last executing test programs: 14.884181923s ago: executing program 4 (id=1712): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 12.103973907s ago: executing program 3 (id=1722): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000300)='./file0\x00', r2, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1a8, 0xb0, 0x1a8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0xfffffffe}}, @common=@unspec=@statistic={{0x38}, {0x7400}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000780)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff40) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) 10.488541652s ago: executing program 0 (id=1727): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x8006, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50) r5 = syz_pidfd_open(0x0, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002020702500040004002020207b1af8ff00000000bfa100000000000007010000f8ff62ffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) umount2(0x0, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 8.641750668s ago: executing program 0 (id=1729): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) timer_create(0x4, &(0x7f0000000200)={0x0, 0x5, 0x2, @thr={&(0x7f00000000c0)="1f7b78940ff94081c55d56ed1847c9e0ad9cfac8814f12d35af795c21cde9f598fdce2825f33bd48c7587a2d3373efb1b9752f8d58b7a23f5273d5667aae893b73", &(0x7f00000001c0)="72b509ebde6745d3d197d7"}}, &(0x7f0000000240)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41000, 0x27, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x118}, 0x94) r2 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0984124, &(0x7f0000000c40)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xffffffffffffff55}) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000600)='\x00', 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 8.624004198s ago: executing program 3 (id=1730): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x400000000, 0x4100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0xa, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x200002, 0x3, 0x0, 0x1}, {0x8000000, 0x3ffbffe}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x800}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffc}, {0x9, 0x621}], 0x882}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000140)={0x80}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1be7, &(0x7f0000000740)={0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000340)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x3}) 7.257689052s ago: executing program 1 (id=1731): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400620000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 7.127663957s ago: executing program 0 (id=1733): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x0, 0x827e, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff65}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3, 0x0, 0x5}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000080)={0x800, 0xb}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a22301020301090212000100000000095200000057331900"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="840606000000d8449f73df3e"], 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x141142) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000001, 0x120c0) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00'}) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffe}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x800, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9, 0xff}, 0x9c) 7.097129673s ago: executing program 3 (id=1734): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x9, {"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", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r3, 0x0, 0x2, 0x4}}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="009d37fb69220f00ffea0bcde0c46b36d4a7d51fb37488db2c0fa97e1478d4abbd34386dee596de2cb7c2307be3e3ed8b95413a3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000980)={0x0, 0xffffffff, 0x7fff, 0x5, 0xffffff36, 0x5}) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0xe20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x0, 0x1000000, 0x0, 0x83, 0xfffffffb}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(r11, 0x407, 0x2000000) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x800048, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c7766786e6fce2312a2ca063d308e9032258d0f1319ca453c056164481631da3ea566b67d03e7c774ffde4d18ee3e1f4afeab295c030500755abf1f76ec35bfcdf0f5aea9a92eee4ed676892761a25dc6fb", @ANYRESOCT=r2, @ANYRES64=r10]) 6.985579424s ago: executing program 1 (id=1735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x6, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) 6.971812923s ago: executing program 2 (id=1736): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) bind$inet6(r0, 0x0, 0xfffffef6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x81, r2}, 0x38) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r3}}, 0x18) rt_sigpending(&(0x7f0000000300), 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', 0x2000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000240)) r5 = fsopen(&(0x7f0000000380)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(r6, &(0x7f0000000340)='./bus\x00', 0x112) mount$nfs(0x0, &(0x7f00000003c0)='./file1/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000262c61756469742c61756469742c66755006000000434b2c6f626a5f72010000002c0000dced68246d"]) mkdir(&(0x7f0000000280)='./file1\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010000000000000000b9c57f0e5238f5150000000008140007800800010006000000050005000a000000050004000014000300686173683a69702c700372742c697000"], 0x60}}, 0x800) 6.616456015s ago: executing program 4 (id=1737): syz_pidfd_open(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, 0x0, 0x144) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42}, 0x4004801) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x27, 0x0, 0xa81001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0xfffffffffffffffe, 0xb700aab, {0x0, 0x3, 0xa, 0x800000000000, 0x2, 0x40bfc000, {0x3, 0xfffffffffffff73b, 0x11, 0x7a42f926, 0xf, 0x2, 0xffff, 0x0, 0x0, 0x1000, 0x9011, 0x0, 0x0, 0x2, 0x7f43}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x12c, @loopback, 0xa}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}], 0x3c) 6.217662911s ago: executing program 2 (id=1738): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000022c0), 0x111}}, 0x20) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) dup3(r5, r0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000180)=0x80000000) 6.146530889s ago: executing program 4 (id=1739): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0107030109022400020000000009046f0000aad823000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0xfffffffc, 0x71, 0x10, 0x16}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000180)='GPL\x00'}, 0x90) syz_usb_connect$cdc_ncm(0x3, 0x83, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xb7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x9, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x14}, {0xd, 0x24, 0xf, 0x1, 0xffffffd3, 0xfffe, 0x4, 0x87}, {0x6, 0x24, 0x1a, 0x1000}, [@mdlm={0x15, 0x24, 0x12, 0xf418}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x8, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x82, 0x8, 0x1}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x4, 0x7, 0x9, 0x10, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0x95, &(0x7f0000000380)=@string={0x95, 0x3, "2fe29ea164ed246b5b8357fbead4f8e53c9c3f0b6d619cb61da690a274c141c98664616c7b9705ba784c9a1ad5ebef225ec2d80089c636942503383197fbf7cdeaf5d39100a7e52e8d0822984543ad8217222253ebd64b2ddb5ffaf6adb4b072fe48899ad767c5c228918d3cde4148de430ed690725b82a6433efa277711677649ca0292fe00"/147}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}, {0x102, &(0x7f0000000540)=@string={0x102, 0x3, "3750d97e3bea238bf0eeab190d383812eed491b0b817a888e8af40b9b53377897aed8f029d2e1f3519401e25116b1051ff7416fa028b3c434e1eae7fc2d0125d6df016bc3809edd869e00b905496ba16e532a9e9760600904a8d5b647ad694f4a57e352b09d6962b89065a7efb97395dfa8d3e320e99a76f77ee0de9e9f04587415f9344f33433d015e279f7d295ede4ed6aae3dd65ffb210c054651d9a7547510661b132633b44fbb69acd704000000bdab7bc307e06a8392a7471e3ee986000c374f6d0958824b085f59ee558829f497684a828e4de3a0919bd559d9ab877329285d3410b4a31d489e76f0d7dc2fd9af74b3788398cbca52cca942b6af94d1"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d40030410604101010203010902240001000000020904"], 0x0) 6.095775211s ago: executing program 1 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8401, 0x16) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=@known='system.sockprotoname\x00', &(0x7f0000000340)=',]:^[!+#\x00', 0x9, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x8820) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 6.067412079s ago: executing program 2 (id=1741): socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r3, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) 5.453519035s ago: executing program 1 (id=1742): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="00c7b39cf30322b7d9", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x44004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006148e0021215b887739fe4369964e11f8ae25f214689e5a198100c3d24b0c3a7c20c9555baaad7ba0599c95b20296234be9a06e40636efdf14e3a82ccc14a53af9d5c615733dbd4f7ffa76e94778294ddd9972de0cdecca598d40d146809c7913d29d2da8da3107039593a1dc63de0c512ad64d097105900412d18d03a2cb4e3f0100f4ef063c6e761352d07a71f99cb7c9b45327ebe948d5859d260fa32e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f000099c000/0x14000)=nil, 0x14000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.452991735s ago: executing program 3 (id=1743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000642670bc5487002bc707d5a0df546eadf2e0fee1f74cc6be6775030e83090200b8585cef7db73b4ccfc6ee008ef5138c1dc0c8d88ecff87a31a4240425fb040ccc7ef043f316a222581be02f55a58e247cc7c32115eaa1867c079863431ea6e4ebaec13c2f5cd7663d933e55badd51a6954991c4f137692c7a5ec3", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x143142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)="d9", 0x1}, {&(0x7f0000000340)="29f8dc0d4624cb71f841c7cf9c8f5684262ebeffd3c5dfbacfbc70b8983cac70510f296504896023fe64eee06aabf0644b3f98fe9b0aac10765ff8399b041b9556625a0479d2d77eec7d9a4123f00edc8a7802d2060451272d897caac422685766108cfdbdc6d87340a49b1452f44719ddfa9469198511bd8a101f90083db98b3f5504f25e98b55f7b56dcd1737cada23db8c2cfc14cfad4c858710007e89a6c06f0991b6dc48f233f2f1888b28d8ca86f9dbf6b07", 0xb5}, {&(0x7f0000000400)="95022017bd0b6c802ae411844ce19b25a520db845f667d75d9f9f05d0504909fe89d8c3c64995a21a17b4022375c2e55a05409f4baafda44cfa55c6afe3a0a1ed5589d66714ef8723b0d8e91cea5b4e2db50aec743e8bfa91d8b03df34f19c058575397748c0616048a1ab5ab4d007cad8c738f65057dc247a0a4f0db6763bc99e92cf1ba93540ee2252419540b447352e5aa4234b1ce44ea4bec3f76fc10e86622ac683ec0e03d67b6c010f8aae30565ad4c0b09d4a6830df94826de80c0eff7e3340da05eefc6bfc64", 0xca}], 0x5, 0x0, 0x0, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007b16b3406d04b608320e0102030109021200010000008009040000007fdf9500"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xf, &(0x7f0000000040)={0x8cb5, 0xfff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r4 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) 3.977930146s ago: executing program 1 (id=1744): shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.839470075s ago: executing program 0 (id=1745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000e400"/16], 0x10}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0xff08, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r6 = dup3(r1, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r8, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x40000000015, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x4, 0x0, 0xe}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000021400030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888210000001c0012800b0001006d616373656300000c00028005000d0007000000"], 0x3c}}, 0x8000) 3.243776257s ago: executing program 1 (id=1746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe9) ppoll(&(0x7f0000000080)=[{r2, 0xf542}, {r2, 0x1141}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x8, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x8b/.+{\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x30}}, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe9) (async) ppoll(&(0x7f0000000080)=[{r2, 0xf542}, {r2, 0x1141}], 0x2, 0x0, 0x0, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) timer_create(0x3, 0x0, &(0x7f0000000080)) (async) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x8, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x8b/.+{\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x30}}, 0x0) (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) (async) 2.979694675s ago: executing program 0 (id=1747): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 2.40030276s ago: executing program 2 (id=1748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) bind$inet6(r0, 0x0, 0xfffffef6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x81, r2}, 0x38) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r3}}, 0x18) rt_sigpending(&(0x7f0000000300), 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', 0x2000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000240)) r5 = fsopen(&(0x7f0000000380)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(r6, &(0x7f0000000340)='./bus\x00', 0x112) mount$nfs(0x0, &(0x7f00000003c0)='./file1/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000262c61756469742c61756469742c66755006000000434b2c6f626a5f72010000002c0000dced68246d"]) mkdir(&(0x7f0000000280)='./file1\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010000000000000000b9c57f0e5238f5150000000008140007800800010006000000050005000a000000050004000014000300686173683a69702c700372742c697000"], 0x60}}, 0x800) 1.732146481s ago: executing program 4 (id=1749): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0xffffffef, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) open(0x0, 0x181042, 0x80) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.092174238s ago: executing program 2 (id=1750): syz_pidfd_open(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, 0x0, 0x144) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42}, 0x4004801) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) clock_settime(0xbcd1940b87aad64b, &(0x7f0000000500)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0xfffffffffffffffe, 0xb700aab, {0x0, 0x3, 0xa, 0x800000000000, 0x2, 0x40bfc000, {0x3, 0xfffffffffffff73b, 0x11, 0x7a42f926, 0xf, 0x2, 0xffff, 0x0, 0x0, 0x1000, 0x9011, 0x0, 0x0, 0x2, 0x7f43}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x12c, @loopback, 0xa}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}], 0x3c) 935.545573ms ago: executing program 4 (id=1751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x6, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) 885.733229ms ago: executing program 3 (id=1752): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0}, 0x10) 242.757947ms ago: executing program 3 (id=1753): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x8000000000000001}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) 187.334708ms ago: executing program 2 (id=1754): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x0, 0x800) r5 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) 36.985134ms ago: executing program 4 (id=1755): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x203, 0x12a) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x3, 0x1}, 0x1c, 0x3, 0x0, 0x0, "80475c1d15cf0670f0c24c4f6580d19d640f34fc00c75f216f8c90cc33260fd7119b5c886fdde91ecf93a584fea1a2723744156f2310a533ed5c38241f8cafe5"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) 0s ago: executing program 0 (id=1756): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x92fc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x11a}], 0x1}}], 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff05fff50005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) kernel console output (not intermixed with test programs): (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 607.507191][ T30] audit: type=1326 audit(1755681032.845:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9107 comm="syz.3.