last executing test programs: 9.128098811s ago: executing program 3 (id=788): mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x4071, 0x0) 8.723265825s ago: executing program 3 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc517, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write(0xffffffffffffffff, &(0x7f0000000140)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0xfffffffffffffeb8) 8.025872089s ago: executing program 1 (id=798): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x7, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x3, '\x00', @string=0x0}}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='xdp_cpumap_kthread\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="180000"], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) r4 = socket(0x25, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0xa, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) 7.979216208s ago: executing program 0 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="adc53261bb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "22288ae5cf370abe8cdb5875905cd096"}, @NL80211_ATTR_PMKID={0x14, 0x55, "30ff8ea0a8c98079682b53a908ba1c8b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008890}, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000f319da31c9f9328549150000000000000000180100002020702500160000002020aeadfe08ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x2e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f700"/124], 0x310) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES8=r1, @ANYRES8=r0, @ANYRESDEC=r6], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x200400c0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x1d, 0x0, 0x0) 6.038680264s ago: executing program 4 (id=801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000180)=0x6d, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x7e2e0000) sendto$inet6(r4, &(0x7f0000002380)="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", 0x1000, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000007000fcdbdf25020000000800000004000b000800053d000000000000", @ANYRES32=r7, @ANYBLOB="14000600ff0200000000000000000000000000011800088014000200fe8000000000000000000000000000bb0600030000000000"], 0x58}, 0x1, 0x8}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) socket$key(0xf, 0x3, 0x2) 6.016791254s ago: executing program 0 (id=802): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0xc6fd, 0x111}, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x408c5333, &(0x7f0000000280)) 5.774114496s ago: executing program 1 (id=803): mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x4071, 0x0) 5.686579049s ago: executing program 0 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) r2 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f0000000680)=@l2={{0x1, 0x3a, 0x5, 0x3a, 0xe, 0x3a, 0xca, 0x3a, 0x401, 0x3a, 0x1, 0x3a, 0x3, 0x3a, 0x6}, 0x2f, 0x2, 0x20, ':\t'}, 0xb0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x4000000000000b, 0x8, 0x2) setpriority(0x2, 0x0, 0x3ff) 4.824605491s ago: executing program 4 (id=805): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.683610277s ago: executing program 1 (id=806): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (fail_nth: 1) 4.235043677s ago: executing program 4 (id=807): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x800, 0x4) 4.009860962s ago: executing program 0 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x1, 0x1, 0x80}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000028550778863161a0631abbde1bf8039febbbff15bb9c3aaf1ab0ef88ca80a0fb05a2ccc8e7e532fdb4523bf017857b1479a1cb26a816da7af65bfafa5e757c08db5b2e3e274a4666a0b5d0151fd3866e240fc88bf016a334f361198551fbe6bdd9dae62b63c400444b20bd30644a0a34f6cb7af89f74cb717934", @ANYRES16=r2, @ANYBLOB="070000000000fcdbdf250500000018000180140002006d616373656330000000000000000000"], 0x2c}}, 0x0) 3.965539985s ago: executing program 1 (id=809): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a102a933f4eb88ce1fa73d72494c059496e0a9c694b86214b95ce71449c291ada7710d883c86299743da9b69845ca63c67d06865913fa39467310bced1f996172af00a5a061b300f8ee20b1f6546639c82d4b4e0b073d456ebebe9d5e26bd7fe0b918a68a8892fc1aeeae35733ba881b0465bd28a6b56acaa8ef74ac482f4b78572527d808b2d17026f98ae2a42c2fa6e00de44eafc621ecc46334a9c21eceae3182b232b39da9dce7d2dec839b228aa55774c40919ac1100af707c1378e9f21", 0xc0}], 0x1, 0x8, 0x7, 0x4) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x1006) 3.964598018s ago: executing program 4 (id=810): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0xc20, &(0x7f0000002000)={0x0, 0x0, 0x40, 0xffffffff, 