last executing test programs: 2m35.362492483s ago: executing program 1 (id=1055): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x3}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2m34.417495749s ago: executing program 1 (id=1060): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, 0x0, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, 0x0, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002100)=ANY=[@ANYBLOB], 0xb0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10], 0x4c}}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 2m32.494858258s ago: executing program 1 (id=1065): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendmmsg$sock(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 2m32.14172418s ago: executing program 1 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x448882, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x21, 0x2, 0x2) getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m28.799873675s ago: executing program 1 (id=1071): r0 = syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x60b, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) read$FUSE(r1, 0x0, 0xeffd) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) 2m27.206608449s ago: executing program 1 (id=1077): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 2m26.19960718s ago: executing program 32 (id=1077): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 1m34.457644107s ago: executing program 5 (id=1246): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m33.538193555s ago: executing program 5 (id=1249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000100)) 1m32.271186969s ago: executing program 5 (id=1255): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = dup(0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) writev(r1, &(0x7f00000005c0), 0x20000000000000de) 1m29.162513401s ago: executing program 5 (id=1261): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200010004"], 0x51b402) 1m28.729132122s ago: executing program 5 (id=1263): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x48, 0x0, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd38}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x576}]}, {0x9, 0x6, "250a9af528"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) io_uring_enter(r4, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) r5 = socket(0x2, 0x3, 0x9) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r7, &(0x7f0000032600)={0x2020}, 0x2020) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f00000016c0)) 1m23.449570694s ago: executing program 5 (id=1281): fsmount(0xffffffffffffffff, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000500)={0x0, 0x7, 0x0, 0x3, 0x401, 0x4c6, 0xfffffffffffffc9e, 0x8, 0x7fff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect(0x2, 0x27d, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000080), 0x4) close(r9) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0) 1m7.72517917s ago: executing program 33 (id=1281): fsmount(0xffffffffffffffff, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000500)={0x0, 0x7, 0x0, 0x3, 0x401, 0x4c6, 0xfffffffffffffc9e, 0x8, 0x7fff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect(0x2, 0x27d, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000080), 0x4) close(r9) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0) 14.823983066s ago: executing program 4 (id=1517): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) lseek(r1, 0x100000, 0x3) write(r1, 0x0, 0x0) 14.044521456s ago: executing program 4 (id=1521): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x12e9, 0x100, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0303001e0000000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES64, @ANYRES32, @ANYRES16=r6, @ANYBLOB="69d5676278f6b31dc0f83af6730383c730d944c9461b2c08ce87f37a9d6eb7db248631dcf7f8b60a4ae39bb097bb6d07e47ef43945d7741c5f71263c9fddfef6052dcf33d6040139693febc9c6b672febc0410b0acaaf88766060af53399e8a41e31c7b6764de8573e65110b48d6899051b324361ba01f6b014a5eab18f361ce43ea4849dba392aebdd3b1e2f47cbe7fb4fef1f5d85018e43bd1c54c2a8f6757b4ba166642c53bba49", @ANYBLOB="771dc9c9bd2c862bd30d1b4a40da132d258c990b842246a085570e1f18bb5c6a60956781dd604357e827739773eaff7b2f12906a2d72"], 0x7c}}, 0x4054891) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048010) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5d84}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) chroot(&(0x7f0000000140)='./file0\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r8}) 10.062112786s ago: executing program 3 (id=1531): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) lseek(r1, 0x100000, 0x3) write(r1, 0x0, 0x0) 8.834178534s ago: executing program 2 (id=1533): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x9, 0x1, 0x15c2, 0x58, 0xc7, 0x2, 0x7, 'syz1\x00'}) 8.747548923s ago: executing program 4 (id=1535): io_uring_setup(0x4332, &(0x7f0000000440)={0x0, 0x986d, 0x1000, 0xfffffff8, 0x100002}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000001240)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 8.66662385s ago: executing program 3 (id=1536): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 7.573653452s ago: executing program 3 (id=1538): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x12e9, 0x100, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0303001e0000000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES64=r5, @ANYRES32, @ANYRES16=r7, @ANYBLOB="69d5676278f6b31dc0f83af6730383c730d944c9461b2c08ce87f37a9d6eb7db248631dcf7f8b60a4ae39bb097bb6d07e47ef43945d7741c5f71263c9fddfef6052dcf33d6040139693febc9c6b672febc0410b0acaaf88766060af53399e8a41e31c7b6764de8573e65110b48d6899051b324361ba01f6b014a5eab18f361ce43ea4849dba392aebdd3b1e2f47cbe7fb4fef1f5d85018e43bd1c54c2a8f6757b4ba166642c53bba49", @ANYBLOB="771dc9c9bd2c862bd30d1b4a40da132d258c990b842246a085570e1f18bb5c6a60956781dd604357e827739773eaff7b2f12906a2d72"], 0x7c}}, 0x4054891) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048010) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5d84}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) chroot(&(0x7f0000000140)='./file0\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r9}) 7.504828825s ago: executing program 4 (id=1539): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x6082c0, 0x0) 7.484281153s ago: executing program 2 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000180)='nomand\x00', 0x0, 0x0) 6.602634174s ago: executing program 2 (id=1543): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat2$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x40, 0x185, 0x5}, 0x18) 5.990839419s ago: executing program 3 (id=1545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 5.906611796s ago: executing program 6 (id=1546): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) lseek(r1, 0x100000, 0x3) write(r1, 0x0, 0x0) 5.731874832s ago: executing program 2 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 4.854380416s ago: executing program 6 (id=1549): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="b8e863ffa5aeb6a7", 0x8}, {&(0x7f00000007c0)="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", 0x149}], 0x2, &(0x7f00000021c0)=[{0x100c, 0x119, 0x5, "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"}, {0xc, 0x11, 0xfffffffb}, {0xbc, 0x118, 0x5, "bf8ce0d32831b29e4d9699cf5798ff120de0c721d94634ac2e805a4ca7aa15d824da2ed5d6555350a2159044cde7bc5c09dab97a1111e9731f48892fa2358d059c160162335df78d1faa803aa49697ec91854074c796d880845668bf88a75cd09e3c8f30f52c75fa03f2af3f9dca5a1029228b084e17fbe63d1c1a5627a4c257a5be58ac39d076f4c67eb388819af72a229513743aa19df0bdec568f93278999f8ac795e20028830f5d2789f3f4395"}, {0x78, 0x112, 0x6, "6ddd7bdae1143d4b9a5a9df0fc4eb855c8ed0a2c710867087789c927f0377d92fe7b293a408187f1ff59cdce5556d287f5de1457610c345a8f51993874d92a55dc70a1611102ab2bca26f82f35a759dbf8c3877878decd680c4ce706321238f0dc106edd8bed43d5ee590cd5"}], 0x114c}, 0x0, 0x8841}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) 4.796544975s ago: executing program 2 (id=1550): io_uring_setup(0x4332, &(0x7f0000000440)={0x0, 0x986d, 0x1000, 0xfffffff8, 0x100002}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000001240)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 4.693060183s ago: executing program 0 (id=1551): syz_init_net_socket$llc(0x1a, 0x1, 0x0) 3.623102199s ago: executing program 2 (id=1552): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup(r1) ppoll(0x0, 0x0, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) writev(r2, &(0x7f00000005c0), 0x20000000000000de) 3.475384681s ago: executing program 6 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000180)='nomand\x00', 0x0, 0x0) 3.440594643s ago: executing program 0 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3.439235876s ago: executing program 3 (id=1555): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x12e9, 0x100, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0303001e0000000000002a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES64=r5, @ANYRES32, @ANYRES16=r7, @ANYBLOB="69d5676278f6b31dc0f83af6730383c730d944c9461b2c08ce87f37a9d6eb7db248631dcf7f8b60a4ae39bb097bb6d07e47ef43945d7741c5f71263c9fddfef6052dcf33d6040139693febc9c6b672febc0410b0acaaf88766060af53399e8a41e31c7b6764de8573e65110b48d6899051b324361ba01f6b014a5eab18f361ce43ea4849dba392aebdd3b1e2f47cbe7fb4fef1f5d85018e43bd1c54c2a8f6757b4ba166642c53bba49", @ANYBLOB="771dc9c9bd2c862bd30d1b4a40da132d258c990b842246a085570e1f18bb5c6a60956781dd604357e827739773eaff7b2f12906a2d72"], 0x7c}}, 0x4054891) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048010) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5d84}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) chroot(&(0x7f0000000140)='./file0\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r9}) 3.409928174s ago: executing program 4 (id=1556): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.270655472s ago: executing program 0 (id=1557): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat2$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x40, 0x185, 0x5}, 0x18) 3.263945784s ago: executing program 6 (id=1558): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000140)=0x10) 3.128594336s ago: executing program 0 (id=1559): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) fcntl$addseals(r0, 0x409, 0x8) lseek(r0, 0x100000, 0x3) write(r0, 0x0, 0x0) 2.898600154s ago: executing program 0 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) 1.170358716s ago: executing program 6 (id=1561): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.084168913s ago: executing program 0 (id=1562): io_uring_setup(0x4332, &(0x7f0000000440)={0x0, 0x986d, 0x1000, 0xfffffff8, 0x100002}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e", 0x4f}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000001240)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 1.062457127s ago: executing program 4 (id=1563): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="b8e863ffa5aeb6a7", 0x8}, {&(0x7f00000007c0)="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", 0x149}], 0x2, &(0x7f00000021c0)=[{0x100c, 0x119, 0x5, "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"}, {0xc, 0x11, 0xfffffffb}, {0xbc, 0x118, 0x5, "bf8ce0d32831b29e4d9699cf5798ff120de0c721d94634ac2e805a4ca7aa15d824da2ed5d6555350a2159044cde7bc5c09dab97a1111e9731f48892fa2358d059c160162335df78d1faa803aa49697ec91854074c796d880845668bf88a75cd09e3c8f30f52c75fa03f2af3f9dca5a1029228b084e17fbe63d1c1a5627a4c257a5be58ac39d076f4c67eb388819af72a229513743aa19df0bdec568f93278999f8ac795e20028830f5d2789f3f4395"}, {0x78, 0x112, 0x6, "6ddd7bdae1143d4b9a5a9df0fc4eb855c8ed0a2c710867087789c927f0377d92fe7b293a408187f1ff59cdce5556d287f5de1457610c345a8f51993874d92a55dc70a1611102ab2bca26f82f35a759dbf8c3877878decd680c4ce706321238f0dc106edd8bed43d5ee590cd5"}], 0x114c}, 0x0, 0x8841}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) 1.011329559s ago: executing program 3 (id=1564): syz_init_net_socket$llc(0x1a, 0x1, 0x0) 0s ago: executing program 6 (id=1565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) kernel console output (not intermixed with test programs): ed USB device number 8 using dummy_hcd [ 297.352812][ T5884] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 297.357285][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.412349][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.567726][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 297.603227][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.603947][ T5884] usb 3-1: config 0 descriptor?? [ 297.636659][ T5884] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 297.676622][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.721998][ T5921] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.921771][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.528506][ T5884] gp8psk: usb in 128 operation failed. [ 298.639195][ T5921] usb 1-1: config 0 descriptor?? [ 298.657850][ T7578] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 298.678062][ T5884] gp8psk: usb in 137 operation failed. [ 298.684209][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.695498][ T5884] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 298.705724][ T5884] usb 3-1: media controller created [ 298.749984][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.817832][ T5884] gp8psk_fe: Frontend attached [ 298.836221][ T5884] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 298.860944][ T5884] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 299.516261][ T5921] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 299.535074][ T5921] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 299.568593][ T5884] gp8psk: usb in 138 operation failed. [ 299.605153][ T5884] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 299.637841][ T5921] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 299.660810][ T5884] gp8psk: found Genpix USB device pID = 203 (hex) [ 299.742876][ T5884] usb 3-1: USB disconnect, device number 10 [ 299.830636][ T7594] netlink: 'syz.2.434': attribute type 6 has an invalid length. [ 299.870157][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.906717][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.024801][ T5884] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 301.189490][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.439'. [ 301.646525][ T5883] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 302.349106][ T7465] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 302.385256][ T30] audit: type=1800 audit(1744618315.194:2): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.443" name="/" dev="9p" ino=2 res=0 errno=0 [ 302.527074][ T7465] usb 3-1: Using ep0 maxpacket: 8 [ 302.545371][ T7465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.568101][ T7465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.597048][ T7465] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.115884][ T48] usb 1-1: USB disconnect, device number 8 [ 303.122988][ T7465] usb 3-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 303.254869][ T7465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.699965][ T7465] usb 3-1: config 0 descriptor?? [ 303.873050][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 304.254800][ T7465] logitech-hidpp-device 0003:046D:C09B.0004: item fetching failed at offset 3/5 [ 304.266222][ T7465] logitech-hidpp-device 0003:046D:C09B.0004: hidpp_probe:parse failed [ 304.275776][ T7465] logitech-hidpp-device 0003:046D:C09B.0004: probe with driver logitech-hidpp-device failed with error -22 [ 305.165257][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 305.661633][ T5904] usb 3-1: USB disconnect, device number 11 [ 306.816751][ T7664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.472740][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 310.844107][ T7698] sp0: Synchronizing with TNC [ 310.897343][ T7694] [U] è [ 