last executing test programs: 2m30.440332543s ago: executing program 2 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2m30.196119381s ago: executing program 2 (id=1423): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000740)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x795}], 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x22002) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x400000) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f00000000c0)=0x7) 2m30.118194651s ago: executing program 2 (id=1424): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2eb4c00000000000, 0x242801) dup2(r0, r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, &(0x7f0000000080)={0x10, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m29.781880964s ago: executing program 2 (id=1425): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001600)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x21000000, 0x0) wait4(r2, 0x0, 0x20000000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000010c0)={&(0x7f00000000c0)="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", 0x1000}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 2m28.175883013s ago: executing program 2 (id=1438): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x80, 0x3, 0x38414262, 0x9, 0x4, 0x2, 0x2, 0x10, 0x1, 0x2, 0x0, 0x3}}) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x90) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x2, 0x8, 0x6, 0x2, 0x9d, 0x8000008, &(0x7f00000001c0)="b3e3ae25df13fd238b86f23528292fb3e9796d75f9d21f8d5dc087ee34fd0249de77eae5467811485a99a03b01a9afcde1c0f8e8e3067bd78c01c5b970ebd7a69c90e502d1a3d280d231d8c367c49371fb3dd01b395c375183a1dd19785fef46b112063818a4c99214b654d5128a682c7ae3dda8ba41de5cb67d53db1e777170e60598f037fa550f21d4d28b0f31ad9ae7a5b669d895235d416ec94b76"}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 2m27.276838958s ago: executing program 2 (id=1445): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') (async) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) flistxattr(r0, &(0x7f0000000080)=""/212, 0xd4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d", 0x12}], 0x100000000000000e}, 0x24004880) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8008, 0x0) 2m12.212964349s ago: executing program 32 (id=1445): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') (async) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) flistxattr(r0, &(0x7f0000000080)=""/212, 0xd4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d", 0x12}], 0x100000000000000e}, 0x24004880) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8008, 0x0) 2m1.795356656s ago: executing program 3 (id=1709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a0000000000000000000000ff000000000000004000000100000000200002000a00000000000000fe8000000000000000000000000000aa000000000d0001007564703a73"], 0x6c}}, 0x0) 2m1.638285488s ago: executing program 3 (id=1711): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) listen(r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x321242, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 2m1.476051175s ago: executing program 3 (id=1713): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073"], 0x94}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x24) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, &(0x7f0000000000)=0x51) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'caif0\x00', 0x200}) r5 = creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x6) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073"], 0x94}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) (async) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x24) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, &(0x7f0000000000)=0x51) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'caif0\x00', 0x200}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETLED(r5, 0x4b32, 0x6) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) 2m1.3160061s ago: executing program 3 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) 2m1.27434271s ago: executing program 3 (id=1717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private}}}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xc41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x3, 0x0, 0x81, 0x3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f00000001c0)={0xffffffffffffffff, 0x8e59, 0xbc, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000005004d564b"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2m1.209936272s ago: executing program 3 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002780)={0x0, 0x10, "0948ca94a1cb091dc2b19c7f52685346"}, &(0x7f00000025c0)=0x18) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x335700, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x23, 0x96, {0x96, 0x31, "68cc14701b13ba9098a605f80b24315a8d982db2b8a86f30dfa3231fe5ce977fa23b3667ddeaf44ee97f1f4f57fb074bf3386672edc07c6f6d75ed25e7862c7b6c4ac3aba51a3241896914b84665cb05ab25a0f505813fbe3cf223713caf2015a8df190870d776a51ac63dce9e6b9a69d9665b44888dc7e61a5dea1d1f3f7a4c3c77ae09a9282f78ca63729090fe9cdcbaf0f9e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x15) r7 = dup(r6) ppoll(&(0x7f0000000140)=[{r7, 0x51}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) umount2(&(0x7f0000000140)='./cgroup\x00', 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 1m45.989087841s ago: executing program 33 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002780)={0x0, 0x10, "0948ca94a1cb091dc2b19c7f52685346"}, &(0x7f00000025c0)=0x18) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x335700, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x23, 0x96, {0x96, 0x31, "68cc14701b13ba9098a605f80b24315a8d982db2b8a86f30dfa3231fe5ce977fa23b3667ddeaf44ee97f1f4f57fb074bf3386672edc07c6f6d75ed25e7862c7b6c4ac3aba51a3241896914b84665cb05ab25a0f505813fbe3cf223713caf2015a8df190870d776a51ac63dce9e6b9a69d9665b44888dc7e61a5dea1d1f3f7a4c3c77ae09a9282f78ca63729090fe9cdcbaf0f9e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x15) r7 = dup(r6) ppoll(&(0x7f0000000140)=[{r7, 0x51}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) umount2(&(0x7f0000000140)='./cgroup\x00', 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 5.743907224s ago: executing program 5 (id=2249): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) (rerun: 32) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffb, 0x2000}], 0x1, &(0x7f0000000100)) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x8001, 0x6, 0x4af}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) (async, rerun: 64) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x31) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) 5.574862546s ago: executing program 5 (id=2251): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x0, @pix_mp={0x6, 0x93cf, 0x32315559, 0x4, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x7fff, 0x7ff}, {0x3, 0x2}, {0x8}], 0x9, 0xff, 0x2, 0x2, 0x3}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7fffffff}) 5.387125309s ago: executing program 5 (id=2252): creat(&(0x7f0000001380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 5.310166151s ago: executing program 5 (id=2253): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x228000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) r2 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x4a2403, 0x2a) open_tree(r2, &(0x7f0000000100)='./cgroup/file0\x00', 0x88000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.20411782s ago: executing program 1 (id=2265): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000786000/0x3000)=nil, 0x3000}, 0x2}) 4.090495938s ago: executing program 1 (id=2267): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0x3, 0xfffffffc}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x10200000, 0x10, 0x10, 0x0, @ib={0x1b, 0x5, 0x6, {"8aef3d145c66ae48da7713b69c4df1db"}, 0x800, 0x9674, 0x8}, @in={0x2, 0x4e20, @local}}}, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x2, 0x6}, {0x3, 0xf58}, 0x0, 0x4}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETA(r2, 0x5406, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 3.860045213s ago: executing program 1 (id=2268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x300, 0x8000005, 0x590f, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 2.283205876s ago: executing program 0 (id=2270): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 2.136143942s ago: executing program 0 (id=2271): creat(&(0x7f0000001380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 2.13576829s ago: executing program 5 (id=2272): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1.988659369s ago: executing program 5 (id=2274): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f00000000c0)='0', 0x1) r3 = dup(r1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0x5, 0x1001, 0x0, 0x0}], 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x1000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x6000) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="5cc5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) close(r1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) mmap(&(0x7f0000742000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x45809000) 1.781456419s ago: executing program 0 (id=2275): lsm_set_self_attr(0x65, &(0x7f0000000a00)={0x6d, 0x0, 0x1001, 0xfe1, "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"}, 0x1001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r0, 0x1}}, 0x18) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000240)=[{0x200, 0x7b, 0x5, 0x80000000}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x17) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000100)=0x80000000, 0x4) 1.679253934s ago: executing program 0 (id=2277): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = getpgid(0x0) move_pages(r1, 0x5, &(0x7f0000000080)=[&(0x7f00008c2000/0x3000)=nil, &(0x7f0000192000/0x1000)=nil, &(0x7f0000aca000/0x4000)=nil, &(0x7f000058d000/0x4000)=nil, &(0x7f0000677000/0x3000)=nil], &(0x7f00000000c0)=[0xbe], &(0x7f0000000100)=[0x0], 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000002d80)=""/181, 0xb5}, {&(0x7f0000003100)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000d40)=""/4090, 0xffa}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f00000007c0)=""/42, 0x2a}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000008c0)=""/255, 0xff}], 0xd}, 0x20) add_key(&(0x7f0000000140)='.dead\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.068638585s ago: executing program 4 (id=2283): creat(&(0x7f0000001380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 939.531818ms ago: executing program 1 (id=2284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000d901000005000000ff"]) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241383160608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 891.217676ms ago: executing program 4 (id=2285): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a00000000000000", 0x58}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000000000fffe, 0x40000003}) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ptrace(0x10, r2) 724.079357ms ago: executing program 1 (id=2286): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = dup2(r1, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x100}}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 723.726306ms ago: executing program 4 (id=2287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x800000000000000, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 670.834508ms ago: executing program 0 (id=2288): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = userfaultfd(0x80001) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xc}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') rename(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)='./cgroup\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r7, 0x9b3cd68f5cb444bc, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x81803, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x100}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 602.825511ms ago: executing program 4 (id=2289): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f00000001c0)) (async) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000140)="82", 0x1}], 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030f0a5303035303036303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x9, 0x3, 0xf7, 0xdc}]}) (async, rerun: 32) close(r3) (async, rerun: 32) set_mempolicy(0x1, 0x0, 0x3) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) read(r4, 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="851666ce20db", 0x0, 0x10, 0x10029, 0x0, 0x0}) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r6, r7, 0x4000, '\x00', 0xd2bc, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa03}, 0x4, 0x80000b, 0x5, 0x3}}}}) (async) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0xfffffffffffffffe, r5}, 0x50) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0xc8, 0x5f, 0x62, 0x8, 0x423, 0xc, 0x2ebf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x0, 0x22, [{{0x9, 0x4, 0xff, 0x1, 0x0, 0x71, 0xc0, 0xd9, 0x8}}]}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffeae}) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x1b6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0xff, 0x9a, 0x20, 0xd1}, 0x4f, &(0x7f0000000200)={0x5, 0xf, 0x4f, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x88, 0x2, 0x4, 0xf00f, 0x8, [0xffff0f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc8, 0x8, 0x6, 0xa, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7fffff2, 0xf0f, 0x9, [0xffff00]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0xb, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "12d31f2153f3d80d9096cb776e796642"}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}, {0xf3, &(0x7f0000000480)=@string={0xf3, 0x3, "54090b83d406f73a5972cb5ddbd8bbadc817fc803a9702d2e005cb83ec4432aaecda92efaef81f6a263b31fe76d3e7f72aae282edc19c5a4a7f98753eea579cbdc04bfba3e3278d375523924a3578e09aa434f591c9a06ba10e641636968f1ea6088f3ac15f91dd103eefd33dfeee46afb52a9ed31664daef9174853a996db5c48502bb849e65238eabdefd9ab8dab5078bfbdd664848f804c2e54023527490feb5395b24b01aa92b6d000106dd75f8e655333720bb9c8a093f70c4f9695c146439278004d02df2e72a568fba238320f36158b9557c81550b3f22ca04862fd917ffeddc4e7efd98c6cc75720a6af60e1c1"}}]}) (async, rerun: 64) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file1\x00', &(0x7f0000000000)='omfs\x00', 0xd010, 0x0) (rerun: 64) 516.059443ms ago: executing program 1 (id=2290): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1ff, 0xe11, 0x5, 0xfffffbff, 0x7f}, 0x14) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x444000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r3, 0x0, 0x6, 0x77, &(0x7f00000001c0)="b2b4301e6c08892aa01321b9e840dedd72a1f0345595d8ba414a74753341b8340c321d8c275abc075640ae7be92b67687997ddec0bebfe468427dc11513a4df5a564e816b2b96afeab50a70c842516c42ba3707c17d92321ccc49c6c5d4dd0dcdeb644fe786a884339f67aec2b463bcdd7be0373490c66", 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x22052, r0, 0x2000) 429.273291ms ago: executing program 4 (id=2291): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 247.290053ms ago: executing program 4 (id=2292): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) (async) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x5000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) kexec_load(0xfffffffffffffffc, 0x0, &(0x7f00000001c0), 0x160000) (async) kexec_load(0xfffffffffffffffc, 0x0, &(0x7f00000001c0), 0x160000) kexec_load(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0xab7b8c87ff473d5f}, "8bce7ac0d4348919", "9b484c8fa57d67144361d2f260406711", "77efe154", "613f6bbe8b864b2d"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0xab7b8c87ff473d5f}, "8bce7ac0d4348919", "9b484c8fa57d67144361d2f260406711", "77efe154", "613f6bbe8b864b2d"}, 0x28) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x70}, 0x80) (async) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x70}, 0x80) r4 = dup(r2) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) (async) msgsnd(0x0, 0x0, 0x8, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201500267d23310720c1200eda8010203010902010022e0860200"/36], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000800000b0101009c077a2101720000000000"], 0x14}, 0x1, 0x0, 0x0, 0x480c0}, 0x4088c) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540f4550182195f5758483"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x30842) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x30842) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00010800000300000000"], 0x0}) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000140)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=2293): creat(&(0x7f0000001380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) kernel console output (not intermixed with test programs): 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.321244][T10377] R13: 0000000000000000 R14: 00007fe6da5b5fa0 R15: 00007ffd78639788 [ 237.321269][T10377] [ 238.069180][T10395] /dev/rnullb0: Can't open blockdev [ 238.302689][T10408] FAULT_INJECTION: forcing a failure. [ 238.302689][T10408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.319460][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.1.1502 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 238.319489][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.319501][T10408] Call Trace: [ 238.319509][T10408] [ 238.319518][T10408] dump_stack_lvl+0x189/0x250 [ 238.319544][T10408] ? __pfx____ratelimit+0x10/0x10 [ 238.319566][T10408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.319593][T10408] ? __pfx__printk+0x10/0x10 [ 238.319628][T10408] should_fail_ex+0x414/0x560 [ 238.319663][T10408] _copy_to_user+0x31/0xb0 [ 238.319684][T10408] simple_read_from_buffer+0xe1/0x170 [ 238.319713][T10408] proc_fail_nth_read+0x1df/0x250 [ 238.319743][T10408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.319773][T10408] ? rw_verify_area+0x258/0x650 [ 238.319794][T10408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.319818][T10408] vfs_read+0x200/0x980 [ 238.319843][T10408] ? __pfx___mutex_lock+0x10/0x10 [ 238.319865][T10408] ? __pfx_vfs_read+0x10/0x10 [ 238.319886][T10408] ? __fget_files+0x2a/0x420 [ 238.319915][T10408] ? __fget_files+0x3a0/0x420 [ 238.319937][T10408] ? __fget_files+0x2a/0x420 [ 238.319970][T10408] ksys_read+0x145/0x250 [ 238.319988][T10408] ? __fget_files+0x2a/0x420 [ 238.320015][T10408] ? __pfx_ksys_read+0x10/0x10 [ 238.320041][T10408] ? do_syscall_64+0xbe/0x3b0 [ 238.320067][T10408] do_syscall_64+0xfa/0x3b0 [ 238.320087][T10408] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.320108][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.320126][T10408] ? clear_bhb_loop+0x60/0xb0 [ 238.320150][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.320169][T10408] RIP: 0033:0x7f066658d33c [ 238.320186][T10408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.320203][T10408] RSP: 002b:00007f066746d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.320224][T10408] RAX: ffffffffffffffda RBX: 00007f06667b5fa0 RCX: 00007f066658d33c [ 238.320239][T10408] RDX: 000000000000000f RSI: 00007f066746d0a0 RDI: 0000000000000004 [ 238.320251][T10408] RBP: 00007f066746d090 R08: 0000000000000000 R09: 0000000000000000 [ 238.320264][T10408] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.320276][T10408] R13: 0000000000000000 R14: 00007f06667b5fa0 R15: 00007ffe780aabc8 [ 238.320307][T10408] [ 238.749731][T10414] overlayfs: unescaped trailing colons in lowerdir mount option. [ 239.028196][T10421] /dev/rnullb0: Can't open blockdev [ 239.055291][T10423] PKCS7: Unknown OID: [4] 0.0 [ 239.060345][T10423] PKCS7: Only support pkcs7_signedData type [ 239.121333][T10423] could not allocate digest TFM handle sha512-ssse3 [ 239.203635][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 239.390623][ T10] usb 1-1: config 2 has an invalid interface number: 77 but max is 0 [ 239.400023][ T10] usb 1-1: config 2 has no interface number 0 [ 239.407735][ T10] usb 1-1: config 2 interface 77 has no altsetting 0 [ 239.418850][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=3d.a0 [ 239.441349][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.455653][ T10] usb 1-1: Product: syz [ 239.471299][ T10] usb 1-1: Manufacturer: syz [ 239.478325][ T10] usb 1-1: SerialNumber: syz [ 239.612631][T10435] /dev/rnullb0: Can't open blockdev [ 239.723147][ T10] usb 1-1: USB disconnect, device number 49 [ 239.883444][T10450] /dev/rnullb0: Can't open blockdev [ 239.932979][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.945675][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.957803][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.973529][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.251824][T10464] fuseblk: Unknown parameter 'mask' [ 240.327601][T10468] /dev/rnullb0: Can't open blockdev [ 240.340770][T10468] input: syz1 as /devices/virtual/input/input28 [ 240.388940][T10470] syz.0.1522: attempt to access beyond end of device [ 240.388940][T10470] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 240.415628][T10470] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 240.475584][ T848] IPVS: starting estimator thread 0... [ 240.501128][T10475] IPVS: set_ctl: invalid protocol: 50539 201.154.2.163:18110 [ 240.575846][T10477] IPVS: using max 23 ests per chain, 55200 per kthread [ 240.712688][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.727878][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.730894][T10491] /dev/rnullb0: Can't open blockdev [ 240.753966][T10489] /dev/rnullb0: Can't open blockdev [ 240.807579][T10495] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1530'. [ 241.013398][ T43] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 241.153406][ T43] usb 1-1: device descriptor read/64, error -71 [ 241.393418][ T43] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 241.546443][ T43] usb 1-1: device descriptor read/64, error -71 [ 241.674490][ T43] usb usb1-port1: attempt power cycle [ 241.718550][T10512] PKCS7: Unknown OID: [4] 0.0 [ 241.724067][T10512] PKCS7: Only support pkcs7_signedData type [ 241.737503][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.748901][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.817401][T10512] could not allocate digest TFM handle sha512-ssse3 [ 242.013353][ T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 242.058868][ T43] usb 1-1: device descriptor read/8, error -71 [ 242.265149][T10524] nvme_fabrics: unknown parameter or missing value '`' in ctrl creation request [ 242.313360][ T43] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 242.334312][ T43] usb 1-1: device descriptor read/8, error -71 [ 242.444393][ T43] usb usb1-port1: unable to enumerate USB device [ 242.686634][T10536] binder: 10535:10536 ioctl 3ba0 200000000200 returned -22 [ 242.698051][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.708315][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.995436][T10554] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1547'. [ 243.053159][T10557] /dev/rnullb0: Can't open blockdev [ 243.165922][T10562] /dev/rnullb0: Can't open blockdev [ 243.216744][T10566] syz.1.1551: attempt to access beyond end of device [ 243.216744][T10566] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 243.231772][T10566] hfs: can't find a HFS filesystem on dev nbd1 [ 244.154445][T10582] /dev/rnullb0: Can't open blockdev [ 244.618357][T10593] /dev/rnullb0: Can't open blockdev [ 244.880986][T10601] /dev/rnullb0: Can't open blockdev [ 244.981099][T10604] netlink: 'syz.3.1567': attribute type 29 has an invalid length. [ 244.998012][T10604] netlink: 'syz.3.1567': attribute type 29 has an invalid length. [ 245.010419][T10604] netlink: 'syz.3.1567': attribute type 29 has an invalid length. [ 245.022672][T10604] netlink: 'syz.3.1567': attribute type 29 has an invalid length. [ 245.032238][T10608] TCP: TCP_TX_DELAY enabled [ 245.233478][ T5900] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 245.335104][T10618] /dev/rnullb0: Can't open blockdev [ 245.430912][ T5900] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 245.449047][ T5900] usb 2-1: config 0 has no interface number 0 [ 245.585765][ T5900] usb 2-1: config 0 interface 197 has no altsetting 0 [ 245.595467][ T5900] usb 2-1: New USB device found, idVendor=0bd4, idProduct=0129, bcdDevice=f8.6c [ 245.613470][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.621585][ T5900] usb 2-1: Product: syz [ 245.640630][ T5900] usb 2-1: Manufacturer: syz [ 245.645628][ T5900] usb 2-1: SerialNumber: syz [ 245.661218][ T5900] usb 2-1: config 0 descriptor?? [ 245.918764][ T5900] usb 2-1: USB disconnect, device number 41 [ 245.939798][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.946817][T10628] /dev/rnullb0: Can't open blockdev [ 245.956990][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.027771][T10635] /dev/rnullb0: Can't open blockdev [ 247.180865][T10651] /dev/rnullb0: Can't open blockdev [ 247.234165][T10653] /dev/rnullb0: Can't open blockdev [ 247.493350][ T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 247.651127][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.664876][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.674948][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.676644][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.698366][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.698742][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.718686][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.726405][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.729528][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.746537][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.747737][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.767184][ T10] usb 1-1: Product: syz [ 247.771123][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.771365][ T10] usb 1-1: Manufacturer: syz [ 247.782694][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.795700][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.803489][ T10] usb 1-1: SerialNumber: syz [ 247.813912][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.825050][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.957050][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.969533][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.979658][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.989979][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.001603][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.042703][ T10] usb 1-1: 0:2 : does not exist [ 248.060583][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 248.070736][T10679] lo speed is unknown, defaulting to 1000 [ 248.080659][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 248.101696][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 248.141493][ T10] usb 1-1: USB disconnect, device number 54 [ 248.194054][ T6811] udevd[6811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.463027][T10692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1597'. [ 248.805766][T10679] chnl_net:caif_netlink_parms(): no params data found [ 248.939474][T10679] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.947272][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.954638][T10679] bridge_slave_0: entered allmulticast mode [ 248.962672][T10679] bridge_slave_0: entered promiscuous mode [ 248.975323][T10679] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.982557][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.991755][T10679] bridge_slave_1: entered allmulticast mode [ 248.993638][ T848] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 249.000275][T10679] bridge_slave_1: entered promiscuous mode [ 249.048722][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.063322][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.133711][T10679] team0: Port device team_slave_0 added [ 249.141629][T10679] team0: Port device team_slave_1 added [ 249.163447][ T848] usb 1-1: Invalid ep0 maxpacket: 16 [ 249.201492][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.208948][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.247518][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.260838][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.267972][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.296224][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.311794][ T848] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 249.384855][T10679] hsr_slave_0: entered promiscuous mode [ 249.391762][T10679] hsr_slave_1: entered promiscuous mode [ 249.405124][T10679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.422904][T10679] Cannot create hsr debugfs directory [ 249.483960][ T848] usb 1-1: Invalid ep0 maxpacket: 16 [ 249.490241][ T848] usb usb1-port1: attempt power cycle [ 249.822983][T10679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.833605][ T848] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 249.849065][T10679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.860705][T10679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.864055][ T848] usb 1-1: Invalid ep0 maxpacket: 16 [ 249.885153][T10679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.023421][ T848] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 250.034474][T10679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.057737][T10679] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.064308][ T848] usb 1-1: Invalid ep0 maxpacket: 16 [ 250.071229][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.078355][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.086798][ T848] usb usb1-port1: unable to enumerate USB device [ 250.094313][ T5834] Bluetooth: hci4: command tx timeout [ 250.126456][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.133717][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.548721][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.726058][T10783] /dev/rnullb0: Can't open blockdev [ 250.974937][T10679] veth0_vlan: entered promiscuous mode [ 251.024924][T10679] veth1_vlan: entered promiscuous mode [ 251.098849][T10679] veth0_macvtap: entered promiscuous mode [ 251.119987][T10679] veth1_macvtap: entered promiscuous mode [ 251.182103][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.208655][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.278245][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.289973][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.315439][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.360493][ T3448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.495438][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.513323][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.587480][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.613505][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.955063][T10825] tipc: Enabling of bearer rejected, failed to enable media [ 252.164150][ T5834] Bluetooth: hci4: command tx timeout [ 252.257691][ T5834] Bluetooth: hci4: Malformed Event: 0x02 [ 252.307357][T10836] tipc: New replicast peer: 255.255.255.255 [ 252.320552][T10836] tipc: Enabled bearer , priority 10 [ 252.328554][T10838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1635'. [ 252.328840][T10836] /dev/rnullb0: Can't open blockdev [ 252.344611][ T5926] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 252.468970][T10843] vim2m vim2m.0: vidioc_s_fmt queue busy [ 252.497165][T10845] netlink: 'syz.1.1638': attribute type 29 has an invalid length. [ 252.506085][ T5926] usb 1-1: config 0 has no interfaces? [ 252.511587][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.520462][T10845] netlink: 'syz.1.1638': attribute type 29 has an invalid length. [ 252.534033][T10845] netlink: 'syz.1.1638': attribute type 29 has an invalid length. [ 252.542085][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.544005][T10845] netlink: 'syz.1.1638': attribute type 29 has an invalid length. [ 252.561863][ T5926] usb 1-1: config 0 descriptor?? [ 252.654393][T10847] tipc: Bearer : already 2 bearers with priority 10 [ 252.661645][T10847] tipc: Bearer : trying with adjusted priority [ 252.672729][T10847] tipc: Enabling of bearer rejected, failed to enable media [ 252.796623][ T5926] usb 1-1: USB disconnect, device number 59 [ 253.100914][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1645'. [ 253.114814][T10865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1645'. [ 253.127865][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1645'. [ 253.141883][T10865] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 253.156734][T10865] /dev/rnullb0: Can't open blockdev [ 253.269436][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1647'. [ 253.269524][T10874] /dev/rnullb0: Can't open blockdev [ 253.280268][T10872] openvswitch: netlink: Flow key attr not present in new flow. [ 253.316296][T10876] tipc: Enabling of bearer rejected, failed to enable media [ 253.538559][T10883] syzkaller1: entered promiscuous mode [ 253.563345][T10883] syzkaller1: entered allmulticast mode [ 253.708118][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.717040][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.812088][T10898] tipc: Started in network mode [ 253.822916][T10898] tipc: Node identity 00000000000000000012000040000001, cluster identity 4711 [ 253.832352][T10898] tipc: Enabling of bearer rejected, failed to enable media [ 253.875668][T10901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1659'. [ 253.889528][T10901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1659'. [ 253.912716][T10901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1659'. [ 254.086686][T10912] warn_alloc: 4 callbacks suppressed [ 254.086705][T10912] syz.4.1661: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.126904][T10912] CPU: 0 UID: 0 PID: 10912 Comm: syz.4.1661 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 254.126936][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.126961][T10912] Call Trace: [ 254.126969][T10912] [ 254.126979][T10912] dump_stack_lvl+0x189/0x250 [ 254.127011][T10912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.127034][T10912] ? __pfx__printk+0x10/0x10 [ 254.127058][T10912] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 254.127083][T10912] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 254.127109][T10912] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 254.127141][T10912] warn_alloc+0x214/0x310 [ 254.127165][T10912] ? stack_depot_save_flags+0x40/0x900 [ 254.127189][T10912] ? __pfx_warn_alloc+0x10/0x10 [ 254.127214][T10912] ? kasan_save_track+0x4f/0x80 [ 254.127233][T10912] ? xskq_create+0x56/0x170 [ 254.127252][T10912] ? xsk_init_queue+0xb0/0x110 [ 254.127269][T10912] ? xsk_setsockopt+0x43f/0x710 [ 254.127285][T10912] ? do_sock_setsockopt+0x257/0x3e0 [ 254.127310][T10912] ? __x64_sys_setsockopt+0x18b/0x220 [ 254.127334][T10912] ? do_syscall_64+0xfa/0x3b0 [ 