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 608.361408][ T9134] bond1: entered promiscuous mode [ 608.381744][ T9134] bond1: entered allmulticast mode [ 608.405315][ T9134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.241133][ T9143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.639408][ T9153] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 609.648437][ T9153] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 610.456615][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 614.788945][ T5941] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 614.844030][ T9200] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 614.853090][ T9200] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 615.570114][ T5941] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 615.622953][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.662099][ T5941] usb 5-1: Product: syz [ 615.680865][ T5941] usb 5-1: Manufacturer: syz [ 615.703353][ T5941] usb 5-1: SerialNumber: syz [ 615.744066][ T5941] usb 5-1: config 0 descriptor?? [ 615.768479][ T5941] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 615.800745][ T5941] usb 5-1: Detected FT4232HP [ 616.045396][ T5941] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 616.059533][ T5941] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 616.082288][ T5941] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 616.753081][ T5941] usb 5-1: USB disconnect, device number 17 [ 616.826500][ T5941] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 616.879818][ T5941] ftdi_sio 5-1:0.0: device disconnected [ 617.493188][ T9246] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 617.502297][ T9246] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 618.316719][ T9238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.905'. [ 618.454836][ T9254] IPv6: addrconf: prefix option has invalid lifetime [ 619.258045][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 619.258067][ T30] audit: type=1326 audit(1755681046.095:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 619.494436][ T30] audit: type=1326 audit(1755681046.135:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 619.705023][ T30] audit: type=1326 audit(1755681046.145:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73c0d8ec23 code=0x7ffc0000 [ 619.783123][ T30] audit: type=1326 audit(1755681046.155:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73c0d8ec23 code=0x7ffc0000 [ 619.863452][ T30] audit: type=1326 audit(1755681046.245:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 620.044311][ T30] audit: type=1326 audit(1755681046.245:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 620.130987][ T9289] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 620.140142][ T9289] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 620.846385][ T30] audit: type=1326 audit(1755681046.285:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 620.867800][ T30] audit: type=1326 audit(1755681046.295:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 620.934885][ T30] audit: type=1326 audit(1755681046.295:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 620.967011][ T30] audit: type=1326 audit(1755681046.305:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9265 comm="syz.1.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 620.974150][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 625.957625][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.964112][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.166623][ T9320] netlink: 'syz.1.931': attribute type 4 has an invalid length. [ 627.239249][ T9320] netlink: 152 bytes leftover after parsing attributes in process `syz.1.931'. [ 627.313697][ T9320] أ: renamed from bond0 (while UP) [ 627.668100][ T9330] FAULT_INJECTION: forcing a failure. [ 627.668100][ T9330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.728209][ T9330] CPU: 0 UID: 0 PID: 9330 Comm: syz.1.935 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 627.728243][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.728255][ T9330] Call Trace: [ 627.728263][ T9330] [ 627.728269][ T9330] dump_stack_lvl+0x189/0x250 [ 627.728289][ T9330] ? __pfx____ratelimit+0x10/0x10 [ 627.728303][ T9330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.728317][ T9330] ? __pfx__printk+0x10/0x10 [ 627.728340][ T9330] should_fail_ex+0x414/0x560 [ 627.728358][ T9330] _copy_to_user+0x31/0xb0 [ 627.728377][ T9330] simple_read_from_buffer+0xe1/0x170 [ 627.728393][ T9330] proc_fail_nth_read+0x1df/0x250 [ 627.728411][ T9330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.728427][ T9330] ? rw_verify_area+0x258/0x650 [ 627.728445][ T9330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.728460][ T9330] vfs_read+0x200/0x980 [ 627.728482][ T9330] ? __pfx___mutex_lock+0x10/0x10 [ 627.728496][ T9330] ? __pfx_vfs_read+0x10/0x10 [ 627.728514][ T9330] ? __fget_files+0x2a/0x420 [ 627.728535][ T9330] ? __fget_files+0x3a0/0x420 [ 627.728548][ T9330] ? __fget_files+0x2a/0x420 [ 627.728566][ T9330] ksys_read+0x145/0x250 [ 627.728580][ T9330] ? __pfx_ksys_read+0x10/0x10 [ 627.728589][ T9330] ? rcu_is_watching+0x15/0xb0 [ 627.728605][ T9330] ? do_syscall_64+0xbe/0x3b0 [ 627.728628][ T9330] do_syscall_64+0xfa/0x3b0 [ 627.728640][ T9330] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.728652][ T9330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.728665][ T9330] ? clear_bhb_loop+0x60/0xb0 [ 627.728679][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.728691][ T9330] RIP: 0033:0x7f73c0d8d5fc [ 627.728703][ T9330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 627.728714][ T9330] RSP: 002b:00007f73c1c45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.728728][ T9330] RAX: ffffffffffffffda RBX: 00007f73c0fb5fa0 RCX: 00007f73c0d8d5fc [ 627.728742][ T9330] RDX: 000000000000000f RSI: 00007f73c1c450a0 RDI: 0000000000000004 [ 627.728754][ T9330] RBP: 00007f73c1c45090 R08: 0000000000000000 R09: 0000000000000000 [ 627.728766][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.728778][ T9330] R13: 00007f73c0fb6038 R14: 00007f73c0fb5fa0 R15: 00007ffef63081d8 [ 627.728813][ T9330] [ 627.958034][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.031107][ T9333] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 628.040550][ T9333] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 628.852243][ T9342] netlink: 400 bytes leftover after parsing attributes in process `syz.1.937'. [ 628.864577][ T9344] netdevsim netdevsim0: Direct firmware load for ‏ failed with error -2 [ 628.882101][ T9344] netdevsim netdevsim0: Falling back to sysfs fallback for: ‏ [ 630.811959][ T9373] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 630.821015][ T9373] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 631.666510][ T9379] FAULT_INJECTION: forcing a failure. [ 631.666510][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.725532][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.1.949 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 631.725562][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.725574][ T9379] Call Trace: [ 631.725582][ T9379] [ 631.725591][ T9379] dump_stack_lvl+0x189/0x250 [ 631.725619][ T9379] ? __pfx____ratelimit+0x10/0x10 [ 631.725642][ T9379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.725665][ T9379] ? __pfx__printk+0x10/0x10 [ 631.725705][ T9379] should_fail_ex+0x414/0x560 [ 631.725733][ T9379] _copy_to_user+0x31/0xb0 [ 631.725774][ T9379] simple_read_from_buffer+0xe1/0x170 [ 631.725802][ T9379] proc_fail_nth_read+0x1df/0x250 [ 631.725832][ T9379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.725860][ T9379] ? rw_verify_area+0x258/0x650 [ 631.725890][ T9379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.725917][ T9379] vfs_read+0x200/0x980 [ 631.725955][ T9379] ? __pfx___mutex_lock+0x10/0x10 [ 631.725980][ T9379] ? __pfx_vfs_read+0x10/0x10 [ 631.726012][ T9379] ? __fget_files+0x2a/0x420 [ 631.726040][ T9379] ? __fget_files+0x3a0/0x420 [ 631.726061][ T9379] ? __fget_files+0x2a/0x420 [ 631.726094][ T9379] ksys_read+0x145/0x250 [ 631.726115][ T9379] ? __pfx_ksys_read+0x10/0x10 [ 631.726130][ T9379] ? rcu_is_watching+0x15/0xb0 [ 631.726159][ T9379] ? do_syscall_64+0xbe/0x3b0 [ 631.726187][ T9379] do_syscall_64+0xfa/0x3b0 [ 631.726208][ T9379] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.726229][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.726249][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 631.726275][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.726293][ T9379] RIP: 0033:0x7f73c0d8d5fc [ 631.726312][ T9379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 631.726329][ T9379] RSP: 002b:00007f73c1c45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 631.726350][ T9379] RAX: ffffffffffffffda RBX: 00007f73c0fb5fa0 RCX: 00007f73c0d8d5fc [ 631.726365][ T9379] RDX: 000000000000000f RSI: 00007f73c1c450a0 RDI: 0000000000000003 [ 631.726377][ T9379] RBP: 00007f73c1c45090 R08: 0000000000000000 R09: 0000000000000000 [ 631.726390][ T9379] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 631.726403][ T9379] R13: 00007f73c0fb6038 R14: 00007f73c0fb5fa0 R15: 00007ffef63081d8 [ 631.726439][ T9379] [ 631.957669][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.972170][ T9382] netlink: 400 bytes leftover after parsing attributes in process `syz.4.950'. [ 632.946073][ T9392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.519024][ T9405] overlayfs: failed to resolve './file0': -2 [ 634.928862][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 635.114716][ T9417] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 635.123840][ T9417] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 635.295119][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.861793][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 635.885618][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.020658][ T9] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 636.108921][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.355964][ T9] usb 3-1: config 0 descriptor?? [ 636.636575][ T9422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.961'. [ 636.906296][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 636.924743][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 636.973307][ T9] usb 3-1: USB disconnect, device number 19 [ 637.639459][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 637.639481][ T30] audit: type=1326 audit(1755681064.555:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.0.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 637.758943][ T30] audit: type=1326 audit(1755681064.555:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.0.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 641.473441][ T9480] vivid-000: ================= START STATUS ================= [ 641.484154][ T9480] vivid-000: Test Pattern: 75% Colorbar [ 641.490000][ T9480] vivid-000: Fill Percentage of Frame: 100 [ 641.495825][ T9480] vivid-000: Horizontal Movement: No Movement [ 641.501938][ T9480] vivid-000: Vertical Movement: No Movement [ 641.508023][ T9480] vivid-000: OSD Text Mode: All [ 641.512967][ T9480] vivid-000: Show Border: false [ 641.517834][ T9480] vivid-000: Show Square: false [ 641.522733][ T9480] vivid-000: Sensor Flipped Horizontally: false [ 641.529099][ T9480] vivid-000: Sensor Flipped Vertically: false [ 641.535230][ T9480] vivid-000: Insert SAV Code in Image: false [ 641.541311][ T9480] vivid-000: Insert EAV Code in Image: false [ 641.547344][ T9480] vivid-000: Insert Video Guard Band: false [ 641.553360][ T9480] vivid-000: Reduced Framerate: false [ 641.558823][ T9480] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 641.566509][ T9480] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 641.574709][ T9480] vivid-000: Enable Capture Cropping: true [ 641.580610][ T9480] vivid-000: Enable Capture Composing: true [ 641.586561][ T9480] vivid-000: Enable Capture Scaler: true [ 641.592306][ T9480] vivid-000: Timestamp Source: End of Frame [ 641.598250][ T9480] vivid-000: Colorspace: sRGB [ 641.603041][ T9480] vivid-000: Transfer Function: Default [ 641.608640][ T9480] vivid-000: Y'CbCr Encoding: Default [ 641.614269][ T9480] vivid-000: HSV Encoding: Hue 0-179 [ 641.619637][ T9480] vivid-000: Quantization: Default [ 641.624830][ T9480] vivid-000: Apply Alpha To Red Only: false [ 641.630863][ T9480] vivid-000: Standard Aspect Ratio: 4x3 [ 641.636462][ T9480] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 641.644282][ T9480] vivid-000: DV Timings: 640x480p59 inactive [ 641.650385][ T9480] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 641.657725][ T9480] vivid-000: Maximum EDID Blocks: 2 [ 641.663035][ T9480] vivid-000: Limited RGB Range (16-235): false [ 641.669287][ T9480] vivid-000: Rx RGB Quantization Range: Automatic [ 641.675817][ T9480] vivid-000: Power Present: 0x00000001 [ 641.681403][ T9480] tpg source WxH: 320x180 (Y'CbCr) [ 641.686547][ T9480] tpg field: 1 [ 641.690016][ T9480] tpg crop: (0,0)/320x180 [ 641.694396][ T9480] tpg compose: (0,0)/320x180 [ 641.699060][ T9480] tpg colorspace: 5 [ 641.702896][ T9480] tpg transfer function: 0/0 [ 641.707517][ T9480] tpg Y'CbCr encoding: 7/0 [ 641.712214][ T9480] tpg quantization: 0/0 [ 641.716406][ T9480] tpg RGB range: 0/2 [ 641.720362][ T9480] vivid-000: ================== END STATUS ================== [ 645.573981][ T9526] Invalid logical block size (67108864) [ 646.255246][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 650.839922][ T9552] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 650.848905][ T9552] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 652.243685][ T9555] netlink: 68 bytes leftover after parsing attributes in process `syz.4.995'. [ 652.853559][ T9564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.860866][ T9564] IPv6: NLM_F_CREATE should be set when creating new route [ 652.868288][ T9564] IPv6: NLM_F_CREATE should be set when creating new route [ 652.875583][ T9564] IPv6: NLM_F_CREATE should be set when creating new route [ 652.970297][ T30] audit: type=1804 audit(1755681079.865:55): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.999" name="/newroot/189/file1" dev="fuse" ino=1 res=1 errno=0 [ 653.020044][ T30] audit: type=1800 audit(1755681079.865:56): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.999" name="/" dev="fuse" ino=1 res=0 errno=0 [ 654.135876][ T9572] dlm: no local IP address has been set [ 654.141553][ T9572] dlm: cannot start dlm midcomms -107 [ 656.970691][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 657.767601][ T9606] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 657.776627][ T9606] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 658.593550][ T9610] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 658.636532][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 658.656388][ T9610] wlan1: mtu less than device minimum [ 658.698889][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 658.707869][ T9610] أ: (slave wlan1): Error -22 