0x80001}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x7439806b6184efab, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) read$nci(r5, &(0x7f0000000200)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14002000e888478fd6671af38c0dc219c69d8e7fce3e538c3367404e6316f6948dce28829b059ac9d55d6f5fb020cca3fa3358e26fadac3043e1fdb17f2fd61a8b1c51a1dca41d71d784e9aacfd316e4d5520ef1082bcd0d97bd8434291f6b2fc4ec75c56ccc8bf49380e4ea024839e70952b4c760bfbbb250c328f0ccb557733f6db86481ae6cb1e5fe05023c2aa8042689411d", @ANYRES16, @ANYRESDEC=r6], 0x14}}, 0x4) write$nci(r5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x11, 0x20000000, r4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000000000721900000000000051ea5bb9de7e1f3b936af800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 3.897120654s ago: executing program 3 (id=811): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d80)=[{0x0, 0x0, &(0x7f0000000780)=[{}, {&(0x7f0000000080)="ef106b3f32479f750c904dc39e83115526a2112e7198451ca3fef90591b4c2952eb4e3fca7", 0x25}, {&(0x7f00000001c0)="04a8128e752f788a7ec793edccbecbd850f5b9858bc377e2186f208595e1c7a7fceb2e96fac50f2d4c22c983a6ad7aeb8d822d288cf936175d153f3e9f72ade42f0db2b286e7e81c5f5c8974797548ae9106f2765477757d91eb0486eb6d929d0ebca7b0fe49e05fb6a75249ced396716ab5ed9d0da3c71d106b205e54377e30546803d094d291262aca1a3cc7225e78902a0a469e17b27dd43c1455faee0c14964000d468eddbda1e21ac1e2359caf5d53379c077de14a7811a502799cfcae43f", 0xc1}, {&(0x7f0000000340)="b135cb2f642d277d8d533fdefac8ea960ebe931ad537abce8cee1e2a2a7dfd85cc56e5fa15e170868be175bc9a6ac0edb94d6ae2bd81bccc22d5b0bd26857cd3659fa68e301ee5852a6aa5e56458f2d9bbef436e764f26dcfe385018acf8e68ffc5bf5eec67f382ed8351e6b7165ae9c98d30dbb4293c26cc3e318626b1ed20f8a862b5b88148d14db47a7062051a037e115c4e5e4abe4e90a5041a21b824003bba0408130ba97bb146dd2d5e6421a7c2f7349bf40c6ec608dc36c1b4fa8867c3d49a255bd4498f6c3e743f959", 0xcd}, {&(0x7f00000000c0)="25422b230b85b4189f8d9096f4a8d1ae2f1913acd4259110b3240843fd183aba66b567a888f1218bc429fae5740feb5e8ecebc8da432826d65c19b0237b04308b6592aaeb4d696", 0x47}, {&(0x7f0000000480)="70a1feb3873175ce9a62e108715559b3407d0da59ec85a32c9c5329a352ca1ed09d43f96e26bd9a2953173d8974597068d40dbe10a7a95c7114be9516238c1302698ed4c011cb346c3822da64563eb", 0x4f}, {&(0x7f0000000500)="a6b26eba988281e4fe31be6a7578aa2afbbe294d1faa28345e54c234040900bc60642463c44c1b5a0f6b1135da0608acaf32e01567599f43ac7899b1a8d6289297d408ccc7338258f1513f2c9cdb15cfc014d914423fa196e2094a920e08affa9d7cd113757461006afc83376971cb73060c19dd2f0d5e8b8095fa2e8de73c229ce71f2526a597a597d8ab7c7d45c21700a4c9390446151e50db3bf05f5b9a659b61adf80155", 0xa6}, {&(0x7f0000000680)="c490d7a5e4f2ef6b3b80d7da487f5478ce135dc655c801cb09fa2648284c6e9ff55d6b4365c7d7be0e7907b6360de7e6deb859866ce3df08b9575949ee49174cc4ff311561ebcda2fbafbbaf61f6767911cef08b010e2061d8e210db476198b9d975d252093a1824a4383a107d7d96c66fb8494cea354494bbace39b898ce6b61b20e50ab5c62741dc388a036ada4c78f4f13c9f7feb6c04a20c9c05abc81593d35598eaf9eed58a7e640527bd2148d72a7f1862ba4786356fb172e74ffbe429a5760e76276b1a18708c5c99a1cfea15f8115e7e1177ebc5a744faf2f3f34337647f057ecf8957a4ddeadbc56626c85f2f94c0ea4f1ba8591a", 0xf9}], 0x8, &(0x7f0000000800)=[@op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb3, "cb77ea0e22ddea42a4aaa91191bb54bee9dd4b56c183a619066c8ada2de7b2eb56ebbda99db8293f5cd421933006108f4ca9c5f0f9c9e0bc1ede95d907697d82805157eff317e528067ced49ce3164f2b064227de6036615da0faa4d10b4c43ffca20cd4e80958df75a942a02a2ece85928648bdc36d926dda42af31fc9b5a3756bf74db7627858531bbffbe4d61b8eb97f6a2084c56ce5115b6c49ddb2db36cc517d9b806bec0e3c82df5bcd83740a8d89f95"}], 0xe0, 0x2040}, {0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000900)="42445ebdd01c10845938ecd97b1876e3cb7f3cd450a8b4fbde55262dec6486bd271ea5bcab549237a0bbd01627dba762202bada9b10e48bf18199f5c309bff1fdbbd332f62384ee4e85f2fce4ad163c51466df35535ea4a515a694c825c5895de4586f9fb2b47891ec20d45b759a277888a4c9c2dfcfd7026cfa3ead83565263a969b932cd27d13c2e7014f7c8d91de5ecb99ceb193a15d375b2daa6d748e4a0cf5efebddeae942e8879616d7a1a08fd6e16ce0e52802be34938fe9672344d6a455737ca23c97ac2298ee95621c61b35c72d32d07073cf4807c4bd7e7619d665999eb80706", 