last executing test programs: 15.747926033s ago: executing program 2 (id=1409): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x8000003, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240), &(0x7f0000001340)) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) io_uring_enter(r5, 0x567, 0x1e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x44) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r1, 0xd00, 0x7e15, 0x0, 0x0, 0x30) syz_open_dev$sndpcmp(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x3ff, 0x80b, 0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x6, 0x0) dup2(r8, r1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) 15.150528186s ago: executing program 2 (id=1413): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) (async) r8 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) (async) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x8000}) 11.962016899s ago: executing program 1 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0xffffffa1) 11.586988484s ago: executing program 1 (id=1422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)=0x3) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003007866726d2f"], 0x58}}, 0xc0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r4, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10d, 0xff7f}, 0x0, 0x0, 0x80000000, 0x1ff, 0x101, 0x2, 0x6, 0xf3, 0x0, 0x1ae}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f00000000c0)={@val={0x0, 0x88f8}, @val={0x1, 0x1, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@generic={0x2, 0x6, "164577", 0x77, 0x1d, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x33, 0x2, 0x4, 0x1, 0x9, 0x30, 0x9, [@dev={0xfe, 0x80, '\x00', 0x30}]}, @hopopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}], "dd3e9adad1133929309d40d35c0c0b33bfdfaa9d8af3c359733a07549643d8ea5ac7f775278ca63f3ade73a0fc27dd328904b97ee84849c6c82f00df37a304919785bf3f4362e714553cdd9602c554"}}}}, 0xad) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'wlan1\x00', 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r8, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 11.228814807s ago: executing program 4 (id=1425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2cf2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) accept4(r1, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x80, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a1005", 0x4a}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000001c0)=""/36, 0x24}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000980)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x30}}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x4000) ioprio_set$pid(0x3, 0x0, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r5, 0x0, 0x548) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20c01, 0x189) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="40011a00000084fb40990600e7ff3648df42445cc21ec03ff6c83c7a0d139de9c94dda13149780d690419a8dcf734a1f93615d707a590a71fc2b84a76b955fb360dbd34e2d13626f5611562582ab3b04bd8bf3555af0a2c0433ff8f887243c5d91538e0de557f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4) 11.151887546s ago: executing program 2 (id=1426): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0xfffffffd) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'xfrm0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) getpid() timer_create(0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) gettid() futex(&(0x7f00000002c0)=0x1, 0x80, 0x2, 0x0, 0x0, 0x2) r6 = syz_open_dev$vcsn(&(0x7f0000000e40), 0x2, 0x1) write$UHID_INPUT(r6, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) socket(0x11, 0x3, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) 9.111592876s ago: executing program 0 (id=1430): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) r3 = getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast1, 0x4e22, 0x0, 0x4e23, 0x9, 0xa, 0x0, 0x80, 0x6, r2, r3}, {0x8001, 0x3, 0x82a, 0xff, 0x7, 0x1000, 0x4, 0x3}, {0x0, 0xc94, 0x4, 0x580}, 0xa4, 0x6, 0x0, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x6, 0x40, 0x5, 0x8}}, 0xe8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x145503, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f00000001c0)=0x359) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x364, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_DESC={0x344, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ddb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdc14}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c6a}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7573}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7dde}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x624}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5a7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x140}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfa7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff0d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff79cb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x180000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83c}]}]}, @NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x364}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'veth1_vlan\x00'}) (async) ioctl$FIONCLEX(r4, 0x5450) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$BLKRASET(r6, 0x1262, &(0x7f00000006c0)=0x9) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x400, 0x5, 0x8, 0xe9ab3808be956108, 0x1, 0xffffffff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x4, @void, @value, @value=r5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000840)='GPL\x00', 0x9, 0xcd, &(0x7f0000000880)=""/205, 0x60700, 0xe, '\x00', r2, 0x25, r8, 0x8, &(0x7f00000009c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0x6, 0x0, 0x73}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[r9, 0xffffffffffffffff, 0x1], &(0x7f0000000b00)=[{0x2, 0x3, 0x4, 0x6}, {0x1, 0x4, 0x7, 0x7}, {0x4, 0x8, 0x1, 0xc}], 0x10, 0x3}, 0x94) (async) link(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') ioctl$KVM_GET_TSC_KHZ_cpu(r9, 0xaea3) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x810, r8, 0x25362000) (async) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r10, 0x4068aea3, &(0x7f0000000c80)={0xed, 0x0, 0xfffffffffffffff7}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r11, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r12, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000801) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000e80)={{{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 0x4e21, 0x7, 0xa, 0xc0, 0x60, 0x62, 0x0, r3}, {0x5, 0x5, 0x64f, 0x400, 0x2, 0xd82, 0x80000001, 0x8}, {0xff, 0x0, 0xf, 0x1}, 0x10000000, 0x6e6bb1, 0x0, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d6, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x3500, 0x2, 0x3, 0x5, 0x6, 0x7, 0x5}}, 0xe8) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000d) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x94, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x94}}, 0x90) 8.667796394s ago: executing program 0 (id=1431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000850000000f000000c5000000a0000258db9f0095eb8e44d0bf8d27be326a3bae7c39efd36c544709baa5bd9138d99e5dfe1090c05b5f27e6a975059dcd81e4fb51680c682f14597baad64788080d2c73f14dde5a7be4baa85eaa1a5988e39636dfec205bd921b580b2989b08f31d90ccc6167f2356dee36821929dd8cf3d97d3a75ae1f0cd3d08a502a4f7d32cc69075eb8b140b290863"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x28001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000500)={0x2, "fa02c80a3a1e9d4b9aaf000000008d6762e69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) r10 = fanotify_init(0x0, 0x101000) fanotify_mark(r10, 0x106, 0x8000030, r10, 0x0) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r6, 0xffffffffffffffff}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r14, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r15}) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r15, 0xc0303e03, &(0x7f0000001b00)={"31ec861d1bdbb2f104dd52ad43b7db21214d0677cd19883e3f00", r16}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0xd, 0x200ab8, 0x9, 0x5, 0x8000, 0x0, 0x3, 0x1d, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x0, 0x6, 0x3}) 8.407140071s ago: executing program 1 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.503560828s ago: executing program 1 (id=1435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x2000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.173115067s ago: executing program 3 (id=1436): syz_io_uring_setup(0xc4f, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000003e6d0b236cea3a20707e961d1c0000000000000000009500000000000000ba1af30b09ab75e1c6a7b11ad54a14cbf994e7f30ca48597373c3bc7e905b68da91675f188defddce6eb0baa3ae824f95ac98238e671469a4268ae91dfaddc44de64b36cd10cad151435d02678d886a119cef2ca0990670092ee84d59d35dbdac46f7f468dfdba42b6cac0c1c3aadb42106ea96562dcb8f0601b368eb360762181b9058f8e8a0ce9"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000000)=""/19, &(0x7f0000000240)=0x13) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfd}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee430000000000100000000000008"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x10, @mcast2, 0x80000001}, 0x1c) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aac9200e22"], 0x0) 7.103542064s ago: executing program 4 (id=1437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000009c0)={0x0, 0x1000, "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"}, &(0x7f0000000300)=0x1008) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fabe40437c464cb43f4d", @ANYRES16=0x0, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x28000050}, 0x20008050) socket$packet(0x11, 0x3, 0x300) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0xa, @pix_mp={0x3, 0x708, 0x33565348, 0x4, 0x1, [{0x6, 0x4}, {0x0, 0x75f7ea8a}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0x5, 0x72}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x4, 0x0, 0x3}}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') 5.700283265s ago: executing program 4 (id=1438): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_open_dev$midi(&(0x7f0000000200), 0x2, 0x40081) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x339, 0x0) sendto$inet6(r2, &(0x7f0000000300)="f501", 0x2, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff8, @rand_addr=' \x01\x00'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000, &(0x7f00000003c0)) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010100000000ecffffff0a0000010c001980080002000c08000018000280060001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) socket(0x2, 0x80805, 0x0) 5.650598237s ago: executing program 2 (id=1439): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB=' \x00'], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2e7, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149", 0x52}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) 4.646381166s ago: executing program 4 (id=1440): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='0x0000000000000004:0x000000000000080f:0x0000000000000a0e:0x0000000000000015:0x0000000000000004:0x0)00000000000007:0x4000000000000000:0x0000000000000093 m'], 0xa3) 4.621073152s ago: executing program 2 (id=1441): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xf6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r3, 0x0, 0x10000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)='bridge\x00', 0x7, 0x1) 4.567861268s ago: executing program 0 (id=1442): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r1, r2, 0x3b, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x3, 0xffff, 0x8, 0x5, 0x100, 0xf, 0x4, 0x8000, 0x4, 0x0, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = epoll_create1(0x0) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa000000d}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x2c}}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r8) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x141000) shutdown(r7, 0x0) close(r6) sched_setscheduler(0x0, 0x2, 0x0) 4.418046666s ago: executing program 4 (id=1443): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="ea00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x10140) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x0, 0x0) 4.230750475s ago: executing program 4 (id=1444): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x80, 0xfffffffd) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'xfrm0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) getpid() timer_create(0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) gettid() futex(&(0x7f00000002c0)=0x1, 0x80, 0x2, 0x0, 0x0, 0x2) r7 = syz_open_dev$vcsn(&(0x7f0000000e40), 0x2, 0x1) write$UHID_INPUT(r7, &(0x7f0000000fc0)={0x8, {"bea54ecfdc4add72e36a3f8bb51605d40a6d4c80f500ea72a23b504debd9278992c87409bda59a439d941ec300474bf84fa5512b513e33d4f541eeb5b5fe882f6b06b9fcf6f1feb307f8017e039dcb5f1071ebefe2428ef1c7c2b17c0b07faed15d883e7c62b40769a377cf7de7c5eebdfb38193cc3b9b145c6d2fe91bd064cd52506aa659f73719691b07276345bc8bedf54e92257e81ca31fc1a571903037599b41a18efdb0afa2539cca86fb6134a11a11551e74b8c399f8e27371f214e8a9ab7d8d6a40e4921151e7e1bc629bf0e339d01f65dfdac91835de37998e0b4dd5a23b866be95a38b3011044c9954b56f3a5889fa2be1212f9bf7dca991f45e3da2938909e97b4e718337c603e581f877a887764e5f08e7e81aee0fa8c678f08c6d914dcbf631d48baa3433a5b8e6ed3b3a66b47539bc15d366c0447f1713c75f60470755044a1394603c42e1e05745f25b298246e857287f220d7dec57c0fc031a2613e53f40a2ad7da1106eab874c368cb2e83e0f6a8a21ab11a80d1652a09460e94b473f2e4e5d61bf6404fbaf517f3c41c48ae8c0339b0c2e11340a53607882fc0b03a54c13083ef509c9123f209b31387d0ad9bb076a206085aa164c4d574282202e1fb4f3b825dd31f3b4b30a31d71a4e650346d3ba2f871d08bb30118a9db7998367a2a2cff30292b1330190fcf17def67d073ec4ed54c82bd647437e3053378b88124e679628851c50e6ae2fe2ca46037d3a6c8cac2357b9583742e1a557b28a589efce35fb92216a5ad5a540b487eed66ed71214b616c6d9c0979959f2b611b0f91d31dc8f0a71301218bd3181a47d4757bedfee81ec0278a95d570397aaf95e90c6ca0ce9619933035c95067167a708e629b344e8ceeefb47d310defe00bca6e3a9ae28b6c9d5a854624bef39b1159d867203439f4f75190284debc85f53eba7be6743a940ead15d1d5b270ea6decee46333edbcbef7214d10c2d3673b41f44351932a1a29c58642774372d0ac416ec6abbc9502654c64cc418805d8141c1a75d3b5f3dd537af804d78bbfe80eb4abe02e86dd3cb0d5aabb436762ab00c96df43da6d1287a1f4f17477bf49851b8560030d5e850889bf71e65df57cb5047a04451cc8dde8405041be438362b8567186a235815292de0bb94b0fb2ff646cedad6c11624226ba625f2e7607d3b27cb13d911a4dccd46bb3032470555fc50aae67c3a62f622547f0e8faa2d5008a0df9596777afe4faf90a5facf4e90298be329d3abab45e791c74a6e1350e4b45b376f562f97c14e8fa49ecbb1bc1ac3741071ae899076380e131557148763ae6073b2712a466964712fb04d5cdd8cd97fd532b2fe8e0bc7cdb5d1e9c1e43b9e95cf32eaec03addb24aa96fb7c8089717560c551ab8192a0f8b59c2fc1598bd9e45cca96890d66b6be76bb9d4adf03efb8ceeef0b15f1abc9d5d76cead5d1a7622e166f9a4a448e720d4c0a3dc2cf02cca54aa515f6c58462397d7324f18ecd96046a7e4a19d6f86506480c72cfce201a51dad92844047454258f3fbadb0ba47c54d4bd21585f378ea877c7d4665a0c072b3432627794af552630c26e076f82042541820d8c71f197a0dd735d29bc2a7bb3b3824835adaa761b64643451349e898695a1744dcf6b743ff6343e7b8f010257646f1294d50c1f5a2b5c04794d4251b4885fd8c787884f8359dab3c84b0de5df66cbeddcb04ff7e045fe616ad44a343e063a55e22cc88a6bd7a5f1acfc42baa503d6d85ce8f0a787f2fed102b842492cf392c81efcb87a84a55c46dbd21db2dd00488fdccb6b7a18fc3c8e871edaabe77b34234af1bc9a3ce9a879180b455b82724c88ccebe62bcb71747f75efdac7e392b460de46ecd82985418ca54e0f0f57abc7baa956ac2f158796842ece4e0b6510ddc19618d082aed043753005bcb1123318978f6ae7d9839aeb3f93b0df288d8c383fc0fd9c381497171f638325877f2a879ed5695a32e8e29cb6e08c7581ed3955b7c987408882d5af73e650990b763401b3d78ff525d79f24aa454e417db395f58a6061a977d25d4fcd5ad9124dff1b4c050829acd03f6b547c88c9d61ade39cd439cc0ab490140f1f24b6d6c0967db40f50a40a6e5fe12b8db00f842f5309a65cf5571d1ebf173ae1993aeef845047dc2ccf817c99abda16a4bc15b824ee0412ecf573137d751dd2096754b5d8ff13aa1d03066d98f85a85c6bcd1f4a24eb1200cc3aa9e30d43a283c880d0630d338ad6d7908567732eb81572462ec55db0013579115c2939bce5b43756cc9dbfa551cf3b241e2a5591bbb1947d868eac881ce62dc1dddf5258dd7ae0e967d857232a12e05455fd5b588bc09ad301a29f1fd74a075cdcf607bf5546c8501a6c65cc6629abc3edb6517c1908b7f8bcdede0345559130f1e9e9d9e738b0452566cb2e5f76d1e0fb6cfa895cb573cdddd388e8229d877f9c14daeb3c97d39b2458ace618102f14737c7ad66744327eaf7f39e09508dc475b4e5db3350346a01fa9959a0adfaa561902b164e782766d500a40db01fa3b358d000f3858ddfefcafb988bbaf1ee9d456af4c2747f3ddeb289f3de39688d4acc91d86f9e4b32c3fe8c99a5258a7df5b4512623d20b2bf4cb5733246601cb693282db1c8e315d294115c9552390f023fc90db90d85de3625017b0562f7866e46fdc1e8f0294d3248d34eb5c140a9a4ec348a866990d4d9de95d601727937f75f11e885bf7146157bd3f72d5b9b71ef721fde4e71179823ad30d0cd73988f8b38cc08a365b37c1913c3ce020f8cce4c4fbe8a13889dd073ce47be3f9ea25b86abb48ca67c0b42fda62645c621620ff42d12caa2f4a6aa909ae3332c323194b8931cfb99c5cda5b94c0f56e27a0bc271dba9b8b8500dd9682ab7fae2e4f2a0d5b4fd96389661bd3017923ffc059b627cd6029106c470115a8c6e5dad158fe8eaf488e6c34b467caaa4abbf1cf1f2e73cdf0b190ea28794c2b05f4bc340bf5dfefc69f439ad1ec9edae44fa87a0192d04ce6cb2db53232ee72e16604ce67108663367906f962e2c537182817c3014c7b6d5107d57815c850a5182f829d7d21cd45ecf31de38fd5955ba4193099c4950d87cb685073dd4e39c444121a73e9104834bab599b34355efee03af0761f32c3a3995321aa5f1747f99f9260462ef5aa902a1f00d2f1037ec9dba69ee159a192afdca91fe5223c96260f58b555ad6b696cd1132a79f84b6efaab07590f925bed5896596e77b2de759e661aed5a27dfacf363c58392af88be2e8d918329325bd491c111e82f855bd58b0dfb1b281e9322d218faed7c335c53bc8ed50b33b535befd5e7103bd2a8f88eb4a13d5afa20adf3e882d68cc33b5ce44e259f4d5ce1059b4180f1b59112f95374da885c589aa546291de6beb2431122b86e7af2bfbf56adcbce2a3c7a789fc077c10c07502c8e9647fe2a7773c4478c4f31b2d4a827fb1681961216f0efbaca60b2d83e979b8ffe3f09a684dea53a777bda0e683e03d93444c49546711026b73f06b40637d95910aa16b4c11c3ac5990ccde583196c89a86c4a4a56a63c5dd5d5fa1a8115a9198e1b1b53ecf5678421209f67600e12f5aeb8cbf61ab91907f0c3b7bd4cc9821d72624af0cc42b2ee78952342cfce6e62beca1fde91c20700c8c663bc111cb9de270464dc8643ad8498ba143c14c8a2e974ff4e3ade212edfcfe9fc2014d7549ee520a4a0ad98ac038c4faa0f65fab647caae840d5b8ca1d1df8fcdd4cd9d87ee60ea1be47a1cace6facd98da48b50ec273a7522d5306b458bae99d484b4bbd4e06f65a3a5ef0e2434a0a32b2db267f9f5b87f98f15a0ed10739143eee6e09e07ebdc21d9ade8dc8e95aeaf5a53402a6bdce50b375cb71093ad59e1dedcd04e8a3d6abeca8ea853d65ecf681e77078355c662b1eb2dd6e48a6bb13c5083013b3acf955f672de67cd2b979ef2bb446aab6a15a846bc7c943a0496532badb491f5a2a686e64a95d0e08f5f472bf1e40f5bd5707946496beb7318772bc28a4be28176560ba2c0da1faf39e823051d2ac35e3dbf295632fa90d10e48d456996eb7f39b68631f6da62d81d89805e8c1a39952a284bb78c1cda7f06eaeefd80b2e2f5867e0707bd38541883bab8a80067f35ad00b72099dddcfd90496da7f4a5c31e83be4025529f188cbef21a73950839fa6ad23ed06960c06e970f7eb478dadfbd47388de5d865250fcd15e9930914bc8e539486bced76abfe130036f360cb2ede57095f9ccc9ea9fc9334c1bd3d49d9b26fb550b94fa450748134d1fdc706fa4961a9dc58c295ff11e71d99c6410f9abfc51bc65a876571da147336b512dc34fd6a9f6aa0109496c04bb1b23739bf9df23539feefeb4d5ba84c648fca878f6f89a06676dbc5680d084503e555840411048d184afaa11d34affcfc9989db2677bc5c4fff6458258972e2e3084f5a678a8e02df1817d4caff369c8e0413dab559c57078d723c84cecec8f89b0e30cd4e2145b4519ee598803f54e14a1d75ba1d21d182d5704f8fe18b5471bfaa169312fe1a5c3b323d334b1f679ad91dc84d27d83e8ccdc88eb32eb90a75c0a2fbac8863439f210debb812f421dc612c6dfe2ed2b74623645049f317a6dcfd9b497fc2c1b05817e7271fcf9ef8831ce9631f1f5aea2df2b046f2eb274a921d80d2b797ee43f1a19654a2c94c0291021d8b4bf197b2e82edd3f555f34ab36f5e3c6a56dedbbb28e01e25dc15a00b114fd014f6b476960bd5db98d5d2890e296b11a1f807a4d60681959e92c655bef027aa5db417c4b1767e417d8f7501db849b8c451f81232661e83620c4c9c377794633fd0f098030a965fe526aabdfc5fbd53015beb4b59ae0f22d7d24286004f6a5836d48b7738aa150ccaf3397a33f2637b6f47665304ac746bd37f39ee9b39ff0514ad7e9138d1e36c281796233df11a37a9e287bd0366d78554aa8dadbff563be22ad8f7deac2a628cb240c2b77dc940a2dd4f189a3c2b92d012d18cd1c3cb67ce5a5b1aafc955b6c1119a89a8e192b553ae7bec5070d1af94652f9d498427e650d7fb36b61ccd0fe1ca7f2c61e612a33aed613d6d0fb54fcb5aa154165aea52cef7892535d50ac5bcbccfd8a8d4ccce8d19feb9143bf6c5158ff94a53cdd02722189c41695ea26f542b9da4bd6358b668a9f863ece077d0f5a6ff6999750239be588a1cfbb29111f8dab795057539a07fe38af13eba3f99414bbe12e83455c65ccf8538551c01ccb7858a3c6d63ea5c29978e5d349bd5ac01e9e3e394afc8b012dd7c32c1703a3baed2c16671dccbdf4ab8d565fbe295360b9d80b00ec1e3357e3ff7edec490d91309237956a65b03948b70ced4323b608bc04b64610cc2fa09c44af6c30c793308bce2b86d3edbe7cd10f7a4cc0637c898a05c3910356737f3a362bffd51d5d5a8ad740c034958e4791295e3f70a83d9bbb72f9b14a27f8e9732dda9ca1cf45fa445a8c1bb1d6249efabb13a43ab7538d37a9b6af60ea9353008f1fad5bf366fb2444326df38595ed429b878080836807b970b05dddcd95217b27c363927fce4bc65baa4a1cf8c33e94053755c814a2af37d4e0679026c519c5769801874a901b32271e4711019f677854c72a1e6bad976b4a5bdffb5d8b84b9edaf530eab0a1719816ee5bf193b4505326e9f693368705c73ac84edeb12ffdc59b25596a5589388763950760a97135b3cf4ad78dd4b3b1e64ba979a610b3396917e8077f47482b7ffac69753703d69512b", 0x1000}}, 0x1006) r8 = socket(0x11, 0x3, 0x0) sendto$packet(r8, &(0x7f0000000380)="6fa4bf90aa8a2fa38a8f6c8fa168f069adfc79fefab38d472b35afef1abf5976aa851156780bb0fe", 0x28, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0786dbd848f5"}, 0x14) syz_usb_disconnect(r1) 4.159950752s ago: executing program 0 (id=1445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x33a77c20f21f5ff8}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) (fail_nth: 3) 3.37020721s ago: executing program 3 (id=1446): socket(0x2e, 0x5, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}, "c8885f4850957342"}}}}}, 0x2e) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc090700000026bd7002fedbdf2505001a00fe8000000000000000000000000000aa64010100000c00002c003000ca862220e83f1ad7"], 0x38}}, 0x40408c0) prctl$PR_SCHED_CORE(0x3a, 0x1, 0x0, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.098804833s ago: executing program 0 (id=1447): getpid() sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x3, 0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x203, 0x1000000, 0x2, r4, 0x6}) readv(r1, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/205, 0xcd}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x3}, 0xffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 3.007789559s ago: executing program 1 (id=1448): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$COMEDI_CMDTEST(r5, 0x8050640a, &(0x7f0000000140)={0x9, 0x30000, 0x0, 0x5, 0x4b, 0x81, 0x40, 0x0, 0x0, 0xb39, 0x80, 0x283, &(0x7f0000000000)=[0xd655, 0x1, 0x4, 0x0, 0xfff, 0x4], 0x6, &(0x7f0000000080)="bb2f934126579cfe7ea5ff792b1bcbb2ee68b97a10c097005b13fe8a06bf787ef98fc0a90416d1046b03061e8a4976d5ee3a4ed42d574c020dbd3d180393d3755f553cb9188be405b72b9b069ffea67f0bffdb8a61e2df9442361bdaf3f125a472e860bbe1184dd6f10d2d68ff40dd47d40b1343e64dd7ca932c935919bcbdab3cfc7b348515982901e97ff402bf7a0e63c93917609d1ac71f36d13e41c91aaf6b18236dabc3ad62ab11f2a39bb41a0512c2cdec79144e04", 0xb8}) 2.768890774s ago: executing program 3 (id=1449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fabe40437c464cb43f4d", @ANYRES16=0x0, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x28000050}, 0x20008050) socket$packet(0x11, 0x3, 0x300) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0xa, @pix_mp={0x3, 0x708, 0x33565348, 0x4, 0x1, [{0x6, 0x4}, {0x0, 0x75f7ea8a}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0x5, 0x72}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x4, 0x0, 0x3}}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') 2.738117483s ago: executing program 1 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x0, "21a56b7ad1e74f1ff6c21e909eafafb31880decf0dc803bdc16a04d86c57f195", 0x1, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) 1.51661613s ago: executing program 3 (id=1451): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x0, 0x44, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x20, 0x3, [{0x1, 0xb, "ecbb63cf7869d31ace"}, {0x1, 0xa, "1206b44392d071f5"}, {0x1, 0x5, "4740c2"}]}]}}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chdir(&(0x7f00000000c0)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x1) getdents64(r3, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5], 0x6a) 116.026553ms ago: executing program 3 (id=1452): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x2, @win={{0xf25, 0x830f, 0x5, 0x2}, 0x1, 0xfc9, &(0x7f0000000040)={{0x5, 0x6, 0x0, 0x3}, &(0x7f0000000000)={{0x81, 0xfffffc00, 0x9, 0x5}}}, 0xd87, &(0x7f0000000080)="4998c7eeb585c9b30e380020b7b3cdf8179dd4f3e36728d050ce417e0c0df035fb5ad258d19a14e7c81189f0264cb3456d944b50426a9e114b29dd35abc97aec0fd6432ac18d246efe6a195901e9d427631fd242361c8591c395407cc1d3ec225d9044d947754be339a9474c2b3b7f9a5f4f5104c92a7fcdc7033ff481cad9a9798fe9c061cda33a4f2caa7b665b83bd6a3c0c3a82fc144a9c", 0x5}}) syz_fuse_handle_req(r0, &(0x7f0000003f80)="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", 0x2000, &(0x7f0000009400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006580)={0x15, 0x0, 0x7, {'&}(-\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007180)={0xa0, 0xfffffffffffffffe, 0x33, {{0x1, 0x2, 0x8000, 0xe73a, 0x1af8, 0x6, {0x5, 0x6, 0x3, 0x4, 0x7, 0x153, 0xe1d, 0x7, 0x10001, 0x4000, 0x1, 0x0, 0x0, 0x7, 0x7}}, {0x0, 0x10}}}, 0x0, &(0x7f00000092c0)={0x130, 0x0, 0xfffffffffffffff9, {0x4, 0x2, 0x0, '\x00', {0x400, 0x80, 0x3, 0x15, 0x0, 0xee00, 0x4000, '\x00', 0x7ab, 0x1ff, 0xe2, 0x7, {0x52, 0x1}, {0xc4, 0xfff}, {0xfffffffffffffffa, 0xed59}, {0xd, 0x8001}, 0x800, 0x3276, 0x4, 0x6}}}}) 115.608348ms ago: executing program 0 (id=1453): gettid() timer_create(0x6, &(0x7f00000002c0)={0x0, 0x21, 0x1}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000039c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5a5a00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d0c0", 0x2}, {&(0x7f0000000200)="738753506f73335be81bdfb49103d4e40cebb1fcb9d9ec6908e64c7d85414403c12467721044e6962cc6a483057f9abfe24d2c3b7cc42bdccadada7471746f809cf9bdeb44f97790a5ec02c10860a745935bb50ddba386e2de9390102fb40674fb52d221ce624399abe696592414316ce1ca190b993dfe4020", 0x79}], 0x2, 0x0, 0x0, 0x800300}, 0x4008805) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400402, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000000000040000000000600000000000000010000400000000007"]) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 30.040115ms ago: executing program 3 (id=1454): r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0xc) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/132, 0x84}}], 0x1, 0x40002103, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r2, &(0x7f0000000040)="031a82a3653eed45e49d4187518e721e3820e782bc4e4d1e5a12dab31ba45c3435c0ee51d18792c29e1f210e6b1d6223c7c130def2dbf0f66a747d9f9cec619be67b300898268dbd51140862bb2735ad4d8c85da3eaf2ea86c869d30824980d2a83e4a31f5cd5db70109c02ba79e83db172094dcebc1ca378ffc68cae32835925b516e835f1583060739eddfc5df4af6d77149f90248", 0x96, 0x24044041, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) 0s ago: executing program 2 (id=1455): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000002180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000775) (async) inotify_add_watch(r2, &(0x7f0000002180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000775) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES16=r3, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc0) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES16=r3, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc0) kernel console output (not intermixed with test programs): vblank timer overrun [ 318.809875][ T7944] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 319.463980][ T7944] team0: Device ipvlan1 failed to register rx_handler [ 319.796737][ T7955] fuse: Bad value for 'fd' [ 320.665421][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 320.905384][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 320.938800][ T24] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 320.963199][ T24] usb 2-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 321.019353][ T24] usb 2-1: config 0 has no interface number 0 [ 321.047711][ T24] usb 2-1: config 0 interface 202 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.129776][ T24] usb 2-1: New USB device found, idVendor=08ca, idProduct=0109, bcdDevice=bf.1b [ 321.147213][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.169010][ T24] usb 2-1: Product: syz [ 321.188899][ T24] usb 2-1: Manufacturer: syz [ 321.220271][ T24] usb 2-1: SerialNumber: syz [ 321.252707][ T24] usb 2-1: config 0 descriptor?? [ 321.564789][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.462635][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.527288][ T24] usb 2-1: USB disconnect, device number 19 [ 322.665394][ T5898] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 322.855219][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 322.863675][ T5898] usb 3-1: config 0 has an invalid interface number: 42 but max is 0 [ 322.873326][ T5898] usb 3-1: config 0 has no interface number 0 [ 322.883414][ T5898] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27 [ 322.894772][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.904089][ T5898] usb 3-1: Product: syz [ 322.913144][ T5898] usb 3-1: Manufacturer: syz [ 322.918273][ T5898] usb 3-1: SerialNumber: syz [ 322.932757][ T5898] usb 3-1: config 0 descriptor?? [ 323.197890][ T5898] usb 3-1: Found UVC 0.00 device syz (1bcf:0b40) [ 323.222175][ T5898] usb 3-1: Forcing UVC version to 1.0a [ 323.368019][ T5898] usb 3-1: No valid video chain found. [ 323.377799][ T5898] usb 3-1: USB disconnect, device number 26 [ 323.400872][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.412253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.150732][ T8013] netlink: 88 bytes leftover after parsing attributes in process `syz.4.557'. [ 326.160574][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.557'. [ 326.544803][ T5821] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 326.678200][ T8016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.733155][ T5821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.756166][ T5821] usb 3-1: config 2 has an invalid interface number: 252 but max is 0 [ 326.791244][ T5821] usb 3-1: config 2 has no interface number 0 [ 326.811766][ T5821] usb 3-1: config 2 interface 252 altsetting 11 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 326.869657][ T5821] usb 3-1: config 2 interface 252 altsetting 11 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 327.678542][ T5821] usb 3-1: config 2 interface 252 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 0 [ 327.691766][ T5821] usb 3-1: config 2 interface 252 has no altsetting 0 [ 327.704039][ T5821] usb 3-1: string descriptor 0 read error: -22 [ 327.760372][ T5821] usb 3-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=dd.98 [ 327.813634][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.863304][ T8006] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.933519][ T5821] usb 3-1: Could not find all expected endpoints [ 328.633323][ T1209] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 328.817040][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 328.876172][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.932804][ T5821] usb 3-1: USB disconnect, device number 27 [ 328.938125][ T1209] usb 5-1: config 0 has no interfaces? [ 328.976237][ T30] audit: type=1326 audit(1755787520.708:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.3.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x0 [ 329.009107][ T1209] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 329.023096][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.048588][ T1209] usb 5-1: config 0 descriptor?? [ 329.285297][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 329.427872][ T5925] usb 1-1: device descriptor read/64, error -71 [ 329.696359][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 329.876239][ T5925] usb 1-1: device descriptor read/64, error -71 [ 329.985825][ T5925] usb usb1-port1: attempt power cycle [ 330.363369][ T8084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.707352][ T8087] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 330.707352][ T8087] The task syz.1.576 (8087) triggered the difference, watch for misbehavior. [ 331.059330][ T5925] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 331.096085][ T5925] usb 1-1: device descriptor read/8, error -71 [ 331.341650][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 331.416306][ T24] usb 5-1: USB disconnect, device number 17 [ 331.425708][ T5925] usb 1-1: device descriptor read/8, error -71 [ 331.479167][ T8100] process 'syz.1.582' launched './file1' with NULL argv: empty string added [ 331.547133][ T5925] usb usb1-port1: unable to enumerate USB device [ 331.999089][ T8108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.040696][ T8108] vlan2: entered promiscuous mode [ 332.047632][ T8108] vlan2: entered allmulticast mode [ 332.054243][ T8108] hsr_slave_1: entered allmulticast mode [ 332.651565][ T8112] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 332.859228][ T8112] netlink: 220 bytes leftover after parsing attributes in process `syz.1.585'. [ 333.053090][ T8112] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 335.539674][ T8140] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 337.443753][ T8154] [U] „ [ 338.175370][ T5925] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 338.221020][ T8180] Cannot find add_set index 0 as target [ 338.498270][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 338.637463][ T5925] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 338.738081][ T5925] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 338.819675][ T5925] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 338.904849][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.962635][ T5925] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 339.016862][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.039857][ T5925] usb 5-1: Product: syz [ 339.044119][ T5925] usb 5-1: Manufacturer: syz [ 339.075447][ T5925] usb 5-1: SerialNumber: syz [ 339.104249][ T5925] usb 5-1: config 0 descriptor?? [ 339.360519][ T5925] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 339.388141][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 339.595341][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 339.616973][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.665183][ T10] usb 3-1: config 0 has no interfaces? [ 339.715242][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 339.745240][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.792134][ T10] usb 3-1: config 0 descriptor?? [ 344.965281][ T5821] usb 3-1: USB disconnect, device number 28 [ 345.158831][ T10] usb 5-1: USB disconnect, device number 18 [ 345.593209][ T8225] Cannot find add_set index 0 as target [ 347.429879][ T8243] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 348.198824][ T8242] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 348.255313][ T8242] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 348.734678][ T1209] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 348.921721][ T1209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.932947][ T1209] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 349.060104][ T1209] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.102180][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 349.229277][ T1209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 349.313106][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.440303][ T1209] usb 5-1: Product: syz [ 349.472570][ T1209] usb 5-1: Manufacturer: syz [ 349.485319][ T1209] usb 5-1: SerialNumber: syz [ 349.794372][ T1209] hub 5-1:1.0: bad descriptor, ignoring hub [ 349.920137][ T1209] hub 5-1:1.0: probe with driver hub failed with error -5 [ 350.256156][ T8262] 9pnet: Could not find request transport: fdMrfdnî—0x0000000000000005 [ 350.349991][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.395449][ T1209] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 350.431226][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.651176][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.245396][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 351.488648][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.695802][ T1209] usb 5-1: USB disconnect, device number 19 [ 352.269993][ T30] audit: type=1326 audit(1755787543.968:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8279 comm="syz.2.