last executing test programs: 6m54.772870058s ago: executing program 1 (id=2618): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x7, 0x1, 0x9, 0xb, 0xbf, 0xb8, 0x3, 0xf, 0x5, 0x6}, {0x804, 0x5, 0x1, 0x5, 0x7, 0x4, 0xff, 0x5, 0x9, 0x4, 0xb, 0x7f, 0x3}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0x2, 0x70, 0x3, 0xa, 0x400000000006}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r5, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4098, 0x1002}], 0x1, 0xf3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) 6m54.419823806s ago: executing program 1 (id=2619): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, 'S'}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc259"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6m51.32012128s ago: executing program 1 (id=2635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_usb_connect(0x2, 0x62, &(0x7f0000000340)=ANY=[@ANYBLOB="120110014f218508d6160100cdb2010203010902500001050050090904f400031cb9fb060905020300000005c41310d1e0"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 6m47.89864804s ago: executing program 1 (id=2642): r0 = syz_open_dev$hidraw(&(0x7f0000003c00), 0x8, 0x50cc0) r1 = mq_open(&(0x7f0000003c40)='/dev/dri/card#\x00', 0x800, 0x8, &(0x7f0000003c80)={0x5, 0x99, 0x3ff, 0x5}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x8, 0x0, &(0x7f0000000080)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003cc0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001300)="a819b5949f0dff827e4432116c7351dc604c41b77de3ba115ade75a2bd73c29ce578d7c6e3b3d2b60eae2c0b2b2014ac5f973746a54d5c3fbdb91bb9e25c840dc954781b232654b4bd788cf54a58616d48f1fd59d22d4202d33142d6ad87e36acc22cf9f1feaa76624baa402e19760231b1d6ecaa9b2414252073771b0d7ee7ead50b4a7b4928d9ba2ce046b42296ec186ea91c1ac2d5e63d1e83c81", 0x9c}, {&(0x7f00000013c0)="2a49dc6e28b3c8ed21a9a4d3015dbb896d2fc970c34cb34799c765b8570ce46cb7dcbff70ec15b83098d6648bc46d7b3350d891650ae91bef77e8adcaf13345565fbca0d06bcc918cc9a5ed1073378185f30bc26f55a143b9969647e26efcad5fb72b12a914f281d63c596d0d9f96ba243ca6479529d20fe31e137fda9e70027008e45dd5c126cdd149a7ef83111f13deac4f07f851d609590028e4481164d08712e48d07c840c63869b4c1474e73df9963f66ded5da5fd1f44702976e7dc10a7bd57b97e674f402074bbb370392ab2e243e739b70ad9db9c2761e106bea41e742aa705315c4fab1ef287a2b0d64f2cc1597", 0xf2}, {&(0x7f00000014c0)="4d101f820f79b381330ff82b11659af7b355d0ec0b58e6763d77bb43d1b691b635ab14360c5783c641c0d21a713cb375444d0b596de9ba62a738cf51dbe223848b259b73ef4416311feaf3291196352463170054c2645e1270c76263e24831548168f80ce3006c5e2a7871ec8265d88fb8c595f1d430863a6fa6f63d2eefc9f1742dda69e76f56edfd5d05e5f8e9f2505bb24e2a1dd8607ac91738bdd9e40c540814652b3ced92cde3c75a719635fe021cf75b136891a4d6075c86bba9bb3f8a901b65928dfa5aa0", 0xc8}, {&(0x7f00000015c0)="a2aff4fa7ee3d9e150387a1404e1ce9e6bc7173214ca2e065de6c15df4765447149d16397f237f53c771a2293b8cfeee47dae2b6f86220396fa944340d69e8ff96690fd8b7efa2c4ddfb9b6ffdd9947c401c0ebe6d24f657a41e4e2f94fe21e28865a156b0a1dd1239f1b059645da2e3ed37df075d27858f5d61a55a6a3995b77da28f89d81719c03e41f3b0595b8dab7913a358e251c27ad23cffe69c5d62f1ab405070e51c6f89a2b1b702ca19b4e5a0b6f2282443005e5d578d88931fdc5dd3fc25fd8a4cf83667cf302b9dc4b093126f0f39a1e21aaacdb5", 0xda}, {&(0x7f00000016c0)="af1e7c3388e7eac91e20e0008a0df4c646fc268a2dbd2a59165790c478e6b894a1dd57f96dd34d8eb3ae7f2b295ed4540cef13a4062846989ee10bc3873623fb0408cf2cb1a4734581a743a1dcdff26ee6b43e0c051c9c57dfb8105656b6243f8994701d90ab5e3b05c5a6d5bbbdb81b4b637e3e", 0x74}], 0x5, &(0x7f00000019c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x1}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)="a17578d897b5dcdccfc8ee861766a97258126dd1dd187de77e04816f23106211fedcfcd3011d92f0d454111f792b3a93d68ba55cb5867c88d140d61f47df0df1059a026518cbb475737dfe9974a683b9e725d66a5f51c5c61c5cd3ee955999e3318bc381e63f347fa4", 0x69}, {&(0x7f0000001b40)="2c4a89e7", 0x4}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)="1078533c8f525901504f7c0269d3463def36309e9df2028b2cda6b047582713403e1e7a2d571ef27b3f6e6ab1771a156f53abd4bed9beed0c8afcd505320f1b1c2781b7b4607dfe1be599a06b1c39bb0e196182316e99af95e8659aa0ecfc0836c0f6419f545f3b5706d230f194ec566fa2eded51e3455fa14fd0f3b4b7561158b4501a2f33036675dc0b4c399bf3831f7bce2210c8a96e3ed1335d42fb2ead6cf9c3198d1ac35f4ac4ec208fc38566c640c2cf979fa58ce724d6966baa61a9fb26cec2ddf3ef646c9b30ee1ac33bb4a43653d72388d2e3cb9c7", 0xda}, {&(0x7f0000001cc0)="1d588d898ee08b1368bce724e59c1a0adcb59bac4c3ae7ce5f16d599c1b625ed5bb5ade40d1d8a0151dd9aad0b1dde0567379820a7a97590f23c262a99baf5e130e81a5fa97521c853a720765ce20f1491421c96d676433437b9e6718a74c562a69f33e3ea26b72088a4103589fcf6dfe2db0dbf61f3ec18d23790ef5bf3208c79cb7b88430c23ce9cd75aaa376edb4af1e7e8a2923bdf5701ba05b7b4cbd5566a83d7f04dd6ead26b17ebea86dc9448e7c40adebe57c3", 0xb7}, {&(0x7f0000001d80)="4fa0f47673b789136a86de140f7d3f87a3f52033fbdca5a8a032f3cac97fd1c22e65", 0x22}], 0x6, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x4000}}, {{&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002080)="3a3b12a3dd8af75f0261cf3696fa3bcd5976fdbe343f6537083f262351e14a45f00bcf774e3867ef3073142de2f6f8239962827afd42ce0cf13f4642079827216ca0818066333d9c6a31defb4513460a10f543a133f1d4882d6e15f9a48e14a5bab5ea62e9ad28472adb870eb532a2071f94463d527b7231b6bce54b35441717880472f3839a8c18334b1d3b17b9e1ab9a7ee133e14dd9280d64f27c78e74533d417efa9887e54337a6c0fd5f8f93b68b97e7a8e4dc4341b5ff9572e8d25e5e8ef017710faecf97ff606efcdd2241c88f684aed849ba55a480b5f21716", 0xdd}, {&(0x7f0000002180)="0c8a37e1f9319bec3a838c5d83c80a193c5cbefcd41e4ac8cb9a2f3c9af9759f9708d88a6107c943fa070cfacdc2b8c49a231e77840654e6832245347ea5ff608ccbaf599ee89d7269a424c5b190cfa88ab3e67571b53ac722717d184dbd6cca49e235acb5b37b64050b91e57f1695abcd60a402920663f1ec83e40224fb3594ecffba2ad4c751eaafde555f6b3d922ef4f32fefc35e6bacd413b4a8317cd79a70758eb935e48d712e92da5e00144fffee321926b8bb1a41957121303fdf8427ba47eff2e5d6cd6e061140217572626205259c5bb1fe2c5a53d278ab5600c54b0ddd99e16a1e3671e05e8ee10b7f08a5b80f90d0fc8e0074", 0xf8}, {&(0x7f0000002280)="b02f4dfbe57e89885951389f03d724c28d6e26ac7ad0475b56d0a77e75d46a1743572ced653909590133e741ab19fd9d5474bd66e0b49da11a3e50d679e872", 0x3f}, {&(0x7f00000022c0)="d04b41f6f24cc308ad49eb6db4b546cc6ae61222c40b2cfe8c8d7cd37f1cec344f0951e9f10c5e04517908f755bad94240edf590ca94388a3d77c040841740e0c8f4d0e7df04818d8a656553bbb97bfd", 0x50}, {&(0x7f0000002340)="0be9beee6a39fe5a29d502a740b5838239c36a7d272b4d9c1fe940969e2a9f70fcf2f08bfb03f17fb175d4e2f62736bb9f70b2805af5578472746c664385ea941cfde822e3ba5efadd1c0be5af8a181c17ef888609d9455636dae02eddf908e5e0541bec5cdd4fec2ec6a9c425239690aa2b03146b88a633bf23cd566a11f896645fbc6aa72b60ac67caa13b74b35a", 0x8f}], 0x5, &(0x7f0000002640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40800}}, {{&(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002700)="88f085dde406d87960132165b3982fcea77f43f09358d722a6f4f9b9d9711bbbeb722fefbc2d9e99d211664ec57925fec20eec5a54a983ee61a5caafb823486d7a5b0f25c588862a121b01d6354e54a4bce43a3bfd85ed9c648fe8c0e4e2e53be9e8395a21fea7333ec9268b01dfa57f46ec7b9f011b17f27153e2e3e348a3084760d00c428aea78241193bf8f1a7f4096454b6a634e4f938ca4334d3b9012ac93fb78f77b47a25ec93324b912f10db867f4342f", 0xb4}, {&(0x7f00000027c0)="a63a126aa933aba4dc19931aeabceb031ed4cedd10802ba0f8690334166f251c117a783c55aee364f772446516b1a233dc6b30274973e0c194b836339aaf395e027f531392f2f985b42b1e9a7a3865b5d9836aa284ab32d401291d0f8e9b82d2f94fdba2f12afdd1c2d0a33c2157f0c8e37d77a02d9b53c87daa95d3a8ed259a2ffa1f51d1426188f328fc79ccdd762954966a23d9a22c9d5db3334bb9f81229c152969ae61f8239a3c42758984c8290", 0xb0}, {&(0x7f0000002880)="90987e17ded1a00c3613959a8b5e638e738683ec64f84032810b8a1d52136d929ee50a4f821f98644e2f96890d081877b42bc63c3830eded22abd653", 0x3c}, {&(0x7f00000028c0)="e519d2cc082dc63aa3262aa062d3258db40085c97e21eb2964a24e0724c28fa6ad9456b4ff87782094f55ca48565c33f70c72ca678dae54b7abcd932571cf1fbebcb98d101ef3e64bd3bfe4ff7e11d505a8444f57e90be9fc1655860594f021463139171d96be3e94bdc7552d042912664a8e66591b071f92149ebde7e922e26522ae68b68b53870d446286f93e3814f10", 0x91}, {&(0x7f0000002980)="2830a5fb05", 0x5}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)="a4ced71478f79e54a4aa3e56381c91a2610b0f3c5634f9bddee637a2e0a4f069003694403de1a97f94b6024de4690d59f7edb62479d4852873cec9ae7225c4d0d1b7279c681a2e91e776c193fcd2836e55223f35c075a1a3aadbb3814edf7e588528051d50adea27c93b42fe3a6a587f36563c25d1370b0877329280bc", 0x7d}], 0x7, &(0x7f0000003d00)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000014000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x20004840}}], 0x4, 0x8000) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect(0x6, 0xa0f, &(0x7f0000000600)={{0x12, 0x1, 0x1, 0xf3, 0xd1, 0xd, 0x10, 0xbda, 0x184, 0x5bd5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9fd, 0x3, 0x9, 0x79, 0x10, 0x6, [{{0x9, 0x4, 0xa5, 0xb, 0xd, 0x8d, 0xa5, 0xda, 0x7, [], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x19, 0xaf, 0x7, [@generic={0x4c, 0x9, "bf93f98b2c5283e4a87548a7aed2e4342e0f90a57b381b94a3ee866b1d85b8672908be66a20c8cca5095224efcf9b94b72cbb88d2c7a5b8c1ae8de82887f069d220c887e15b0d29857b1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x11, 0x81}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x9, 0x1, 0x0, [@generic={0xb5, 0xc, "1c77be504aa5ed73b8a496919e57de9773313ef057f77f94bcb48cae11929af36c47a132dd1936bd8eaec34254a2682688890ec293a4476b9904a65b1c16634a1fc900868da02fb363feab6b8e22c4145be3d09193829234f2e75d1d3a38e15b5ecd8036f079a56353e13a96945dcf4b42d0d177cefb1fd47611c639188411d2a6441cc6d40a0c1e8b21b1b0c412a76263ffb8f5205925c038f58783758a010c86f73b8c9927b09cb27241fed199b35fa399e0"}, @generic={0x7c, 0x0, "d73c2662cbac4fa1c5b07ed32a33f222367a661aa84f10e8cb4abb57f0d40e95790beed9bb0fc7ad3904cb46791d967158e3cbb522edf44e495e316b1f9f6ccf69b09baaf47ffd0c95a911f281eef7e624f45fe624e7aaa237e28e6a4b7a5d241489228517f550cf7321c10d2b4b27c21e54c0f0be4f7b0dfef3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xa, 0xb, 0xf1}}, {{0x9, 0x5, 0x8f, 0x8, 0x3ff, 0x74, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x82, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0xf4, 0x2, 0xc}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x6, 0x80, 0x4b}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x90, 0x4, 0xf, [@generic={0x9, 0xc, "a7a65b78521c97"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x4, 0x55, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0x4, 0xa9c0ace940faf113, 0x3ff, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3bf, 0x5, 0x80, 0x1}}, {{0x9, 0x5, 0x0, 0x18, 0x200, 0xb, 0xf7}}, {{0x9, 0x5, 0x3, 0x15, 0x10, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xaf, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x6403}]}}]}}, {{0x9, 0x4, 0xc8, 0x6, 0x7, 0x23, 0x53, 0xd, 0x40, [@generic={0x6, 0x23, "f100af02"}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0xfa, 0x8, 0x7, [@generic={0xd4, 0x2, "72e64d96b3413da6868a7cd8b8d87491ba119a04295eed435ad471f372b6c48743156e915b34347dcaf483960d70f00d1510065cb232508df1ff012ee92d941ddfb4e8c80db2b37fb9386b739111b0953bcf000abcc87fd7ce2e240fc3ed68aa19b8cf608e7101f31e28415d048dbd21006f0c876a2caa1b838af5ff00eb3263b3e0a744e377302f426c2832d8d306d5112a04520572f73566a335e63b746b8cffe83318d5c7219e3981cfb4550127e95066e73b799d5b1d746f4dba9c8233a2e1b26c39e39086295dc2f9a0c5dc0fb05113"}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x9, 0x2}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x4, 0xa4, 0x1, [@generic={0xf4, 0x23, "ef3076b8b5312ebbeda00178309c344f3a43f036dfcb171830cbfcd6cae2be6ca46b988bc5c40d9d60246dd2fd2795926d109c66d2a111f08a40d801f6be7a24cc1ccd645fa128aae2ca848afc1a277ff966daba5f639bbc877cd7b83cb86924a6c73b74c336ca3b131697d7cec6ef1de7f29298064d5f7a16842ece3d798ae279c2727eb3d1793f7a1bf4d9691be5fb108b271101cd0bd0987333671a86fd90173499bdfe3b9e4f1d35bfba8220dc61d29f6c65ed22ef4ba17cac9cd361354002647106404f0c321fcb6ef7965379080c84deb86a05202c3c1d9999c204f79768c72c70ca724dceb6051da8cb496e307540"}, @generic={0xba, 0xd, "f38431debef3930cbf90ed2083cee509d638962ffbbe292b8fbe9f1089d946229101273369b6b2990a7b79a975d9cffa87eb3a354f4846711a3b347b673b75ac29f57b68a4a38cfaae0f4c1f37c532c7e75e8b739633fd40ad8775faa65209d00dde5e6d0e9936bdee1ed0cef4f7f0bcfaa1acbf4f769597d45085c9927c6d64a489d6cff4d94a7b10724cee156c2cca04e807a9ed1bf32a57ae4eb4dc3607f9f2c3078d2ba9e9783541cad02e99419a66528f5be4011ed5"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x4, 0xd, [@generic={0xc0, 0x8, "11a51701d49bcb3ab57c7811dea19e1ef6f45dbcd21b91b84d9890b17cd6b2aec76b1222921818030ab3a9e3f647d26db5f8c3a851462a7f84cfa3bd10a3220cc26acb80a9b43714036a620adc4e4bb04c915253d0f753fcd586b75789e51bc610bb348c5d281f4b942183e26646a33fe7fc6e0367c17c92ee4a523143b51e40c61373be3f257fd3866374f863b9a4b593f20a483e7b92bd48dd27f4cdeae7e725c3ec92c4846b2cf4e22d239a159266f3a0db37a1b06c6262e9e7e1e213"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6f, 0x76, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfff7}]}}, {{0x9, 0x5, 0x43, 0x3, 0x0, 0x4, 0xa, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xff}, @generic={0xd1, 0x26, "6e78ed6a2aeb15d4efea649db22721fc32ea7d16d8dd57a79750c1d535174899180b7b65eff23546806f26fb09e21e6338ed26d0e9ac546f203efdb1f3339774427dfcb6840c6f71e5496fe1e7a26d7760c1b61f4ad7cdfad3b37365fc6857167ccddc9fcad1b30a550fee5c97f72e024b2211679463566f3db4cbf9e54805b1f6c9688e0f6be25decc943e2fee20364995d7d720fbaff625b6e16229daacee36273b33ac49d75effc0ee082e050e9f782123c465cd9a79257afd1382834d5a031e18c15205df8f81b29afc276e654"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x79, 0x50, 0x0, [@generic={0xc2, 0x6, "458a7e8a22c4da4202c2f9438fad5de237e3bd999926bc1300656c4a26fd07a78d3c83f54e2ffed4aaf9568f386af670aaa2036ab92b5f1b06ce033e0e403860c6053fc9b91a864170fa57f15093618c8424a85fbccf81e3258f0e4e095403c26dbbd026387187893e707cebaca800ec4568d4f64862affa5564ca4aa332922f9c445a418edaac4d4212368525d488d642c31840f24901a96689bb72d74de7751a34a66ad7cbcceb4bbe216904d43f6a8f4f50434538bf614955148e71654de1"}, @generic={0x48, 0x22, "d621c041125780296010e791c7e0854cfff0e318990f3b2705403973f50c8bba6f8f5bc7a374864cb3c8e39aeff09b70ff519d92326e7547b4d8a3a478b6adfb75fb60d380c7"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xc, 0x2, 0x7, [@generic={0x9c, 0x31, "5dbdb543fee773d776f6815cde1cebea814c23798a4395391500a89e89f3b5cb47ee8072b67b37959c8930b467918fcda5adf17a31b1f05b12f9393a1e28f2acd258834e5a6dba73bb8754c8044f973c073e0a0e91fcc805d0c9b93dd978139fc23f6423ad3ee53a68e220317944a9143f750b748abd4426633f3f7e46bfccbf89168d0c44432cac02de6c41d1cf131e02b54dac9c4e3c2f26f5"}]}}]}}, {{0x9, 0x4, 0x24, 0xb, 0xe, 0xba, 0xdb, 0x96, 0x8, [], [{{0x9, 0x5, 0xa, 0x0, 0x39f, 0x18, 0x0, 0x6}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x2, 0x6, 0x50}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xa, 0xd, 0xcf}}, {{0x9, 0x5, 0xc, 0x10, 0x420, 0x10, 0x0, 0x9}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0xf3, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x4, 0xb}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x1, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x8, 0x5}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x10, 0xa, 0x9, [@generic={0xb3, 0xb, "2d51bb6594b85264bf34ae3c496bcd1f2d54f6fa41cc3aa7d432ff3a0af9aa1595b0e35d1ea6f3851c2eb7b38fe93cb464b5b1c76155d5b111c965bdfeed76a53b05558c9b4fe51f5fd2c09be92314117cf0f24a96ed62f3e99fc668265d6c1e8e629013ece50ba59ac0068eab4ba79edbaa607b8664eb817903e51896b2ad61ed2b0486075effaffae1844b68c20e9a4421d36d7bae1a638ce6c9f5cd6fec67bc74b500e012ffa96c4e423c247db69064"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xe}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xd5, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x71, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x55, 0xff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x1, 0xf7, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x6, 0xfb, [@generic={0x26, 0xa, "da82944df86fc76ccf4e239c9c178166c85dfdb15c97f03a159bca6810d880c8b9723ca1"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x5, 0x9, [@generic={0x12, 0xf, "a3e6c887c54cd884030c88e43c74055e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x7, 0x81, 0x3}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x81, 0x2, 0x0, 0xff, 0x4}, 0x42, &(0x7f00000017c0)={0x5, 0xf, 0x42, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0xd, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x3e, "593b0100d409004341b500"}, @ss_container_id={0x14, 0x10, 0x4, 0x14, "6c0bad3cb9976fc4a858a4e22aa5e1e5"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x8, 0x60, 0xfffe, 0x2}]}, 0x5, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x804}}, {0x5f, &(0x7f0000000480)=@string={0x5f, 0x3, "3180bb420a0682f715b04046d4a59fcb4d91ca66ad31d983d7f99fee84192bbbb7b2079e3e38031e6912c4373f921d11d6582b4b0eb5b0f06fa662efbe0c3490be8690cbd32d5f0cdf12ae582f83171e66da999f7933ad7921c7505931"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2809}}, {0xf7, &(0x7f0000002480)=ANY=[@ANYBLOB="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"]}, {0x65, &(0x7f0000001840)=ANY=[@ANYBLOB="6503b21a6833a6e91a22d5c449e705c0bbfea740d4a779a00d7ece1b43bae75316aa3c1d132b43c50ff955c7e86050e2875535a7f950ffade62823d5f341f526180e4314005c8df574d7e47dc7cdcebd50dfb065f2a8a28da887fe39bc3a7151a66db4480df84c49eaaddef24062179004"]}]}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064d1, &(0x7f0000000380)={0x6}) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x1f, 0x30, {0x30, 0x6, "c5a7daed4b32cacc8769c5ad984b6855f9e4a6729627a5e4aa6576753a67aac0f6d589bc0d299e5f8267fb71785b"}}, &(0x7f0000000080)={0x0, 0x3, 0x11, @string={0x11, 0x3, "bb6ae76e5e97af157939b85dab31a9"}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x40, 0x9, 0x1a, "d56fb15ce58bf3799e7138fff0821cd353a72e62a03341adbde1"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000001c0)={0x20, 0x81, 0x1, "d4"}, &(0x7f0000000200)={0x20, 0x82, 0x3, "4777e7"}, &(0x7f0000000240)={0x20, 0x83, 0x2, "cdd1"}, &(0x7f0000001240)=ANY=[@ANYBLOB="20840400000013b0d5cf3bc729e831449629653617c7ac01f84d285214e2deb14b83aac01c23639942b41e8ed709142e2cebf628"], &(0x7f00000002c0)={0x20, 0x85, 0x3, "16e8a9"}}) 6m46.037376197s ago: executing program 1 (id=2645): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r1, @ANYRES16=r0], 0x0) 6m44.714856215s ago: executing program 1 (id=2653): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000500)=0xc) mount$pvfs2(&(0x7f0000000380), &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000440), 0x104000c, &(0x7f0000000540)={[{'[+'}, {}, {'qnx6\x00'}], [{@smackfsdef}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, r6}}, {@appraise}, {@appraise_type}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2000082, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rnullb0\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, 'ext3\x00'}}, {@uid_gt={'uid>', r6}}, {@euid_gt={'euid>', r6}}]}}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 6m28.865352238s ago: executing program 32 (id=2653): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000500)=0xc) mount$pvfs2(&(0x7f0000000380), &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000440), 0x104000c, &(0x7f0000000540)={[{'[+'}, {}, {'qnx6\x00'}], [{@smackfsdef}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, r6}}, {@appraise}, {@appraise_type}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2000082, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rnullb0\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, 'ext3\x00'}}, {@uid_gt={'uid>', r6}}, {@euid_gt={'euid>', r6}}]}}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 4m1.64748634s ago: executing program 4 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 4m1.543248411s ago: executing program 4 (id=3514): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) read(r4, &(0x7f0000000740)=""/377, 0x179) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000780)={0x20, 0x9, 0x3, "79c304"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m58.635441126s ago: executing program 4 (id=3543): syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000ec0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xb}, @device_a, @broadcast, @from_mac=@device_b, {0x1, 0x1}, @value=@ver_80211n={0x0, 0x912, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x78, "1363fcd702f232f53e017ec37a5133c794d391f68afe459cb93cfacfd20aa32f60f948f2279f7a4d384ec4b63f7abd6ac50f498af43c253ef52b5cb959d90fb88fd7648ea5983e8dc60d3e4437f5717657dfe684b60d2f37a9561f5aed8a3ba1447ec11342ef02fda75018cec000e68f9c35c2f680bde7c4"}, {0xdd, 0xdf, "0000dc768019140c2d56619e59f4c1c04e673a5c7e24e65549fc5257b02b2beab82a34b42ed6caf22500d2e6c6431685f9db5fc6d3fdca4b756ee0e135e35663c4ef77286359203d109e60b5b066eda48f92de84f78ba74065c3963d46ba584676d7395969897ad169257edede000000006c2a337b889049350057a46cb70221a148663c952757a4d4e993ed859bfdffffffffffffffc9b6753c331c04c6dc133f9a69d8a0075ae606d58ebade8598080d128fc982e9030500ae8b4b9f3195592ff7adda780f2fb00c9e34d19571f56da372e5131f2969825fa884f43500df"}, {0xdd, 