0xe5}, {&(0x7f0000000a00)="30d56bcbb9b47ae678b29b1799074460e7ce31aa8949e3f1c439bf344979053f688f32dfe1e0c5517afef041595aa8f73a7459d1e430de9d25a8b7c7d8bb830174d34763cc6b50f3c2c92a42c1571ca7ca7310690020c97ced9e8fb2d16f3090964299b7beebe385544b6ea517b234320e8dd53e44723c7dde85f33bcef42e8ebb0eb7f347363d75228b9c6a91a6a7bbc8519fd9d945247e1d668fa48846f69f619b8efe97d372fabdc48ab3e01b2d27216aacdcab945007f30e96872ebde5bee5076d2e64c12630f691e1a5d7e51b1f08b5601459d005c5a70ccef84eaf554c76793e0f26bedd125a3e20178642a70f9b30f867d9a2177224ba4418f977f0bc92d6f62271267df9e37fa21e1ce03ef2da4089300bb55787ba61bbf3f60fb1870112fd002f1cd02caf87a752a123bcb570652b8c17389f3a2df12576c78a16a8b588d511bc7b2781a671ff8618ee72489f4f00facf92832aabc887ea2589841264a2aa5112d8c05e04e6d78b3a7911510b2cd88f48cbd125cab3093fc128368d6afa675156bb5608fd1b5a44e483f00ce4e13ca458cdf36493c84848bf23dd47779967c6b481a744aaca0f41b3d0050eb901f7be9a96f24db7f0f3edec2e0016865139f7ae0e59656ed344eae6d263fb657ad092f4ed1e0b89663094594f76073fdd10d5ae80498e6970ceaec725b1c147b527c2667822877b1471ed3e587ed680af28c140f688042cc1a65e530e4b656e6c7ccd6b55c74c57e13d80cdb10fc76b3bae044b13b3c69d886f0e7422f2fabf00a86f357d861583e652cb1c1ce5e5445abb4d52326d666760c196ea96d31d6c73064c2a93e1c01f5f7906b5607aa21e0b1bb9ae4979fcdc47df21f269ea6be1964d339af5ca8498c41a200540b979e13d0cb96f0e1c4b24bbf562996a1f7002c4cb4b8235597bb1b5e232ff688465df2b440910a8c1b62dbd0a099fdccba8bb880267e77efd94e33a7de0b0e3619c5152b9b6aa7d1c479925950a9f20610ea45b907e69ea8c38ea620f12df14601e091d6d17c93162409725d1c23a010b3f58dfb6ea1ad2ff66f4f81557f4bdc4135dd5b4be95d872df4b06c751096b7fa0412d8cd45590fe7c13c348d41b38cc306ddc9ae08e9286bede39871465e8d0187ccc4f07d450d85bd26c80bdbdc96e6974fe10ce2d128fe154a3fed90dc42c80163cc194f06aa59221ac78ba0eda5365f463967873a78cc440c17d96e7f45254e2a73c276f06d0335d983bd630a3f0ec7ede977d506b21790c4017bc44c2f52adf0dca24f20f48493c4932bcecb012d4f9d8d588c7a9b7ffedb03bfb2172b124b5e025149b93d36d7fb5a8309323ee304a65d91540a7dd017abbc6b85ac1356cc929e201817ba3e7faa2655732d6aecc090bade639bff3895344a6f496cf21450046c1c5e5bc96f609df6e90e6184982d9c0a56b6bc217a9310339c827f9cb7d1455944f55882629d03ff3b480098205f27a243ae2aff56d5057ad2fa77f3432aa3d6f8fcead9d0f250ecde064dcf010f58da1fe881edf42cca11a48e26e8bb51f9cc076474f9a0bf5c5903c318c9aad303ffd018b786ed154c70acbc85940c2d1703101ce3af4e4a67d424b47f6bbbe9091ab873a22cc6ebccda6aff8239eb0ec264dccfad780a4605f0b33d829a73a849b5a1d576075afaafee01c53bfcd7f48ff25ff1ca86ad75e66b6f05b9b14cf2fd09ad45d1490afb45fd79a997e8fcfc79899740a0b2c75c695dbcbf8143b16aad6e3520f9ec6c7a3ef04ffc15247b190d4572f1c923aa43e3677a65d1a350070454fd16ea673c4b314e90d6cb1c0040adc288de96956fbe3aee4eaac89961cd0cd0b3ecd72cfbf4f654a92d5e118266182f98e256fe7dfcf5f698c43089d3e4f175538c131ed3435f6d008e26f1b49efac77bcd08784d33be1f80e05a782e88bd45a564eb92fe611bd179aa8b12cdbdabc1353918af582949c9c26049589ad9e6c51c09354f9d21e2d91a734180f388adf9980d7137d9fdb3d8a6479678d13aefcf57adf89b8d5485e3818f705aabe7646304a88fcf2975b22b9eef7a625c2e2de7898a7a86daa98dcfd9de5aef0f7766bf809db2e48ee47ef35083e8a6a0dad5e15e9df2c8439b5dd511f8eee3e1a2375fad56157e80311d5acf1afd326408a655d1fd8d39228547a3198180e3feae19659ea654113f2795b447c315be20b69e3f16834c66bd1b6a9673fabe1f65f46b2cf8db9715aca62b4bc7d6983ae21320e69334d18f93b247654ff5c644d9e8411dd3af55727f713a387b6202bf1f5099517e37ee831b6d775a92008d125963d1f24b0de75e3ff25047298a32ab71e56fff7f60387f745d942cb43a539c833eb0efb206d30641ee1eb0df684242805c52cdd219eb6564940f5856cd3041dacaf6f733cca7994ae9bd89a6aa492b2dbfd7448bbc3f7ce465e66ee82473768f63313df46d39c8d1327db284494a16d818822f2322ca89d05bbee9f2d2cdd3a5734fb2a0fc160d1e598c1102a493528c3b67e935135d7079202f1f2ffb17c536f40af6579c843aaf18e0b6b8d342ddd6ebb7b6bb7fff6f1c85151f6ddfbc12aa9a30358fc73613c316692756053e6f8a1362905de2b8039fdb967b47dcfb0353ef6893e85c688bc38719c1cb11a9165bee3d3e34ce0681bdb0bfcb1f468e030fcd13122014dd4e41565bb5f55a99feef664495df223ae34336570964779bb5118a1508d1c65ea67c7a542ce0f4b4377184b4046bc525a659915b1f3f065a06e18b13de8aea8238a912b38048b1455eda8810ac6c1f5f95fa56bb273431bd16e8c9710c7da46b87963e3fa8cf318d1e5076385d3739bcc6fac40b9835c5da3d9f76021a3ca46a947784246531995b9f1e9532a75099979351943d1d9082ff4f39f09e6c91b4e286e62b4bce0e9a5d63f364db8470c2235ed43ce8ba9503c252454d9b38546e548e439b7865a356865cfd808b8ed3828f89af20fb8b2034e91011c1630fe663613834ad366586351f6f1bfa453a9175958b011b2a33534c0597b47543cbe488ef45b95374f79e34f4beb9ae0c39a57c8b8a59abfccfa0b37a0ff34a933d616637d7897e721ed00cb27dc83270a83db345f268c3df9422a7399e1fb29297a3c147a52783d9c68141b579577adc9216697dad96106d4590d5c39ec2bc7a5bba536d9f985aadd4a166ed2f0c58b8e07cb613efe52a5af3e322ce005d0155fa541a4ffea50984eaf078186a89e243e4342819cf3876ec8b3261eb266a059c66640832e27d0f2de3b7d9ae1d0f11351a28c121c6fccc9a33e27210ecd72492dff1aa9b048151ff6d03df1a9a6ad77cce6b1ee824da02857b48612a2bc04d332c8ae98fadd33b320e3fc397754b89aa982343d3da5863cc5650ae0a565316e09cd715a044a3f1d1d3069619dc736c2bff3bd3f80bcace72e2d74a57af48e9d38bf0eb905ea0c2c342c4df23041355dae1201979c7a32fe9c9fbdb00066d30d66904963f197982859ab5cbbd957c4cf0c765ba52f555d75ef91d0f44b5367a9d0ca6e3b7bef3e1d652a03ac4a3051742597de536b0c5ef54025c4d2bfeb911519ab6db6c805a39573be8975a3f851115c1bf89b099900028b3e14a7ef9e5adb0cedec650b2d1ec07253c77c0b5ae7ab1f885c3ae2d393836521564f086e6801db2be9458b8052c7559657f8071530f71da09ae6185c88cea2522ee1cba107cf1a962c5b35fb8fe67b71493f038b102e493c6127ce1321048d2812f02d175e9f63c5d05cac9f5a421caf0be11fdbb3eab616efa6484