calling dev_set_mtu [ 658.757387][ T9612] netlink: 'syz.0.1012': attribute type 7 has an invalid length. [ 658.999835][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1014'. [ 659.352655][ T9626] block nbd0: NBD_DISCONNECT [ 659.945426][ T9635] dlm: no local IP address has been set [ 659.951314][ T9635] dlm: cannot start dlm midcomms -107 [ 664.296788][ T9650] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 664.306034][ T9650] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 665.120043][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 665.159178][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 665.201487][ T9660] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 665.201846][ T9656] netlink: 'syz.0.1026': attribute type 7 has an invalid length. [ 667.135925][ T9679] netlink: 'syz.4.1031': attribute type 237 has an invalid length. [ 667.481001][ T9681] nbd: socks must be embedded in a SOCK_ITEM attr [ 667.548057][ T9682] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.557161][ T9682] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.566567][ T9682] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.575523][ T9682] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.138110][ T9672] overlayfs: failed to resolve './file0': -2 [ 668.173088][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 669.480497][ T9686] Cannot find del_set index 286 as target [ 670.798830][ T9710] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 670.819295][ T9710] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 671.634124][ T9702] dlm: no local IP address has been set [ 671.640121][ T9702] dlm: cannot start dlm midcomms -107 [ 671.739493][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 673.357476][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 673.644555][ T9746] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 673.653653][ T9746] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 677.275405][ T9776] /dev/sg0: Can't lookup blockdev [ 677.562195][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 678.892317][ T9788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 682.713688][ T9810] netlink: 'syz.3.1067': attribute type 4 has an invalid length. [ 682.772456][ T9810] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1067'. [ 683.854234][ T9814] tipc: Enabling of bearer rejected, failed to enable media [ 683.890847][ T9826] xt_addrtype: ipv6 does not support BROADCAST matching [ 685.964465][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.971201][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.329720][ T9852] netlink: 'syz.0.1080': attribute type 2 has an invalid length. [ 686.818880][ T9854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1078'. [ 686.850938][ T9856] FAULT_INJECTION: forcing a failure. [ 686.850938][ T9856] name failslab, interval 1, probability 0, space 0, times 0 [ 686.912854][ T9856] CPU: 1 UID: 0 PID: 9856 Comm: syz.3.1079 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 686.912884][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 686.912897][ T9856] Call Trace: [ 686.912905][ T9856] [ 686.912914][ T9856] dump_stack_lvl+0x189/0x250 [ 686.912954][ T9856] ? __pfx____ratelimit+0x10/0x10 [ 686.912978][ T9856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.913002][ T9856] ? __pfx__printk+0x10/0x10 [ 686.913037][ T9856] ? __pfx___might_resched+0x10/0x10 [ 686.913058][ T9856] ? fs_reclaim_acquire+0x7d/0x100 [ 686.913087][ T9856] should_fail_ex+0x414/0x560 [ 686.913116][ T9856] should_failslab+0xa8/0x100 [ 686.913141][ T9856] __kmalloc_noprof+0xcb/0x4f0 [ 686.913161][ T9856] ? copy_splice_read+0x143/0x9b0 [ 686.913188][ T9856] copy_splice_read+0x143/0x9b0 [ 686.913220][ T9856] ? __pfx_iter_file_splice_write+0x10/0x10 [ 686.913242][ T9856] ? __pfx_copy_splice_read+0x10/0x10 [ 686.913260][ T9856] ? rcu_read_lock_any_held+0xb3/0x120 [ 686.913286][ T9856] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 686.913314][ T9856] ? direct_splice_actor+0x10c/0x160 [ 686.913337][ T9856] ? __pfx_iter_file_splice_write+0x10/0x10 [ 686.913360][ T9856] ? file_end_write+0x156/0x250 [ 686.913382][ T9856] ? direct_splice_actor+0x10c/0x160 [ 686.913405][ T9856] ? __pfx_copy_splice_read+0x10/0x10 [ 686.913425][ T9856] splice_direct_to_actor+0x4a6/0xcc0 [ 686.913472][ T9856] ? __pfx_direct_splice_actor+0x10/0x10 [ 686.913494][ T9856] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 686.913529][ T9856] do_splice_direct+0x181/0x270 [ 686.913563][ T9856] ? __pfx_do_splice_direct+0x10/0x10 [ 686.913585][ T9856] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 686.913617][ T9856] ? rw_verify_area+0x258/0x650 [ 686.913654][ T9856] do_sendfile+0x4da/0x7e0 [ 686.913691][ T9856] ? __pfx_do_sendfile+0x10/0x10 [ 686.913732][ T9856] __se_sys_sendfile64+0xd9/0x190 [ 686.913760][ T9856] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 686.913781][ T9856] ? rcu_is_watching+0x15/0xb0 [ 686.913810][ T9856] ? do_syscall_64+0xbe/0x3b0 [ 686.913846][ T9856] do_syscall_64+0xfa/0x3b0 [ 686.913867][ T9856] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.913890][ T9856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.913910][ T9856] ? clear_bhb_loop+0x60/0xb0 [ 686.913936][ T9856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.913955][ T9856] RIP: 0033:0x7f5ddb18ebe9 [ 686.913974][ T9856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.913992][ T9856] RSP: 002b:00007f5ddbf75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 686.914015][ T9856] RAX: ffffffffffffffda RBX: 00007f5ddb3b5fa0 RCX: 00007f5ddb18ebe9 [ 686.914030][ T9856] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 686.914042][ T9856] RBP: 00007f5ddbf75090 R08: 0000000000000000 R09: 0000000000000000 [ 686.914055][ T9856] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000002 [ 686.914068][ T9856] R13: 00007f5ddb3b6038 R14: 00007f5ddb3b5fa0 R15: 00007ffe61e03cd8 [ 686.914102][ T9856] [ 687.543710][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 687.631321][ T9871] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 687.640482][ T9871] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 688.543891][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 688.602371][ T9875] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 688.814693][ T9875] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1084'. [ 688.856581][ T9882] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 688.865662][ T9882] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 689.907541][ T9890] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1088'. [ 692.259870][ T30] audit: type=1326 audit(1755681119.185:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 692.430228][ T30] audit: type=1326 audit(1755681119.185:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 692.455850][ T30] audit: type=1326 audit(1755681119.205:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 692.479357][ T30] audit: type=1326 audit(1755681119.205:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 693.217090][ T30] audit: type=1326 audit(1755681119.205:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 693.246192][ T30] audit: type=1326 audit(1755681119.215:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ddb18d550 code=0x7ffc0000 [ 693.330216][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 693.400160][ T9912] dlm: no local IP address has been set [ 693.405849][ T9912] dlm: cannot start dlm midcomms -107 [ 693.609243][ T30] audit: type=1326 audit(1755681119.215:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 693.806940][ T30] audit: type=1326 audit(1755681119.215:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 693.969778][ T30] audit: type=1326 audit(1755681119.225:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 693.998975][ T30] audit: type=1326 audit(1755681119.225:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9899 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 694.810357][ T9922] netlink: 'syz.2.1095': attribute type 1 has an invalid length. [ 694.877760][ T9921] delete_channel: no stack [ 696.133392][ T9944] netlink: 'syz.4.1100': attribute type 4 has an invalid length. [ 696.146298][ T9944] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1100'. [ 696.226222][ T9945] netlink: 400 bytes leftover after parsing attributes in process `syz.1.1101'. [ 696.397932][ T978] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 697.284037][ T978] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 697.358910][ T978] usb 3-1: config 2 has no interface number 0 [ 697.385952][ T978] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 697.506573][ T9954] dlm: no local IP address has been set [ 697.512474][ T9954] dlm: cannot start dlm midcomms -107 [ 697.887752][ T978] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 697.919198][ T978] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2 [ 697.928435][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.948636][ T978] usb 3-1: Product: syz [ 697.953209][ T978] usb 3-1: Manufacturer: syz [ 697.958330][ T978] usb 3-1: SerialNumber: syz [ 697.985327][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.006205][ T978] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 698.069993][ T978] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 698.216553][ T978] usb 3-1: USB disconnect, device number 20 [ 698.983584][ T978] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 699.000540][ T978] kobil_sct 3-1:2.45: device disconnected [ 700.165663][ T9969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.266478][ T9969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.595863][ T9969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.618865][ T9969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.859590][ T9969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.902013][ T9969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.973988][ T9992] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 701.001060][ T9992] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1115'. [ 701.093015][ T9969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.112583][ T9969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.202742][ T9995] netlink: 400 bytes leftover after parsing attributes in process `syz.0.1114'. [ 702.763707][ T9969] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.778654][ T9969] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.046823][ T9969] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.069562][ T9969] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.125786][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'. [ 703.130470][T10005] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 703.259413][ T9969] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.267878][ T9969] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.310965][ T9969] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.319723][ T9969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.585256][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 703.585277][ T30] audit: type=1400 audit(1755681130.505:79): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=10011 comm="syz.3.1119" name="232" dev="tmpfs" ino=1255 [ 703.645539][ T30] audit: type=1400 audit(1755681130.555:80): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=10011 comm="syz.3.1119" name="raw-gadget" dev="devtmpfs" ino=820 [ 703.684724][ T30] audit: type=1400 audit(1755681130.605:81): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=10011 comm="syz.3.1119" name="raw-gadget" dev="devtmpfs" ino=820 [ 703.806080][ T978] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 703.959342][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 703.973275][ T978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 703.992998][ T978] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 704.012328][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.099973][ T978] usb 5-1: config 0 descriptor?? [ 704.800980][ T978] hid-u2fzero 0003:20A0:4287.0006: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 704.815849][ T30] audit: type=1326 audit(1755681131.725:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 704.837353][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.869864][ T978] hid-u2fzero 0003:20A0:4287.0006: NitroKey U2F LED initialised [ 704.877776][ T978] hid-u2fzero 0003:20A0:4287.0006: NitroKey U2F RNG initialised [ 704.899651][ T30] audit: type=1326 audit(1755681131.725:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 704.948879][ T30] audit: type=1326 audit(1755681131.725:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 704.970406][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.150666][ T30] audit: type=1326 audit(1755681131.765:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 705.172867][ T30] audit: type=1326 audit(1755681131.765:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 705.194686][ T30] audit: type=1326 audit(1755681131.765:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 705.217726][ T30] audit: type=1326 audit(1755681131.765:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10026 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 705.242873][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.250571][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.068302][T10044] netlink: 'syz.3.1127': attribute type 4 has an invalid length. [ 707.109593][T10044] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1127'. [ 708.160734][ T5951] usb 5-1: USB disconnect, device number 18 [ 708.168449][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 709.229849][T10059] netdevsim netdevsim3: Direct firmware load for ‏ failed with error -2 [ 709.299927][T10059] netdevsim netdevsim3: Falling back to sysfs fallback for: ‏ [ 709.408915][T10066] binder: BINDER_SET_CONTEXT_MGR already set [ 709.415308][T10066] binder: 10062:10066 ioctl 4018620d 200000000240 returned -16 [ 710.390039][T10079] loop6: detected capacity change from 0 to 6656 [ 710.396841][T10079] buffer_io_error: 4 callbacks suppressed [ 710.396853][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.410529][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.418975][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.426942][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.434851][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.444217][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.452177][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.460090][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.467959][T10079] ldm_validate_partition_table(): Disk read failed. [ 710.474615][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.482524][T10079] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.490503][T10079] Dev loop6: unable to read RDB block 0 [ 710.496610][T10079] loop6: unable to read partition table [ 710.502560][T10079] loop_reread_partitions: partition scan of loop6 (3ں ¾‚³ک) failed (rc=-5) [ 710.577739][T10078] netlink: 'syz.4.1137': attribute type 4 has an invalid length. [ 710.585704][T10078] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1137'. [ 711.190417][T10083] xt_nat: multiple ranges no longer supported [ 713.601261][T10103] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 713.612453][T10103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1144'. [ 714.468113][T10111] input: syz0 as /devices/virtual/input/input11 [ 714.743373][T10113] openvswitch: netlink: IP tunnel dst address not specified [ 716.076542][T10134] input: syz0 as /devices/virtual/input/input12 [ 716.951917][T10137] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 717.010691][T10137] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 