last executing test programs: 3m47.501921326s ago: executing program 0 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) 3m45.392536968s ago: executing program 0 (id=465): openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2710}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 3m44.442389491s ago: executing program 0 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) 3m42.64141241s ago: executing program 0 (id=476): getgid() socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$kcm(0xa, 0x2, 0x88) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3m39.95843295s ago: executing program 0 (id=484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 3m38.703358699s ago: executing program 0 (id=487): sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007408200000c0500020000000000080003400000004a0800064000000001"], 0x94}}, 0x0) 3m22.740847025s ago: executing program 32 (id=487): sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007408200000c0500020000000000080003400000004a0800064000000001"], 0x94}}, 0x0) 14.460369026s ago: executing program 2 (id=1119): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0x7f}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000000c0)=0x40, 0x4) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0x3, 0x5, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x13ae], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.510131114s ago: executing program 2 (id=1127): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000005940)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r2, &(0x7f0000005980)={'syz0\x00', 0x20, 0xc, 0x20, 0x1, 0x20, [{}]}, 0x46) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r3 = fanotify_init(0x200, 0x0) r4 = dup(0xffffffffffffffff) write$vhost_msg(r4, &(0x7f0000000200)={0x1, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) fanotify_mark(r3, 0x1, 0x40000010, r4, 0x0) execveat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r5 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 11.804971571s ago: executing program 2 (id=1131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b000000000000000005"], 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x80000000, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x56, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x90) 11.014797431s ago: executing program 4 (id=1132): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x21e0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setreuid(0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) listen(0xffffffffffffffff, 0xe63) mlock(&(0x7f0000ff8000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.893168168s ago: executing program 5 (id=1133): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.749685091s ago: executing program 2 (id=1134): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="401401"], 0x0, 0x0, 0x0, 0x0}) 10.65099029s ago: executing program 3 (id=1136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xa, 0x2, 0x250, [0x0, 0x20000100, 0x0, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 9.93371894s ago: executing program 4 (id=1137): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) 9.842776645s ago: executing program 3 (id=1139): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000580)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x72}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4000) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) 9.249353926s ago: executing program 3 (id=1140): socket(0x200000100000011, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000a0000000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000500330000000a00000000000000fe8000000000000000000000000000aa0000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000000000000000000000070019000000000002"], 0xd8}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 8.629924316s ago: executing program 5 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 7.673384365s ago: executing program 1 (id=1143): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ef, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xfbfd, 0x401d, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 7.525232994s ago: executing program 5 (id=1144): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fanotify_mark(0xffffffffffffffff, 0x48bf7b268b465224, 0x8000032, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 7.524955675s ago: executing program 3 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xfeffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.654242748s ago: executing program 1 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r6, 0x0, 0x39000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 6.534744564s ago: executing program 2 (id=1147): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x5}, &(0x7f0000000480), &(0x7f0000000500)) r2 = eventfd2(0x9, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x20, 0x6, 0xf, {{0x2b, 0x4, 0x1, 0x3, 0xac, 0x66, 0x0, 0x4, 0x29, 0x0, @remote, @private=0xa010102, {[@noop, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x4, [{@local, 0xfdb}, {@multicast1, 0x83}, {@local, 0x3}, {@local, 0x6}, {@private=0xa010100, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xffff}]}, @timestamp_prespec={0x44, 0x34, 0x9c, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@multicast2, 0x400}, {@loopback, 0xffff}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xad, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x1b, 0x79, [@private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast2, @broadcast]}]}}}}}) bind$can_j1939(r3, &(0x7f0000000580)={0x1d, r4, 0x1, {0x2, 0x1, 0x3}}, 0x18) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9c, 0xe, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x0, 0x2, 0x4, 0x10, 0xef}, 0xd0, &(0x7f0000000780)={0x5, 0xf, 0xd0, 0x3, [@generic={0xa0, 0x10, 0x4, "6a88a1cef014c30eb3b2aba99b6b9c5e371edbf4cd805f4fd6a3a66c3f27793a7279b0635069f7df0c244d529768fb12fa7fd27ef24f5919c90e99138e5c80aa5c2741da0d29505853f544958f93162f090045310ff2d707ca35d9b74b489cd9914f1d5da74cd9b28b841b9e9a0e2a87d5f2a86a78ee11877713ca01ad33f250b90aaa43ede19fd9421653c14422dff3fdff8e4a1b08b3ba39d844637d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa3, 0x3, 0x5, 0x100, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x2, 0xf, 0x8, [0x0, 0x30, 0x3fff, 0x0, 0xc0c0]}]}, 0x3, [{0x86, &(0x7f0000000880)=@string={0x86, 0x3, "2f1103531f388ff03683c78e72fbc6351c0d7e8452814f0c8a2a60bb8026b82f93e476f140a703e7b1f3ec6b0e7c8ce8e43454680a0e75cb1677364244a3c88049caf905041d5432e8ad036106a67dfd4d5a768e85eda350fceb27072d4b5f0d205cd1aae823573433ee7887119a36a1dfd84476df0f39dd25cda67412435004241dfd6d"}}, {0xbd, &(0x7f0000000940)=@string={0xbd, 0x3, "2fdad8a2dd2ecbf034e6f99fcdb97c2bd8dd6eff082a483449e986400d4fca826e5b2ea89e6fce89b74bbb0ae566f644da56afc7302c20b468437e1c0943e42ad85c78f3ccd518dcdd2ab110627f115d46dc15dddee663058ebc5b3ab5a371fcc90eb110f088418566f664e2425fe0614e70d20360ce9b87061eeb2f0fb691ee136a549c06d9ef7ded35e80b05494ea6e88fda970da54753638d9e1b57479d90784fc0f48dfff80fdd5ac6bc4e42ee132aa0b2721b440a22f0d736"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x424}}]}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000140)=0x4) 5.645288971s ago: executing program 3 (id=1148): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 5.588243951s ago: executing program 4 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000002c0), 0x24, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 5.521170566s ago: executing program 1 (id=1150): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x3ff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12a35}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.695087813s ago: executing program 4 (id=1151): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0xa}, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.694218526s ago: executing program 1 (id=1152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x0, 0x615, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000800)=0xffff1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.692822965s ago: executing program 5 (id=1153): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002340)=@migrate={0xa0, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast1, @in6=@mcast1, 0x4e21, 0xfff, 0x4e21, 0x8, 0x2, 0x20, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, 0x6e6bb6, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private0, @in=@remote, @in=@private=0xa010100, @in=@loopback, 0x33, 0x3, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c4) 4.269279056s ago: executing program 3 (id=1154): openat$pfkey(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x180884c, &(0x7f0000001a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.264039618s ago: executing program 5 (id=1155): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mlockall(0x7) mlockall(0x3) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 2.83689883s ago: executing program 4 (id=1156): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xca\x01\xdfR\xa0\xabL\xaa\x00\x98\x86\xb1\xae,\x91;\x038/h\x85\xb8\xbeSAk\xf4\x9d \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2m\xb0\f\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'\xf8f\x91E8\xebj\\\xfc$m\x92\x97\x8c\x9e\xc5\xa9{\x88', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0!w\xbaf+\xe48\b\xd59\xdd~\xc5TI\xe7\xaa\x02\xe4\xcco\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eip\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4\xac\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5%!\x98TQ\x91\x00\x00', &(0x7f0000000e40)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN\xee\xdd|\x8c\x91\xea\\C%\xdc>\x91\n\x13#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f0000002940)='\x19\x00\x00\x8dX\x12X\x96\x8a\xc5\xdd\x153\xdf\x9b\xd8\xb8N\x86\x95,B\x032\x13k\xc6]\xe5\xd4\x90\x1c\x06\x1d\xefo/U\x83E+', 0x0) read(r0, 0x0, 0x0) close(r0) 1.825538907s ago: executing program 1 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4041000) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x800, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 813.481324ms ago: executing program 1 (id=1158): lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000300)=""/254, 0xfe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x82000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 776.149702ms ago: executing program 4 (id=1159): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000000)="2627d7aa", 0x4) syz_open_dev$video(0x0, 0x485, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 653.423785ms ago: executing program 5 (id=1160): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff04, 0x0) 0s ago: executing program 2 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}}, 0x4004810) kernel console output (not intermixed with test programs): D) flags 0x0 phys_seg 1 prio class 0 [ 93.867497][ T5832] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.876554][ T5832] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.885873][ T5832] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.894639][ T5832] ldm_validate_partition_table(): Disk read failed. [ 93.901793][ T5832] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.911020][ T5832] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.921063][ T5832] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.930107][ T5832] Buffer I/O error on dev nbd3, logical block 0, async page read [ 93.939129][ T5832] Dev nbd3: unable to read RDB block 0 [ 93.945253][ T5832] nbd3: unable to read partition table [ 93.951817][ T5832] nbd3: partition table beyond EOD, truncated [ 93.966511][ T6152] ldm_validate_partition_table(): Disk read failed. [ 93.975188][ T6152] Dev nbd3: unable to read RDB block 0 [ 93.981323][ T6152] nbd3: unable to read partition table [ 93.987090][ T6152] nbd3: partition table beyond EOD, truncated [ 93.997208][ T5832] ldm_validate_partition_table(): Disk read failed. [ 94.006142][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 94.018334][ T5832] Dev nbd3: unable to read RDB block 0 [ 94.027826][ T5832] nbd3: unable to read partition table [ 94.034340][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 94.052043][ T5832] nbd3: partition table beyond EOD, truncated [ 94.059610][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 94.076462][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 94.085947][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 94.098322][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 94.108200][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 94.117824][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 94.146123][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 94.168915][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 94.180237][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 94.207708][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 94.259290][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 94.278761][ T6152] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 94.300102][ T6152] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 94.941011][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 94.963974][ T6168] bridge_slave_1: left allmulticast mode [ 94.969650][ T6168] bridge_slave_1: left promiscuous mode [ 94.998686][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.040526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.250563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.350765][ T5826] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 95.359845][ T5826] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 95.367394][ T5826] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 95.403232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.403396][ T5826] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 95.411853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.428308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.492056][ T6173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.847788][ T5826] usb 5-1: USB disconnect, device number 4 [ 99.065148][ T6197] syz.4.92 uses obsolete (PF_INET,SOCK_PACKET) [ 101.200605][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 101.596079][ T6228] process 'syz.2.98' launched './file1' with NULL argv: empty string added [ 102.240831][ T6219] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 102.712920][ T29] audit: type=1326 audit(1737249497.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6270 comm="syz.4.109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a94785d29 code=0x0 [ 103.360826][ T6311] evm: overlay not supported [ 104.966631][ T6331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.465526][ T29] audit: type=1326 audit(1737249500.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a94785d29 code=0x7ffc0000 [ 106.560170][ T6356] binder: 6350:6356 unknown command 0 [ 106.583277][ T6356] binder: 6350:6356 ioctl c0306201 200001c0 returned -22 [ 106.591168][ T29] audit: type=1326 audit(1737249500.