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8238ebe9 code=0x0 [ 352.491775][ T1209] usblp0: removed [ 353.334257][ T8296] 9pnet_fd: Insufficient options for proto=fd [ 354.350184][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 354.517925][ T8309] Cannot find add_set index 0 as target [ 355.026187][ T10] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 355.035042][ T10] usb 5-1: config 0 has no interface number 0 [ 355.098984][ T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 355.127217][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.324164][ T10] usb 5-1: Product: syz [ 356.092166][ T10] usb 5-1: Manufacturer: syz [ 356.097250][ T10] usb 5-1: SerialNumber: syz [ 356.142795][ T10] usb 5-1: config 0 descriptor?? [ 356.169379][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 356.254856][ T8317] hsr0: entered promiscuous mode [ 356.267868][ T8317] macsec1: entered allmulticast mode [ 356.273489][ T8317] hsr0: entered allmulticast mode [ 356.284399][ T8317] hsr_slave_0: entered allmulticast mode [ 356.294594][ T8317] hsr_slave_1: entered allmulticast mode [ 356.685029][ T8325] kvm: apic: phys broadcast and lowest prio [ 357.446078][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 357.455562][ T10] gspca_pac7302 5-1:0.101: probe with driver gspca_pac7302 failed with error -110 [ 357.673971][ T1209] usb 5-1: USB disconnect, device number 20 [ 357.686305][ T8317] hsr0: left allmulticast mode [ 357.691777][ T8317] hsr_slave_0: left allmulticast mode [ 357.753155][ T8317] hsr_slave_1: left allmulticast mode [ 357.939524][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.950745][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.847414][ T8335] vivid-001: kernel_thread() failed [ 359.231719][ T8341] 9pnet_fd: Insufficient options for proto=fd [ 359.787509][ T8350] --map-set only usable from mangle table [ 361.845731][ T8364] binder: 8363:8364 ioctl 40046721 2000000001c0 returned -22 [ 361.898881][ T8365] fuse: Unknown parameter 'group_)e' [ 361.912808][ T8364] binder: 8363:8364 ioctl c0306201 200000000340 returned -11 [ 361.944055][ T8364] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 361.961872][ T8364] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 361.970849][ T8364] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 361.986680][ T8364] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 361.994154][ T8364] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 362.004458][ T8364] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 362.014747][ T8364] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 362.032967][ T8364] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 363.512273][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 363.523506][ T8384] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 363.535480][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.666594][ T8386] Cannot find add_set index 0 as target [ 364.236368][ T8387] netlink: 164 bytes leftover after parsing attributes in process `syz.1.653'. [ 364.247678][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 364.347998][ T8389] 9pnet_fd: Insufficient options for proto=fd [ 365.233538][ T8398] netlink: 200 bytes leftover after parsing attributes in process `syz.1.661'. [ 365.261746][ T8398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.661'. [ 365.575150][ T8398] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 365.592511][ T8398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.661'. [ 365.605974][ T8405] ubi31: attaching mtd0 [ 365.613865][ T8405] ubi31: scanning is finished [ 365.618862][ T8405] ubi31: empty MTD device detected [ 365.945300][ T8413] libceph: resolve '400' (ret=-3): failed [ 366.041860][ T8405] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 366.050799][ T8405] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 366.059241][ T8405] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 366.066577][ T8405] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 366.075187][ T8405] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 366.082722][ T8405] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 366.091537][ T8405] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1223449962 [ 366.101833][ T8405] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 366.114064][ T8415] ubi31: background thread "ubi_bgt31d" started, PID 8415 [ 369.961480][ T8445] 9pnet_fd: Insufficient options for proto=fd [ 370.766899][ T8446] 9pnet_fd: Insufficient options for proto=fd [ 375.052873][ T8484] FAULT_INJECTION: forcing a failure. [ 375.052873][ T8484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.168245][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.1.683 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 375.168280][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.168292][ T8484] Call Trace: [ 375.168303][ T8484] [ 375.168313][ T8484] dump_stack_lvl+0x189/0x250 [ 375.168346][ T8484] ? __pfx____ratelimit+0x10/0x10 [ 375.168370][ T8484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.168393][ T8484] ? __pfx__printk+0x10/0x10 [ 375.168436][ T8484] should_fail_ex+0x414/0x560 [ 375.168467][ T8484] _copy_from_user+0x2d/0xb0 [ 375.168497][ T8484] memdup_user_nul+0x66/0x110 [ 375.168525][ T8484] smk_write_rules_list+0xc5/0x370 [ 375.168561][ T8484] ? __pfx_smk_write_load_self2+0x10/0x10 [ 375.168587][ T8484] vfs_write+0x27e/0xa90 [ 375.168618][ T8484] ? __pfx_vfs_write+0x10/0x10 [ 375.168641][ T8484] ? __fget_files+0x2a/0x420 [ 375.168670][ T8484] ? __fget_files+0x3a0/0x420 [ 375.168692][ T8484] ? __fget_files+0x2a/0x420 [ 375.168740][ T8484] ksys_write+0x145/0x250 [ 375.168764][ T8484] ? __pfx_ksys_write+0x10/0x10 [ 375.168799][ T8484] do_syscall_64+0xfa/0x3b0 [ 375.168833][ T8484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.168852][ T8484] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 375.168872][ T8484] ? clear_bhb_loop+0x60/0xb0 [ 375.168897][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.168917][ T8484] RIP: 0033:0x7f02e6f8ebe9 [ 375.168936][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.168953][ T8484] RSP: 002b:00007f02e7d7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.168978][ T8484] RAX: ffffffffffffffda RBX: 00007f02e71b5fa0 RCX: 00007f02e6f8ebe9 [ 375.168992][ T8484] RDX: 0000000000000009 RSI: 00002000000000c0 RDI: 0000000000000003 [ 375.169006][ T8484] RBP: 00007f02e7d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 375.169018][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.169030][ T8484] R13: 00007f02e71b6038 R14: 00007f02e71b5fa0 R15: 00007fff4d76bdc8 [ 375.169068][ T8484] [ 376.789775][ T8497] 9pnet_fd: Insufficient options for proto=fd [ 377.514732][ T8506] libceph: resolve '400' (ret=-3): failed [ 378.136951][ T8510] --map-set only usable from mangle table [ 380.582533][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.591322][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.599779][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.608666][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.617312][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.626499][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.634607][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.643387][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.652011][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 380.660737][ T8528] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 381.575859][ T8545] --map-set only usable from mangle table [ 381.611751][ T8542] fuse: Bad value for 'fd' [ 382.115545][ T5821] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 382.355201][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 382.443581][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.475657][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.500477][ T5821] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 382.555114][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.612371][ T5821] usb 5-1: config 0 descriptor?? [ 383.169226][ T5821] kye 0003:0458:0087.0003: unknown main item tag 0x0 [ 383.185190][ T5821] kye 0003:0458:0087.0003: unknown main item tag 0x0 [ 383.211980][ T5821] kye 0003:0458:0087.0003: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 385.163606][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.344856][ T5925] usb 5-1: USB disconnect, device number 21 [ 388.273939][ T8609] fuse: Bad value for 'fd' [ 389.334853][ T5821] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 389.692913][ T5821] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 389.703023][ T5821] usb 5-1: config 0 has no interface number 0 [ 389.767514][ T8634] libceph: resolve '400' (ret=-3): failed [ 389.775532][ T8634] tc_dump_action: action bad kind [ 389.784231][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.796323][ T5821] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 389.809057][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 389.822719][ T5821] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 389.834822][ T5821] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 389.847487][ T5821] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.862600][ T5821] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 389.874467][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.902796][ T5821] usb 5-1: config 0 descriptor?? [ 389.936207][ T8619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.975471][ T8619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 390.040915][ T5821] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 390.260414][ T8619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 390.267621][ T8619] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 390.306577][ T8619] vhci_hcd vhci_hcd.0: Device attached [ 390.357811][ T8642] vhci_hcd: connection closed [ 390.362241][ T7976] vhci_hcd: stop threads [ 390.374956][ T5821] usb 5-1: USB disconnect, device number 22 [ 390.428000][ T5821] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 390.429330][ T7976] vhci_hcd: release socket [ 390.483320][ T7976] vhci_hcd: disconnect device [ 390.506701][ T5925] vhci_hcd: vhci_device speed not set [ 391.047892][ T8655] Cannot find add_set index 0 as target [ 391.445425][ T5821] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 391.888445][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 391.920983][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.996460][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.009835][ T5821] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 392.023332][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.096160][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.730'. [ 392.307374][ T5821] usb 3-1: config 0 descriptor?? [ 392.852771][ T5821] hub 3-1:0.0: USB hub found [ 392.871809][ T5821] hub 3-1:0.0: 2 ports detected [ 393.970052][ T5821] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 393.993034][ T5821] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 394.056587][ T5821] usbhid 3-1:0.0: can't add hid device: -32 [ 394.074165][ T5821] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 394.266436][ T1209] usb 3-1: USB disconnect, device number 29 [ 395.955332][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 397.725314][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 397.742865][ T5911] usb 5-1: device descriptor read/all, error -71 [ 397.896902][ T8701] libceph: resolve '400' (ret=-3): failed [ 398.009655][ T8701] tc_dump_action: action bad kind [ 399.043348][ T8716] fuse: Bad value for 'fd' [ 399.304740][ T8719] Cannot find add_set index 0 as target [ 400.100391][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.4.747'. [ 400.117667][ T8727] netlink: 76 bytes leftover after parsing attributes in process `syz.4.747'. [ 400.619906][ T8734] No memory to map [ 400.803112][ T8741] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 400.811640][ T8741] netlink: 40 bytes leftover after parsing attributes in process `syz.2.750'. [ 403.280493][ T8751] Bluetooth: MGMT ver 1.23 [ 403.296359][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 403.315538][ T8751] netlink: 628 bytes leftover after parsing attributes in process `syz.1.752'. [ 403.544386][ T8747] binder: 8744:8747 ioctl 400c620e 0 returned -14 [ 403.812692][ T8765] netlink: 'syz.2.757': attribute type 10 has an invalid length. [ 403.850961][ T8765] team0: Device veth1_macvtap failed to register rx_handler [ 403.895296][ T5925] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 404.064954][ T8770] libceph: resolve '400' (ret=-3): failed [ 404.099488][ T8770] tc_dump_action: action bad kind [ 404.566229][ T8771] Cannot find add_set index 0 as target [ 404.600922][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 404.629500][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.689060][ T5925] usb 2-1: config 0 descriptor?? [ 404.717658][ T5925] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 405.181613][ T8780] Cannot find add_set index 0 as target [ 405.336346][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 405.343828][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 405.907142][ T8784] netlink: 'syz.3.763': attribute type 7 has an invalid length. [ 405.923788][ T8784] : entered promiscuous mode [ 405.956512][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.763'. [ 406.331742][ T8790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 406.735302][ T1209] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 406.929517][ T1209] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.963539][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.987448][ T1209] usb 1-1: Product: syz [ 407.005463][ T121] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 407.012697][ T1209] usb 1-1: Manufacturer: syz [ 407.018417][ T1209] usb 1-1: SerialNumber: syz [ 407.188230][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.199716][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.253454][ T121] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 407.278712][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.304244][ T121] usb 3-1: config 0 descriptor?? [ 407.345675][ T121] usbhid 3-1:0.0: can't add hid device: -22 [ 407.371998][ T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 407.829447][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 408.334616][ T5847] Bluetooth: hci4: connection err: -111 [ 408.985323][ T1209] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 408.995340][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 409.021892][ T1209] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 409.034279][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.205272][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.232309][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 409.257271][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.291672][ T5925] gspca_stv06xx: I2C: Read error writing address: -71 [ 409.308256][ T10] usb 5-1: config 0 descriptor?? [ 409.354005][ T5925] usb 2-1: USB disconnect, device number 20 [ 409.712923][ T10] usb 5-1: can't set config #0, error -71 [ 409.756483][ T10] usb 5-1: USB disconnect, device number 25 [ 409.889362][ T5847] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 410.432129][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 410.622715][ T1209] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 410.712343][ T1209] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 410.781500][ T1209] usb 1-1: USB disconnect, device number 11 [ 410.953763][ T1209] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 412.124233][ T8837] tty tty21: ldisc open failed (-12), clearing slot 20 [ 412.236320][ T1209] usb 3-1: USB disconnect, device number 30 [ 416.782921][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 416.884960][ T8889] Cannot find add_set index 0 as target [ 417.665318][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 417.830795][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 417.853334][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.895269][ T10] usb 3-1: Product: syz [ 417.903710][ T10] usb 3-1: Manufacturer: syz [ 417.909392][ T10] usb 3-1: SerialNumber: syz [ 417.927549][ T10] usb 3-1: config 0 descriptor?? [ 417.948815][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 418.909719][ T1209] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 419.138089][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 