311.990166][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 312.440328][ T7712] FAULT_INJECTION: forcing a failure. [ 312.440328][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.457008][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.0.470 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 312.457048][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.457060][ T7712] Call Trace: [ 312.457068][ T7712] [ 312.457077][ T7712] dump_stack_lvl+0x241/0x360 [ 312.457116][ T7712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.457141][ T7712] ? __pfx__printk+0x10/0x10 [ 312.457183][ T7712] should_fail_ex+0x424/0x570 [ 312.457211][ T7712] _copy_from_user+0x2d/0xb0 [ 312.457240][ T7712] copy_msghdr_from_user+0xb3/0x580 [ 312.457273][ T7712] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 312.457295][ T7712] ? __fget_files+0x2a/0x420 [ 312.457322][ T7712] ? __fget_files+0x2a/0x420 [ 312.457353][ T7712] __sys_sendmsg+0x20a/0x360 [ 312.457380][ T7712] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.457463][ T7712] ? do_syscall_64+0xb6/0x230 [ 312.457491][ T7712] do_syscall_64+0xf3/0x230 [ 312.457515][ T7712] ? clear_bhb_loop+0x45/0xa0 [ 312.457539][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.457558][ T7712] RIP: 0033:0x7ff48378d169 [ 312.457577][ T7712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.457593][ T7712] RSP: 002b:00007ff48464d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.457616][ T7712] RAX: ffffffffffffffda RBX: 00007ff4839a6080 RCX: 00007ff48378d169 [ 312.457631][ T7712] RDX: 0000000024000044 RSI: 0000200000000000 RDI: 0000000000000005 [ 312.457643][ T7712] RBP: 00007ff48464d090 R08: 0000000000000000 R09: 0000000000000000 [ 312.457655][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.457667][ T7712] R13: 0000000000000000 R14: 00007ff4839a6080 R15: 00007ffe88f4e308 [ 312.457699][ T7712] [ 312.641523][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.651792][ T7715] netlink: 128 bytes leftover after parsing attributes in process `syz.1.471'. [ 312.651855][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 312.867850][ T7716] capability: warning: `syz.3.473' uses deprecated v2 capabilities in a way that may be insecure [ 316.847543][ T7731] virtio-fs: tag <(null)> not found [ 317.608138][ T48] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 317.817061][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 317.990225][ T48] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 318.084868][ T48] usb 2-1: config 0 has no interface number 0 [ 318.220882][ T48] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 318.327300][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.408101][ T48] usb 2-1: Product: syz [ 318.412396][ T48] usb 2-1: Manufacturer: syz [ 318.427633][ T48] usb 2-1: SerialNumber: syz [ 318.456410][ T48] usb 2-1: config 0 descriptor?? [ 318.470229][ T48] gspca_main: etoms-2.14.0 probing 102c:6251 [ 319.590166][ T7745] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 320.872228][ T5883] usb 2-1: USB disconnect, device number 7 [ 321.173142][ T7760] overlayfs: missing 'lowerdir' [ 321.610201][ T7763] orangefs_mount: mount request failed with -4 [ 322.177204][ T5904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 322.491207][ T7789] FAULT_INJECTION: forcing a failure. [ 322.491207][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 322.504631][ T7789] CPU: 1 UID: 0 PID: 7789 Comm: syz.3.490 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 322.504662][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.504674][ T7789] Call Trace: [ 322.504683][ T7789] [ 322.504692][ T7789] dump_stack_lvl+0x241/0x360 [ 322.504731][ T7789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.504758][ T7789] ? __pfx__printk+0x10/0x10 [ 322.504788][ T7789] ? __pfx___might_resched+0x10/0x10 [ 322.504817][ T7789] should_fail_ex+0x424/0x570 [ 322.504846][ T7789] should_failslab+0xac/0x100 [ 322.504869][ T7789] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 322.504889][ T7789] ? __d_alloc+0x31/0x740 [ 322.504922][ T7789] __d_alloc+0x31/0x740 [ 322.504947][ T7789] ? preempt_schedule_irq+0xfe/0x1c0 [ 322.504974][ T7789] d_alloc_parallel+0xe9/0x1660 [ 322.505007][ T7789] ? preempt_schedule+0xe4/0xf0 [ 322.505041][ T7789] ? preempt_schedule_common+0x84/0xd0 [ 322.505064][ T7789] ? preempt_schedule+0xe4/0xf0 [ 322.505084][ T7789] ? __pfx_preempt_schedule+0x10/0x10 [ 322.505115][ T7789] ? __pfx_d_alloc_parallel+0x10/0x10 [ 322.505148][ T7789] ? __raw_spin_lock_init+0x45/0x100 [ 322.505178][ T7789] ? __init_waitqueue_head+0xae/0x150 [ 322.505211][ T7789] __lookup_slow+0x127/0x400 [ 322.505241][ T7789] ? __pfx___lookup_slow+0x10/0x10 [ 322.505262][ T7789] ? __d_lookup+0x64/0x7b0 [ 322.505298][ T7789] ? __sanitizer_cov_trace_pc+0x5d/0x70 [ 322.505336][ T7789] lookup_one_unlocked+0x16e/0x2d0 [ 322.505365][ T7789] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 322.505387][ T7789] ? ovl_lookup+0x8b4/0x2a70 [ 322.505410][ T7789] ? do_sys_openat2+0x12b/0x1d0 [ 322.505429][ T7789] ? __x64_sys_openat+0x249/0x2a0 [ 322.505449][ T7789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.505477][ T7789] ovl_lookup_single+0x204/0xba0 [ 322.505511][ T7789] ? __pfx_ovl_lookup_single+0x10/0x10 [ 322.505549][ T7789] ovl_lookup_layer+0x419/0x520 [ 322.505592][ T7789] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 322.505613][ T7789] ? rcu_is_watching+0x15/0xb0 [ 322.505637][ T7789] ? trace_kmalloc+0x1f/0xd0 [ 322.505655][ T7789] ? ovl_lookup+0x8b4/0x2a70 [ 322.505682][ T7789] ovl_lookup+0xcfb/0x2a70 [ 322.505752][ T7789] ? __pfx_ovl_lookup+0x10/0x10 [ 322.505772][ T7789] ? rcu_is_watching+0x15/0xb0 [ 322.505798][ T7789] ? preempt_schedule_irq+0x145/0x1c0 [ 322.505820][ T7789] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 322.505839][ T7789] ? smack_inode_permission+0x2dd/0x380 [ 322.505876][ T7789] ? irqentry_exit+0x63/0x90 [ 322.505895][ T7789] ? lockdep_hardirqs_on+0x9d/0x150 [ 322.505935][ T7789] ? bpf_lsm_inode_create+0x9/0x10 [ 322.505961][ T7789] ? security_inode_create+0xbe/0x340 [ 322.505984][ T7789] ? __pfx_ovl_lookup+0x10/0x10 [ 322.506007][ T7789] path_openat+0x11c3/0x35d0 [ 322.506088][ T7789] ? __pfx_path_openat+0x10/0x10 [ 322.506111][ T7789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.506156][ T7789] do_filp_open+0x284/0x4e0 [ 322.506186][ T7789] ? __pfx_do_filp_open+0x10/0x10 [ 322.506208][ T7789] ? do_raw_spin_lock+0x151/0x370 [ 322.506281][ T7789] do_sys_openat2+0x12b/0x1d0 [ 322.506306][ T7789] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.506329][ T7789] ? preempt_schedule_irq+0x145/0x1c0 [ 322.506351][ T7789] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 322.506382][ T7789] __x64_sys_openat+0x249/0x2a0 [ 322.506409][ T7789] ? __pfx___x64_sys_openat+0x10/0x10 [ 322.506442][ T7789] ? trace_irq_enable+0x2c/0x120 [ 322.506471][ T7789] do_syscall_64+0xf3/0x230 [ 322.506494][ T7789] ? clear_bhb_loop+0x45/0xa0 [ 322.506519][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.506538][ T7789] RIP: 0033:0x7f5f9e58d169 [ 322.506557][ T7789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.506574][ T7789] RSP: 002b:00007f5f9c3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 322.506599][ T7789] RAX: ffffffffffffffda RBX: 00007f5f9e7a6160 RCX: 00007f5f9e58d169 [ 322.506612][ T7789] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 322.506626][ T7789] RBP: 00007f5f9c3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 322.506638][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.506649][ T7789] R13: 0000000000000000 R14: 00007f5f9e7a6160 R15: 00007ffe5a5bb618 [ 322.506684][ T7789] [ 322.859147][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.887725][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.501506][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.508529][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.518275][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.545838][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 323.603632][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.629962][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.643495][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.682726][ T5904] usb 3-1: config 0 descriptor?? [ 323.976526][ T7795] mac80211_hwsim hwsim7 3@0ÿ: renamed from wlan0 [ 324.630670][ T5904] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 324.677983][ T5904] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 324.808367][ T7801] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.171939][ T7806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.182553][ T7806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.356352][ T7807] virtio-fs: tag <(null)> not found [ 326.101615][ T7806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'. [ 326.761064][ T7823] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.497'. [ 326.772634][ T7822] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.497'. [ 326.932855][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 327.545873][ T48] usb 3-1: USB disconnect, device number 12 [ 328.694689][ T7849] input: syz1 as /devices/virtual/input/input28 [ 329.381840][ T7851] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 329.422448][ T7853] netlink: 'syz.4.507': attribute type 6 has an invalid length. [ 329.468680][ T7851] overlayfs: missing 'lowerdir' [ 329.548713][ T7855] FAULT_INJECTION: forcing a failure. [ 329.548713][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 329.627124][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.3.509 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 329.627158][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.627170][ T7855] Call Trace: [ 329.627179][ T7855] [ 329.627188][ T7855] dump_stack_lvl+0x241/0x360 [ 329.627224][ T7855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.627249][ T7855] ? __pfx__printk+0x10/0x10 [ 329.627279][ T7855] ? __pfx___might_resched+0x10/0x10 [ 329.627305][ T7855] should_fail_ex+0x424/0x570 [ 329.627331][ T7855] should_failslab+0xac/0x100 [ 329.627352][ T7855] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 329.627370][ T7855] ? __d_alloc+0x31/0x740 [ 329.627400][ T7855] __d_alloc+0x31/0x740 [ 329.627428][ T7855] d_alloc_parallel+0xe9/0x1660 [ 329.627452][ T7855] ? register_lock_class+0x54/0x330 [ 329.627477][ T7855] ? __lock_acquire+0xad5/0xd80 [ 329.627514][ T7855] ? __pfx_d_alloc_parallel+0x10/0x10 [ 329.627544][ T7855] ? __raw_spin_lock_init+0x45/0x100 [ 329.627570][ T7855] ? __init_waitqueue_head+0xae/0x150 [ 329.627600][ T7855] __lookup_slow+0x127/0x400 [ 329.627626][ T7855] ? __pfx___lookup_slow+0x10/0x10 [ 329.627657][ T7855] ? make_vfsuid+0x52/0xa0 [ 329.627683][ T7855] ? lookup_fast+0x196/0x5a0 [ 329.627709][ T7855] lookup_slow+0x53/0x70 [ 329.627735][ T7855] walk_component+0x2f4/0x420 [ 329.627762][ T7855] path_lookupat+0x169/0x440 [ 329.627791][ T7855] filename_lookup+0x290/0x670 [ 329.627821][ T7855] ? __pfx_filename_lookup+0x10/0x10 [ 329.627865][ T7855] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 329.627880][ T7855] ? kmem_cache_alloc_noprof+0x237/0x390 [ 329.627895][ T7855] ? getname_kernel+0x140/0x2f0 [ 329.627930][ T7855] kern_path+0x35/0x50 [ 329.627953][ T7855] lookup_bdev+0xc8/0x290 [ 329.627980][ T7855] ? __pfx___mutex_trylock_common+0x10/0x10 [ 329.628005][ T7855] ? __pfx_lookup_bdev+0x10/0x10 [ 329.628030][ T7855] ? rcu_is_watching+0x15/0xb0 [ 329.628053][ T7855] ? trace_contention_end+0x3c/0x120 [ 329.628079][ T7855] mount_bdev+0xac/0x2d0 [ 329.628124][ T7855] ? __pfx_bfs_fill_super+0x10/0x10 [ 329.628149][ T7855] ? __pfx_mount_bdev+0x10/0x10 [ 329.628179][ T7855] ? rcu_is_watching+0x15/0xb0 [ 329.628200][ T7855] ? cap_capable+0x139/0x450 [ 329.628229][ T7855] legacy_get_tree+0xee/0x190 [ 329.628250][ T7855] ? __pfx_bfs_mount+0x10/0x10 [ 329.628275][ T7855] vfs_get_tree+0x90/0x2b0 [ 329.628304][ T7855] vfs_cmd_create+0xa0/0x1f0 [ 329.628326][ T7855] ? __se_sys_fsconfig+0xa14/0xf40 [ 329.628353][ T7855] __se_sys_fsconfig+0xa20/0xf40 [ 329.628390][ T7855] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 329.628413][ T7855] ? ksys_write+0x275/0x2d0 [ 329.628455][ T7855] ? __x64_sys_fsconfig+0x20/0xc0 [ 329.628484][ T7855] do_syscall_64+0xf3/0x230 [ 329.628511][ T7855] ? clear_bhb_loop+0x45/0xa0 [ 329.628533][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.628551][ T7855] RIP: 0033:0x7f5f9e58d169 [ 329.628571][ T7855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.628588][ T7855] RSP: 002b:00007f5f9f315038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 329.628612][ T7855] RAX: ffffffffffffffda RBX: 00007f5f9e7a5fa0 RCX: 00007f5f9e58d169 [ 329.628625][ T7855] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 329.628635][ T7855] RBP: 00007f5f9f315090 R08: 0000000000000000 R09: 0000000000000000 [ 329.628646][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.628657][ T7855] R13: 0000000000000000 R14: 00007f5f9e7a5fa0 R15: 00007ffe5a5bb618 [ 329.628685][ T7855] [ 331.355218][ T7871] ufs: Invalid option: ":š@ÑbE3 ‚¯~‚– [ 331.355218][ T7871] c_¢5ѤFÁÖÖǨǃ¨‘ÕÐm2Fu" or missing value [ 331.410082][ T7871] ufs: wrong mount options [ 333.582309][ T7896] FAULT_INJECTION: forcing a failure. [ 333.582309][ T7896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.597018][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.4.521 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 333.597048][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.597061][ T7896] Call Trace: [ 333.597068][ T7896] [ 333.597075][ T7896] dump_stack_lvl+0x241/0x360 [ 333.597108][ T7896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.597129][ T7896] ? __pfx__printk+0x10/0x10 [ 333.597159][ T7896] should_fail_ex+0x424/0x570 [ 333.597185][ T7896] _copy_to_user+0x31/0xb0 [ 333.597214][ T7896] simple_read_from_buffer+0xc4/0x170 [ 333.597235][ T7896] proc_fail_nth_read+0x1ef/0x260 [ 333.597260][ T7896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.597285][ T7896] ? rw_verify_area+0x246/0x630 [ 333.597310][ T7896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.597336][ T7896] vfs_read+0x21f/0xb90 [ 333.597362][ T7896] ? __pfx___mutex_lock+0x10/0x10 [ 333.597385][ T7896] ? __pfx_vfs_read+0x10/0x10 [ 333.597410][ T7896] ? __fget_files+0x2a/0x420 [ 333.597432][ T7896] ? __fget_files+0x39d/0x420 [ 333.597450][ T7896] ? __fget_files+0x2a/0x420 [ 333.597478][ T7896] ksys_read+0x19d/0x2d0 [ 333.597505][ T7896] ? __pfx_ksys_read+0x10/0x10 [ 333.597537][ T7896] ? do_syscall_64+0xb6/0x230 [ 333.597564][ T7896] do_syscall_64+0xf3/0x230 [ 333.597586][ T7896] ? clear_bhb_loop+0x45/0xa0 [ 333.597610][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.597628][ T7896] RIP: 0033:0x7fea03f8bb7c [ 333.597677][ T7896] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 333.597695][ T7896] RSP: 002b:00007fea04e32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.597718][ T7896] RAX: ffffffffffffffda RBX: 00007fea041a5fa0 RCX: 00007fea03f8bb7c [ 333.597732][ T7896] RDX: 000000000000000f RSI: 00007fea04e320a0 RDI: 000000000000001c [ 333.597744][ T7896] RBP: 00007fea04e32090 R08: 0000000000000000 R09: 0000000000000000 [ 333.597755][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.597765][ T7896] R13: 0000000000000000 R14: 00007fea041a5fa0 R15: 00007ffea17a7e18 [ 333.597812][ T7896] [ 333.824635][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.836681][ T7897] 9pnet_virtio: no channels available for device 127.0.0.1 [ 333.919174][ T7896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.185269][ T7906] netlink: 'syz.4.524': attribute type 6 has an invalid length. [ 334.283264][ T5884] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 334.339325][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 334.429334][ T7912] input: syz1 as /devices/virtual/input/input29 [ 334.478615][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.532282][ T5884] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.555561][ T7913] FAULT_INJECTION: forcing a failure. [ 334.555561][ T7913] name failslab, interval 1, probability 0, space 0, times 0 [ 334.608537][ T5884] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.667578][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.4.526 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 334.667614][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.667627][ T7913] Call Trace: [ 334.667636][ T7913] [ 334.667645][ T7913] dump_stack_lvl+0x241/0x360 [ 334.667684][ T7913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.667710][ T7913] ? __pfx__printk+0x10/0x10 [ 334.667742][ T7913] ? __pfx___might_resched+0x10/0x10 [ 334.667770][ T7913] should_fail_ex+0x424/0x570 [ 334.667796][ T7913] should_failslab+0xac/0x100 [ 334.667820][ T7913] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 334.667842][ T7913] ? __alloc_skb+0x1c2/0x480 [ 334.667868][ T7913] __alloc_skb+0x1c2/0x480 [ 334.667894][ T7913] ? __pfx___alloc_skb+0x10/0x10 [ 334.667910][ T7913] ? __rcu_read_unlock+0xa1/0x110 [ 334.667941][ T7913] ? netlink_autobind+0xd6/0x2f0 [ 334.667968][ T7913] ? netlink_autobind+0x2b0/0x2f0 [ 334.668001][ T7913] netlink_sendmsg+0x638/0xcd0 [ 334.668054][ T7913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.668088][ T7913] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 334.668122][ T7913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.668146][ T7913] __sock_sendmsg+0x221/0x270 [ 334.668177][ T7913] ____sys_sendmsg+0x523/0x860 [ 334.668210][ T7913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.668228][ T7913] ? __fget_files+0x2a/0x420 [ 334.668254][ T7913] ? __fget_files+0x2a/0x420 [ 334.668287][ T7913] __sys_sendmsg+0x271/0x360 [ 334.668306][ T7913] ? preempt_schedule_irq+0xfe/0x1c0 [ 334.668335][ T7913] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.668421][ T7913] ? trace_irq_enable+0x2c/0x120 [ 334.668455][ T7913] do_syscall_64+0xf3/0x230 [ 334.668479][ T7913] ? clear_bhb_loop+0x45/0xa0 [ 334.668503][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.668531][ T7913] RIP: 0033:0x7fea03f8d169 [ 334.668551][ T7913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.668569][ T7913] RSP: 002b:00007fea04e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.668594][ T7913] RAX: ffffffffffffffda RBX: 00007fea041a6080 RCX: 00007fea03f8d169 [ 334.668610][ T7913] RDX: 0000000004000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 334.668623][ T7913] RBP: 00007fea04e11090 R08: 0000000000000000 R09: 0000000000000000 [ 334.668636][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.668648][ T7913] R13: 0000000000000000 R14: 00007fea041a6080 R15: 00007ffea17a7e18 [ 334.668681][ T7913] [ 334.963011][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.072059][ T7916] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 335.117179][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 335.131575][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 335.152803][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.168465][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.194928][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 335.517189][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 335.528618][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 335.538418][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.551006][ T5882] usb 3-1: config 0 descriptor?? [ 335.558905][ T7904] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 335.793306][ T5884] usb 4-1: config 0 descriptor?? [ 335.937532][ T5884] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 336.011132][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 336.044225][ T5140] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 336.047077][ T5881] usb 3-1: USB disconnect, device number 13 [ 336.234986][ T7465] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 336.297803][ T5884] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 336.482739][ T5884] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 336.499307][ T5884] usb 4-1: media controller created [ 336.513312][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.539266][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 336.630449][ T7925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.667557][ T7925] dvb-usb: bulk message failed: -22 (4/0) [ 336.714430][ T7465] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.264243][ T5884] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 337.276274][ T7465] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 337.288443][ T7465] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 337.300822][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 337.323683][ T7465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.363465][ T5884] dvb-usb: schedule remote query interval to 150 msecs. [ 337.389054][ T7465] usb 1-1: config 0 descriptor?? [ 337.394441][ T5884] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 337.411202][ T7465] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 337.424523][ T7465] dvb-usb: bulk message failed: -22 (3/0) [ 337.450530][ T7465] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 337.528753][ T7465] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 337.545290][ T7465] usb 1-1: media controller created [ 337.557797][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 337.573837][ T7465] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.583203][ T5884] dvb-usb: error while querying for an remote control event. [ 338.089456][ T7934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.123746][ T7934] dvb-usb: bulk message failed: -22 (4/0) [ 338.583437][ T7465] dvb-usb: bulk message failed: -22 (6/0) [ 338.592274][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 338.604214][ T7465] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 338.611940][ T5884] dvb-usb: error while querying for an remote control event. [ 338.635374][ T5904] usb 4-1: USB disconnect, device number 10 [ 338.683729][ T7465] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 338.916014][ T7465] dvb-usb: schedule remote query interval to 150 msecs. [ 338.956415][ T7465] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.107247][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 339.149925][ T5884] dvb-usb: error while querying for an remote control event. [ 339.201064][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 339.249213][ T7465] usb 1-1: USB disconnect, device number 9 [ 339.481876][ T7465] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 339.595390][ T7945] netlink: 'syz.0.536': attribute type 6 has an invalid length. [ 339.770270][ T7946] FAULT_INJECTION: forcing a failure. [ 339.770270][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.784108][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.1.537 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 339.784138][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.784151][ T7946] Call Trace: [ 339.784160][ T7946] [ 339.784169][ T7946] dump_stack_lvl+0x241/0x360 [ 339.784207][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.784234][ T7946] ? __pfx__printk+0x10/0x10 [ 339.784276][ T7946] should_fail_ex+0x424/0x570 [ 339.784305][ T7946] _copy_from_iter+0x211/0x1c70 [ 339.784333][ T7946] ? _copy_from_iter+0x288/0x1c70 [ 339.784362][ T7946] ? skb_set_owner_w+0x246/0x380 [ 339.784389][ T7946] ? sock_alloc_send_pskb+0x944/0xa70 [ 339.784411][ T7946] ? __pfx__copy_from_iter+0x10/0x10 [ 339.784435][ T7946] ? __pfx__copy_from_iter+0x10/0x10 [ 339.784466][ T7946] ? page_copy_sane+0x154/0x260 [ 339.784494][ T7946] copy_page_from_iter+0x7a/0x100 [ 339.784523][ T7946] skb_copy_datagram_from_iter+0x2e0/0x6c0 [ 339.784563][ T7946] unix_stream_sendmsg+0x660/0x1000 [ 339.784613][ T7946] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 339.784643][ T7946] ? __import_iovec+0x585/0x830 [ 339.784682][ T7946] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 339.784705][ T7946] __sock_sendmsg+0x221/0x270 [ 339.784736][ T7946] ____sys_sendmsg+0x523/0x860 [ 339.784780][ T7946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.784799][ T7946] ? __fget_files+0x2a/0x420 [ 339.784827][ T7946] ? __fget_files+0x2a/0x420 [ 339.784860][ T7946] __sys_sendmsg+0x271/0x360 [ 339.784888][ T7946] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.784973][ T7946] ? do_syscall_64+0xb6/0x230 [ 339.784998][ T7946] do_syscall_64+0xf3/0x230 [ 339.785022][ T7946] ? clear_bhb_loop+0x45/0xa0 [ 339.785047][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.785067][ T7946] RIP: 0033:0x7fb9c358d169 [ 339.785087][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.785106][ T7946] RSP: 002b:00007fb9c43f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.785130][ T7946] RAX: ffffffffffffffda RBX: 00007fb9c37a6080 RCX: 00007fb9c358d169 [ 339.785145][ T7946] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 339.785157][ T7946] RBP: 00007fb9c43f9090 R08: 0000000000000000 R09: 0000000000000000 [ 339.785170][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.785181][ T7946] R13: 0000000000000000 R14: 00007fb9c37a6080 R15: 00007ffc556a0e78 [ 339.785215][ T7946] [ 340.157307][ T5904] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 340.614169][ T5904] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.807524][ T5904] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.855696][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.896660][ T5904] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 340.955257][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.099652][ T5904] usb 4-1: config 0 descriptor?? [ 343.436215][ T5904] saitek 0003:06A3:0621.0006: unbalanced delimiter at end of report description [ 343.522482][ T5904] saitek 0003:06A3:0621.0006: parse failed [ 343.544198][ T5904] saitek 0003:06A3:0621.0006: probe with driver saitek failed with error -22 [ 343.797721][ T5921] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 344.248652][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.285402][ T5921] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 344.327316][ T5904] usb 4-1: USB disconnect, device number 11 [ 344.347894][ T5921] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 344.371691][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.405873][ T7983] netlink: 'syz.4.548': attribute type 6 has an invalid length. [ 344.468110][ T5921] usb 2-1: config 0 descriptor?? [ 344.511340][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 344.529101][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 344.552676][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 344.609845][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 344.805221][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 344.812779][ T5921] usb 2-1: media controller created [ 344.820420][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.971296][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 346.399406][ T7998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.459306][ T7996] dvb-usb: bulk message failed: -22 (4/0) [ 346.680483][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 346.703720][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 346.756691][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 346.781733][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 346.939553][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 346.964235][ T5921] dvb-usb: error while querying for an remote control event. [ 347.415201][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 347.440161][ T5921] dvb-usb: error while querying for an remote control event. [ 347.689241][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 347.833906][ T5921] dvb-usb: error while querying for an remote control event. [ 347.878230][ T5921] usb 2-1: USB disconnect, device number 8 [ 347.953816][ T8008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 348.008605][ T5921] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 349.993628][ T8025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.025755][ T8028] netlink: 'syz.4.562': attribute type 6 has an invalid length. [ 350.456514][ T8040] FAULT_INJECTION: forcing a failure. [ 350.456514][ T8040] name failslab, interval 1, probability 0, space 0, times 0 [ 350.469991][ T8040] CPU: 1 UID: 0 PID: 8040 Comm: syz.2.563 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 350.470022][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.470035][ T8040] Call Trace: [ 350.470048][ T8040] [ 350.470059][ T8040] dump_stack_lvl+0x241/0x360 [ 350.470097][ T8040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.470125][ T8040] ? __pfx__printk+0x10/0x10 [ 350.470157][ T8040] ? __pfx___might_resched+0x10/0x10 [ 350.470188][ T8040] should_fail_ex+0x424/0x570 [ 350.470217][ T8040] should_failslab+0xac/0x100 [ 350.470242][ T8040] __kmalloc_noprof+0xdf/0x4d0 [ 350.470262][ T8040] ? sock_kmalloc+0xd7/0x160 [ 350.470304][ T8040] sock_kmalloc+0xd7/0x160 [ 350.470338][ T8040] ____sys_sendmsg+0x23b/0x860 [ 350.470370][ T8040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.470390][ T8040] ? __fget_files+0x2a/0x420 [ 350.470417][ T8040] ? __fget_files+0x2a/0x420 [ 350.470451][ T8040] __sys_sendmsg+0x271/0x360 [ 350.470479][ T8040] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.470562][ T8040] ? do_syscall_64+0xb6/0x230 [ 350.470592][ T8040] do_syscall_64+0xf3/0x230 [ 350.470615][ T8040] ? clear_bhb_loop+0x45/0xa0 [ 350.470639][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.470659][ T8040] RIP: 0033:0x7f568b98d169 [ 350.470680][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.470698][ T8040] RSP: 002b:00007f568c85b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.470723][ T8040] RAX: ffffffffffffffda RBX: 00007f568bba6160 RCX: 00007f568b98d169 [ 350.470738][ T8040] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000006 [ 350.470751][ T8040] RBP: 00007f568c85b090 R08: 0000000000000000 R09: 0000000000000000 [ 350.470764][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.470776][ T8040] R13: 0000000000000000 R14: 00007f568bba6160 R15: 00007ffe8f650218 [ 350.470809][ T8040] [ 351.459364][ T8043] netlink: set zone limit has 4 unknown bytes [ 351.840721][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 352.046421][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 358.371413][ T8092] netlink: set zone limit has 4 unknown bytes [ 360.287005][ T8113] virtio-fs: tag <(null)> not found [ 361.778977][ T8124] input: syz1 as /devices/virtual/input/input33 [ 365.311007][ T8158] virtio-fs: tag <(null)> not found [ 366.022577][ T5882] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 366.517887][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.584385][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 366.604890][ T5882] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 366.667905][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.844894][ T5882] usb 2-1: config 0 descriptor?? [ 367.427124][ T8169] input: syz1 as /devices/virtual/input/input34 [ 367.837956][ T5882] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 367.844801][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 367.878519][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 367.903108][ T5882] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 368.100661][ T5882] usb 2-1: media controller created [ 368.108132][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.137774][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 368.144275][ T5882] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 368.213009][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 368.412517][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 369.223744][ T5882] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 369.247568][ T5882] usb 2-1: USB disconnect, device number 9 [ 369.850933][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 