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6349 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a94785d29 code=0x7ffc0000 [ 107.382752][ T6371] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.129'. [ 108.547254][ T6374] Zero length message leads to an empty skb [ 109.078348][ T6358] Set syz1 is full, maxelem 65536 reached [ 109.203345][ T6380] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 110.420926][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 110.614196][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.667186][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.729205][ T8] usb 5-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 110.738633][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.751514][ T8] usb 5-1: config 0 descriptor?? [ 111.749744][ T8] aquacomputer_d5next 0003:0C70:F012.0002: unknown main item tag 0x0 [ 111.764648][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 111.765143][ T8] aquacomputer_d5next 0003:0C70:F012.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.4-1/input0 [ 112.751248][ T8] usb 5-1: USB disconnect, device number 5 [ 112.990160][ T6411] vlan2: entered promiscuous mode [ 112.996496][ T6411] bond0: entered promiscuous mode [ 113.004952][ T6411] bond_slave_0: entered promiscuous mode [ 113.015257][ T6411] bond_slave_1: entered promiscuous mode [ 113.061760][ T6411] bond0: left promiscuous mode [ 113.066716][ T6411] bond_slave_0: left promiscuous mode [ 113.073536][ T6411] bond_slave_1: left promiscuous mode [ 113.179961][ T29] audit: type=1326 audit(1737249507.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 113.287406][ T29] audit: type=1326 audit(1737249507.630:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 113.341896][ T29] audit: type=1326 audit(1737249507.630:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 113.408843][ T29] audit: type=1326 audit(1737249507.630:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 113.463948][ T29] audit: type=1326 audit(1737249507.630:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 113.517436][ T29] audit: type=1326 audit(1737249507.630:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 113.543313][ T29] audit: type=1326 audit(1737249507.630:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 114.578000][ T29] audit: type=1326 audit(1737249507.630:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 114.622260][ T29] audit: type=1326 audit(1737249507.630:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 114.643958][ T29] audit: type=1326 audit(1737249507.630:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6412 comm="syz.2.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 114.851030][ T6420] warning: `syz.0.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.214230][ T6426] netlink: 'syz.1.148': attribute type 3 has an invalid length. [ 118.221986][ T6426] netlink: 666 bytes leftover after parsing attributes in process `syz.1.148'. [ 118.394922][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'. [ 118.414400][ T6443] netlink: 'syz.3.153': attribute type 21 has an invalid length. [ 118.450193][ T6443] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 118.498766][ T6443] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.153'. [ 118.860449][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.029523][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.176397][ T47] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.696947][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.706777][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.714866][ T47] usb 1-1: Product: syz [ 119.719066][ T47] usb 1-1: Manufacturer: syz [ 119.724739][ T47] usb 1-1: SerialNumber: syz [ 119.859834][ T6472] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 119.939407][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.076396][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 120.130625][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 120.200900][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.164'. [ 120.370704][ T6474] nbd0: detected capacity change from 0 to 140460462964736 [ 120.488579][ T5837] block nbd0: Send control failed (result -89) [ 120.515099][ T5837] block nbd0: Request send failed, requeueing [ 120.540122][ T5835] block nbd0: Receive control failed (result -32) [ 120.558463][ T40] block nbd0: Dead connection, failed to find a fallback [ 120.563033][ T6481] veth0_to_team: entered promiscuous mode [ 120.565641][ T40] block nbd0: shutting down sockets [ 120.577247][ T40] blk_print_req_error: 84 callbacks suppressed [ 120.577263][ T40] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.592875][ T40] buffer_io_error: 76 callbacks suppressed [ 120.592890][ T40] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.610538][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.616084][ T6481] macsec1: entered allmulticast mode [ 120.626728][ T6450] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.626923][ T6481] veth0_to_team: entered allmulticast mode [ 120.672631][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.696308][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.726829][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.749387][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.772500][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.788963][ T6481] veth0_to_team: left allmulticast mode [ 120.815227][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.841288][ T6481] veth0_to_team: left promiscuous mode [ 120.924386][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.930421][ T47] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 120.940191][ T47] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 120.948005][ T47] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 120.968846][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.996338][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.007184][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.066867][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.081751][ T6486] overlayfs: statfs failed on './file0' [ 121.102474][ T47] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 121.111788][ T47] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 121.116375][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.137287][ T47] wwan wwan0: port wwan0mbim0 attached [ 121.177080][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.199762][ T5837] ldm_validate_partition_table(): Disk read failed. [ 121.208822][ T47] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 121.236759][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.281374][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.318173][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.356189][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.397362][ T5837] Dev nbd0: unable to read RDB block 0 [ 121.437920][ T5837] nbd0: unable to read partition table [ 121.448186][ T5837] ldm_validate_partition_table(): Disk read failed. [ 121.462795][ T5837] Dev nbd0: unable to read RDB block 0 [ 121.488523][ T5837] nbd0: unable to read partition table [ 121.556449][ T6479] syz.2.166 (6479): drop_caches: 2 [ 121.778624][ C0] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 121.785380][ C0] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 121.815973][ T5931] usb 1-1: USB disconnect, device number 3 [ 121.850985][ T5931] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 121.952389][ T5931] wwan wwan0: port wwan0mbim0 disconnected [ 122.215331][ T3487] wlan1: Trigger new scan to find an IBSS to join [ 122.970050][ T6533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.214917][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 124.249773][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.014146][ T6575] ip6t_REJECT: ECHOREPLY is not supported [ 126.202217][ T11] wlan1: Trigger new scan to find an IBSS to join [ 127.079034][ T6582] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.188'. [ 128.203980][ T11] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 132.515719][ T6615] dvmrp0: entered allmulticast mode [ 132.532027][ T6616] pimreg: entered allmulticast mode [ 132.538191][ T6620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.684611][ T6620] batadv_slave_1: entered promiscuous mode [ 132.911223][ T47] libceph: connect (1)[c::]:6789 error -101 [ 132.918629][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 132.988343][ T6648] ======================================================= [ 132.988343][ T6648] WARNING: The mand mount option has been deprecated and [ 132.988343][ T6648] and is ignored by this kernel. Remove the mand [ 132.988343][ T6648] option from the mount to silence this warning. [ 132.988343][ T6648] ======================================================= [ 133.149774][ T5826] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 133.163651][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.172347][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.273963][ T6639] ceph: No mds server is up or the cluster is laggy [ 133.339048][ T5826] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 133.451942][ T5826] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 133.640739][ T47] libceph: connect (1)[c::]:6789 error -101 [ 133.646863][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 133.653446][ T5826] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 133.663393][ T5826] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 133.674270][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 133.685863][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 133.695880][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 133.754278][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 133.795030][ T5826] usb 2-1: string descriptor 0 read error: -22 [ 133.811675][ T5826] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 133.834063][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.855879][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.894210][ T5826] usb 2-1: config 0 descriptor?? [ 133.922865][ T6642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.931524][ T5826] hub 2-1:0.0: bad descriptor, ignoring hub [ 133.937486][ T5826] hub 2-1:0.0: probe with driver hub failed with error -5 [ 133.971767][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 133.973519][ T5826] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 133.986913][ T6652] bridge_slave_0 (unregistering): left allmulticast mode [ 133.998674][ T6662] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 133.999257][ T6652] bridge_slave_0 (unregistering): left promiscuous mode [ 134.021569][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.248557][ T6642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 134.255146][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 134.285942][ T6642] vhci_hcd vhci_hcd.0: Device attached [ 134.389511][ T6668] vhci_hcd: connection closed [ 134.390396][ T11] vhci_hcd: stop threads [ 134.401424][ T47] usb 2-1: USB disconnect, device number 4 [ 134.440356][ T11] vhci_hcd: release socket [ 134.445184][ T11] vhci_hcd: disconnect device [ 134.470403][ T5931] vhci_hcd: vhci_device speed not set [ 134.588793][ T6677] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 134.603635][ T6677] batman_adv: batadv0: Adding interface: ip6gretap1 [ 134.639475][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 134.644743][ T6677] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.675931][ T6677] batman_adv: batadv0: Interface activated: ip6gretap1 [ 134.690551][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.707992][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.719919][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.729179][ T6678] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 134.745470][ T6678] batman_adv: batadv0: Removing interface: ip6gretap1 [ 134.766301][ T6678] bridge0: port 3(batadv0) entered disabled state [ 134.784065][ T6678] bridge0: port 3(batadv0) entered disabled state [ 135.089864][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 136.164631][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 136.185473][ T6697] kvm: pic: non byte read [ 136.200634][ T6697] kvm: pic: non byte read [ 136.205247][ T6697] kvm: pic: non byte read [ 138.860525][ T47] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 139.038161][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.050178][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 139.099743][ T47] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 139.150310][ T47] usb 4-1: config 1 interface 0 has no altsetting 0 [ 139.182822][ T47] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 139.201701][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.236502][ T47] usb 4-1: Product: syz [ 139.246371][ T47] usb 4-1: Manufacturer: ò ›¼ [ 139.260363][ T47] usb 4-1: SerialNumber: syz [ 139.819477][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 143.002831][ T47] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 143.022650][ T47] usb 4-1: USB disconnect, device number 3 [ 144.682114][ T6791] fuse: Bad value for 'fd' [ 146.622265][ T6795] dns_resolver: Unsupported server list version (0) [ 147.674994][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'. [ 147.685237][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 147.697367][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'. [ 147.708127][ T6817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'. [ 147.924337][ T6821] »»»»»» speed is unknown, defaulting to 1000 [ 148.248433][ T5835] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 148.366188][ T6830] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 148.417599][ T6831] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 150.050448][ T5931] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 150.290893][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 150.312730][ T5931] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.325067][ T5931] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.345741][ T5931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.379448][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.406481][ T6838] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.454173][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.558037][ T6852] »»»»»» speed is unknown, defaulting to 1000 [ 150.580844][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.762350][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 150.791861][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.812264][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.827029][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.836317][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.844781][ T47] usb 4-1: Product: syz [ 150.849196][ T47] usb 4-1: Manufacturer: syz [ 150.854706][ T47] usb 