumerate USB device