371.371922][ T8203] virtio-fs: tag <(null)> not found [ 372.938678][ T8213] input: syz1 as /devices/virtual/input/input36 [ 374.767742][ T5881] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 375.687632][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.800331][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 376.145275][ T8232] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 376.191670][ T5881] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 376.305985][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.161367][ T5881] usb 1-1: config 0 descriptor?? [ 377.180982][ T5881] usb 1-1: can't set config #0, error -71 [ 377.457897][ T5881] usb 1-1: USB disconnect, device number 10 [ 378.129015][ T8248] virtio-fs: tag <(null)> not found [ 379.539967][ T8256] fuse: Unknown parameter 'group_i00000000000000000000' [ 379.824987][ T8261] mac80211_hwsim hwsim4 3@0ÿ: renamed from wlan0 [ 379.933792][ T8265] mac80211_hwsim hwsim10 3@0ÿ@: renamed from wlan0 [ 381.137478][ T7465] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 381.409122][ T7465] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.480046][ T7465] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 381.567411][ T7465] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 381.677139][ T7465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.868028][ T7465] usb 2-1: config 0 descriptor?? [ 381.881586][ T7465] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 381.889342][ T7465] dvb-usb: bulk message failed: -22 (3/0) [ 381.900219][ T7465] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 381.920089][ T7465] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 381.929500][ T7465] usb 2-1: media controller created [ 381.951461][ T7465] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.930869][ T7465] dvb-usb: bulk message failed: -22 (6/0) [ 382.937562][ T7465] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 382.949631][ T7465] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 383.916799][ T7465] dvb-usb: schedule remote query interval to 150 msecs. [ 383.926526][ T7465] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 384.062723][ T8286] virtio-fs: tag <(null)> not found [ 384.304216][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 384.319562][ T24] dvb-usb: error while querying for an remote control event. [ 384.491231][ T8289] dvb-usb: bulk message failed: -22 (4/0) [ 384.567741][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 384.828149][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.834923][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.852919][ T24] dvb-usb: error while querying for an remote control event. [ 385.325345][ T10] usb 2-1: USB disconnect, device number 10 [ 385.455208][ T8297] dccp_invalid_packet: P.Data Offset(4) too small [ 385.875486][ T8305] fuse: Unknown parameter 'group_id00000000000000000000' [ 385.968847][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 387.327425][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 387.785598][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.205620][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 388.454915][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.503095][ T10] usb 3-1: Product: syz [ 388.524225][ T10] usb 3-1: Manufacturer: syz [ 388.536108][ T10] usb 3-1: SerialNumber: syz [ 388.553331][ T10] usb 3-1: config 0 descriptor?? [ 389.747638][ T48] usb 3-1: USB disconnect, device number 14 [ 389.933881][ T8338] virtio-fs: tag <(null)> not found [ 391.317244][ T48] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 391.594237][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.743528][ T48] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 391.823402][ T48] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 391.851692][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.908245][ T48] usb 2-1: config 0 descriptor?? [ 391.992343][ T48] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 392.029336][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 392.641255][ T48] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 392.728944][ T8358] dvb-usb: bulk message failed: -22 (4/0) [ 393.381713][ T48] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 393.393571][ T48] usb 2-1: media controller created [ 393.411903][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.466039][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 393.490416][ T48] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 393.510054][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 393.541715][ T48] dvb-usb: schedule remote query interval to 150 msecs. [ 393.549507][ T48] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 393.863300][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 393.880037][ T48] dvb-usb: error while querying for an remote control event. [ 394.817666][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 394.823672][ T48] dvb-usb: error while querying for an remote control event. [ 394.928937][ T5881] usb 2-1: USB disconnect, device number 11 [ 395.567735][ T5881] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 395.929775][ T8377] virtio-fs: tag <(null)> not found [ 398.876715][ T8392] fuse: Unknown parameter 'group_id00000000000000000000' [ 399.408937][ T8394] lo: entered allmulticast mode [ 399.461743][ T8394] lo: left allmulticast mode [ 400.717832][ T8404] netlink: set zone limit has 4 unknown bytes [ 402.066986][ T978] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 402.243368][ T8417] virtio-fs: tag <(null)> not found [ 403.063425][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.126968][ T978] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 403.183349][ T978] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 403.213245][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.402624][ T978] usb 1-1: config 0 descriptor?? [ 403.430947][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 404.182170][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 404.254994][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 405.153124][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 405.399970][ T978] usb 1-1: media controller created [ 405.420042][ T8433] fuse: Unknown parameter 'group_id00000000000000000000' [ 405.477307][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.747646][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 405.754416][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 406.594926][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 406.668856][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 406.709163][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 406.765472][ T978] usb 1-1: USB disconnect, device number 11 [ 407.088298][ T8451] virtio-fs: tag <(null)> not found [ 407.685558][ T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 410.212831][ T8480] virtio-fs: tag <(null)> not found [ 411.030438][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 411.225900][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.689'. [ 411.484273][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 413.485786][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'. [ 414.310078][ T8515] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 414.477024][ T5921] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 415.395259][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 416.399880][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.411313][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 416.425406][ T5921] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 416.446018][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.532596][ T5921] usb 4-1: config 0 descriptor?? [ 416.550103][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 416.573443][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 417.808349][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 417.834237][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 418.322568][ T8536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.366603][ T8536] dvb-usb: bulk message failed: -22 (4/0) [ 418.670630][ T5921] usb 4-1: media controller created [ 418.679024][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.987842][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 419.005994][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 419.114828][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 419.139815][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 419.155176][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 419.307134][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 419.317061][ T24] usb 4-1: USB disconnect, device number 12 [ 419.364356][ T5921] dvb-usb: error while querying for an remote control event. [ 419.618021][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 420.340572][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 424.709901][ T8582] virtio-fs: tag <(null)> not found [ 427.034607][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.720'. [ 429.675177][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 431.604865][ T8633] trusted_key: syz.4.729 sent an empty control message without MSG_MORE. [ 434.794318][ T8665] overlay: Unknown parameter 'subj_type' [ 437.190531][ T8654] netlink: set zone limit has 4 unknown bytes [ 437.652578][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 441.721516][ T5921] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 442.008565][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.084098][ T5921] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 442.390578][ T5921] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 442.400578][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.431455][ T5921] usb 2-1: config 0 descriptor?? [ 442.467389][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 442.475156][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 442.525696][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 442.548286][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 442.590856][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 442.612843][ T5921] usb 2-1: media controller created [ 442.795400][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.804515][ T8722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.828784][ T8722] dvb-usb: bulk message failed: -22 (4/0) [ 444.370851][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 444.387016][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 444.419083][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 444.437914][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 444.445364][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 444.449877][ T8721] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 444.600513][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 444.645316][ T5921] dvb-usb: error while querying for an remote control event. [ 444.793409][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.750'. [ 444.839129][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 445.271522][ T5921] dvb-usb: error while querying for an remote control event. [ 445.437648][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 445.443993][ T5921] dvb-usb: error while querying for an remote control event. [ 445.497231][ T24] usb 2-1: USB disconnect, device number 12 [ 446.268531][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.757253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.786559][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 447.207055][ T48] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 447.886982][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 447.906209][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.454618][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 448.516734][ T48] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 448.533193][ T48] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 448.607306][ T48] usb 3-1: Product: syz [ 448.957928][ T48] usb 3-1: Manufacturer: syz [ 449.166292][ T48] usb 3-1: SerialNumber: syz [ 449.195712][ T48] usb 3-1: config 0 descriptor?? [ 449.211498][ T48] usb 3-1: NFC: intf ffff8880217f5000 id ffffffff8f72bf20 [ 449.425086][ T978] usb 3-1: USB disconnect, device number 15 [ 449.583130][ T8765] xt_cgroup: invalid path, errno=-2 [ 450.909497][ T978] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 451.442779][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.474710][ T978] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 451.497142][ T978] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 451.517966][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.789791][ T978] usb 4-1: config 0 descriptor?? [ 452.534847][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.542923][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 452.560400][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.571770][ T8780] FAULT_INJECTION: forcing a failure. [ 452.571770][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.811085][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.856280][ T978] usb 4-1: media controller created [ 452.877520][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.1.764 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 452.877552][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.877564][ T8780] Call Trace: [ 452.877572][ T8780] [ 452.877581][ T8780] dump_stack_lvl+0x241/0x360 [ 452.877628][ T8780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.877654][ T8780] ? __pfx__printk+0x10/0x10 [ 452.877692][ T8780] should_fail_ex+0x424/0x570 [ 452.877720][ T8780] _copy_from_user+0x2d/0xb0 [ 452.877749][ T8780] copy_from_sockptr_offset+0x60/0xb0 [ 452.877780][ T8780] do_ipt_set_ctl+0xbe4/0x1260 [ 452.877811][ T8780] ? __pfx___mutex_trylock_common+0x10/0x10 [ 452.877837][ T8780] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 452.877880][ T8780] ? __mutex_unlock_slowpath+0x229/0x800 [ 452.877916][ T8780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.877948][ T8780] ? ksys_write+0x24e/0x2d0 [ 452.877984][ T8780] nf_setsockopt+0x295/0x2c0 [ 452.878019][ T8780] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 452.878045][ T8780] do_sock_setsockopt+0x3b1/0x710 [ 452.878074][ T8780] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 452.878091][ T8780] ? __fget_files+0x2a/0x420 [ 452.878119][ T8780] ? __fget_files+0x39d/0x420 [ 452.878140][ T8780] ? __fget_files+0x2a/0x420 [ 452.878172][ T8780] __x64_sys_setsockopt+0x1ee/0x280 [ 452.878200][ T8780] do_syscall_64+0xf3/0x230 [ 452.878225][ T8780] ? clear_bhb_loop+0x45/0xa0 [ 452.878250][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.878270][ T8780] RIP: 0033:0x7fb9c358d169 [ 452.878288][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.878306][ T8780] RSP: 002b:00007fb9c441a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 452.878330][ T8780] RAX: ffffffffffffffda RBX: 00007fb9c37a5fa0 RCX: 00007fb9c358d169 [ 452.878344][ T8780] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 452.878358][ T8780] RBP: 00007fb9c441a090 R08: 00000000000022f8 R09: 0000000000000000 [ 452.878369][ T8780] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000001 [ 452.878382][ T8780] R13: 0000000000000000 R14: 00007fb9c37a5fa0 R15: 00007ffc556a0e78 [ 452.878415][ T8780] [ 453.159497][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.570986][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 453.632364][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 454.231008][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 454.341057][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 454.372883][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 454.379157][ T8807] fuse: Bad value for 'fd' [ 454.412652][ T978] usb 4-1: USB disconnect, device number 13 [ 455.432932][ T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 455.909721][ T8822] overlayfs: failed to resolve './file1': -2 [ 455.978602][ T8822] mac80211_hwsim hwsim2 3@0ÿ: renamed from wlan0 [ 456.064415][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.774'. [ 459.968204][ T8863] program syz.3.