4-1: SerialNumber: syz [ 151.581761][ T47] usb 4-1: 0:2 : does not exist [ 151.622705][ T47] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 151.720997][ T47] usb 4-1: USB disconnect, device number 4 [ 151.876505][ T5905] usb 3-1: USB disconnect, device number 2 [ 152.017922][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 153.113682][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 153.113701][ T29] audit: type=1326 audit(1737249547.530:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 153.152689][ T29] audit: type=1326 audit(1737249547.530:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 153.286546][ T29] audit: type=1326 audit(1737249547.550:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 153.400557][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 153.760410][ T29] audit: type=1326 audit(1737249547.550:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 153.854727][ T29] audit: type=1326 audit(1737249547.550:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 153.909904][ T8] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 153.928136][ T8] usb 1-1: config 0 has no interface number 0 [ 153.938723][ T29] audit: type=1326 audit(1737249547.560:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 153.952548][ T6892] Invalid ELF header magic: != ELF [ 153.969288][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 153.981983][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.002022][ T8] usb 1-1: Product: syz [ 154.006240][ T8] usb 1-1: Manufacturer: syz [ 154.011194][ T29] audit: type=1326 audit(1737249547.560:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 154.057145][ T8] usb 1-1: SerialNumber: syz [ 154.098917][ T8] usb 1-1: config 0 descriptor?? [ 154.119532][ T29] audit: type=1326 audit(1737249547.560:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 154.197942][ T29] audit: type=1326 audit(1737249547.560:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 154.287894][ T29] audit: type=1326 audit(1737249547.560:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6884 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a6585d29 code=0x7ffc0000 [ 154.432045][ T8] as10x_usb: device has been detected [ 154.453814][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 154.482446][ T8] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 154.518964][ T8] as10x_usb: error during firmware upload part1 [ 154.537340][ T8] Registered device Elgato EyeTV DTT Deluxe [ 154.557732][ T8] usb 1-1: USB disconnect, device number 4 [ 154.650614][ T5929] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.692910][ T8] Unregistered device Elgato EyeTV DTT Deluxe [ 154.709607][ T8] as10x_usb: device has been disconnected [ 155.575935][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 155.632472][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 155.715250][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.787217][ T5929] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.808094][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.839445][ T5929] usb 5-1: Product: syz [ 155.854665][ T5929] usb 5-1: Manufacturer: syz [ 155.859310][ T5929] usb 5-1: SerialNumber: syz [ 155.936029][ T5929] usb 5-1: config 0 descriptor?? [ 157.111999][ T5929] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.286122][ T5929] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 157.838732][ T5929] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 157.845559][ T6934] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 157.854240][ T5929] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 158.227480][ T3487] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.479727][ T5929] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 159.160679][ T5929] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 159.239155][ T5929] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 159.262807][ T5929] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 159.275699][ T5929] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 160.255808][ T5929] usb 5-1: USB disconnect, device number 6 [ 163.570591][ T5931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.100433][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 164.109246][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 164.142055][ T5931] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 164.151421][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.159446][ T5931] usb 4-1: Product: syz [ 164.170305][ T5931] usb 4-1: Manufacturer: syz [ 164.176225][ T5931] usb 4-1: SerialNumber: syz [ 164.189680][ T5931] usb 4-1: config 0 descriptor?? [ 164.195815][ T6983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.204738][ T5931] hub 4-1:0.0: bad descriptor, ignoring hub [ 164.211207][ T5931] hub 4-1:0.0: probe with driver hub failed with error -5 [ 164.240485][ T5931] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 164.729821][ T5931] usb 4-1: USB disconnect, device number 5 [ 164.729872][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 166.105633][ T7027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 166.271116][ T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.318810][ T5929] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.450831][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 166.467222][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.480686][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.483237][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.496284][ T47] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 166.508667][ T5929] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 166.525796][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.546977][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.557602][ T5929] usb 1-1: config 0 descriptor?? [ 166.583341][ T47] usb 4-1: config 0 descriptor?? [ 166.775876][ T7037] mmap: syz.4.321 (7037) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.840921][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 166.846995][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 166.887030][ T5929] usb 1-1: USB disconnect, device number 5 [ 167.036602][ T47] hid-alps 0003:044E:120C.0003: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 167.080405][ T5905] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.091908][ T7046] @: renamed from vlan0 (while UP) [ 167.245631][ T47] usb 4-1: USB disconnect, device number 6 [ 167.253469][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 167.270064][ T5905] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 167.279069][ T5905] usb 5-1: config 0 has no interface number 0 [ 167.287446][ T5905] usb 5-1: config 0 interface 184 has no altsetting 0 [ 167.296628][ T5905] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 167.306966][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.315113][ T5905] usb 5-1: Product: syz [ 167.319293][ T5905] usb 5-1: Manufacturer: syz [ 167.324219][ T5905] usb 5-1: SerialNumber: syz [ 167.330219][ T5905] usb 5-1: config 0 descriptor?? [ 167.337432][ T5905] smsc75xx v1.0.0 [ 169.018765][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 169.019105][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 169.026127][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 169.026633][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 169.027158][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 169.027682][ T5905] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 169.040697][ T5905] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 169.105003][ T5905] usb 5-1: USB disconnect, device number 7 [ 169.450015][ T7071] binder: 7067:7071 ioctl c00c620f 20000140 returned -22 [ 169.684274][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 169.684293][ T29] audit: type=1804 audit(1737249564.140:108): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.335" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 169.789658][ T29] audit: type=1800 audit(1737249564.170:109): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.335" name="/" dev="fuse" ino=1 res=0 errno=0 [ 169.850134][ T29] audit: type=1804 audit(1737249564.170:110): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.335" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 169.906558][ T29] audit: type=1804 audit(1737249564.170:111): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.335" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 170.010361][ T29] audit: type=1800 audit(1737249564.170:112): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.335" name="/" dev="fuse" ino=1 res=0 errno=0 [ 170.029425][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.058808][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 170.068156][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 170.083160][ T7084] netlink: 'syz.4.337': attribute type 18 has an invalid length. [ 171.067569][ T7090] pimreg: entered allmulticast mode [ 171.605787][ T7093] pimreg: left allmulticast mode [ 171.904224][ T7096] netlink: 56 bytes leftover after parsing attributes in process `syz.3.340'. [ 172.780704][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.850647][ T5826] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.197922][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 173.199885][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.199926][ T5826] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 173.199950][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.208696][ T5826] usb 5-1: config 0 descriptor?? [ 173.212006][ T5826] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 173.213390][ T5826] usb 5-1: Detected SIO [ 173.213419][ T5826] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 173.216133][ T5826] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 173.290594][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 173.297750][ T5905] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 173.297783][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.297804][ T5905] usb 3-1: Product: syz [ 173.297819][ T5905] usb 3-1: Manufacturer: syz [ 173.297833][ T5905] usb 3-1: SerialNumber: syz [ 173.304851][ T5905] usb 3-1: config 0 descriptor?? [ 173.703112][ T5931] usb 5-1: USB disconnect, device number 8 [ 173.742125][ T5931] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 173.743738][ T5931] ftdi_sio 5-1:0.0: device disconnected [ 174.217100][ T5905] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:c8:f7:b3:07:5f [ 174.220614][ T5905] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 174.223775][ T5905] usb 3-1: USB disconnect, device number 3 [ 177.362650][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 177.398406][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.573285][ T5931] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.750417][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 177.759540][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.774373][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.788398][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.799001][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.809487][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.903562][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.923026][ T5931] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.953755][ T5931] usb 2-1: Manufacturer: syz [ 178.004644][ T5931] usb 2-1: config 0 descriptor?? [ 178.443874][ T5931] rc_core: IR keymap rc-hauppauge not found [ 178.461967][ T5931] Registered IR keymap rc-empty [ 178.486177][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.577009][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.587437][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.764040][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.272568][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 179.286672][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 179.348860][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.357834][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.432958][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.460649][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.505797][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.542936][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.571362][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.642779][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.690654][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.759716][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.796066][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.803328][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.876087][ T7199] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.050369][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.246633][ T7190] kvm: emulating exchange as write [ 180.256664][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.740407][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.767731][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.800795][ T5931] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.851668][ T5931] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.882442][ T5931] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.909574][ T7208] binder: 7202:7208 ioctl c0306201 0 returned -14 [ 180.953376][ T5931] usb 2-1: USB disconnect, device number 5 [ 182.749172][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 182.760890][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 182.777806][ T7235] macvlan1: entered promiscuous mode [ 182.803241][ T7235] bridge0: entered promiscuous mode [ 183.166850][ T7245] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 184.503419][ T7260] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 184.511056][ T7260] UDF-fs: Scanning with blocksize 512 failed [ 184.519533][ T7260] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 184.527139][ T7260] UDF-fs: Scanning with blocksize 1024 failed [ 184.535088][ T7260] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 184.543105][ T7260] UDF-fs: Scanning with blocksize 2048 failed [ 184.551098][ T7260] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 184.558642][ T7260] UDF-fs: Scanning with blocksize 4096 failed [ 184.970350][ T5905] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.030152][ T7265] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 185.220401][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 185.273932][ T5905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.324093][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.352605][ T5905] usb 4-1: Product: syz [ 185.360545][ T5905] usb 4-1: Manufacturer: syz [ 185.366628][ T5905] usb 4-1: SerialNumber: syz [ 185.378940][ T5905] usb 4-1: config 0 descriptor?? [ 185.611768][ T5905] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.662168][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.820773][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 