254.127355][T10912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.127384][T10912] __vmalloc_node_range_noprof+0x125/0x12f0 [ 254.127438][T10912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.127469][T10912] ? __kasan_kmalloc+0x93/0xb0 [ 254.127490][T10912] vmalloc_user_noprof+0xad/0xf0 [ 254.127511][T10912] ? xskq_create+0xbf/0x170 [ 254.127531][T10912] xskq_create+0xbf/0x170 [ 254.127553][T10912] xsk_init_queue+0xb0/0x110 [ 254.127575][T10912] xsk_setsockopt+0x43f/0x710 [ 254.127596][T10912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.127624][T10912] ? __lock_acquire+0xab9/0xd20 [ 254.127657][T10912] ? aa_sock_opt_perm+0xff/0x1b0 [ 254.127684][T10912] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 254.127728][T10912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.127760][T10912] do_sock_setsockopt+0x257/0x3e0 [ 254.127790][T10912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 254.127822][T10912] ? __fget_files+0x2a/0x420 [ 254.127853][T10912] __x64_sys_setsockopt+0x18b/0x220 [ 254.127884][T10912] do_syscall_64+0xfa/0x3b0 [ 254.127904][T10912] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.127925][T10912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.127942][T10912] ? clear_bhb_loop+0x60/0xb0 [ 254.127966][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.127982][T10912] RIP: 0033:0x7f064118e929 [ 254.127998][T10912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.128015][T10912] RSP: 002b:00007f0642091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.128036][T10912] RAX: ffffffffffffffda RBX: 00007f06413b6080 RCX: 00007f064118e929 [ 254.128052][T10912] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 254.128065][T10912] RBP: 00007f0641210b39 R08: 0000000000000004 R09: 0000000000000000 [ 254.128077][T10912] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.128090][T10912] R13: 0000000000000000 R14: 00007f06413b6080 R15: 00007ffefd160cf8 [ 254.128121][T10912] [ 254.128494][T10912] Mem-Info: [ 254.254405][ T5834] Bluetooth: hci4: command tx timeout [ 254.304385][T10912] active_anon:6135 inactive_anon:0 isolated_anon:0 [ 254.304385][T10912] active_file:21425 inactive_file:52007 isolated_file:0 [ 254.304385][T10912] unevictable:1768 dirty:111 writeback:0 [ 254.304385][T10912] slab_reclaimable:12072 slab_unreclaimable:99841 [ 254.304385][T10912] mapped:30232 shmem:1361 pagetables:1465 [ 254.304385][T10912] sec_pagetables:0 bounce:0 [ 254.304385][T10912] kernel_misc_reclaimable:0 [ 254.304385][T10912] free:1289535 free_pcp:18707 free_cma:0 [ 254.503574][T10912] Node 0 active_anon:24540kB inactive_anon:0kB active_file:89388kB inactive_file:207780kB unevictable:5936kB isolated(anon):0kB isolated(file):0kB mapped:128936kB dirty:444kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12388kB pagetables:5924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.536947][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.593313][T10912] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.673874][T10912] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.714591][T10912] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 254.747885][T10912] Node 0 DMA32 free:1263328kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24392kB inactive_anon:0kB active_file:89388kB inactive_file:206356kB unevictable:9636kB writepending:440kB present:3129332kB managed:2557024kB mlocked:8100kB bounce:0kB free_pcp:39852kB local_pcp:20828kB free_cma:0kB [ 254.789043][T10912] lowmem_reserve[]: 0 0 1 1 1 [ 254.794392][T10912] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 254.823293][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.869130][T10912] lowmem_reserve[]: 0 0 0 0 0 [ 254.875376][T10912] Node 1 Normal free:3876020kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:248kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30688kB local_pcp:8352kB free_cma:0kB [ 254.906635][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.975257][T10912] lowmem_reserve[]: 0 0 0 0 0 [ 254.980477][T10912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.013355][T10912] Node 0 DMA32: 1513*4kB (UM) 735*8kB (UM) 322*16kB (UME) 437*32kB (UME) 184*64kB (ME) 11*128kB (UME) 47*256kB (UM) 14*512kB (UM) 6*1024kB (M) 5*2048kB (UM) 289*4096kB (M) = 1263580kB [ 255.031694][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.043180][T10912] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 255.063466][T10912] Node 1 Normal: 206*4kB (UME) 57*8kB (UME) 41*16kB (UME) 85*32kB (UME) 28*64kB (UME) 9*128kB (UME) 4*256kB (UM) 4*512kB (ME) 3*1024kB (UME) 2*2048kB (ME) 942*4096kB (M) = 3876272kB [ 255.123634][T10912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.176130][T10912] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.261616][T10912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.290311][T10912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.335907][T10912] 79312 total pagecache pages [ 255.347788][T10912] 0 pages in swap cache [ 255.362234][T10912] Free swap = 124996kB [ 255.380328][T10912] Total swap = 124996kB [ 255.390291][T10912] 2097051 pages RAM [ 255.397738][T10912] 0 pages HighMem/MovableOnly [ 255.410318][T10912] 425817 pages reserved [ 255.432314][T10912] 0 pages cma reserved [ 255.541204][T10953] /dev/rnullb0: Can't open blockdev [ 255.687980][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695734][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.776299][T10944] binder: 10943:10944 ioctl c0306201 200000000080 returned -14 [ 255.805078][T10944] /dev/rnullb0: Can't open blockdev [ 256.275121][T10973] /dev/rnullb0: Can't open blockdev [ 256.329193][ T5834] Bluetooth: hci4: command tx timeout [ 256.637002][T10980] PID 10980 killed due to inadequate hugepage pool [ 256.804887][T10989] tipc: Enabling of bearer rejected, failed to enable media [ 257.110689][T10992] syzkaller1: entered promiscuous mode [ 257.121913][T10992] syzkaller1: entered allmulticast mode [ 257.485511][T11014] tipc: Enabling of bearer rejected, failed to enable media [ 257.543333][ T5900] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 257.713359][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 257.721444][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.732250][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 257.751931][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.820206][ T5900] usb 1-1: config 0 descriptor?? [ 257.864506][ T5900] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 257.940481][T11033] /dev/rnullb0: Can't open blockdev [ 258.048386][T11040] tipc: Bearer : already 2 bearers with priority 10 [ 258.056351][T11040] tipc: Bearer : trying with adjusted priority [ 258.093663][T11040] tipc: Enabling of bearer rejected, failed to enable media [ 258.221898][T11043] /dev/rnullb0: Can't open blockdev [ 258.251730][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 258.384895][T11049] caif0: entered allmulticast mode [ 258.402832][T11049] /dev/rnullb0: Can't open blockdev [ 258.570063][T11061] /dev/rnullb0: Can't open blockdev [ 258.623722][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.632501][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.690570][T11063] lo speed is unknown, defaulting to 1000 [ 259.098996][ T30] audit: type=1326 audit(1750858298.417:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f066658e929 code=0x0 [ 259.530152][ T1076] block nbd2: Possible stuck request ffff888025670000: control (read@0,1024B). Runtime 30 seconds [ 259.542490][ T1076] block nbd2: Possible stuck request ffff8880256701c0: control (read@1024,1024B). Runtime 30 seconds [ 259.553805][ T1076] block nbd2: Possible stuck request ffff888025670380: control (read@2048,1024B). Runtime 30 seconds [ 259.564744][ T1076] block nbd2: Possible stuck request ffff888025670540: control (read@3072,1024B). Runtime 30 seconds [ 260.663837][ T5975] usb 1-1: USB disconnect, device number 60 [ 260.922608][T11117] fuse: Bad value for 'fd' [ 261.036729][T11121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.326115][T11137] syz.4.1742: attempt to access beyond end of device [ 261.326115][T11137] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 261.343023][T11137] hpfs: hpfs_map_sector(): read error [ 261.653509][ T848] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 261.663299][ T5900] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 261.816482][ T848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.831043][ T848] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 261.841894][ T848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.844908][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.865180][ T848] usb 1-1: config 0 descriptor?? [ 261.874309][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 261.886552][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 261.906636][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.932495][ T5900] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 261.952588][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 261.973264][ T5900] usb 5-1: Product: syz [ 261.977546][ T5900] usb 5-1: Manufacturer: syz [ 261.982140][ T5900] usb 5-1: SerialNumber: syz [ 261.996099][ T5900] usb 5-1: config 0 descriptor?? [ 262.006488][ T5900] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 262.023352][ T5900] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 262.032376][ T5900] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 262.205169][T11142] syz.4.1745: attempt to access beyond end of device [ 262.205169][T11142] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 262.223023][T11142] SQUASHFS error: Failed to read block 0x0: -5 [ 262.229963][T11142] unable to read squashfs_super_block [ 262.258832][ T5900] usb 5-1: USB disconnect, device number 2 [ 262.282850][ T848] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 262.327274][ T848] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000E/input/input29 [ 262.471946][ T848] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 263.893296][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 264.043304][ T5900] usb 5-1: device descriptor read/64, error -71 [ 264.283319][ T5900] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 264.433326][ T5900] usb 5-1: device descriptor read/64, error -71 [ 264.440409][ T5926] usb 1-1: USB disconnect, device number 61 [ 264.543705][ T5900] usb usb5-port1: attempt power cycle [ 264.632001][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 264.893370][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 264.914077][ T5900] usb 5-1: device descriptor read/8, error -71 [ 265.153400][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.187253][ T5900] usb 5-1: device descriptor read/8, error -71 [ 265.303649][ T5900] usb usb5-port1: unable to enumerate USB device [ 265.488967][T11187] /dev/rnullb0: Can't open blockdev [ 265.497186][T11190] /dev/rnullb0: Can't open blockdev [ 265.536754][T11192] /dev/rnullb0: Can't open blockdev [ 266.090773][T11201] tipc: Enabling of bearer rejected, failed to enable media [ 266.535164][T11211] netlink: 'syz.1.1772': attribute type 27 has an invalid length. [ 266.600615][T11213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1773'. [ 266.980539][T11222] tipc: Enabling of bearer rejected, failed to enable media [ 267.693959][ T5900] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 267.863415][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 267.870517][ T5900] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 267.882538][ T5900] usb 1-1: config 0 has no interface number 0 [ 267.889706][ T5900] usb 1-1: config 0 interface 180 has no altsetting 0 [ 267.903433][ T5900] usb 1-1: New USB device found, idVendor=050d, idProduct=1202, bcdDevice=47.d7 [ 267.912655][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.924828][ T5900] usb 1-1: Product: syz [ 267.929764][ T5900] usb 1-1: Manufacturer: syz [ 267.934463][ T5900] usb 1-1: SerialNumber: syz [ 267.974243][ T5900] usb 1-1: config 0 descriptor?? [ 268.195921][T11241] /dev/rnullb0: Can't open blockdev [ 268.218343][ T848] usb 1-1: USB disconnect, device number 62 [ 268.270185][T11246] 9pnet_fd: Insufficient options for proto=fd [ 269.113489][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 269.150711][T11250] tipc: Enabling of bearer rejected, failed to enable media [ 269.293067][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.326011][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 269.338131][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 269.358434][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.372112][ T10] usb 1-1: config 0 descriptor?? [ 269.381513][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 269.782387][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.790299][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.797970][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.805746][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.812770][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 269.820146][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 269.916488][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 270.045476][T11254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1789'. [ 270.070226][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 270.082500][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 270.091132][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 270.098702][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 270.105648][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 270.112376][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 270.119579][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 270.126525][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.133475][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.149078][ T10] pwc: Registered as video103. [ 270.157486][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 270.176392][ T10] usb 1-1: USB disconnect, device number 63 [ 270.347983][T11279] tipc: Enabling of bearer rejected, failed to enable media [ 270.463774][T11281] /dev/rnullb0: Can't open blockdev [ 270.559830][T11284] /dev/rnullb0: Can't open blockdev [ 271.051696][T11303] tipc: Enabling of bearer rejected, failed to enable media [ 271.114142][T11310] /dev/rnullb0: Can't open blockdev [ 271.129613][T11311] fuse: Bad value for 'fd' [ 271.163839][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 271.175383][T11314] /dev/rnullb0: Can't open blockdev [ 271.608087][T11330] tipc: Enabling of bearer rejected, failed to enable media [ 271.660131][T11332] binder: 11331:11332 ioctl c0306201 200000000640 returned -22 [ 271.682305][T11332] /dev/rnullb0: Can't open blockdev [ 272.003934][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 272.165378][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.175704][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 272.185062][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 272.194426][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.213342][ T10] usb 1-1: config 0 descriptor?? [ 272.233471][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 272.397794][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.413657][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.429222][ T24] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 272.439136][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.453923][ T24] usb 5-1: config 0 descriptor?? [ 272.632077][T11354] tipc: Enabling of bearer rejected, failed to enable media [ 272.642180][T11335] /dev/rnullb0: Can't open blockdev [ 272.651153][ T10] Bluetooth: Can't get version to change to load ram patch err [ 272.663121][ T10] Bluetooth: Loading patch file failed [ 272.669218][ T10] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 272.687363][ T10] usb 1-1: USB disconnect, device number 64 [ 273.203984][T11366] /dev/rnullb0: Can't open blockdev [ 273.287838][ T24] uclogic 0003:5543:0781.000F: reserved main item tag 0xd [ 273.297784][ T24] uclogic 0003:5543:0781.000F: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 273.491233][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.502670][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.123698][ T8186] raw-gadget.1 gadget.3: failed to queue disconnect event [ 274.131735][ T5900] usb 5-1: USB disconnect, device number 7 [ 274.356900][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.376403][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.388138][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.413856][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.421646][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.461581][T11392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.530280][T11391] lo speed is unknown, defaulting to 1000 [ 274.833339][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 274.872486][T11409] syz.4.1846: attempt to access beyond end of device [ 274.872486][T11409] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 274.974189][ T24] usb 1-1: device descriptor read/64, error -71 [ 275.121439][ T30] audit: type=1326 audit(1750858314.437:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f066658e929 code=0x0 [ 275.142126][T11391] chnl_net:caif_netlink_parms(): no params data found [ 275.218142][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.225947][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 275.228207][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.243464][T11391] bridge_slave_0: entered allmulticast mode [ 275.250502][T11391] bridge_slave_0: entered promiscuous mode [ 