419.206821][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.240718][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.279516][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.479451][ T10] gspca_sunplus: reg_r err -71 [ 419.488812][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 419.535236][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.570279][ T1209] usb 2-1: config 0 descriptor?? [ 420.214527][ T10] usb 3-1: USB disconnect, device number 31 [ 420.353600][ T1209] usb 2-1: can't set config #0, error -71 [ 420.372182][ T1209] usb 2-1: USB disconnect, device number 21 [ 420.709421][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 421.082984][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 421.138341][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 421.157902][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.182589][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 421.201135][ T10] pvrusb2: ********** [ 421.212846][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 421.320387][ T10] pvrusb2: Important functionality might not be entirely working. [ 421.329446][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 421.408268][ T8946] Cannot find add_set index 0 as target [ 422.032759][ T10] pvrusb2: ********** [ 422.052616][ T2342] pvrusb2: Invalid write control endpoint [ 422.209181][ T2342] pvrusb2: Invalid write control endpoint [ 422.223323][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 422.435407][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 422.462884][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 422.529106][ T2342] pvrusb2: Device being rendered inoperable [ 422.628160][ T8931] pvrusb2: Attempted to execute control transfer when device not ok [ 422.792953][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 422.830454][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 422.921389][ T2342] pvrusb2: Attached sub-driver cx25840 [ 422.958840][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 422.977008][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 423.534957][ T5925] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 423.824518][ T8962] 9pnet_fd: Insufficient options for proto=fd [ 424.099090][ T5925] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 424.133137][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.744870][ T5925] usb 2-1: Product: syz [ 424.765245][ T5925] usb 2-1: Manufacturer: syz [ 424.770658][ T5925] usb 2-1: SerialNumber: syz [ 424.790599][ T5925] usb 2-1: config 0 descriptor?? [ 424.868367][ T8969] Cannot find add_set index 0 as target [ 424.913607][ T5926] usb 5-1: USB disconnect, device number 26 [ 424.992334][ T5925] ch341 2-1:0.0: ch341-uart converter detected [ 425.215703][ T5925] usb 2-1: failed to receive control message: -121 [ 425.222549][ T5925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 426.058439][ T8982] Cannot find add_set index 0 as target [ 426.756224][ T5926] usb 2-1: USB disconnect, device number 22 [ 426.764724][ T5926] ch341 2-1:0.0: device disconnected [ 427.455652][ T8988] binder: 8984:8988 ioctl 400c620e 200000000000 returned -22 [ 427.876633][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 428.052431][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 428.066020][ T9002] xt_bpf: check failed: parse error [ 428.075878][ T9002] overlayfs: failed to resolve './file1/file0': -2 [ 428.116522][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.143218][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.175938][ T9007] 9pnet_fd: Insufficient options for proto=fd [ 428.176279][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.197968][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.247557][ T5925] usb 1-1: config 0 descriptor?? [ 428.276442][ T5925] hub 1-1:0.0: USB hub found [ 428.455826][ T121] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 429.035315][ T5925] hub 1-1:0.0: 2 ports detected [ 429.285218][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 429.304605][ T121] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 429.316509][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.345961][ T121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 429.374099][ T121] pvrusb2: ********** [ 429.389916][ T121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 429.429494][ T121] pvrusb2: Important functionality might not be entirely working. [ 429.747724][ T121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 429.761809][ T121] pvrusb2: ********** [ 429.768867][ T2342] pvrusb2: Invalid write control endpoint [ 429.884785][ T9024] Cannot find add_set index 0 as target [ 430.309627][ T9009] pvrusb2: Invalid write control endpoint [ 430.600932][ T5925] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 430.615356][ T5925] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 430.641257][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 430.656730][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 430.706519][ T5925] usb 1-1: USB disconnect, device number 12 [ 430.735417][ T2342] pvrusb2: Invalid write control endpoint [ 430.778581][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 430.805570][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 430.829310][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 431.035228][ T2342] pvrusb2: Device being rendered inoperable [ 431.044814][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 431.058308][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 431.071889][ T2342] pvrusb2: Attached sub-driver cx25840 [ 431.106146][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 431.777290][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 431.872930][ T5925] usb 2-1: USB disconnect, device number 23 [ 432.105485][ T10] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 432.292795][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 432.337555][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 432.374120][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 432.400536][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.457806][ T10] usb 1-1: config 0 descriptor?? [ 432.464958][ T9033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.498008][ T9052] 9pnet_fd: Insufficient options for proto=fd [ 433.173015][ T9056] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 433.233433][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 433.239837][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 433.258474][ T10] usb 1-1: USB disconnect, device number 13 [ 434.183267][ T9064] Cannot find add_set index 0 as target [ 436.075203][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 436.495518][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 436.761031][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 436.861646][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.956213][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 437.198433][ T10] pvrusb2: ********** [ 437.207643][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 437.219938][ T10] pvrusb2: Important functionality might not be entirely working. [ 437.228503][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 437.247532][ T10] pvrusb2: ********** [ 437.352320][ T9101] input: syz0 as /devices/virtual/input/input9 [ 438.003418][ T2342] pvrusb2: Invalid write control endpoint [ 438.262000][ T2342] pvrusb2: Invalid write control endpoint [ 438.306655][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 439.186167][ T121] usb 5-1: USB disconnect, device number 27 [ 439.229058][ T9115] 9pnet_fd: Insufficient options for proto=fd [ 439.230104][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 439.273095][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 439.304819][ T2342] pvrusb2: Device being rendered inoperable [ 440.270996][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 440.279211][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 440.303554][ T2342] pvrusb2: Attached sub-driver cx25840 [ 440.309937][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 440.520268][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 441.473535][ T9135] netlink: 'syz.2.849': attribute type 4 has an invalid length. [ 441.482245][ T9135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.849'. [ 441.509243][ T9135] Ã: renamed from bond0 (while UP) [ 441.935814][ T9143] cgroup: Need name or subsystem set [ 442.848627][ T5926] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 443.735357][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 444.230470][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 444.271018][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.336406][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 444.355362][ T5926] pvrusb2: ********** [ 444.400368][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 444.425347][ T5926] pvrusb2: Important functionality might not be entirely working. [ 444.434672][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 444.478544][ T5926] pvrusb2: ********** [ 446.623472][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.261233][ T2342] pvrusb2: Invalid write control endpoint [ 447.357984][ T5926] usb 3-1: USB disconnect, device number 32 [ 447.435646][ T121] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 447.622520][ T2342] pvrusb2: Invalid write control endpoint [ 447.639915][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 447.652148][ T121] usb 5-1: Using ep0 maxpacket: 32 [ 447.701793][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 447.773711][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 447.840275][ T2342] pvrusb2: Device being rendered inoperable [ 447.863169][ T121] usb 5-1: device descriptor read/all, error -71 [ 447.905197][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 448.012624][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 448.065276][ T2342] pvrusb2: Attached sub-driver cx25840 [ 448.091743][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 448.142335][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 449.835741][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 449.939600][ T9214] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 449.955557][ T5926] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 449.965168][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'. [ 450.004525][ T9214] ipvlan1: entered promiscuous mode [ 450.045545][ T9214] ipvlan1: entered allmulticast mode [ 450.066178][ T9214] veth0_vlan: entered allmulticast mode [ 450.102267][ T9214] net_ratelimit: 44 callbacks suppressed [ 450.111822][ T9214] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 450.128650][ T5926] usb 3-1: device descriptor read/64, error -71 [ 450.469615][ T5926] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 450.635636][ T5926] usb 3-1: device descriptor read/64, error -71 [ 451.258574][ T5926] usb usb3-port1: attempt power cycle [ 451.565373][ T121] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 451.735298][ T121] usb 1-1: Using ep0 maxpacket: 8 [ 451.751647][ T121] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 451.779340][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.842026][ T121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 451.878767][ T121] pvrusb2: ********** [ 451.898376][ T121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 451.941068][ T121] pvrusb2: Important functionality might not be entirely working. [ 451.971304][ T121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 452.595925][ T121] pvrusb2: ********** [ 452.670124][ T2342] pvrusb2: Invalid write control endpoint [ 452.764846][ T9236] 9pnet_fd: Insufficient options for proto=fd [ 452.873967][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 452.896369][ T9239] netlink: 56 bytes leftover after parsing attributes in process `syz.2.881'. [ 452.897434][ T2342] pvrusb2: Invalid write control endpoint [ 452.920248][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 452.933460][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 452.939788][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 452.952185][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 452.965097][ T2342] pvrusb2: Device being rendered inoperable [ 452.972377][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 452.981328][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 453.030234][ T2342] pvrusb2: Attached sub-driver cx25840 [ 453.038921][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 453.057110][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 453.113476][ T9242] vlan3: entered promiscuous mode [ 454.782397][ T5847] Bluetooth: hci1: connection err: -111 [ 455.832104][ T5911] usb 1-1: USB disconnect, device number 14 [ 456.411642][ T9270] openvswitch: netlink: Missing key (keys=40, expected=80) [ 456.542016][ T9271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.890'. [ 456.746190][ T9276] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 456.764902][ T9276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'. [ 456.812662][ T9276] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 456.937815][ T121] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 456.958211][ T9281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 457.424234][ T9281] vlan2: entered promiscuous mode [ 457.430452][ T9281] vlan2: entered allmulticast mode [ 457.436118][ T9281] hsr_slave_1: entered allmulticast mode [ 457.597188][ T9289] syzkaller0: entered promiscuous mode [ 457.604665][ T9289] syzkaller0: entered allmulticast mode [ 457.637671][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 457.645929][ T9289] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 457.667402][ T121] usb 2-1: unable to get BOS descriptor or descriptor too short [ 457.713345][ T121] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.743842][ T121] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.978480][ T121] usb 2-1: config 1 interface 0 has no altsetting 0 [ 458.237769][ T5839] Bluetooth: hci2: connection err: -111 [ 458.254540][ T121] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.271206][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.283100][ T121] usb 2-1: Product: syz [ 458.287595][ T121] usb 2-1: Manufacturer: syz [ 458.292461][ T121] usb 2-1: SerialNumber: syz [ 458.385314][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 458.565213][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 458.584482][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 458.613326][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.818706][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 458.830601][ T10] pvrusb2: ********** [ 458.834934][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 458.855099][ T10] pvrusb2: Important functionality might not be entirely working. [ 458.863588][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 458.895641][ T10] pvrusb2: ********** [ 459.010197][ T2342] pvrusb2: Invalid write control endpoint [ 459.132669][ T9312] fuse: Unknown parameter 'nd/0xffffffffffffffff' [ 459.192345][ T2342] pvrusb2: Invalid write control endpoint [ 459.213561][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 459.230745][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 459.244048][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 459.258861][ T2342] pvrusb2: Device being rendered inoperable [ 459.265861][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 459.273426][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 459.283124][ T2342] pvrusb2: Attached sub-driver cx25840 [ 459.291700][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 459.302911][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 459.325267][ T5926] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 459.415216][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 459.490624][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 459.507781][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.531955][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.549530][ T5926] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 459.564344][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.575454][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 459.586709][ T5926] usb 5-1: config 0 descriptor?? [ 459.596302][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 459.615457][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.633180][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.648266][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.675686][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.689845][ T10] usb 3-1: Product: syz [ 459.694409][ T10] usb 3-1: Manufacturer: syz [ 459.700972][ T10] usb 3-1: SerialNumber: syz [ 460.002801][ T5926] hid (null): invalid report_size 69140491 [ 460.093057][ T5926] hid (null): unknown global tag 0x83 [ 460.118232][ T5926] hid (null): unknown global tag 0xc [ 460.133582][ T5926] hid (null): global environment stack underflow [ 460.213519][ T10] usb 3-1: 0:2 : does not exist [ 460.222330][ T121] usb 2-1: bad CDC descriptors [ 460.233833][ T121] usb 2-1: USB disconnect, device number 24 [ 461.583036][ T5925] usb 1-1: USB disconnect, device number 15 [ 461.667246][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.803609][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.169212][ T10] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 462.399222][ T10] usb 3-1: USB disconnect, device number 36 [ 462.492981][ T5839] Bluetooth: hci4: connection err: -111 [ 462.722476][ T9351] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 462.770515][ T9352] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 462.878593][ T5926] usb 5-1: string descriptor 