186.828305][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 186.846641][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.852244][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.852276][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.852297][ T47] usb 2-1: Product: syz [ 186.852338][ T47] usb 2-1: Manufacturer: syz [ 186.852354][ T47] usb 2-1: SerialNumber: syz [ 186.869717][ T47] usb 2-1: config 0 descriptor?? [ 186.879160][ T47] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.919284][ T47] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 187.217574][ T5905] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 187.243320][ T5905] usb 4-1: USB disconnect, device number 7 [ 187.486508][ T47] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 187.500806][ T47] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 188.130948][ T47] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 188.142722][ T47] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 188.164608][ T47] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 188.205725][ T5835] Bluetooth: hci4: link tx timeout [ 188.212157][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.226116][ T5835] Bluetooth: hci4: link tx timeout [ 188.231987][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.242638][ T5835] Bluetooth: hci4: link tx timeout [ 188.247862][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.264969][ T5835] Bluetooth: hci4: link tx timeout [ 188.270383][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.278104][ T5835] Bluetooth: hci4: link tx timeout [ 188.283814][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.291699][ T5835] Bluetooth: hci4: link tx timeout [ 188.297171][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.407286][ T47] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 188.416150][ T47] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 188.427083][ T47] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 188.471812][ T47] usb 2-1: USB disconnect, device number 6 [ 189.288880][ T6290] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.280347][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 190.557218][ T29] audit: type=1800 audit(1737249585.010:113): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.416" name="/" dev="9p" ino=2 res=0 errno=0 [ 191.412716][ T29] audit: type=1326 audit(1737249585.870:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7350 comm="syz.1.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x0 [ 191.560439][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 191.569227][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 191.577446][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 192.526361][ T29] audit: type=1326 audit(1737249586.980:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7360 comm="syz.2.421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x0 [ 194.160798][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 194.348617][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.379717][ T5905] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.389482][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.400740][ T5905] usb 1-1: config 0 descriptor?? [ 194.409326][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 194.620943][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.627289][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.865971][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.881153][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.896860][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 194.912744][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 194.939610][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 194.966299][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 194.974221][ T5905] pwc: recv_control_msg error -32 req 02 val 2000 [ 194.992324][ T5905] pwc: recv_control_msg error -32 req 02 val 2100 [ 194.999949][ T5905] pwc: recv_control_msg error -32 req 04 val 1500 [ 195.224634][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 195.239940][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 195.270401][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 195.278225][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 195.296818][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 195.313737][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 195.361983][ T5905] pwc: Registered as video103. [ 195.369887][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 195.398860][ T5905] usb 1-1: USB disconnect, device number 6 [ 195.845889][ T940] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.015608][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 196.036878][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.050478][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.078969][ T940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.112117][ T940] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.131094][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.160743][ T940] usb 2-1: config 0 descriptor?? [ 196.772505][ T940] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 196.858610][ T940] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 196.976862][ T940] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 197.037179][ T940] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input13 [ 197.201038][ T940] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 197.237026][ T940] usb 2-1: USB disconnect, device number 7 [ 198.700702][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 199.203619][ T8] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 199.617405][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.641637][ T8] usb 3-1: config 0 descriptor?? [ 200.080793][ T7433] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 200.100964][ T8] ntrig 0003:1B96:0003.0005: unknown main item tag 0x0 [ 200.119688][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.129866][ T8] ntrig 0003:1B96:0003.0005: unknown main item tag 0x0 [ 200.170341][ T8] ntrig 0003:1B96:0003.0005: item fetching failed at offset 2/5 [ 200.224398][ T8] ntrig 0003:1B96:0003.0005: parse failed [ 200.240724][ T8] ntrig 0003:1B96:0003.0005: probe with driver ntrig failed with error -22 [ 200.512631][ T5929] usb 3-1: USB disconnect, device number 4 [ 201.483459][ T29] audit: type=1326 audit(1737249595.930:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 201.504908][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.516641][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 201.551799][ T29] audit: type=1326 audit(1737249595.930:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 201.654871][ T29] audit: type=1326 audit(1737249595.940:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 201.760652][ T29] audit: type=1326 audit(1737249595.940:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 201.800412][ T29] audit: type=1326 audit(1737249595.940:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 201.854537][ T29] audit: type=1326 audit(1737249595.990:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a62784690 code=0x7ffc0000 [ 201.879545][ T7453] dccp_close: ABORT with 60 bytes unread [ 202.243901][ T29] audit: type=1326 audit(1737249595.990:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a62784690 code=0x7ffc0000 [ 202.660497][ T29] audit: type=1326 audit(1737249595.990:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 202.764005][ T29] audit: type=1326 audit(1737249595.990:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 202.853386][ T29] audit: type=1326 audit(1737249595.990:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7448 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a62784690 code=0x7ffc0000 [ 203.002575][ T7466] »»»»»» speed is unknown, defaulting to 1000 [ 203.388871][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.615728][ T7509] binder: 7508:7509 ioctl c0306201 20000140 returned -14 [ 205.822157][ T7518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.025918][ T7588] vivid-009: disconnect [ 214.409382][ T7588] vivid-009: reconnect [ 215.589775][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 215.589793][ T29] audit: type=1804 audit(1737249610.040:154): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.495" name="/newroot/116/file1" dev="fuse" ino=1 res=1 errno=0 [ 215.616312][ T29] audit: type=1800 audit(1737249610.040:155): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.495" name="/" dev="fuse" ino=1 res=0 errno=0 [ 215.690379][ T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 215.862233][ T47] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 215.873935][ T47] usb 4-1: config 0 has no interface number 0 [ 215.885046][ T47] usb 4-1: config 0 interface 120 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 197 [ 215.896197][ T47] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 215.932272][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.965323][ T47] usb 4-1: config 0 descriptor?? [ 215.995173][ T7600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.044121][ T47] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input14 [ 216.342071][ T47] usb 4-1: USB disconnect, device number 8 [ 217.437023][ T7606] syz.4.497 (7606): drop_caches: 2 [ 218.656582][ T7629] syz.3.505[7629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.656709][ T7629] syz.3.505[7629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.694686][ T7629] syz.3.505[7629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.699740][ T7632] netlink: 341 bytes leftover after parsing attributes in process `syz.2.507'. [ 220.713643][ T6290] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.985739][ T7676] cgroup: noprefix used incorrectly [ 223.583987][ T29] audit: type=1800 audit(1737249618.030:156): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.525" name="bus" dev="overlay" ino=612 res=0 errno=0 [ 223.623436][ T7682] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.702212][ T7688] kvm: pic: non byte write [ 223.721824][ T7688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 229.030718][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.044373][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.060485][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.090025][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.099724][ T5823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.113929][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.344878][ T7747] »»»»»» speed is unknown, defaulting to 1000 [ 229.438256][ T7753] binder: 7752:7753 ioctl c0306201 20000680 returned -14 [ 230.120555][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 230.874196][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.905996][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.923786][ T7747] bridge_slave_0: entered allmulticast mode [ 230.945247][ T7747] bridge_slave_0: entered promiscuous mode [ 230.988601][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.995863][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.003150][ T7747] bridge_slave_1: entered allmulticast mode [ 231.010174][ T7747] bridge_slave_1: entered promiscuous mode [ 231.162676][ T5823] Bluetooth: hci5: command tx timeout [ 231.967375][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.002579][ T7778] netlink: 'syz.4.548': attribute type 12 has an invalid length. [ 232.036121][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.209774][ T7747] team0: Port device team_slave_0 added [ 232.249248][ T7747] team0: Port device team_slave_1 added [ 232.333772][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.365119][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.440368][ T7747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.495903][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.531004][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.672179][ T7747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.010538][ T7747] hsr_slave_0: entered promiscuous mode [ 233.051864][ T7747] hsr_slave_1: entered promiscuous mode [ 233.079329][ T7747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.112104][ T7747] Cannot create hsr debugfs directory [ 233.250795][ T5823] Bluetooth: hci5: command tx timeout [ 233.557568][ T7804] overlayfs: overlapping lowerdir path [ 233.787802][ T7801] overlayfs: missing 'lowerdir' [ 234.342323][ T7747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.385150][ T7747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.421401][ T7747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.525502][ T7747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.327051][ T5823] Bluetooth: hci5: command tx timeout [ 236.022646][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.146528][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.201347][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 237.265608][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.272837][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.520453][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 237.525779][ T5823] Bluetooth: hci5: command tx timeout [ 237.533885][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.551378][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.555678][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.567199][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 237.568310][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.581743][ T5930] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 237.598061][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.621758][ T5930] usb 4-1: config 0 descriptor?? [ 238.539581][ T5930] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0006/input/input15 [ 238.666135][ T7747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.667432][ T5930] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0006/input/input16 [ 238.722489][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.742765][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.982037][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.025356][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.098777][ T5930] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 240.734514][ T7747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.790710][ T940] usb 4-1: USB disconnect, device number 9 [ 241.201861][ T7874] sctp: [Deprecated]: syz.4.573 (pid 7874) Use of int in maxseg socket option. [ 241.201861][ T7874] Use struct sctp_assoc_value instead [ 242.181329][ T7879] kvm: pic: non byte write [ 242.203577][ T7875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 242.269595][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 242.576587][ T7747] veth0_vlan: entered promiscuous mode [ 242.614915][ T7747] veth1_vlan: entered promiscuous mode [ 242.935298][ T7747] veth0_macvtap: entered promiscuous mode [ 243.021062][ T7900] ebtables: ebtables: counters copy to user failed