275.260839][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.263314][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.268587][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.283131][T11391] bridge_slave_1: entered allmulticast mode [ 275.291677][T11391] bridge_slave_1: entered promiscuous mode [ 275.326975][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.339031][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.363529][ T24] usb 1-1: device descriptor read/64, error -71 [ 275.378463][T11391] team0: Port device team_slave_0 added [ 275.387169][T11391] team0: Port device team_slave_1 added [ 275.413772][ T43] usb 5-1: device descriptor read/64, error -71 [ 275.425230][T11391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.432190][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.458471][T11391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.470774][T11391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.478556][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.483753][ T24] usb usb1-port1: attempt power cycle [ 275.504934][T11391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.563171][T11391] hsr_slave_0: entered promiscuous mode [ 275.569522][T11391] hsr_slave_1: entered promiscuous mode [ 275.576454][T11391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.584264][T11391] Cannot create hsr debugfs directory [ 275.653543][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.744166][T11391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 275.755542][T11391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 275.767267][T11391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 275.778545][T11391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.794012][ T43] usb 5-1: device descriptor read/64, error -71 [ 275.820245][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.827560][T11391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.836140][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.843333][T11391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.863701][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 275.886880][ T24] usb 1-1: device descriptor read/8, error -71 [ 275.904072][ T43] usb usb5-port1: attempt power cycle [ 275.919790][T11391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.939771][T11391] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.968082][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.982720][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.018409][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.025629][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.054396][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.061588][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.136607][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 276.174561][ T24] usb 1-1: device descriptor read/8, error -71 [ 276.181061][ T5834] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 276.253455][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 276.296946][ T24] usb usb1-port1: unable to enumerate USB device [ 276.312577][ T43] usb 5-1: device descriptor read/8, error -71 [ 276.335793][T11391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.483935][ T5834] Bluetooth: hci5: command tx timeout [ 276.549275][T11391] veth0_vlan: entered promiscuous mode [ 276.556494][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 276.569478][T11391] veth1_vlan: entered promiscuous mode [ 276.584278][ T43] usb 5-1: device descriptor read/8, error -71 [ 276.603675][T11391] veth0_macvtap: entered promiscuous mode [ 276.614779][T11391] veth1_macvtap: entered promiscuous mode [ 276.636546][T11391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.652082][T11391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.669517][ T3493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.678596][ T3493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.694568][ T43] usb usb5-port1: unable to enumerate USB device [ 276.705828][ T3493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.720288][ T3493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.813624][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.829549][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.885846][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.895754][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.026331][T11457] tipc: Started in network mode [ 277.039763][T11457] tipc: Node identity 00000000000000030000000040000001, cluster identity 4711 [ 277.050686][T11457] tipc: Enabling of bearer rejected, failed to enable media [ 278.563677][ T5834] Bluetooth: hci5: command tx timeout [ 280.643728][ T5834] Bluetooth: hci5: command tx timeout [ 282.723717][ T5834] Bluetooth: hci5: command tx timeout [ 289.612995][ T1076] block nbd2: Possible stuck request ffff888025670000: control (read@0,1024B). Runtime 60 seconds [ 289.623699][ T1076] block nbd2: Possible stuck request ffff8880256701c0: control (read@1024,1024B). Runtime 60 seconds [ 289.634687][ T1076] block nbd2: Possible stuck request ffff888025670380: control (read@2048,1024B). Runtime 60 seconds [ 289.646240][ T1076] block nbd2: Possible stuck request ffff888025670540: control (read@3072,1024B). Runtime 60 seconds [ 290.054379][ T5205] udevd[5205]: worker [5840] /devices/virtual/block/nbd2 is taking a long time [ 317.127724][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.134497][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.685040][ T1076] block nbd2: Possible stuck request ffff888025670000: control (read@0,1024B). Runtime 90 seconds [ 319.695951][ T1076] block nbd2: Possible stuck request ffff8880256701c0: control (read@1024,1024B). Runtime 90 seconds [ 319.706926][ T1076] block nbd2: Possible stuck request ffff888025670380: control (read@2048,1024B). Runtime 90 seconds [ 319.717880][ T1076] block nbd2: Possible stuck request ffff888025670540: control (read@3072,1024B). Runtime 90 seconds [ 333.007095][T11474] netlink: 'syz.1.1858': attribute type 15 has an invalid length. [ 333.015157][T11474] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1858'. [ 333.025076][T11475] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1860'. [ 333.217586][T11484] /dev/rnullb0: Can't open blockdev [ 333.236631][T11486] /dev/rnullb0: Can't open blockdev [ 333.336600][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.369590][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.383494][T11493] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.387190][T11490] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 333.396995][T11493] /dev/rnullb0: Can't open blockdev [ 333.405757][T11490] /dev/rnullb0: Can't open blockdev [ 333.461885][T11495] /dev/rnullb0: Can't open blockdev [ 333.542506][T11499] 9pnet_fd: Insufficient options for proto=fd [ 333.554206][T11499] /dev/rnullb0: Can't open blockdev [ 333.573370][ T5975] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 333.578571][T11500] /dev/rnullb0: Can't open blockdev [ 333.723828][T11504] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1872'. [ 333.735826][ T5975] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 333.774075][ T5975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.791845][ T5975] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.809853][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.820376][ T5975] usb 5-1: SerialNumber: syz [ 334.045715][ T5834] Bluetooth: hci1: unexpected event for opcode 0x203b [ 334.056013][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 334.080208][ T5975] usb 5-1: 0:2 : does not exist [ 334.089934][ T5975] usb 5-1: unit 255 not found! [ 334.115966][ T5975] usb 5-1: USB disconnect, device number 12 [ 334.133352][ T5939] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 334.159819][ T6811] udevd[6811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.216283][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.227390][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.238794][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.252407][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.270308][ T10] usb 6-1: config 0 descriptor?? [ 334.310997][ T5939] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 334.326542][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 334.337429][ T5939] usb 1-1: Product: syz [ 334.341609][ T5939] usb 1-1: Manufacturer: syz [ 334.349386][ T5939] usb 1-1: SerialNumber: syz [ 334.370083][ T5939] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 334.488351][T11537] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1884'. [ 334.638308][T11543] tipc: Enabling of bearer rejected, failed to enable media [ 334.695706][ T10] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 334.720310][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input31 [ 334.749028][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.765276][T11546] bond0: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 334.770293][T11511] /dev/rnullb0: Can't open blockdev [ 334.790520][ T5939] vp7045: USB control message 'in' went wrong. [ 334.798815][T11546] bond0: (slave ip6gre0): Error -95 calling set_mac_address [ 334.806391][ T5939] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 334.806444][ T5939] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 334.817360][ T5939] usb 1-1: USB disconnect, device number 69 [ 334.879342][ T10] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 334.895137][T11552] /dev/rnullb0: Can't open blockdev [ 334.965839][ T10] usb 6-1: USB disconnect, device number 2 [ 335.062985][T11554] fido_id[11554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 335.403338][ T848] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 335.446927][ T10] hid_parser_main: 5 callbacks suppressed [ 335.446948][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.491483][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.506127][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.521410][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.563529][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.573969][ T848] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 335.589691][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.607292][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.616332][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.632735][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.640851][ T848] usb 5-1: config 0 has no interfaces? [ 335.661156][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.671546][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.691151][ T10] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 335.703382][ T848] usb 5-1: config 0 has no interfaces? [ 335.703765][T11570] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 335.724986][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.725342][T11570] /dev/rnullb0: Can't open blockdev [ 335.735729][ T10] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.755594][ T848] usb 5-1: config 0 has no interfaces? [ 335.764843][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.775683][ T848] usb 5-1: config 0 has no interfaces? [ 335.783621][ T5926] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 335.817767][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.843538][ T848] usb 5-1: config 0 has no interfaces? [ 335.863808][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.888240][ T848] usb 5-1: config 0 has no interfaces? [ 335.898003][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.908291][ T848] usb 5-1: config 0 has no interfaces? [ 335.929831][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.946625][ T5926] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 335.963318][ T848] usb 5-1: config 0 has no interfaces? [ 335.973305][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.982029][ T848] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 335.990348][T11580] netlink: 'syz.1.1892': attribute type 29 has an invalid length. [ 335.993878][T11576] fido_id[11576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.034260][ T5926] usb 1-1: config 0 descriptor?? [ 336.039537][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.069166][ T5926] cp210x 1-1:0.0: cp210x converter detected [ 336.108538][ T848] usb 5-1: config 0 descriptor?? [ 336.250205][ T5926] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 336.269634][ T5926] cp210x 1-1:0.0: querying part number failed [ 336.277773][T11596] /dev/rnullb0: Can't open blockdev [ 336.292628][ T5926] usb 1-1: cp210x converter now attached to ttyUSB0 [ 336.327089][ T30] audit: type=1326 audit(1750858375.647:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.1.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f066658e929 code=0x0 [ 336.338380][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.384821][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.428043][ T848] usb 5-1: USB disconnect, device number 13 [ 336.431133][T11602] /dev/rnullb0: Can't lookup blockdev [ 336.454262][T11566] /dev/rnullb0: Can't open blockdev [ 336.471743][ T5939] usb 1-1: USB disconnect, device number 70 [ 336.502041][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.513042][ T5939] cp210x 1-1:0.0: device disconnected [ 336.739806][T11609] netlink: 'syz.5.1896': attribute type 15 has an invalid length. [ 336.752542][T11609] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1896'. [ 336.846359][T11613] /dev/rnullb0: Can't open blockdev [ 337.089358][T11622] tipc: Enabling of bearer rejected, failed to enable media [ 337.262026][T11628] /dev/rnullb0: Can't open blockdev [ 337.310492][T11632] /dev/rnullb0: Can't open blockdev [ 337.509464][T11643] /dev/rnullb0: Can't lookup blockdev [ 337.692284][T11654] /dev/rnullb0: Can't open blockdev [ 337.702438][T11652] /dev/rnullb0: Can't lookup blockdev [ 337.711189][T11656] tipc: Enabling of bearer rejected, failed to enable media [ 337.804590][T11659] netlink: 'syz.0.1909': attribute type 29 has an invalid length. [ 337.817809][T11659] netlink: 'syz.0.1909': attribute type 29 has an invalid length. [ 337.836060][T11661] /dev/rnullb0: Can't lookup blockdev [ 337.843903][T11659] /dev/rnullb0: Can't open blockdev [ 338.114623][T11677] /dev/rnullb0: Can't open blockdev [ 338.155137][T11679] /dev/rnullb0: Can't open blockdev [ 338.160656][ T5926] IPVS: starting estimator thread 0... [ 338.253543][T11681] IPVS: using max 48 ests per chain, 115200 per kthread [ 338.335514][T11685] /dev/rnullb0: Can't open blockdev [ 338.342983][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 338.831391][T11702] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1925'. [ 338.858145][T11702] 0ªî{X¹¦: renamed from macvtap0 (while UP) [ 338.878793][T11702] 0ªî{X¹¦: entered allmulticast mode [ 338.891402][T11702] veth0_macvtap: entered allmulticast mode [ 338.904244][T11702] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 339.159851][ T30] audit: type=1326 audit(1750858378.477:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.1.1928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f066658e929 code=0x0 [ 339.264106][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 339.425151][ T43] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 339.449761][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.451216][T11723] /dev/rnullb0: Can't open blockdev [ 339.460139][ T43] usb 6-1: config 0 has no interface number 0 [ 339.460192][ T43] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 339.486217][ T43] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.534134][ T43] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 339.544521][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.552699][ T43] usb 6-1: Product: syz [ 339.558555][ T43] usb 6-1: Manufacturer: syz [ 339.563165][ T43] usb 6-1: SerialNumber: syz [ 339.573927][ T43] usb 6-1: config 0 descriptor?? [ 339.952185][T11733] tipc: Enabling of bearer rejected, failed to enable media [ 340.067833][T11736] overlayfs: failed to clone upperpath [ 340.101149][T11740] option changes via remount are deprecated (pid=11738 comm=syz.4.1936) [ 340.125649][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 340.136086][T11740] /dev/rnullb0: Can't open blockdev [ 340.348804][T11748] /dev/rnullb0: Can't open blockdev [ 340.477440][T11754] /dev/rnullb0: Can't open blockdev [ 340.501667][T11756] tipc: Enabling of bearer rejected, failed to enable media [ 340.688224][T11767] /dev/rnullb0: Can't open blockdev [ 340.780081][T11773] sock: sock_set_timeout: `syz.0.1957' (pid 11773) tries to set negative timeout [ 340.790716][T11771] overlayfs: missing 'lowerdir' [ 340.904714][T11776] /dev/rnullb0: Can't open blockdev [ 341.230556][T11785] tipc: Enabling of bearer rejected, failed to enable media [ 341.500395][T11796] batadv_slave_0: entered promiscuous mode [ 341.509186][T11796] delete_channel: no stack [ 341.514242][T11796] delete_channel: no stack [ 341.523964][T11796] gretap0: entered promiscuous mode [ 341.536848][T11795] batadv_slave_0: left promiscuous mode [ 341.695130][T11800] /dev/rnullb0: Can't open blockdev [ 341.832129][T11807] tipc: Enabling of bearer rejected, failed to enable media [ 341.938330][T11812] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 341.956123][T11812] /dev/rnullb0: Can't open blockdev [ 341.956846][T11814] /dev/rnullb0: Can't open blockdev [ 342.059121][ T5975] usb 6-1: USB disconnect, device number 3 [ 342.308905][T11824] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1973'. [ 342.309901][T11830] /dev/rnullb0: Can't open blockdev [ 342.469862][T11836] tipc: Enabling of bearer rejected, failed to enable media [ 342.712431][T11843] mmap: syz.4.1981 (11843) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 342.913675][ T5939] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 343.083568][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 343.093083][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 343.111045][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 343.127887][T11863] tipc: Enabling of bearer rejected, failed to enable media [ 343.129977][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 343.146417][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 343.158088][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 343.174453][ T5939] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 343.202891][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.222926][ T5939] usb 6-1: Product: syz [ 343.232083][ T5939] usb 6-1: Manufacturer: syz [ 343.252082][ T5939] usb 6-1: SerialNumber: syz [ 343.272969][ T5939] usb 6-1: config 0 descriptor?? [ 343.691438][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 343.703297][ T5939] input input33: Device does not respond to id packet M [ 343.724105][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 343.732053][ T5939] input input33: Device does not respond to id packet P [ 343.764556][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 343.770613][ T5939] input input33: Device does not respond to id packet B [ 343.885837][T11878] /dev/rnullb0: Can't open blockdev [ 344.091337][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.101321][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.110352][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.120073][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 344.135079][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.144786][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.159565][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 344.173057][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 344.189676][ T5939] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 344.211265][ T5939] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 344.257567][ T5939] usb 6-1: USB disconnect, device number 4 [ 344.268749][T11881] lo speed is unknown, defaulting to 1000 [ 344.857143][T11891] tipc: Enabling of bearer rejected, failed to enable media [ 345.051108][T11881] chnl_net:caif_netlink_parms(): no params data found [ 345.390800][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.407958][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.424025][T11881] bridge_slave_0: entered allmulticast mode [ 345.431848][T11881] bridge_slave_0: entered promiscuous mode [ 345.456428][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.464064][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.472864][T11881] bridge_slave_1: entered allmulticast mode [ 345.481320][T11881] bridge_slave_1: entered promiscuous mode [ 345.525779][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.542857][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.612678][T11881] team0: Port device team_slave_0 added [ 345.623146][T11881] team0: Port device team_slave_1 added [ 345.668498][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.677048][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.704349][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.724570][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.731703][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.766583][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.926397][T11881] hsr_slave_0: entered promiscuous mode [ 345.947112][T11881] hsr_slave_1: entered promiscuous mode [ 345.962734][T11881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.981944][T11881] Cannot create hsr debugfs directory [ 346.243389][ T5834] Bluetooth: hci6: command tx timeout [ 346.256396][T11918] block nbd4: not configured, cannot reconfigure [ 346.284648][T11924] tipc: Enabling of bearer rejected, failed to enable media [ 346.405812][T11881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.524729][T11934] Mount JFS Failure: -22 [ 346.549913][T11881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.656501][T11881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.700712][T11940] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 346.805158][T11881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.122962][T11951] tipc: Enabling of bearer rejected, failed to enable media [ 347.236470][T11956] FAULT_INJECTION: forcing a failure. [ 347.236470][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.271886][T11881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.283620][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.0.2020 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 347.283650][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.283662][T11956] Call Trace: [ 347.283670][T11956] [ 347.283678][T11956] dump_stack_lvl+0x189/0x250 [ 347.283706][T11956] ? __pfx____ratelimit+0x10/0x10 [ 347.283726][T11956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.283744][T11956] ? __pfx__printk+0x10/0x10 [ 347.283765][T11956] ? __might_fault+0xb0/0x130 [ 347.283794][T11956] should_fail_ex+0x414/0x560 [ 347.283825][T11956] _copy_from_user+0x2d/0xb0 [ 347.283844][T11956] ___sys_sendmsg+0x158/0x2a0 [ 347.283873][T11956] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.283928][T11956] ? __fget_files+0x2a/0x420 [ 347.283951][T11956] ? __fget_files+0x3a0/0x420 [ 347.283985][T11956] __x64_sys_sendmsg+0x19b/0x260 [ 347.284014][T11956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.284050][T11956] ? __pfx_ksys_write+0x10/0x10 [ 347.284069][T11956] ? rcu_is_watching+0x15/0xb0 [ 347.284093][T11956] ? do_syscall_64+0xbe/0x3b0 [ 347.284119][T11956] do_syscall_64+0xfa/0x3b0 [ 347.284138][T11956] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.284158][T11956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.284184][T11956] ? clear_bhb_loop+0x60/0xb0 [ 347.284207][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.284226][T11956] RIP: 0033:0x7fe6da38e929 [ 347.284243][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.284260][T11956] RSP: 002b:00007fe6db19b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.284282][T11956] RAX: ffffffffffffffda RBX: 00007fe6da5b5fa0 RCX: 00007fe6da38e929 [ 347.284297][T11956] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 347.284310][T11956] RBP: 00007fe6db19b090 R08: 0000000000000000 R09: 0000000000000000 [ 347.284322][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.284334][T11956] R13: 0000000000000000 R14: 00007fe6da5b5fa0 R15: 00007ffd78639788 [ 347.284363][T11956] [ 347.309625][T11881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.540209][T11881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.583752][T11881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.608346][T11959] ./file0: Can't lookup blockdev [ 347.833027][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.889755][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.931192][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.938393][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.993276][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.000438][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.323318][ T5834] Bluetooth: hci6: command tx timeout [ 348.382322][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 348.721972][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.979055][T11881] veth0_vlan: entered promiscuous mode [ 349.002048][T11881] veth1_vlan: entered promiscuous mode [ 349.082981][T11996] tipc: Enabling of bearer rejected, failed to enable media [ 349.113412][T11881] veth0_macvtap: entered promiscuous mode [ 349.134922][T11881] veth1_macvtap: entered promiscuous mode [ 349.209702][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.245095][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.282432][ T3434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.322622][ T3434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.338239][ T3434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.352455][ T3434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.546862][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.556859][T12006] FAULT_INJECTION: forcing a failure. [ 349.556859][T12006] name failslab, interval 1, probability 0, space 0, times 0 [ 349.579664][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.599498][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.4.2032 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 349.599525][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.599536][T12006] Call Trace: [ 349.599543][T12006] [ 349.599551][T12006] dump_stack_lvl+0x189/0x250 [ 349.599576][T12006] ? __pfx____ratelimit+0x10/0x10 [ 349.599597][T12006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.599617][T12006] ? __pfx__printk+0x10/0x10 [ 349.599643][T12006] ? __pfx___might_resched+0x10/0x10 [ 349.599668][T12006] should_fail_ex+0x414/0x560 [ 349.599703][T12006] should_failslab+0xa8/0x100 [ 349.599727][T12006] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 349.599748][T12006] ? __alloc_skb+0x112/0x2d0 [ 349.599776][T12006] __alloc_skb+0x112/0x2d0 [ 349.599804][T12006] netlink_sendmsg+0x5c6/0xb30 [ 349.599836][T12006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.599863][T12006] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.599888][T12006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.599914][T12006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.599938][T12006] __sock_sendmsg+0x219/0x270 [ 349.599961][T12006] ____sys_sendmsg+0x505/0x830 [ 349.599992][T12006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.600028][T12006] ? import_iovec+0x74/0xa0 [ 349.600050][T12006] ___sys_sendmsg+0x21f/0x2a0 [ 349.600080][T12006] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.600143][T12006] ? __fget_files+0x2a/0x420 [ 349.600167][T12006] ? __fget_files+0x3a0/0x420 [ 349.600202][T12006] __x64_sys_sendmsg+0x19b/0x260 [ 349.600237][T12006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.600274][T12006] ? __pfx_ksys_write+0x10/0x10 [ 349.600292][T12006] ? rcu_is_watching+0x15/0xb0 [ 349.600318][T12006] ? do_syscall_64+0xbe/0x3b0 [ 349.600344][T12006] do_syscall_64+0xfa/0x3b0 [ 349.600364][T12006] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.600385][T12006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.600404][T12006] ? clear_bhb_loop+0x60/0xb0 [ 349.600428][T12006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.600447][T12006] RIP: 0033:0x7f064118e929 [ 349.600465][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.600482][T12006] RSP: 002b:00007f06420b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.600504][T12006] RAX: ffffffffffffffda RBX: 00007f06413b5fa0 RCX: 00007f064118e929 [ 349.600519][T12006] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 349.600532][T12006] RBP: 00007f06420b2090 R08: 0000000000000000 R09: 0000000000000000 [ 349.600545][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.600557][T12006] R13: 0000000000000000 R14: 00007f06413b5fa0 R15: 00007ffefd160cf8 [ 349.600587][T12006] [ 349.963934][ T1076] block nbd2: Possible stuck request ffff888025670000: control (read@0,1024B). Runtime 120 seconds [ 349.974954][ T1076] block nbd2: Possible stuck request ffff8880256701c0: control (read@1024,1024B). Runtime 120 seconds [ 349.987219][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2035'. [ 350.000295][ T1076] block nbd2: Possible stuck request ffff888025670380: control (read@2048,1024B). Runtime 120 seconds [ 350.005369][T12011] NILFS (rnullb0): couldn't find nilfs on the device [ 350.012346][ T1076] block nbd2: Possible stuck request ffff888025670540: control (read@3072,1024B). Runtime 120 seconds [ 350.024701][T12009] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2035'. [ 350.060649][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.062184][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2035'. [ 350.068580][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.334904][T12026] vxfs: WRONG superblock magic 00000000 at 1 [ 350.344885][T12026] vxfs: WRONG superblock magic 00000000 at 8 [ 350.350938][T12026] vxfs: can't find superblock. [ 350.378324][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.389648][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.407996][ T5834] Bluetooth: hci6: command tx timeout [ 350.623368][ T5926] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 350.778287][ T5926] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 350.794598][ T5926] usb 2-1: config 0 has no interface number 0 [ 350.812054][ T5926] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.837782][ T5926] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 350.848675][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.857587][ T5926] usb 2-1: Product: syz [ 350.861869][ T5926] usb 2-1: Manufacturer: syz [ 350.865550][T12043] omfs: Invalid superblock (0) [ 350.867168][ T5926] usb 2-1: SerialNumber: syz [ 350.892389][ T5926] usb 2-1: config 0 descriptor?? [ 350.904189][T12043] ISOFS: Unable to identify CD-ROM format. [ 350.911422][ T5926] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 351.082409][T12047] FAULT_INJECTION: forcing a failure. [ 351.082409][T12047] name failslab, interval 1, probability 0, space 0, times 0 [ 351.102648][T12047] CPU: 1 UID: 0 PID: 12047 Comm: syz.4.2046 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 351.102677][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.102689][T12047] Call Trace: [ 351.102697][T12047] [ 351.102705][T12047] dump_stack_lvl+0x189/0x250 [ 351.102736][T12047] ? __pfx____ratelimit+0x10/0x10 [ 351.102758][T12047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.102776][T12047] ? __pfx__printk+0x10/0x10 [ 351.102804][T12047] ? __pfx___might_resched+0x10/0x10 [ 351.102823][T12047] ? fs_reclaim_acquire+0x7d/0x100 [ 351.102854][T12047] should_fail_ex+0x414/0x560 [ 351.102888][T12047] should_failslab+0xa8/0x100 [ 351.102910][T12047] __kmalloc_noprof+0xcb/0x4f0 [ 351.102928][T12047] ? kfree+0x4d/0x440 [ 351.102943][T12047] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 351.102972][T12047] tomoyo_realpath_from_path+0xe3/0x5d0 [ 351.102999][T12047] ? tomoyo_domain+0xd9/0x130 [ 351.103029][T12047] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 351.103049][T12047] tomoyo_path_number_perm+0x1e8/0x5a0 [ 351.103072][T12047] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.103109][T12047] ? __lock_acquire+0xab9/0xd20 [ 351.103157][T12047] ? __fget_files+0x2a/0x420 [ 351.103182][T12047] ? __fget_files+0x2a/0x420 [ 351.103203][T12047] ? __fget_files+0x3a0/0x420 [ 351.103224][T12047] ? __fget_files+0x2a/0x420 [ 351.103249][T12047] security_file_ioctl+0xcb/0x2d0 [ 351.103282][T12047] __se_sys_ioctl+0x47/0x170 [ 351.103304][T12047] do_syscall_64+0xfa/0x3b0 [ 351.103325][T12047] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.103343][T12047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.103361][T12047] ? clear_bhb_loop+0x60/0xb0 [ 351.103382][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.103398][T12047] RIP: 0033:0x7f064118e929 [ 351.103414][T12047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.103430][T12047] RSP: 002b:00007f06420b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.103449][T12047] RAX: ffffffffffffffda RBX: 00007f06413b5fa0 RCX: 00007f064118e929 [ 351.103464][T12047] RDX: 0000200000000240 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 351.103476][T12047] RBP: 00007f06420b2090 R08: 0000000000000000 R09: 0000000000000000 [ 351.103489][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.103501][T12047] R13: 0000000000000000 R14: 00007f06413b5fa0 R15: 00007ffefd160cf8 [ 351.103530][T12047] [ 351.114438][ T5926] usb 2-1: USB disconnect, device number 42 [ 351.361045][T12047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.400461][ T5926] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 351.478608][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 351.501684][T12059] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 351.511862][T12059] VFS: Can't find a romfs filesystem on dev rnullb0. [ 351.511862][T12059] [ 351.528104][T12059] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 351.541435][T12059] VFS: Can't find a romfs filesystem on dev rnullb0. [ 351.541435][T12059] [ 351.893332][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 351.912257][T12079] FAULT_INJECTION: forcing a failure. [ 351.912257][T12079] name failslab, interval 1, probability 0, space 0, times 0 [ 351.932510][T12079] CPU: 0 UID: 0 PID: 12079 Comm: syz.4.2058 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 351.932537][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.932549][T12079] Call Trace: [ 351.932558][T12079] [ 351.932565][T12079] dump_stack_lvl+0x189/0x250 [ 351.932590][T12079] ? __pfx____ratelimit+0x10/0x10 [ 351.932610][T12079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.932629][T12079] ? __pfx__printk+0x10/0x10 [ 351.932652][T12079] ? __pfx___might_resched+0x10/0x10 [ 351.932671][T12079] ? fs_reclaim_acquire+0x7d/0x100 [ 351.932698][T12079] should_fail_ex+0x414/0x560 [ 351.932731][T12079] should_failslab+0xa8/0x100 [ 351.932753][T12079] __kmalloc_noprof+0xcb/0x4f0 [ 351.932772][T12079] ? tomoyo_encode+0x28b/0x550 [ 351.932812][T12079] tomoyo_encode+0x28b/0x550 [ 351.932839][T12079] tomoyo_realpath_from_path+0x58d/0x5d0 [ 351.932873][T12079] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 351.932892][T12079] tomoyo_path_number_perm+0x1e8/0x5a0 [ 351.932911][T12079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.932946][T12079] ? __lock_acquire+0xab9/0xd20 [ 351.932990][T12079] ? __fget_files+0x2a/0x420 [ 351.933017][T12079] ? __fget_files+0x2a/0x420 [ 351.933039][T12079] ? __fget_files+0x3a0/0x420 [ 351.933069][T12079] ? __fget_files+0x2a/0x420 [ 351.933095][T12079] security_file_ioctl+0xcb/0x2d0 [ 351.933127][T12079] __se_sys_ioctl+0x47/0x170 [ 351.933148][T12079] do_syscall_64+0xfa/0x3b0 [ 351.933171][T12079] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.933189][T12079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.933206][T12079] ? clear_bhb_loop+0x60/0xb0 [ 351.933227][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.933244][T12079] RIP: 0033:0x7f064118e929 [ 351.933261][T12079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.933278][T12079] RSP: 002b:00007f06420b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.933298][T12079] RAX: ffffffffffffffda RBX: 00007f06413b5fa0 RCX: 00007f064118e929 [ 351.933312][T12079] RDX: 0000200000000240 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 351.933325][T12079] RBP: 00007f06420b2090 R08: 0000000000000000 R09: 0000000000000000 [ 351.933337][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.933349][T12079] R13: 0000000000000000 R14: 00007f06413b5fa0 R15: 00007ffefd160cf8 [ 351.933379][T12079] [ 352.073280][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 352.076931][T12079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.111841][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 352.203734][ T5926] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 352.218119][T12083] /dev/rnullb0: Can't open blockdev [ 352.243722][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.251955][ T43] usb 6-1: Product: syz [ 352.278578][ T43] usb 6-1: Manufacturer: syz [ 352.285449][ T43] usb 6-1: SerialNumber: syz [ 352.292276][T12085] binder: 12084:12085 ioctl c0306201 0 returned -14 [ 352.294768][ T43] usb 6-1: config 0 descriptor?? [ 352.333443][ T5926] usb 1-1: device descriptor read/64, error -71 [ 352.367315][T12086] binder: 12084:12086 ioctl c0306201 0 returned -14 [ 352.483361][ T5834] Bluetooth: hci6: command tx timeout [ 352.511785][ T43] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 352.543440][ T43] usb write operation failed. (-71) [ 352.555821][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 352.567210][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 352.573586][ T5926] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 352.574791][ T43] usb 6-1: media controller created [ 352.587388][ T43] usb read operation failed. (-71) [ 352.592940][ T43] usb write operation failed. (-71) [ 352.618250][ T43] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 352.654665][ T43] usb 6-1: USB disconnect, device number 5 [ 352.726392][ T5926] usb 1-1: device descriptor read/64, error -71 [ 352.762985][T12096] /dev/rnullb0: Can't open blockdev [ 352.856242][ T5926] usb usb1-port1: attempt power cycle [ 353.033375][ T5886] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 353.111482][T12108] FAULT_INJECTION: forcing a failure. [ 353.111482][T12108] name failslab, interval 1, probability 0, space 0, times 0 [ 353.117093][T12085] binder: 12084:12085 ioctl c0306201 2000000003c0 returned -14 [ 353.131457][T12108] CPU: 0 UID: 0 PID: 12108 Comm: syz.5.2067 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 353.131485][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.131497][T12108] Call Trace: [ 353.131505][T12108] [ 353.131512][T12108] dump_stack_lvl+0x189/0x250 [ 353.131538][T12108] ? __pfx____ratelimit+0x10/0x10 [ 353.131559][T12108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.131579][T12108] ? __pfx__printk+0x10/0x10 [ 353.131603][T12108] ? __pfx___might_resched+0x10/0x10 [ 353.131622][T12108] ? fs_reclaim_acquire+0x7d/0x100 [ 353.131656][T12108] should_fail_ex+0x414/0x560 [ 353.131690][T12108] should_failslab+0xa8/0x100 [ 353.131712][T12108] __kmalloc_noprof+0xcb/0x4f0 [ 353.131730][T12108] ? tomoyo_encode+0x28b/0x550 [ 353.131757][T12108] tomoyo_encode+0x28b/0x550 [ 353.131786][T12108] tomoyo_realpath_from_path+0x58d/0x5d0 [ 353.131820][T12108] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 353.131840][T12108] tomoyo_path_number_perm+0x1e8/0x5a0 [ 353.131862][T12108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.131898][T12108] ? __lock_acquire+0xab9/0xd20 [ 353.131945][T12108] ? __fget_files+0x2a/0x420 [ 353.131972][T12108] ? __fget_files+0x2a/0x420 [ 353.131994][T12108] ? __fget_files+0x3a0/0x420 [ 353.132016][T12108] ? __fget_files+0x2a/0x420 [ 353.132044][T12108] security_file_ioctl+0xcb/0x2d0 [ 353.132075][T12108] __se_sys_ioctl+0x47/0x170 [ 353.132096][T12108] do_syscall_64+0xfa/0x3b0 [ 353.132116][T12108] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.132135][T12108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.132151][T12108] ? clear_bhb_loop+0x60/0xb0 [ 353.132171][T12108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.132188][T12108] RIP: 0033:0x7f1f3358e929 [ 353.132204][T12108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.132219][T12108] RSP: 002b:00007f1f34379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.132237][T12108] RAX: ffffffffffffffda RBX: 00007f1f337b5fa0 RCX: 00007f1f3358e929 [ 353.132250][T12108] RDX: 0000200000000240 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 353.132262][T12108] RBP: 00007f1f34379090 R08: 0000000000000000 R09: 0000000000000000 [ 353.132273][T12108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.132283][T12108] R13: 0000000000000000 R14: 00007f1f337b5fa0 R15: 00007ffe1f0403f8 [ 353.132311][T12108] [ 353.133317][T12108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.403302][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 353.410807][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.423667][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.444346][ T5926] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 353.452176][ T5886] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 353.471562][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.483772][ T5926] usb 1-1: device descriptor read/8, error -71 [ 353.496781][ T5886] usb 2-1: config 0 descriptor?? [ 353.714122][T12117] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 353.721497][T12117] /dev/rnullb0: Can't open blockdev [ 353.727460][ T5926] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 353.773925][ T5926] usb 1-1: device descriptor read/8, error -71 [ 353.887052][ T5926] usb usb1-port1: unable to enumerate USB device [ 353.897831][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 353.921791][ T5886] hid_parser_main: 33 callbacks suppressed [ 353.921818][ T5886] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 353.957781][T12122] /dev/rnullb0: Can't open blockdev [ 353.998943][T12124] FAULT_INJECTION: forcing a failure. [ 353.998943][T12124] name failslab, interval 1, probability 0, space 0, times 0 [ 354.031204][T12124] CPU: 1 UID: 0 PID: 12124 Comm: syz.5.2074 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 354.031232][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.031243][T12124] Call Trace: [ 354.031251][T12124] [ 354.031259][T12124] dump_stack_lvl+0x189/0x250 [ 354.031285][T12124] ? __pfx____ratelimit+0x10/0x10 [ 354.031306][T12124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.031327][T12124] ? __pfx__printk+0x10/0x10 [ 354.031354][T12124] ? __pfx___might_resched+0x10/0x10 [ 354.031373][T12124] ? fs_reclaim_acquire+0x7d/0x100 [ 354.031401][T12124] should_fail_ex+0x414/0x560 [ 354.031435][T12124] should_failslab+0xa8/0x100 [ 354.031458][T12124] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 354.031478][T12124] ? __alloc_skb+0x112/0x2d0 [ 354.031505][T12124] __alloc_skb+0x112/0x2d0 [ 354.031533][T12124] netlink_ack+0x146/0xa50 [ 354.031552][T12124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.031595][T12124] netlink_rcv_skb+0x28c/0x470 [ 354.031617][T12124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.031644][T12124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.031683][T12124] ? down_read+0x1ad/0x2e0 [ 354.031707][T12124] genl_rcv+0x28/0x40 [ 354.031731][T12124] netlink_unicast+0x75b/0x8d0 [ 354.031760][T12124] netlink_sendmsg+0x805/0xb30 [ 354.031790][T12124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.031813][T12124] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.031844][T12124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.031869][T12124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.031893][T12124] __sock_sendmsg+0x219/0x270 [ 354.031915][T12124] ____sys_sendmsg+0x505/0x830 [ 354.031945][T12124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.031977][T12124] ? import_iovec+0x74/0xa0 [ 354.031999][T12124] ___sys_sendmsg+0x21f/0x2a0 [ 354.032026][T12124] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.032086][T12124] ? __fget_files+0x2a/0x420 [ 354.032109][T12124] ? __fget_files+0x3a0/0x420 [ 354.032144][T12124] __x64_sys_sendmsg+0x19b/0x260 [ 354.032173][T12124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.032208][T12124] ? __pfx_ksys_write+0x10/0x10 [ 354.032226][T12124] ? rcu_is_watching+0x15/0xb0 [ 354.032252][T12124] ? do_syscall_64+0xbe/0x3b0 [ 354.032277][T12124] do_syscall_64+0xfa/0x3b0 [ 354.032297][T12124] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.032316][T12124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.032334][T12124] ? clear_bhb_loop+0x60/0xb0 [ 354.032356][T12124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.032373][T12124] RIP: 0033:0x7f1f3358e929 [ 354.032390][T12124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.032407][T12124] RSP: 002b:00007f1f34379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.032427][T12124] RAX: ffffffffffffffda RBX: 00007f1f337b5fa0 RCX: 00007f1f3358e929 [ 354.032441][T12124] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 354.032454][T12124] RBP: 00007f1f34379090 R08: 0000000000000000 R09: 0000000000000000 [ 354.032466][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.032477][T12124] R13: 0000000000000000 R14: 00007f1f337b5fa0 R15: 00007ffe1f0403f8 [ 354.032507][T12124] [ 354.119411][ T5886] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 354.124288][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.451677][T12133] FAULT_INJECTION: forcing a failure. [ 354.451677][T12133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.466537][T12133] CPU: 1 UID: 0 PID: 12133 Comm: syz.5.2077 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 354.466565][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.466576][T12133] Call Trace: [ 354.466583][T12133] [ 354.466590][T12133] dump_stack_lvl+0x189/0x250 [ 354.466617][T12133] ? __pfx____ratelimit+0x10/0x10 [ 354.466636][T12133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.466655][T12133] ? __pfx__printk+0x10/0x10 [ 354.466674][T12133] ? __might_fault+0xb0/0x130 [ 354.466702][T12133] should_fail_ex+0x414/0x560 [ 354.466734][T12133] _copy_from_user+0x2d/0xb0 [ 354.466751][T12133] video_usercopy+0x354/0x14f0 [ 354.466776][T12133] ? __pfx___video_do_ioctl+0x10/0x10 [ 354.466796][T12133] ? __pfx_video_usercopy+0x10/0x10 [ 354.466828][T12133] ? __fget_files+0x2a/0x420 [ 354.466856][T12133] ? __fget_files+0x2a/0x420 [ 354.466879][T12133] ? __fget_files+0x3a0/0x420 [ 354.466906][T12133] v4l2_ioctl+0x18a/0x1e0 [ 354.466922][T12133] ? __pfx_v4l2_ioctl+0x10/0x10 [ 354.466939][T12133] __se_sys_ioctl+0xfc/0x170 [ 354.466960][T12133] do_syscall_64+0xfa/0x3b0 [ 354.466980][T12133] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.467000][T12133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.467023][T12133] ? clear_bhb_loop+0x60/0xb0 [ 354.467046][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.467064][T12133] RIP: 0033:0x7f1f3358e929 [ 354.467081][T12133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.467098][T12133] RSP: 002b:00007f1f34379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.467118][T12133] RAX: ffffffffffffffda RBX: 00007f1f337b5fa0 RCX: 00007f1f3358e929 [ 354.467132][T12133] RDX: 0000200000000240 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 354.467145][T12133] RBP: 00007f1f34379090 R08: 0000000000000000 R09: 0000000000000000 [ 354.467156][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.467168][T12133] R13: 0000000000000000 R14: 00007f1f337b5fa0 R15: 00007ffe1f0403f8 [ 354.467197][T12133] [ 354.678308][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.712700][ T5886] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 354.764938][ T5886] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 354.852370][T12136] binder: 12135:12136 ioctl c0306201 0 returned -14 [ 354.902604][T12136] binder: 12135:12136 ioctl c0306201 2000000000c0 returned -11 [ 354.944526][T12136] FAT-fs (rnullb0): bogus number of reserved sectors [ 354.957307][T12136] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 355.017757][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.028947][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.074976][T12098] ft260 0003:0403:6030.0012: ft260_i2c_read: failed with -38 [ 355.173354][ T5886] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 355.692162][T12160] FAULT_INJECTION: forcing a failure. [ 355.692162][T12160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.707140][T12160] CPU: 1 UID: 0 PID: 12160 Comm: syz.4.2089 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 355.707169][T12160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.707181][T12160] Call Trace: [ 355.707189][T12160] [ 355.707197][T12160] dump_stack_lvl+0x189/0x250 [ 355.707224][T12160] ? __pfx____ratelimit+0x10/0x10 [ 355.707247][T12160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.707269][T12160] ? __pfx__printk+0x10/0x10 [ 355.707303][T12160] should_fail_ex+0x414/0x560 [ 355.707340][T12160] _copy_to_user+0x31/0xb0 [ 355.707362][T12160] simple_read_from_buffer+0xe1/0x170 [ 355.707391][T12160] proc_fail_nth_read+0x1df/0x250 [ 355.707430][T12160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.707458][T12160] ? rw_verify_area+0x258/0x650 [ 355.707478][T12160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.707506][T12160] vfs_read+0x200/0x980 [ 355.707532][T12160] ? __pfx___mutex_lock+0x10/0x10 [ 355.707554][T12160] ? __pfx_vfs_read+0x10/0x10 [ 355.707576][T12160] ? __fget_files+0x2a/0x420 [ 355.707605][T12160] ? __fget_files+0x3a0/0x420 [ 355.707629][T12160] ? __fget_files+0x2a/0x420 [ 355.707659][T12160] ksys_read+0x145/0x250 [ 355.707682][T12160] ? __pfx_ksys_read+0x10/0x10 [ 355.707701][T12160] ? rcu_is_watching+0x15/0xb0 [ 355.707725][T12160] ? do_syscall_64+0xbe/0x3b0 [ 355.707752][T12160] do_syscall_64+0xfa/0x3b0 [ 355.707772][T12160] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.707792][T12160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.707812][T12160] ? clear_bhb_loop+0x60/0xb0 [ 355.707836][T12160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.707855][T12160] RIP: 0033:0x7f064118d33c [ 355.707872][T12160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 355.707889][T12160] RSP: 002b:00007f06420b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.707911][T12160] RAX: ffffffffffffffda RBX: 00007f06413b5fa0 RCX: 00007f064118d33c [ 355.707926][T12160] RDX: 000000000000000f RSI: 00007f06420b20a0 RDI: 0000000000000003 [ 355.707939][T12160] RBP: 00007f06420b2090 R08: 0000000000000000 R09: 0000000000000000 [ 355.707951][T12160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.707963][T12160] R13: 0000000000000000 R14: 00007f06413b5fa0 R15: 00007ffefd160cf8 [ 355.707995][T12160] [ 355.727727][T12162] /dev/rnullb0: Can't open blockdev [ 355.972292][T12164] lo speed is unknown, defaulting to 1000 [ 356.112875][T12165] netlink: 'syz.4.2091': attribute type 21 has an invalid length. [ 356.121673][T12165] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2091'. [ 356.269902][T12174] gre0: mtu less than device minimum [ 356.355465][T12176] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2095'. [ 356.374899][ T5926] usb 2-1: USB disconnect, device number 43 [ 356.824349][T12197] devpts: Bad value for 'max' [ 356.825688][T12197] /dev/rnullb0: Can't open blockdev [ 356.982004][T12203] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 357.003287][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 357.153417][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 357.167006][ T5838] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 357.189597][ T5838] usb 6-1: config 0 has no interface number 0 [ 357.212143][ T5838] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 357.228346][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.250969][ T5838] usb 6-1: Product: syz [ 357.261482][ T5838] usb 6-1: Manufacturer: syz [ 357.271043][ T5838] usb 6-1: SerialNumber: syz [ 357.306965][ T5838] usb 6-1: config 0 descriptor?? [ 357.396822][T12217] vivid-003: disconnect [ 357.407606][ T30] audit: type=1326 audit(1750858396.727:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.1.2108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb466d8e929 code=0x0 [ 357.547344][ T5838] kaweth 6-1:0.235: Firmware present in device. [ 357.741766][ T5838] kaweth 6-1:0.235: Statistics collection: 0 [ 357.768428][ T5838] kaweth 6-1:0.235: Multicast filter limit: 0 [ 357.797485][ T5838] kaweth 