0xe0, "7f73b76a1eabdfa4cd94aa172d5a9df6e5db8e3391b6d48b50122210e66d21802db72d85903bf3e95b4bdb348a20e0e63fcb185acd0f0585c65dfdcf26337e74b945afeca52ee26d64ae6dc1120f5fb0e51eae46981d527f36b0a0fd5c8c3b06caed6d80bababbc376e2c7e9eb71612a846bcb1c6f63c15e2a875f740b3d8bbe3507dea4b77cb225d8110b843d2bca660cc81caf4430a19d451c10e4f1bf00c6a7a00482310f3f44ba522c46d72bf0bf4b53261a59197a9cbc291a4550675a78baeefb7a3ea02edc47a25c5550b50051d1e853328280d6f25e5dc3bca99a5774"}, {0xdd, 0xcf, "a677eba45673c7610a035a7ca0f19da739303193a67fb712e33c8a51c5aa61df68c4f9339e97e580165c5ce1c79571f12cdae602b85d4fe7b1fb4a2ab00c864b836b584cb44479c43b25f7dd98b937d62bd9855a604401410ffa1bc421419032ef986dfe0451db11686c709d910f72f593bbc40b0c5d42b9acb25d990e2a3a953ab12c4746ce220322f643a6008179e7a31376b4d564ddaa4f67133af706bd077eb459be3b0b3eeb5c4b0d2fbdb373095c6832cde6ec6de49d7bc7291002c505167e163a44cca51559d7185f7b14df"}, {0xdd, 0x34, "718afcaf806276d1cb6716fd417e83d3b2f38a554c007ed3f6ff980580fb39be75969f529e8143da06c230897a3e728d700b1193"}]}, 0x368) syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000000)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="3454f075f28f", {0x8, 0x9}, "", @value={0x0, 0x1, 0x2, 0x0, 0x8}}, @a_msdu}, 0x41) syz_80211_inject_frame(&(0x7f0000000840), 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) syz_80211_inject_frame(&(0x7f0000001e40), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000002440)=@device_b, &(0x7f0000000900)=ANY=[@ANYBLOB="980d7f000802110000000802110000000802110000008700155182509b27899d1248f56f3d7fc2098800bc996bd86631ece79a56bdd9893297c1176b428e38707c1455d9fd1b90e1a3bab59fa0c53e652db55c7f4227f653dcb5bd68dfd4f1a6546f31934a9133256d57b6c259aeabd4b19c9e48d7ccc5f052e5eff3e3a245b1c8eb3ac53eb7c369590cb00f9bd2fcc1ff2f92e5040150d0ae6757097336bf4bbe45ce5f4d33fe00bf9732c3dfe3b936ffcc74ebd8df63de6d4393eb444da82a216cc5437f64b7a67c6325a35bd3b03ef85cc76ab2503e82ac88dc03d04ec4a40e40c982e023ebb64888cfd814c145619b40d0b29eaea823ead5134d759f26c1b9effde58bf5ddee5dd2338b9159ab88c38d9b3e9d4d942edcbd678867a8e38eb6a039ff1e38a8467213c1092675ae6b52dabc7b80276c5c1ec613637b333c19b1e041495a2434ffac6aa6a87267fa2b64ff86eeda25cc868e3b66317dc9f55f20ea32baecffe3e5168733a98287b8b6352c4e28f750e5a7db97ac9fda2e06bc04ed945a9638955e70e6af53b98443bd4a150ea9d0dbcad9cd49008aa65a41c5540b7ef8b6dc8a961d633769856ffca1bf8293cceaf7f3c9b5431625c9c17d3d98b21f48acb8a8f1f0bfc00b992c43804874e348f26221ffd0905e5adc64d3897cd4c232602149e414edb852240a097669cad744da75589f483204916056bfb897da153a9787c6ca7ab06a1110ba4e7f048ff72d7d86bc6b3a7f2b136a5afcc6fe90ab0af441b9727365ee2875af024675f08f8f18ac65c572f395e5c101cbc02c341a3bb12cc62919b33b7e16ae518e2607574345ba4629d18761bb57c3f818b87acc32710d4118b0649c1d2fb557e33d4f6e5de66ecaeb4099d8cfd10c25cafe2b9c8ca8b9596ea797311878415ff3a39f4451341f6a2c208852f2e1f2f4bfd29fee0cc460bd6e9382e9a050e5c06f7bb08bc11fad2f674bdbcc163e77165110f015dd5d1d1d60206c056fd475962fd937fbf71571a9fad7dfb3a3aedede0b6b82392100b6cb7a0b809ff92cd925d2b80ebac634b0f2f84b6bf62b88e456c7bc38292478d87617377bf6e474198cbf840cc5ee19fa66330e0d9baf5fb8e570eccad37791342c38cf602287e71a98f423c6fb5d5b33c466fb4f69bf773a5311873e7270b30463ae4d41cba9a706636701fde6b9e95a50b1fe2c00b11e3d6f0b7e24ede23823a9a4fc0413f215034cbba654b9697f053b1dd517ed03c612430e83774f8d958fb43cfe01a2fe44807877a4baa61db314157834bbfbac4cb45a10d4e5e99e76681e1697c730c459dc1e59bf588ec93291e74caafab466694544e059ad6a77c0029246ee7f844f9ef62d4c7d5ef5b1190d2d43c4f9f8cd0ce09edb329a1c6e92912faad01ae086336c27f19c28217a2c0afdcb8f99c30b0b46536e9e7add370670a3be46105b83d57b9b8586154a4f04141c6ba2805b4da1bfa5f1572571a45571a7c1eb56f3ce1934dca2382de5d012c5d9b233fcc82dbaffecbaa314c9e5f85b7fa517d853b3a18ec980b0bddb5e834ce60ba3ace052d32b0066bffa4117377d40b025ca62693d106b6dbd739b75516a68f58ee42328187d4c11ca4b4c515fadab3978ae83c44063b3c959b9fe13076739fb54272f94e764ff1040a4abbff558497a3e2e2c703a125a9e4380182b292e59bd92f09ef882888752f5d7d38b8b00d673a998b14617e41bc1288230c80b51e68aedd3e0c64e565bc4c02b771aebc1c787b16c9029e68421fdcfd63961c0c6b19ad7f0a23278155f1cb16ec81086f06aba39221bacab5b2b14de192a69f8261ed22592eb289a13f2b2d69606602d61313accc39861bd75343c20315c6d9c6ae350bcc236a672c713baada4b01ff2137ba52c3f7d6826e6d8118c5c2383ac2c0c719d634449df2a731f486cf50583fb255c23db27d63647458d26440607055178a6e433d8fd189cc950deaa3e6eede29f952d5d4446afff98e506ed1147afbae16f9f73feec84b79d07dae0f77184ba6b9da9"], 0x5a9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000700)={0x4, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x7, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfa, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x6, '\x00', 0x8}, {0x9, 0xe4, 0x2, '\x00', 0x1}, {0x5c, 0x2, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0xa, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x2}]}}) sched_setscheduler(0x0, 0x6, 0x0) read$dsp(r0, &(0x7f0000004880)=""/4096, 0x1000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0x5a0d, {{0xa, 0x4e20, 0x248, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}}]}, 0x110) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000005a40)={0x3c6, 0xfff, 0xcc, 0x1, 0x11, "3386f978a1fd836ef72c0852e6cd59b8495688"}) dup3(r1, r1, 0x0) syz_80211_join_ibss(&(0x7f0000005ac0)='wlan1\x00', &(0x7f0000005b00)=@default_ap_ssid, 0x6, 0x2) syz_80211_join_ibss(&(0x7f0000005b40)='wlan0\x00', &(0x7f0000005b80)=@default_ap_ssid, 0x6, 0x2) ptrace(0x4207, 0x0) 3m57.739713603s ago: executing program 4 (id=3552): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000600010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r2) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x7f9, 0xfff}}}}, 0x11) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002e40)={0x2020}, 0x2020) 3m57.339837958s ago: executing program 4 (id=3559): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r2, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x4, 0x700000002000000, 0x0, 0x10}, 0x0) 3m56.956611415s ago: executing program 4 (id=3561): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x4140, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582fd"], 0x0) 3m56.655123497s ago: executing program 33 (id=3561): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x4140, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582fd"], 0x0) 2m25.040057481s ago: executing program 3 (id=4186): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000d0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 2m24.80000116s ago: executing program 3 (id=4189): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) read(r2, &(0x7f00000001c0)=""/109, 0x6d) (fail_nth: 1) 2m24.383279703s ago: executing program 3 (id=4191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x97) 2m23.986262122s ago: executing program 3 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2m23.804867774s ago: executing program 3 (id=4197): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000d0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 2m23.472034837s ago: executing program 3 (id=4199): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x20000}], 0x2) 2m7.775557771s ago: executing program 34 (id=4199): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x20000}], 0x2) 14.247925611s ago: executing program 0 (id=4972): socket$netlink(0x10, 0x3, 0x15) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000002f5ba0857078992b2000c6d3e62c3421dd38ba15fd38814eb08dec9f952a3cb5dbdf0c8afb32d1358415589a53cba8be"], 0x48}}, 0x0) r1 = timerfd_create(0x8, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$inet6(0xa, 0x80002, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x1, 0xc}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) creat(&(0x7f0000000280)='./file1\x00', 0xecf86c37d53049cc) syz_open_dev$sndctrl(&(0x7f0000000080), 0x8004000000000004, 0x100) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) r4 = semget$private(0x0, 0x2, 0x142) semctl$IPC_RMID(r4, 0x0, 0x0) 13.149136338s ago: executing program 0 (id=4977): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ec0)=0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01020301090212e700000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r9, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000002d80)=[{&(0x7f00000000c0)={0x27, r1, 0xffffffffffffffff, 0x5, 0x8, 0x9, "e3aded1f66bbba62363d8d6c7caefe4f6f0b6962ddc20fe18826c2cbc6dea06f82ea3e57bf4ade2d7e1364b93254081b18cea36e2e87a19399918846718047", 0x5}, 0x60, &(0x7f0000002f00)=[{&(0x7f0000000140)="bcfeb9870e32139f6ee6903bfeba0a737a505e2e7860586705e6df144e22504cd2b235836f59fe6098b1b0d7d14b1c8d644f1d1024c20b3e54fcb061d5e3b6c4379263af8965ea6c3f28e7403b10c4bc29da57c6e7b4ebfb067ecb752e6e78f4789fde172e393ea232399c8106f425339a6bb909e5bfd2b582ae", 0x7a}, {&(0x7f0000000280)="f9bbdb57d64aa9a8bb9bc1b22d2532533affaf0d21f89121b1d00d68425dc0fff38c44f8ccc0ab9ba542b490b7235b1a2b8f432daec5bc4757d1883d164c71d0c9ac3b7b6143adbbeeb463587578840c9bedec78cd47f09f46e994bb9da57e3d6c6bb3f7c5a8d9a95d4bb2ee77b68723b2a7a046f24e789447c756ef2b78d03fefd44f99181aed498d7ca67ea920f1ef826c29dc", 0x94}, {&(0x7f00000001c0)="7940ed5f6b6239cb9c517f269cd51505b8d803290135241c389edcf9e3108a3f69f64d480b63cea689524f4725fe0154bf732e06f6212dae9193abb56bf038b10a536c64d3c1ef70306173e5471c933664109eb9cf967220db33c15c1e7a3a33205d29a657601ad8efa7ce804a6ff6106e34d3", 0x73}], 0x3, &(0x7f0000000380)={0x100, 0x107, 0x3, "9ee36b67ea4c83d463d88bfad2df36f733ee18902328c2c80679a5553224e278b85a9f0d2f7f2d7a849c46fecf002ae4c4e3e4a8f9a48f2fa348938cbde745b8a0524def9e0f41e94b3c8b982a78b4ff2ce0865abe74bf8a8362349981b5fa247fc1eae3c372ed61e40bbe2a662481abb4af0687b7b6fe5f19bf9153d46a7e10fe9a36ace262390c562e7deee8d8db319f7ee3a2ca227b44c1f25f1c45043d4497f0f72fc373df63a2309d570e4eec2ba30d0c657bcfacf667381198c0c86db698a3c9b0c51f12525bcfc30d67b4257747e41df3db4b63fdee2a3ad5ed35a54a0c96bd78a3a0afabc042"}, 0x100}, {&(0x7f00000004c0)={0x27, r2, 0x0, 0x2, 0xb, 0xa, "10739c4723ad37fddee7da1397a1f438f774f29acdd102f9a7f199423f691baf8079c17a993aba34ca84b5992aa815acc49c046fe49432ee605bed0ea2cc35", 0x34}, 0x60, &(0x7f0000000680)=[{&(0x7f0000000540)="b194c301d27f8a76ee78924e76a6c024039e737b95497c109b015815ea3ef30c808fc4ce036f2fe36ccccf35ae2ccbec4f9a0458dbbd19f21c6a67b61fcbd0e568785e67c7f9812e5d12140bac16eef43baa1d3a2a668654d73d9e019c65c0ead56355a7477c36570c6032d8e25aff251f702f6f3f0342de3cedea49e498f188d17d5e3e852f993faa6072c34aab03e49ae679d9c4cce35f1e2663a3999467a0db67c82426aec13e73545a32d1bc3e8e0180694af8f722ef514fceadc2bf46c67032ab6802a4f472e6818e3f416d61ee8593e32d1414142b354eb9470b", 0xdd}, {&(0x7f0000000640)="1b3f9a9f", 0x4}], 0x2, &(0x7f00000006c0)={0x110, 0x113, 0x0, "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"}, 0x110, 0x880}, {&(0x7f0000000840)={0x27, r3, 0xffffffffffffffff, 0x5, 0xb, 0x0, "0fa3bd52d9228b0e4d0576b1bec14debca99f19f6e6f2099a3709c39507693a73da8a4bcb7c433d772df224900c242bc3254bde6034eaa6c267fb9dfba7fac", 0x1a}, 0x60, &(0x7f0000001b80)=[{&(0x7f00000008c0)="9d7cc14a2f5a2e3eb5f150da774b7bb25417200e46d8534c5ea05d9556375b1dc43744a8957a167addb4cd44d1d75bad2695884e2a33dae4914b697f4d890367d304757f0b70fb11c6f6d7d7a4329885bfc3bcd4bf552e10b58f2777d75bfe7ef152e5f333090bff22e88f80786e35df7ede3203d3e703e78b169275e0198a033dff2f798fb99702df8d329f05e003f85ebd3375660f6df7a1ac569fa18b02bd5099af8bffb7ade4eac7da9e9cdaca47740c7ad078928b47e8f4b845d24fd2", 0xbf}, {&(0x7f0000000980)="24f36a9ee3fec03a1110a230338ac5d3ec833a83e1fdd689733cd93d10202def9edcea02b1d68759c38b5ba53851218f2464b74cc53bb7d61a6d4482a55a7807472c45fc0cd7f695109731a88af29897ac8d6acccff56db551810d95ec71cd3ada2f78485a4efb8078120f898b5ac47cfbb4d2499003c85bccaa327c1d9dd3203a13950c4f902f3da3aaa53aa7f6b22fbb3d5ed37f2c3d9dcfafd7c13d349432083b122175db62ca569a05f1b005df2e1a91d4ffbaf4e0171f61824bd7b175b09efe2898ad7d6ba3ebbd1280f30d4a5ff88b69f3699fe47b8847fc60394060", 0xdf}, {&(0x7f0000000a80)="a3da5f3c3443205cf6d7011e4b376c86bf1b7e964f4ad01a653c56679b3bf277897c85b0528c577291505e38dd040e6bc721d36e4cc559783ad6c20c5f1c13974c989126b29ac3361971e0e891469afb57fd3039222475340caa2223dca0b9e8423c75732d8c75bed72f12900c84ef57d0024ee6fa81a45d9ca85949b3e58377265c6c3e648d4ff4f2aacf3de861e117d71d0512122f57eaf132d38b1c07392d099030935172c7f329eb5bd81c7f571b44285fb067589a8eafcdf94573747aea988c12341d8d7846fb5373914cb4404f13666ed47bc05facd1610f743c23d6b00ceb7997a8ae5cf038de", 0xea}, {&(0x7f0000000b80)="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", 0x1000}], 0x4, &(0x7f0000001bc0)={0x68, 0x0, 0x3, "02b52c43531dc655dd3c03d05c2202ef84928cf5e037b434f878e154667c3727e32ec3c2eb5ce0c914d1115918d51025e7f7101b8bbd891807eebf4879e4cdfc33a573986fe3faecb70fc9fb682ba3f2580288df"}, 0x68, 0x4}, {&(0x7f0000001c40)={0x27, r7, 0x1, 0x7, 0xb7, 0x5, "54655b8a8a07cad4c00fb6c64415cc37b00aa6b2b2fb807e21a2c501a3adffed72c33cd90d953b1be3564ed661c22f92aca0b9b3ad78293300c96089a50cbf", 0x3c}, 0x60, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="2022aa79d2849d44c88ab9110c78459a7b01179f8f5b96ceceb8d9d4290cd04eef6f2d7b5d2bfd4cabf6ef468f60d3482442f4f4830b9dd62fa0fd5247ca51dedf42cb65e80bc111dde31ab011de7e41a1952efe5a875ddbde57e0bacada3b4e1a6aabde78fa98c296de5a5eb81fc48ce10cf98790b586d46ad4d9453805fe1fc5ec1c1fe4c487", 0x87}, {&(0x7f0000001d80)="53384c4a5090ae2233fe3ee74b11", 0xe}], 0x1000000000000050, &(0x7f0000001e00)={0xb8, 0x115, 0x8, "f914a701a3894cae35194010e8867876eb904c11c0b2ba14229000a1245c7d7d5735770710e23df7f5d2d4c640e1733ce141da0ba287b426edba0f0c339d3627b4f42597f606d61e03f2aca1141a582178df3669155bee2126ceaee1869af1d82f64d5dd0a7ffc9d4cd217429183168ef93688ad00ce082a1bc6d33ff77b9c868f6b219bf4f18c750c8814ac9c416e8c2760a075a16485c778f29a1ad75013316ed05d83"}, 0xb8, 0x4004844}, {&(0x7f0000001f00)={0x27, r8, 0xffffffffffffffff, 0x7, 0x2, 0x6c, "9454b0755ec9bc0c8e29310e8f76b708e1ddf053169be8e7ee0ba676e46d78493f6a28287d930f280869fc6428e5811d57250a5af7b82a5f269ad707b0c9a1", 0x27}, 0x60, &(0x7f0000002500)=[{&(0x7f0000001f80)="f8abb14a6c8031c3dba255f253d56f7b24effdbfc32228949cec495d97496e89290a4d3a99744b42cc8d49d11bcd75120ced2cf4ddb31228bdeffa015ec8079c1e62ae7dea777883c931679486c6710ce1cd09d698e2c6a9412f5fb2ca89a93d6899419b289b73022e5e740286c791efde6382fe039d1ed4005a284fdcaefb79bcfba47c5cd3b10718647017371c040dc4c6a68a2beee3053399bec19fc4c0bb4c8e9ebe68b55aaef9182840cb47da0695de59a51ee1b614f06b0b", 0xbb}, {&(0x7f0000002040)="d3e066cb706704e43a312bdf165c1c04d7e00711505adca014a2efcd37314bfac56d4c470b136cd2d09d45077f5e4dda0344b817ced4c4fa17efe7a0385217e27fea27b814a95031cc48abeb7ff156e753fedbbd98ce6a5045b92b8cb0a92b9f20c00bd21130bd020a73a6da505b450149aca86a0908df", 0x77}, {&(0x7f00000020c0)="437017958050e7b623f573a46ac8445f397da1b4158059073d42bf2cfa42adef8bd913a58c7c9846d322ae7d127a24a0b5e3b613d9b744b8499c3777c2dd90999a25654b208ab93d90f37eda1f7c7c553e16b51670027caa5a429595548b3786e522e36cb583ef1b505549bc1825256bb33368c7ebbb8a94fb44093a44f8207b49ee09b5b5d7d0efb23220c7314641578992cf9058df696dfb3d1c849872b498b5ee4fa61ec8417d63e7c36cb84490e6d6f65cef79c1abd80af210311184fd1a0dacfe9d2c8321f32e30ba525fdb9fd70489c11fc424ff261899c975d8e5857dbe0ab43cfee510850c6a3450d74b2e350d4128", 0xf3}, {&(0x7f00000021c0)="abc637f0408979fd6c339c236d5f844d6a4510d1508b2536b8", 0x19}, {&(0x7f0000002200)="2941f4a7eabfbdd3be15bc2c9fc409518e5002153b51b2ef8d2bad2c058992e0cb667bfcf8bd35d0e272a03b0ec08dfe414d5c48406dc296d7d0ec", 0x3b}, {&(0x7f0000002240)="27e3f68019969dc62bbce75b8e32a43a44381714df779f9b0c09c0800dcd0f01b74db76a332790d1e85a2be29edfce669b12e6325095f9f32d3cdf31d6b8fb4edabef0907c47c6ae5235302465501b42b1b1e2ac3f535826699fba7857", 0x5d}, {&(0x7f00000022c0)="fc250686c323d606430971ef5a9b4ac38095b8fcb33a7cf866a8b179e76b32f73236ecc9e5078ab7d287d5d93316ef90430f1a2897980565f28801cd591317b15cd567d041d5c517965dc410f1ebed1d03447273925687f70e4303ad5b4a9bb23a1b82ba398792225ddfa514863d26a035868d402473911278d27c0f4689754baf8942e5375613160f4bbdf77cf2e53015428af7069bbc039046019f74aaafb49add5a864fa5f4e8d8cc9fb763750263cd3e7877d0004cc0bb9f615124d291deb7e6ec2d94387fdcddcb36bb", 0xcc}, {&(0x7f00000023c0)="9adacaf244e6cb6d64f397d73e5cc380834a5125bfea954d428f64b4a20e675295733f09101a368457a1d01050a0e2a5595867c853afbcfdb368ff350f048fd15fefe091bb0ab33f275b8dc68a147f07fdf6e85ca4b73ece783c6fe3f57207e77ce53ceca2a0b5f73deaf34f0720756d792312a07208010600a30e0c9a3f0eabcc9fac7c8599835229ff59c97d5581d1c4145f33ec353e2e91e91e7415325965a95e39b8af3e5b7bc052173105ef26142a2af6a55264239aaaac414754", 0xbd}, {&(0x7f0000002480)="345664c540ca", 0x6}, {&(0x7f00000024c0)="81439b9443ab27f3723ddb1b10b162f4f4d0cf7a9de1dd4bd8073cded4b9eb05", 0x20}], 0xa, &(0x7f00000025c0)={0x10, 0x11, 0x5}, 0x10}, {&(0x7f0000002600)={0x27, r13, 0xffffffffffffffff, 0x4, 0x4, 0x8, "502bb84c2f31fe140949af124fbfe5842e290215ad873ecb3776cffce42d8566b7e9f5066ef4530bd94c06e1a71fb56273ce2aec95578d489e3c33805853f0", 0x3b}, 0x60, &(0x7f0000002c40)=[{&(0x7f0000002680)="597b75c438bf7f2937265697b4608fd2ceb9a6bc67757389de19e6f5c1902032306a57cc066d75b8e3a00825fb7b257e9b8c59f09967654118a000f0b8f5ad28c7c311c6fd1a919064a8c9e7a5dba407b136aae8e2c35c541967e8c46b5488657b7da0f3426eca0f4c925740ebbc05ddac13b3a3fd094550e3a07fbc5f58dd1ac80ce1a823dad49cd395ca9cd1408834e84f4b92efd06ae24a6892cfb4098eaae05ba987c73bb70cab8e62b7cd0345efdf472dea30229bda79808868e79cac0ec0a35cfe51a34bcd583bd48c17ea191aaffd114f183deb0e72b13142a8cf90ba0fce08b45e68ea", 0xe7}, {&(0x7f0000002780)="15ba29c0d2f83d30cd75715942ae15539768859d168e99de43c39d5c8688a36bb8409499477b97500b45632c4e585ef6b71998d4db2167eefb6692092ff6bc12b0bb9ea073375516870fe73728eb8cf70a150b0d28330d1409690d183c22f33c21fb6e6e7cbdfa7d8d017a4492607a980a18f94ff9f3c7b080799d3cc673ee04e38297ba95fe", 0x86}, {&(0x7f0000002840)="66123ff1cc7a808854ba806761f9f992e1f8d1be44ca5efa6412e9a3e611600a509cf82693e9aa1fa42d82ad568ba19873fcaf3667acf6ffcc6ed4af475998397b4ddcbcc37dd054445d3348db81f60c889ffc7321080575e6b2904e8a7729946acba92d65cd677a8c1c6d4f93f2eb605aad5dd65ec314a1a1bbae491445ff3ebbe446f8bad5e08abc1855ccb9095bfc2abf88826e568afb894bde3effede90afb10cc8e849dadb46752e4582cff", 0xae}, {&(0x7f0000002900)="6b10b48c01006c86167d026187", 0xd}, {&(0x7f0000002940)="6d00fe8301965eb79d46bf299ac8e4b1fc7d8eb6342a333d956360188830e21114b22fc8c85e2fac5c3156d6386f42c6c1f96dc986d030be798822c7ad6d6ce7ee11c5a58dd5f9a513b7ecc6699c45b4d488f8d56c82a683d0dfff02ee52e92b495d13d7e4cb4eb359c0116baa2226076a2e898b3bb391c57fd1895e8c36897b3758044fce94bb6b20f63a2bc5fa8b7cea17eb0955d4113f006210f5ee359a0a91e54d56c288c1d53e8fab169758d1b844a04600fa97034ccca4a238e33e7d4f2a183f20c656e456aa4a582a70ef8706f79c52a448389858c05e45ac0036462c4d5a62fbefdef2e325f7ecffa24ae85b", 0xf0}, {&(0x7f0000002a40)="e7c0713acc516bfe082a1015934a451f273e56d81556a637122f90d235595755f70a175188786f3ffd59673d560a3f2ba30acc93b8dbabf2faf6ccf3806e9b3ad333809fc345a3aced2744b5a5f20f51cbbf3deac89355a98ab5a9d4fff11e0782b73d90984587ef42dcf0ac2debfd7485cc7797b291f8130c16f7bcf6448680061306c6bd21d67d0be93724a04bfd8e032345cc8a1578c5510e", 0x9a}, {&(0x7f0000002b00)="b7feccf354b2175225b6f57fa374619ebbdce46589dd29ccc067c40aef801792dc502918b4bced", 0x27}, {&(0x7f0000002b40)="76bc76a2a86eb16b3330aa1a3b30ce79fa2ed97cb179ff607feb16c522522a5a91b2c3a96bd5e2b35fd0759d7cf68b0939c6a30cbfe628c07b6b0064c4a4737382642837b4b405cbc0674e3bfd563aa1fff1f38a6bc2f020a3e33bdff894c3a0bb7d126e4bb77c52122bd794d46ade442848585592fcde8dae822e0555de971aaae0e301c7044cfd1fd881e8e7f1a89ed0acb3a1510fb6a69c75612cc4014595b631a88d9a41ffefa2091916f42dde05b0890ac1a2a8aa7ab4a9af00b52d15f2109c3cf909d0a9734e486542b322ee77acb67b2bfee599b9c614d453044513373f73", 0xe2}], 0x8, &(0x7f0000002cc0)={0x90, 0x6, 0xb7e, "5e1ce8293626b3b250e83061f9acbf6ab25cd8ac60f0ef270ee3036f4794d04d20df9da9139c3af66fe33cdfbb0258d8876463f7e9d203b04e80d2304349658557ac4f2556eccebcb5a486dd7c589cff28fc3d1650cb76173df4c23902341f8919bcfaeff8544cccbbfe5187c9fbdcdae22f71d996da2f416a392035"}, 0x90}], 0x6, 0x20040000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) 9.851119371s ago: executing program 0 (id=4996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x400c6313, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c, 0xfffffffffffffffc, &(0x7f0000000440)="f4e966447295797ce10289339cfecce5a6255957b4c07a12b3e3b551f2f96321ceecb86e25afa8943de1028662d8f35d26e61b369db2f5eaa7380e311f817bf7d826b7f28df3d5bae5d6f506"}) 9.704329996s ago: executing program 0 (id=4997): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 9.657823822s ago: executing program 0 (id=4998): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r2, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x81, 0x7c0, &(0x7f0000000700)="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", 0x4}) 3.254972727s ago: executing program 6 (id=5031): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 3.035408821s ago: executing program 6 (id=5034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(r3, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 2.988056279s ago: executing program 5 (id=5035): unshare(0x8040600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fallocate(r0, 