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.188108][ T8866] fuse: Bad value for 'fd' [ 462.740803][ T8885] virtio-fs: tag <(null)> not found [ 464.667034][ T5904] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 464.707863][ T8900] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 465.148730][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 466.020778][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.047367][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 466.886578][ T5904] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 466.944200][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.978727][ T5904] usb 3-1: config 0 descriptor?? [ 467.017864][ T5904] usb 3-1: can't set config #0, error -71 [ 467.139023][ T5904] usb 3-1: USB disconnect, device number 16 [ 468.302704][ T8930] fuse: Invalid rootmode [ 471.850945][ T8948] virtio-fs: tag <(null)> not found [ 472.070593][ T8949] input: syz1 as /devices/virtual/input/input47 [ 472.132228][ T8946] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 472.606941][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 473.379205][ T48] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 473.794995][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.515504][ T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 474.541464][ T48] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 474.556440][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.587928][ T48] usb 4-1: config 0 descriptor?? [ 474.604264][ T48] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 474.612726][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 474.647605][ T48] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 474.674334][ T48] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 474.707425][ T48] usb 4-1: media controller created [ 474.730916][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.946547][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 474.953207][ T48] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 475.168723][ T8978] dvb-usb: bulk message failed: -22 (4/0) [ 475.715938][ T8977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.735485][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 475.855375][ T48] dvb-usb: schedule remote query interval to 150 msecs. [ 475.883045][ T48] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 476.036997][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 476.095465][ T48] dvb-usb: error while querying for an remote control event. [ 477.711003][ T7465] usb 4-1: USB disconnect, device number 14 [ 477.759145][ T7465] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 477.931463][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 478.751170][ T9005] virtio-fs: tag <(null)> not found [ 480.582014][ T9013] netlink: set zone limit has 4 unknown bytes [ 481.034028][ T9015] fuse: Invalid rootmode [ 481.142032][ T9017] netlink: 'syz.4.820': attribute type 6 has an invalid length. [ 481.876498][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.821'. [ 485.001532][ T5882] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 485.201750][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.251569][ T5882] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 485.280771][ T5882] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 485.749018][ T9050] virtio-fs: tag <(null)> not found [ 486.253362][ T5904] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 486.321275][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.200773][ T5882] usb 4-1: config 0 descriptor?? [ 487.217374][ T5882] usb 4-1: can't set config #0, error -71 [ 487.228428][ T5882] usb 4-1: USB disconnect, device number 15 [ 487.414114][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.428498][ T5904] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 487.438227][ T5904] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 487.447944][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.460852][ T5904] usb 2-1: config 0 descriptor?? [ 487.479200][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.829'. [ 487.498067][ T5904] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 487.535427][ T5904] dvb-usb: bulk message failed: -22 (3/0) [ 487.558023][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 487.582242][ T5904] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 487.616093][ T5904] usb 2-1: media controller created [ 487.639035][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.654225][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 487.660933][ T5904] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 487.678772][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 487.699399][ T5904] dvb-usb: schedule remote query interval to 150 msecs. [ 487.925788][ T5904] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 488.069039][ T9064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.093258][ T9064] dvb-usb: bulk message failed: -22 (4/0) [ 488.670890][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 488.699616][ T10] dvb-usb: error while querying for an remote control event. [ 488.880034][ T9067] netlink: set zone limit has 4 unknown bytes [ 489.191877][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 489.198492][ T5882] dvb-usb: error while querying for an remote control event. [ 489.228200][ T9068] netlink: 'syz.3.833': attribute type 6 has an invalid length. [ 489.357163][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 489.426348][ T5882] dvb-usb: error while querying for an remote control event. [ 489.656490][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.834'. [ 489.670116][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 489.688312][ T5882] dvb-usb: error while querying for an remote control event. [ 489.863664][ T5882] usb 2-1: USB disconnect, device number 13 [ 490.007024][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 490.068565][ T10] dvb-usb: error while querying for an remote control event. [ 491.866145][ T5882] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.799079][ T9086] input: syz1 as /devices/virtual/input/input50 [ 493.250415][ T9095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 495.557220][ T9115] netlink: 'syz.3.846': attribute type 6 has an invalid length. [ 495.908197][ T9118] netlink: set zone limit has 4 unknown bytes [ 496.401356][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 497.513254][ T9128] overlayfs: failed to resolve './file1': -2 [ 497.856204][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 498.692207][ T9138] trusted_key: encrypted_key: key user:syz not found [ 499.287363][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 499.529359][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.553125][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 499.595430][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.634861][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.664213][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.702919][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 499.762609][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 500.188475][ T5882] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 500.209406][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.245019][ T5882] usb 3-1: Product: syz [ 500.268772][ T5882] usb 3-1: Manufacturer: syz [ 500.293876][ T5882] usb 3-1: SerialNumber: syz [ 500.325290][ T5882] usb 3-1: config 0 descriptor?? [ 500.824162][ T5882] usb 3-1: ucan: probing device on interface #0 [ 500.831219][ T5882] usb 3-1: ucan: invalid endpoint configuration [ 500.838357][ T5882] usb 3-1: ucan: probe failed; try to update the device firmware [ 501.011277][ T5882] usb 3-1: USB disconnect, device number 17 [ 501.128473][ T9166] virtio-fs: tag <(null)> not found [ 503.294594][ T9172] lo: entered allmulticast mode [ 503.300994][ T9172] lo: left allmulticast mode [ 503.710057][ T9179] virtio-fs: tag <(null)> not found [ 507.687688][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.694161][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.878361][ T9211] virtio-fs: tag <(null)> not found [ 508.782591][ T9214] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 509.602820][ T9222] 9pnet_fd: Insufficient options for proto=fd [ 509.626677][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 511.648608][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.880'. [ 512.466951][ T5904] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 512.677590][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 512.719234][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 512.762210][ T5904] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 512.786882][ T5904] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 512.814475][ T5904] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 512.839671][ T5904] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 512.851291][ T5904] usb 2-1: config 1 interface 0 has no altsetting 0 [ 512.860387][ T5904] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 513.075793][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.150761][ T5904] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 513.459137][ T5904] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 513.507244][ T5904] usb 2-1: USB disconnect, device number 14 [ 513.816120][ T9262] virtio-fs: tag <(null)> not found [ 514.834497][ T9268] x_tables: (null)_tables: SNAT.1 target: invalid size 40 (kernel) != (user) 48 [ 515.097927][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 515.237259][ T5882] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 515.389656][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 515.389700][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 515.395497][ T5882] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 515.395537][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.395558][ T5882] usb 3-1: Product: syz [ 515.395575][ T5882] usb 3-1: Manufacturer: syz [ 515.395591][ T5882] usb 3-1: SerialNumber: syz [ 515.405886][ T5882] usb 3-1: config 0 descriptor?? [ 515.822970][ T5882] usb 3-1: USB disconnect, device number 18 [ 516.181278][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.366690][ T30] audit: type=1326 audit(1744618529.174:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.1.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x0 [ 521.872174][ T9351] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 522.881128][ T9358] syzkaller0: entered promiscuous mode [ 522.951750][ T9358] syzkaller0: entered allmulticast mode [ 523.969610][ T9375] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 523.998505][ T9375] CIFS mount error: No usable UNC path provided in device string! [ 523.998505][ T9375] [ 524.009981][ T9375] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 529.726477][ T5904] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 530.718023][ T5904] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 530.751818][ T5904] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 530.809534][ T5904] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 530.962930][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.138501][ T9428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.155140][ T5904] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.371195][ T5904] usb 2-1: USB disconnect, device number 15 [ 531.663543][ T5140] Bluetooth: unknown link type 108 [ 531.695560][ T5140] Bluetooth: hci2: connection err: -111 [ 532.279253][ T9441] udevd[9441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.688238][ T9445] netlink: 'syz.1.935': attribute type 5 has an invalid length. [ 533.048857][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 533.058248][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'. [ 533.074105][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 536.254058][ T9449] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.265138][ T9449] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.274868][ T9449] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.283930][ T9449] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.298336][ T9449] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.310192][ T9449] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.319815][ T9449] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.329397][ T9449] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.979854][ T9486] netlink: 'syz.3.946': attribute type 11 has an invalid length. [ 536.988100][ T9486] netlink: 224 bytes leftover after parsing attributes in process `syz.3.946'. [ 537.817141][ T5140] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 538.152032][ T9479] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 542.061760][ T5140] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 542.439752][ T5140] Bluetooth: hci1: Malformed LE Event: 0x1d [ 543.614503][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 543.686318][ T9559] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.966437][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 544.682287][ T9573] bridge0: port 3(bond0) entered disabled state [ 544.690999][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.698941][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.428295][ T9573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.531183][ T9573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.904139][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.087953][ T9573] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.115029][ T9573] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.152812][ T9573] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.187105][ T9573] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.132216][ T9606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.980'. [ 547.188365][ T9606] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 547.188677][ T9606] veth0_vlan: left promiscuous mode [ 547.211898][ T9606] veth0_vlan: entered promiscuous mode [ 547.222448][ T9606] team0: Device veth0_vlan failed to register rx_handler [ 553.036977][ T48] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 553.279433][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 553.397219][ T48] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 553.608522][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.625808][ T48] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.641801][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.950033][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.055884][ T48] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 554.090824][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 554.225373][ T48] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.791682][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 554.836187][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 554.988364][ T48] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 554.996197][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 555.103860][ T48] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.221982][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.325259][ T48] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 555.600684][ T48] usb 4-1: string descriptor 0 read error: -22 [ 555.616978][ T48] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 555.629830][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.808226][ T48] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 555.927396][ T48] usb 4-1: USB disconnect, device number 16 [ 559.228363][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 559.886141][ T5882] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 560.097044][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 560.112464][ T5882] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 560.142443][ T5882] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 560.187231][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.682175][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.700616][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 560.715714][ T5882] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 560.725851][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.751105][ T5882] usb 1-1: config 0 descriptor?? [ 560.768549][ T5882] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input51 [ 560.812977][ T5185] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 560.970657][ T30] audit: type=1326 audit(1744618573.784:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9744 comm="syz.4.