717.233984][T10140] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 717.269320][ C1] Illegal XDP return value 16128 on prog (id 295) dev veth0_to_bridge, expect packet loss! [ 718.126021][ T9] lo speed is unknown, defaulting to 1000 [ 718.155102][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 718.240330][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 718.626630][T10154] dlm: no local IP address has been set [ 718.632766][T10154] dlm: cannot start dlm midcomms -107 [ 719.464545][T10178] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 719.473722][T10178] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 720.202533][T10182] usb usb8: usbfs: process 10182 (syz.2.1169) did not claim interface 0 before use [ 720.233160][T10182] FAULT_INJECTION: forcing a failure. [ 720.233160][T10182] name failslab, interval 1, probability 0, space 0, times 0 [ 720.298443][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 720.329209][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.2.1169 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 720.329239][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.329251][T10182] Call Trace: [ 720.329260][T10182] [ 720.329269][T10182] dump_stack_lvl+0x189/0x250 [ 720.329298][T10182] ? __pfx____ratelimit+0x10/0x10 [ 720.329321][T10182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.329344][T10182] ? __pfx__printk+0x10/0x10 [ 720.329374][T10182] ? __pfx___might_resched+0x10/0x10 [ 720.329397][T10182] ? fs_reclaim_acquire+0x7d/0x100 [ 720.329428][T10182] should_fail_ex+0x414/0x560 [ 720.329457][T10182] should_failslab+0xa8/0x100 [ 720.329482][T10182] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 720.329503][T10182] ? __kernfs_new_node+0x9c/0x7e0 [ 720.329534][T10182] kstrdup+0x42/0x100 [ 720.329562][T10182] __kernfs_new_node+0x9c/0x7e0 [ 720.329585][T10182] ? __lock_acquire+0xab9/0xd20 [ 720.329613][T10182] ? __pfx___kernfs_new_node+0x10/0x10 [ 720.329636][T10182] ? kernfs_root+0x1c/0x230 [ 720.329669][T10182] ? kernfs_root+0x1c/0x230 [ 720.329692][T10182] ? kernfs_root+0x1c/0x230 [ 720.329723][T10182] kernfs_new_node+0x102/0x210 [ 720.329752][T10182] kernfs_create_link+0xa7/0x200 [ 720.329784][T10182] sysfs_do_create_link_sd+0x83/0x110 [ 720.329809][T10182] driver_sysfs_add+0x89/0x210 [ 720.329845][T10182] device_bind_driver+0x17/0x60 [ 720.329875][T10182] usb_driver_claim_interface+0x23a/0x450 [ 720.329917][T10182] claimintf+0x166/0x240 [ 720.329947][T10182] parse_usbdevfs_streams+0x77a/0x990 [ 720.330000][T10182] proc_free_streams+0x57/0x130 [ 720.330030][T10182] usbdev_ioctl+0x15f7/0x20c0 [ 720.330061][T10182] ? __pfx_usbdev_ioctl+0x10/0x10 [ 720.330079][T10182] ? __fget_files+0x2a/0x420 [ 720.330101][T10182] ? __fget_files+0x3a0/0x420 [ 720.330122][T10182] ? __fget_files+0x2a/0x420 [ 720.330149][T10182] ? bpf_lsm_file_ioctl+0x9/0x20 [ 720.330174][T10182] ? __pfx_usbdev_ioctl+0x10/0x10 [ 720.330193][T10182] __se_sys_ioctl+0xfc/0x170 [ 720.330226][T10182] do_syscall_64+0xfa/0x3b0 [ 720.330254][T10182] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.330274][T10182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.330295][T10182] ? clear_bhb_loop+0x60/0xb0 [ 720.330320][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.330340][T10182] RIP: 0033:0x7fa4fd58ebe9 [ 720.330360][T10182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.330377][T10182] RSP: 002b:00007fa4fe3bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.330400][T10182] RAX: ffffffffffffffda RBX: 00007fa4fd7b5fa0 RCX: 00007fa4fd58ebe9 [ 720.330416][T10182] RDX: 0000200000000180 RSI: 000000008008551d RDI: 0000000000000003 [ 720.330429][T10182] RBP: 00007fa4fe3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 720.330442][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.330454][T10182] R13: 00007fa4fd7b6038 R14: 00007fa4fd7b5fa0 R15: 00007fff20681f58 [ 720.330490][T10182] [ 722.406409][T10213] Invalid source name [ 722.410673][T10213] UBIFS error (pid: 10213): cannot open "usrquota", error -22 [ 723.445307][T10231] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 723.461974][T10231] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 724.872812][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 726.596697][T10255] usb usb8: usbfs: process 10255 (syz.3.1183) did not claim interface 0 before use [ 726.607286][T10255] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 728.091474][T10258] overlayfs: failed to resolve './file0': -2 [ 728.709469][T10268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1188'. [ 728.752244][T10268] bridge0: port 3(vlan0) entered blocking state [ 728.908346][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 729.010635][T10268] bridge0: port 3(vlan0) entered disabled state [ 729.025427][T10273] x_tables: duplicate underflow at hook 3 [ 729.094176][T10268] vlan0: entered allmulticast mode [ 729.176799][T10268] dummy0: entered allmulticast mode [ 729.188424][T10268] vlan0: entered promiscuous mode [ 729.208822][T10268] dummy0: entered promiscuous mode [ 729.600624][T10278] loop2: detected capacity change from 0 to 7 [ 729.652138][T10278] Dev loop2: unable to read RDB block 7 [ 729.666761][T10280] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1190'. [ 729.678379][T10278] loop2: unable to read partition table [ 729.695533][T10278] loop2: partition table beyond EOD, truncated [ 729.728540][T10278] loop_reread_partitions: partition scan of loop2 (‏被xü—ںرà– ) failed (rc=-5) [ 729.746213][T10283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.055181][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 731.398552][T10304] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 731.407710][T10304] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 733.053610][T10313] xt_TCPMSS: Only works on TCP SYN packets [ 734.755773][T10326] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 735.701039][T10331] mkiss: ax0: crc mode is auto. [ 736.690864][T10339] netdevsim netdevsim0: Direct firmware load for ‏ failed with error -2 [ 736.738100][T10339] netdevsim netdevsim0: Falling back to sysfs fallback for: ‏ [ 736.776367][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 737.181352][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 738.356967][T10359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1211'. [ 738.375298][T10359] openvswitch: netlink: Duplicate or invalid key (type 0). [ 738.416786][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.984857][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 740.069393][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 740.281269][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.313075][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.340512][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 740.549749][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 740.557851][ T24] usb 4-1: SerialNumber: syz [ 740.832982][T10395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1217'. [ 741.839204][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 742.698790][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 742.828541][ T24] usb 4-1: 0:2 : does not exist [ 742.905465][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 742.914227][ T9] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 742.928365][ T24] usb 4-1: USB disconnect, device number 22 [ 743.728520][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 743.737643][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 743.863944][ T9] usb 2-1: config 254 has no interface number 0 [ 743.896031][ T9] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 743.916611][ T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.943914][ T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 743.966172][ T9] usb 2-1: config 254 interface 235 has no altsetting 0 [ 744.039759][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 744.055730][ T9] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 744.091503][ T9] usb 2-1: Product: syz [ 744.095748][ T9] usb 2-1: Manufacturer: syz [ 744.113161][ T9] usb 2-1: SerialNumber: syz [ 744.297724][T10407] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 745.157008][T10407] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 745.223423][ T9] usbtest 2-1:254.235: Linux gadget zero [ 745.229767][ T9] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 745.680623][T10431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 745.692873][T10431] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 746.619855][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 746.653101][ T5951] usb 2-1: USB disconnect, device number 11 [ 746.822348][T10439] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 747.031449][T10442] overlayfs: failed to resolve './file0': -2 [ 747.174918][T10442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1233'. [ 747.416151][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.423218][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.319232][T10451] netdevsim netdevsim0: Direct firmware load for ‏ failed with error -2 [ 748.361792][T10451] netdevsim netdevsim0: Falling back to sysfs fallback for: ‏ [ 749.101356][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 750.160912][T10468] dlm: no local IP address has been set [ 750.166605][T10468] dlm: cannot start dlm midcomms -107 [ 750.236377][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 750.354737][T10473] lo speed is unknown, defaulting to 1000 [ 750.421657][T10473] wg1 speed is unknown, defaulting to 1000 [ 750.960042][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 750.989502][ T9] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 751.007999][ T9] usb 1-1: Product: syz [ 751.013257][ T9] usb 1-1: Manufacturer: syz [ 751.017900][ T9] usb 1-1: SerialNumber: syz [ 751.129063][ T9] usb 1-1: config 0 descriptor?? [ 751.149684][ T9] ch341 1-1:0.0: ch341-uart converter detected [ 752.609191][ T9] usb 1-1: failed to send control message: -110 [ 752.617183][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 753.168880][ T24] usb 1-1: USB disconnect, device number 11 [ 753.176516][ T24] ch341 1-1:0.0: device disconnected [ 753.274555][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 753.274578][ T30] audit: type=1326 audit(1755681180.165:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 753.333393][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 753.375287][ T30] audit: type=1326 audit(1755681180.165:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 753.449877][ T30] audit: type=1326 audit(1755681180.165:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 753.713516][ T30] audit: type=1326 audit(1755681180.165:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73c0d8d550 code=0x7ffc0000 [ 753.939118][ T30] audit: type=1326 audit(1755681180.165:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 754.021397][ T30] audit: type=1326 audit(1755681180.165:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 754.172603][ T30] audit: type=1326 audit(1755681180.165:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 754.195749][ T30] audit: type=1326 audit(1755681180.165:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 754.243374][ T30] audit: type=1326 audit(1755681180.165:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 754.435866][T10501] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1248'. [ 754.507305][ T30] audit: type=1326 audit(1755681180.165:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10489 comm="syz.1.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73c0d8ebe9 code=0x7ffc0000 [ 755.689342][T10506] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 755.708352][T10506] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 757.309329][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 757.649449][T10520] netlink: 'syz.1.1252': attribute type 4 has an invalid length. [ 757.657507][T10520] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1252'. [ 760.214282][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 764.531411][T10577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.571363][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 765.571378][ T30] audit: type=1326 audit(1755681192.485:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 766.198748][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.460978][ T30] audit: type=1326 audit(1755681192.485:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 766.718963][ T30] audit: type=1326 audit(1755681192.485:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 766.807370][ T30] audit: type=1326 audit(1755681192.485:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 766.902062][ T30] audit: type=1326 audit(1755681192.485:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f043538d550 code=0x7ffc0000 [ 767.047795][ T30] audit: type=1326 audit(1755681192.485:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 767.070577][ T30] audit: type=1326 audit(1755681192.485:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 767.880982][ T30] audit: type=1326 audit(1755681192.485:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 768.154624][ T30] audit: type=1326 audit(1755681192.485:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 768.345808][ T30] audit: type=1326 audit(1755681192.485:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10588 comm="syz.0.