0x41, 0x0, 0x3fe) 2.763928125s ago: executing program 2 (id=5036): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="09052c"], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) 2.71637018s ago: executing program 5 (id=5037): r0 = socket(0x840000000002, 0x3, 0xf8) sendmmsg$inet(r0, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x80000003}}], 0x18}}], 0x1, 0x0) 1.943959873s ago: executing program 2 (id=5038): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.943563978s ago: executing program 6 (id=5039): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 1.908538793s ago: executing program 5 (id=5040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0xf, 0x730, 0x101, 0x18, "e000"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.755051761s ago: executing program 2 (id=5041): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) 1.547972422s ago: executing program 2 (id=5042): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 579.565418ms ago: executing program 6 (id=5043): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 561.779306ms ago: executing program 5 (id=5044): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @mcast1, 0x40}, 0x1c) 266.282718ms ago: executing program 5 (id=5045): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 265.386321ms ago: executing program 6 (id=5046): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[], 0x144) 219.973912ms ago: executing program 2 (id=5047): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 134.404359ms ago: executing program 0 (id=4999): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) r2 = memfd_secret(0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x3, 0x83, "e5a140694c22029db93f5bd4ce57498e44e40b5f70f20f95930ee63d018787883c3b7fdde2b369c0238179bbccd7633a4f21dbcec72a2e11b391c52c602b38917eb10f3ccb8410c7dfc0025a7422287ae49fc5796efa7f186d935df772b8611541149d495fa83f8b41b9587ba7c9cc962834c221f8325b827d498eb729679628bf6b66"}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x10}) 116.671611ms ago: executing program 6 (id=5048): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r0, 0x200000000000000) fallocate(r0, 0x3, 0x1, 0xfffffffb) 76.969111ms ago: executing program 5 (id=5049): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x3, 0x98, 0x17, 0xff, &(0x7f00000000c0)="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"}) 0s ago: executing program 2 (id=5050): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f40)=""/6, 0x6}, 0x8001}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): ep0 maxpacket: 16 [ 972.580566][T11977] usb 7-1: config index 0 descriptor too short (expected 59154, got 18) [ 972.593103][T11977] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 972.603039][T11977] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 972.615499][T11977] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 972.624669][T11977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.632785][T11977] usb 7-1: Product: syz [ 972.637186][T11977] usb 7-1: Manufacturer: syz [ 972.641897][T11977] usb 7-1: SerialNumber: syz [ 972.650028][T11977] usb 7-1: config 0 descriptor?? [ 972.659798][T11977] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 973.078373][ T5946] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 973.237343][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 973.245492][ T5946] usb 1-1: can't read configurations, error -61 [ 973.275532][ T9] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 973.292575][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 973.300126][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 973.307786][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 973.324065][ T9] usb 6-1: USB disconnect, device number 51 [ 973.390816][ T5946] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 973.550997][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 973.558993][ T5946] usb 1-1: can't read configurations, error -61 [ 973.565617][ T5946] usb usb1-port1: attempt power cycle [ 973.878035][T11977] usb 7-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 973.909486][ T5946] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 973.941328][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 973.955824][ T5946] usb 1-1: can't read configurations, error -61 [ 974.070863][ T9] usb 7-1: USB disconnect, device number 22 [ 974.081943][ T9] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 974.093305][ T9] ssu100 7-1:0.0: device disconnected [ 974.100707][ T5946] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 974.132825][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 974.142426][ T5946] usb 1-1: can't read configurations, error -61 [ 974.150204][ T5946] usb usb1-port1: unable to enumerate USB device [ 974.898241][ T5946] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 975.088488][ T5946] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 975.108959][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.123417][ T5946] usb 7-1: Product: syz [ 975.127644][ T5946] usb 7-1: Manufacturer: syz [ 975.134538][ T5946] usb 7-1: SerialNumber: syz [ 975.153055][ T5946] usb 7-1: config 0 descriptor?? [ 975.162500][ T5946] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 975.468247][T17001] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 975.631914][T17001] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.642427][T17001] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 975.651935][T17001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.663900][T17001] usb 6-1: config 0 descriptor?? [ 975.674304][T17001] pwc: Askey VC010 type 2 USB webcam detected. [ 976.078161][T17001] pwc: recv_control_msg error -32 req 02 val 2b00 [ 976.085715][T17001] pwc: recv_control_msg error -32 req 02 val 2700 [ 976.093524][T17001] pwc: recv_control_msg error -32 req 02 val 2c00 [ 976.101154][T17001] pwc: recv_control_msg error -32 req 04 val 1000 [ 976.108475][T17001] pwc: recv_control_msg error -32 req 04 val 1300 [ 976.115795][T17001] pwc: recv_control_msg error -32 req 04 val 1400 [ 976.177516][ T5946] gspca_sunplus: reg_r err -71 [ 976.189964][ T5946] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 976.200833][ T5946] usb 7-1: USB disconnect, device number 23 [ 976.211046][ T9] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 976.325396][T17001] pwc: recv_control_msg error -71 req 02 val 2100 [ 976.335054][T17001] pwc: recv_control_msg error -71 req 04 val 1500 [ 976.343266][T17001] pwc: recv_control_msg error -71 req 02 val 2500 [ 976.350655][T17001] pwc: recv_control_msg error -71 req 02 val 2400 [ 976.357495][T17001] pwc: recv_control_msg error -71 req 02 val 2600 [ 976.364739][T17001] pwc: recv_control_msg error -71 req 02 val 2900 [ 976.370317][ T9] usb 1-1: config 0 has no interfaces? [ 976.372407][T17001] pwc: recv_control_msg error -71 req 02 val 2800 [ 976.384088][T17001] pwc: recv_control_msg error -71 req 04 val 1100 [ 976.386761][ T9] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 976.392014][T17001] pwc: recv_control_msg error -71 req 04 val 1200 [ 976.407108][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.408817][T17001] pwc: Registered as video103. [ 976.427402][ T9] usb 1-1: Product: syz [ 976.431998][ T9] usb 1-1: Manufacturer: syz [ 976.436638][ T9] usb 1-1: SerialNumber: syz [ 976.441452][T17001] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input141 [ 976.459687][T17001] usb 6-1: USB disconnect, device number 52 [ 976.497613][ T9] usb 1-1: config 0 descriptor?? [ 976.979815][T19010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.993100][T19010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.163906][T19023] fuse: Bad value for 'fd' [ 977.390617][T19032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.533369][T13279] usb 1-1: USB disconnect, device number 61 [ 977.619785][T19038] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 977.633019][T19038] VFS: Can't find a romfs filesystem on dev rnullb0. [ 977.633019][T19038] [ 977.658149][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 977.812729][ T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 977.824737][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 977.835828][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 977.847263][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 977.864076][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.878207][T19034] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 977.938498][T13279] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 978.018245][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 978.094851][T13279] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 978.104058][T13279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.112190][T13279] usb 1-1: Product: syz [ 978.116425][T13279] usb 1-1: Manufacturer: syz [ 978.121368][T13279] usb 1-1: SerialNumber: syz [ 978.128626][T13279] usb 1-1: config 0 descriptor?? [ 978.139072][T13279] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 978.172193][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 978.181391][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.190046][ T10] usb 7-1: Product: syz [ 978.194274][ T10] usb 7-1: Manufacturer: syz [ 978.199026][ T10] usb 7-1: SerialNumber: syz [ 978.207380][ T10] usb 7-1: config 0 descriptor?? [ 978.216246][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 978.849891][T19048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.860845][T19048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.912296][ T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 978.932608][ T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input142 [ 979.004519][ T9] usb 6-1: USB disconnect, device number 53 [ 979.010720][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 979.144084][T13279] gspca_sunplus: reg_r err -71 [ 979.151057][T13279] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 979.162398][T13279] usb 1-1: USB disconnect, device number 62 [ 979.548686][T19057] exFAT-fs (rnullb0): invalid boot record signature [ 979.555359][T19057] exFAT-fs (rnullb0): failed to read boot sector [ 979.563868][T19057] exFAT-fs (rnullb0): failed to recognize exfat type [ 979.643671][T19059] binder: 19058:19059 ioctl c0306201 200000000500 returned -22 [ 980.088275][T13279] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 980.178020][ T5946] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 980.238460][T13279] usb 6-1: Using ep0 maxpacket: 32 [ 980.253750][T13279] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 980.262336][T13279] usb 6-1: config 0 has no interface number 0 [ 980.269594][T13279] usb 6-1: config 0 interface 12 has no altsetting 0 [ 980.279212][T13279] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 980.289839][T13279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.298323][T13279] usb 6-1: Product: syz [ 980.302517][T13279] usb 6-1: Manufacturer: syz [ 980.307184][T13279] usb 6-1: SerialNumber: syz [ 980.317628][T13279] usb 6-1: config 0 descriptor?? [ 980.338177][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 980.350882][ T5946] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 980.361231][ T5946] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 980.374101][ T5946] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.383619][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.392033][ T5946] usb 1-1: Product: ä€ [ 980.396691][ T5946] usb 1-1: Manufacturer: [ 980.401524][ T5946] usb 1-1: SerialNumber: 횪ᘻᆚà¾é¥°ì«î¨½áˆ©é˜ê¶°ãˆ£ïœ¢è»µè¾ì­¯êˆ­Ì¥ã“´ï¢¸äµ«î¥šæ¡ë¶Ÿç¡œç§¡á‘£î—‚钋赲ʭ㉹渮ﶱ淙ᘽ筈î¾ï¼ƒã ”㰿謬Mî¡žï«ä€„⚈êŠâž à©¯à£”æ”㹺ä¢è¦î™–憯íŒë·†ç˜œì§“ܵ쎛諨긣ç–黈倴⑽料뎲ꕭ鳺鑢斪è‘⢄êŒîµ€ê—®Ð¥î¾µã¦‘Ꞻệ堉籠îµë’Šé¡‹ì¨«ä–´ç§¥ [ 980.529335][T19063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.554050][T19063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.856596][T19071] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 980.886077][T19071] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 980.890157][T13279] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 980.913914][T19087] binder: 19086:19087 ioctl c0306201 200000000500 returned -22 [ 980.941853][T13279] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 980.969587][T13279] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 980.977324][T13279] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 981.010780][T13279] usb 6-1: USB disconnect, device number 54 [ 981.111050][T19071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.121879][T19071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.134622][T19071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.145490][T19071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.162472][ T5946] cdc_ncm 1-1:1.0: bind() failure [ 981.179373][ T5946] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 981.187954][ T5946] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 981.197105][ T5946] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 981.217523][ T5946] usb 1-1: USB disconnect, device number 63 [ 981.524018][T19091] qnx4: no qnx4 filesystem (no root dir). [ 981.655808][T19095] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4649'. [ 981.795098][T19101] FAULT_INJECTION: forcing a failure. [ 981.795098][T19101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.814430][T19101] CPU: 1 UID: 0 PID: 19101 Comm: syz.0.4652 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 981.814458][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 981.814470][T19101] Call Trace: [ 981.814479][T19101] [ 981.814487][T19101] dump_stack_lvl+0x189/0x250 [ 981.814514][T19101] ? __pfx____ratelimit+0x10/0x10 [ 981.814544][T19101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 981.814567][T19101] ? __pfx__printk+0x10/0x10 [ 981.814590][T19101] ? __might_fault+0xb0/0x130 [ 981.814625][T19101] should_fail_ex+0x414/0x560 [ 981.814656][T19101] _copy_from_user+0x2d/0xb0 [ 981.814677][T19101] ___sys_sendmsg+0x158/0x2a0 [ 981.814707][T19101] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.814769][T19101] ? __fget_files+0x2a/0x420 [ 981.814797][T19101] ? __fget_files+0x3a0/0x420 [ 981.814837][T19101] __x64_sys_sendmsg+0x19b/0x260 [ 981.814866][T19101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.814902][T19101] ? __pfx_ksys_write+0x10/0x10 [ 981.814926][T19101] ? rcu_is_watching+0x15/0xb0 [ 981.814954][T19101] ? do_syscall_64+0xbe/0x3b0 [ 981.814978][T19101] do_syscall_64+0xfa/0x3b0 [ 981.814996][T19101] ? lockdep_hardirqs_on+0x9c/0x150 [ 981.815025][T19101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.815045][T19101] ? clear_bhb_loop+0x60/0xb0 [ 981.815070][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.815089][T19101] RIP: 0033:0x7f398a38e929 [ 981.815106][T19101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.815124][T19101] RSP: 002b:00007f398b271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.815145][T19101] RAX: ffffffffffffffda RBX: 00007f398a5b5fa0 RCX: 00007f398a38e929 [ 981.815159][T19101] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 981.815173][T19101] RBP: 00007f398b271090 R08: 0000000000000000 R09: 0000000000000000 [ 981.815185][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.815197][T19101] R13: 0000000000000000 R14: 00007f398a5b5fa0 R15: 00007ffdad8f9e08 [ 981.815234][T19101] [ 982.102669][T19103] openvswitch: netlink: nsh attribute has 48055 unknown bytes. [ 982.113861][T19103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.150055][ T5946] usb 7-1: USB disconnect, device number 24 [ 982.406033][T19118] syz.0.4659 (19118) used obsolete PPPIOCDETACH ioctl [ 982.638066][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 982.790895][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.803113][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 982.815078][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 982.824293][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 982.832438][ T10] usb 6-1: SerialNumber: syz [ 982.838001][T11977] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 982.867939][T13279] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 982.997820][T11977] usb 7-1: Using ep0 maxpacket: 8 [ 983.005239][T11977] usb 7-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 983.017850][T11977] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 983.029287][T11977] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 983.038427][T11977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.046543][T11977] usb 7-1: Product: syz [ 983.052463][T11977] usb 7-1: Manufacturer: syz [ 983.061982][T11977] usb 7-1: SerialNumber: syz [ 983.063543][T13279] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 983.070782][T11977] usb 7-1: config 0 descriptor?? [ 983.085065][ T10] usb 6-1: 0:2 : does not exist [ 983.096339][T13279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.109912][T13279] usb 1-1: Product: syz [ 983.116331][T13279] usb 1-1: Manufacturer: syz [ 983.122951][ T10] usb 6-1: USB disconnect, device number 55 [ 983.136498][T13279] usb 1-1: SerialNumber: syz [ 983.158647][T13279] usb 1-1: config 0 descriptor?? [ 983.173240][T13279] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 983.292187][ T9] usb 7-1: USB disconnect, device number 25 [ 983.646329][T19131] FAULT_INJECTION: forcing a failure. [ 983.646329][T19131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.659757][T19131] CPU: 1 UID: 0 PID: 19131 Comm: syz.5.4665 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 983.659786][T19131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 983.659799][T19131] Call Trace: [ 983.659808][T19131] [ 983.659817][T19131] dump_stack_lvl+0x189/0x250 [ 983.659846][T19131] ? __pfx____ratelimit+0x10/0x10 [ 983.659879][T19131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.659903][T19131] ? __pfx__printk+0x10/0x10 [ 983.659958][T19131] ? __might_fault+0xb0/0x130 [ 983.659997][T19131] should_fail_ex+0x414/0x560 [ 983.660041][T19131] _copy_from_iter+0x1db/0x16f0 [ 983.660081][T19131] ? policy_nodemask+0x27c/0x720 [ 983.660106][T19131] ? __pfx__copy_from_iter+0x10/0x10 [ 983.660143][T19131] ? set_page_refcounted+0xa0/0x1e0 [ 983.660175][T19131] af_alg_sendmsg+0x1436/0x22e0 [ 983.660206][T19131] ? __pfx___might_resched+0x10/0x10 [ 983.660254][T19131] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 983.660286][T19131] ? __pfx_aa_sk_perm+0x10/0x10 [ 983.660313][T19131] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 983.660345][T19131] ? aa_sock_msg_perm+0x94/0x160 [ 983.660367][T19131] ? skcipher_sendmsg+0x26/0xf0 [ 983.660387][T19131] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 983.660411][T19131] __sock_sendmsg+0x219/0x270 [ 983.660447][T19131] ____sys_sendmsg+0x52d/0x830 [ 983.660480][T19131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.660516][T19131] ? import_iovec+0x74/0xa0 [ 983.660540][T19131] ___sys_sendmsg+0x21f/0x2a0 [ 983.660569][T19131] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.660635][T19131] ? __fget_files+0x2a/0x420 [ 983.660663][T19131] ? __fget_files+0x3a0/0x420 [ 983.660704][T19131] __sys_sendmmsg+0x227/0x430 [ 983.660737][T19131] ? __pfx___sys_sendmmsg+0x10/0x10 [ 983.660760][T19131] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 983.660809][T19131] ? ksys_write+0x22a/0x250 [ 983.660838][T19131] ? __pfx_ksys_write+0x10/0x10 [ 983.660862][T19131] ? rcu_is_watching+0x15/0xb0 [ 983.660892][T19131] __x64_sys_sendmmsg+0xa0/0xc0 [ 983.660921][T19131] do_syscall_64+0xfa/0x3b0 [ 983.660940][T19131] ? lockdep_hardirqs_on+0x9c/0x150 [ 983.660976][T19131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.660996][T19131] ? clear_bhb_loop+0x60/0xb0 [ 983.661021][T19131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.661041][T19131] RIP: 0033:0x7f1b77d8e929 [ 983.661059][T19131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.661076][T19131] RSP: 002b:00007f1b78c44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 983.661099][T19131] RAX: ffffffffffffffda RBX: 00007f1b77fb5fa0 RCX: 00007f1b77d8e929 [ 983.661115][T19131] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004 [ 983.661129][T19131] RBP: 00007f1b78c44090 R08: 0000000000000000 R09: 0000000000000000 [ 983.661153][T19131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 983.661164][T19131] R13: 0000000000000000 R14: 00007f1b77fb5fa0 R15: 00007fff198aadf8 [ 983.661193][T19131] [ 984.497990][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 984.551232][T19148] netlink: 'syz.2.4672': attribute type 11 has an invalid length. [ 984.560636][T19148] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4672'. [ 984.580629][T19150] FAULT_INJECTION: forcing a failure. [ 984.580629][T19150] name failslab, interval 1, probability 0, space 0, times 0 [ 984.593431][T19150] CPU: 1 UID: 0 PID: 19150 Comm: syz.5.4673 