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea03f8d169 code=0x7ffc0000 [ 561.138465][ T9730] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 561.153417][ T30] audit: type=1326 audit(1744618573.784:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9744 comm="syz.4.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea03f8d169 code=0x7ffc0000 [ 561.217240][ T30] audit: type=1326 audit(1744618573.784:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9744 comm="syz.4.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fea03f8d169 code=0x7ffc0000 [ 561.241238][ T30] audit: type=1326 audit(1744618573.784:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9744 comm="syz.4.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea03f8d169 code=0x7ffc0000 [ 561.268701][ T30] audit: type=1326 audit(1744618573.784:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9744 comm="syz.4.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea03f8d169 code=0x7ffc0000 [ 561.388720][ T5185] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 561.470391][ T9751] ubi31: attaching mtd0 [ 561.490613][ T9751] ubi31: scanning is finished [ 561.496058][ T9751] ubi31: empty MTD device detected [ 561.539652][ T9660] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 561.553360][ T5882] usb 1-1: USB disconnect, device number 12 [ 562.684381][ T9751] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 562.696284][ T9751] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 562.704542][ T9751] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 562.917213][ T9751] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 562.943678][ T9751] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 562.990260][ T9751] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 563.046059][ T9751] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 741629681 [ 563.129671][ T9751] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 563.146255][ T9757] ubi31: background thread "ubi_bgt31d" started, PID 9757 [ 564.703663][ T9770] dccp_close: ABORT with 44 bytes unread [ 565.777402][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 565.865499][ T9779] UHID_CREATE from different security context by process 811 (syz.3.1033), this is not allowed. [ 565.889322][ T5904] hid (null): unknown global tag 0xd [ 565.916660][ T5904] hid (null): unknown global tag 0xe [ 565.989693][ T5904] hid (null): report_id 0 is invalid [ 566.815684][ T5904] hid (null): report_id 52304 is invalid [ 566.825664][ T5904] hid (null): report_id 1387920681 is invalid [ 566.831991][ T5904] hid (null): unknown global tag 0xe [ 566.837952][ T5904] hid (null): unknown global tag 0xd [ 566.844658][ T5904] hid (null): invalid report_size -1887810091 [ 566.851366][ T5904] hid (null): global environment stack underflow [ 566.859302][ T5904] hid (null): unknown global tag 0xc [ 566.865296][ T5904] hid (null): unknown global tag 0xc [ 566.873482][ T5904] hid (null): invalid report_count 40881 [ 566.881242][ T5904] hid (null): report_id 0 is invalid [ 566.887958][ T5904] hid (null): unknown global tag 0xd [ 566.894251][ T5904] hid (null): invalid report_size -1509704851 [ 566.901829][ T5904] hid (null): report_id 0 is invalid [ 566.913827][ T5904] hid (null): unknown global tag 0xc [ 566.927863][ T5904] hid (null): unknown global tag 0xe [ 567.468069][ T5904] hid (null): report_id 3194748728 is invalid [ 567.487969][ T5904] hid (null): unknown global tag 0xe [ 567.499221][ T5904] hid (null): unknown global tag 0xd [ 567.504746][ T5904] hid (null): invalid report_count 41695 [ 567.536878][ T5904] hid (null): invalid report_count 1565389719 [ 567.566959][ T9801] 9pnet_virtio: no channels available for device syz [ 567.570852][ T5904] hid (null): global environment stack overflow [ 567.627251][ T5904] hid (null): invalid report_size 697642177 [ 567.654507][ T9800] hub 6-0:1.0: USB hub found [ 567.656059][ T5904] hid (null): invalid report_size 9747 [ 567.665930][ T5904] hid (null): unknown global tag 0xd [ 567.676609][ T9800] hub 6-0:1.0: 1 port detected [ 567.677791][ T5904] hid (null): unknown global tag 0xc [ 567.748326][ T5904] hid (null): report_id 6688 is invalid [ 567.784796][ T5904] hid (null): unknown global tag 0xd [ 567.837934][ T5904] hid (null): unknown global tag 0xd [ 567.856598][ T5904] hid (null): report_id 65373 is invalid [ 567.866110][ T5904] hid (null): unknown global tag 0x4a [ 567.891192][ T5904] hid (null): unknown global tag 0x5f [ 567.922928][ T5904] hid (null): unknown global tag 0xb8 [ 568.007020][ T30] audit: type=1326 audit(1744618580.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9805 comm="syz.4.1039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea03f8d169 code=0x0 [ 568.035557][ T5904] hid (null): unknown global tag 0xd [ 568.048008][ T5904] hid (null): report_id 3562054314 is invalid [ 568.067382][ T5904] hid (null): global environment stack overflow [ 568.073797][ T5904] hid (null): report_id 47366 is invalid [ 568.124361][ T5904] hid (null): unknown global tag 0xc [ 568.140881][ T5904] hid (null): unknown global tag 0xe [ 568.146437][ T5904] hid (null): unknown global tag 0x78 [ 568.174265][ T5904] hid (null): report_id 0 is invalid [ 568.185156][ T5904] hid (null): unknown global tag 0xe [ 568.210795][ T5904] hid-generic 0101:0081:0009.0007: unknown main item tag 0x7 [ 568.236900][ T5904] hid-generic 0101:0081:0009.0007: unknown global tag 0xd [ 568.244999][ T5904] hid-generic 0101:0081:0009.0007: item 0 0 1 13 parsing failed [ 568.274753][ T5904] hid-generic 0101:0081:0009.0007: probe with driver hid-generic failed with error -22 [ 569.137967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.147816][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.094051][ T30] audit: type=1326 audit(1744618583.904:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 571.400657][ T30] audit: type=1326 audit(1744618583.904:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 571.477521][ T30] audit: type=1326 audit(1744618583.904:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 571.835913][ T30] audit: type=1326 audit(1744618583.904:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 572.006855][ T30] audit: type=1326 audit(1744618583.904:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 572.030894][ T30] audit: type=1326 audit(1744618583.904:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 572.153334][ T30] audit: type=1326 audit(1744618583.904:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 572.187804][ T30] audit: type=1326 audit(1744618583.904:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 572.215995][ T30] audit: type=1326 audit(1744618583.904:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9859 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9c358d169 code=0x7ffc0000 [ 572.257006][ T5140] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 572.266059][ T9873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 572.273596][ T9873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 572.697386][ T9873] vhci_hcd vhci_hcd.0: Device attached [ 572.741586][ T9874] vhci_hcd: connection closed [ 572.751594][ T13] vhci_hcd: stop threads [ 572.812527][ T13] vhci_hcd: release socket [ 572.916960][ T13] vhci_hcd: disconnect device [ 572.957739][ T978] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 572.998223][ T978] usb 39-1: enqueue for inactive port 0 [ 573.001282][ T9882] 9pnet_virtio: no channels available for device syz [ 573.076940][ T7465] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 573.156966][ T978] vhci_hcd: vhci_device speed not set [ 573.249400][ T7465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 573.280525][ T7465] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 573.306878][ T7465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.324684][ T7465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 573.334463][ T7465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.355458][ T7465] usb 3-1: Product: syz [ 573.377347][ T7465] usb 3-1: Manufacturer: syz [ 573.382239][ T7465] usb 3-1: SerialNumber: syz [ 573.649531][ T7465] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 573.847035][ T5904] usb 3-1: USB disconnect, device number 19 [ 573.900477][ T5904] usblp0: removed [ 574.428278][ T9897] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 575.175086][ T5931] Bluetooth: hci5: Frame reassembly failed (-84) [ 577.196949][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 577.197826][ T9902] Bluetooth: hci5: command 0x1003 tx timeout [ 578.225886][ T9923] overlayfs: failed to resolve './file0': -2 [ 580.571282][ T9945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 580.584747][ T9945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 580.594595][ T9945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 580.616426][ T9945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 580.649243][ T9945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.796990][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 581.699087][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 582.099688][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.100004][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.101604][ T9944] bridge_slave_0: entered allmulticast mode [ 582.132948][ T9944] bridge_slave_0: entered promiscuous mode [ 582.143719][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.157818][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.165639][ T9944] bridge_slave_1: entered allmulticast mode [ 582.204845][ T9944] bridge_slave_1: entered promiscuous mode [ 582.461702][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.573335][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.797749][ T5140] Bluetooth: hci3: command tx timeout [ 582.911957][ T9944] team0: Port device team_slave_0 added [ 582.930792][ T9944] team0: Port device team_slave_1 added [ 583.005269][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.014009][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.044218][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.059465][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.077290][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.111216][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.236387][ T9944] hsr_slave_0: entered promiscuous mode [ 583.245096][ T9944] hsr_slave_1: entered promiscuous mode [ 583.258381][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.285052][ T9944] Cannot create hsr debugfs directory [ 583.677773][ T5140] Bluetooth: hci5: command 0x1003 tx timeout [ 583.687087][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 584.284812][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.509981][T10001] bond0: (slave rose0): Enslaving as an active interface with an up link [ 584.520081][ T9944] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 584.706236][ T9944] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 584.861533][ T9944] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 584.877167][ T5836] Bluetooth: hci3: command tx timeout [ 585.063927][ T9944] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 586.957023][ T5836] Bluetooth: hci3: command tx timeout [ 587.374848][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.572915][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.997201][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.004951][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.089929][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.099114][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.037432][ T5836] Bluetooth: hci3: command tx timeout [ 589.721469][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.399408][ T9944] veth0_vlan: entered promiscuous mode [ 592.537957][ T9944] veth1_vlan: entered promiscuous mode [ 592.726782][ T9944] veth0_macvtap: entered promiscuous mode [ 592.918481][ T9944] veth1_macvtap: entered promiscuous mode [ 593.765632][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.788449][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.804268][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.829240][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.840511][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.851877][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.885943][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.954152][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.025381][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.072927][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.239858][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.256883][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.275272][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.299470][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.376257][ T9944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.402932][ T9944] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.426854][ T9944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.456199][ T9944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.934420][T10127] input: syz1 as /devices/virtual/input/input52 [ 597.355497][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.401030][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.528890][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.624484][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.790775][T10140] Bluetooth: MGMT ver 1.23 [ 597.903643][T10142] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 598.100167][T10147] tipc: Can't bind to reserved service type 0 [ 599.182248][ T978] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 599.688455][ T978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 599.688513][ T978] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 599.688540][ T978] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.691125][ T978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 599.741369][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.751406][ T978] usb 6-1: Product: syz [ 599.758263][ T978] usb 6-1: Manufacturer: syz [ 599.763644][ T978] usb 6-1: SerialNumber: syz [ 599.990789][ T978] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 600.278263][ T10] usb 6-1: USB disconnect, device number 2 [ 600.290979][ T10] usblp0: removed [ 600.360551][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1128'. [ 600.377861][T10168] netlink: 'syz.0.1128': attribute type 11 has an invalid length. [ 600.386852][T10168] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1128'. [ 602.270514][T10188] netlink: 'syz.2.1132': attribute type 11 has an invalid length. [ 602.356552][T10188] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1132'. [ 602.723818][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.888600][ T5904] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 605.941471][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 606.200695][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 606.215018][ T5904] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 