6-1:0.235: MTU: 0 [ 357.801959][ T5838] kaweth 6-1:0.235: Read MAC address 00:00:00:00:00:00 [ 358.228247][T12216] vivid-003: reconnect [ 358.372202][ T5838] kaweth 6-1:0.235: kaweth interface created at eth1 [ 358.472414][T12255] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 358.488664][T12255] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 358.525586][T12260] vxfs: WRONG superblock magic 00000000 at 1 [ 358.542306][T12260] vxfs: WRONG superblock magic 00000000 at 8 [ 358.548422][T12193] /dev/rnullb0: Can't open blockdev [ 358.550281][ T848] usb 6-1: USB disconnect, device number 6 [ 358.597916][T12260] vxfs: can't find superblock. [ 358.629152][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 359.143279][ T5975] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 359.304743][ T5975] usb 1-1: Using ep0 maxpacket: 32 [ 359.340310][ T5975] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.380842][ T5975] usb 1-1: config 0 interface 0 has no altsetting 0 [ 359.398115][ T5975] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 359.418935][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.449716][ T5975] usb 1-1: config 0 descriptor?? [ 359.573459][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 359.745380][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.745416][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.745464][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.745488][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.745531][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.745555][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.748937][ T24] usb 2-1: config 0 descriptor?? [ 359.769772][T12305] /dev/rnullb0: Can't open blockdev [ 359.778112][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2126'. [ 359.921426][ T5975] hid-retrode 0003:0403:97C1.0013: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 360.118050][ T848] usb 1-1: USB disconnect, device number 75 [ 360.237845][ T24] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 360.279586][T12313] fido_id[12313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 360.289708][ T24] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 361.156891][T12329] tipc: Enabling of bearer rejected, failed to enable media [ 361.185953][T12330] qnx4: no qnx4 filesystem (no root dir). [ 361.460482][T12339] vxfs: WRONG superblock magic 00000000 at 1 [ 361.494880][T12339] vxfs: WRONG superblock magic 00000000 at 8 [ 361.521858][T12339] vxfs: can't find superblock. [ 361.626082][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 361.701729][ T5838] usb 2-1: USB disconnect, device number 44 [ 361.805732][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 361.826169][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 361.850227][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.882054][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.894648][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.904221][T12352] /dev/rnullb0: Can't open blockdev [ 361.916290][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.964990][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.981207][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.327415][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 362.369421][ T24] usbtmc 1-1:16.0: can't read capabilities [ 363.183002][T12370] tipc: Enabling of bearer rejected, failed to enable media [ 363.225714][T12372] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 363.300964][T12374] netlink: 'syz.4.2143': attribute type 2 has an invalid length. [ 363.324291][T12374] netlink: 'syz.4.2143': attribute type 1 has an invalid length. [ 363.646522][ T848] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.803859][ T848] usb 6-1: Using ep0 maxpacket: 32 [ 363.820287][ T848] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 363.828853][ T848] usb 6-1: config 0 has no interface number 0 [ 363.835313][ T848] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 363.850098][ T848] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 363.860461][ T848] usb 6-1: config 0 interface 126 has no altsetting 0 [ 363.870134][ T848] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 363.880050][ T848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.888119][ T848] usb 6-1: Product: syz [ 363.892327][ T848] usb 6-1: Manufacturer: syz [ 363.896967][ T848] usb 6-1: SerialNumber: syz [ 363.904756][ T848] usb 6-1: config 0 descriptor?? [ 363.910550][T12379] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 363.917953][T12379] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 364.248374][ T848] ir_usb 6-1:0.126: IR Dongle converter detected [ 364.256175][ T848] usb 6-1: IRDA class descriptor not found, device not bound [ 364.270718][ T848] usb 6-1: USB disconnect, device number 7 [ 364.671262][ T43] usb 1-1: USB disconnect, device number 76 [ 365.747192][T12423] hpfs: Bad magic ... probably not HPFS [ 366.048475][T12428] XFS (rnullb0): Invalid superblock magic number [ 366.052366][T12435] sctp: [Deprecated]: syz.0.2164 (pid 12435) Use of int in maxseg socket option. [ 366.052366][T12435] Use struct sctp_assoc_value instead [ 366.317127][T12445] /dev/rnullb0: Can't open blockdev [ 366.596288][T12458] binder: BINDER_SET_CONTEXT_MGR already set [ 366.613367][T12458] binder: 12457:12458 ioctl 4018620d 200000000040 returned -16 [ 366.656748][T12458] binder: 12457:12458 ioctl c0306201 2000000003c0 returned -14 [ 366.682158][T12458] /dev/rnullb0: Can't open blockdev [ 366.883636][ T5886] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 366.930309][T12472] /dev/rnullb0: Can't open blockdev [ 366.932815][ T30] audit: type=1804 audit(1750858406.247:20): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2179" name="/newroot/75/file1" dev="fuse" ino=1 res=1 errno=0 [ 367.026326][T12480] /dev/rnullb0: Can't open blockdev [ 367.079270][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.091765][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.106263][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 367.118750][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.138405][ T5886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.179937][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.204818][ T5886] usb 2-1: config 0 descriptor?? [ 367.420664][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.437850][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.512229][T12499] /dev/rnullb0: Can't open blockdev [ 367.646786][ T5886] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 367.677063][T12504] /dev/rnullb0: Can't open blockdev [ 367.720504][ T5886] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 367.834117][ T43] usb 2-1: USB disconnect, device number 45 [ 367.922861][T12509] fido_id[12509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 367.953445][T12518] /dev/rnullb0: Can't open blockdev [ 368.200240][T12526] /dev/rnullb0: Can't open blockdev [ 368.430419][T12534] tipc: Started in network mode [ 368.433302][ T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 368.439388][T12534] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 368.453822][T12534] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 368.462396][T12534] tipc: Enabled bearer , priority 10 [ 368.481314][T12534] Invalid source name [ 368.486015][T12534] UBIFS error (pid: 12534): cannot open "/dev/rnullb0", error -22 [ 368.594928][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.619790][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.631235][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 368.633393][ T5886] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 368.642437][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.683521][ T43] usb 1-1: config 0 descriptor?? [ 368.790305][T12548] /dev/rnullb0: Can't open blockdev [ 368.817529][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.834806][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.849582][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.860915][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.881054][ T5886] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.890681][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.898921][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 368.899031][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 368.905753][ T43] usb 1-1: USB disconnect, device number 77 [ 368.964726][ T5886] usb 5-1: config 0 descriptor?? [ 369.067236][T12554] overlayfs: overlapping lowerdir path [ 369.074750][T12554] /dev/rnullb0: Can't open blockdev [ 369.261470][T12535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.267754][T12535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.287314][T12535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.293655][T12535] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 369.302238][T12535] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.311013][T12535] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 369.321500][T12535] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 369.330790][T12535] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 369.337560][T12535] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 369.348228][T12535] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 369.375832][ T5886] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 369.431524][ T5886] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 369.505103][T12561] /dev/rnullb0: Can't open blockdev [ 369.589657][ T5886] tipc: Node number set to 1 [ 369.689946][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.700541][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.729218][T12577] 9pnet_fd: Insufficient options for proto=fd [ 369.743236][ T848] usb 5-1: USB disconnect, device number 14 [ 369.879267][T12580] /dev/rnullb0: Can't open blockdev [ 369.903316][ T5886] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 369.972549][T12588] /dev/rnullb0: Can't open blockdev [ 370.021425][T12590] /dev/rnullb0: Can't open blockdev [ 370.103292][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 370.118244][ T5886] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.152140][ T5886] usb 1-1: config 0 has no interface number 0 [ 370.199352][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.230550][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.254533][ T5886] usb 1-1: Product: syz [ 370.258836][ T5886] usb 1-1: Manufacturer: syz [ 370.290851][ T5886] usb 1-1: SerialNumber: syz [ 370.324380][ T5886] usb 1-1: config 0 descriptor?? [ 370.357434][ T5886] smsc95xx v2.0.0 [ 370.564467][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 370.823437][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 370.983455][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 370.987658][T12607] 9pnet_fd: Insufficient options for proto=fd [ 370.994439][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 371.004095][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.012199][ T43] usb 5-1: Product: syz [ 371.016756][ T43] usb 5-1: Manufacturer: syz [ 371.021439][ T43] usb 5-1: SerialNumber: syz [ 371.034929][ T43] usb 5-1: config 0 descriptor?? [ 371.242369][ T43] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.293512][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 371.363649][ T5834] Bluetooth: hci6: command 0x0c1a tx timeout [ 371.363680][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.369706][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 371.413328][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 371.480151][T12613] /dev/sg0: Can't lookup blockdev [ 371.554239][T12615] /dev/rnullb0: Can't open blockdev [ 371.573291][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 371.582576][ T24] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 371.591645][ T24] usb 6-1: config 0 has no interface number 0 [ 371.598493][ T24] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 371.609929][ T24] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 371.624794][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 371.635975][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.643698][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 371.644324][ T24] usb 6-1: Product: syz [ 371.662644][ T24] usb 6-1: Manufacturer: syz [ 371.667672][ T24] usb 6-1: SerialNumber: syz [ 371.672890][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 371.686124][ T24] usb 6-1: config 0 descriptor?? [ 371.693716][T12611] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 371.696126][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 371.712000][T12611] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 371.725697][ T5886] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 371.758805][ T5886] usb 1-1: USB disconnect, device number 78 [ 371.916649][T12611] binder: 12610:12611 ioctl c00c620f 200000000180 returned -22 [ 371.985643][T12621] binder: 12610:12621 ioctl c018937b 200000000640 returned -22 [ 372.011633][ T24] asix 6-1:0.251: probe with driver asix failed with error -71 [ 372.030377][ T24] usb 6-1: USB disconnect, device number 8 [ 372.107209][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 372.141394][ T43] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 372.149683][ T43] usb 5-1: media controller created [ 372.186846][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.281915][ T43] i2c i2c-1: Added multiplexed i2c bus 2 [ 372.300856][ T43] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 372.313051][ T43] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 372.333521][ T43] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 372.388792][ T43] DVB: Unable to find symbol mxl5005s_attach() [ 372.469240][ T43] usb 5-1: USB disconnect, device number 15 [ 372.514970][T12629] /dev/rnullb0: Can't open blockdev [ 372.671391][T12634] 9pnet_fd: Insufficient options for proto=fd [ 372.729459][T12637] /dev/rnullb0: Can't open blockdev [ 372.739196][T12639] /dev/rnullb0: Can't open blockdev [ 372.763254][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 372.959346][T12649] /dev/rnullb0: Can't open blockdev [ 372.960760][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 372.982656][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.012242][ T24] usb 2-1: Product: syz [ 373.020688][ T24] usb 2-1: Manufacturer: syz [ 373.073255][ T24] usb 2-1: SerialNumber: syz [ 373.096451][ T24] usb 2-1: config 0 descriptor?? [ 373.122184][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 373.305708][T12661] /dev/rnullb0: Can't open blockdev [ 373.465120][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 373.471233][ T5845] Bluetooth: hci6: command 0x0c1a tx timeout [ 373.478871][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 373.507116][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.516121][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.528173][ T24] gspca_sunplus: reg_r err -71 [ 373.533060][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 373.551579][ T24] usb 2-1: USB disconnect, device number 47 [ 373.624339][ T3434] bridge_slave_1: left allmulticast mode [ 373.641533][ T3434] bridge_slave_1: left promiscuous mode [ 373.662132][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.700302][ T3434] bridge_slave_0: left allmulticast mode [ 373.711737][ T3434] bridge_slave_0: left promiscuous mode [ 373.720526][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.871749][T12678] /dev/rnullb0: Can't open blockdev [ 373.960731][T12683] /dev/rnullb0: Can't open blockdev [ 374.108679][T12688] /dev/rnullb0: Can't open blockdev [ 374.291486][T12694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.302549][T12694] /dev/rnullb0: Can't open blockdev [ 374.560660][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.576313][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.586838][ T3434] bond0 (unregistering): Released all slaves [ 374.728389][ T3434] tipc: Left network mode [ 374.823432][ T5926] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 374.862717][T12710] /dev/rnullb0: Can't open blockdev [ 375.033834][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 375.053429][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 375.084653][ T5926] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 375.100373][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.137419][ T5926] usb 6-1: Product: syz [ 375.142092][ T5926] usb 6-1: Manufacturer: syz [ 375.160629][T12719] /dev/rnullb0: Can't open blockdev [ 375.166446][ T5926] usb 6-1: SerialNumber: syz [ 375.169207][ T5926] usb 6-1: config 0 descriptor?? [ 375.174205][T12723] /dev/rnullb0: Can't open blockdev [ 375.221136][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.258869][ T5886] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 375.283650][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.328402][ T5886] usb 5-1: config 0 descriptor?? [ 375.396881][ T5926] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 375.483941][ T3434] hsr_slave_0: left promiscuous mode [ 375.493317][ T3434] hsr_slave_1: left promiscuous mode [ 375.499863][ T3434] batman_adv: batadv0: Removing interface: team0 [ 375.508778][T12732] /dev/sg0: Can't lookup blockdev [ 375.519537][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.527085][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 375.527097][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 375.553338][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.584188][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.591927][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.644168][ T3434] veth1_macvtap: left promiscuous mode [ 375.650160][ T3434] veth0_macvtap: left allmulticast mode [ 375.656869][ T3434] veth0_macvtap: left promiscuous mode [ 375.662645][ T3434] veth1_vlan: left promiscuous mode [ 375.668731][ T3434] veth0_vlan: left promiscuous mode [ 375.790151][ T5886] playstation 0003:054C:0BA0.0017: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 375.968240][ T5886] playstation 0003:054C:0BA0.0017: Invalid byte count transferred, expected 16 got 0 [ 376.008951][ T5886] playstation 0003:054C:0BA0.0017: Failed to retrieve DualShock4 pairing info: -22 [ 376.020140][ T5886] playstation 0003:054C:0BA0.0017: Failed to get MAC address from DualShock4 [ 376.029522][ T5886] playstation 0003:054C:0BA0.0017: Failed to create dualshock4. [ 376.063791][ T5886] playstation 0003:054C:0BA0.0017: probe with driver playstation failed with error -22 [ 376.176984][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.197063][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.253508][ T5939] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 376.438285][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.451834][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.468816][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 376.479551][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.493154][ T5939] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.503425][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.521499][ T5939] usb 2-1: config 0 descriptor?? [ 376.689126][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 376.740953][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 376.961450][ T5939] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 377.002689][ T5939] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 377.063654][ T5926] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 377.111925][ T5926] usb 6-1: USB disconnect, device number 9 [ 377.454191][ T3434] vcan0 (unregistering): left allmulticast mode [ 377.705118][ T848] usb 5-1: USB disconnect, device number 16 [ 378.039949][ T3434] IPVS: stop unused estimator thread 0... [ 378.166700][ T5939] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 378.338018][ T5939] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.359036][ T5939] usb 6-1: config 0 has no interface number 0 [ 378.359339][T12785] /dev/rnullb0: Can't open blockdev [ 378.376652][ T5939] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 378.387100][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.395469][ T5939] usb 6-1: Product: syz [ 378.399834][ T5939] usb 6-1: Manufacturer: syz [ 378.405020][ T5939] usb 6-1: SerialNumber: syz [ 378.418950][ T5939] usb 6-1: config 0 descriptor?? [ 378.466624][T12787] /dev/rnullb0: Can't open blockdev [ 378.568845][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.575306][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.641020][ T5939] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 378.656686][ T5939] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.667490][ T5939] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 378.676880][ T5939] usb 6-1: media controller created [ 378.704718][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.932263][T12797] kvm_intel: kvm [12796]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 378.975247][T12800] /dev/rnullb0: Can't open blockdev [ 379.016665][ T5975] usb 2-1: USB disconnect, device number 48 [ 379.150695][T12806] /dev/rnullb0: Can't open blockdev [ 379.770942][ T5939] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 379.771000][T12772] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 379.844324][ T31] INFO: task syz.2.1445:10257 blocked for more than 143 seconds. [ 379.863778][ T31] Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 [ 379.870924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.894437][ T31] task:syz.2.1445 state:D stack:28936 pid:10257 tgid:10255 ppid:5841 task_flags:0x400140 flags:0x00004004 [ 379.896948][ T5939] usb 6-1: USB disconnect, device number 10 [ 379.943365][ T31] Call Trace: [ 379.946694][ T31] [ 379.949644][ T31] __schedule+0x16f5/0x4d00 [ 379.960161][ T31] ? __lock_acquire+0xab9/0xd20 [ 379.966526][ T31] ? schedule+0x165/0x360 [ 379.970889][ T31] ? __pfx___schedule+0x10/0x10 [ 379.976839][ T31] ? schedule+0x91/0x360 [ 379.982045][ T31] schedule+0x165/0x360 [ 379.986249][ T31] schedule_preempt_disabled+0x13/0x30 [ 379.991717][ T31] __mutex_lock+0x724/0xe80 [ 379.996872][ T31] ? __mutex_lock+0x51b/0xe80 [ 380.001558][ T31] ? bdev_open+0xe0/0xd30 [ 380.003408][ T5975] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 380.010265][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.018850][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 380.026981][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 380.032967][ T31] ? disk_block_events+0xab/0x120 [ 380.038238][ T31] ? bdev_open+0xbe/0xd30 [ 380.042583][ T31] bdev_open+0xe0/0xd30 [ 380.046941][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 380.052238][ T31] setup_bdev_super+0x5a/0x5b0 [ 380.057267][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 380.062386][ T31] ? __pfx_affs_fill_super+0x10/0x10 [ 380.067705][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 380.073468][ T31] vfs_get_tree+0x8f/0x2b0 [ 380.077902][ T31] do_new_mount+0x24a/0xa40 [ 380.083552][ T31] __se_sys_mount+0x317/0x410 [ 380.088255][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 380.093644][ T31] ? do_syscall_64+0xbe/0x3b0 [ 380.098328][ T31] ? __x64_sys_mount+0x20/0xc0 [ 380.103078][ T31] do_syscall_64+0xfa/0x3b0 [ 380.107895][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.113118][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.119282][ T31] ? clear_bhb_loop+0x60/0xb0 [ 380.124027][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.129946][ T31] RIP: 0033:0x7f8cb838e929 [ 380.134710][ T31] RSP: 002b:00007f8cb61f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.143590][ T31] RAX: ffffffffffffffda RBX: 00007f8cb85b6080 RCX: 00007f8cb838e929 [ 380.151581][ T31] RDX: 0000200000000180 RSI: 0000200000000a80 RDI: 0000200000000040 [ 380.159805][ T31] RBP: 00007f8cb8410b39 R08: 0000200000000140 R09: 0000000000000000 [ 380.168137][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.176282][ T31] R13: 0000000000000001 R14: 00007f8cb85b6080 R15: 00007ffc7c4f6c18 [ 380.177997][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.185209][ T31] [ 380.199263][ T31] [ 380.199263][ T31] Showing all locks held in the system: [ 380.208079][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.211106][ T31] 1 lock held by khungtaskd/31: [ 380.219085][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.228372][ T31] #0: ffffffff8e33bf60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 380.241725][ T5975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.256714][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.257254][ T31] 2 locks held by getty/5599: [ 380.271001][ T5975] usb 5-1: config 0 descriptor?? [ 380.271659][ T31] #0: ffff88814dc320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.290723][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 380.301349][ T31] 1 lock held by udevd/5840: [ 380.306110][ T31] #0: ffff888025593358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 380.316749][ T31] 5 locks held by kworker/1:6/5975: [ 380.322663][ T31] #0: ffff8880202c0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.337282][ T31] #1: ffffc90004467bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.364370][ T31] #2: ffff888144f4e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 380.376773][ T31] #3: ffff888040a02198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 380.395574][ T31] #4: ffff888041179160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 380.409076][ T31] 2 locks held by syz.2.1445/10257: [ 380.414501][ T31] #0: ffff88802a1560e0 (&type->s_umount_key#110/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 380.425893][ T31] #1: ffff888025593358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 380.439580][ T31] 1 lock held by syz.0.2293/12825: [ 380.444788][ T31] #0: ffffffff8e341940 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 380.457656][ T31] [ 380.460008][ T31] ============================================= [ 380.460008][ T31] [ 380.497734][ T1076] block nbd2: Possible stuck request ffff888025670000: control (read@0,1024B). Runtime 150 seconds [ 380.510693][ T1076] block nbd2: Possible stuck request ffff8880256701c0: control (read@1024,1024B). Runtime 150 seconds [ 380.518548][ T31] NMI backtrace for cpu 1 [ 380.518574][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 380.518600][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.518612][ T31] Call Trace: [ 380.518622][ T31] [ 380.518631][ T31] dump_stack_lvl+0x189/0x250 [ 380.518655][ T31] ? __wake_up_klogd+0xd9/0x110 [ 380.518682][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.518702][ T31] ? __pfx__printk+0x10/0x10 [ 380.518734][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 380.518766][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 380.518791][ T31] ? _printk+0xcf/0x120 [ 380.518815][ T31] ? __pfx__printk+0x10/0x10 [ 380.518837][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 380.518867][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 380.518898][ T31] watchdog+0xfee/0x1030 [ 380.518925][ T31] ? watchdog+0x1de/0x1030 [ 380.518957][ T31] kthread+0x711/0x8a0 [ 380.518983][ T31] ? __pfx_watchdog+0x10/0x10 [ 380.519007][ T31] ? __pfx_kthread+0x10/0x10 [ 380.519030][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.519047][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.519065][ T31] ? __pfx_kthread+0x10/0x10 [ 380.519089][ T31] ret_from_fork+0x3fc/0x770 [ 380.519109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 380.519131][ T31] ? __switch_to_asm+0x39/0x70 [ 380.519153][ T31] ? __switch_to_asm+0x33/0x70 [ 380.519173][ T31] ? __pfx_kthread+0x10/0x10 [ 380.519200][ T31] ret_from_fork_asm+0x1a/0x30 [ 380.519238][ T31] [ 380.519263][ T31] Sending NMI from CPU 1 to CPUs 0: [ 380.521811][ T1076] block nbd2: Possible stuck request ffff888025670380: control (read@2048,1024B). Runtime 150 seconds [ 380.526290][ C0] NMI backtrace for cpu 0 [ 380.526312][ C0] CPU: 0 UID: 0 PID: 1076 Comm: kworker/0:1H Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 380.526332][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.526344][ C0] Workqueue: kblockd blk_mq_timeout_work [ 380.526364][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 380.526387][ C0] Code: e8 5e 48 6c fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f 5d d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a da 24 06 cc 44 89 f9 80 e1 07 [ 380.526402][ C0] RSP: 0018:ffffc90003e06cd8 EFLAGS: 00000006 [ 380.526417][ C0] RAX: 1ffffffff3406105 RBX: 00000000000003f9 RCX: 0000000000000000 [ 380.526429][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 380.526440][ C0] RBP: ffffc90003e06eb0 R08: 0000000000000003 R09: 0000000000000004 [ 380.526451][ C0] R10: dffffc0000000000 R11: ffffffff8553c3d0 R12: dffffc0000000000 [ 380.526464][ C0] R13: dffffc0000000000 R14: ffffffff9a0309a0 R15: 0000000000000000 [ 380.526477][ C0] FS: 0000000000000000(0000) GS:ffff8881259e9000(0000) knlGS:0000000000000000 [ 380.526491][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.526504][ C0] CR2: 00007f1f33780ab8 CR3: 000000007d65c000 CR4: 00000000003526f0 [ 380.526519][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.526529][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.526540][ C0] Call Trace: [ 380.526546][ C0] [ 380.526554][ C0] serial8250_console_write+0x581/0x1ba0 [ 380.526581][ C0] ? __lock_acquire+0xab9/0xd20 [ 380.526606][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 380.526628][ C0] ? console_flush_all+0x13a/0xc40 [ 380.526649][ C0] ? console_flush_all+0x13a/0xc40 [ 380.526672][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 380.526692][ C0] ? console_flush_all+0x13a/0xc40 [ 380.526711][ C0] ? console_flush_all+0x13a/0xc40 [ 380.526732][ C0] console_flush_all+0x725/0xc40 [ 380.526753][ C0] ? console_flush_all+0x13a/0xc40 [ 380.526776][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 380.526801][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 380.526826][ C0] console_unlock+0xc4/0x270 [ 380.526844][ C0] ? __pfx_console_unlock+0x10/0x10 [ 380.526860][ C0] ? vprintk_emit+0x400/0x7a0 [ 380.526878][ C0] ? vprintk_emit+0x587/0x7a0 [ 380.526894][ C0] ? vprintk_emit+0x444/0x7a0 [ 380.526911][ C0] ? vprintk_emit+0x444/0x7a0 [ 380.526929][ C0] vprintk_emit+0x5b7/0x7a0 [ 380.526945][ C0] ? vprintk_emit+0x444/0x7a0 [ 380.526963][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 380.526982][ C0] ? __pfx_snprintf+0x10/0x10 [ 380.527004][ C0] ? sched_clock_cpu+0x74/0x430 [ 380.527026][ C0] dev_vprintk_emit+0x337/0x3f0 [ 380.527046][ C0] ? __lock_acquire+0xab9/0xd20 [ 380.527070][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 380.527092][ C0] ? __lock_acquire+0xab9/0xd20 [ 380.527120][ C0] dev_printk_emit+0xe0/0x130 [ 380.527140][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 380.527164][ C0] ? do_raw_spin_lock+0x121/0x290 [ 380.527185][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 380.527204][ C0] ? rcu_is_watching+0x15/0xb0 [ 380.527225][ C0] ? __dev_printk+0x131/0x190 [ 380.527241][ C0] _dev_info+0x10a/0x160 [ 380.527262][ C0] ? __pfx__dev_info+0x10/0x10 [ 380.527281][ C0] ? nbd_get_config_unlocked+0x152/0x210 [ 380.527305][ C0] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 380.527332][ C0] nbd_xmit_timeout+0x832/0xb30 [ 380.527354][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.527372][ C0] blk_mq_handle_expired+0x16f/0x2c0 [ 380.527391][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 380.527409][ C0] bt_iter+0x2f0/0x3c0 [ 380.527431][ C0] sbitmap_for_each_set+0x301/0x5e0 [ 380.527459][ C0] ? __pfx_bt_iter+0x10/0x10 [ 380.527479][ C0] ? __pfx_sbitmap_for_each_set+0x10/0x10 [ 380.527499][ C0] ? xa_find+0x25b/0x2b0 [ 380.527522][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 380.527541][ C0] blk_mq_queue_tag_busy_iter+0x43b/0x770 [ 380.527562][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 380.527582][ C0] ? __pfx_blk_mq_queue_tag_busy_iter+0x10/0x10 [ 380.527602][ C0] ? debug_object_free+0x2a2/0x340 [ 380.527628][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 380.527650][ C0] ? __synchronize_srcu+0x316/0x3a0 [ 380.527674][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 380.527690][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 380.527714][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 380.527737][ C0] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 380.527759][ C0] ? synchronize_srcu+0x295/0x2c0 [ 380.527784][ C0] blk_mq_timeout_work+0x1d6/0x3e0 [ 380.527801][ C0] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 380.527821][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.527836][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 380.527863][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 380.527890][ C0] process_scheduled_works+0xade/0x17b0 [ 380.527931][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.527965][ C0] worker_thread+0x8a0/0xda0 [ 380.527983][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.528003][ C0] ? __kthread_parkme+0x7b/0x200 [ 380.528026][ C0] kthread+0x711/0x8a0 [ 380.528047][ C0] ? __pfx_worker_thread+0x10/0x10 [ 380.528063][ C0] ? __pfx_kthread+0x10/0x10 [ 380.528083][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.528098][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.528115][ C0] ? __pfx_kthread+0x10/0x10 [ 380.528135][ C0] ret_from_fork+0x3fc/0x770 [ 380.528156][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 380.528175][ C0] ? __switch_to_asm+0x39/0x70 [ 380.528195][ C0] ? __switch_to_asm+0x33/0x70 [ 380.528215][ C0] ? __pfx_kthread+0x10/0x10 [ 380.528235][ C0] ret_from_fork_asm+0x1a/0x30 [ 380.528263][ C0] [ 380.553814][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 380.553836][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 380.553863][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.553877][ T31] Call Trace: [ 380.553886][ T31] [ 380.553894][ T31] dump_stack_lvl+0x99/0x250 [ 380.553920][ T31] ? __asan_memcpy+0x40/0x70 [ 380.553949][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.553971][ T31] ? __pfx__printk+0x10/0x10 [ 380.554004][ T31] panic+0x2db/0x790 [ 380.554031][ T31] ? __pfx_panic+0x10/0x10 [ 380.554048][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 380.554074][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 380.554103][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 380.554139][ T31] watchdog+0x102d/0x1030 [ 380.554167][ T31] ? watchdog+0x1de/0x1030 [ 380.554201][ T31] kthread+0x711/0x8a0 [ 380.554227][ T31] ? __pfx_watchdog+0x10/0x10 [ 380.554252][ T31] ? __pfx_kthread+0x10/0x10 [ 380.554277][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.554296][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.554315][ T31] ? __pfx_kthread+0x10/0x10 [ 380.554339][ T31] ret_from_fork+0x3fc/0x770 [ 380.554360][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 380.554384][ T31] ? __switch_to_asm+0x39/0x70 [ 380.554412][ T31] ? __switch_to_asm+0x33/0x70 [ 380.554434][ T31] ? __pfx_kthread+0x10/0x10 [ 380.554458][ T31] ret_from_fork_asm+0x1a/0x30 [ 380.554495][ T31] [ 380.556402][ T31] Kernel Offset: disabled