818cac66e6d8f86f2a1ea4805d90624b97433416395da7453fc478a70e80753f7f9c5de387bdff44c58655c1448151be64d9857fff1b3a2bf0a26b67deaa11403493b5d8e6bb63720ab018d55044f00c58dacefd3e11bdfe6332a44279327e115ae0a187162a3ab7ed9844a3cfa5bcb03f480e341f0ecaf42139c98f4dfccdc54429dd79d3223569f227a8b982f72ee82d79d6ba0596c3d674b23fc7384c63e6d34f31980af016936228d66c4bf3533687d71ce7c8f293fcdfaf609a68d2744dd25020588c237fdd82a909d5e449ad169f4d67ea9d3b48969c545125d18c84fbd695799a28ffca6a4e5d7948abf8f4f9f06ff400bc3f4c11e2bb042f0d7edcb7969fe8143d119af9125e0e9d1bf9fef5d670e9b0360163533696ed0f9f45c53c4e1cce8c776389678272f0f3809e2e487ab1aa8da72f334ace602e7905285bba12213fd62df9619d32e13f327d7efeb5320676cc7f0097e6ee36bf54b94840cacacbbda63785c106e836ce952e09811ed42e337666392e5e0dc87964cd397d5fe019020a0f2f052824f792ce158d163757d9c4834590b7a1b6e2ef1e73d5fc84bf7c72e3b94a5bfa4111bee6baeffb57d8a9a1e1d2dfa31baaa472544172b42925dbe97924e4f15d0e213a2765c562ce77299c18ffd66304fe986ab95fa4e33d16c80159251c352e345d232fec224f66e7edcaa611e9a578e50045ff1c4a163e3226b21975acb62292006dc2b36636d1e40be94d83cd82fe089438183b8d8fb782c0a60c9e42bb83d028405fc552a57e3ab5d3d32077ac4a7a6706b7060d7f6068c3942bacb9f0a924b4ac8b8edfe2516e33fc20943fe71ccbee42ae3ce2038041ee6d5d95676fb20582b71ce51b83e80e0ed1e6f3eedaf0db50edcd25a34900bb2211cb24557de3e46399cde61ee7e2396598f115394b05ca906f717836cd4adb1db2bb4ea902c261dfc83f6373e2456f8e69a1057748bf3cf5543819290156388a30b80c0d8780a3ef58420a0e32e36124000877efd91296c7b08814239ab6f854a37f3b2540652ca751fdb08e8d00b6ed7206eff8f2a9e074245b6c401912a61985c5a6287d17a1bb7c81e27f80ae155f0e8b1c099995c2029ad69527a4193204646570f3ab1597027a1c61e8942f04faab4347d6e957e8215e21dc5a4e8c13b44ffcc2ead1fa97e3bfb2a00b076fc06cc4405af8cbe35428d3b9fa6b8778e1464829323f39097aca7b6ea82be7d9f12baea36f08caa658e2825652ba57c204cc8b494a7d465d63cc446e6b43ebc3c255bfc8ea57903c5412ecaee641d8fa13694bc6ea76c68de709c2ecf066fc0f4141da21cbd69fe0f911248177b43ead111d24a136c68e20f60b9a8241aa47e5747bf096e13a6b95592d54257b776e130c632e0f277d180e1a2995d6053a5ae280ccd7e90ff2d6f7581bb5c5c3bd134c8d29d13b414be333bbaf5adf4b67a7f1cc480b5895493427cc240fce04a698a68a0ec833600d66a7c70c2a00abf7e61b42ce1d544be40899ae01cbd9c14515bae70643d05f7d052da50b513a441bc12669de6a61e67853b6faddd2cbfcc6494996827639fd112b6df3c1eb9710313d7b84da93dbf6c52d319da2d2b6ec27e36a9a97383ce61a9c9adea93257a908388287d8afabc0f6c7b0c47a835a7bdab4548756816c82eb00b4f1009e7b7ed893373e0f99dff6d193826c39a80fdef3f73dfdaeaf7f993b989573a02e19acfb9c4cbbe304288001b76971d3c8b0258aaaf317963714fc5f1e4008e2eb4a4453599788a55443486282d29e79ab1e0cd27525f03388269212b538d7105b1949b60272cae6dad6b28a0b20391fe774084cbde07bfcf007662cd9e807246609cc4789f9da8a074023492ffd7f77844e2446aeee7fe64d58898c4935310fff7c585e45dca8591d33c95226f591c956cd8a6d3e774fffa4008a639ff572776fc53b7d645e98a50d924386a6fd609", 0x1000}, {&(0x7f0000000140)="eb44a7f7fe94014cfa1eab", 0xb}, {&(0x7f0000001a00)="f349f7046f85535ea7013df6274bc2ccb1eb1f7844c36d7c5629692e15fa4842d2365734a74b14ba6dc555ece64edd4ba98d70641747d8628dc0f3fdb0e5ce798403bb6cde8699c420e8853d1f187f60680c3f4cd9119373c5ea5d65f2b25c6422404115e7d58c75f117c8c8b7262f581d18c1d5d6d00c46c4eca1ee", 0x7c}, {&(0x7f0000001a80)="1669b8508e1c677da65440d3203be49fb91d2cd7863139fff98019d30bb012bc3a2292e4032325c6c93e131c1c233156b49d1812a5a865cf8993ecd3b473a27054d99788f393fab47df4d5b5083a150f6d5c3397b9ac2f679845e8fbc95d294fca8a225325f0acf4b584959ce8b5c197235646bd423ee6d60e87d9faa3e7df98a9f5478a4df8d4d9d4d8bf8d83b88c5ffe18089b53b3dfea90639fd28fd17701d671f3a731dfe2a9139bbeaea59dc2d774029f9aecce107277593fd70bcc226d96bcaca1471d", 0xc6}, {&(0x7f00000002c0)="22f912c6178b12f9e74781f21688f91d9382914eeb", 0x15}, {&(0x7f0000001b80)="daf890c874569b8e2fd456d9723a5b910be0eb865d5c3da23d20c8d418c72f16100aa1f549b6c9a9463105da15ca39461358f7c46df751759fe7f95c7776e68053ede69c51f0694182803549a3cd4f483c7b3c94349c8838180305011db2600a58e34dac1d32bb13be1a1401dd5b3c2235a7bfdb52963337e716010895ac1ac001f793bfe65b9d14036e88adccef27c70a0fee312db07bf52be7623b692808f8bf1abf5cdf", 0xa5}], 0x7, &(0x7f0000001cc0)=[@iv={0x80, 0x117, 0x2, 0x6b, "f97ade58dc8b39b27834f738af5c718421d7c98b57c49eecf81d3871bdcdf8c141e9ee0d6dae18c78fa6dfdcea1b41f7aefcc438d4c8ba75e0d558614b9b92aa46e1d50cf5a2a8f0483f1bf8f2621c17be0958070643df4cf1786ae6a01ed178b99aadd65c90f970d48be1"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1098}], 0x2, 0x20000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000005f00)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002e00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}, 0x5}], 0x1, 0x60000023, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) clock_nanosleep(0x1, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef", 0x11) 3.68285951s ago: executing program 