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 768.367404][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.978866][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 770.064998][T10624] netlink: 'syz.2.1277': attribute type 4 has an invalid length. [ 770.107537][T10624] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1277'. [ 770.145915][T10624] أ: renamed from bond0 (while UP) [ 770.164292][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 770.235710][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.312660][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.364869][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 770.417422][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 770.459460][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.508137][ T10] usb 1-1: config 0 descriptor?? [ 770.579790][ T10] usbhid 1-1:0.0: can't add hid device: -22 [ 770.601755][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 773.310298][ T5941] usb 1-1: USB disconnect, device number 12 [ 773.571820][T10645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.291311][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1285'. [ 774.358810][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 774.519036][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 774.527366][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.547109][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 774.582571][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.662809][ T24] usb 4-1: Product: syz [ 774.704917][ T24] usb 4-1: Manufacturer: syz [ 774.742190][ T24] usb 4-1: SerialNumber: syz [ 775.185745][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 775.372316][T10664] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 775.380586][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.398999][T10664] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1289'. [ 775.435905][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.461124][ T5193] bcm5974 4-1:1.0: could not read from device [ 775.499929][ T5193] bcm5974 4-1:1.0: could not read from device [ 775.509280][ T24] usb 4-1: USB disconnect, device number 23 [ 777.145415][T10700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.189129][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 779.239142][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 779.338879][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 779.360671][ T24] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 779.376011][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.384324][ T24] usb 5-1: Product: syz [ 779.394033][ T5941] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 779.404208][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.417948][ T24] usb 5-1: Manufacturer: syz [ 779.423609][ T24] usb 5-1: SerialNumber: syz [ 779.432886][ T5941] usb 1-1: config 0 descriptor?? [ 779.443166][ T24] usb 5-1: config 0 descriptor?? [ 779.453736][ T5941] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 780.036592][ T24] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 780.091651][ T24] gp8psk: usb in 128 operation failed. [ 780.111439][ T24] gp8psk: usb in 137 operation failed. [ 780.117219][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 780.156514][ T24] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 780.172391][ T24] usb 5-1: media controller created [ 780.248195][ T5941] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 780.335505][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.710074][ T5941] gspca_cpia1: usb_control_msg 02, error -32 [ 780.969672][ T24] gp8psk_fe: Frontend revision 1 attached [ 780.989484][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 781.029437][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 781.195630][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 781.195652][ T30] audit: type=1326 audit(1755681208.115:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.268475][ T30] audit: type=1326 audit(1755681208.115:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.326545][ T30] audit: type=1326 audit(1755681208.115:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.362686][ T24] gp8psk: usb in 138 operation failed. [ 781.368448][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 781.390882][ T30] audit: type=1326 audit(1755681208.115:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.412522][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.478146][ T30] audit: type=1326 audit(1755681208.115:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4fd58d550 code=0x7ffc0000 [ 781.557196][ T30] audit: type=1326 audit(1755681208.115:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.578867][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.635430][T10745] xt_connbytes: Forcing CT accounting to be enabled [ 781.639962][ T24] gp8psk: found Genpix USB device pID = 201 (hex) [ 781.659937][ T30] audit: type=1326 audit(1755681208.115:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.668762][ T24] usb 5-1: USB disconnect, device number 19 [ 781.777764][ T30] audit: type=1326 audit(1755681208.115:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 781.913494][ T30] audit: type=1326 audit(1755681208.125:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 782.152657][ T5941] gspca_cpia1: usb_control_msg 02, error -110 [ 782.310110][ T5941] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 782.350019][ T30] audit: type=1326 audit(1755681208.125:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10738 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 783.488140][T10755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.815625][ T5941] usb 1-1: USB disconnect, device number 13 [ 783.941055][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 784.234385][T10767] usb usb8: usbfs: process 10767 (syz.0.1320) did not claim interface 0 before use [ 784.244590][T10767] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 785.098214][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 786.244030][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 786.244054][ T30] audit: type=1326 audit(1755681213.135:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 786.306669][ T30] audit: type=1326 audit(1755681213.135:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 786.387220][ T30] audit: type=1326 audit(1755681213.135:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 786.642978][ T30] audit: type=1326 audit(1755681213.135:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 786.892752][ T30] audit: type=1326 audit(1755681213.135:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 786.993679][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 787.003094][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 787.068426][ T30] audit: type=1326 audit(1755681213.135:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f043538d550 code=0x7ffc0000 [ 787.177742][ T30] audit: type=1326 audit(1755681213.135:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 787.569253][ T30] audit: type=1326 audit(1755681213.135:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 787.809595][T10797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1329'. [ 788.164546][ T30] audit: type=1326 audit(1755681213.135:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 788.284955][ T30] audit: type=1326 audit(1755681213.135:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10780 comm="syz.0.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f043538ebe9 code=0x7ffc0000 [ 788.476358][T10805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.741038][T10813] netlink: 'syz.0.1334': attribute type 4 has an invalid length. [ 789.753152][T10813] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1334'. [ 790.514230][T10813] أ: renamed from bond0 (while UP) [ 794.140366][T10851] tipc: Failed to obtain node identity [ 794.145941][T10851] tipc: Enabling of bearer rejected, failed to enable media [ 795.359088][T10860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.083367][T10881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 798.415373][T10896] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 798.447061][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 798.447082][ T30] audit: type=1326 audit(1755681225.355:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10897 comm="syz.1.1363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73c0d8ebe9 code=0x0 [ 798.710631][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 798.808907][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 798.823498][T10905] netdevsim netdevsim2: Direct firmware load for ‏ failed with error -2 [ 798.832264][T10905] netdevsim netdevsim2: Falling back to sysfs fallback for: ‏ [ 798.868936][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 798.876276][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.895549][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.918415][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 798.927846][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 798.969147][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 798.976148][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.979754][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 799.128805][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 799.129805][ T10] usb 4-1: config 0 descriptor?? [ 799.231158][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 799.343221][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 799.429977][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 799.519936][T10896] veth1_to_bond: entered allmulticast mode [ 799.523932][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 799.527199][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 799.578844][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 799.628245][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 799.656440][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 799.659218][T10896] أ: (slave bond_slave_1): Releasing backup interface [ 799.667983][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.694203][ T24] usb 1-1: config 0 descriptor?? [ 799.757044][T10915] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 799.959550][T10896] veth1_to_bond (unregistering): left allmulticast mode [ 799.988800][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 801.361946][T10922] dlm: no local IP address has been set [ 801.369285][T10922] dlm: cannot start dlm midcomms -107 [ 802.073213][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 802.103790][T10927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.398731][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 802.622762][ T5951] usb 1-1: USB disconnect, device number 14 [ 802.648776][ T10] usb 4-1: USB disconnect, device number 24 [ 802.692838][ T5951] usblp0: removed [ 805.075677][T10963] dlm: no local IP address has been set [ 805.081595][T10963] dlm: cannot start dlm midcomms -107 [ 805.845269][T10973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1383'. [ 806.992033][T10979] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 807.000277][T10979] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 807.009514][T10979] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 807.017413][T10979] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 807.591247][T10985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.852573][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.861552][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.938056][T11010] dlm: no local IP address has been set [ 808.943826][T11010] dlm: cannot start dlm midcomms -107 [ 810.751839][T11021] netdevsim netdevsim2: Direct firmware load for ‏ failed with error -2 [ 810.800495][T11021] netdevsim netdevsim2: Falling back to sysfs fallback for: ‏ [ 812.567791][T11042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.279478][T11048] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 813.417234][T11048] أ: (slave dummy0): Enslaving as an active interface with an up link [ 813.805749][T11058] dlm: no local IP address has been set [ 813.811511][T11058] dlm: cannot start dlm midcomms -107 [ 814.316250][T11064] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 815.484457][T11075] bio_check_eod: 2 callbacks suppressed [ 815.484520][T11075] syz.0.1410: attempt to access beyond end of device [ 815.484520][T11075] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 815.503909][T11075] FAT-fs (loop1): unable to read boot sector [ 816.388847][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 816.789310][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 817.064776][T11091] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1416'. [ 817.874621][ T24] usb 1-1: unable to read config index 0 descriptor/all [ 817.886926][ T24] usb 1-1: can't read configurations, error -71 [ 818.205275][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1414'. [ 818.286240][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 818.999971][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1414'. [ 819.078037][T11096] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1414'. [ 819.238157][T11104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.709886][T11107] dlm: no local IP address has been set [ 819.725883][T11107] dlm: cannot start dlm midcomms -107 [ 820.042218][T11112] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 820.051241][T11112] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 823.812311][ T30] audit: type=1326 audit(1755681250.725:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 823.843356][ T30] audit: type=1326 audit(1755681250.765:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 823.932107][ T30] audit: type=1326 audit(1755681250.765:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 824.064553][ T30] audit: type=1326 audit(1755681250.765:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 824.214212][ T30] audit: type=1326 audit(1755681250.765:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 824.375856][ T30] audit: type=1326 audit(1755681250.795:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ddb18d550 code=0x7ffc0000 [ 824.685233][ T30] audit: type=1326 audit(1755681250.795:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 824.685291][ T30] audit: type=1326 audit(1755681250.795:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 824.706947][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.534071][ T30] audit: type=1326 audit(1755681250.795:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 825.566868][ T30] audit: type=1326 audit(1755681250.795:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.3.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 825.839273][T11163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.788319][T11189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.048775][ T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 829.180286][T11197] FAULT_INJECTION: forcing a failure. [ 829.180286][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.240235][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.3.1446 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 829.240266][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.240284][T11197] Call Trace: [ 829.240292][T11197] [ 829.240301][T11197] dump_stack_lvl+0x189/0x250 [ 829.240330][T11197] ? __pfx____ratelimit+0x10/0x10 [ 829.240353][T11197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.240377][T11197] ? __pfx__printk+0x10/0x10 [ 829.240418][T11197] should_fail_ex+0x414/0x560 [ 829.240446][T11197] _copy_to_user+0x31/0xb0 [ 829.240476][T11197] bpf_test_finish+0x24e/0x700 [ 829.240516][T11197] ? __pfx_bpf_test_finish+0x10/0x10 [ 829.240550][T11197] ? slab_build_skb+0x273/0x3e0 [ 829.240583][T11197] bpf_prog_test_run_skb+0xed5/0x1560 [ 829.240630][T11197] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 829.240659][T11197] bpf_prog_test_run+0x2c7/0x340 [ 829.240694][T11197] __sys_bpf+0x4a4/0x860 [ 829.240726][T11197] ? __pfx___sys_bpf+0x10/0x10 [ 829.240770][T11197] ? ksys_write+0x22a/0x250 [ 829.240793][T11197] ? __pfx_ksys_write+0x10/0x10 [ 829.240809][T11197] ? rcu_is_watching+0x15/0xb0 [ 829.240841][T11197] __x64_sys_bpf+0x7c/0x90 [ 829.240867][T11197] do_syscall_64+0xfa/0x3b0 [ 829.240888][T11197] ? lockdep_hardirqs_on+0x9c/0x150 [ 829.240910][T11197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.240929][T11197] ? clear_bhb_loop+0x60/0xb0 [ 829.240954][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.240973][T11197] RIP: 0033:0x7f5ddb18ebe9 [ 829.240992][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.241008][T11197] RSP: 002b:00007f5ddbf75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 829.241028][T11197] RAX: ffffffffffffffda RBX: 00007f5ddb3b5fa0 RCX: 00007f5ddb18ebe9 [ 829.241042][T11197] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 829.241055][T11197] RBP: 00007f5ddbf75090 R08: 0000000000000000 R09: 0000000000000000 [ 829.241067][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.241079][T11197] R13: 00007f5ddb3b6038 R14: 00007f5ddb3b5fa0 R15: 00007ffe61e03cd8 [ 829.241112][T11197] [ 829.242178][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.439593][ T5951] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 829.589290][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 829.596576][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.645571][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.668710][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 829.682952][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 829.687943][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 829.692480][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.778887][ T5951] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 829.788004][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.847594][ T5951] usb 5-1: config 0 descriptor?? [ 829.868706][ T24] usb 1-1: Product: syz [ 829.872939][ T24] usb 1-1: Manufacturer: syz [ 829.877562][ T24] usb 1-1: SerialNumber: syz [ 830.309186][T11195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.632908][T11195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.882185][ T5951] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 830.893175][ T10] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 830.913076][ T5951] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 830.932870][ T5951] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 830.942990][ T5951] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 830.958771][ T5951] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 830.968033][ T5951] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 831.173009][T11195] random: crng reseeded on system resumption [ 831.209728][ T5951] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 831.224491][ T5951] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 831.232927][ T24] usb 1-1: USB disconnect, device number 17 [ 831.657691][ T978] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 831.752019][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 831.765167][ T5951] usb 5-1: USB disconnect, device number 20 [ 831.772288][ T978] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 831.786134][ T10] usb 3-1: config index 0 descriptor too short (expected 43, got 36) [ 831.800702][ T10] usb 3-1: config 7 has an invalid interface number: 199 but max is 0 [ 831.818177][ T978] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 831.849416][ T10] usb 3-1: config 7 has an invalid descriptor of length 7, skipping remainder of the config [ 831.927319][T11217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.146522][ T978] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 832.158217][ T10] usb 3-1: config 7 has no interface number 0 [ 832.169478][ T10] usb 3-1: too many endpoints for config 7 interface 199 altsetting 1: 245, using maximum allowed: 30 [ 832.208080][ T10] usb 3-1: config 7 interface 199 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 832.219333][ T10] usb 3-1: config 7 interface 199 altsetting 1 endpoint 0x3 has invalid maxpacket 32, setting to 0 [ 832.241811][ T10] usb 3-1: No eUSB2 isoc ep 3 companion for config 7 interface 199 altsetting 1 [ 832.268725][ T10] usb 3-1: config 7 interface 199 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 245 [ 832.302243][ T10] usb 3-1: config 7 interface 199 has no altsetting 0 [ 832.321015][ T10] usb 3-1: string descriptor 0 read error: -22 [ 832.327393][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 832.348715][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.385404][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 832.894336][T11235] can: request_module (can-proto-0) failed. [ 832.930795][ T10] gspca_sn9c20x: Write register 1000 failed -110 [ 832.937270][ T10] gspca_sn9c20x: Device initialization failed [ 833.270123][ T10] gspca_sn9c20x 3-1:7.199: probe with driver gspca_sn9c20x failed with error -110 [ 833.436415][ T10] usb 3-1: USB disconnect, device number 21 [ 833.548614][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 834.721555][T11254] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 834.731776][T11254] wlan1: mtu less than device minimum [ 834.739845][T11254] أ: (slave wlan1): Error -22 calling dev_set_mtu [ 834.838513][T11262] FAULT_INJECTION: forcing a failure. [ 834.838513][T11262] name failslab, interval 1, probability 0, space 0, times 0 [ 834.890103][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.4.1462 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 834.890135][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.890148][T11262] Call Trace: [ 834.890156][T11262] [ 834.890165][T11262] dump_stack_lvl+0x189/0x250 [ 834.890196][T11262] ? __pfx____ratelimit+0x10/0x10 [ 834.890220][T11262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.890244][T11262] ? __pfx__printk+0x10/0x10 [ 834.890273][T11262] ? __pfx___might_resched+0x10/0x10 [ 834.890295][T11262] ? fs_reclaim_acquire+0x7d/0x100 [ 834.890325][T11262] should_fail_ex+0x414/0x560 [ 834.890352][T11262] should_failslab+0xa8/0x100 [ 834.890377][T11262] __kmalloc_noprof+0xcb/0x4f0 [ 834.890395][T11262] ? tomoyo_mount_permission+0x27a/0x970 [ 834.890418][T11262] ? tomoyo_encode+0x28b/0x550 [ 834.890449][T11262] tomoyo_encode+0x28b/0x550 [ 834.890478][T11262] ? tomoyo_mount_permission+0x27a/0x970 [ 834.890503][T11262] tomoyo_mount_permission+0x331/0x970 [ 834.890532][T11262] ? __pfx___schedule+0x10/0x10 [ 834.890552][T11262] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 834.890608][T11262] ? trace_irq_disable+0x37/0x110 [ 834.890636][T11262] ? preempt_schedule_irq+0xde/0x150 [ 834.890666][T11262] ? irqentry_exit+0x74/0x90 [ 834.890687][T11262] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.890721][T11262] ? tomoyo_sb_mount+0x21/0x40 [ 834.890762][T11262] security_sb_mount+0xec/0x350 [ 834.890796][T11262] path_mount+0xbc/0xfe0 [ 834.890817][T11262] ? user_path_at+0x44/0x60 [ 834.890843][T11262] ? kmem_cache_free+0x18f/0x400 [ 834.890882][T11262] __se_sys_mount+0x317/0x410 [ 834.890914][T11262] ? __pfx___se_sys_mount+0x10/0x10 [ 834.890934][T11262] ? rcu_is_watching+0x15/0xb0 [ 834.890963][T11262] ? do_syscall_64+0xbe/0x3b0 [ 834.890983][T11262] ? __x64_sys_mount+0x20/0xc0 [ 834.891008][T11262] do_syscall_64+0xfa/0x3b0 [ 834.891038][T11262] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.891058][T11262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.891079][T11262] ? clear_bhb_loop+0x60/0xb0 [ 834.891105][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.891125][T11262] RIP: 0033:0x7f647eb8ebe9 [ 834.891144][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.891161][T11262] RSP: 002b:00007f647f9b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 834.891183][T11262] RAX: ffffffffffffffda RBX: 00007f647edb5fa0 RCX: 00007f647eb8ebe9 [ 834.891197][T11262] RDX: 0000200000001c80 RSI: 0000200000001c40 RDI: 0000000000000000 [ 834.891211][T11262] RBP: 00007f647f9b4090 R08: 00002000000000c0 R09: 0000000000000000 [ 834.891224][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.891236][T11262] R13: 00007f647edb6038 R14: 00007f647edb5fa0 R15: 00007ffe25bba9d8 [ 834.891270][T11262] [ 835.595546][T11270] netlink: 'syz.3.1463': attribute type 4 has an invalid length. [ 835.602556][T11271] tc_dump_action: action bad kind [ 835.635424][T11270] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1463'. [ 835.914480][T11276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.467939][T11278] fuse: Unknown parameter 'grou00000000000000000000' [ 836.655429][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 837.437176][T11292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1470'. [ 838.358969][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 838.396983][T11301] tipc: Started in network mode [ 838.402140][T11301] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 838.411651][T11301] tipc: Enabled bearer , priority 10 [ 838.431985][T11301] siw: device registration error -23 [ 839.278765][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 839.285980][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 839.306922][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.332509][ T5890] pvrusb2: Hardware description: Terratec Grabster AV400 [ 839.352356][ T5890] pvrusb2: ********** [ 839.356653][ T5890] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 839.366992][ T5890] pvrusb2: Important functionality might not be entirely working. [ 839.388724][ T5890] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 839.418316][ T5890] pvrusb2: ********** [ 839.467355][T11308] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1477'. [ 839.540595][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 839.541346][ T24] tipc: Node number set to 9349802 [ 839.617863][T11308] x_tables: duplicate underflow at hook 2 [ 839.713911][ T2342] pvrusb2: Invalid write control endpoint [ 839.909146][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.076936][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 840.111934][ T5951] usb 3-1: USB disconnect, device number 22 [ 840.121680][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 840.157431][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 840.171054][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.182592][ T2342] pvrusb2: Invalid write control endpoint [ 840.188555][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 840.205735][ T10] usb 5-1: Product: syz [ 840.215849][ T10] usb 5-1: Manufacturer: syz [ 840.224150][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 840.232511][ T10] usb 5-1: SerialNumber: syz [ 840.241623][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 840.253858][ T10] usb 5-1: config 0 descriptor?? [ 840.259443][ T2342] pvrusb2: Device being rendered inoperable [ 840.281975][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 840.298901][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 840.309972][ T2342] pvrusb2: Attached sub-driver cx25840 [ 840.315724][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 840.343556][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 840.434476][T11316] netlink: 'syz.0.1479': attribute type 4 has an invalid length. [ 840.443653][T11316] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1479'. [ 840.482210][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 840.490480][ T978] usb 5-1: USB disconnect, device number 21 [ 840.491438][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 840.538912][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 840.709367][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 840.715754][T11323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.745343][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 840.758339][ T10] usb 2-1: config 179 has no interface number 0 [ 840.765809][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 840.783034][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 840.803932][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 840.815880][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 840.841867][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 840.875036][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 840.886966][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.976425][T11313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 841.581702][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 841.688487][T11331] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 841.717340][T11325] syz.2.1482 (11325) used greatest stack depth: 19680 bytes left [ 841.830607][ T10] usb 2-1: USB disconnect, device number 12 [ 841.830674][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 841.844912][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 842.035945][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 842.045297][ T30] audit: type=1326 audit(1755681268.955:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 842.394628][ T30] audit: type=1326 audit(1755681268.995:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11334 comm="syz.2.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fd58ebe9 code=0x7ffc0000 [ 842.801555][T11351] netlink: 400 bytes leftover after parsing attributes in process `syz.4.1490'. [ 842.919598][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 842.939322][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 842.985747][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 845.417130][T11368] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.434327][T11374] netlink: 'syz.1.1494': attribute type 4 has an invalid length. [ 845.443588][T11374] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1494'. [ 845.453052][T11368] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.548597][T11368] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.559131][T11368] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.579104][T11378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.707702][T11379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 845.714285][T11379] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 845.774642][T11379] vhci_hcd vhci_hcd.0: Device attached [ 845.867127][T11368] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.887678][T11368] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.901350][T11380] vhci_hcd: connection closed [ 845.925876][ T6101] vhci_hcd: stop threads [ 845.935475][ T6101] vhci_hcd: release socket [ 845.958283][ T6101] vhci_hcd: disconnect device [ 845.988878][ T978] vhci_hcd: vhci_device speed not set [ 846.068610][T11368] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.108865][T11368] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.241653][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 846.398262][T11368] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.407763][T11368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.633088][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 846.885984][T11368] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.901704][T11368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.908123][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 846.937445][T11368] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.947408][T11368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.992863][T11368] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.079142][T11368] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.153465][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 847.163222][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.172573][ T24] usb 2-1: Product: syz [ 847.176774][ T24] usb 2-1: Manufacturer: syz [ 847.181461][ T24] usb 2-1: SerialNumber: syz [ 847.225428][ T24] usb 2-1: config 0 descriptor?? [ 847.494561][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 847.506537][T11419] netlink: 'syz.4.1511': attribute type 4 has an invalid length. [ 847.514555][T11419] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1511'. [ 847.851490][ T24] usb 2-1: USB disconnect, device number 13 [ 848.390742][T11424] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 848.776174][T11428] overlayfs: failed to resolve './file0': -2 [ 849.289956][T11443] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 849.437940][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 849.495975][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 849.695629][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1520'. [ 849.871533][T11455] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1521'. [ 851.008958][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 851.024012][ T30] audit: type=1326 audit(1755681277.945:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 851.096788][ T30] audit: type=1326 audit(1755681277.945:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 851.118386][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.246857][ T30] audit: type=1326 audit(1755681277.945:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 851.268564][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.338513][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 851.393538][ T30] audit: type=1326 audit(1755681277.945:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 851.415252][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.458454][T11478] usb usb8: usbfs: process 11478 (syz.3.1528) did not claim interface 0 before use [ 851.469156][T11478] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 852.182937][ T30] audit: type=1326 audit(1755681277.945:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 852.205492][ T30] audit: type=1326 audit(1755681277.945:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 852.320171][ T30] audit: type=1326 