0 read error: -71 [ 462.928603][ T9352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.913'. [ 462.945645][ T5926] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 462.969286][ T5926] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 462.993568][ T9352] nbd: illegal input index 65544 [ 463.056076][ T5926] usb 5-1: USB disconnect, device number 30 [ 463.180354][ T8213] udevd[8213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.199180][ T9381] --map-set only usable from mangle table [ 465.654222][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 465.793283][ T9389] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 466.523565][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 466.543109][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 466.572253][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.371587][ T9396] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 467.385411][ T9395] netlink: 14 bytes leftover after parsing attributes in process `syz.1.924'. [ 467.386864][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 467.426033][ T10] pvrusb2: ********** [ 467.430490][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 467.441957][ T10] pvrusb2: Important functionality might not be entirely working. [ 467.450407][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 467.463035][ T10] pvrusb2: ********** [ 467.476751][ T2342] pvrusb2: Invalid write control endpoint [ 468.890043][ T2342] pvrusb2: Invalid write control endpoint [ 468.985366][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 469.131513][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 469.160602][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 469.178386][ T2342] pvrusb2: Device being rendered inoperable [ 469.186121][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 469.205603][ T5926] usb 3-1: USB disconnect, device number 37 [ 469.411785][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 469.420602][ T2342] pvrusb2: Attached sub-driver cx25840 [ 469.426462][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 469.437228][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 470.345423][ T9431] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 471.052369][ T9432] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 472.370182][ T9449] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 473.675617][ T9463] serio: Serial port pty24 [ 473.839564][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 476.401266][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.437517][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.637198][ T5955] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 476.805695][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 476.828438][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.854640][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 476.867804][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 476.884051][ T5955] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 476.900868][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.921630][ T5955] usb 2-1: Product: syz [ 476.942052][ T5955] usb 2-1: Manufacturer: syz [ 476.972883][ T5955] usb 2-1: SerialNumber: syz [ 476.984327][ T5955] usb 2-1: config 0 descriptor?? [ 477.008937][ T9496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.425835][ T10] usb 2-1: USB disconnect, device number 25 [ 478.295245][ T5931] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 479.294415][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 479.306177][ T5931] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 479.316152][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.348338][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 479.643574][ T5931] pvrusb2: ********** [ 479.710903][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 479.927649][ T5931] pvrusb2: Important functionality might not be entirely working. [ 479.945195][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 480.245548][ T5931] pvrusb2: ********** [ 480.916844][ T2342] pvrusb2: Invalid write control endpoint [ 482.408796][ T2342] pvrusb2: Invalid write control endpoint [ 482.450924][ T5992] usb 5-1: USB disconnect, device number 31 [ 482.479112][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 482.646973][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 482.910772][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 483.663662][ T2342] pvrusb2: Device being rendered inoperable [ 484.163790][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 484.172141][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 484.257054][ T2342] pvrusb2: Attached sub-driver cx25840 [ 484.286435][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 484.455511][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 484.632745][ T9570] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 487.679907][ T5925] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 487.728547][ T9612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.985'. [ 488.505457][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 488.675828][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 488.708207][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.785461][ T9618] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 489.472517][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 489.589410][ T5925] pvrusb2: ********** [ 489.594681][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 489.712181][ T5925] pvrusb2: Important functionality might not be entirely working. [ 489.735204][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 489.788934][ T5925] pvrusb2: ********** [ 489.847681][ T2342] pvrusb2: Invalid write control endpoint [ 491.398071][ T5931] usb 2-1: USB disconnect, device number 26 [ 491.421103][ T2342] pvrusb2: Invalid write control endpoint [ 491.475744][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 491.505869][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 491.545594][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 491.697939][ T2342] pvrusb2: Device being rendered inoperable [ 491.797399][ T9641] overlayfs: failed to clone upperpath [ 492.645379][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 492.654321][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 492.666615][ T2342] pvrusb2: Attached sub-driver cx25840 [ 492.672656][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 492.706069][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 492.781762][ T9646] netlink: 'syz.1.995': attribute type 7 has an invalid length. [ 492.819494][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 496.675356][ T5926] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 497.515344][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 497.564174][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 497.579904][ T5926] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 497.599510][ T5926] usb 3-1: config 4 has an invalid descriptor of length 101, skipping remainder of the config [ 497.627718][ T5926] usb 3-1: config 4 has no interface number 0 [ 497.658298][ T5926] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 497.670234][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.682949][ T5926] usb 3-1: Product: ã°Š [ 497.712199][ T5926] usb 3-1: Manufacturer: 款㒟䟙녔삽涄횦è’掦軜ë–豶 [ 497.742654][ T5926] usb 3-1: SerialNumber: И [ 498.498937][ T5926] usb 3-1: Found UVC 0.02 device ã°Š (04f2:b746) [ 498.513486][ T5926] usb 3-1: No valid video chain found. [ 498.540303][ T5926] usb 3-1: USB disconnect, device number 38 [ 500.111133][ T5898] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 501.015284][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 501.070805][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 501.135212][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.179986][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 501.220716][ T5898] pvrusb2: ********** [ 501.239167][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 501.274184][ T5898] pvrusb2: Important functionality might not be entirely working. [ 501.297958][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 501.367587][ T5898] pvrusb2: ********** [ 501.378081][ T121] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 501.387743][ T2342] pvrusb2: Invalid write control endpoint [ 501.576120][ T121] usb 3-1: Using ep0 maxpacket: 32 [ 501.601729][ T2342] pvrusb2: Invalid write control endpoint [ 501.606483][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.637322][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 501.664639][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.685329][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 501.694433][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 501.714857][ T121] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 501.735707][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.749655][ T2342] pvrusb2: Device being rendered inoperable [ 501.764338][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 501.872127][ T121] usb 3-1: config 0 descriptor?? [ 501.882149][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 501.916700][ T121] hub 3-1:0.0: USB hub found [ 502.127322][ T2342] pvrusb2: Attached sub-driver cx25840 [ 503.374449][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 503.388217][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 503.483854][ T5992] usb 2-1: USB disconnect, device number 27 [ 503.592059][ T121] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 503.650205][ T121] usbhid 3-1:0.0: can't add hid device: -71 [ 503.669870][ T9751] delete_channel: no stack [ 503.705376][ T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 503.787845][ T121] usb 3-1: USB disconnect, device number 39 [ 503.814646][ T9757] 9pnet_fd: Insufficient options for proto=fd [ 506.192620][ T9777] fuse: Unknown parameter 'f' [ 506.445505][ T9778] tmpfs: Unknown parameter 'quot' [ 507.328926][ T9778] syz.0.1036: attempt to access beyond end of device [ 507.328926][ T9778] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 507.544131][ T9778] SQUASHFS error: Failed to read block 0x0: -5 [ 507.563393][ T9778] unable to read squashfs_super_block [ 507.750832][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.768865][ T9781] binder: 9780:9781 ioctl 4018620d 0 returned -22 [ 507.827993][ T9788] binder: 9780:9788 ioctl c018620c 0 returned -14 [ 507.922332][ T5839] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 508.641154][ T9793] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 508.995821][ T121] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 509.069252][ T9806] 9pnet_fd: Insufficient options for proto=fd [ 509.241909][ T9809] FAULT_INJECTION: forcing a failure. [ 509.241909][ T9809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.284690][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.0.1049 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 509.284725][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.284740][ T9809] Call Trace: [ 509.284749][ T9809] [ 509.284759][ T9809] dump_stack_lvl+0x189/0x250 [ 509.284792][ T9809] ? __pfx____ratelimit+0x10/0x10 [ 509.284817][ T9809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.284840][ T9809] ? __pfx__printk+0x10/0x10 [ 509.284886][ T9809] should_fail_ex+0x414/0x560 [ 509.284916][ T9809] _copy_to_user+0x31/0xb0 [ 509.284949][ T9809] simple_read_from_buffer+0xe1/0x170 [ 509.284980][ T9809] proc_fail_nth_read+0x1df/0x250 [ 509.285015][ T9809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.285040][ T9809] ? rw_verify_area+0x258/0x650 [ 509.285069][ T9809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.285095][ T9809] vfs_read+0x200/0x980 [ 509.285134][ T9809] ? __pfx___mutex_lock+0x10/0x10 [ 509.285160][ T9809] ? __pfx_vfs_read+0x10/0x10 [ 509.285194][ T9809] ? __fget_files+0x2a/0x420 [ 509.285225][ T9809] ? __fget_files+0x3a0/0x420 [ 509.285246][ T9809] ? __fget_files+0x2a/0x420 [ 509.285281][ T9809] ksys_read+0x145/0x250 [ 509.285304][ T9809] ? __pfx_ksys_read+0x10/0x10 [ 509.285324][ T9809] ? rcu_is_watching+0x15/0xb0 [ 509.285348][ T9809] ? trace_sys_enter+0x25/0x120 [ 509.285376][ T9809] do_syscall_64+0xfa/0x3b0 [ 509.285398][ T9809] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.285420][ T9809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.285440][ T9809] ? clear_bhb_loop+0x60/0xb0 [ 509.285466][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.285486][ T9809] RIP: 0033:0x7f92dbb8d5fc [ 509.285506][ T9809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 509.285523][ T9809] RSP: 002b:00007f92dc914030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.285548][ T9809] RAX: ffffffffffffffda RBX: 00007f92dbdb6090 RCX: 00007f92dbb8d5fc [ 509.285562][ T9809] RDX: 000000000000000f RSI: 00007f92dc9140a0 RDI: 0000000000000003 [ 509.285575][ T9809] RBP: 00007f92dc914090 R08: 0000000000000000 R09: 0000000000000000 [ 509.285588][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.285599][ T9809] R13: 00007f92dbdb6128 R14: 00007f92dbdb6090 R15: 00007ffd76b49ae8 [ 509.285637][ T9809] [ 509.541771][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 509.552482][ T121] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 509.570530][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.340728][ T121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 510.391957][ T121] pvrusb2: ********** [ 510.401510][ T121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 510.422901][ T121] pvrusb2: Important functionality might not be entirely working. [ 510.444304][ T121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 510.467786][ T121] pvrusb2: ********** [ 510.695423][ T2342] pvrusb2: Invalid write control endpoint [ 510.907773][ T9830] Cannot find add_set index 0 as target [ 511.362515][ T9795] pvrusb2: Invalid write control endpoint [ 511.652329][ T2342] pvrusb2: Invalid write control endpoint [ 511.676221][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 511.700077][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 511.725838][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 511.765617][ T2342] pvrusb2: Device being rendered inoperable [ 511.809181][ T9840] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 512.015696][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 512.017370][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 512.049621][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 512.078612][ T5839] Bluetooth: hci1: hardware error 0x00 [ 512.110788][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 512.175178][ T2342] pvrusb2: Attached sub-driver cx25840 [ 512.188412][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 512.205493][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 512.950907][ T5931] usb 2-1: USB disconnect, device number 28 [ 514.448185][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 514.817273][ T9863] 9pnet_fd: Insufficient options for proto=fd [ 516.117906][ T9880] --map-set only usable from mangle table [ 516.352518][ T9882] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 517.522482][ T9900] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1074'. [ 519.217018][ T9921] 9pnet_fd: Insufficient options for proto=fd [ 520.116254][ T9928] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 521.291599][ T9941] kvm: pic: non byte write [ 521.846519][ T9958] fuse: Bad value for 'group_id' [ 521.851764][ T9958] fuse: Bad value for 'group_id' [ 522.766344][ T9972] 9pnet_fd: Insufficient options for proto=fd [ 523.386812][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1098'. [ 523.535925][ T9987] --map-set only usable from mangle table [ 524.232980][ T9990] No source specified [ 524.815359][ T5931] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 524.948365][T10009] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 525.005407][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 525.545285][ T5931] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 525.595121][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.707362][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 525.736523][ T5931] pvrusb2: ********** [ 525.753744][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 525.815779][ T5931] pvrusb2: Important functionality might not be entirely working. [ 525.862760][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 526.515574][ T5931] pvrusb2: ********** [ 526.525937][ T2342] pvrusb2: Invalid write control endpoint [ 526.699647][ T2342] pvrusb2: Invalid write control endpoint [ 526.722088][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 526.741941][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 526.773968][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 526.807886][ T2342] pvrusb2: Device being rendered inoperable [ 526.835600][T10005] pvrusb2: Attempted to execute control transfer when device not ok [ 526.870195][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 526.900820][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 526.933853][ T2342] pvrusb2: Attached sub-driver cx25840 [ 526.943220][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 526.961648][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 527.103104][T10025] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 528.667719][ T5931] usb 2-1: USB disconnect, device number 29 [ 528.786262][ T5955] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 529.725125][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 530.692671][ T5955] usb 1-1: device descriptor read/all, error -71 [ 531.095125][ T121] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 