while replacing table [ 243.941503][ T7747] veth1_macvtap: entered promiscuous mode [ 244.436592][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.450138][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.857567][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.929743][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.425612][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.517865][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.174605][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.235034][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.255821][ T7919] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 246.261606][ T7747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.280257][ T7919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.584'. [ 246.325672][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.397180][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.465573][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.476964][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.488123][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.507747][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.540136][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.578249][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.616601][ T7747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.818127][ T7747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.863868][ T7747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.934537][ T7747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.960635][ T7747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.250921][ T6294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.300406][ T5930] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 248.363607][ T6294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.632242][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 248.655035][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.682271][ T5930] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 248.702316][ T6296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.732814][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.770308][ T6296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.835283][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.591'. [ 248.892173][ T5930] usb 4-1: config 0 descriptor?? [ 249.335005][ T7944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 249.435123][ T7944] kvm: pic: level sensitive irq not supported [ 249.435305][ T7944] kvm: pic: non byte read [ 249.506940][ T7944] kvm: pic: level sensitive irq not supported [ 249.507042][ T7944] kvm: pic: non byte read [ 249.519440][ T7944] kvm: pic: level sensitive irq not supported [ 249.519509][ T7944] kvm: pic: non byte read [ 249.542211][ T7944] kvm: pic: level sensitive irq not supported [ 249.542282][ T7944] kvm: pic: non byte read [ 249.640521][ T7944] kvm: pic: level sensitive irq not supported [ 249.641095][ T7944] kvm: pic: non byte read [ 249.684504][ T7944] kvm: pic: level sensitive irq not supported [ 249.685068][ T7944] kvm: pic: non byte read [ 249.757372][ T7944] kvm: pic: level sensitive irq not supported [ 249.757462][ T7944] kvm: pic: non byte read [ 249.769145][ T7944] kvm: pic: level sensitive irq not supported [ 249.769232][ T7944] kvm: pic: non byte read [ 249.781041][ T7944] kvm: pic: level sensitive irq not supported [ 249.781112][ T7944] kvm: pic: non byte read [ 249.792017][ T7944] kvm: pic: level sensitive irq not supported [ 249.792084][ T7944] kvm: pic: non byte read [ 250.560030][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.782305][ T9] usb 6-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=21.fa [ 250.807575][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.831197][ T9] usb 6-1: config 0 descriptor?? [ 250.852833][ T9] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 251.035506][ T7812] syz.2.557 (7812) used greatest stack depth: 17968 bytes left [ 251.055011][ T9] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 251.071609][ T9] usb 6-1: USB disconnect, device number 2 [ 252.120339][ T5826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 252.271455][ T5930] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 252.287822][ T5930] asix 4-1:0.0: probe with driver asix failed with error -71 [ 252.302955][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 252.310630][ T5930] usb 4-1: USB disconnect, device number 10 [ 252.330321][ T5826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.348000][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.371013][ T5826] usb 2-1: config 0 descriptor?? [ 252.389364][ T5826] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 252.621238][ T5931] usb 2-1: USB disconnect, device number 8 [ 252.665207][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.846446][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 252.862018][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.898930][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.938362][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.968524][ T5930] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 252.996388][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.022302][ T5930] usb 4-1: config 0 descriptor?? [ 253.053044][ T3434] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.437254][ T7998] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 253.963635][ T5826] IPVS: starting estimator thread 0... [ 254.091333][ T8003] IPVS: using max 21 ests per chain, 50400 per kthread [ 254.289258][ T5930] uclogic 0003:5543:0004.0007: item fetching failed at offset 1/5 [ 254.300484][ T5826] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 254.304703][ T5930] uclogic 0003:5543:0004.0007: parse failed [ 254.314028][ T5930] uclogic 0003:5543:0004.0007: probe with driver uclogic failed with error -22 [ 254.333164][ T5930] usb 4-1: USB disconnect, device number 11 [ 254.348078][ T8013] kvm: pic: single mode not supported [ 254.476493][ T5826] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.535824][ T5826] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 254.558324][ T5826] usb 6-1: can't read configurations, error -71 [ 254.596620][ T8019] capability: warning: `syz.3.613' uses deprecated v2 capabilities in a way that may be insecure [ 256.046653][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.053151][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.176289][ T8035] tipc: Started in network mode [ 256.191840][ T8035] tipc: Node identity 82d100e0a00c, cluster identity 4711 [ 256.210060][ T8035] tipc: Enabled bearer , priority 0 [ 256.228893][ T8038] syzkaller0: entered promiscuous mode [ 256.241438][ T8038] syzkaller0: entered allmulticast mode [ 256.264069][ T8035] tipc: Resetting bearer [ 256.292628][ T8034] tipc: Resetting bearer [ 256.366829][ T8041] Process accounting resumed [ 256.378201][ T29] audit: type=1804 audit(1737249650.830:157): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.622" name="/newroot/127/bus/bus" dev="overlay" ino=735 res=1 errno=0 [ 256.407984][ T8034] tipc: Disabling bearer [ 256.542368][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.618'. [ 257.654863][ T5835] Bluetooth: hci0: sending frame failed (-49) [ 257.663766][ T5823] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 257.692180][ T1074] Bluetooth: hci6: Frame reassembly failed (-84) [ 257.816187][ T8064] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 259.720438][ T5823] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 264.133055][ T8117] kAFS: unable to lookup cell '/yz1' [ 266.930715][ T8151] syzkaller1: entered promiscuous mode [ 266.958334][ T8151] syzkaller1: entered allmulticast mode [ 267.260820][ T5930] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 267.460344][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 268.143203][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.184695][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 268.270374][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 268.312648][ T5930] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 268.330794][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.347901][ T5930] usb 5-1: Product: syz [ 268.353524][ T5930] usb 5-1: Manufacturer: syz [ 268.358386][ T5930] usb 5-1: SerialNumber: syz [ 268.370320][ T5930] usb 5-1: config 0 descriptor?? [ 268.380884][ T8172] delete_channel: no stack [ 268.383366][ T5930] smsusb:smsusb_probe: board id=2, interface number 0 [ 268.425669][ T5930] smsusb:smsusb_probe: Device initialized with return code -19 [ 268.631905][ T8151] netlink: 52 bytes leftover after parsing attributes in process `syz.4.653'. [ 268.848733][ T8169] delete_channel: no stack [ 269.315236][ T5930] usb 5-1: USB disconnect, device number 9 [ 269.501740][ T8182] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 271.240388][ T940] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 271.442953][ T940] usb 6-1: config 14 has an invalid interface number: 41 but max is 1 [ 271.626772][ T940] usb 6-1: config 14 has an invalid interface number: 170 but max is 1 [ 272.117703][ T940] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 272.132770][ T940] usb 6-1: config 14 has no interface number 0 [ 272.138985][ T940] usb 6-1: config 14 has no interface number 1 [ 272.150269][ T940] usb 6-1: config 14 interface 41 altsetting 6 has an endpoint descriptor with address 0x58, changing to 0x8 [ 272.167968][ T940] usb 6-1: config 14 interface 41 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 272.179064][ T940] usb 6-1: config 14 interface 41 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 272.198228][ T940] usb 6-1: config 14 interface 41 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 272.229977][ T940] usb 6-1: config 14 interface 170 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 272.252849][ T940] usb 6-1: config 14 interface 41 has no altsetting 0 [ 272.266688][ T940] usb 6-1: string descriptor 0 read error: -22 [ 272.278273][ T940] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=97.d0 [ 272.287925][ T940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.304112][ T940] kvaser_usb 6-1:14.41: error -ENODEV: Cannot get usb endpoint(s) [ 273.009957][ T940] kvaser_usb 6-1:14.170: error -ENODEV: Cannot get usb endpoint(s) [ 273.201452][ T8216] syz.1.670[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.201549][ T8216] syz.1.670[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.243908][ T8216] syz.1.670[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.659593][ T940] usb 6-1: USB disconnect, device number 5 [ 275.637903][ T8233] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 276.926725][ T8250] syz.1.681[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.926836][ T8250] syz.1.681[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.192255][ T8250] syz.1.681[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.222658][ T8254] syz.1.681[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.360119][ T8254] syz.1.681[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.404383][ T8254] syz.1.681[8254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.310367][ T940] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 280.673284][ T940] usb 6-1: Using ep0 maxpacket: 8 [ 280.720955][ T940] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 280.737151][ T940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.591201][ T940] usb 6-1: Product: syz [ 281.595601][ T940] usb 6-1: Manufacturer: syz [ 281.600922][ T940] usb 6-1: SerialNumber: syz [ 281.661137][ T940] usb 6-1: config 0 descriptor?? [ 281.872771][ T940] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 282.988565][ T8341] »»»»»» speed is unknown, defaulting to 1000 [ 283.541645][ T940] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 283.597730][ T940] usb 6-1: USB disconnect, device number 6 [ 284.784706][ T6290] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.870498][ T940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.050616][ T940] usb 6-1: Using ep0 maxpacket: 16 [ 287.072577][ T940] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 287.142518][ T940] usb 6-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 287.200297][ T940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.305644][ T940] usb 6-1: Product: syz [ 287.419326][ T940] usb 6-1: Manufacturer: syz [ 287.563735][ T940] usb 6-1: SerialNumber: syz [ 287.916295][ T940] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input17 [ 288.499880][ T5835] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 290.151979][ T5180] bcm5974 6-1:1.0: could not read from device [ 290.197590][ T5180] bcm5974 6-1:1.0: could not read from device [ 290.277572][ T940] usb 6-1: USB disconnect, device number 7 [ 290.284179][ T5180] bcm5974 6-1:1.0: could not read from device [ 290.831011][ T940] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 291.188666][ T29] audit: type=1800 audit(1737249685.640:158): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.729" name="/" dev="fuse" ino=0 res=0 errno=0 [ 292.243210][ T940] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 292.246787][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 292.268076][ T940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 292.279580][ T940] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 292.697108][ T940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.715978][ T5835] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 292.726915][ T5835] Bluetooth: hci4: Injecting HCI hardware error event [ 292.738383][ T5835] Bluetooth: hci4: hardware error 0x00 [ 292.767096][ T940] usb 6-1: config 0 descriptor?? [ 293.207658][ T8446] binder: 8445:8446 ioctl c0306201 20000bc0 returned -14 [ 293.214940][ T940] appletouch 6-1:0.0: Geyser mode initialized. [ 293.217636][ T940] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18 [ 293.863466][ C0] appletouch 6-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 294.002760][ C0] appletouch 6-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 294.540339][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 294.774374][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.930598][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 295.006066][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.270260][ T9] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 295.279494][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.296223][ T5826] usb 6-1: USB disconnect, device number 8 [ 295.304349][ T9] usb 4-1: config 0 descriptor?? [ 295.338467][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 295.413456][ T7029] udevd[7029]: Error opening device "/dev/input/event4": No such device [ 295.424515][ T5826] appletouch 6-1:0.0: input: appletouch disconnected [ 295.582064][ T7029] udevd[7029]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.591993][ T7029] udevd[7029]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.651566][ T9] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 295.675904][ T29] audit: type=1804 audit(1737249690.120:159): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.745" name="/newroot/151/file1" dev="fuse" ino=1 res=1 errno=0 [ 296.438812][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.455342][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 296.471083][ T29] audit: type=1800 audit(1737249690.120:160): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.745" name="/" dev="fuse" ino=1 res=0 errno=0 [ 296.571393][ T29] audit: type=1804 audit(1737249690.830:161): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.745" name="/newroot/151/file1" dev="fuse" ino=1 res=1 errno=0 [ 296.596278][ T9] usb 4-1: USB disconnect, device number 12 [ 296.680718][ T29] audit: type=1804 audit(1737249690.830:162): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.745" name="/newroot/151/file1" dev="fuse" ino=1 res=1 errno=0 [ 296.733647][ T29] audit: type=1800 audit(1737249690.830:163): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.745" name="/" dev="fuse" ino=1 res=0 errno=0 [ 297.625333][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.810584][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.750'. [ 297.962277][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 300.548261][ T8527] binder: 8526:8527 ioctl c0306201 20000080 returned -14 [ 300.587588][ T8527] binder: 8526:8527 ioctl c0306201 20000140 returned -14 [ 300.816757][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 301.650250][ T8540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.689381][ T8540] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 301.863478][ T8547] Invalid ELF header magic: != ELF [ 302.677759][ T8540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.693365][ T8540] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 303.163242][ T8540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.169205][ T8540] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 303.452393][ T8540] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 303.535893][ T8540] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 306.892074][ T8612] netlink: 'syz.5.780': attribute type 1 has an invalid length. [ 306.899774][ T8612] netlink: 224 bytes leftover after parsing attributes in process `syz.5.780'. [ 308.408731][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.782'. [ 308.772540][ T8658] netlink: 'syz.4.782': attribute type 12 has an invalid length. [ 310.839449][ T8682] syzkaller0: entered promiscuous mode [ 310.879846][ T8682] syzkaller0: entered allmulticast mode [ 312.875535][ T29] audit: type=1800 audit(1737249707.330:164): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.797" name="/" dev="fuse" ino=1 res=0 errno=0 [ 313.879897][ T8727] openvswitch: netlink: Message has 8 unknown bytes. [ 314.190434][ T5929] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 315.010270][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 315.021896][ T5929] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 315.034246][ T5929] usb 6-1: config 0 has no interface number 0 [ 315.040791][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 315.052591][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 315.066244][ T5929] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 315.098273][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 315.152112][ T5929] usb 6-1: Product: syz [ 315.156336][ T5929] usb 6-1: SerialNumber: syz [ 315.191603][ T5929] usb 6-1: config 0 descriptor?? [ 315.217012][ T5929] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 315.249096][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input19 [ 315.511276][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.521305][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.528789][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.539089][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.546579][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.554234][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.561577][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.568759][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.575975][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.583176][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 315.594902][ T5929] usb 6-1: USB disconnect, device number 9 [ 315.594964][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 315.621177][ T5929] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 317.227504][ T8762] xt_bpf: check failed: parse error [ 317.488212][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.494698][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.574236][ T6296] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.286413][ T8770] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.601583][ T8782] fuse: Bad value for 'fd' [ 319.678483][ T8782] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 321.203154][ T8798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.013842][ T8882] macvlan2: entered promiscuous mode [ 327.039694][ T8882] macvlan2: entered allmulticast mode [ 327.264647][ T8891] batman_adv: batadv0: Adding interface: dummy0 [ 327.294537][ T8891] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.342750][ T8891] batman_adv: batadv0: Interface activated: dummy0 [ 327.348805][ T8886] ref_ctr increment failed for inode: 0x114 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807af7cc00 [ 327.368011][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.843'. [ 327.377577][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 327.412350][ T8891] batadv0: mtu less than device minimum [ 327.442831][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.455799][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.468190][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.480409][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.492947][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.505633][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.518203][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.530845][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.537888][ T8885] uprobe: syz.5.840:8885 failed to unregister, leaking uprobe [ 327.543273][ T8891] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.166432][ T8915] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 328.953934][ T29] audit: type=1800 audit(1737249723.410:165): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.848" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 329.195085][ T8924] vlan0: entered promiscuous mode [ 329.204745][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 329.213250][ T8924] bond0: entered promiscuous mode [ 329.234260][ T8924] bond_slave_0: entered promiscuous mode [ 329.255666][ T8924] bond_slave_1: entered promiscuous mode [ 329.289736][ T8924] bond0: left promiscuous mode [ 329.305153][ T8924] bond_slave_0: left promiscuous mode [ 329.325904][ T8924] bond_slave_1: left promiscuous mode [ 329.410450][ T5929] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 329.600459][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 329.620985][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 329.659333][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.777681][ T5929] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.796553][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.806297][ T5929] usb 2-1: Product: syz [ 330.575262][ T5929] usb 2-1: Manufacturer: syz [ 330.579929][ T5929] usb 2-1: SerialNumber: syz [ 330.586744][ T5929] usb 2-1: config 0 descriptor?? [ 330.597492][ T5929] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 330.630410][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 330.648440][ T5929] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 330.843046][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.866405][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.899241][ T9] usb 3-1: config 0 descriptor?? [ 330.927627][ T9] cp210x 3-1:0.0: cp210x converter detected [ 331.221766][ T5929] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 331.231583][ T5929] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 331.422240][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 332.710266][ T5929] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 332.876419][ T5929] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 332.944908][ T5929] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 332.962290][ T5929] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 332.992447][ T9] usb 3-1: USB disconnect, device number 5 [ 333.158653][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.189028][ T9] cp210x 3-1:0.0: device disconnected [ 333.377929][ T5929] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 333.393856][ T5929] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 333.450444][ T5929] usb 2-1: USB disconnect, device number 9 [ 333.588590][ T29] audit: type=1326 audit(1737249728.040:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.617117][ T29] audit: type=1326 audit(1737249728.040:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.638550][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.700724][ T29] audit: type=1326 audit(1737249728.040:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.743041][ T29] audit: type=1326 audit(1737249728.040:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.764822][ T29] audit: type=1326 audit(1737249728.040:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.786225][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.820571][ T29] audit: type=1326 audit(1737249728.040:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.859115][ T29] audit: type=1326 audit(1737249728.040:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.944823][ T29] audit: type=1326 audit(1737249728.040:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 333.990960][ T29] audit: type=1326 audit(1737249728.040:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.013500][ T29] audit: type=1326 audit(1737249728.040:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.036900][ T29] audit: type=1326 audit(1737249728.040:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.059924][ T29] audit: type=1326 audit(1737249728.040:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.082050][ T29] audit: type=1326 audit(1737249728.040:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.104262][ T29] audit: type=1326 audit(1737249728.040:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.131094][ T29] audit: type=1326 audit(1737249728.040:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.165455][ T29] audit: type=1326 audit(1737249728.040:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.251775][ T29] audit: type=1326 audit(1737249728.040:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.279091][ T29] audit: type=1326 audit(1737249728.040:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8975 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5246b85d29 code=0x7ffc0000 [ 334.284320][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.871'. [ 336.499575][ T6292] Bluetooth: hci0: Frame reassembly failed (-84) [ 337.280416][ T5905] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 337.535771][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.653317][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.755145][ T5905] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.771840][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.780111][ T5905] usb 2-1: SerialNumber: syz [ 338.033452][ T5905] usb 2-1: 0:2 : does not exist [ 338.108661][ T5905] usb 2-1: unit 255 not found! [ 338.136246][ T5905] usb 2-1: USB disconnect, device number 10 [ 338.580740][ T5835] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 338.589191][ T5823] Bluetooth: hci0: command 0x1003 tx timeout [ 339.151103][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.508232][ T9060] team0: Port device virt_wifi0 added [ 339.615778][ T9061] kvm: user requested TSC rate below hardware speed [ 339.918716][ T9066] netlink: 'syz.5.889': attribute type 10 has an invalid length. [ 340.272935][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 340.273014][ T29] audit: type=1326 audit(1737249734.610:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 340.866137][ T9076] netlink: 48 bytes leftover after parsing attributes in process `syz.5.889'. [ 340.892634][ T29] audit: type=1326 audit(1737249734.610:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 340.936824][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.957344][ T29] audit: type=1326 audit(1737249734.610:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 341.015798][ T9066] bond0: (slave team0): Enslaving as an active interface with an up link [ 341.056469][ T29] audit: type=1326 audit(1737249734.610:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 341.329724][ T29] audit: type=1326 audit(1737249734.610:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 341.361584][ T9086] syz.1.894: attempt to access beyond end of device [ 341.361584][ T9086] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 341.404297][ T940] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 341.411988][ T9086] hpfs: hpfs_map_sector(): read error [ 341.514658][ T29] audit: type=1326 audit(1737249734.610:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 341.692007][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 341.741209][ T29] audit: type=1326 audit(1737249734.610:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 341.742227][ T940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.490306][ T940] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.499798][ T940] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 342.508960][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.518990][ T940] usb 3-1: config 0 descriptor?? [ 342.580367][ T29] audit: type=1326 audit(1737249734.610:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 342.667896][ T29] audit: type=1326 audit(1737249735.320:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 342.711164][ T9105] tap0: tun_chr_ioctl cmd 35111 [ 342.777978][ T29] audit: type=1326 audit(1737249735.330:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.2.