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 984.593461][T19150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.593474][T19150] Call Trace: [ 984.593483][T19150] [ 984.593492][T19150] dump_stack_lvl+0x189/0x250 [ 984.593521][T19150] ? __pfx____ratelimit+0x10/0x10 [ 984.593555][T19150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.593579][T19150] ? __pfx__printk+0x10/0x10 [ 984.593610][T19150] ? ref_tracker_alloc+0x318/0x460 [ 984.593641][T19150] should_fail_ex+0x414/0x560 [ 984.593672][T19150] should_failslab+0xa8/0x100 [ 984.593701][T19150] kmem_cache_alloc_noprof+0x73/0x3c0 [ 984.593737][T19150] ? skb_clone+0x212/0x3a0 [ 984.593769][T19150] skb_clone+0x212/0x3a0 [ 984.593800][T19150] __netlink_deliver_tap+0x404/0x850 [ 984.593847][T19150] ? netlink_deliver_tap+0x2e/0x1b0 [ 984.593873][T19150] netlink_deliver_tap+0x19c/0x1b0 [ 984.593899][T19150] netlink_unicast+0x72f/0x8d0 [ 984.593932][T19150] netlink_sendmsg+0x805/0xb30 [ 984.593966][T19150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.593995][T19150] ? aa_sock_msg_perm+0x94/0x160 [ 984.594018][T19150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 984.594047][T19150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.594073][T19150] __sock_sendmsg+0x219/0x270 [ 984.594108][T19150] ____sys_sendmsg+0x505/0x830 [ 984.594140][T19150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.594195][T19150] ? import_iovec+0x74/0xa0 [ 984.594220][T19150] ___sys_sendmsg+0x21f/0x2a0 [ 984.594249][T19150] ? __pfx____sys_sendmsg+0x10/0x10 [ 984.594316][T19150] ? __fget_files+0x2a/0x420 [ 984.594345][T19150] ? __fget_files+0x3a0/0x420 [ 984.594386][T19150] __x64_sys_sendmsg+0x19b/0x260 [ 984.594417][T19150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 984.594454][T19150] ? __pfx_ksys_write+0x10/0x10 [ 984.594479][T19150] ? rcu_is_watching+0x15/0xb0 [ 984.594508][T19150] ? do_syscall_64+0xbe/0x3b0 [ 984.594533][T19150] do_syscall_64+0xfa/0x3b0 [ 984.594551][T19150] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.594581][T19150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.594602][T19150] ? clear_bhb_loop+0x60/0xb0 [ 984.594627][T19150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.594648][T19150] RIP: 0033:0x7f1b77d8e929 [ 984.594666][T19150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.594685][T19150] RSP: 002b:00007f1b78c44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.594707][T19150] RAX: ffffffffffffffda RBX: 00007f1b77fb5fa0 RCX: 00007f1b77d8e929 [ 984.594723][T19150] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 984.594736][T19150] RBP: 00007f1b78c44090 R08: 0000000000000000 R09: 0000000000000000 [ 984.594750][T19150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.594762][T19150] R13: 0000000000000000 R14: 00007f1b77fb5fa0 R15: 00007fff198aadf8 [ 984.594795][T19150] [ 984.667851][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 984.905021][ T10] usb 7-1: config index 0 descriptor too short (expected 59154, got 18) [ 984.916765][ T10] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 984.935030][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 984.950806][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 984.960064][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.969113][ T10] usb 7-1: Product: syz [ 984.973344][ T10] usb 7-1: Manufacturer: syz [ 984.978528][ T10] usb 7-1: SerialNumber: syz [ 984.987112][ T10] usb 7-1: config 0 descriptor?? [ 985.001981][ T10] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 985.108253][T10227] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 985.261016][T10227] usb 6-1: config 0 has an invalid interface number: 177 but max is 0 [ 985.278548][T10227] usb 6-1: config 0 has no interface number 0 [ 985.284712][T10227] usb 6-1: config 0 interface 177 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 985.310575][T10227] usb 6-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=9f.2b [ 985.328991][T10227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.350167][T10227] usb 6-1: config 0 descriptor?? [ 985.371831][T10227] HFC-S_USB 6-1:0.177: probe with driver HFC-S_USB failed with error -5 [ 985.625628][T13279] usb 6-1: USB disconnect, device number 56 [ 985.810927][T19169] sp0: Synchronizing with TNC [ 986.212041][ T10] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 986.243931][ T10] usb 7-1: USB disconnect, device number 26 [ 986.303327][T19180] FAT-fs (rnullb0): bogus number of reserved sectors [ 986.310484][T19180] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 986.546123][ T10] usb 1-1: USB disconnect, device number 64 [ 986.777387][T19196] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4691'. [ 986.857942][T10227] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 986.925728][T19202] netlink: 'syz.6.4694': attribute type 2 has an invalid length. [ 987.009253][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 987.018935][T10227] usb 6-1: Using ep0 maxpacket: 8 [ 987.040038][T10227] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 987.053737][T10227] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 987.064431][T10227] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 987.074419][T10227] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 987.084522][T10227] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.099075][T10227] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 987.108511][T10227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.167673][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 987.175146][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 987.186909][ T10] usb 1-1: config 0 has no interface number 0 [ 987.197974][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 987.213438][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.221534][ T10] usb 1-1: Product: syz [ 987.225924][ T10] usb 1-1: Manufacturer: syz [ 987.230813][ T10] usb 1-1: SerialNumber: syz [ 987.240684][ T10] usb 1-1: config 0 descriptor?? [ 987.253473][ T10] smsc95xx v2.0.0 [ 987.324712][T10227] usb 6-1: usb_control_msg returned -32 [ 987.330549][T10227] usbtmc 6-1:16.0: can't read capabilities [ 987.690274][T19209] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 987.706859][ T5892] usb 6-1: USB disconnect, device number 57 [ 987.766803][T19213] binder: 19193:19213 ioctl 4018920a 200000000300 returned -22 [ 987.907050][T19186] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 988.237613][ T1211] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 988.257771][ T5892] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 988.357087][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 988.373401][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 988.385243][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 988.396971][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 988.412779][ T10] usb 1-1: USB disconnect, device number 65 [ 988.419155][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 988.425822][ T1211] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 988.440007][ T5892] usb 6-1: too many configurations: 86, using maximum allowed: 8 [ 988.450707][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.460425][ T1211] usb 7-1: Product: syz [ 988.465942][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.476900][ T1211] usb 7-1: Manufacturer: syz [ 988.482189][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.493473][ T1211] usb 7-1: SerialNumber: syz [ 988.500058][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.507373][ T1211] usb 7-1: config 0 descriptor?? [ 988.515640][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.532390][ T1211] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 988.538968][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.545473][T19219] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 988.547409][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.558831][T19219] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 988.561866][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.579249][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.585427][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.599452][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.609365][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.627561][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.638282][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.644483][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.658273][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.666348][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.675191][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.687192][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.688045][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4699'. [ 988.693485][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.715885][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.721224][T19221] tipc: Cannot configure node identity twice [ 988.724310][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.737105][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.747395][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.753637][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.767600][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.792645][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.801919][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.812080][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.821373][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.834492][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.842659][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.851505][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.861924][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.868137][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.881960][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.891349][ T5892] usb 6-1: config 4 has an invalid interface number: 15 but max is 0 [ 988.899735][ T5892] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.917565][ T5892] usb 6-1: config 4 has no interface number 0 [ 988.923749][ T5892] usb 6-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.930633][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4700'. [ 988.937210][ T5892] usb 6-1: config 4 interface 15 has no altsetting 0 [ 988.973903][ T5892] usb 6-1: New USB device found, idVendor=0930, idProduct=06b1, bcdDevice=9c.6a [ 988.983225][ T5892] usb 6-1: New USB device strings: Mfr=119, Product=183, SerialNumber=33 [ 988.992283][ T5892] usb 6-1: Product: syz [ 988.996584][ T5892] usb 6-1: Manufacturer: syz [ 989.001406][ T5892] usb 6-1: SerialNumber: syz [ 989.447608][ T5892] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 989.611920][ T5892] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 989.621394][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.638156][ T5892] usb 1-1: Product: syz [ 989.642392][ T5892] usb 1-1: Manufacturer: syz [ 989.647013][ T5892] usb 1-1: SerialNumber: syz [ 989.666687][ T5892] usb 1-1: config 0 descriptor?? [ 989.677869][ T5892] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 989.977908][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4709'. [ 990.113292][T19246] binder: BINDER_SET_CONTEXT_MGR already set [ 990.120648][T19246] binder: 19245:19246 ioctl 4018620d 200000000040 returned -16 [ 990.129744][T19246] binder: 19245:19246 ioctl c0306201 200000000500 returned -22 [ 990.279567][T10227] usb 6-1: USB disconnect, device number 58 [ 990.693510][ T5892] gspca_sunplus: reg_r err -71 [ 990.700116][ T5892] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 990.710817][ T5892] usb 1-1: USB disconnect, device number 66 [ 990.747911][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 990.899637][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.910469][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.920796][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 990.930287][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.943079][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 990.952392][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 990.960569][ T10] usb 6-1: Product: syz [ 990.965064][ T10] usb 6-1: Manufacturer: syz [ 990.975756][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 990.981145][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 990.988612][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 990.994562][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 991.364404][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4718'. [ 991.727503][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 991.788195][ T5892] usb 7-1: USB disconnect, device number 27 [ 991.898346][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.909667][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.924293][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 991.947428][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.963480][ T10] usb 1-1: config 0 descriptor?? [ 992.164647][T19278] vxfs: WRONG superblock magic 00000000 at 1 [ 992.180602][T19278] vxfs: WRONG superblock magic 00000000 at 8 [ 992.201703][T19278] vxfs: can't find superblock. [ 992.419092][ T10] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 992.437184][ T10] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 992.607312][ T10] cp2112 0003:10C4:EA90.0047: Part Number: 0x82 Device Version: 0xFE [ 992.637438][ T5946] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 992.796232][ T5946] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 992.806736][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.820793][ T5946] usb 7-1: Product: syz [ 992.825035][ T5946] usb 7-1: Manufacturer: syz [ 992.831120][ T5946] usb 7-1: SerialNumber: syz [ 992.841664][ T5946] usb 7-1: config 0 descriptor?? [ 992.855384][ T5946] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 993.020041][ T10] cp2112 0003:10C4:EA90.0047: error setting SMBus config [ 993.032510][ T10] cp2112 0003:10C4:EA90.0047: probe with driver cp2112 failed with error -71 [ 993.045503][ T10] usb 1-1: USB disconnect, device number 67 [ 993.058265][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.066909][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.207351][T14515] Bluetooth: hci1: command 0x0c1a tx timeout [ 993.401970][T19295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4727'. [ 993.555772][ T10] usb 6-1: USB disconnect, device number 59 [ 993.882545][ T5946] gspca_sunplus: reg_r err -71 [ 993.890981][ T5946] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 993.932126][ T5946] usb 7-1: USB disconnect, device number 28 [ 994.018260][T19315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4736'. [ 994.333392][T19328] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4742'. [ 994.412439][T19330] afs: Unknown parameter 'à7‡locst' [ 994.420067][T19330] random: crng reseeded on system resumption [ 994.458582][ T5892] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 994.470251][T19332] fuse: Unknown parameter 'grou00000000000000000000' [ 994.591463][T19338] tmpfs: Bad value for 'mpol' [ 994.641550][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.652930][ T5892] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 994.663754][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.675469][ T5892] usb 6-1: config 0 descriptor?? [ 994.695603][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 994.885006][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4751'. [ 995.077314][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 995.095417][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 995.103193][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 995.106385][T19355] fuse: Unknown parameter 'grou00000000000000000000' [ 995.112907][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 995.124786][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 995.134844][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 995.142573][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 995.151553][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 995.159460][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 995.168017][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 995.185593][ T5892] pwc: recv_control_msg error -71 req 02 val 2500 [ 995.193146][ T5892] pwc: recv_control_msg error -71 req 02 val 2400 [ 995.200787][ T5892] pwc: recv_control_msg error -71 req 02 val 2600 [ 995.208377][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 995.215537][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 995.224566][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 995.231801][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 995.239922][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 995.247900][ T10] usb 7-1: config index 0 descriptor too short (expected 59154, got 18) [ 995.258937][ T10] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 995.269089][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 995.278667][ T5892] pwc: Registered as video103. [ 995.289946][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 995.300692][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input143 [ 995.321933][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.351268][ T5892] usb 6-1: USB disconnect, device number 60 [ 995.358052][ T10] usb 7-1: Product: syz [ 995.374543][ T10] usb 7-1: Manufacturer: syz [ 995.389856][ T10] usb 7-1: SerialNumber: syz [ 995.425362][T19360] sp0: Synchronizing with TNC [ 995.436143][ T10] usb 7-1: config 0 descriptor?? [ 995.459158][ T10] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 995.471626][T19359] [U] è [ 995.586122][T19363] syz.0.4756: attempt to access beyond end of device [ 995.586122][T19363] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 995.602044][T19363] efs: cannot read volume header [ 995.926835][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4761'. [ 995.967862][ T5946] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 996.009859][T19375] fuse: Unknown parameter 'grou00000000000000000000' [ 996.147196][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 996.156367][ T5946] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 996.171335][ T5946] usb 1-1: config 0 has no interface number 0 [ 996.182022][ T5946] usb 1-1: New USB device found, idVendor=0eba, idProduct=1080, bcdDevice=7f.ff [ 996.191789][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.200168][ T5946] usb 1-1: Product: syz [ 996.205438][ T5946] usb 1-1: Manufacturer: syz [ 996.216535][T19379] vxfs: WRONG superblock magic 00000000 at 1 [ 996.222726][ T5946] usb 1-1: SerialNumber: syz [ 996.227841][T19379] vxfs: WRONG superblock magic 00000000 at 8 [ 996.233904][T19379] vxfs: can't find superblock. [ 996.242670][ T5946] usb 1-1: config 0 descriptor?? [ 996.256780][ T5946] pl2303 1-1:0.126: required endpoints missing [ 996.473139][T19367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.497344][T19367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.563589][T19385] syzkaller1: entered promiscuous mode [ 996.570212][T19385] syzkaller1: entered allmulticast mode [ 996.573481][ T5946] usb 1-1: USB disconnect, device number 68 [ 996.671217][ T10] usb 7-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 996.883894][ T10] usb 7-1: USB disconnect, device number 29 [ 996.900710][ T10] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 996.921498][ T10] ssu100 7-1:0.0: device disconnected [ 996.996112][T19396] fuse: Unknown parameter 'group_i00000000000000000000' [ 997.478364][T19413] fuse: Unknown parameter 'group_i00000000000000000000' [ 997.552721][T19416] fuse: Unknown parameter 'group_i00000000000000000000' [ 997.739066][T19425] netlink: 'syz.6.4783': attribute type 4 has an invalid length. [ 997.746867][T19425] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4783'. [ 998.019804][T19440] fuse: Unknown parameter 'group_i00000000000000000000' [ 998.088292][T19444] fuse: Unknown parameter 'group_i00000000000000000000' [ 998.186101][ T43] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 998.219903][ T43] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 998.247191][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 998.258108][ T43] usb 3-1: USB disconnect, device number 49 [ 998.409873][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 998.426196][ T10] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 998.443517][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 998.451451][T19461] fuse: Unknown parameter 'group_i00000000000000000000' [ 998.462356][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 998.477393][ T5892] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 998.491835][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 998.501977][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.510711][ T10] usb 6-1: Product: syz [ 998.515100][ T10] usb 6-1: Manufacturer: syz [ 998.539243][ T10] usb 6-1: SerialNumber: syz [ 998.549632][ T10] usb 6-1: config 0 descriptor?? [ 998.573443][ T10] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 998.652535][ T5892] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 998.662089][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.673829][ T5892] usb 7-1: Product: syz [ 998.678511][ T5892] usb 7-1: Manufacturer: syz [ 998.683384][ T5892] usb 7-1: SerialNumber: syz [ 998.693955][ T5892] usb 7-1: config 0 descriptor?? [ 998.704020][ T5892] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 998.766819][T19468] fuse: Unknown parameter 'group_id00000000000000000000' [ 998.838903][ T43] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 999.007073][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 999.019016][ T43] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 999.027611][ T43] usb 1-1: config 0 has no interface number 0 [ 999.033795][ T43] usb 1-1: config 0 interface 32 altsetting 8 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 999.053929][ T43] usb 1-1: config 0 interface 32 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 999.065579][ T43] usb 1-1: config 0 interface 32 has no altsetting 0 [ 999.079541][ T43] usb 1-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=1a.f7 [ 999.097350][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.105418][ T43] usb 1-1: Product: syz [ 999.109676][ T43] usb 1-1: Manufacturer: syz [ 999.114307][ T43] usb 1-1: SerialNumber: syz [ 999.131457][ T43] usb 1-1: config 0 descriptor?? [ 999.144470][T19464] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 999.260320][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4807'. [ 999.360235][T19483] fuse: Unknown parameter 'group_id00000000000000000000' [ 999.405901][ T43] ti_usb_3410_5052 1-1:0.32: TI USB 3410 1 port adapter converter detected [ 999.440059][ T43] ti_usb_3410_5052 1-1:0.32: missing endpoints [ 999.472440][ T43] usb 1-1: USB disconnect, device number 69 [ 999.611658][T19492] fuse: Unknown parameter 'group_id00000000000000000000' [ 999.719707][ T5892] gspca_sunplus: reg_r err -71 [ 999.724680][ T5892] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 999.764407][ T5892] usb 7-1: USB disconnect, device number 30 [ 999.774767][ T10] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 999.983861][ T5946] usb 6-1: USB disconnect, device number 61 [ 1000.001553][ T5946] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1000.002118][ T5946] ssu100 6-1:0.0: device disconnected [ 1000.260379][T19511] fuse: Unknown parameter 'group_id00000000000000000000' [ 1000.473504][T19518] fuse: Unknown parameter 'group_id00000000000000000000' [ 1000.609264][T19524] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1000.635751][T19524] UDF-fs: Scanning with blocksize 4096 failed [ 1000.764524][T19529] wg0 speed is unknown, defaulting to 1000 [ 1000.771560][T19534] fuse: Unknown parameter 'group_id00000000000000000000' [ 1000.790964][T19531] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1000.867175][ T5946] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1001.050499][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1001.073834][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1001.092558][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1001.104926][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1001.127598][T11977] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1001.143602][ T5946] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1001.156262][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.170416][ T5946] usb 7-1: config 0 descriptor?? [ 1001.311399][T11977] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1001.322662][T11977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.332398][T11977] usb 3-1: Product: syz [ 1001.336744][T11977] usb 3-1: Manufacturer: syz [ 1001.342724][T11977] usb 3-1: SerialNumber: syz [ 1001.351272][T11977] usb 3-1: config 0 descriptor?? [ 1001.369585][T11977] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1001.436938][ T43] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1001.515419][T19546] fuse: Bad value for 'user_id' [ 1001.521357][T19546] fuse: Bad value for 'user_id' [ 1001.594896][ T5946] plantronics 0003:047F:FFFF.0048: ignoring exceeding usage max [ 1001.628880][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.642990][ T5946] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 1001.651515][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1001.666950][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1001.682757][ T5946] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1001.696471][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.723374][ T43] usb 6-1: config 0 descriptor?? [ 1001.741082][ T43] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1002.067018][ T43] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1002.236867][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1002.244022][ T43] usb 1-1: config index 0 descriptor too short (expected 59154, got 18) [ 1002.253614][ T43] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1002.262476][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1002.274337][ T43] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1002.283495][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.291605][ T43] usb 1-1: Product: syz [ 1002.295917][ T43] usb 1-1: Manufacturer: syz [ 1002.300761][ T43] usb 1-1: SerialNumber: syz [ 1002.308593][ T43] usb 1-1: config 0 descriptor?? [ 1002.318613][ T43] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1003.306285][T19562] fuse: Bad value for 'user_id' [ 1003.313587][T19562] fuse: Bad value for 'user_id' [ 1003.529564][ T43] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 1003.539155][T11977] usb 3-1: USB disconnect, device number 50 [ 1003.550331][ T43] usb 1-1: USB disconnect, device number 70 [ 1003.726853][ T10] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 1003.866798][ T10] usb 7-1: device descriptor read/64, error -71 [ 1004.118546][ T10] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 1004.145441][T19573] syzkaller1: entered promiscuous mode [ 1004.161355][T19573] syzkaller1: entered allmulticast mode [ 1004.204070][ T5892] usb 6-1: USB disconnect, device number 62 [ 1004.209264][T19577] fuse: Bad value for 'user_id' [ 1004.230803][T19577] fuse: Bad value for 'user_id' [ 1004.257328][ T10] usb 7-1: device descriptor read/64, error -71 [ 1004.424116][T19582] loop7: detected capacity change from 0 to 16384 [ 1004.512203][ T10] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 1004.548132][ T10] usb 7-1: device descriptor read/8, error -71 [ 1004.560531][T19588] fuse: Bad value for 'user_id' [ 1004.588462][T19588] fuse: Bad value for 'user_id' [ 1004.701662][T19591] exFAT-fs (rnullb0): invalid boot record signature [ 1004.709785][T19591] exFAT-fs (rnullb0): failed to read boot sector [ 1004.716329][T19591] exFAT-fs (rnullb0): failed to recognize exfat type [ 1004.786847][ T10] usb 7-1: reset high-speed USB device number 31 using dummy_hcd [ 1004.880257][ T10] usb 7-1: device descriptor read/8, error -71 [ 1004.989585][ T1211] usb 7-1: USB disconnect, device number 31 [ 1004.999530][T19593] syzkaller0: entered promiscuous mode [ 1005.009089][T19593] syzkaller0: entered allmulticast mode [ 1005.146798][ T1211] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1005.207141][ T5892] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1005.310806][ T1211] usb 7-1: device descriptor read/64, error -71 [ 1005.402234][ T5892] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1005.411658][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.419780][ T5892] usb 3-1: Product: syz [ 1005.424072][ T5892] usb 3-1: Manufacturer: syz [ 1005.431164][ T5892] usb 3-1: SerialNumber: syz [ 1005.446367][ T5892] usb 3-1: config 0 descriptor?? [ 1005.455178][ T5892] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1005.556826][ T1211] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1005.633283][T11977] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1005.696757][ T1211] usb 7-1: device descriptor read/64, error -71 [ 1005.800629][T11977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.807334][ T1211] usb usb7-port1: attempt power cycle [ 1005.817489][T11977] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1005.831338][T11977] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1005.841430][T11977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.866873][T11977] usb 1-1: config 0 descriptor?? [ 1005.882251][T11977] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1006.169092][ T1211] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1006.204300][ T1211] usb 7-1: device descriptor read/8, error -71 [ 1006.448868][ T1211] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1006.635652][T19602] fuse: Bad value for 'user_id' [ 1006.642997][T19602] fuse: Bad value for 'user_id' [ 1006.696782][ T1211] usb 7-1: device not accepting address 35, error -71 [ 1006.709173][ T1211] usb usb7-port1: unable to enumerate USB device [ 1006.815510][T19607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.550048][T19614] fuse: Bad value for 'user_id' [ 1007.555297][T19614] fuse: Bad value for 'user_id' [ 1007.613452][ T5892] usb 3-1: USB disconnect, device number 51 [ 1007.778982][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4858'. [ 1007.887499][T19627] fuse: Bad value for 'fd' [ 1008.148096][T19635] syzkaller0: entered promiscuous mode [ 1008.154660][T19635] syzkaller0: entered allmulticast mode [ 1008.207929][T11977] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1008.370316][T11977] usb 7-1: config 0 has an invalid interface number: 87 but max is 0 [ 1008.378998][T11977] usb 7-1: config 0 has no interface number 0 [ 1008.397595][T11977] usb 7-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=b1.c5 [ 1008.412853][T11977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.425329][T11977] usb 7-1: Product: syz [ 1008.430195][T11977] usb 7-1: Manufacturer: syz [ 1008.435237][T11977] usb 7-1: SerialNumber: syz [ 1008.446303][T11977] usb 7-1: config 0 descriptor?? [ 1008.462277][T11977] snd-usb-caiaq 7-1:0.87: can't set alt interface. [ 1008.472236][T11977] usb 7-1: unable to init card! (ret=-5) [ 1008.492143][T11977] snd-usb-caiaq 7-1:0.87: probe with driver snd-usb-caiaq failed with error -5 [ 1008.539353][ T5892] usb 1-1: USB disconnect, device number 71 [ 1008.677603][T13279] usb 7-1: USB disconnect, device number 36 [ 1009.725895][ T30] audit: type=1326 audit(1750778640.225:170): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=19655 comm="syz.6.4869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x0 [ 1010.637504][T19659] fuse: Bad value for 'fd' [ 1010.906542][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1010.959446][T19677] Bluetooth: MGMT ver 1.23 [ 1010.996624][T11977] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1011.056614][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1011.077746][ T10] usb 1-1: config index 0 descriptor too short (expected 59154, got 18) [ 1011.106936][ T10] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1011.125073][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1011.139531][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1011.148920][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.157866][ T10] usb 1-1: Product: syz [ 1011.162369][ T10] usb 1-1: Manufacturer: syz [ 1011.168049][ T10] usb 1-1: SerialNumber: syz [ 1011.183674][T11977] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1011.184193][ T10] usb 1-1: config 0 descriptor?? [ 1011.203439][T11977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1011.213948][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1011.246697][T11977] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1011.263498][T11977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.281924][T11977] usb 3-1: config 0 descriptor?? [ 1011.314245][T11977] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1011.421412][T19687] syzkaller0: entered promiscuous mode [ 1011.430806][T19687] syzkaller0: entered allmulticast mode [ 1011.516753][T19691] fuse: Bad value for 'fd' [ 1011.672385][T19695] trusted_key: encrypted_key: insufficient parameters specified [ 1012.433691][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 1012.461708][ T10] usb 1-1: USB disconnect, device number 72 [ 1013.233499][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 1013.253185][T19710] openvswitch: netlink: nsh attribute has 5260 unknown bytes. [ 1013.268046][T19710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.711917][T19719] fuse: Bad value for 'fd' [ 1013.712205][T19717] FAULT_INJECTION: forcing a failure. [ 1013.712205][T19717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.735892][T19717] CPU: 1 UID: 0 PID: 19717 Comm: syz.6.4890 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1013.735921][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1013.735934][T19717] Call Trace: [ 1013.735943][T19717] [ 1013.735953][T19717] dump_stack_lvl+0x189/0x250 [ 1013.735981][T19717] ? __pfx____ratelimit+0x10/0x10 [ 1013.736013][T19717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.736036][T19717] ? __pfx__printk+0x10/0x10 [ 1013.736079][T19717] should_fail_ex+0x414/0x560 [ 1013.736109][T19717] strncpy_from_user+0x36/0x290 [ 1013.736137][T19717] path_setxattrat+0x150/0x3a0 [ 1013.736170][T19717] ? __pfx_path_setxattrat+0x10/0x10 [ 1013.736190][T19717] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1013.736237][T19717] ? ksys_write+0x22a/0x250 [ 1013.736265][T19717] ? __pfx_ksys_write+0x10/0x10 [ 1013.736292][T19717] ? rcu_is_watching+0x15/0xb0 [ 1013.736337][T19717] __x64_sys_lsetxattr+0xbf/0xe0 [ 1013.736360][T19717] do_syscall_64+0xfa/0x3b0 [ 1013.736378][T19717] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.736408][T19717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.736428][T19717] ? clear_bhb_loop+0x60/0xb0 [ 1013.736453][T19717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.736474][T19717] RIP: 0033:0x7f5369d8e929 [ 1013.736492][T19717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.736511][T19717] RSP: 002b:00007f536ab9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1013.736532][T19717] RAX: ffffffffffffffda RBX: 00007f5369fb5fa0 RCX: 00007f5369d8e929 [ 1013.736548][T19717] RDX: 0000000000000000 RSI: 0000200000002280 RDI: 0000200000002240 [ 1013.736562][T19717] RBP: 00007f536ab9d090 R08: 0000000000000003 R09: 0000000000000000 [ 1013.736575][T19717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.736588][T19717] R13: 0000000000000000 R14: 00007f5369fb5fa0 R15: 00007ffd2e882ed8 [ 1013.736620][T19717] [ 1013.930494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.963886][T11977] usb 3-1: USB disconnect, device number 52 [ 1014.324837][ T43] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1014.353605][ T43] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1014.876795][T13279] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1014.886553][T11977] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1015.016418][T13279] usb 6-1: device descriptor read/64, error -71 [ 1015.036951][T11977] usb 7-1: Using ep0 maxpacket: 16 [ 1015.049424][T11977] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1015.059309][T11977] usb 7-1: config 0 has no interface number 0 [ 1015.065501][T11977] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.077145][T11977] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.087047][T11977] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1015.096220][T11977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.107418][T11977] usb 7-1: config 0 descriptor?? [ 1015.126591][ T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1015.256593][T13279] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1015.290414][ T43] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1015.301034][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1015.314212][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1015.323501][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.328631][ T43] usb 1-1: config 0 descriptor?? [ 1015.352238][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1015.396766][T13279] usb 6-1: device descriptor read/64, error -71 [ 1015.466628][ T10] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1015.506947][T13279] usb usb6-port1: attempt power cycle [ 1015.553305][T11977] usbhid 7-1:0.1: can't add hid device: -71 [ 1015.564278][T11977] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1015.574758][T11977] usb 7-1: USB disconnect, device number 37 [ 1015.597197][ T10] usb 3-1: device descriptor read/64, error -71 [ 1015.846892][ T10] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1015.854574][T13279] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1015.878610][T13279] usb 6-1: device descriptor read/8, error -71 [ 1015.996483][ T10] usb 3-1: device descriptor read/64, error -71 [ 1016.106899][ T10] usb usb3-port1: attempt power cycle [ 1016.119189][T13279] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1016.147902][T13279] usb 6-1: device descriptor read/8, error -71 [ 1016.259376][T13279] usb usb6-port1: unable to enumerate USB device [ 1016.342170][T19761] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.348866][T19761] binder: 19760:19761 ioctl 4018620d 200000000040 returned -16 [ 1016.466401][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1016.494860][ T10] usb 3-1: device descriptor read/8, error -71 [ 1016.636596][T13279] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1016.740485][ T10] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1016.767616][ T10] usb 3-1: device descriptor read/8, error -71 [ 1016.786430][T13279] usb 7-1: Using ep0 maxpacket: 8 [ 1016.797213][T13279] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1016.806496][T13279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.814537][T13279] usb 7-1: Product: syz [ 1016.818865][T13279] usb 7-1: Manufacturer: syz [ 1016.823518][T13279] usb 7-1: SerialNumber: syz [ 1016.831028][T13279] usb 7-1: config 0 descriptor?? [ 1016.876831][ T10] usb usb3-port1: unable to enumerate USB device [ 1017.048503][T13279] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1017.666423][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1017.821617][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1017.830972][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.839152][ T10] usb 6-1: Product: syz [ 1017.843446][ T10] usb 6-1: Manufacturer: syz [ 1017.853621][ T10] usb 6-1: SerialNumber: syz [ 1017.862057][ T10] usb 6-1: config 0 descriptor?? [ 1017.875201][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1017.905130][T11977] usb 1-1: USB disconnect, device number 73 [ 1018.221291][T19781] FAULT_INJECTION: forcing a failure. [ 1018.221291][T19781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1018.235664][T19781] CPU: 1 UID: 0 PID: 19781 Comm: syz.2.4910 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1018.235695][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1018.235709][T19781] Call Trace: [ 1018.235718][T19781] [ 1018.235728][T19781] dump_stack_lvl+0x189/0x250 [ 1018.235759][T19781] ? __pfx____ratelimit+0x10/0x10 [ 1018.235792][T19781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.235817][T19781] ? __pfx__printk+0x10/0x10 [ 1018.235843][T19781] ? fs_reclaim_acquire+0x7d/0x100 [ 1018.235883][T19781] should_fail_ex+0x414/0x560 [ 1018.235916][T19781] prepare_alloc_pages+0x213/0x610 [ 1018.235955][T19781] __alloc_frozen_pages_noprof+0x123/0x370 [ 1018.235991][T19781] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1018.236034][T19781] ? policy_nodemask+0x27c/0x720 [ 1018.236058][T19781] ? __lock_acquire+0xab9/0xd20 [ 1018.236084][T19781] alloc_pages_bulk_noprof+0x560/0x710 [ 1018.236123][T19781] ? alloc_pages_noprof+0xbe/0x190 [ 1018.236154][T19781] kasan_populate_vmalloc+0xba/0x1a0 [ 1018.236184][T19781] alloc_vmap_area+0xd51/0x1490 [ 1018.236228][T19781] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1018.236253][T19781] ? __kasan_kmalloc+0x93/0xb0 [ 1018.236282][T19781] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 1018.236309][T19781] ? __get_vm_area_node+0x13f/0x300 [ 1018.236333][T19781] ? copy_process+0x54b/0x3c00 [ 1018.236386][T19781] __get_vm_area_node+0x1f8/0x300 [ 1018.236424][T19781] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1018.236453][T19781] ? copy_process+0x54b/0x3c00 [ 1018.236489][T19781] ? percpu_ref_get_many+0x19/0x140 [ 1018.236518][T19781] ? percpu_ref_get_many+0x19/0x140 [ 1018.236560][T19781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1018.236591][T19781] ? memcpy_and_pad+0x48/0x80 [ 1018.236622][T19781] __vmalloc_node_noprof+0xc2/0x110 [ 1018.236650][T19781] ? copy_process+0x54b/0x3c00 [ 1018.236672][T19781] ? copy_process+0x54b/0x3c00 [ 1018.236699][T19781] dup_task_struct+0x3e7/0x860 [ 1018.236730][T19781] copy_process+0x54b/0x3c00 [ 1018.236787][T19781] ? __pfx_copy_process+0x10/0x10 [ 1018.236826][T19781] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1018.236848][T19781] vhost_task_create+0x1c4/0x290 [ 1018.236877][T19781] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1018.236900][T19781] ? __pfx_vhost_task_create+0x10/0x10 [ 1018.236937][T19781] ? __pfx_vhost_task_fn+0x10/0x10 [ 1018.236976][T19781] ? kasan_save_track+0x4f/0x80 [ 1018.236998][T19781] ? kasan_save_track+0x3e/0x80 [ 1018.237025][T19781] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1018.237053][T19781] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1018.237090][T19781] ? __mutex_trylock_common+0x153/0x260 [ 1018.237120][T19781] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1018.237153][T19781] ? rcu_is_watching+0x15/0xb0 [ 1018.237177][T19781] ? look_up_lock_class+0x74/0x170 [ 1018.237212][T19781] ? register_lock_class+0x51/0x320 [ 1018.237240][T19781] ? __lock_acquire+0xab9/0xd20 [ 1018.237294][T19781] kvm_vcpu_ioctl+0x95c/0xe90 [ 1018.237328][T19781] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1018.237362][T19781] ? __lock_acquire+0xab9/0xd20 [ 1018.237407][T19781] ? __fget_files+0x2a/0x420 [ 1018.237440][T19781] ? __fget_files+0x2a/0x420 [ 1018.237469][T19781] ? __fget_files+0x3a0/0x420 [ 1018.237498][T19781] ? __fget_files+0x2a/0x420 [ 1018.237533][T19781] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1018.237555][T19781] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1018.237581][T19781] __se_sys_ioctl+0xf9/0x170 [ 1018.237610][T19781] do_syscall_64+0xfa/0x3b0 [ 1018.237629][T19781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.237660][T19781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.237681][T19781] ? clear_bhb_loop+0x60/0xb0 [ 1018.237707][T19781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.237728][T19781] RIP: 0033:0x7f99ddb8e929 [ 1018.237747][T19781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.237766][T19781] RSP: 002b:00007f99dea2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.237789][T19781] RAX: ffffffffffffffda RBX: 00007f99dddb6080 RCX: 00007f99ddb8e929 [ 1018.237805][T19781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1018.237819][T19781] RBP: 00007f99dea2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.237832][T19781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.237845][T19781] R13: 0000000000000000 R14: 00007f99dddb6080 R15: 00007fff6bb71ff8 [ 1018.237879][T19781] [ 1018.684473][ T10] gspca_sunplus: reg_r err -110 [ 1018.697729][T19781] syz.2.4910: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1018.715658][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1018.750457][T19781] CPU: 0 UID: 0 PID: 19781 Comm: syz.2.4910 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1018.750489][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1018.750506][T19781] Call Trace: [ 1018.750514][T19781] [ 1018.750523][T19781] dump_stack_lvl+0x189/0x250 [ 1018.750556][T19781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.750581][T19781] ? __pfx__printk+0x10/0x10 [ 1018.750613][T19781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1018.750642][T19781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1018.750672][T19781] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1018.750704][T19781] warn_alloc+0x214/0x310 [ 1018.750732][T19781] ? kasan_quarantine_put+0xdd/0x220 [ 1018.750754][T19781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.750788][T19781] ? __pfx_warn_alloc+0x10/0x10 [ 1018.750818][T19781] ? kfree+0x18e/0x440 [ 1018.750851][T19781] ? __get_vm_area_node+0x13f/0x300 [ 1018.750877][T19781] ? copy_process+0x54b/0x3c00 [ 1018.750902][T19781] ? __get_vm_area_node+0x211/0x300 [ 1018.750935][T19781] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1018.750973][T19781] ? percpu_ref_get_many+0x19/0x140 [ 1018.751002][T19781] ? percpu_ref_get_many+0x19/0x140 [ 1018.751044][T19781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1018.751074][T19781] ? memcpy_and_pad+0x48/0x80 [ 1018.751104][T19781] __vmalloc_node_noprof+0xc2/0x110 [ 1018.751131][T19781] ? copy_process+0x54b/0x3c00 [ 1018.751151][T19781] ? copy_process+0x54b/0x3c00 [ 1018.751178][T19781] dup_task_struct+0x3e7/0x860 [ 1018.751208][T19781] copy_process+0x54b/0x3c00 [ 1018.751262][T19781] ? __pfx_copy_process+0x10/0x10 [ 1018.751299][T19781] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1018.751320][T19781] vhost_task_create+0x1c4/0x290 [ 1018.751348][T19781] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1018.751370][T19781] ? __pfx_vhost_task_create+0x10/0x10 [ 1018.751406][T19781] ? __pfx_vhost_task_fn+0x10/0x10 [ 1018.751443][T19781] ? kasan_save_track+0x4f/0x80 [ 1018.751464][T19781] ? kasan_save_track+0x3e/0x80 [ 1018.751492][T19781] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1018.751519][T19781] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1018.751555][T19781] ? __mutex_trylock_common+0x153/0x260 [ 1018.751584][T19781] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1018.751621][T19781] ? rcu_is_watching+0x15/0xb0 [ 1018.751644][T19781] ? look_up_lock_class+0x74/0x170 [ 1018.751677][T19781] ? register_lock_class+0x51/0x320 [ 1018.751703][T19781] ? __lock_acquire+0xab9/0xd20 [ 1018.751755][T19781] kvm_vcpu_ioctl+0x95c/0xe90 [ 1018.751788][T19781] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1018.751811][T19781] ? __lock_acquire+0xab9/0xd20 [ 1018.751854][T19781] ? __fget_files+0x2a/0x420 [ 1018.751887][T19781] ? __fget_files+0x2a/0x420 [ 1018.751915][T19781] ? __fget_files+0x3a0/0x420 [ 1018.751943][T19781] ? __fget_files+0x2a/0x420 [ 1018.751995][T19781] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1018.752017][T19781] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1018.752043][T19781] __se_sys_ioctl+0xf9/0x170 [ 1018.752071][T19781] do_syscall_64+0xfa/0x3b0 [ 1018.752090][T19781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.752120][T19781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.752154][T19781] ? clear_bhb_loop+0x60/0xb0 [ 1018.752179][T19781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.752198][T19781] RIP: 0033:0x7f99ddb8e929 [ 1018.752216][T19781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.752235][T19781] RSP: 002b:00007f99dea2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.752257][T19781] RAX: ffffffffffffffda RBX: 00007f99dddb6080 RCX: 00007f99ddb8e929 [ 1018.752272][T19781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1018.752285][T19781] RBP: 00007f99dea2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.752298][T19781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.752310][T19781] R13: 0000000000000000 R14: 00007f99dddb6080 R15: 00007fff6bb71ff8 [ 1018.752342][T19781] [ 1019.150479][T19781] Mem-Info: [ 1019.153698][T19781] active_anon:6850 inactive_anon:0 isolated_anon:0 [ 1019.153698][T19781] active_file:8406 inactive_file:49496 isolated_file:0 [ 1019.153698][T19781] unevictable:768 dirty:97 writeback:0 [ 1019.153698][T19781] slab_reclaimable:10853 slab_unreclaimable:103213 [ 1019.153698][T19781] mapped:36072 shmem:1392 pagetables:1569 [ 1019.153698][T19781] sec_pagetables:3 bounce:0 [ 1019.153698][T19781] kernel_misc_reclaimable:0 [ 1019.153698][T19781] free:1286682 free_pcp:14702 free_cma:0 [ 1019.199767][T19781] Node 0 active_anon:27400kB inactive_anon:0kB active_file:28888kB inactive_file:197784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144288kB dirty:388kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12940kB pagetables:6148kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 1019.234271][T19781] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1019.265764][T19781] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.295897][T19781] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1019.301783][T19781] Node 0 DMA32 free:1234616kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27352kB inactive_anon:0kB active_file:28888kB inactive_file:196468kB unevictable:1536kB writepending:388kB present:3129332kB managed:2557524kB mlocked:0kB bounce:0kB free_pcp:38516kB local_pcp:20784kB free_cma:0kB [ 1019.334599][T19781] lowmem_reserve[]: 0 0 1 1 1 [ 1019.339395][T19781] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1019.368690][T19781] lowmem_reserve[]: 0 0 0 0 0 [ 1019.373447][T19781] Node 1 Normal free:3903912kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:10560kB free_cma:0kB [ 1019.405401][T19781] lowmem_reserve[]: [ 1019.406648][ T43] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1019.418110][T19781] 0 0 0 0 0 [ 1019.421477][T19781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1019.435048][T19781] Node 0 DMA32: 936*4kB (UME) 249*8kB (UME) 347*16kB (UME) 601*32kB (UME) 268*64kB (UME) 71*128kB (UM) 19*256kB (UM) 9*512kB (UME) 1*1024kB (U) 2*2048kB (ME) 284*4096kB (UM) = 1234616kB [ 1019.453959][T19781] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1019.466638][T19781] Node 1 Normal: 242*4kB (UME) 56*8kB (UME) 54*16kB (UME) 262*32kB (UME) 92*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3903912kB [ 1019.485431][T19781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.500224][T19781] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1019.509706][T19781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.519760][T19781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.529521][T19781] 58107 total pagecache pages [ 1019.534517][T19781] 0 pages in swap cache [ 1019.538810][T19781] Free swap = 124996kB [ 1019.543131][T19781] Total swap = 124996kB [ 1019.547671][T19781] 2097051 pages RAM [ 1019.551573][T19781] 0 pages HighMem/MovableOnly [ 1019.556442][T19781] 425692 pages reserved [ 1019.560629][T19781] 0 pages cma reserved [ 1019.571155][ T43] usb 1-1: no configurations [ 1019.580089][ T43] usb 1-1: can't read configurations, error -22 [ 1019.658538][T13279] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1019.681552][T13279] usb 7-1: USB disconnect, device number 38 [ 1019.716499][ T43] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1019.768033][ T30] audit: type=1326 audit(1750778650.275:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19791 comm="syz.2.4914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ddb8e929 code=0x0 [ 1019.887264][ T43] usb 1-1: no configurations [ 1019.892042][ T43] usb 1-1: can't read configurations, error -22 [ 1019.898999][ T43] usb usb1-port1: attempt power cycle [ 1020.236544][ T43] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1020.258335][ T43] usb 1-1: no configurations [ 1020.262995][ T43] usb 1-1: can't read configurations, error -22 [ 1020.398011][ T43] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1020.438299][ T43] usb 1-1: no configurations [ 1020.442980][ T43] usb 1-1: can't read configurations, error -22 [ 1020.456866][ T43] usb usb1-port1: unable to enumerate USB device [ 1020.533680][T13279] usb 6-1: USB disconnect, device number 67 [ 1020.600279][T19804] fuse: Bad value for 'rootmode' [ 1020.719039][T19806] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1020.816580][ T5946] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1020.974187][ T5946] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1020.988292][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1021.001683][ T5946] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.010870][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.021960][ T5946] usb 7-1: config 0 descriptor?? [ 1021.031599][ T5946] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1021.127346][ T10] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1021.308812][ T10] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1021.317500][ T10] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1021.325633][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1021.335185][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1021.346822][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1021.358567][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1021.369945][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1021.380203][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1021.396069][ T10] usb 3-1: string descriptor 0 read error: -22 [ 1021.404513][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1021.413794][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.428917][ T10] usb 3-1: config 0 descriptor?? [ 1021.436219][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 1021.446174][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1021.456067][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input146 [ 1021.457016][ T43] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1021.636477][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1021.649097][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.656997][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1021.669698][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.683357][ T10] usb 3-1: USB disconnect, device number 57 [ 1021.683600][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1021.709917][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.734734][ T43] usb 6-1: config 0 descriptor?? [ 1021.754839][ T43] hub 6-1:0.0: USB hub found [ 1021.913445][T19830] fuse: Unknown parameter 'use00000000000000000000' [ 1021.945963][ T43] hub 6-1:0.0: 1 port detected [ 1022.147000][ T43] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1022.153423][ T43] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1022.164818][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 1022.172468][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1022.206775][ T43] usb 6-1: USB disconnect, device number 68 [ 1022.227964][T13279] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1022.416647][T13279] usb 1-1: Using ep0 maxpacket: 16 [ 1022.429872][T13279] usb 1-1: config index 0 descriptor too short (expected 59154, got 18) [ 1022.446383][T13279] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1022.455171][T13279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1022.472904][T13279] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1022.484256][T13279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.493179][T13279] usb 1-1: Product: syz [ 1022.498132][T13279] usb 1-1: Manufacturer: syz [ 1022.503247][T13279] usb 1-1: SerialNumber: syz [ 1022.512187][T13279] usb 1-1: config 0 descriptor?? [ 1022.527099][T13279] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1022.581192][T19843] netlink: 'syz.2.4933': attribute type 4 has an invalid length. [ 1022.589231][T19843] FAULT_INJECTION: forcing a failure. [ 1022.589231][T19843] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.603971][T19843] CPU: 0 UID: 0 PID: 19843 Comm: syz.2.4933 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1022.604003][T19843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1022.604016][T19843] Call Trace: [ 1022.604025][T19843] [ 1022.604034][T19843] dump_stack_lvl+0x189/0x250 [ 1022.604062][T19843] ? __pfx____ratelimit+0x10/0x10 [ 1022.604094][T19843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.604117][T19843] ? __pfx__printk+0x10/0x10 [ 1022.604146][T19843] ? __pfx___might_resched+0x10/0x10 [ 1022.604168][T19843] ? fs_reclaim_acquire+0x7d/0x100 [ 1022.604202][T19843] should_fail_ex+0x414/0x560 [ 1022.604232][T19843] should_failslab+0xa8/0x100 [ 1022.604259][T19843] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1022.604284][T19843] ? __alloc_skb+0x112/0x2d0 [ 1022.604312][T19843] __alloc_skb+0x112/0x2d0 [ 1022.604339][T19843] netlink_ack+0x146/0xa50 [ 1022.604360][T19843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1022.604381][T19843] ? ref_tracker_free+0x63a/0x7d0 [ 1022.604405][T19843] ? __copy_skb_header+0xa7/0x550 [ 1022.604434][T19843] ? __pfx_ref_tracker_free+0x10/0x10 [ 1022.604459][T19843] ? __skb_clone+0x63/0x7a0 [ 1022.604493][T19843] netlink_rcv_skb+0x28c/0x470 [ 1022.604518][T19843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1022.604541][T19843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1022.604578][T19843] ? netlink_deliver_tap+0x2e/0x1b0 [ 1022.604601][T19843] ? netlink_deliver_tap+0x2e/0x1b0 [ 1022.604631][T19843] netlink_unicast+0x75b/0x8d0 [ 1022.604663][T19843] netlink_sendmsg+0x805/0xb30 [ 1022.604697][T19843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.604725][T19843] ? aa_sock_msg_perm+0x94/0x160 [ 1022.604748][T19843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1022.604778][T19843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.604803][T19843] __sock_sendmsg+0x219/0x270 [ 1022.604838][T19843] __sys_sendto+0x3bd/0x520 [ 1022.604863][T19843] ? __pfx___sys_sendto+0x10/0x10 [ 1022.604883][T19843] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1022.604915][T19843] ? __fget_files+0x3a0/0x420 [ 1022.604966][T19843] ? ksys_write+0x22a/0x250 [ 1022.604993][T19843] ? __pfx_ksys_write+0x10/0x10 [ 1022.605025][T19843] __x64_sys_sendto+0xde/0x100 [ 1022.605051][T19843] do_syscall_64+0xfa/0x3b0 [ 1022.605070][T19843] ? lockdep_hardirqs_on+0x9c/0x150 [ 1022.605098][T19843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.605118][T19843] ? clear_bhb_loop+0x60/0xb0 [ 1022.605142][T19843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.605161][T19843] RIP: 0033:0x7f99ddb8e929 [ 1022.605179][T19843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.605198][T19843] RSP: 002b:00007f99dea4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1022.605219][T19843] RAX: ffffffffffffffda RBX: 00007f99dddb5fa0 RCX: 00007f99ddb8e929 [ 1022.605233][T19843] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000003 [ 1022.605245][T19843] RBP: 00007f99dea4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.605257][T19843] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 1022.605269][T19843] R13: 0000000000000000 R14: 00007f99dddb5fa0 R15: 00007fff6bb71ff8 [ 1022.605297][T19843] [ 1022.914942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.031020][T19847] FAULT_INJECTION: forcing a failure. [ 1023.031020][T19847] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.062105][T19847] CPU: 1 UID: 0 PID: 19847 Comm: syz.2.4935 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1023.062137][T19847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1023.062151][T19847] Call Trace: [ 1023.062159][T19847] [ 1023.062169][T19847] dump_stack_lvl+0x189/0x250 [ 1023.062203][T19847] ? __pfx____ratelimit+0x10/0x10 [ 1023.062236][T19847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1023.062260][T19847] ? __pfx__printk+0x10/0x10 [ 1023.062300][T19847] ? __pfx___might_resched+0x10/0x10 [ 1023.062324][T19847] ? fs_reclaim_acquire+0x7d/0x100 [ 1023.062359][T19847] should_fail_ex+0x414/0x560 [ 1023.062392][T19847] should_failslab+0xa8/0x100 [ 1023.062420][T19847] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1023.062445][T19847] ? getname_flags+0xb8/0x540 [ 1023.062469][T19847] getname_flags+0xb8/0x540 [ 1023.062494][T19847] path_setxattrat+0x2ac/0x3a0 [ 1023.062528][T19847] ? __pfx_path_setxattrat+0x10/0x10 [ 1023.062551][T19847] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1023.062599][T19847] ? ksys_write+0x22a/0x250 [ 1023.062628][T19847] ? __pfx_ksys_write+0x10/0x10 [ 1023.062653][T19847] ? rcu_is_watching+0x15/0xb0 [ 1023.062683][T19847] __x64_sys_lsetxattr+0xbf/0xe0 [ 1023.062707][T19847] do_syscall_64+0xfa/0x3b0 [ 1023.062726][T19847] ? lockdep_hardirqs_on+0x9c/0x150 [ 1023.062756][T19847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.062778][T19847] ? clear_bhb_loop+0x60/0xb0 [ 1023.062803][T19847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.062822][T19847] RIP: 0033:0x7f99ddb8e929 [ 1023.062841][T19847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.062866][T19847] RSP: 002b:00007f99dea4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1023.062888][T19847] RAX: ffffffffffffffda RBX: 00007f99dddb5fa0 RCX: 00007f99ddb8e929 [ 1023.062904][T19847] RDX: 0000000000000000 RSI: 0000200000002280 RDI: 0000200000002240 [ 1023.062919][T19847] RBP: 00007f99dea4f090 R08: 0000000000000003 R09: 0000000000000000 [ 1023.062932][T19847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.062944][T19847] R13: 0000000000000000 R14: 00007f99dddb5fa0 R15: 00007fff6bb71ff8 [ 1023.062977][T19847] [ 1023.285950][T13279] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1023.350479][T19850] fuse: Unknown parameter 'use00000000000000000000' [ 1023.427512][ T10] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1023.533339][T19856] ./file0: Can't lookup blockdev [ 1023.594332][ T10] usb 6-1: no configurations [ 1023.621372][ T10] usb 6-1: can't read configurations, error -22 [ 1023.630235][T13279] usb 7-1: USB disconnect, device number 39 [ 1023.731626][T19863] sp0: Synchronizing with TNC [ 1023.786428][ T10] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1023.937501][ T10] usb 6-1: no configurations [ 1023.942288][ T10] usb 6-1: can't read configurations, error -22 [ 1023.949111][ T10] usb usb6-port1: attempt power cycle [ 1024.086396][T13279] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1024.236443][T13279] usb 3-1: Using ep0 maxpacket: 8 [ 1024.246811][T13279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1024.255915][T13279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.264345][T13279] usb 3-1: Product: syz [ 1024.268824][T13279] usb 3-1: Manufacturer: syz [ 1024.273468][T13279] usb 3-1: SerialNumber: syz [ 1024.283872][T13279] usb 3-1: config 0 descriptor?? [ 1024.288957][ T10] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1024.318567][ T10] usb 6-1: no configurations [ 1024.323281][ T10] usb 6-1: can't read configurations, error -22 [ 1024.466416][ T10] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1024.487649][ T10] usb 6-1: no configurations [ 1024.492344][ T10] usb 6-1: can't read configurations, error -22 [ 1024.504277][ T10] usb usb6-port1: unable to enumerate USB device [ 1024.511039][T13279] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1024.525468][ T30] audit: type=1326 audit(1750778655.015:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.549154][ T30] audit: type=1326 audit(1750778655.015:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.575206][ T30] audit: type=1326 audit(1750778655.015:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.598635][ T30] audit: type=1326 audit(1750778655.015:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.622901][ T30] audit: type=1326 audit(1750778655.015:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.645848][ T30] audit: type=1326 audit(1750778655.015:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.668293][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.675314][ T30] audit: type=1326 audit(1750778655.015:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.701976][ T30] audit: type=1326 audit(1750778655.015:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.725477][ T30] audit: type=1326 audit(1750778655.015:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19860 comm="syz.6.