531.132542][T10048] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 531.263468][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 531.308929][ T121] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 531.332350][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 531.335988][T10058] 9pnet_fd: Insufficient options for proto=fd [ 531.364812][ T121] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 531.399143][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.419147][ T121] usb 5-1: Product: syz [ 531.423685][ T121] usb 5-1: Manufacturer: syz [ 531.430785][ T121] usb 5-1: SerialNumber: syz [ 531.488184][ T121] usb 5-1: config 0 descriptor?? [ 531.536049][T10036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 531.621020][ T121] usb 5-1: ucan: probing device on interface #0 [ 531.647847][ T121] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 531.692827][ T121] usb 5-1: ucan: probe failed; try to update the device firmware [ 532.540301][ T5955] usb 5-1: USB disconnect, device number 32 [ 532.635184][T10069] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 533.483406][T10072] --map-set only usable from mangle table [ 533.879563][T10080] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 534.642509][ T30] audit: type=1326 audit(1755787726.368:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.686003][ T30] audit: type=1326 audit(1755787726.398:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.723199][ T30] audit: type=1326 audit(1755787726.398:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.751099][ T30] audit: type=1326 audit(1755787726.398:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.779891][ T30] audit: type=1326 audit(1755787726.398:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.813742][ T30] audit: type=1326 audit(1755787726.398:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.847187][ T30] audit: type=1326 audit(1755787726.398:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.873919][ T30] audit: type=1326 audit(1755787726.398:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.943927][ T30] audit: type=1326 audit(1755787726.398:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 534.968688][ T121] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 534.989463][ T30] audit: type=1326 audit(1755787726.398:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10089 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b6d8ebe9 code=0x7ffc0000 [ 535.074884][T10093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.137515][ T121] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 535.147747][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.184215][ T121] usb 5-1: config 0 descriptor?? [ 535.242788][ T121] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 536.114333][ T121] usb 5-1: Detected FT232B [ 536.485716][ T121] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 536.496441][ T121] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 536.526150][ T121] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 536.540630][ T121] usb 5-1: USB disconnect, device number 33 [ 536.593586][ T121] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 536.673468][T10111] --map-set only usable from mangle table [ 537.091908][ T121] ftdi_sio 5-1:0.0: device disconnected [ 537.523334][T10115] 9pnet_fd: Insufficient options for proto=fd [ 538.504820][T10130] FAULT_INJECTION: forcing a failure. [ 538.504820][T10130] name failslab, interval 1, probability 0, space 0, times 0 [ 538.519247][T10130] CPU: 0 UID: 0 PID: 10130 Comm: syz.4.1139 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 538.519276][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.519288][T10130] Call Trace: [ 538.519297][T10130] [ 538.519306][T10130] dump_stack_lvl+0x189/0x250 [ 538.519340][T10130] ? __pfx____ratelimit+0x10/0x10 [ 538.519364][T10130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.519387][T10130] ? __pfx__printk+0x10/0x10 [ 538.519423][T10130] ? __pfx___might_resched+0x10/0x10 [ 538.519445][T10130] ? fs_reclaim_acquire+0x7d/0x100 [ 538.519475][T10130] should_fail_ex+0x414/0x560 [ 538.519504][T10130] should_failslab+0xa8/0x100 [ 538.519529][T10130] kmem_cache_alloc_noprof+0x73/0x3c0 [ 538.519549][T10130] ? alloc_empty_file+0x55/0x1d0 [ 538.519582][T10130] alloc_empty_file+0x55/0x1d0 [ 538.519608][T10130] dentry_open+0x44/0xa0 [ 538.519636][T10130] exportfs_get_name+0x36f/0x490 [ 538.519671][T10130] ? __pfx_exportfs_get_name+0x10/0x10 [ 538.519732][T10130] ? reconnect_path+0x6d0/0x740 [ 538.519763][T10130] ? __pfx_filldir_one+0x10/0x10 [ 538.519803][T10130] ? __d_obtain_alias+0x5ac/0x820 [ 538.519833][T10130] ? __kernfs_fh_to_dentry+0x16b/0x1e0 [ 538.519863][T10130] exportfs_decode_fh_raw+0x444/0x740 [ 538.519910][T10130] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 538.519942][T10130] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 538.520026][T10130] do_handle_to_path+0xa4/0x1a0 [ 538.520055][T10130] do_handle_open+0x6ab/0x850 [ 538.520085][T10130] ? __pfx_do_handle_open+0x10/0x10 [ 538.520108][T10130] ? ksys_write+0x22a/0x250 [ 538.520131][T10130] ? __pfx_ksys_write+0x10/0x10 [ 538.520146][T10130] ? rcu_is_watching+0x15/0xb0 [ 538.520174][T10130] ? do_syscall_64+0xbe/0x3b0 [ 538.520203][T10130] do_syscall_64+0xfa/0x3b0 [ 538.520223][T10130] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.520245][T10130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.520265][T10130] ? clear_bhb_loop+0x60/0xb0 [ 538.520291][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.520311][T10130] RIP: 0033:0x7fd4c898ebe9 [ 538.520331][T10130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.520349][T10130] RSP: 002b:00007fd4c6bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 538.520372][T10130] RAX: ffffffffffffffda RBX: 00007fd4c8bb6180 RCX: 00007fd4c898ebe9 [ 538.520387][T10130] RDX: 0000000000408100 RSI: 0000200000000100 RDI: 000000000000000a [ 538.520401][T10130] RBP: 00007fd4c6bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 538.520413][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.520424][T10130] R13: 00007fd4c8bb6218 R14: 00007fd4c8bb6180 R15: 00007ffe2c794eb8 [ 538.520460][T10130] [ 538.663719][ T5926] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 540.089781][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 540.102960][ T5926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 540.133656][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.173397][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 540.238889][ T5926] pvrusb2: ********** [ 540.253412][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 540.530678][ T5926] pvrusb2: Important functionality might not be entirely working. [ 540.549651][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 541.313657][ T5926] pvrusb2: ********** [ 541.335170][ T2342] pvrusb2: Invalid write control endpoint [ 541.423330][ T2342] pvrusb2: Invalid write control endpoint [ 541.446220][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 541.457034][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 541.468746][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 541.480455][ T2342] pvrusb2: Device being rendered inoperable [ 541.491243][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 541.505722][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 541.518196][ T2342] pvrusb2: Attached sub-driver cx25840 [ 541.524624][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 541.536583][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 541.658856][T10167] hub 8-0:1.0: USB hub found [ 541.677211][T10167] hub 8-0:1.0: 1 port detected [ 542.345551][T10172] 9pnet_fd: Insufficient options for proto=fd [ 543.283424][ T5955] usb 2-1: USB disconnect, device number 30 [ 543.520598][T10179] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 543.586194][T10179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1153'. [ 543.596597][T10179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 544.822661][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 544.832986][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1159'. [ 546.046348][T10201] FAULT_INJECTION: forcing a failure. [ 546.046348][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 546.074601][T10201] CPU: 0 UID: 0 PID: 10201 Comm: syz.0.1160 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 546.074636][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.074650][T10201] Call Trace: [ 546.074659][T10201] [ 546.074669][T10201] dump_stack_lvl+0x189/0x250 [ 546.074702][T10201] ? __pfx____ratelimit+0x10/0x10 [ 546.074747][T10201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.074771][T10201] ? __pfx__printk+0x10/0x10 [ 546.074805][T10201] ? __pfx___might_resched+0x10/0x10 [ 546.074848][T10201] should_fail_ex+0x414/0x560 [ 546.074878][T10201] should_failslab+0xa8/0x100 [ 546.074906][T10201] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 546.074929][T10201] ? smk_parse_smack+0x1b1/0x1f0 [ 546.074956][T10201] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.074997][T10201] kstrndup+0x80/0x160 [ 546.075024][T10201] smk_parse_smack+0x1b1/0x1f0 [ 546.075054][T10201] smk_import_entry+0x20/0x1d0 [ 546.075083][T10201] smk_fill_rule+0xb6/0x630 [ 546.075114][T10201] smk_parse_long_rule+0xbc3/0xee0 [ 546.075148][T10201] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 546.075180][T10201] smk_write_rules_list+0x239/0x370 [ 546.075201][T10201] ? __pfx_smk_write_load_self2+0x10/0x10 [ 546.075218][T10201] vfs_write+0x27e/0xa90 [ 546.075237][T10201] ? __pfx_vfs_write+0x10/0x10 [ 546.075250][T10201] ? __fget_files+0x2a/0x420 [ 546.075267][T10201] ? __fget_files+0x3a0/0x420 [ 546.075280][T10201] ? __fget_files+0x2a/0x420 [ 546.075299][T10201] ksys_write+0x145/0x250 [ 546.075313][T10201] ? __pfx_ksys_write+0x10/0x10 [ 546.075323][T10201] ? rcu_is_watching+0x15/0xb0 [ 546.075340][T10201] ? do_syscall_64+0xbe/0x3b0 [ 546.075357][T10201] do_syscall_64+0xfa/0x3b0 [ 546.075370][T10201] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.075396][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.075411][T10201] ? clear_bhb_loop+0x60/0xb0 [ 546.075427][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.075439][T10201] RIP: 0033:0x7f92dbb8ebe9 [ 546.075455][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.075466][T10201] RSP: 002b:00007f92dc935038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.075481][T10201] RAX: ffffffffffffffda RBX: 00007f92dbdb5fa0 RCX: 00007f92dbb8ebe9 [ 546.075490][T10201] RDX: 0000000000000009 RSI: 00002000000000c0 RDI: 0000000000000003 [ 546.075498][T10201] RBP: 00007f92dc935090 R08: 0000000000000000 R09: 0000000000000000 [ 546.075505][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.075513][T10201] R13: 00007f92dbdb6038 R14: 00007f92dbdb5fa0 R15: 00007ffd76b49ae8 [ 546.075535][T10201] [ 549.365225][ T5898] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 550.550479][T10226] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 551.639974][ T5931] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 552.057949][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.098320][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 552.266851][ T5931] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 552.493121][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.082596][ T5931] usb 1-1: config 0 descriptor?? [ 553.244261][ T5931] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 553.276810][ T5931] dvb-usb: bulk message failed: -22 (3/0) [ 553.337080][ T5931] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 553.393714][ T5931] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 553.433389][ T5931] usb 1-1: media controller created [ 553.772659][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.601409][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 554.675962][ T5931] dvb-usb: bulk message failed: -22 (6/0) [ 554.691496][ T5931] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 554.784612][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 554.899125][T10265] 9pnet_fd: Insufficient options for proto=fd [ 554.913312][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 554.963339][T10268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.975741][ T5931] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 555.034685][ T5931] usb 1-1: USB disconnect, device number 18 [ 555.150526][ T1209] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 555.323922][ T5931] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 555.379342][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 555.403356][ T1209] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 555.450203][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.550306][ T1209] pvrusb2: Hardware description: Terratec Grabster AV400 [ 555.608623][ T1209] pvrusb2: ********** [ 555.619913][ T1209] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 555.663888][ T1209] pvrusb2: Important functionality might not be entirely working. [ 555.684106][ T1209] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 555.716525][ T1209] pvrusb2: ********** [ 555.729281][T10278] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 555.730883][ T2342] pvrusb2: Invalid write control endpoint [ 555.936135][T10264] pvrusb2: Invalid write control endpoint [ 556.071715][ T2342] pvrusb2: Invalid write control endpoint [ 556.100074][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 556.167457][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 556.197736][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 556.233579][ T2342] pvrusb2: Device being rendered inoperable [ 556.248567][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 556.272727][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 556.353728][ T2342] pvrusb2: Attached sub-driver cx25840 [ 556.383112][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 556.452045][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 557.972097][ T5925] usb 5-1: USB disconnect, device number 34 [ 560.013717][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 560.023270][T10304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.088393][T10304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.569024][T10304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.585411][T10304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.815551][T10328] fuse: Bad value for 'fd' [ 562.988946][T10335] binder: BINDER_SET_CONTEXT_MGR already set [ 562.996201][T10335] binder: 10332:10335 ioctl 4018620d 200000000040 returned -16 [ 563.031067][T10335] binder: 10332:10335 ioctl 400c620e 200000000300 returned -22 [ 567.145604][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 567.155725][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 567.483186][T10364] 9pnet_fd: Insufficient options for proto=fd [ 568.826347][T10377] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 569.306824][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.549513][T10383] binfmt_misc: register: failed to install interpreter file ./file0 [ 571.416929][T10391] vivid-005: kernel_thread() failed [ 572.265382][ T5925] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 572.486039][T10407] 9pnet_fd: Insufficient options for proto=fd [ 572.560542][T10408] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 573.375298][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 573.826121][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 573.840632][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.019254][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 574.142087][ T5925] pvrusb2: ********** [ 574.497171][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 574.550535][ T5925] pvrusb2: Important functionality might not be entirely working. [ 574.562623][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 574.579642][ T5925] pvrusb2: ********** [ 574.590720][ T2342] pvrusb2: Invalid write control endpoint [ 574.756523][ T2342] pvrusb2: Invalid write control endpoint [ 574.763059][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 574.980533][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 575.136536][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 575.284512][ T2342] pvrusb2: Device being rendered inoperable [ 575.381742][T10397] pvrusb2: Attempted to execute control transfer when device not ok [ 575.515926][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 575.731062][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 575.751603][ T2342] pvrusb2: Attached sub-driver cx25840 [ 575.845295][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 576.435189][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 576.537175][T10431] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1222'. [ 576.714156][ T5925] usb 3-1: USB disconnect, device number 40 [ 577.834435][T10456] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 578.606333][T10460] 9pnet_fd: Insufficient options for proto=fd [ 579.289900][T10469] netlink: 'syz.1.1232': attribute type 21 has an invalid length. [ 579.298343][T10469] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.096675][ T5992] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 582.257412][ T5992] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 582.269404][ T5992] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 582.295870][ T5992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 582.308126][ T5992] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 582.335381][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 582.343834][ T5992] usb 1-1: Product: syz [ 582.365492][ T5992] usb 1-1: Manufacturer: syz [ 582.370442][ T5992] usb 