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 343.317535][ T9124] tipc: Enabling of bearer rejected, failed to enable media [ 344.601614][ T5931] usb 3-1: USB disconnect, device number 6 [ 345.988071][ T47] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 346.034544][ T9169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.911'. [ 346.093720][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.911'. [ 346.161311][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 346.175768][ T47] usb 6-1: config 0 has no interfaces? [ 346.199281][ T47] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.216834][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.291168][ T47] usb 6-1: config 0 descriptor?? [ 346.354886][ T9180] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 346.389793][ T9180] batman_adv: batadv0: Adding interface: ip6gretap1 [ 346.407365][ T9180] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.448563][ T9180] batman_adv: batadv0: Interface activated: ip6gretap1 [ 347.621866][ T47] usb 6-1: USB disconnect, device number 10 [ 347.780317][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 347.780336][ T29] audit: type=1326 audit(1737249742.230:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780375][ T29] audit: type=1326 audit(1737249742.230:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780408][ T29] audit: type=1326 audit(1737249742.230:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780440][ T29] audit: type=1326 audit(1737249742.230:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780473][ T29] audit: type=1326 audit(1737249742.230:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780505][ T29] audit: type=1326 audit(1737249742.230:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780536][ T29] audit: type=1326 audit(1737249742.230:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.780568][ T29] audit: type=1326 audit(1737249742.230:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.786400][ T29] audit: type=1326 audit(1737249742.240:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.786445][ T29] audit: type=1326 audit(1737249742.240:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9198 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a62785d29 code=0x7ffc0000 [ 347.896880][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.995684][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.013465][ T9202] »»»»»» speed is unknown, defaulting to 1000 [ 348.311277][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.061116][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.458196][ T9254] team_slave_0: entered promiscuous mode [ 351.464512][ T9254] team_slave_1: entered promiscuous mode [ 351.519601][ T9254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 351.544279][ T9254] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 351.623833][ T9263] syz.5.928 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 351.666548][ T9257] bond0: entered promiscuous mode [ 351.747673][ T9257] bond_slave_0: entered promiscuous mode [ 351.879111][ T9257] bond_slave_1: entered promiscuous mode [ 352.064755][ T9257] macvlan2: entered promiscuous mode [ 352.239920][ T9257] team0: entered promiscuous mode [ 355.229448][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.937'. [ 355.281161][ T9310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.937'. [ 355.299659][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.937'. [ 355.310109][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.937'. [ 356.075493][ T9326] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 356.652441][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 356.652460][ T29] audit: type=1326 audit(1737249751.110:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.2.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x0 [ 356.860371][ T5929] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 356.998745][ T9348] syzkaller0: entered promiscuous mode [ 357.070044][ T9348] syzkaller0: entered allmulticast mode [ 357.196042][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 357.205285][ T5929] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 357.214503][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.223497][ T5929] usb 2-1: Product: syz [ 357.230374][ T5929] usb 2-1: Manufacturer: syz [ 357.235300][ T5929] usb 2-1: SerialNumber: syz [ 357.244294][ T5929] usb 2-1: config 0 descriptor?? [ 357.262162][ T5929] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 357.269893][ T5929] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 357.810844][ T5929] radio-raremono 2-1:0.0: this is not Thanko's Raremono. [ 357.931399][ T5929] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 358.421461][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz.3.949'. [ 359.714590][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 359.919675][ T9387] netlink: 550 bytes leftover after parsing attributes in process `syz.5.952'. [ 360.071523][ T9392] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 361.571412][ T9405] SET target dimension over the limit! [ 362.573800][ T5929] usb 2-1: USB disconnect, device number 11 [ 364.087871][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.962'. [ 365.816600][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 366.215176][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.480201][ T29] audit: type=1326 audit(1737249760.930:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9466 comm="syz.1.974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a62785d29 code=0x0 [ 367.780385][ T5826] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 368.713666][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.754214][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.802562][ T5826] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 368.845530][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.505914][ T5826] usb 2-1: SerialNumber: syz [ 369.827412][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 369.851788][ T5826] usb 2-1: 0:2 : does not exist [ 369.856739][ T5826] usb 2-1: unit 5: unexpected type 0x0d [ 369.877491][ T9506] bond1: entered promiscuous mode [ 369.901631][ T9506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.932545][ T5826] usb 2-1: USB disconnect, device number 12 [ 369.938266][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 369.952603][ T9509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.959665][ T9509] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 369.980583][ T9509] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 370.163381][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.918935][ T9511] bond1 (unregistering): Released all slaves [ 371.424878][ T9533] sctp: [Deprecated]: syz.5.991 (pid 9533) Use of int in max_burst socket option. [ 371.424878][ T9533] Use struct sctp_assoc_value instead [ 372.883811][ T9535] kvm: pic: non byte write [ 378.925253][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.240381][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.024807][ T6292] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.216635][ T9643] capability: warning: `syz.4.1025' uses 32-bit capabilities (legacy support in use) [ 382.413969][ T9649] Attempt to restore checkpoint with obsolete wellknown handles [ 382.500269][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 382.674488][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.705137][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 382.720435][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.759750][ T25] usb 5-1: config 0 descriptor?? [ 382.890367][ T5826] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 383.904099][ T25] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 383.930288][ T25] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 383.937231][ T25] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 383.961647][ T5826] usb 3-1: config 0 has no interfaces? [ 383.982577][ T5826] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 384.006492][ T25] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 384.030758][ T5826] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 384.049880][ T25] wacom 0003:056A:0094.0008: unknown main item tag 0x0 [ 384.057186][ T5826] usb 3-1: Manufacturer: syz [ 384.064200][ T25] wacom 0003:056A:0094.0008: Using device in hidraw-only mode [ 384.079828][ T5826] usb 3-1: config 0 descriptor?? [ 384.104422][ T25] wacom 0003:056A:0094.0008: hidraw0: USB HID v2.00 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 384.135945][ T25] usb 5-1: USB disconnect, device number 10 [ 384.216322][ T9663] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 384.319213][ T5826] usb 3-1: USB disconnect, device number 7 [ 386.345253][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 386.586216][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 387.464930][ T29] audit: type=1326 audit(1737249781.910:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.4.1039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a94785d29 code=0x0 [ 387.635663][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 387.766130][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.792155][ T9707] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 388.267426][ T25] usb 2-1: Product: syz [ 388.272214][ T25] usb 2-1: Manufacturer: syz [ 388.278703][ T25] usb 2-1: SerialNumber: syz [ 388.381940][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 388.394915][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 388.402078][ T25] r8152-cfgselector 2-1: can't set config #0, error -71 [ 388.416433][ T25] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 388.430340][ T9707] team0: Failed to send options change via netlink (err -105) [ 388.460424][ T9707] team0: Port device netdevsim0 added [ 388.646216][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 388.690416][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 390.665928][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 390.700080][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 390.706359][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 390.771007][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 390.813030][ T9733] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1050'. [ 390.988385][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 391.043090][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 391.055162][ T9738] ceph: No mds server is up or the cluster is laggy [ 392.500312][ T9751] syz.1.1056[9751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.518627][ T9751] syz.1.1056[9751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.817412][ T9751] syz.1.1056[9751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.946515][ T9764] net_ratelimit: 11 callbacks suppressed [ 393.946538][ T9764] netlink: zone id is out of range [ 394.044741][ T9764] netlink: zone id is out of range [ 394.050514][ T9764] netlink: zone id is out of range [ 394.057094][ T9764] netlink: del zone limit has 4 unknown bytes [ 395.400367][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1065'. [ 397.372555][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 397.530282][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 397.551785][ T5826] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 397.580261][ T5826] usb 3-1: config 0 has no interface number 0 [ 397.598788][ T5826] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 397.619468][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.642848][ T5826] usb 3-1: Product: syz [ 397.662401][ T5826] usb 3-1: Manufacturer: syz [ 397.670553][ T5826] usb 3-1: SerialNumber: syz [ 397.824650][ T5826] usb 3-1: config 0 descriptor?? [ 398.420413][ T5826] f81534a_ctrl 3-1:0.88: failed to set register 0x116: -5 [ 398.470601][ T5826] f81534a_ctrl 3-1:0.88: failed to enable ports: -5 [ 398.477284][ T5826] f81534a_ctrl 3-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 398.538828][ T5826] usb 3-1: USB disconnect, device number 8 [ 399.949610][ T9826] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 402.125817][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 402.162087][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 402.199406][ T9826] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 402.719204][ T29] audit: type=1326 audit(1737249797.160:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 402.974810][ T29] audit: type=1326 audit(1737249797.160:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 403.222233][ T29] audit: type=1326 audit(1737249797.160:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 403.337012][ T29] audit: type=1326 audit(1737249797.160:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9844 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab63385d29 code=0x7ffc0000 [ 406.690841][ T9877] nbd5: detected capacity change from 0 to 12 [ 406.723233][ T5832] block nbd5: Send control failed (result -89) [ 406.729450][ T5832] block nbd5: Request send failed, requeueing [ 406.878066][ T5823] block nbd5: Receive control failed (result -32) [ 406.888662][ T43] block nbd5: Dead connection, failed to find a fallback [ 406.896120][ T43] block nbd5: shutting down sockets [ 406.901627][ T43] blk_print_req_error: 24 callbacks suppressed [ 406.901644][ T43] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.917130][ T43] buffer_io_error: 23 callbacks suppressed [ 406.917145][ T43] Buffer I/O error on dev nbd5, logical block 0, async page read [ 406.931366][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.960741][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 406.969487][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.979274][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 406.989242][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.998878][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.298049][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.537840][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.705566][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.743630][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.751673][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.760819][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.768716][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.811097][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.818953][ T5832] ldm_validate_partition_table(): Disk read failed. [ 407.850883][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.859983][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.898876][ T5832] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.918466][ T5832] Buffer I/O error on dev nbd5, logical block 0, async page read [ 407.940472][ T5832] Dev nbd5: unable to read RDB block 0 [ 407.946289][ T5832] nbd5: unable to read partition table [ 407.990482][ T5832] nbd5: partition table beyond EOD, truncated [ 408.011324][ T5832] ldm_validate_partition_table(): Disk read failed. [ 408.011680][ T5832] Dev nbd5: unable to read RDB block 0 [ 408.011952][ T5832] nbd5: unable to read partition table [ 408.012108][ T5832] nbd5: partition table beyond EOD, truncated [ 408.107381][ T9897] serio: Serial port pts0 [ 409.623905][ T9923] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 409.716363][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 409.735806][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 409.748619][ T9923] bond1: entered promiscuous mode [ 409.755946][ T9919] uprobe: syz.3.1101:9919 failed to unregister, leaking uprobe [ 