606.231834][ T5904] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.256095][ T5904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 606.303510][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.324012][ T5904] usb 1-1: Product: syz [ 606.335038][ T5904] usb 1-1: Manufacturer: syz [ 606.354905][ T5904] usb 1-1: SerialNumber: syz [ 606.364452][T10235] syzkaller1: entered promiscuous mode [ 606.396081][T10235] syzkaller1: entered allmulticast mode [ 606.637649][ T5904] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 607.430926][ T5904] usb 1-1: USB disconnect, device number 13 [ 607.457291][ T5904] usblp0: removed [ 608.576033][T10275] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1154'. [ 608.588722][T10275] 0ªX¹¦À: renamed from caif0 [ 608.793370][T10281] ieee802154 phy0 wpan0: encryption failed: -22 [ 608.883315][T10275] 0ªX¹¦À: entered allmulticast mode [ 608.967370][T10275] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 611.317157][ T5904] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 611.619988][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 611.677561][ T5904] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 611.766625][ T5904] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.819897][ T5904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 611.822353][T10317] lo speed is unknown, defaulting to 1000 [ 611.912649][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.935406][ T5904] usb 1-1: Product: syz [ 611.947086][ T5904] usb 1-1: Manufacturer: syz [ 611.957413][ T5904] usb 1-1: SerialNumber: syz [ 611.985713][T10317] lo speed is unknown, defaulting to 1000 [ 612.206624][ T5904] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 612.234804][T10317] lo speed is unknown, defaulting to 1000 [ 612.293568][T10327] atomic_op ffff88802a319198 conn xmit_atomic 0000000000000000 [ 612.463443][ T5884] usb 1-1: USB disconnect, device number 14 [ 612.557470][ T5884] usblp0: removed [ 612.569193][T10317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 612.852522][T10317] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 613.183689][T10317] lo speed is unknown, defaulting to 1000 [ 613.209405][T10317] lo speed is unknown, defaulting to 1000 [ 613.240054][T10317] lo speed is unknown, defaulting to 1000 [ 613.356431][T10317] lo speed is unknown, defaulting to 1000 [ 613.607656][T10317] lo speed is unknown, defaulting to 1000 [ 613.658803][T10317] lo speed is unknown, defaulting to 1000 [ 614.027747][ T5836] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 616.850369][T10389] overlayfs: failed to verify upper (226/file1, ino=1219, err=-116) [ 616.860795][T10389] overlayfs: failed to verify index dir 'upper' xattr [ 616.869749][T10389] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 617.607629][T10389] 9pnet_virtio: no channels available for device syz [ 618.022873][T10412] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 618.324444][T10412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.021754][T10418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.064191][T10418] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 619.083114][T10418] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 620.524641][T10445] NILFS (nullb0): couldn't find nilfs on the device [ 622.268695][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 622.474401][ T10] usb 1-1: config 195 has an invalid interface number: 145 but max is 0 [ 622.526657][ T10] usb 1-1: config 195 has no interface number 0 [ 622.533937][ T10] usb 1-1: config 195 interface 145 has no altsetting 0 [ 623.399389][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c211, bcdDevice=9b.e4 [ 623.415377][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.450836][ T10] usb 1-1: Product: syz [ 623.455308][ T10] usb 1-1: Manufacturer: syz [ 623.523221][ T10] usb 1-1: SerialNumber: syz [ 623.728850][T10475] kvm: pic: single mode not supported [ 623.729034][T10475] kvm: pic: level sensitive irq not supported [ 623.735469][T10475] kvm: pic: non byte read [ 623.747766][T10475] kvm: pic: non byte read [ 623.752627][T10475] kvm: pic: non byte read [ 623.763553][T10481] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 623.777371][T10475] kvm: pic: non byte read [ 623.795473][ T10] gspca_main: sunplus-2.14.0 probing 055f:c211 [ 623.807818][T10475] kvm: pic: non byte read [ 623.815612][ T10] gspca_sunplus: reg_r err -71 [ 623.827689][T10475] kvm: pic: non byte read [ 623.840848][T10475] kvm: pic: non byte read [ 623.843943][T10481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.873036][T10475] kvm: pic: non byte read [ 623.912359][T10475] kvm: pic: non byte read [ 623.962178][T10475] kvm: pic: non byte read [ 625.265792][T10499] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1210'. [ 625.285951][T10499] 0ªX¹¦À: renamed from caif0 [ 625.316326][T10499] 0ªX¹¦À: entered allmulticast mode [ 625.349600][T10499] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 625.526959][ T10] sunplus 1-1:195.145: probe with driver sunplus failed with error -71 [ 625.591607][ T10] usb 1-1: USB disconnect, device number 15 [ 625.767008][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 627.733824][T10555] tipc: Started in network mode [ 627.739131][T10555] tipc: Node identity ac14140f, cluster identity 4711 [ 627.750398][T10555] tipc: New replicast peer: 255.255.255.255 [ 627.760503][T10555] tipc: Enabled bearer , priority 10 [ 628.798722][ T7465] tipc: Node number set to 2886997007 [ 629.600234][T10583] tipc: Enabling of bearer rejected, already enabled [ 630.523287][ T1098] Bluetooth: hci5: Frame reassembly failed (-84) [ 630.565430][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.572556][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.557069][ T5140] Bluetooth: hci5: command 0x1003 tx timeout [ 632.557210][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 633.453689][T10634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.547623][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 634.191272][T10634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 634.208311][ T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.238002][ T48] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 634.266505][ T48] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.331993][T10634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.399850][T10634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 634.434746][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 634.458045][T10634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.496989][T10634] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 634.499211][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.589344][T10634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.597271][ T48] usb 6-1: Product: syz [ 634.612573][ T48] usb 6-1: Manufacturer: syz [ 634.614424][T10634] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 634.626868][ T48] usb 6-1: SerialNumber: syz [ 634.655764][T10634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.670123][T10634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 634.753172][T10634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 634.959065][ T48] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 635.242046][ T7465] usb 6-1: USB disconnect, device number 3 [ 635.437368][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 636.118278][ T7465] usblp0: removed [ 636.445884][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 636.487185][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 636.564588][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 636.637297][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 636.717675][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.527154][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 638.388497][T10680] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 638.477310][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 638.505498][T10682] 9pnet_virtio: no channels available for device syz [ 638.556913][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 638.765073][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 638.817333][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 640.491056][T10706] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1276'. [ 640.527069][T10706] 1ªX¹¦À: renamed from 60ªX¹¦À [ 640.609457][T10706] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 640.877245][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 641.162411][T10715] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 641.913312][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 642.119896][T10726] input: syz1 as /devices/virtual/input/input53 [ 643.370059][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 644.537000][T10750] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1289'. [ 644.563199][T10750] 1ªX¹¦À: renamed from 60ªX¹¦À [ 644.614731][T10750] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 645.075133][T10759] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 646.364917][ T5140] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 648.404602][T10789] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1303'. [ 648.587139][T10789] 0ªX¹¦À: renamed from 61ªX¹¦À [ 649.448934][T10789] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 651.795795][T10826] 9pnet_virtio: no channels available for device syz [ 659.361396][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 659.386373][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 659.397312][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 659.409616][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 659.418505][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 659.662896][T10897] lo speed is unknown, defaulting to 1000 [ 660.416089][ T5904] hid-generic 0005:15C2:0058.0008: item fetching failed at offset 0/1 [ 660.475682][ T5904] hid-generic 0005:15C2:0058.0008: probe with driver hid-generic failed with error -22 [ 660.479737][T10897] chnl_net:caif_netlink_parms(): no params data found [ 661.517703][ T5140] Bluetooth: hci5: command tx timeout [ 661.749476][T10897] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.853868][T10897] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.897285][T10897] bridge_slave_0: entered allmulticast mode [ 661.935449][T10897] bridge_slave_0: entered promiscuous mode [ 661.960230][T10897] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.971492][T10897] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.980146][T10897] bridge_slave_1: entered allmulticast mode [ 662.008396][T10897] bridge_slave_1: entered promiscuous mode [ 662.464042][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.545230][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.911847][T10897] team0: Port device team_slave_0 added [ 663.596871][ T5140] Bluetooth: hci5: command tx timeout [ 663.938888][T10726] Set syz1 is full, maxelem 65536 reached [ 663.999797][T10897] team0: Port device team_slave_1 added [ 664.323502][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.355870][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.419362][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.539630][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.570012][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.636902][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.690224][T10944] 9pnet_virtio: no channels available for device syz [ 664.930741][T10897] hsr_slave_0: entered promiscuous mode [ 664.948243][T10897] hsr_slave_1: entered promiscuous mode [ 664.977724][T10897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.016093][T10897] Cannot create hsr debugfs directory [ 665.677859][ T5140] Bluetooth: hci5: command tx timeout [ 666.796357][ T71] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.312451][ T71] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.629830][ T71] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.842239][ T5140] Bluetooth: hci5: command tx timeout [ 667.964512][T10989] virtio-fs: tag <(null)> not found [ 669.416659][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 669.590156][T11001] input: syz1 as /devices/virtual/input/input54 [ 669.615575][ T30] audit: type=1326 audit(1744618682.164:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48378d169 code=0x7ffc0000 [ 669.645722][ T30] audit: type=1326 audit(1744618682.164:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48378d169 code=0x7ffc0000 [ 669.813188][ T30] audit: type=1326 audit(1744618682.174:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff48378d169 code=0x7ffc0000 [ 669.815249][ T71] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.947823][ T30] audit: type=1326 audit(1744618682.174:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48378d169 code=0x7ffc0000 [ 669.985893][ T30] audit: type=1326 audit(1744618682.174:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48378d169 code=0x7ffc0000 [ 670.654252][T11009] fuse: Bad value for 'fd' [ 670.850015][ T30] audit: type=1326 audit(1744618682.174:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff48378d169 code=0x7ffc0000 [ 670.888177][ T30] audit: type=1326 audit(1744618682.174:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff483729359 code=0x7ffc0000 [ 671.068126][ T30] audit: type=1326 audit(1744618682.174:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff483729359 code=0x7ffc0000 [ 671.154283][ T30] audit: type=1326 audit(1744618682.174:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff483729359 code=0x7ffc0000 [ 671.186178][ T30] audit: type=1326 audit(1744618682.184:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff483729359 code=0x7ffc0000 [ 671.475116][ T71] bridge_slave_1: left allmulticast mode [ 671.486207][ T71] bridge_slave_1: left promiscuous mode [ 671.512190][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.566544][ T71] bridge_slave_0: left allmulticast mode [ 671.638458][ T71] bridge_slave_0: left promiscuous mode [ 671.644686][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.638893][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.683322][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.705982][ T71] bond0 (unregistering): Released all slaves [ 674.950589][T10897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 674.976395][T10897] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 675.335738][T11039] virtio-fs: tag <(null)> not found [ 675.440023][T11045] netlink: 'syz.2.1386': attribute type 6 has an invalid length. [ 676.266974][T10897] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 676.333134][T10897] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 676.483391][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 676.899832][ T71] hsr_slave_0: left promiscuous mode [ 676.912854][ T71] hsr_slave_1: left promiscuous mode [ 676.920665][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.929349][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.947501][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.975232][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.049777][ T71] veth1_macvtap: left promiscuous mode [ 677.059806][ T71] veth0_macvtap: left promiscuous mode [ 677.066007][ T71] veth1_vlan: left promiscuous mode [ 677.095497][ T71] veth0_vlan: left promiscuous mode [ 678.134926][T11077] fuse: Bad value for 'fd' [ 678.419012][T11082] netlink: 'syz.0.1399': attribute type 6 has an invalid length. [ 678.502234][T11086] overlayfs: failed to resolve './file1': -2 [ 678.564392][T11089] 9pnet_virtio: no channels available for device syz [ 680.177505][ T71] team0 (unregistering): Port device team_slave_1 removed [ 680.353179][ T71] team0 (unregistering): Port device team_slave_0 removed [ 681.795165][ T5884] lo speed is unknown, defaulting to 1000 [ 681.843936][ T5884] infiniband syz0: ib_query_port failed (-19) [ 