audit(1755681277.945:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 852.378964][T11480] usb usb8: usbfs: process 11480 (syz.0.1529) did not claim interface 0 before use [ 852.389683][T11480] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 852.598800][ T30] audit: type=1326 audit(1755681277.945:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 852.735507][ T30] audit: type=1326 audit(1755681277.955:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 852.757296][ T30] audit: type=1326 audit(1755681277.955:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11465 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddb18ebe9 code=0x7ffc0000 [ 853.118074][T11491] bridge0: entered allmulticast mode [ 853.569153][T11491] bridge0: left allmulticast mode [ 853.935724][T11511] netdevsim netdevsim2: Direct firmware load for ‏ failed with error -2 [ 853.948766][T11511] netdevsim netdevsim2: Falling back to sysfs fallback for: ‏ [ 854.108786][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 854.325047][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.738778][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.758813][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 854.779384][ T10] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 855.093616][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 855.374256][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.402540][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.423032][ T10] usb 2-1: Product: syz [ 855.440202][ T10] usb 2-1: Manufacturer: syz [ 855.452401][ T10] usb 2-1: SerialNumber: syz [ 855.482824][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 855.595993][T11527] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1542'. [ 856.840626][ T5890] usb 2-1: USB disconnect, device number 14 [ 857.374723][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 858.399075][ T5890] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 858.528954][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 858.558893][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 858.599154][ T5890] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 858.646525][ T5890] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 858.694509][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 858.745597][ T5890] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 858.781070][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.819606][ T5890] usb 4-1: Product: syz [ 858.841467][ T5890] usb 4-1: Manufacturer: syz [ 858.866336][ T5890] usb 4-1: SerialNumber: syz [ 858.965571][ T5890] usb 4-1: config 0 descriptor?? [ 859.442331][ T5890] usb 4-1: USB disconnect, device number 25 [ 859.465143][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 859.477643][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.496574][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.512822][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 859.530469][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.550248][ T10] usb 2-1: config 0 descriptor?? [ 859.560492][ T10] hub 2-1:0.0: USB hub found [ 859.764393][ T10] hub 2-1:0.0: 1 port detected [ 859.979497][T11567] overlayfs: failed to resolve './file0': -2 [ 859.995701][T11567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1555'. [ 860.392555][ T10] usb 2-1: USB disconnect, device number 15 [ 860.530427][T11574] netlink: 400 bytes leftover after parsing attributes in process `syz.4.1558'. [ 862.626204][T11584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.660851][T11606] overlayfs: failed to resolve './file0': -2 [ 863.723747][T11607] netlink: 'syz.0.1566': attribute type 4 has an invalid length. [ 863.735196][T11607] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1566'. [ 863.835290][T11605] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1567'. [ 865.403208][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 865.444706][T11624] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 865.454161][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 865.788995][ T5890] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 866.064766][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 866.212284][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.307571][ T5890] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 866.351340][ T5890] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 866.407005][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.480520][ T5890] usb 4-1: config 0 descriptor?? [ 868.763545][T11651] netlink: 400 bytes leftover after parsing attributes in process `syz.0.1579'. [ 869.965704][T11656] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 869.974805][T11656] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 870.459441][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.465813][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.817157][T11663] usb usb8: usbfs: process 11663 (syz.4.1580) did not claim interface 0 before use [ 870.827733][T11663] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 871.417810][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.546681][ T5951] usb 4-1: USB disconnect, device number 26 [ 871.709417][T11668] netlink: 'syz.2.1582': attribute type 4 has an invalid length. [ 871.857251][T11668] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1582'. [ 873.246124][T11682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1586'. [ 874.542153][T11689] overlayfs: failed to resolve './file0': -2 [ 874.656872][T11693] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1587'. [ 876.508100][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 878.121382][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 879.124130][T11733] netlink: 'syz.1.1598': attribute type 4 has an invalid length. [ 879.163238][T11733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1598'. [ 879.975123][T11736] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 881.254148][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 881.879116][T11753] overlayfs: failed to resolve './file0': -2 [ 881.921140][T11753] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1603'. [ 883.409834][T11768] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 883.419114][T11768] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 884.414500][T11780] tipc: Started in network mode [ 884.420473][T11780] tipc: Node identity 8e8d32558911, cluster identity 4711 [ 884.428221][T11780] tipc: Enabled bearer , priority 0 [ 884.462553][T11780] tipc: Resetting bearer [ 884.488452][T11779] tipc: Disabling bearer [ 884.642546][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 884.642566][ T30] audit: type=1326 audit(1755681311.565:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 884.705592][ T30] audit: type=1326 audit(1755681311.605:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647eb8d550 code=0x7ffc0000 [ 884.728464][ T30] audit: type=1326 audit(1755681311.605:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 884.751285][ T30] audit: type=1326 audit(1755681311.605:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 884.836138][ T30] audit: type=1326 audit(1755681311.605:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 884.945892][ T30] audit: type=1326 audit(1755681311.605:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 885.481306][ T30] audit: type=1326 audit(1755681311.615:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 885.602333][ T30] audit: type=1326 audit(1755681311.695:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 885.622612][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 885.696800][ T30] audit: type=1326 audit(1755681311.695:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 886.361982][ T30] audit: type=1326 audit(1755681311.775:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11785 comm="syz.4.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f647eb8ebe9 code=0x7ffc0000 [ 886.500521][T11801] overlayfs: failed to resolve './file0': -2 [ 886.510180][T11801] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1618'. [ 886.884985][T11811] fuse: Bad value for 'fd' [ 889.721446][T11815] overlayfs: failed to resolve './file0': -2 [ 889.749067][T11831] netlink: 'syz.4.1625': attribute type 4 has an invalid length. [ 889.766993][T11815] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1623'. [ 889.778857][T11831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1625'. [ 890.987887][T11860] overlayfs: failed to resolve './file0': -2 [ 891.054373][T11862] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1634'. [ 892.360835][T11870] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1636'. [ 892.777257][T11876] usb usb8: usbfs: process 11876 (syz.4.1637) did not claim interface 0 before use [ 892.787643][T11876] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 893.610038][T11872] loop8: detected capacity change from 0 to 8 [ 893.646269][T11872] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 893.660176][T11872] loop8: p1 start 3674210304 is beyond EOD, truncated [ 893.684123][T11872] loop8: p2 start 2946521549 is beyond EOD, truncated [ 893.701039][T11872] loop8: p3 start 3210040201 is beyond EOD, truncated [ 893.715253][T11872] loop8: p4 start 2187423751 is beyond EOD, truncated [ 894.078226][T11872] loop8: p5 start 1210360614 is beyond EOD, truncated [ 894.135995][T11872] loop8: p6 start 4163130221 is beyond EOD, truncated [ 894.178287][T11872] loop8: p7 start 65302515 is beyond EOD, truncated [ 894.231790][T11872] loop8: p8 start 365161308 is beyond EOD, truncated [ 894.240912][T11872] loop8: p9 start 986802111 is beyond EOD, truncated [ 894.588183][T11902] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 895.317305][T11900] FAULT_INJECTION: forcing a failure. [ 895.317305][T11900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.178627][T11900] CPU: 1 UID: 0 PID: 11900 Comm: syz.2.1646 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 896.178659][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.178671][T11900] Call Trace: [ 896.178680][T11900] [ 896.178688][T11900] dump_stack_lvl+0x189/0x250 [ 896.178717][T11900] ? __pfx____ratelimit+0x10/0x10 [ 896.178739][T11900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.178760][T11900] ? __pfx__printk+0x10/0x10 [ 896.178785][T11900] ? __might_fault+0xb0/0x130 [ 896.178820][T11900] should_fail_ex+0x414/0x560 [ 896.178850][T11900] _copy_from_user+0x2d/0xb0 [ 896.178877][T11900] kstrtouint_from_user+0xc4/0x170 [ 896.178903][T11900] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 896.178949][T11900] proc_fail_nth_write+0x88/0x240 [ 896.178974][T11900] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 896.179006][T11900] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 896.179032][T11900] vfs_write+0x27e/0xa90 [ 896.179063][T11900] ? __pfx_vfs_write+0x10/0x10 [ 896.179085][T11900] ? __fget_files+0x2a/0x420 [ 896.179114][T11900] ? __fget_files+0x3a0/0x420 [ 896.179135][T11900] ? __fget_files+0x2a/0x420 [ 896.179168][T11900] ksys_write+0x145/0x250 [ 896.179192][T11900] ? __pfx_ksys_write+0x10/0x10 [ 896.179209][T11900] ? rcu_is_watching+0x15/0xb0 [ 896.179231][T11900] ? trace_sys_enter+0x25/0x120 [ 896.179257][T11900] do_syscall_64+0xfa/0x3b0 [ 896.179277][T11900] ? lockdep_hardirqs_on+0x9c/0x150 [ 896.179297][T11900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.179316][T11900] ? clear_bhb_loop+0x60/0xb0 [ 896.179340][T11900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.179357][T11900] RIP: 0033:0x7fa4fd58d69f [ 896.179376][T11900] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 896.179392][T11900] RSP: 002b:00007fa4fe3bb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 896.179413][T11900] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa4fd58d69f [ 896.179427][T11900] RDX: 0000000000000001 RSI: 00007fa4fe3bb0a0 RDI: 0000000000000008 [ 896.179439][T11900] RBP: 00007fa4fe3bb090 R08: 0000000000000000 R09: 0000000000000000 [ 896.179452][T11900] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 896.179464][T11900] R13: 00007fa4fd7b6038 R14: 00007fa4fd7b5fa0 R15: 00007fff20681f58 [ 896.179497][T11900] [ 896.475146][T11894] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚0x0000000000000004 [ 896.508023][T11905] dlm: no local IP address has been set [ 896.514475][T11905] dlm: cannot start dlm midcomms -107 [ 897.538784][ T5890] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 897.901130][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 898.310905][T11923] overlayfs: failed to resolve './file0': -2 [ 898.318042][T11923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1650'. [ 898.338732][ T5890] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 898.644543][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.672796][ T5890] usb 2-1: config 0 descriptor?? [ 898.679017][T11919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 898.731665][T11931] netlink: 'syz.0.1653': attribute type 4 has an invalid length. [ 900.057833][ T5890] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 900.164783][T11952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1657'. [ 900.232282][T11957] netlink: 'syz.4.1658': attribute type 4 has an invalid length. [ 900.241050][T11957] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1658'. [ 900.293365][T11960] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 900.327392][T11960] أ: (slave netdevsim0): Enslaving as an active interface with an up link [ 900.425419][T11960] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 900.608570][T11964] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 900.616580][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 900.813091][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 901.038560][T11971] overlayfs: failed to resolve './file0': -2 [ 901.072683][T11971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1664'. [ 901.289008][ T5890] usb 2-1: reset full-speed USB device number 16 using dummy_hcd [ 902.979066][T11948] usb 2-1: USB disconnect, device number 16 [ 903.340578][T11999] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1672'. [ 903.509825][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 904.043413][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 904.533411][T12022] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 904.542581][T12022] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 905.535919][T12029] overlayfs: failed to resolve './file0': -2 [ 908.399503][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 908.979057][T12063] program syz.4.1683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.997540][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1683'. [ 909.146341][T12042] binder: 12041:12042 ioctl c0306201 200000000480 returned -14 [ 909.333705][T12067] netdevsim netdevsim2: Direct firmware load for 0 failed with error -2 [ 909.352210][T12067] netdevsim netdevsim2: Falling back to sysfs fallback for: 0 [ 912.811549][T12086] overlayfs: failed to resolve './file0': -2 [ 912.882387][T12088] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1694'. [ 912.919027][T11948] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 913.815319][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 914.525149][T12104] bridge0: entered allmulticast mode [ 914.549948][T12104] bridge0: left allmulticast mode [ 914.597311][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 914.787506][ T978] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 915.270904][T12117] tmpfs: Bad value for 'mpol' [ 915.384972][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 915.644276][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 915.651232][ T978] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 