409.763757][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 409.764717][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 409.782531][ T9923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.786652][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1089'. [ 409.852373][ T9932] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 410.363722][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1089'. [ 410.380709][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1089'. [ 410.390074][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1089'. [ 410.450167][ T9925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.494392][ T9930] syz.5.1104: attempt to access beyond end of device [ 410.494392][ T9930] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 410.498768][ T9925] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 410.556359][ T9930] FAT-fs (loop11): unable to read boot sector [ 410.562506][ T9925] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 410.570582][ T9925] bond1: (slave ip6gre2): making interface the new active one [ 410.585017][ T9925] ip6gre2: entered promiscuous mode [ 410.611216][ T9925] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 412.410693][ T9952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.793202][ T1074] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 415.413612][ T9975] nfs: Unknown parameter 'ntext' [ 415.760950][ T9928] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 415.786381][ T9928] ip6gre2: left promiscuous mode [ 415.834213][ T9928] bond1 (unregistering): Released all slaves [ 416.150573][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'. [ 416.418843][ T9997] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 417.429168][T10009] x_tables: duplicate underflow at hook 3 [ 417.549809][T10007] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 418.841069][T10026] hsr0: entered promiscuous mode [ 420.064699][T10040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 420.160826][ T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 420.563236][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.672162][ T47] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 420.760573][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.810310][ T47] usb 3-1: config 0 descriptor?? [ 420.881355][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 421.829728][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 421.839152][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 421.867215][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 421.897850][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 421.940399][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 421.987427][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 422.012344][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.024050][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 422.203525][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 422.210895][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.221116][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.221244][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 422.240357][T10047] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 422.247736][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 422.258347][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.265979][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 422.654605][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 422.942314][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 423.184520][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 423.194632][ T47] pwc: recv_control_msg error -71 req 02 val 2900 [ 423.222078][ T47] pwc: recv_control_msg error -71 req 02 val 2800 [ 423.852413][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 423.859622][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 423.872442][ T47] pwc: Registered as video103. [ 423.878433][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 423.949063][ T47] usb 3-1: USB disconnect, device number 9 [ 424.991309][ T5875] usb 5-1: USB disconnect, device number 11 [ 425.290493][ T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 425.529072][ T47] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.631617][ T47] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 425.713206][ T47] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.794672][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.829931][T10084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.853919][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.319525][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.119939][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.799860][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 430.547202][ T5931] usb 3-1: USB disconnect, device number 10 [ 430.635894][T10130] [ 430.638239][T10130] ====================================================== [ 430.645269][T10130] WARNING: possible circular locking dependency detected [ 430.652282][T10130] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 430.659366][T10130] ------------------------------------------------------ [ 430.666364][T10130] syz.4.1159/10130 is trying to acquire lock: [ 430.672412][T10130] ffff88801ac74de0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 430.681298][T10130] [ 430.681298][T10130] but task is already holding lock: [ 430.688646][T10130] ffff888144307e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 430.697978][T10130] [ 430.697978][T10130] which lock already depends on the new lock. [ 430.697978][T10130] [ 430.708369][T10130] [ 430.708369][T10130] the existing dependency chain (in reverse order) is: [ 430.717373][T10130] [ 430.717373][T10130] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 430.725188][T10130] lock_acquire+0x1ed/0x550 [ 430.730199][T10130] __mutex_lock+0x1ac/0xee0 [ 430.735213][T10130] blk_mq_init_sched+0x3fa/0x830 [ 430.740672][T10130] elevator_init_mq+0x20e/0x320 [ 430.746057][T10130] add_disk_fwnode+0x10d/0xf80 [ 430.751340][T10130] sd_probe+0xba6/0x1100 [ 430.756095][T10130] really_probe+0x2b8/0xad0 [ 430.761120][T10130] __driver_probe_device+0x1a2/0x390 [ 430.766917][T10130] driver_probe_device+0x50/0x430 [ 430.772452][T10130] __device_attach_driver+0x2d6/0x530 [ 430.778335][T10130] bus_for_each_drv+0x24e/0x2e0 [ 430.783699][T10130] __device_attach_async_helper+0x22d/0x300 [ 430.790105][T10130] async_run_entry_fn+0xa8/0x420 [ 430.795573][T10130] process_scheduled_works+0xa66/0x1840 [ 430.801635][T10130] worker_thread+0x870/0xd30 [ 430.806732][T10130] kthread+0x2f0/0x390 [ 430.811310][T10130] ret_from_fork+0x4b/0x80 [ 430.816235][T10130] ret_from_fork_asm+0x1a/0x30 [ 430.821518][T10130] [ 430.821518][T10130] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 430.830380][T10130] lock_acquire+0x1ed/0x550 [ 430.835394][T10130] blk_queue_enter+0xe1/0x600 [ 430.840583][T10130] blk_mq_alloc_request+0x4fa/0xaa0 [ 430.846297][T10130] scsi_execute_cmd+0x16c/0x10e0 [ 430.851745][T10130] read_capacity_16+0x2b4/0x1450 [ 430.857195][T10130] sd_revalidate_disk+0x1013/0xbce0 [ 430.862909][T10130] sd_probe+0x9fa/0x1100 [ 430.867663][T10130] really_probe+0x2b8/0xad0 [ 430.872676][T10130] __driver_probe_device+0x1a2/0x390 [ 430.878472][T10130] driver_probe_device+0x50/0x430 [ 430.884009][T10130] __device_attach_driver+0x2d6/0x530 [ 430.889888][T10130] bus_for_each_drv+0x24e/0x2e0 [ 430.895254][T10130] __device_attach_async_helper+0x22d/0x300 [ 430.901659][T10130] async_run_entry_fn+0xa8/0x420 [ 430.907113][T10130] process_scheduled_works+0xa66/0x1840 [ 430.913177][T10130] worker_thread+0x870/0xd30 [ 430.918278][T10130] kthread+0x2f0/0x390 [ 430.922862][T10130] ret_from_fork+0x4b/0x80 [ 430.927789][T10130] ret_from_fork_asm+0x1a/0x30 [ 430.933071][T10130] [ 430.933071][T10130] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 430.940718][T10130] lock_acquire+0x1ed/0x550 [ 430.945736][T10130] __mutex_lock+0x1ac/0xee0 [ 430.950752][T10130] nbd_set_size+0x2e0/0x8f0 [ 430.955806][T10130] nbd_ioctl+0x5dc/0xf40 [ 430.960562][T10130] blkdev_ioctl+0x57d/0x6a0 [ 430.965572][T10130] __se_sys_ioctl+0xf5/0x170 [ 430.970671][T10130] do_syscall_64+0xf3/0x230 [ 430.975703][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.982116][T10130] [ 430.982116][T10130] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 430.990731][T10130] lock_acquire+0x1ed/0x550 [ 430.995759][T10130] blk_mq_submit_bio+0x1536/0x2390 [ 431.001378][T10130] __submit_bio+0x2c6/0x560 [ 431.006393][T10130] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 431.012532][T10130] block_read_full_folio+0x9b3/0xae0 [ 431.018327][T10130] filemap_read_folio+0x148/0x3b0 [ 431.023866][T10130] filemap_get_pages+0x18ca/0x2080 [ 431.029496][T10130] filemap_read+0x452/0xf50 [ 431.034513][T10130] blkdev_read_iter+0x2d8/0x430 [ 431.039875][T10130] vfs_read+0x991/0xb70 [ 431.044543][T10130] ksys_read+0x18f/0x2b0 [ 431.049298][T10130] do_syscall_64+0xf3/0x230 [ 431.054311][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.060720][T10130] [ 431.060720][T10130] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 431.069231][T10130] lock_acquire+0x1ed/0x550 [ 431.074245][T10130] down_read+0xb1/0xa40 [ 431.078911][T10130] filemap_fault+0x615/0x1490 [ 431.084099][T10130] __do_fault+0x135/0x390 [ 431.088942][T10130] handle_pte_fault+0xcab/0x5ed0 [ 431.094391][T10130] handle_mm_fault+0x1053/0x1ad0 [ 431.099838][T10130] __get_user_pages+0x1c82/0x49e0 [ 431.105376][T10130] populate_vma_page_range+0x264/0x330 [ 431.111345][T10130] __mm_populate+0x27a/0x460 [ 431.116449][T10130] do_mlock+0x61f/0x7e0 [ 431.121117][T10130] __x64_sys_mlock+0x60/0x70 [ 431.126222][T10130] do_syscall_64+0xf3/0x230 [ 431.131238][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.137653][T10130] [ 431.137653][T10130] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 431.145206][T10130] validate_chain+0x18ef/0x5920 [ 431.150573][T10130] __lock_acquire+0x1397/0x2100 [ 431.155931][T10130] lock_acquire+0x1ed/0x550 [ 431.160941][T10130] __might_fault+0xc6/0x120 [ 431.165955][T10130] _copy_from_user+0x2a/0xc0 [ 431.171063][T10130] blk_trace_ioctl+0x1ad/0x9a0 [ 431.176340][T10130] blkdev_ioctl+0x40c/0x6a0 [ 431.181354][T10130] __se_sys_ioctl+0xf5/0x170 [ 431.186453][T10130] do_syscall_64+0xf3/0x230 [ 431.191489][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.197896][T10130] [ 431.197896][T10130] other info that might help us debug this: [ 431.197896][T10130] [ 431.208109][T10130] Chain exists of: [ 431.208109][T10130] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 431.208109][T10130] [ 431.222446][T10130] Possible unsafe locking scenario: [ 431.222446][T10130] [ 431.229883][T10130] CPU0 CPU1 [ 431.235234][T10130] ---- ---- [ 431.240588][T10130] lock(&q->debugfs_mutex); [ 431.245169][T10130] lock(&q->q_usage_counter(queue)#50); [ 431.253318][T10130] lock(&q->debugfs_mutex); [ 431.260417][T10130] rlock(&mm->mmap_lock); [ 431.264825][T10130] [ 431.264825][T10130] *** DEADLOCK *** [ 431.264825][T10130] [ 431.272957][T10130] 1 lock held by syz.4.1159/10130: [ 431.278050][T10130] #0: ffff888144307e78 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 431.287797][T10130] [ 431.287797][T10130] stack backtrace: [ 431.293690][T10130] CPU: 0 UID: 0 PID: 10130 Comm: syz.4.1159 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 431.304454][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 431.314511][T10130] Call Trace: [ 431.317810][T10130] [ 431.320748][T10130] dump_stack_lvl+0x241/0x360 [ 431.325433][T10130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.330643][T10130] ? __pfx__printk+0x10/0x10 [ 431.335233][T10130] print_circular_bug+0x13a/0x1b0 [ 431.340255][T10130] check_noncircular+0x36a/0x4a0 [ 431.345186][T10130] ? __pfx_check_noncircular+0x10/0x10 [ 431.350639][T10130] ? lockdep_lock+0x123/0x2b0 [ 431.355311][T10130] ? validate_chain+0x11e/0x5920 [ 431.360245][T10130] validate_chain+0x18ef/0x5920 [ 431.365087][T10130] ? is_bpf_text_address+0x26/0x2a0 [ 431.370283][T10130] ? 0xffffffffa000095c [ 431.374439][T10130] ? 0xffffffffa000095c [ 431.378579][T10130] ? __pfx_validate_chain+0x10/0x10 [ 431.383777][T10130] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 431.389926][T10130] ? kernel_text_address+0xa7/0xe0 [ 431.395035][T10130] ? mark_lock+0x9a/0x360 [ 431.399357][T10130] ? __lock_acquire+0x1397/0x2100 [ 431.404371][T10130] ? string+0x26a/0x2b0 [ 431.408518][T10130] ? widen_string+0x3a/0x310 [ 431.413098][T10130] ? string+0x26a/0x2b0 [ 431.417272][T10130] ? bdev_name+0x2b1/0x3c0 [ 431.421683][T10130] ? mark_lock+0x9a/0x360 [ 431.426007][T10130] __lock_acquire+0x1397/0x2100 [ 431.430860][T10130] lock_acquire+0x1ed/0x550 [ 431.435358][T10130] ? __might_fault+0xaa/0x120 [ 431.440028][T10130] ? __pfx_lock_acquire+0x10/0x10 [ 431.445044][T10130] ? __pfx___might_resched+0x10/0x10 [ 431.450327][T10130] ? snprintf+0xda/0x120 [ 431.454561][T10130] ? __pfx___mutex_lock+0x10/0x10 [ 431.459577][T10130] ? blk_trace_ioctl+0xec/0x9a0 [ 431.464418][T10130] ? __pfx_snprintf+0x10/0x10 [ 431.469088][T10130] ? __might_fault+0xaa/0x120 [ 431.473758][T10130] __might_fault+0xc6/0x120 [ 431.478253][T10130] ? __might_fault+0xaa/0x120 [ 431.482920][T10130] _copy_from_user+0x2a/0xc0 [ 431.487505][T10130] blk_trace_ioctl+0x1ad/0x9a0 [ 431.492276][T10130] ? lockdep_hardirqs_on+0x99/0x150 [ 431.497488][T10130] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 431.502782][T10130] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.508770][T10130] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.515101][T10130] ? blkdev_ioctl+0xd3/0x6a0 [ 431.519684][T10130] ? blkdev_ioctl+0x3fa/0x6a0 [ 431.524352][T10130] blkdev_ioctl+0x40c/0x6a0 [ 431.528842][T10130] ? __pfx_blkdev_ioctl+0x10/0x10 [ 431.533856][T10130] ? __pfx_blkdev_ioctl+0x10/0x10 [ 431.538868][T10130] ? do_vfs_ioctl+0x152/0x2e40 [ 431.543625][T10130] ? __se_sys_ioctl+0x8e/0x170 [ 431.548382][T10130] ? __se_sys_ioctl+0xe6/0x170 [ 431.553137][T10130] ? __pfx_blkdev_ioctl+0x10/0x10 [ 431.558176][T10130] __se_sys_ioctl+0xf5/0x170 [ 431.562782][T10130] do_syscall_64+0xf3/0x230 [ 431.567308][T10130] ? clear_bhb_loop+0x35/0x90 [ 431.571996][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.577914][T10130] RIP: 0033:0x7f6a94785d29 [ 431.582326][T10130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.601928][T10130] RSP: 002b:00007f6a9552a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.610336][T10130] RAX: ffffffffffffffda RBX: 00007f6a94976080 RCX: 00007f6a94785d29 [ 431.618302][T10130] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000006 [ 431.626265][T10130] RBP: 00007f6a94801b08 R08: 0000000000000000 R09: 0000000000000000 [ 431.634231][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.642198][T10130] R13: 0000000000000000 R14: 00007f6a94976080 R15: 00007fff429f1298 [ 431.650170][T10130] [ 440.361897][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.368251][ T1298] ieee802154 phy1 wpan1: encryption failed: -22