1-1: SerialNumber: syz [ 582.395164][ T5992] usb 1-1: config 0 descriptor?? [ 582.411238][ T5992] hub 1-1:0.0: bad descriptor, ignoring hub [ 582.424010][ T5992] hub 1-1:0.0: probe with driver hub failed with error -5 [ 582.437170][ T5992] usb 1-1: selecting invalid altsetting 0 [ 582.910201][T10512] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 583.882116][ T121] usb 1-1: USB disconnect, device number 19 [ 584.293409][T10517] 9pnet_fd: Insufficient options for proto=fd [ 584.487990][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'. [ 585.298376][ T5925] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 586.135261][ T121] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 586.170821][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.217950][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 586.248727][ T5925] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.273492][T10542] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1251'. [ 586.308715][T10543] dvmrp0: entered allmulticast mode [ 586.332017][ T5925] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 586.357412][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.368351][T10542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1251'. [ 586.392208][ T5925] usb 5-1: Product: syz [ 586.410730][ T5925] usb 5-1: Manufacturer: syz [ 586.422283][ T5925] usb 5-1: SerialNumber: syz [ 586.477542][ T5925] cdc_acm 5-1:1.0: skipping garbage [ 587.193426][T10519] 9pnet_fd: Insufficient options for proto=fd [ 587.561162][T10563] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 587.829001][ T5992] usb 5-1: USB disconnect, device number 35 [ 589.474566][T10574] 9pnet_fd: Insufficient options for proto=fd [ 591.274798][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 591.825138][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 591.913619][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.380945][T10608] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 592.834186][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.845862][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.861294][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.871889][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.896097][ T5925] usb 3-1: config 0 descriptor?? [ 593.923491][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 593.942896][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 593.995511][ T5925] usb 3-1: USB disconnect, device number 41 [ 594.100910][T10627] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 594.420843][T10632] 9pnet_fd: Insufficient options for proto=fd [ 595.289623][T10637] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 595.450680][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 597.095284][ T5839] Bluetooth: hci0: connection err: -111 [ 597.771656][T10664] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 600.856648][T10676] 9pnet_fd: Insufficient options for proto=fd [ 601.765187][ T5911] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 601.950029][T10689] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 602.015703][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 602.080534][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.224881][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.320071][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 602.411595][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 602.464811][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.587240][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 602.599768][ T5911] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 602.622541][ T5911] usb 2-1: Manufacturer: syz [ 602.718166][ T5911] usb 2-1: config 0 descriptor?? [ 602.928118][T10695] dlm: non-version read from control device 8192 [ 603.435122][ T5911] rc_core: IR keymap rc-hauppauge not found [ 603.452939][ T5911] Registered IR keymap rc-empty [ 603.459630][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 603.531762][T10701] xt_SECMARK: invalid mode: 2 [ 603.645423][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 603.717919][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 604.426639][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 604.481278][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.515516][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.523231][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1298'. [ 604.605370][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 604.710482][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.756319][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.791565][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.879226][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.931325][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.955698][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 604.975333][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 605.016187][ T5911] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 605.236578][ T5911] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 605.382436][ T5911] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 605.615931][ T5911] usb 2-1: USB disconnect, device number 32 [ 605.731319][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 605.792893][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 605.845114][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.970081][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 606.684800][ T10] pvrusb2: ********** [ 606.698977][T10728] 9pnet_fd: Insufficient options for proto=fd [ 606.744232][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 606.775413][ T10] pvrusb2: Important functionality might not be entirely working. [ 606.794328][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 607.307404][T10738] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 607.316118][T10738] vlan2: entered promiscuous mode [ 607.369176][ T5926] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 607.493685][ T10] pvrusb2: ********** [ 607.501802][ T2342] pvrusb2: Invalid write control endpoint [ 607.546172][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.605101][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.671280][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.777748][ T2342] pvrusb2: Invalid write control endpoint [ 607.795261][ T5926] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.819657][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 607.883251][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.909081][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 607.921210][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 607.939985][ T2342] pvrusb2: Device being rendered inoperable [ 607.947689][ T5926] usb 1-1: config 0 descriptor?? [ 607.964084][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 607.972683][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 607.995721][ T2342] pvrusb2: Attached sub-driver cx25840 [ 608.026853][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 608.053164][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 609.181525][ T5926] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 609.207703][ T5926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 609.218959][ T5926] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 609.275477][ T5926] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 609.333184][ T10] usb 5-1: USB disconnect, device number 36 [ 609.365525][ T5926] usb 1-1: USB disconnect, device number 21 [ 609.748530][T10772] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 610.536622][T10774] FAULT_INJECTION: forcing a failure. [ 610.536622][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 610.553339][T10774] CPU: 0 UID: 0 PID: 10774 Comm: syz.1.1309 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 610.553369][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.553402][T10774] Call Trace: [ 610.553412][T10774] [ 610.553423][T10774] dump_stack_lvl+0x189/0x250 [ 610.553455][T10774] ? __pfx____ratelimit+0x10/0x10 [ 610.553478][T10774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.553503][T10774] ? __pfx__printk+0x10/0x10 [ 610.553532][T10774] ? __pfx___might_resched+0x10/0x10 [ 610.553557][T10774] ? fs_reclaim_acquire+0x7d/0x100 [ 610.553589][T10774] should_fail_ex+0x414/0x560 [ 610.553618][T10774] should_failslab+0xa8/0x100 [ 610.553642][T10774] kmem_cache_alloc_noprof+0x73/0x3c0 [ 610.553673][T10774] ? security_file_alloc+0x34/0x330 [ 610.553703][T10774] security_file_alloc+0x34/0x330 [ 610.553728][T10774] init_file+0x93/0x2f0 [ 610.553756][T10774] alloc_empty_file+0x6e/0x1d0 [ 610.553784][T10774] dentry_open+0x44/0xa0 [ 610.553811][T10774] exportfs_get_name+0x36f/0x490 [ 610.553847][T10774] ? __pfx_exportfs_get_name+0x10/0x10 [ 610.553907][T10774] ? reconnect_path+0x6d0/0x740 [ 610.553935][T10774] ? __pfx_filldir_one+0x10/0x10 [ 610.553975][T10774] ? __d_obtain_alias+0x5ac/0x820 [ 610.554005][T10774] ? __kernfs_fh_to_dentry+0x16b/0x1e0 [ 610.554033][T10774] exportfs_decode_fh_raw+0x444/0x740 [ 610.554066][T10774] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 610.554095][T10774] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 610.554179][T10774] do_handle_to_path+0xa4/0x1a0 [ 610.554208][T10774] do_handle_open+0x6ab/0x850 [ 610.554237][T10774] ? __pfx_do_handle_open+0x10/0x10 [ 610.554261][T10774] ? ksys_write+0x22a/0x250 [ 610.554284][T10774] ? __pfx_ksys_write+0x10/0x10 [ 610.554301][T10774] ? rcu_is_watching+0x15/0xb0 [ 610.554332][T10774] ? do_syscall_64+0xbe/0x3b0 [ 610.554360][T10774] do_syscall_64+0xfa/0x3b0 [ 610.554381][T10774] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.554403][T10774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.554424][T10774] ? clear_bhb_loop+0x60/0xb0 [ 610.554449][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.554468][T10774] RIP: 0033:0x7f02e6f8ebe9 [ 610.554489][T10774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.554508][T10774] RSP: 002b:00007f02e7d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 610.554531][T10774] RAX: ffffffffffffffda RBX: 00007f02e71b6090 RCX: 00007f02e6f8ebe9 [ 610.554545][T10774] RDX: 0000000000408100 RSI: 0000200000000100 RDI: 000000000000000a [ 610.554559][T10774] RBP: 00007f02e7d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 610.554571][T10774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.554582][T10774] R13: 00007f02e71b6128 R14: 00007f02e71b6090 R15: 00007fff4d76bdc8 [ 610.554619][T10774] [ 611.507445][T10760] fido_id[10760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 612.705718][T10787] 9pnet_fd: Insufficient options for proto=fd [ 614.457566][T10802] overlayfs: missing 'lowerdir' [ 617.561899][T10822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'. [ 617.595181][ T5926] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 617.775301][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 617.792863][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 617.820700][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.876144][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 617.882726][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 617.914921][ T5926] pvrusb2: ********** [ 617.922641][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 617.939576][T10837] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 617.939806][ T5926] pvrusb2: Important functionality might not be entirely working. [ 617.968873][T10838] 9pnet_fd: Insufficient options for proto=fd [ 617.980044][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 617.996772][ T5926] pvrusb2: ********** [ 618.099873][ T2342] pvrusb2: Invalid write control endpoint [ 618.214682][T10840] bond1: (slave gretap1): making interface the new active one [ 618.238984][ T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 618.252749][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 618.263719][T10840] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 618.513530][T10809] pvrusb2: Invalid write control endpoint [ 618.822572][ T2342] pvrusb2: Invalid write control endpoint [ 618.863112][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 618.881467][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 618.894654][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 618.905249][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 618.914427][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 618.925069][ T10] usb 2-1: Product: syz [ 618.953154][ T10] usb 2-1: Manufacturer: syz [ 618.959408][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 618.999593][ T2342] pvrusb2: Device being rendered inoperable [ 619.024791][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 619.058436][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 619.099554][ T2342] pvrusb2: Attached sub-driver cx25840 [ 619.115601][ T10] usb 2-1: SerialNumber: syz [ 619.134117][ T10] usb 2-1: config 0 descriptor?? [ 619.145145][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 619.163746][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 619.175371][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 619.193083][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 619.205393][ T10] usb 2-1: selecting invalid altsetting 0 [ 620.417809][ T121] usb 3-1: USB disconnect, device number 42 [ 620.444784][ T10] usb 2-1: USB disconnect, device number 33 [ 620.587360][T10868] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1340'. [ 620.600110][T10868] trusted_key: encrypted_key: master key parameter 'defcult' is invalid [ 620.612545][T10868] trusted_key: encrypted_key: master key parameter 'defcult' is invalid [ 621.438914][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 621.553078][T10531] udevd[10531]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.772903][T10877] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1344'. [ 621.784002][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1344'. [ 621.793595][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1344'. [ 623.078595][T10894] 9pnet_fd: Insufficient options for proto=fd [ 625.037173][T10920] netlink: 'syz.2.1352': attribute type 21 has an invalid length. [ 625.046036][T10920] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1352'. [ 625.056708][T10920] netlink: 'syz.2.1352': attribute type 5 has an invalid length. [ 625.064907][T10920] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1352'. [ 626.624273][T10924] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 629.087322][T10948] Cannot find del_set index 2 as target [ 629.773900][T10958] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 630.352098][T10959] Process accounting resumed [ 630.603002][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.763579][T10974] program syz.1.1366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.811242][T10974] program syz.1.1366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.824603][T10974] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 631.835546][ T5911] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 632.136092][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 632.239026][ T5911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 632.300798][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.957754][ T5911] pvrusb2: Hardware description: Terratec Grabster AV400 [ 632.977474][ T5911] pvrusb2: ********** [ 632.981835][ T5911] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 632.997644][ T5911] pvrusb2: Important functionality might not be entirely working. [ 633.035338][ T5911] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 633.119150][ T5911] pvrusb2: ********** [ 633.142761][ T2342] pvrusb2: Invalid write control endpoint [ 633.213455][T10997] sock: sock_timestamping_bind_phc: sock not bind to device [ 633.463793][T10980] pvrusb2: Invalid write control endpoint [ 633.585652][ T5955] usb 3-1: USB disconnect, device number 43 [ 634.126989][ T2342] pvrusb2: Invalid write control endpoint [ 634.142305][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 634.262881][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 634.381566][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 634.558332][ T2342] pvrusb2: Device being rendered inoperable [ 634.825208][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 634.833339][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 634.906506][ T2342] pvrusb2: Attached sub-driver cx25840 [ 634.912713][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.990317][T11017] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.001797][T11017] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.013577][T11017] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.024205][T11017] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.055171][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 635.112689][T11021] netlink: 'syz.3.1380': attribute type 7 has an invalid length. [ 635.233116][T11024] overlayfs: missing 'lowerdir' [ 635.259811][T11017] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.270566][T11017] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.280674][T11017] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.290222][T11017] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.346885][T11027] kvm: pic: non byte write [ 635.621845][T11035] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 635.626155][T11034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1382'. [ 635.712815][T11034] random: crng reseeded on system resumption [ 636.093621][T11036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1382'. [ 638.054576][T11075] mmap: syz.0.1394 (11075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 638.499472][T11084] 9pnet_fd: Insufficient options for proto=fd [ 639.901263][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 639.901287][ T30] audit: type=1326 audit(1755787831.628:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11094 comm="syz.0.1402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92dbb8ebe9 code=0x0 [ 640.345169][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 640.508312][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 640.541125][ T5925] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 640.578495][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.592812][ T5925] usb 5-1: Product: syz [ 640.599529][ T5925] usb 5-1: Manufacturer: syz [ 640.604845][ T5925] usb 5-1: SerialNumber: syz [ 640.614444][ T5925] usb 5-1: config 0 descriptor?? [ 640.843202][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.865930][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.703029][T11110] fuse: blksize only supported for fuseblk [ 641.730111][ T5925] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 642.578834][ T5925] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 642.776114][ T5925] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 643.625781][ T5926] usb 5-1: USB disconnect, device number 37 [ 644.647770][ T5926] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 644.815490][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 644.827455][ T5926] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 644.845164][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 644.867578][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 644.895925][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 644.964435][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 645.962173][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.976999][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 646.194056][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.451343][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.493173][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.687458][ T5926] usb 5-1: GET_CAPABILITIES returned 0 [ 646.694087][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 646.836599][T11155] netlink: 'syz.1.1416': attribute type 21 has an invalid length. [ 647.779636][ T5925] usb 5-1: USB disconnect, device number 38 [ 648.043240][T11162] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1420'. [ 648.067083][T11162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1420'. [ 650.515697][ T1209] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 650.539217][ T5992] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 650.793919][ T5992] usb 5-1: device descriptor read/64, error -71 [ 650.802520][ T1209] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 650.829597][ T1209] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 650.865353][ T1209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 650.898949][ T1209] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 650.943569][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 650.985105][ T1209] usb 3-1: Product: syz [ 650.998084][ T1209] usb 3-1: Manufacturer: syz [ 651.022478][ T1209] usb 3-1: SerialNumber: syz [ 651.045169][ T5992] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 651.046567][ T1209] usb 3-1: config 0 descriptor?? [ 651.080433][ T1209] hub 3-1:0.0: bad descriptor, ignoring hub [ 651.088046][ T1209] hub 3-1:0.0: probe with driver hub failed with error -5 [ 651.127038][ T1209] usb 3-1: selecting invalid altsetting 0 [ 651.185093][ T5992] usb 5-1: device descriptor read/64, error -71 [ 651.215104][ T121] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 651.315356][ T5992] usb usb5-port1: attempt power cycle [ 651.499173][ T121] usb 1-1: Using ep0 maxpacket: 16 [ 651.807529][ T121] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.975630][ T5992] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 652.007886][ T121] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.023466][ T121] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 652.045262][ T5992] usb 5-1: device descriptor read/8, error -71 [ 652.065826][ T121] usb 1-1: config 0 interface 0 has no altsetting 0 [ 652.072913][ T121] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 652.093991][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.118474][ T121] usb 1-1: config 0 descriptor?? [ 652.151588][ T1209] usb 3-1: USB disconnect, device number 44 [ 652.466832][ T5992] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 652.690149][ T5992] usb 5-1: device not accepting address 42, error -71 [ 652.709357][ T5992] usb usb5-port1: unable to enumerate USB device [ 652.710768][ T1209] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 652.745375][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.824799][T11217] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 653.699192][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.003505][ T121] usbhid 1-1:0.0: can't add hid device: -71 [ 654.035418][ T121] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 654.120625][ T121] usb 1-1: USB disconnect, device number 22 [ 655.650440][T11245] FAULT_INJECTION: forcing a failure. [ 655.650440][T11245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 655.678698][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.0.1445 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 655.678732][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.678745][T11245] Call Trace: [ 655.678756][T11245] [ 655.678766][T11245] dump_stack_lvl+0x189/0x250 [ 655.678801][T11245] ? __pfx____ratelimit+0x10/0x10 [ 655.678826][T11245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.678850][T11245] ? __pfx__printk+0x10/0x10 [ 655.678880][T11245] ? fs_reclaim_acquire+0x7d/0x100 [ 655.678918][T11245] should_fail_ex+0x414/0x560 [ 655.678947][T11245] prepare_alloc_pages+0x213/0x610 [ 655.679002][T11245] __alloc_frozen_pages_noprof+0x123/0x370 [ 655.679037][T11245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 655.679077][T11245] ? policy_nodemask+0x27c/0x720 [ 655.679106][T11245] alloc_pages_mpol+0x232/0x4a0 [ 655.679136][T11245] vma_alloc_folio_noprof+0xe4/0x200 [ 655.679163][T11245] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 655.679203][T11245] folio_prealloc+0x30/0x180 [ 655.679229][T11245] do_wp_page+0x1231/0x5800 [ 655.679288][T11245] ? __pfx_do_wp_page+0x10/0x10 [ 655.679315][T11245] ? do_raw_spin_lock+0x121/0x290 [ 655.679347][T11245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 655.679389][T11245] __handle_mm_fault+0x1144/0x5620 [ 655.679446][T11245] ? __pfx___handle_mm_fault+0x10/0x10 [ 655.679497][T11245] ? follow_page_pte+0xe7e/0x14b0 [ 655.679530][T11245] handle_mm_fault+0x2d5/0x7f0 [ 655.679563][T11245] ? vma_is_secretmem+0xd/0x50 [ 655.679603][T11245] __get_user_pages+0x1af4/0x30b0 [ 655.679680][T11245] ? __pfx___get_user_pages+0x10/0x10 [ 655.679708][T11245] ? __gup_longterm_locked+0xbf7/0x15b0 [ 655.679738][T11245] ? down_read_killable+0x1d1/0x350 [ 655.679763][T11245] ? try_get_folio+0x633/0x660 [ 655.679787][T11245] __gup_longterm_locked+0xd66/0x15b0 [ 655.679825][T11245] ? try_grab_folio_fast+0x35b/0x4f0 [ 655.679852][T11245] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 655.679893][T11245] gup_fast_fallback+0x1cd4/0x2260 [ 655.679921][T11245] ? is_bpf_text_address+0x26/0x2b0 [ 655.680000][T11245] ? __pfx_gup_fast_fallback+0x10/0x10 [ 655.680027][T11245] ? stack_trace_save+0x9c/0xe0 [ 655.680057][T11245] ? stack_depot_save_flags+0x40/0x900 [ 655.680090][T11245] ? pin_user_pages_fast+0x4d/0xb0 [ 655.680123][T11245] iov_iter_extract_pages+0x35a/0x5e0 [ 655.680164][T11245] extract_iter_to_sg+0xe46/0x24e0 [ 655.680210][T11245] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 655.680256][T11245] ? __asan_memset+0x22/0x50 [ 655.680289][T11245] af_alg_get_rsgl+0x436/0x810 [ 655.680337][T11245] skcipher_recvmsg+0x3c0/0x11c0 [ 655.680387][T11245] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 655.680411][T11245] ? __lock_acquire+0xab9/0xd20 [ 655.680432][T11245] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 655.680451][T11245] ? security_socket_recvmsg+0x7e/0x2e0 [ 655.680473][T11245] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 655.680497][T11245] sock_recvmsg+0x22c/0x270 [ 655.680530][T11245] ____sys_recvmsg+0x1c9/0x460 [ 655.680564][T11245] ? __pfx_____sys_recvmsg+0x10/0x10 [ 655.680607][T11245] ? import_iovec+0x74/0xa0 [ 655.680640][T11245] ___sys_recvmsg+0x1b5/0x510 [ 655.680669][T11245] ? __pfx____sys_recvmsg+0x10/0x10 [ 655.680724][T11245] ? __fget_files+0x3a0/0x420 [ 655.680763][T11245] __x64_sys_recvmsg+0x198/0x260 [ 655.680788][T11245] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 655.680823][T11245] ? __pfx_ksys_write+0x10/0x10 [ 655.680851][T11245] ? do_syscall_64+0xbe/0x3b0 [ 655.680880][T11245] do_syscall_64+0xfa/0x3b0 [ 655.680900][T11245] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.680922][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.680943][T11245] ? clear_bhb_loop+0x60/0xb0 [ 655.680970][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.681000][T11245] RIP: 0033:0x7f92dbb8ebe9 [ 655.681021][T11245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.681039][T11245] RSP: 002b:00007f92dc914038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 655.681064][T11245] RAX: ffffffffffffffda RBX: 00007f92dbdb6090 RCX: 00007f92dbb8ebe9 [ 655.681078][T11245] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000004 [ 655.681091][T11245] RBP: 00007f92dc914090 R08: 0000000000000000 R09: 0000000000000000 [ 655.681104][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.681116][T11245] R13: 00007f92dbdb6128 R14: 00007f92dbdb6090 R15: 00007ffd76b49ae8 [ 655.681152][T11245] [ 655.886097][ T5911] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 656.688899][ T5911] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 656.698498][ T5911] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 656.724599][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.773633][ T5911] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 656.784574][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 656.804067][ T5911] usb 5-1: Product: syz [ 656.808864][ T5911] usb 5-1: Manufacturer: syz [ 656.813688][ T5911] usb 5-1: SerialNumber: syz [ 656.893603][ T5911] usb 5-1: config 0 descriptor?? [ 656.920462][ T5911] hub 5-1:0.0: bad descriptor, ignoring hub [ 656.937600][ T5911] hub 5-1:0.0: probe with driver hub failed with error -5 [ 658.392193][ T5911] usb 5-1: selecting invalid altsetting 0 [ 658.557127][ T5911] usb 5-1: USB disconnect, device number 43 [ 658.882448][T10531] udevd[10531]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.957088][T11268] overlayfs: failed to clone upperpath [ 659.658603][T11278] [ 659.661400][T11278] ====================================================== [ 659.668835][T11278] WARNING: possible circular locking dependency detected [ 659.676265][T11278] 6.16.0-syzkaller #0 Not tainted [ 659.681441][T11278] ------------------------------------------------------ [ 659.688892][T11278] syz.0.1453/11278 is trying to acquire lock: [ 659.695581][T11278] ffff888142be8988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 659.708292][T11278] [ 659.708292][T11278] but task is already holding lock: [ 659.716139][T11278] ffff888142be8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 659.726365][T11278] [ 659.726365][T11278] which lock already depends on the new lock. [ 659.726365][T11278] [ 659.737705][T11278] [ 659.737705][T11278] the existing dependency chain (in reverse order) is: [ 659.747723][T11278] [ 659.747723][T11278] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 659.756366][T11278] lock_acquire+0x120/0x360 [ 659.761778][T11278] __mutex_lock+0x182/0xe80 [ 659.767294][T11278] refcount_dec_and_mutex_lock+0x30/0xa0 [ 659.773668][T11278] nbd_config_put+0x2c/0x790 [ 659.779248][T11278] nbd_release+0xfe/0x140 [ 659.784148][T11278] bdev_release+0x533/0x650 [ 659.790001][T11278] blkdev_release+0x15/0x20 [ 659.795583][T11278] __fput+0x449/0xa70 [ 659.800393][T11278] fput_close_sync+0x119/0x200 [ 659.806588][T11278] __x64_sys_close+0x7f/0x110 [ 659.811966][T11278] do_syscall_64+0xfa/0x3b0 [ 659.817448][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.824206][T11278] [ 659.824206][T11278] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 659.833576][T11278] lock_acquire+0x120/0x360 [ 659.840390][T11278] __mutex_lock+0x182/0xe80 [ 659.846530][T11278] __del_gendisk+0x129/0x9e0 [ 659.852298][T11278] del_gendisk+0xe8/0x160 [ 659.857623][T11278] loop_remove+0x42/0xc0 [ 659.862751][T11278] loop_control_ioctl+0x4ac/0x5a0 [ 659.869348][T11278] __se_sys_ioctl+0xfc/0x170 [ 659.874776][T11278] do_syscall_64+0xfa/0x3b0 [ 659.880186][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.886723][T11278] [ 659.886723][T11278] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 659.895549][T11278] validate_chain+0xb9b/0x2140 [ 659.901162][T11278] __lock_acquire+0xab9/0xd20 [ 659.906562][T11278] lock_acquire+0x120/0x360 [ 659.911779][T11278] down_write+0x96/0x1f0 [ 659.916645][T11278] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 659.923561][T11278] nbd_start_device+0x16c/0xac0 [ 659.929377][T11278] nbd_ioctl+0x636/0xeb0 [ 659.934189][T11278] blkdev_ioctl+0x5a8/0x6d0 [ 659.939505][T11278] __se_sys_ioctl+0xfc/0x170 [ 659.944800][T11278] do_syscall_64+0xfa/0x3b0 [ 659.950315][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.957271][T11278] [ 659.957271][T11278] other info that might help us debug this: [ 659.957271][T11278] [ 659.968107][T11278] Chain exists of: [ 659.968107][T11278] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 659.968107][T11278] [ 659.983537][T11278] Possible unsafe locking scenario: [ 659.983537][T11278] [ 659.991480][T11278] CPU0 CPU1 [ 659.997123][T11278] ---- ---- [ 660.002822][T11278] lock(&nbd->config_lock); [ 660.007864][T11278] lock(&disk->open_mutex); [ 660.015407][T11278] lock(&nbd->config_lock); [ 660.023152][T11278] lock(&set->update_nr_hwq_lock); [ 660.029282][T11278] [ 660.029282][T11278] *** DEADLOCK *** [ 660.029282][T11278] [ 660.038160][T11278] 1 lock held by syz.0.1453/11278: [ 660.043688][T11278] #0: ffff888142be8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 660.053748][T11278] [ 660.053748][T11278] stack backtrace: [ 660.059956][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.0.1453 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 660.059977][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.059986][T11278] Call Trace: [ 660.059993][T11278] [ 660.060003][T11278] dump_stack_lvl+0x189/0x250 [ 660.060029][T11278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.060044][T11278] ? __pfx__printk+0x10/0x10 [ 660.060061][T11278] ? print_lock_name+0xde/0x100 [ 660.060079][T11278] print_circular_bug+0x2ee/0x310 [ 660.060097][T11278] check_noncircular+0x134/0x160 [ 660.060115][T11278] validate_chain+0xb9b/0x2140 [ 660.060130][T11278] ? stack_depot_save_flags+0x40/0x900 [ 660.060155][T11278] __lock_acquire+0xab9/0xd20 [ 660.060169][T11278] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 660.060186][T11278] lock_acquire+0x120/0x360 [ 660.060196][T11278] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 660.060213][T11278] ? __mutex_trylock_common+0x153/0x260 [ 660.060230][T11278] down_write+0x96/0x1f0 [ 660.060245][T11278] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 660.060261][T11278] ? __pfx_down_write+0x10/0x10 [ 660.060274][T11278] ? rcu_is_watching+0x15/0xb0 [ 660.060287][T11278] ? trace_contention_end+0x39/0x120 [ 660.060300][T11278] ? __mutex_lock+0x330/0xe80 [ 660.060314][T11278] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 660.060330][T11278] ? blkdev_common_ioctl+0xfc3/0x2450 [ 660.060345][T11278] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 660.060359][T11278] ? nbd_ioctl+0x131/0xeb0 [ 660.060377][T11278] ? __pfx___mutex_lock+0x10/0x10 [ 660.060392][T11278] nbd_start_device+0x16c/0xac0 [ 660.060407][T11278] ? security_capable+0x7e/0x2e0 [ 660.060425][T11278] nbd_ioctl+0x636/0xeb0 [ 660.060444][T11278] ? __pfx_nbd_ioctl+0x10/0x10 [ 660.060464][T11278] ? __asan_memset+0x22/0x50 [ 660.060484][T11278] ? smack_file_ioctl+0x24a/0x340 [ 660.060495][T11278] ? __pfx_smack_file_ioctl+0x10/0x10 [ 660.060507][T11278] ? __pfx_nbd_ioctl+0x10/0x10 [ 660.060522][T11278] blkdev_ioctl+0x5a8/0x6d0 [ 660.060536][T11278] ? __pfx_blkdev_ioctl+0x10/0x10 [ 660.060551][T11278] ? __fget_files+0x2a/0x420 [ 660.060566][T11278] ? bpf_lsm_file_ioctl+0x9/0x20 [ 660.060580][T11278] ? __pfx_blkdev_ioctl+0x10/0x10 [ 660.060593][T11278] __se_sys_ioctl+0xfc/0x170 [ 660.060616][T11278] do_syscall_64+0xfa/0x3b0 [ 660.060634][T11278] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.060651][T11278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.060669][T11278] ? clear_bhb_loop+0x60/0xb0 [ 660.060689][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.060707][T11278] RIP: 0033:0x7f92dbb8ebe9 [ 660.060726][T11278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.060743][T11278] RSP: 002b:00007f92dc914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.060763][T11278] RAX: ffffffffffffffda RBX: 00007f92dbdb6090 RCX: 00007f92dbb8ebe9 [ 660.060773][T11278] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 660.060781][T11278] RBP: 00007f92dbc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 660.060790][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.060801][T11278] R13: 00007f92dbdb6128 R14: 00007f92dbdb6090 R15: 00007ffd76b49ae8 [ 660.060818][T11278] [ 661.265412][T11278] block nbd0: shutting down sockets