915.660626][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.688672][ T978] usb 3-1: config 0 descriptor?? [ 916.577916][T12130] overlayfs: failed to resolve './file0': -2 [ 916.638317][T12130] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1708'. [ 917.063465][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 917.073871][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 917.246428][ T978] usb 3-1: USB disconnect, device number 23 [ 918.123945][T12142] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 918.152845][T12142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1711'. [ 918.194354][T12142] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.229524][T12142] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.246996][T12142] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.288817][T11948] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 918.308462][T12142] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.370333][T12150] usb usb8: usbfs: process 12150 (syz.0.1714) did not claim interface 0 before use [ 918.381203][T12150] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 919.303809][T12142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.328831][T12142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.353574][T12142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.382791][T12142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.441903][T11948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 919.458901][T11948] usb 2-1: not running at top speed; connect to a high speed hub [ 919.467607][T12142] team0: Port device geneve0 added [ 919.474874][T11948] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 919.483485][T11948] usb 2-1: config 4 has an invalid descriptor of length 23, skipping remainder of the config [ 919.501695][T11948] usb 2-1: config 4 has no interface number 0 [ 919.522494][T11948] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 919.532300][T11948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.545609][T11948] usb 2-1: Product: syz [ 919.550385][T11948] usb 2-1: Manufacturer: syz [ 919.555157][T11948] usb 2-1: SerialNumber: syz [ 919.578833][T12153] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 919.605467][T12153] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1715'. [ 919.730990][T12159] netlink: 'syz.3.1716': attribute type 4 has an invalid length. [ 919.779037][T12159] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1716'. [ 919.860586][T11948] usb 2-1: USB disconnect, device number 17 [ 920.804013][T12169] netdevsim netdevsim0: Direct firmware load for 0 failed with error -2 [ 920.833166][T12169] netdevsim netdevsim0: Falling back to sysfs fallback for: 0 [ 920.966149][T12174] dlm: no local IP address has been set [ 921.429596][T12174] dlm: cannot start dlm midcomms -107 [ 921.467666][T12176] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1722'. [ 921.651396][T12180] overlayfs: failed to resolve './file0': -2 [ 922.088589][T12178] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1723'. [ 922.534301][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 924.462605][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 924.472014][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 926.040275][T12217] RDS: rds_bind could not find a transport for fe80::38, load rds_tcp or rds_rdma? [ 926.506057][ T5951] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 926.608182][T12222] overlayfs: failed to resolve './file0': -2 [ 926.632505][T12222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1736'. [ 926.703614][T12230] fuse: Bad value for 'rootmode' [ 926.712626][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 926.720003][ T5951] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 926.742848][ T5951] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 926.757609][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.814656][ T5951] usb 1-1: Product: syz [ 926.829784][ T5951] usb 1-1: Manufacturer: syz [ 926.834438][ T5951] usb 1-1: SerialNumber: syz [ 926.860855][ T5951] usb 1-1: config 0 descriptor?? [ 927.458808][ T978] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 927.618850][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 928.978809][ T978] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 929.013528][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.033992][ T978] usb 5-1: config 0 has no interface number 1 [ 929.053654][ T978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 929.069360][ T978] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 929.086685][ T978] usb 5-1: Product: syz [ 929.092041][ T978] usb 5-1: Manufacturer: syz [ 929.097662][ T978] usb 5-1: SerialNumber: syz [ 929.102593][T11948] usb 1-1: USB disconnect, device number 18 [ 929.134046][ T978] usb 5-1: config 0 descriptor?? [ 929.214323][T12254] netlink: 'syz.0.1745': attribute type 10 has an invalid length. [ 929.218833][ T5951] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 929.376690][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.429069][ T5951] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 929.438449][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.447195][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.455361][ T5951] usb 4-1: Product: syz [ 929.461673][ T5951] usb 4-1: Manufacturer: syz [ 929.476606][ T5951] usb 4-1: SerialNumber: syz [ 929.495400][ T5951] usb 4-1: config 0 descriptor?? [ 929.513468][ T5951] pwc: Logitech/Cisco VT Camera webcam detected. [ 929.923530][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.962581][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.083513][ T978] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 930.113027][ T978] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 930.153853][ T978] usb 5-1: USB disconnect, device number 23 [ 930.339077][T11948] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 930.499030][T11948] usb 2-1: device descriptor read/64, error -71 [ 930.786044][T12267] overlayfs: failed to resolve './file0': -2 [ 930.879586][T11948] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 930.905536][T12266] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1748'. [ 931.247214][ T5951] pwc: Failed to set LED on/off time (-71) [ 931.253507][T11948] usb 2-1: device descriptor read/64, error -71 [ 931.265579][ T5951] pwc: send_video_command error -71 [ 931.292019][ T5951] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 931.619321][T11948] usb usb2-port1: attempt power cycle [ 931.745960][ T5951] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 931.752465][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.768993][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.823754][T12274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.836323][ T5951] usb 4-1: USB disconnect, device number 27 [ 931.893701][T12274] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 931.960524][ T9103] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 932.121189][T11948] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 932.132318][ T6077] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 932.202464][T11948] usb 2-1: device descriptor read/8, error -71 [ 932.658863][T11948] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 932.709770][T11948] usb 2-1: device descriptor read/8, error -71 [ 932.849308][T11948] usb usb2-port1: unable to enumerate USB device [ 932.949995][T12291] [ 932.952394][T12291] ====================================================== [ 932.959444][T12291] WARNING: possible circular locking dependency detected [ 932.966477][T12291] 6.16.0-syzkaller #0 Not tainted [ 932.971509][T12291] ------------------------------------------------------ [ 932.978524][T12291] syz.3.1753/12291 is trying to acquire lock: [ 932.984594][T12291] ffff8880256f4188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 932.995583][T12291] [ 932.995583][T12291] but task is already holding lock: [ 933.003302][T12291] ffff8880256f4230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 933.012219][T12291] [ 933.012219][T12291] which lock already depends on the new lock. [ 933.012219][T12291] [ 933.022635][T12291] [ 933.022635][T12291] the existing dependency chain (in reverse order) is: [ 933.031657][T12291] [ 933.031657][T12291] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 933.039590][T12291] lock_acquire+0x120/0x360 [ 933.044625][T12291] __mutex_lock+0x182/0xe80 [ 933.049667][T12291] refcount_dec_and_mutex_lock+0x30/0xa0 [ 933.055835][T12291] nbd_config_put+0x2c/0x790 [ 933.060955][T12291] nbd_release+0xfe/0x140 [ 933.065818][T12291] bdev_release+0x533/0x650 [ 933.070850][T12291] blkdev_release+0x15/0x20 [ 933.075886][T12291] __fput+0x449/0xa70 [ 933.080404][T12291] fput_close_sync+0x119/0x200 [ 933.085700][T12291] __x64_sys_close+0x7f/0x110 [ 933.090907][T12291] do_syscall_64+0xfa/0x3b0 [ 933.095940][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.102358][T12291] [ 933.102358][T12291] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 933.110217][T12291] lock_acquire+0x120/0x360 [ 933.115245][T12291] __mutex_lock+0x182/0xe80 [ 933.120274][T12291] __del_gendisk+0x129/0x9e0 [ 933.125391][T12291] del_gendisk+0xe8/0x160 [ 933.130250][T12291] loop_remove+0x42/0xc0 [ 933.135027][T12291] loop_control_ioctl+0x4ac/0x5a0 [ 933.140577][T12291] __se_sys_ioctl+0xfc/0x170 [ 933.145702][T12291] do_syscall_64+0xfa/0x3b0 [ 933.150733][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.157154][T12291] [ 933.157154][T12291] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 933.165594][T12291] validate_chain+0xb9b/0x2140 [ 933.170891][T12291] __lock_acquire+0xab9/0xd20 [ 933.176177][T12291] lock_acquire+0x120/0x360 [ 933.181210][T12291] down_write+0x96/0x1f0 [ 933.185983][T12291] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 933.192233][T12291] nbd_start_device+0x16c/0xac0 [ 933.197614][T12291] nbd_ioctl+0x636/0xeb0 [ 933.202388][T12291] blkdev_ioctl+0x5a8/0x6d0 [ 933.207416][T12291] __se_sys_ioctl+0xfc/0x170 [ 933.212536][T12291] do_syscall_64+0xfa/0x3b0 [ 933.217565][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.223980][T12291] [ 933.223980][T12291] other info that might help us debug this: [ 933.223980][T12291] [ 933.234208][T12291] Chain exists of: [ 933.234208][T12291] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 933.234208][T12291] [ 933.248387][T12291] Possible unsafe locking scenario: [ 933.248387][T12291] [ 933.255852][T12291] CPU0 CPU1 [ 933.261225][T12291] ---- ---- [ 933.266588][T12291] lock(&nbd->config_lock); [ 933.271185][T12291] lock(&disk->open_mutex); [ 933.278305][T12291] lock(&nbd->config_lock); [ 933.285446][T12291] lock(&set->update_nr_hwq_lock); [ 933.290737][T12291] [ 933.290737][T12291] *** DEADLOCK *** [ 933.290737][T12291] [ 933.298885][T12291] 1 lock held by syz.3.1753/12291: [ 933.303994][T12291] #0: ffff8880256f4230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 933.313324][T12291] [ 933.313324][T12291] stack backtrace: [ 933.319216][T12291] CPU: 1 UID: 0 PID: 12291 Comm: syz.3.1753 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 933.319235][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 933.319245][T12291] Call Trace: [ 933.319253][T12291] [ 933.319261][T12291] dump_stack_lvl+0x189/0x250 [ 933.319284][T12291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.319301][T12291] ? __pfx__printk+0x10/0x10 [ 933.319322][T12291] ? print_lock_name+0xde/0x100 [ 933.319342][T12291] print_circular_bug+0x2ee/0x310 [ 933.319362][T12291] check_noncircular+0x134/0x160 [ 933.319385][T12291] validate_chain+0xb9b/0x2140 [ 933.319403][T12291] ? trace_sched_exit_tp+0x38/0x120 [ 933.319425][T12291] ? __schedule+0x16c8/0x4c90 [ 933.319446][T12291] __lock_acquire+0xab9/0xd20 [ 933.319463][T12291] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 933.319483][T12291] lock_acquire+0x120/0x360 [ 933.319496][T12291] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 933.319516][T12291] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 933.319543][T12291] down_write+0x96/0x1f0 [ 933.319560][T12291] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 933.319580][T12291] ? __pfx_down_write+0x10/0x10 [ 933.319596][T12291] ? rcu_is_watching+0x15/0xb0 [ 933.319614][T12291] ? __mutex_lock+0xa6d/0xe80 [ 933.319631][T12291] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 933.319652][T12291] ? nbd_ioctl+0x131/0xeb0 [ 933.319672][T12291] ? __pfx___mutex_lock+0x10/0x10 [ 933.319691][T12291] nbd_start_device+0x16c/0xac0 [ 933.319711][T12291] ? security_capable+0x7e/0x2e0 [ 933.319733][T12291] nbd_ioctl+0x636/0xeb0 [ 933.319754][T12291] ? __pfx_nbd_ioctl+0x10/0x10 [ 933.319771][T12291] ? __asan_memset+0x22/0x50 [ 933.319791][T12291] ? smack_file_ioctl+0x24a/0x340 [ 933.319806][T12291] ? __pfx_smack_file_ioctl+0x10/0x10 [ 933.319821][T12291] ? __pfx_nbd_ioctl+0x10/0x10 [ 933.319839][T12291] blkdev_ioctl+0x5a8/0x6d0 [ 933.319858][T12291] ? __pfx_blkdev_ioctl+0x10/0x10 [ 933.319873][T12291] ? __fget_files+0x2a/0x420 [ 933.319893][T12291] ? bpf_lsm_file_ioctl+0x9/0x20 [ 933.319910][T12291] ? __pfx_blkdev_ioctl+0x10/0x10 [ 933.319927][T12291] __se_sys_ioctl+0xfc/0x170 [ 933.319950][T12291] do_syscall_64+0xfa/0x3b0 [ 933.319967][T12291] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.319982][T12291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.319997][T12291] ? clear_bhb_loop+0x60/0xb0 [ 933.320014][T12291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.320029][T12291] RIP: 0033:0x7f5ddb18ebe9 [ 933.320043][T12291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.320057][T12291] RSP: 002b:00007f5ddbf33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 933.320074][T12291] RAX: ffffffffffffffda RBX: 00007f5ddb3b6180 RCX: 00007f5ddb18ebe9 [ 933.320086][T12291] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 933.320096][T12291] RBP: 00007f5ddb211e19 R08: 0000000000000000 R09: 0000000000000000 [ 933.320106][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.320115][T12291] R13: 00007f5ddb3b6218 R14: 00007f5ddb3b6180 R15: 00007ffe61e03cd8 [ 933.320132][T12291] [ 933.814589][T12298] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1754'. [ 933.827214][T12291] block nbd3: shutting down sockets [ 934.078748][ T978] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 934.228920][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 934.235590][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 934.244672][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.255407][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 934.262497][ T978] pvrusb2: ********** [ 934.266505][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 934.277261][ T978] pvrusb2: Important functionality might not be entirely working. [ 934.285297][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 934.297798][ T978] pvrusb2: ********** [ 934.663588][T12300] netlink: 'syz.0.1756': attribute type 3 has an invalid length. [ 934.673372][ T2342] pvrusb2: Invalid write control endpoint [ 934.700382][ T2342] pvrusb2: Invalid write control endpoint [ 934.706183][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 934.715771][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 934.723463][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 934.733762][ T2342] pvrusb2: Device being rendered inoperable [ 934.741505][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 934.748590][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 934.756581][ T2342] pvrusb2: Attached sub-driver cx25840 [ 934.762116][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 934.772315][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 936.694042][ T5951] usb 1-1: USB disconnect, device number 19