681.903039][T11110] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 683.217800][T10897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.277724][T10897] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.919503][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.927012][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.013346][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.025018][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.449769][T10897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.464680][T10897] veth0_vlan: entered promiscuous mode [ 687.560808][T10897] veth1_vlan: entered promiscuous mode [ 687.760932][T11177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1425'. [ 688.215548][T10897] veth0_macvtap: entered promiscuous mode [ 688.240436][T10897] veth1_macvtap: entered promiscuous mode [ 688.284537][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.307046][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.323097][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.336981][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.369684][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.382130][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.956251][T10897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.038817][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.081348][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.122782][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.138987][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.150032][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.161560][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.175634][T10897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.232285][T10897] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.249918][T10897] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.260005][T10897] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.270091][T10897] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.645838][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.682905][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.218374][T11198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1431'. [ 690.373887][T11196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1431'. [ 690.398940][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.452381][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.258299][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.265320][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.738296][T11232] CIFS mount error: No usable UNC path provided in device string! [ 693.738296][T11232] [ 693.749485][T11232] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 694.363902][T11248] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 695.118099][ T5905] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 695.340153][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.375897][ T5905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 695.404094][ T5905] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 695.421292][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.434418][ T5905] usb 3-1: config 0 descriptor?? [ 695.475069][ T5905] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 695.511431][ T5905] dvb-usb: bulk message failed: -22 (3/0) [ 695.539687][ T5905] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 695.554954][ T5905] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 695.564692][ T5905] usb 3-1: media controller created [ 695.576528][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.598119][ T5905] dvb-usb: bulk message failed: -22 (6/0) [ 695.604236][ T5905] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 695.624052][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 695.673907][ T5905] dvb-usb: schedule remote query interval to 150 msecs. [ 695.684199][ T5905] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 695.837749][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 695.875775][ T10] dvb-usb: error while querying for an remote control event. [ 696.146392][T11263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.210926][T11263] dvb-usb: bulk message failed: -22 (4/0) [ 696.920556][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 696.927896][ T10] dvb-usb: error while querying for an remote control event. [ 697.088492][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 697.128590][ T10] dvb-usb: error while querying for an remote control event. [ 697.400398][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 697.460642][ T10] dvb-usb: error while querying for an remote control event. [ 697.636864][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 697.669035][ T10] dvb-usb: error while querying for an remote control event. [ 697.871733][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 697.877883][ T24] usb 3-1: USB disconnect, device number 20 [ 697.942976][ T10] dvb-usb: error while querying for an remote control event. [ 698.104828][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 700.702891][T11301] fuse: Bad value for 'fd' [ 700.823246][T11299] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 702.417146][T11334] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1474'. [ 702.497551][T11334] 0ªX¹¦À: renamed from 61ªX¹¦À [ 702.552078][T11334] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 702.720328][T11336] fuse: Bad value for 'fd' [ 703.873307][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1484'. [ 703.943595][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 704.129267][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1484'. [ 704.237466][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1484'. [ 704.254010][T11371] netlink: set zone limit has 4 unknown bytes [ 704.701578][T11375] fuse: Bad value for 'fd' [ 705.265774][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1496'. [ 707.427709][T11410] fuse: Bad value for 'fd' [ 707.703103][T11412] netlink: set zone limit has 4 unknown bytes [ 708.568041][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1508'. [ 710.663808][T11443] fuse: Bad value for 'fd' [ 712.666569][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1524'. [ 714.200539][T11489] virtio-fs: tag <(null)> not found [ 716.689190][T11500] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input58 [ 719.709135][T11541] virtio-fs: tag <(null)> not found [ 720.541973][T11547] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1545'. [ 720.565481][T11547] 0ªX¹¦À: renamed from caif0 [ 720.692559][T11547] 0ªX¹¦À: entered allmulticast mode [ 720.867345][T11547] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 722.217601][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 722.551634][ T24] usb 3-1: device descriptor read/64, error -71 [ 723.767539][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 724.236961][ T24] usb 3-1: device descriptor read/64, error -71 [ 724.350104][ T24] usb usb3-port1: attempt power cycle [ 725.347262][T11592] [ 725.349869][T11592] ====================================================== [ 725.357279][T11592] WARNING: possible circular locking dependency detected [ 725.364778][T11592] 6.15.0-rc2-syzkaller #0 Not tainted [ 725.370801][T11592] ------------------------------------------------------ [ 725.377895][T11592] syz.4.1563/11592 is trying to acquire lock: [ 725.384265][T11592] ffffffff90241cd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 725.394359][T11592] [ 725.394359][T11592] but task is already holding lock: [ 725.401952][T11592] ffff888034e51c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1023/0x2370 [ 725.411539][T11592] [ 725.411539][T11592] which lock already depends on the new lock. [ 725.411539][T11592] [ 725.422709][T11592] [ 725.422709][T11592] the existing dependency chain (in reverse order) is: [ 725.432083][T11592] [ 725.432083][T11592] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 725.440419][T11592] lock_acquire+0x116/0x2f0 [ 725.445834][T11592] _raw_spin_lock_bh+0x35/0x50 [ 725.451644][T11592] nr_rt_device_down+0x159/0x7b0 [ 725.457260][T11592] nr_device_event+0x134/0x150 [ 725.462709][T11592] notifier_call_chain+0x1a5/0x3f0 [ 725.468413][T11592] dev_close_many+0x33e/0x4c0 [ 725.474118][T11592] netif_close+0x1c2/0x2d0 [ 725.479185][T11592] dev_close+0x137/0x280 [ 725.484128][T11592] bpq_device_event+0x36a/0x620 [ 725.489800][T11592] notifier_call_chain+0x1a5/0x3f0 [ 725.495937][T11592] dev_close_many+0x33e/0x4c0 [ 725.501314][T11592] netif_close+0x1c2/0x2d0 [ 725.506776][T11592] dev_close+0x137/0x280 [ 725.512574][T11592] bond_setup_by_slave+0x64/0x420 [ 725.518679][T11592] bond_enslave+0x7fb/0x38d0 [ 725.524083][T11592] bond_do_ioctl+0x7c9/0xc00 [ 725.529841][T11592] dev_ifsioc+0x97a/0x1010 [ 725.535026][T11592] dev_ioctl+0x819/0x1380 [ 725.540325][T11592] sock_do_ioctl+0x233/0x490 [ 725.545518][T11592] sock_ioctl+0x644/0x900 [ 725.550582][T11592] __se_sys_ioctl+0xf1/0x160 [ 725.555862][T11592] do_syscall_64+0xf3/0x230 [ 725.561224][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.567724][T11592] [ 725.567724][T11592] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 725.576052][T11592] lock_acquire+0x116/0x2f0 [ 725.581306][T11592] _raw_spin_lock_bh+0x35/0x50 [ 725.586643][T11592] nr_rt_device_down+0xb5/0x7b0 [ 725.592341][T11592] nr_device_event+0x134/0x150 [ 725.597900][T11592] notifier_call_chain+0x1a5/0x3f0 [ 725.603662][T11592] dev_close_many+0x33e/0x4c0 [ 725.608888][T11592] netif_close+0x1c2/0x2d0 [ 725.613884][T11592] dev_close+0x137/0x280 [ 725.618839][T11592] bpq_device_event+0x36a/0x620 [ 725.624769][T11592] notifier_call_chain+0x1a5/0x3f0 [ 725.631024][T11592] dev_close_many+0x33e/0x4c0 [ 725.636342][T11592] netif_close+0x1c2/0x2d0 [ 725.641389][T11592] dev_close+0x137/0x280 [ 725.646180][T11592] bond_setup_by_slave+0x64/0x420 [ 725.652039][T11592] bond_enslave+0x7fb/0x38d0 [ 725.657311][T11592] bond_do_ioctl+0x7c9/0xc00 [ 725.662450][T11592] dev_ifsioc+0x97a/0x1010 [ 725.667525][T11592] dev_ioctl+0x819/0x1380 [ 725.672552][T11592] sock_do_ioctl+0x233/0x490 [ 725.678138][T11592] sock_ioctl+0x644/0x900 [ 725.683113][T11592] __se_sys_ioctl+0xf1/0x160 [ 725.688313][T11592] do_syscall_64+0xf3/0x230 [ 725.693476][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.699941][T11592] [ 725.699941][T11592] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 725.708436][T11592] validate_chain+0xa69/0x24e0 [ 725.713761][T11592] __lock_acquire+0xad5/0xd80 [ 725.719083][T11592] lock_acquire+0x116/0x2f0 [ 725.724339][T11592] _raw_spin_lock_bh+0x35/0x50 [ 725.729837][T11592] nr_remove_neigh+0x25/0xe0 [ 725.735098][T11592] nr_add_node+0x1be9/0x2370 [ 725.740547][T11592] nr_rt_ioctl+0xd60/0xff0 [ 725.746098][T11592] sock_do_ioctl+0x15a/0x490 [ 725.751413][T11592] sock_ioctl+0x644/0x900 [ 725.756914][T11592] __se_sys_ioctl+0xf1/0x160 [ 725.762294][T11592] do_syscall_64+0xf3/0x230 [ 725.768113][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.774762][T11592] [ 725.774762][T11592] other info that might help us debug this: [ 725.774762][T11592] [ 725.785134][T11592] Chain exists of: [ 725.785134][T11592] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 725.785134][T11592] [ 725.799222][T11592] Possible unsafe locking scenario: [ 725.799222][T11592] [ 725.806899][T11592] CPU0 CPU1 [ 725.812584][T11592] ---- ---- [ 725.818166][T11592] lock(&nr_node->node_lock); [ 725.823072][T11592] lock(nr_node_list_lock); [ 725.830199][T11592] lock(&nr_node->node_lock); [ 725.837944][T11592] lock(nr_neigh_list_lock); [ 725.842811][T11592] [ 725.842811][T11592] *** DEADLOCK *** [ 725.842811][T11592] [ 725.851057][T11592] 1 lock held by syz.4.1563/11592: [ 725.856575][T11592] #0: ffff888034e51c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1023/0x2370 [ 725.867106][T11592] [ 725.867106][T11592] stack backtrace: [ 725.873603][T11592] CPU: 1 UID: 0 PID: 11592 Comm: syz.4.1563 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 725.873624][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 725.873636][T11592] Call Trace: [ 725.873644][T11592] [ 725.873650][T11592] dump_stack_lvl+0x241/0x360 [ 725.873681][T11592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.873701][T11592] ? __pfx__printk+0x10/0x10 [ 725.873721][T11592] ? print_lock+0x171/0x1a0 [ 725.873740][T11592] print_circular_bug+0x2e1/0x300 [ 725.873761][T11592] check_noncircular+0x142/0x160 [ 725.873782][T11592] validate_chain+0xa69/0x24e0 [ 725.873804][T11592] ? preempt_schedule+0xe4/0xf0 [ 725.873821][T11592] ? preempt_schedule_common+0x84/0xd0 [ 725.873838][T11592] ? preempt_schedule+0xe4/0xf0 [ 725.873854][T11592] ? __pfx_preempt_schedule+0x10/0x10 [ 725.873872][T11592] __lock_acquire+0xad5/0xd80 [ 725.873890][T11592] lock_acquire+0x116/0x2f0 [ 725.873904][T11592] ? nr_remove_neigh+0x25/0xe0 [ 725.873923][T11592] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 725.873942][T11592] ? nr_remove_neigh+0x25/0xe0 [ 725.873959][T11592] _raw_spin_lock_bh+0x35/0x50 [ 725.873975][T11592] ? nr_remove_neigh+0x25/0xe0 [ 725.873991][T11592] nr_remove_neigh+0x25/0xe0 [ 725.874008][T11592] nr_add_node+0x1be9/0x2370 [ 725.874027][T11592] ? __pfx_nr_add_node+0x10/0x10 [ 725.874042][T11592] ? nr_call_to_digi+0x7a/0x1b0 [ 725.874057][T11592] ? __asan_memcpy+0x40/0x70 [ 725.874077][T11592] ? nr_call_to_digi+0x120/0x1b0 [ 725.874093][T11592] nr_rt_ioctl+0xd60/0xff0 [ 725.874112][T11592] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 725.874126][T11592] ? lockdep_hardirqs_on+0x9d/0x150 [ 725.874158][T11592] ? cap_capable+0x139/0x450 [ 725.874181][T11592] ? security_path_mkdir+0x2b2/0x370 [ 725.874203][T11592] sock_do_ioctl+0x15a/0x490 [ 725.874226][T11592] ? __pfx_sock_do_ioctl+0x10/0x10 [ 725.874246][T11592] ? __lock_acquire+0xad5/0xd80 [ 725.874261][T11592] ? __asan_memset+0x23/0x50 [ 725.874279][T11592] ? smack_file_ioctl+0x2a7/0x3b0 [ 725.874300][T11592] sock_ioctl+0x644/0x900 [ 725.874319][T11592] ? __pfx_sock_ioctl+0x10/0x10 [ 725.874337][T11592] ? __fget_files+0x2a/0x420 [ 725.874356][T11592] ? __fget_files+0x2a/0x420 [ 725.874374][T11592] ? __pfx_sock_ioctl+0x10/0x10 [ 725.874392][T11592] __se_sys_ioctl+0xf1/0x160 [ 725.874414][T11592] do_syscall_64+0xf3/0x230 [ 725.874434][T11592] ? clear_bhb_loop+0x45/0xa0 [ 725.874451][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.874466][T11592] RIP: 0033:0x7fea03f8d169 [ 725.874484][T11592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.874498][T11592] RSP: 002b:00007fea04e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.874516][T11592] RAX: ffffffffffffffda RBX: 00007fea041a6080 RCX: 00007fea03f8d169 [ 725.874528][T11592] RDX: 0000200000000280 RSI: 000000000000890b RDI: 000000000000000a [ 725.874539][T11592] RBP: 00007fea0400e990 R08: 0000000000000000 R09: 0000000000000000 [ 725.874549][T11592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.874559][T11592] R13: 0000000000000000 R14: 00007fea041a6080 R15: 00007ffea17a7e18 [ 725.874575][T11592] [ 726.283961][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 726.319033][T11594] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1565'. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 726.463661][T11594] 0ªX¹¦À: renamed from caif0 [ 726.506365][ T24] usb 3-1: device not accepting address 23, error -71 [ 726.631982][T11594] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 726.688165][T11594] caif:caif_disconnect_client(): nothing to disconnect [ 726.707933][T11594] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 726.740038][T11594] chnl_net:chnl_net_open(): state disconnected [ 726.746576][T11594] 0ªX¹¦À: entered allmulticast mode [ 726.806811][T11594] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 727.027102][ T6264] syz_tun (unregistering): left allmulticast mode [ 727.194249][ T5830] syz-executor (5830) used greatest stack depth: 19616 bytes left [ 727.464722][T10897] syz-executor (10897) used greatest stack depth: 19208 bytes left