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5369d8e929 code=0x7fc00000 [ 1024.849824][T19874] sp0: Synchronizing with TNC [ 1025.024144][ T10] usb 1-1: USB disconnect, device number 78 [ 1025.116129][T19878] binder: 19877:19878 ioctl c0306201 200000000500 returned -22 [ 1025.142647][T19880] /dev/sg0: Can't lookup blockdev [ 1025.336433][T19882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.456413][T11977] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1025.612655][T11977] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.624375][T11977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1025.634264][T11977] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1025.647463][T11977] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1025.656598][T11977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.667377][T11977] usb 7-1: config 0 descriptor?? [ 1025.683680][T11977] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1025.765728][T19870] wg0 speed is unknown, defaulting to 1000 [ 1026.238362][T19894] FAULT_INJECTION: forcing a failure. [ 1026.238362][T19894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.271771][T19894] CPU: 1 UID: 0 PID: 19894 Comm: syz.5.4952 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1026.271803][T19894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1026.271817][T19894] Call Trace: [ 1026.271825][T19894] [ 1026.271840][T19894] dump_stack_lvl+0x189/0x250 [ 1026.271871][T19894] ? __pfx____ratelimit+0x10/0x10 [ 1026.271904][T19894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.271929][T19894] ? __pfx__printk+0x10/0x10 [ 1026.271967][T19894] should_fail_ex+0x414/0x560 [ 1026.272000][T19894] _copy_to_user+0x31/0xb0 [ 1026.272023][T19894] simple_read_from_buffer+0xe1/0x170 [ 1026.272059][T19894] proc_fail_nth_read+0x1df/0x250 [ 1026.272081][T19894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.272104][T19894] ? rw_verify_area+0x258/0x650 [ 1026.272131][T19894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.272153][T19894] vfs_read+0x200/0x980 [ 1026.272186][T19894] ? __pfx___mutex_lock+0x10/0x10 [ 1026.272206][T19894] ? __pfx_vfs_read+0x10/0x10 [ 1026.272235][T19894] ? __fget_files+0x2a/0x420 [ 1026.272271][T19894] ? __fget_files+0x3a0/0x420 [ 1026.272301][T19894] ? __fget_files+0x2a/0x420 [ 1026.272340][T19894] ksys_read+0x145/0x250 [ 1026.272365][T19894] ? __fget_files+0x3a0/0x420 [ 1026.272397][T19894] ? __pfx_ksys_read+0x10/0x10 [ 1026.272430][T19894] ? do_syscall_64+0xbe/0x3b0 [ 1026.272455][T19894] do_syscall_64+0xfa/0x3b0 [ 1026.272474][T19894] ? lockdep_hardirqs_on+0x9c/0x150 [ 1026.272505][T19894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.272534][T19894] ? clear_bhb_loop+0x60/0xb0 [ 1026.272561][T19894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.272581][T19894] RIP: 0033:0x7f1b77d8d33c [ 1026.272601][T19894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1026.272620][T19894] RSP: 002b:00007f1b78c44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1026.272647][T19894] RAX: ffffffffffffffda RBX: 00007f1b77fb5fa0 RCX: 00007f1b77d8d33c [ 1026.272663][T19894] RDX: 000000000000000f RSI: 00007f1b78c440a0 RDI: 0000000000000004 [ 1026.272677][T19894] RBP: 00007f1b78c44090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.272691][T19894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.272704][T19894] R13: 0000000000000000 R14: 00007f1b77fb5fa0 R15: 00007fff198aadf8 [ 1026.272738][T19894] [ 1026.530551][T19898] sp0: Synchronizing with TNC [ 1026.617482][T13279] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1026.644807][T13279] usb 3-1: USB disconnect, device number 58 [ 1026.809664][T19906] binder: 19905:19906 ioctl c0306201 200000000500 returned -22 [ 1026.974717][T19911] syzkaller0: entered promiscuous mode [ 1026.981231][T19911] syzkaller0: entered allmulticast mode [ 1027.176439][T11977] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1027.327357][T11977] usb 1-1: no configurations [ 1027.332438][T11977] usb 1-1: can't read configurations, error -22 [ 1027.486526][T11977] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1027.647146][T11977] usb 1-1: no configurations [ 1027.666426][T11977] usb 1-1: can't read configurations, error -22 [ 1027.677425][T11977] usb usb1-port1: attempt power cycle [ 1027.754676][T19924] FAULT_INJECTION: forcing a failure. [ 1027.754676][T19924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1027.775816][T19924] CPU: 0 UID: 0 PID: 19924 Comm: syz.2.4963 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1027.775845][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1027.775859][T19924] Call Trace: [ 1027.775867][T19924] [ 1027.775874][T19924] dump_stack_lvl+0x189/0x250 [ 1027.775900][T19924] ? __pfx____ratelimit+0x10/0x10 [ 1027.775926][T19924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.775946][T19924] ? __pfx__printk+0x10/0x10 [ 1027.775965][T19924] ? fs_reclaim_acquire+0x7d/0x100 [ 1027.775996][T19924] should_fail_ex+0x414/0x560 [ 1027.776020][T19924] prepare_alloc_pages+0x213/0x610 [ 1027.776051][T19924] __alloc_frozen_pages_noprof+0x123/0x370 [ 1027.776080][T19924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1027.776120][T19924] alloc_pages_mpol+0x232/0x4a0 [ 1027.776146][T19924] alloc_pages_noprof+0xa9/0x190 [ 1027.776169][T19924] pte_alloc_one+0x21/0x170 [ 1027.776190][T19924] __pte_alloc+0x25/0x1a0 [ 1027.776217][T19924] __handle_mm_fault+0x4b8a/0x5620 [ 1027.776252][T19924] ? __pfx___handle_mm_fault+0x10/0x10 [ 1027.776297][T19924] ? find_vma+0xe7/0x160 [ 1027.776322][T19924] ? __pfx_find_vma+0x10/0x10 [ 1027.776357][T19924] handle_mm_fault+0x40a/0x8e0 [ 1027.776385][T19924] do_user_addr_fault+0x764/0x1390 [ 1027.776422][T19924] exc_page_fault+0x76/0xf0 [ 1027.776448][T19924] asm_exc_page_fault+0x26/0x30 [ 1027.776463][T19924] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1027.776485][T19924] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1027.776500][T19924] RSP: 0018:ffffc90003da7898 EFLAGS: 00050206 [ 1027.776515][T19924] RAX: ffffffff84c5e201 RBX: ffff888048c00000 RCX: 00000000002000c0 [ 1027.776527][T19924] RDX: 0000000000000001 RSI: 0000200000200000 RDI: ffff888048dfff40 [ 1027.776538][T19924] RBP: ffffc90003da7a00 R08: ffff888048ffffff R09: 1ffff110091fffff [ 1027.776550][T19924] R10: dffffc0000000000 R11: ffffed1009200000 R12: 1ffff920007b4f6d [ 1027.776561][T19924] R13: 00002000000000c0 R14: ffffc90003da7b78 R15: 0000000000400000 [ 1027.776579][T19924] ? _copy_from_iter+0x161/0x16f0 [ 1027.776608][T19924] _copy_from_iter+0x24c/0x16f0 [ 1027.776645][T19924] ? __kasan_kmalloc_large+0x85/0xa0 [ 1027.776665][T19924] ? __pfx__copy_from_iter+0x10/0x10 [ 1027.776688][T19924] ? rcu_is_watching+0x15/0xb0 [ 1027.776709][T19924] ? rcu_is_watching+0x15/0xb0 [ 1027.776727][T19924] ? trace_kmalloc+0x1f/0xd0 [ 1027.776743][T19924] ? __kmalloc_noprof+0x29b/0x4f0 [ 1027.776761][T19924] ? qrtr_tun_write_iter+0xbf/0x180 [ 1027.776782][T19924] ? security_file_permission+0x75/0x290 [ 1027.776808][T19924] qrtr_tun_write_iter+0xdf/0x180 [ 1027.776832][T19924] aio_write+0x532/0x7a0 [ 1027.776852][T19924] ? __pfx_aio_write+0x10/0x10 [ 1027.776887][T19924] ? __might_fault+0xb0/0x130 [ 1027.776920][T19924] io_submit_one+0x78b/0x1310 [ 1027.776957][T19924] ? __pfx_io_submit_one+0x10/0x10 [ 1027.776988][T19924] ? __might_fault+0xb0/0x130 [ 1027.777017][T19924] ? __might_fault+0xb0/0x130 [ 1027.777038][T19924] __se_sys_io_submit+0x185/0x2f0 [ 1027.777062][T19924] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1027.777082][T19924] ? ksys_write+0x22a/0x250 [ 1027.777112][T19924] ? do_syscall_64+0xbe/0x3b0 [ 1027.777130][T19924] do_syscall_64+0xfa/0x3b0 [ 1027.777144][T19924] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.777167][T19924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.777183][T19924] ? clear_bhb_loop+0x60/0xb0 [ 1027.777202][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.777217][T19924] RIP: 0033:0x7f99ddb8e929 [ 1027.777231][T19924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.777244][T19924] RSP: 002b:00007f99dea4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1027.777260][T19924] RAX: ffffffffffffffda RBX: 00007f99dddb5fa0 RCX: 00007f99ddb8e929 [ 1027.777272][T19924] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 00007f99dea2e000 [ 1027.777282][T19924] RBP: 00007f99dea4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.777292][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.777301][T19924] R13: 0000000000000000 R14: 00007f99dddb5fa0 R15: 00007fff6bb71ff8 [ 1027.777325][T19924] [ 1028.190763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.255001][ T5946] usb 7-1: USB disconnect, device number 40 [ 1028.261591][T11977] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1028.313681][T11977] usb 1-1: no configurations [ 1028.318494][T11977] usb 1-1: can't read configurations, error -22 [ 1028.640379][T11977] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1028.668415][T11977] usb 1-1: no configurations [ 1028.680724][T11977] usb 1-1: can't read configurations, error -22 [ 1028.687488][T11977] usb usb1-port1: unable to enumerate USB device [ 1029.266619][ T5946] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1029.422487][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 1029.465850][ T5946] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1029.475056][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.491907][ T5946] usb 7-1: Product: syz [ 1029.496130][ T5946] usb 7-1: Manufacturer: syz [ 1029.509106][ T5946] usb 7-1: SerialNumber: syz [ 1029.522933][ T5946] usb 7-1: config 0 descriptor?? [ 1029.540295][ T5946] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1030.687832][ T5946] gspca_sq930x: ucbus_write failed -110 [ 1030.693824][ T5946] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 1030.716569][T11977] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1030.881831][T11977] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1030.891154][T11977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.899986][T11977] usb 3-1: Product: syz [ 1030.904217][T11977] usb 3-1: Manufacturer: syz [ 1030.908916][T11977] usb 3-1: SerialNumber: syz [ 1030.915854][T11977] usb 3-1: config 0 descriptor?? [ 1030.927121][T11977] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1031.026589][ T10] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1031.189405][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.199929][ T10] usb 6-1: config 0 has no interfaces? [ 1031.205837][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1031.216050][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.228442][ T10] usb 6-1: config 0 descriptor?? [ 1031.393043][ T5946] usb 7-1: USB disconnect, device number 41 [ 1031.480109][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1031.480128][ T30] audit: type=1326 audit(1750778661.985:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.523153][ T30] audit: type=1326 audit(1750778661.985:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.594879][ T30] audit: type=1326 audit(1750778661.985:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.626515][ T30] audit: type=1326 audit(1750778661.985:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.653526][ T30] audit: type=1326 audit(1750778662.025:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.691295][ T30] audit: type=1326 audit(1750778662.025:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.719040][ T30] audit: type=1326 audit(1750778662.025:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.752012][ T30] audit: type=1326 audit(1750778662.025:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.805729][ T30] audit: type=1326 audit(1750778662.025:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1031.847070][ T30] audit: type=1326 audit(1750778662.025:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19952 comm="syz.0.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398a38e929 code=0x7fc00000 [ 1032.216612][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1032.376465][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1032.384928][ T10] usb 1-1: config index 0 descriptor too short (expected 59154, got 18) [ 1032.394279][ T10] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1032.403694][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1032.423299][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1032.439471][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.448201][ T10] usb 1-1: Product: syz [ 1032.452493][ T10] usb 1-1: Manufacturer: syz [ 1032.457649][ T10] usb 1-1: SerialNumber: syz [ 1032.465892][T19978] binder: 19977:19978 ioctl c0306201 200000000500 returned -22 [ 1032.472174][ T10] usb 1-1: config 0 descriptor?? [ 1032.481806][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1032.613322][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4980'. [ 1032.630238][T19983] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1032.780772][ T43] IPVS: starting estimator thread 0... [ 1032.859105][T11977] gspca_sunplus: reg_r err -71 [ 1032.864011][T11977] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1032.892476][T19991] IPVS: using max 27 ests per chain, 64800 per kthread [ 1032.892715][T19993] fuse: Bad value for 'fd' [ 1032.912963][T11977] usb 3-1: USB disconnect, device number 59 [ 1033.028001][T19998] FAULT_INJECTION: forcing a failure. [ 1033.028001][T19998] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.044649][T19998] CPU: 1 UID: 0 PID: 19998 Comm: syz.6.4985 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1033.044687][T19998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.044701][T19998] Call Trace: [ 1033.044711][T19998] [ 1033.044720][T19998] dump_stack_lvl+0x189/0x250 [ 1033.044748][T19998] ? __pfx____ratelimit+0x10/0x10 [ 1033.044773][T19998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.044791][T19998] ? __pfx__printk+0x10/0x10 [ 1033.044819][T19998] ? __pfx___might_resched+0x10/0x10 [ 1033.044845][T19998] ? fs_reclaim_acquire+0x7d/0x100 [ 1033.044879][T19998] should_fail_ex+0x414/0x560 [ 1033.044908][T19998] should_failslab+0xa8/0x100 [ 1033.044929][T19998] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1033.044948][T19998] ? __alloc_skb+0x112/0x2d0 [ 1033.044973][T19998] __alloc_skb+0x112/0x2d0 [ 1033.045002][T19998] alloc_skb_with_frags+0xca/0x890 [ 1033.045026][T19998] ? __might_fault+0xb0/0x130 [ 1033.045069][T19998] sock_alloc_send_pskb+0x857/0x990 [ 1033.045105][T19998] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1033.045137][T19998] ? dev_get_by_index+0x22/0x2e0 [ 1033.045167][T19998] ? dev_get_by_index+0x22/0x2e0 [ 1033.045208][T19998] packet_sendmsg+0x3672/0x53f0 [ 1033.045239][T19998] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1033.045282][T19998] ? __pfx___might_resched+0x10/0x10 [ 1033.045306][T19998] ? __lock_acquire+0xab9/0xd20 [ 1033.045341][T19998] ? __pfx_packet_sendmsg+0x10/0x10 [ 1033.045364][T19998] ? aa_sk_perm+0x81e/0x950 [ 1033.045391][T19998] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1033.045413][T19998] ? aa_sock_msg_perm+0x94/0x160 [ 1033.045436][T19998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.045467][T19998] ? __pfx_packet_sendmsg+0x10/0x10 [ 1033.045494][T19998] __sock_sendmsg+0x219/0x270 [ 1033.045524][T19998] __sys_sendto+0x3bd/0x520 [ 1033.045543][T19998] ? __pfx___sys_sendto+0x10/0x10 [ 1033.045559][T19998] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1033.045591][T19998] ? __fget_files+0x3a0/0x420 [ 1033.045633][T19998] ? ksys_write+0x22a/0x250 [ 1033.045661][T19998] ? __pfx_ksys_write+0x10/0x10 [ 1033.045685][T19998] __x64_sys_sendto+0xde/0x100 [ 1033.045705][T19998] do_syscall_64+0xfa/0x3b0 [ 1033.045720][T19998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.045751][T19998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.045772][T19998] ? clear_bhb_loop+0x60/0xb0 [ 1033.045795][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.045850][T19998] RIP: 0033:0x7f5369d8e929 [ 1033.045864][T19998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.045883][T19998] RSP: 002b:00007f536ab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1033.045906][T19998] RAX: ffffffffffffffda RBX: 00007f5369fb5fa0 RCX: 00007f5369d8e929 [ 1033.045921][T19998] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1033.045934][T19998] RBP: 00007f536ab9d090 R08: 0000200000000140 R09: 0000000000000014 [ 1033.045948][T19998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.045960][T19998] R13: 0000000000000000 R14: 00007f5369fb5fa0 R15: 00007ffd2e882ed8 [ 1033.045984][T19998] [ 1033.361660][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1033.544491][T20004] binder: 20003:20004 ioctl c0306201 200000000500 returned -22 [ 1033.743097][T20011] syzkaller0: entered promiscuous mode [ 1033.749582][T20011] syzkaller0: entered allmulticast mode [ 1033.819287][T11977] usb 6-1: USB disconnect, device number 73 [ 1033.845196][T20017] gfs2: not a GFS2 filesystem [ 1033.896561][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1034.061634][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1034.080919][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.093328][ T10] usb 7-1: Product: syz [ 1034.106974][ T10] usb 7-1: Manufacturer: syz [ 1034.111646][ T10] usb 7-1: SerialNumber: syz [ 1034.123506][ T10] usb 7-1: config 0 descriptor?? [ 1034.134983][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1034.576531][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1034.736571][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1034.748963][ T43] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 1034.762128][ T43] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1034.770621][ T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1034.782868][ T43] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1034.796347][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.806103][ T43] usb 6-1: Product: syz [ 1034.812921][ T43] usb 6-1: Manufacturer: syz [ 1034.820514][ T43] usb 6-1: SerialNumber: syz [ 1034.834259][ T43] usb 6-1: config 0 descriptor?? [ 1034.849310][ T43] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1034.883509][T19971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.955562][ T10] gspca_sunplus: reg_r err -71 [ 1034.968117][ T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1034.994211][ T10] usb 7-1: USB disconnect, device number 42 [ 1035.023734][ T5892] usb 1-1: USB disconnect, device number 83 [ 1035.132025][T20030] binder: 20029:20030 ioctl c0306201 200000000500 returned -22 [ 1036.004461][T14515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.020796][T14515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.045756][T14515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.072464][T14515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.090683][T14515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.110946][ T43] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1036.270455][T11977] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1036.308652][ T10] usb 6-1: USB disconnect, device number 74 [ 1036.317954][ T10] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1036.330582][ T10] ssu100 6-1:0.0: device disconnected [ 1036.477403][T11977] usb 7-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1036.494475][T11977] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1036.511087][T11977] usb 7-1: Product: syz [ 1036.515318][T11977] usb 7-1: Manufacturer: syz [ 1036.520340][T11977] usb 7-1: SerialNumber: syz [ 1036.543485][T11977] usb 7-1: config 0 descriptor?? [ 1036.560362][T11977] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1036.578047][T11977] dvb-usb: bulk message failed: -22 (4/0) [ 1036.584037][T11977] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1036.603211][T11977] dvb-usb: bulk message failed: -22 (5/0) [ 1036.609122][T11977] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1036.633223][T11977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1036.651958][T11977] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0) [ 1036.660968][T11977] usb 7-1: media controller created [ 1036.702178][T11977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1036.747070][T11977] usb 7-1: selecting invalid altsetting 3 [ 1036.760801][T11977] ttusb2: set interface to alts=3 failed [ 1036.823177][T11977] DVB: Unable to find symbol tda10086_attach() [ 1036.833414][T11977] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0' [ 1036.842611][T11977] dvb-usb: bulk message failed: -22 (4/0) [ 1036.849854][T11977] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1036.877585][T11977] dvb-usb: bulk message failed: -22 (5/0) [ 1036.883475][T11977] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1036.900210][T11977] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected. [ 1036.969618][T20048] hpfs: Bad magic ... probably not HPFS [ 1037.640325][T20044] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5002'. [ 1037.693972][ T9] usb 7-1: USB disconnect, device number 43 [ 1037.740361][T20041] wg0 speed is unknown, defaulting to 1000 [ 1037.790970][T20056] NILFS (rnullb0): couldn't find nilfs on the device [ 1037.802580][ T9] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1038.111134][T20041] chnl_net:caif_netlink_parms(): no params data found [ 1038.166406][T14515] Bluetooth: hci0: command tx timeout [ 1038.186590][T11977] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1038.233069][T20041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.240663][T20041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.248116][T20041] bridge_slave_0: entered allmulticast mode [ 1038.256053][T20041] bridge_slave_0: entered promiscuous mode [ 1038.266264][T20041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.273889][T20041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.281785][T20041] bridge_slave_1: entered allmulticast mode [ 1038.295977][T20041] bridge_slave_1: entered promiscuous mode [ 1038.350646][T11977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1038.365580][T20041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.376539][ T9] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1038.386542][T11977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1038.402342][T20041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.411805][T11977] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1038.426665][T11977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.448052][T11977] usb 3-1: config 0 descriptor?? [ 1038.454729][T20060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.465178][T11977] hub 3-1:0.0: USB hub found [ 1038.469475][T20074] binder: 20073:20074 ioctl 4018620d 0 returned -22 [ 1038.484809][T20074] binder: 20073:20074 ioctl c0306201 200000000500 returned -22 [ 1038.531425][T20041] team0: Port device team_slave_0 added [ 1038.539313][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.543419][T20041] team0: Port device team_slave_1 added [ 1038.580502][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1038.600425][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1038.619803][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.632078][T20041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.639683][T20041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.668472][T20060] futex_wake_op: syz.2.5007 tries to shift op by -1; fix this program [ 1038.677924][T20041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.707984][T20041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.715992][T11977] hub 3-1:0.0: 2 ports detected [ 1038.721028][T20041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.748799][T11977] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1038.758937][T20041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.849515][ T9] usb 6-1: config 0 descriptor?? [ 1038.900223][T20041] hsr_slave_0: entered promiscuous mode [ 1038.909179][T20041] hsr_slave_1: entered promiscuous mode [ 1038.919358][T20041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1038.927315][T20041] Cannot create hsr debugfs directory [ 1039.646159][T20041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.665088][T11977] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1039.673430][T11977] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1039.695367][T11977] usbhid 3-1:0.0: can't add hid device: -71 [ 1039.702345][T11977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1039.727732][T11977] usb 3-1: USB disconnect, device number 60 [ 1039.821333][T20041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.891638][T17001] hid-generic 0000:0081:0008.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1040.000971][T20041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.062101][T20089] fido_id[20089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1040.189159][T20041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.257430][T14515] Bluetooth: hci0: command tx timeout [ 1041.122818][T20041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1041.169720][ T9] usb 6-1: USB disconnect, device number 75 [ 1041.210056][T20041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1041.270968][T20041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.365622][T20041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1041.609994][T20041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.684577][T20041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.727591][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.734834][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.807468][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.814672][T10350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.360810][T14515] Bluetooth: hci0: command tx timeout [ 1043.092704][T20041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.232785][T20041] veth0_vlan: entered promiscuous mode [ 1043.276687][T20041] veth1_vlan: entered promiscuous mode [ 1043.336082][T20041] veth0_macvtap: entered promiscuous mode [ 1043.360825][T20041] veth1_macvtap: entered promiscuous mode [ 1043.615031][T20041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.654987][T20041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.688961][T20041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.812499][T20041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.931467][T20041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.064588][T20041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.409832][T14515] Bluetooth: hci0: command tx timeout [ 1044.520581][T18927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.538537][T18927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.627893][ T4870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.676403][ T4870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.894704][ T31] INFO: task syz.3.4199:17671 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1044.935106][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 1044.955242][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1044.987540][ T31] task:syz.3.4199 state:D stack:25960 pid:17671 tgid:17670 ppid:12155 task_flags:0x400140 flags:0x00004004 [ 1045.035588][ T31] Call Trace: [ 1045.061224][ T31] [ 1045.064324][ T31] __schedule+0x16f5/0x4d00 [ 1045.108525][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1045.159029][ T31] ? schedule+0x165/0x360 [ 1045.163456][ T31] ? __lock_acquire+0xab9/0xd20 [ 1045.179464][ T31] ? __pfx___schedule+0x10/0x10 [ 1045.184412][ T31] ? schedule+0x91/0x360 [ 1045.191121][ T31] schedule+0x165/0x360 [ 1045.195345][ T31] netfs_wait_for_request+0x1f0/0x600 [ 1045.222488][ T31] ? __pfx_netfs_write_collection+0x10/0x10 [ 1045.228904][ T31] ? __pfx_netfs_wait_for_request+0x10/0x10 [ 1045.235219][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1045.256396][ T31] netfs_unbuffered_write_iter_locked+0x52a/0x910 [ 1045.262923][ T31] netfs_unbuffered_write_iter+0x4c4/0x660 [ 1045.276486][ T31] do_iter_readv_writev+0x56b/0x7f0 [ 1045.281768][ T31] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1045.316325][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 1045.321916][ T31] vfs_writev+0x31a/0x960 [ 1045.334376][ T31] ? __lock_acquire+0xab9/0xd20 [ 1045.346521][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 1045.351490][ T31] ? __fget_files+0x2a/0x420 [ 1045.356164][ T31] ? __fget_files+0x3a0/0x420 [ 1045.361026][ T31] ? __fget_files+0x2a/0x420 [ 1045.365945][ T31] do_writev+0x14d/0x2d0 [ 1045.370705][ T31] ? __pfx_do_writev+0x10/0x10 [ 1045.375527][ T31] ? rcu_is_watching+0x15/0xb0 [ 1045.380967][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1045.385774][ T31] do_syscall_64+0xfa/0x3b0 [ 1045.390587][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.395861][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.403884][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1045.410152][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.416106][ T31] RIP: 0033:0x7f9f7038e929 [ 1045.420671][ T31] RSP: 002b:00007f9f71214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1045.429370][ T31] RAX: ffffffffffffffda RBX: 00007f9f705b5fa0 RCX: 00007f9f7038e929 [ 1045.437627][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 1045.445890][ T31] RBP: 00007f9f70410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1045.454188][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.462482][ T31] R13: 0000000000000000 R14: 00007f9f705b5fa0 R15: 00007ffe063ac878 [ 1045.470824][ T31] [ 1045.474114][ T31] [ 1045.474114][ T31] Showing all locks held in the system: [ 1045.482336][ T31] 1 lock held by ksoftirqd/1/23: [ 1045.516345][ T31] 1 lock held by khungtaskd/31: [ 1045.521261][ T31] #0: ffffffff8e33ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1045.546456][ T31] 2 locks held by getty/5590: [ 1045.552757][ T31] #0: ffff8880312de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1045.567071][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1045.582070][ T31] 3 locks held by kworker/1:7/5946: [ 1045.588802][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1045.604209][ T31] #1: ffffc90004657bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1045.616490][ T31] #2: ffffffff8e344978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1045.632183][ T31] 3 locks held by kworker/1:3/17001: [ 1045.638315][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1045.656434][ T31] #1: ffffc900045b7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1045.676423][ T31] #2: ffff88807b3a7240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 1045.695191][ T31] 3 locks held by syz.3.4199/17671: [ 1045.700533][ T31] #0: ffff88802961eb78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1045.709935][ T31] #1: ffff88807ec8e428 (sb_writers#17){.+.+}-{0:0}, at: vfs_writev+0x288/0x960 [ 1045.720061][ T31] #2: ffff88805dce7528 (&sb->s_type->i_mutex_key#22){++++}-{4:4}, at: netfs_start_io_direct+0x1ef/0x230 [ 1045.735189][ T31] 1 lock held by syz.2.5047/20180: [ 1045.742327][ T31] #0: ffffffff8e344978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1045.757419][ T31] [ 1045.760897][ T31] ============================================= [ 1045.760897][ T31] [ 1045.780206][ T31] NMI backtrace for cpu 1 [ 1045.780225][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1045.780250][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1045.780264][ T31] Call Trace: [ 1045.780272][ T31] [ 1045.780281][ T31] dump_stack_lvl+0x189/0x250 [ 1045.780308][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1045.780340][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.780364][ T31] ? __pfx__printk+0x10/0x10 [ 1045.780401][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1045.780433][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1045.780457][ T31] ? _printk+0xcf/0x120 [ 1045.780485][ T31] ? __pfx__printk+0x10/0x10 [ 1045.780520][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1045.780556][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1045.780588][ T31] watchdog+0xfee/0x1030 [ 1045.780610][ T31] ? watchdog+0x1de/0x1030 [ 1045.780639][ T31] kthread+0x70e/0x8a0 [ 1045.780671][ T31] ? __pfx_watchdog+0x10/0x10 [ 1045.780690][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.780720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1045.780749][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.780779][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.780808][ T31] ret_from_fork+0x3fc/0x770 [ 1045.780833][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1045.780861][ T31] ? __switch_to_asm+0x39/0x70 [ 1045.780887][ T31] ? __switch_to_asm+0x33/0x70 [ 1045.780911][ T31] ? __pfx_kthread+0x10/0x10 [ 1045.780951][ T31] ret_from_fork_asm+0x1a/0x30 [ 1045.780993][ T31] [ 1045.781001][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1045.944298][ C0] NMI backtrace for cpu 0 [ 1045.944316][ C0] CPU: 0 UID: 0 PID: 20181 Comm: syz.0.4999 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1045.944338][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1045.944350][ C0] RIP: 0010:check_preemption_disabled+0x58/0x120 [ 1045.944374][ C0] Code: 48 8b 0d db d1 52 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 81 c0 02 00 cc 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 f7 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 50 c0 92 [ 1045.944390][ C0] RSP: 0018:ffffc90004bff4d0 EFLAGS: 00000046 [ 1045.944406][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000000 [ 1045.944418][ C0] RDX: 0000000000000000 RSI: ffffffff8da5f7d4 RDI: ffffffff8be41a40 [ 1045.944431][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cf7646 [ 1045.944442][ C0] R10: ffffc90004bff658 R11: ffffffff81ad26a0 R12: 0000000000000004 [ 1045.944455][ C0] R13: ffffffff81cf7646 R14: ffffffff8e33ee60 R15: ffff88802c4d3c00 [ 1045.944469][ C0] FS: 0000000000000000(0000) GS:ffff888125a1b000(0000) knlGS:0000000000000000 [ 1045.944483][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1045.944496][ C0] CR2: 000055bde535b000 CR3: 0000000032546000 CR4: 00000000003526f0 [ 1045.944512][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1045.944523][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1045.944534][ C0] Call Trace: [ 1045.944541][ C0] [ 1045.944550][ C0] lock_release+0xbc/0x3e0 [ 1045.944573][ C0] is_bpf_text_address+0x28d/0x2b0 [ 1045.944593][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1045.944613][ C0] kernel_text_address+0xa5/0xe0 [ 1045.944641][ C0] __kernel_text_address+0xd/0x40 [ 1045.944667][ C0] unwind_get_return_address+0x4d/0x90 [ 1045.944687][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1045.944711][ C0] arch_stack_walk+0xfc/0x150 [ 1045.944744][ C0] stack_trace_save+0x9c/0xe0 [ 1045.944767][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1045.944795][ C0] save_stack+0xf5/0x1f0 [ 1045.944817][ C0] ? __pfx_save_stack+0x10/0x10 [ 1045.944837][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 1045.944859][ C0] ? vfree+0x25a/0x400 [ 1045.944878][ C0] ? kcov_close+0x28/0x50 [ 1045.944893][ C0] ? __fput+0x449/0xa70 [ 1045.944909][ C0] ? task_work_run+0x1d1/0x260 [ 1045.944933][ C0] ? do_exit+0x6b5/0x22e0 [ 1045.944955][ C0] ? do_group_exit+0x21c/0x2d0 [ 1045.944978][ C0] ? get_signal+0x1286/0x1340 [ 1045.944995][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 1045.945021][ C0] ? exit_to_user_mode_loop+0x75/0x110 [ 1045.945037][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 1045.945053][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.945074][ C0] ? page_ext_put+0x97/0xc0 [ 1045.945104][ C0] __reset_page_owner+0x71/0x1f0 [ 1045.945126][ C0] __free_frozen_pages+0xc71/0xe70 [ 1045.945154][ C0] vfree+0x25a/0x400 [ 1045.945175][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1045.945191][ C0] kcov_close+0x28/0x50 [ 1045.945205][ C0] __fput+0x449/0xa70 [ 1045.945228][ C0] task_work_run+0x1d1/0x260 [ 1045.945255][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1045.945281][ C0] ? kmem_cache_free+0x18f/0x400 [ 1045.945305][ C0] do_exit+0x6b5/0x22e0 [ 1045.945332][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1045.945357][ C0] ? __pfx_do_exit+0x10/0x10 [ 1045.945379][ C0] ? cgroup_freezing+0x20/0x360 [ 1045.945412][ C0] do_group_exit+0x21c/0x2d0 [ 1045.945435][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.945463][ C0] get_signal+0x1286/0x1340 [ 1045.945493][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1045.945522][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1045.945556][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1045.945575][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1045.945593][ C0] do_syscall_64+0x2bd/0x3b0 [ 1045.945608][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.945633][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.945650][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1045.945670][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.945687][ C0] RIP: 0033:0x7f4f3418e963 [ 1045.945701][ C0] Code: Unable to access opcode bytes at 0x7f4f3418e939. [ 1045.945710][ C0] RSP: 002b:00007ffc49b00978 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1045.945727][ C0] RAX: 00007f4f31f94000 RBX: 00007f4f327f76c0 RCX: 00007f4f3418e963 [ 1045.945747][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1045.945758][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1045.945769][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc49b00ad0 [ 1045.945780][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1045.945801][ C0] [ 1046.136373][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1046.136401][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1046.136433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.136448][ T31] Call Trace: [ 1046.136460][ T31] [ 1046.136471][ T31] dump_stack_lvl+0x99/0x250 [ 1046.136507][ T31] ? __asan_memcpy+0x40/0x70 [ 1046.136535][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.136563][ T31] ? __pfx__printk+0x10/0x10 [ 1046.136606][ T31] panic+0x2db/0x790 [ 1046.136635][ T31] ? __pfx_panic+0x10/0x10 [ 1046.136654][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1046.136684][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1046.136725][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1046.136764][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1046.136807][ T31] watchdog+0x102d/0x1030 [ 1046.136833][ T31] ? watchdog+0x1de/0x1030 [ 1046.136865][ T31] kthread+0x70e/0x8a0 [ 1046.136905][ T31] ? __pfx_watchdog+0x10/0x10 [ 1046.136926][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.136961][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1046.136996][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.137030][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.137064][ T31] ret_from_fork+0x3fc/0x770 [ 1046.137093][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.137126][ T31] ? __switch_to_asm+0x39/0x70 [ 1046.137155][ T31] ? __switch_to_asm+0x33/0x70 [ 1046.137184][ T31] ? __pfx_kthread+0x10/0x10 [ 1046.137219][ T31] ret_from_fork_asm+0x1a/0x30 [ 1046.137269][ T31] [ 1046.552319][ T31] Kernel Offset: disabled [ 1046.556665][ T31] Rebooting in 86400 seconds..