0 (id=812): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) 2.913377521s ago: executing program 4 (id=813): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) 2.894578252s ago: executing program 2 (id=814): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x408c5333, &(0x7f0000000280)) 2.791487405s ago: executing program 1 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x804) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, 0x0, &(0x7f0000000040)=0x4d) sendmsg(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.716273821s ago: executing program 2 (id=816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) getegid() 2.623797599s ago: executing program 3 (id=817): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980)="0eaeb721fd1f06f739457c", 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @address_reply={0xd}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ppoll(&(0x7f0000000000)=[{r4, 0x6004}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$pid(0x3, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r8, r7, 0x0, 0x7ffffffd) close_range(r3, 0xffffffffffffffff, 0x0) 2.474890013s ago: executing program 2 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f000021c000/0x4000)=nil, 0x4000) r2 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f0000000680)=@l2={{0x1, 0x3a, 0x5, 0x3a, 0xe, 0x3a, 0xca, 0x3a, 0x401, 0x3a, 0x1, 0x3a, 0x3, 0x3a, 0x6}, 0x2f, 0x2, 0x20, ':\t'}, 0xb0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x4000000000000b, 0x8, 0x2) setpriority(0x2, 0x0, 0x3ff) 1.652113834s ago: executing program 2 (id=819): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000130494a719fc21c66c57dda3f5f201d0650c16fce0102039a1b11f6f4df078ef137c6d5830109021200010000100009043300001870fd0058d6ba2046704e18f6f0dbcc3f5b9ef3d61c6c8f430d72435e4896da1bbca35dd8"], 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c051}, 0x2004c0c4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x16) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) unlink(&(0x7f0000000580)='./bus\x00') 1.65179755s ago: executing program 3 (id=820): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 1.592900694s ago: executing program 4 (id=821): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket(0x3, 0x2, 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x879a8000) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="c218b8fb4f2711662cda1925942565487e7d348d3cb55586a0b8af4c8b0e15dd9b6a54e2b1946fcebbbd64db1c957a8bc7403cf6729a11fd43529b6d7178bd1bca2c14db39ff5a5cc5653035257088bc4796548672cad06d296711c31da28bd6ee8733d014bdff64c5adb64d1df761b14bf856875d2ccbe1d4579c3a7600ffffff237a5aa929be91720ce0468e265d13f9ce80c2d474cff4fabd20cfa00fdc867ccd24521a769b61fd609b55a3672c221fc7ad9d29bb5a826e9e7fc46139e19be09c2528fdfba998dd047e8115c02807698c6c824a940100000000000000636c8824", 0xe2, r1) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shmdt(0x0) 1.591876369s ago: executing program 1 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000001c0)=""/95, 0x5f, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x101, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pread64(r4, &(0x7f00000012c0)=""/4130, 0x1022, 0x8f) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0x9, 0xffffff99) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) 1.485247869s ago: executing program 2 (id=823): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0xc20, &(0x7f0000002000)={0x0, 0x0, 0x40, 0xffffffff, 0x80001}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x7439806b6184efab, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) read$nci(r5, &(0x7f0000000200)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14002000e888478fd6671af38c0dc219c69d8e7fce3e538c3367404e6316f6948dce28829b059ac9d55d6f5fb020cca3fa3358e26fadac3043e1fdb17f2fd61a8b1c51a1dca41d71d784e9aacfd316e4d5520ef1082bcd0d97bd8434291f6b2fc4ec75c56ccc8bf49380e4ea024839e70952b4c760bfbbb250c328f0ccb557733f6db86481ae6cb1e5fe05023c2aa8042689411d", @ANYRES16, @ANYRESDEC=r6], 0x14}}, 0x4) write$nci(r5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x11, 0x20000000, r4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="2800000000000000000000721900000000000051ea5bb9de7e1f3b936af800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 1.482509088s ago: executing program 0 (id=824): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000001c0)=""/95, 0x5f, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x101, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pread64(r3, &(0x7f00000012c0)=""/4130, 0x1022, 0x8f) 1.001589624s ago: executing program 3 (id=825): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a102a933f4eb88ce1fa73d72494c059496e0a9c694b86214b95ce71449c291ada7710d883c86299743da9b69845ca63c67d06865913fa39467310bced1f996172af00a5a061b300f8ee20b1f6546639c82d4b4e0b073d456ebebe9d5e26bd7fe0b918a68a8892fc1aeeae35733ba881b0465bd28a6b56acaa8ef74ac482f4b78572527d808b2d17026f98ae2a42c2fa6e00de44eafc621ecc46334a9c21eceae3182b232b39da9dce7d2dec839b228aa55774c40919ac1100af707c1378e9f21", 0xc0}], 0x1, 0x8, 0x7, 0x4) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 2 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7f, &(0x7f0000000940)=0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00"/135]}, 0xff) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) r8 = socket$rds(0x15, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000001280)=[&(0x7f0000001000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000040)="8d557fd094c38f0400c33500003a") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="030000e20900000000000000", @ANYRES32=0x0, @ANYBLOB="50610be13922"], 0x20) kernel console output (not intermixed with test programs): 0000000000000 R09: 0000000000000000 [ 157.503516][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.503525][ T7062] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 157.503551][ T7062] [ 157.942434][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 159.795863][ T29] audit: type=1326 audit(1737880004.289:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7070 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75d98cd29 code=0x7fc00000 [ 161.738818][ T7111] random: crng reseeded on system resumption [ 162.006963][ T29] audit: type=1400 audit(1737880005.851:31): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7089 comm="syz.2.328" dest=20004 [ 162.541799][ T5821] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.734835][ T5821] usb 5-1: device descriptor read/64, error -71 [ 163.001749][ T5821] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.161886][ T5821] usb 5-1: device descriptor read/64, error -71 [ 163.268673][ T5912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.279716][ T5821] usb usb5-port1: attempt power cycle [ 163.447571][ T5912] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 163.470164][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.493186][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.526746][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.599532][ T5912] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 163.657057][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.675981][ T5821] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.728656][ T5821] usb 5-1: device descriptor read/8, error -71 [ 164.704943][ T5821] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 164.784495][ T5821] usb 5-1: device descriptor read/8, error -71 [ 164.879723][ T7124] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 164.926125][ T5821] usb usb5-port1: unable to enumerate USB device [ 165.041394][ T7129] fuse: Bad value for 'user_id' [ 165.046584][ T7129] fuse: Bad value for 'user_id' [ 165.377515][ T7129] 9pnet_fd: p9_fd_create_unix (7129): problem connecting socket: ./file0/../file0/file0: -111 [ 165.485318][ T7124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.663689][ T7132] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 165.738269][ T7132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.886227][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 166.090164][ T29] audit: type=1400 audit(1737880010.285:32): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7143 comm="syz.0.344" dest=20000 [ 166.167641][ T29] audit: type=1326 audit(1737880010.360:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.235227][ T29] audit: type=1326 audit(1737880010.388:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.261569][ T7150] vlan2: entered allmulticast mode [ 166.277652][ T7150] geneve1: entered allmulticast mode [ 166.292591][ T7150] geneve1: left allmulticast mode [ 166.305953][ T8] usb 4-1: USB disconnect, device number 8 [ 166.327861][ T29] audit: type=1326 audit(1737880010.388:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.350359][ T29] audit: type=1326 audit(1737880010.388:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.373319][ T29] audit: type=1326 audit(1737880010.397:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.419696][ T29] audit: type=1326 audit(1737880010.397:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.457436][ T29] audit: type=1326 audit(1737880010.397:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.483868][ T29] audit: type=1326 audit(1737880010.397:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f0b1ad8cd29 code=0x7ffc0000 [ 166.540182][ T25] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 166.722304][ T25] usb 2-1: device descriptor read/64, error -71 [ 166.765218][ T7161] FAULT_INJECTION: forcing a failure. [ 166.765218][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 166.802076][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.0.351 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 166.802103][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 166.802122][ T7161] Call Trace: [ 166.802129][ T7161] [ 166.802136][ T7161] dump_stack_lvl+0x241/0x360 [ 166.802169][ T7161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.802193][ T7161] ? __pfx__printk+0x10/0x10 [ 166.802216][ T7161] ? fs_reclaim_acquire+0x93/0x130 [ 166.802241][ T7161] ? __pfx___might_resched+0x10/0x10 [ 166.802262][ T7161] should_fail_ex+0x3b0/0x4e0 [ 166.802285][ T7161] should_failslab+0xac/0x100 [ 166.802305][ T7161] __kmalloc_noprof+0xdd/0x4c0 [ 166.802324][ T7161] ? kstrtouint_from_user+0x128/0x190 [ 166.802343][ T7161] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 166.802371][ T7161] tomoyo_realpath_from_path+0xcf/0x5e0 [ 166.802403][ T7161] tomoyo_path_number_perm+0x236/0x860 [ 166.802419][ T7161] ? __lock_acquire+0x1397/0x2100 [ 166.802439][ T7161] ? tomoyo_path_number_perm+0x206/0x860 [ 166.802460][ T7161] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.802518][ T7161] ? __fget_files+0x2a/0x410 [ 166.802547][ T7161] ? __fget_files+0x2a/0x410 [ 166.802571][ T7161] security_file_ioctl+0xc6/0x2a0 [ 166.802594][ T7161] __se_sys_ioctl+0x46/0x170 [ 166.802620][ T7161] do_syscall_64+0xf3/0x230 [ 166.802640][ T7161] ? clear_bhb_loop+0x35/0x90 [ 166.802669][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.802689][ T7161] RIP: 0033:0x7fe75d98cd29 [ 166.802704][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.802717][ T7161] RSP: 002b:00007fe75e790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.802736][ T7161] RAX: ffffffffffffffda RBX: 00007fe75dba5fa0 RCX: 00007fe75d98cd29 [ 166.802748][ T7161] RDX: 0000000020000200 RSI: 00000000c048aeca RDI: 0000000000000009 [ 166.802759][ T7161] RBP: 00007fe75e790090 R08: 0000000000000000 R09: 0000000000000000 [ 166.802769][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.802779][ T7161] R13: 0000000000000000 R14: 00007fe75dba5fa0 R15: 00007ffe81fbd818 [ 166.802805][ T7161] [ 166.802813][ T7161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.999750][ T25] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 167.085312][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 167.514986][ T25] usb 2-1: device descriptor read/64, error -71 [ 167.635090][ T25] usb usb2-port1: attempt power cycle [ 167.917195][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 169.782337][ T25] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 169.822959][ T25] usb 2-1: device descriptor read/8, error -71 [ 170.160022][ T25] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 170.196830][ T25] usb 2-1: device descriptor read/8, error -71 [ 170.228335][ T5912] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.375864][ T25] usb usb2-port1: unable to enumerate USB device [ 170.412923][ T5912] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.433392][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.442690][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.466975][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.513753][ T5912] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 170.588513][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.915145][ T7215] FAULT_INJECTION: forcing a failure. [ 171.915145][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.969316][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.2.366 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 171.969345][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 171.969356][ T7215] Call Trace: [ 171.969362][ T7215] [ 171.969370][ T7215] dump_stack_lvl+0x241/0x360 [ 171.969402][ T7215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.969425][ T7215] ? __pfx__printk+0x10/0x10 [ 171.969456][ T7215] ? __pfx_lock_release+0x10/0x10 [ 171.969485][ T7215] should_fail_ex+0x3b0/0x4e0 [ 171.969506][ T7215] _copy_from_user+0x2d/0xb0 [ 171.969523][ T7215] __sys_bpf+0x1a4/0x810 [ 171.969543][ T7215] ? __pfx___sys_bpf+0x10/0x10 [ 171.969570][ T7215] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.969593][ T7215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.969615][ T7215] ? do_syscall_64+0x100/0x230 [ 171.969638][ T7215] __x64_sys_bpf+0x7c/0x90 [ 171.969655][ T7215] do_syscall_64+0xf3/0x230 [ 171.969674][ T7215] ? clear_bhb_loop+0x35/0x90 [ 171.969698][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.969718][ T7215] RIP: 0033:0x7f4f8838cd29 [ 171.969733][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.969747][ T7215] RSP: 002b:00007f4f861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.969766][ T7215] RAX: ffffffffffffffda RBX: 00007f4f885a5fa0 RCX: 00007f4f8838cd29 [ 171.969778][ T7215] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005 [ 171.969788][ T7215] RBP: 00007f4f861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.969798][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.969808][ T7215] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 171.969833][ T7215] [ 172.146844][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.152969][ C0] hrtimer: interrupt took 170471065 ns [ 172.252990][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.341118][ T7220] netlink: 'syz.0.365': attribute type 9 has an invalid length. [ 173.200455][ T5912] usb 4-1: USB disconnect, device number 9 [ 174.433143][ T7246] FAULT_INJECTION: forcing a failure. [ 174.433143][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.569108][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.2.375 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 174.569135][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.569145][ T7246] Call Trace: [ 174.569152][ T7246] [ 174.569159][ T7246] dump_stack_lvl+0x241/0x360 [ 174.569190][ T7246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.569214][ T7246] ? __pfx__printk+0x10/0x10 [ 174.569238][ T7246] ? __pfx_lock_release+0x10/0x10 [ 174.569267][ T7246] should_fail_ex+0x3b0/0x4e0 [ 174.569289][ T7246] _copy_from_user+0x2d/0xb0 [ 174.569306][ T7246] __sys_bpf+0x1a4/0x810 [ 174.569326][ T7246] ? __pfx___sys_bpf+0x10/0x10 [ 174.569355][ T7246] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.569378][ T7246] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.569410][ T7246] ? do_syscall_64+0x100/0x230 [ 174.569434][ T7246] __x64_sys_bpf+0x7c/0x90 [ 174.569451][ T7246] do_syscall_64+0xf3/0x230 [ 174.569470][ T7246] ? clear_bhb_loop+0x35/0x90 [ 174.569494][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.569514][ T7246] RIP: 0033:0x7f4f8838cd29 [ 174.569529][ T7246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.569543][ T7246] RSP: 002b:00007f4f861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.569562][ T7246] RAX: ffffffffffffffda RBX: 00007f4f885a5fa0 RCX: 00007f4f8838cd29 [ 174.569574][ T7246] RDX: 0000000000000057 RSI: 0000000020000240 RDI: 000000000000000a [ 174.569585][ T7246] RBP: 00007f4f861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.569595][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.569605][ T7246] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 174.569631][ T7246] [ 175.124205][ T7241] fuse: Bad value for 'user_id' [ 175.129141][ T7241] fuse: Bad value for 'user_id' [ 175.193898][ T7241] 9pnet_fd: p9_fd_create_unix (7241): problem connecting socket: ./file0/../file0/file0: -2 [ 175.452853][ T7260] FAULT_INJECTION: forcing a failure. [ 175.452853][ T7260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.532180][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: syz.0.380 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 175.532207][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 175.532217][ T7260] Call Trace: [ 175.532222][ T7260] [ 175.532229][ T7260] dump_stack_lvl+0x241/0x360 [ 175.532260][ T7260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.532280][ T7260] ? __pfx__printk+0x10/0x10 [ 175.532301][ T7260] ? __pfx_lock_release+0x10/0x10 [ 175.532323][ T7260] should_fail_ex+0x3b0/0x4e0 [ 175.532352][ T7260] _copy_from_user+0x2d/0xb0 [ 175.532368][ T7260] copy_msghdr_from_user+0xae/0x680 [ 175.532390][ T7260] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 175.532402][ T7260] ? __fget_files+0x2a/0x410 [ 175.532422][ T7260] ? __fget_files+0x2a/0x410 [ 175.532445][ T7260] __sys_sendmsg+0x209/0x350 [ 175.532468][ T7260] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.532498][ T7260] ? do_sys_openat2+0x17a/0x1d0 [ 175.532535][ T7260] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.532556][ T7260] ? do_syscall_64+0x100/0x230 [ 175.532574][ T7260] ? do_syscall_64+0xb6/0x230 [ 175.532591][ T7260] do_syscall_64+0xf3/0x230 [ 175.532608][ T7260] ? clear_bhb_loop+0x35/0x90 [ 175.532631][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.532651][ T7260] RIP: 0033:0x7fe75d98cd29 [ 175.532666][ T7260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.532679][ T7260] RSP: 002b:00007fe75e790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.532698][ T7260] RAX: ffffffffffffffda RBX: 00007fe75dba5fa0 RCX: 00007fe75d98cd29 [ 175.532708][ T7260] RDX: 0000000000000804 RSI: 0000000020000540 RDI: 0000000000000007 [ 175.532719][ T7260] RBP: 00007fe75e790090 R08: 0000000000000000 R09: 0000000000000000 [ 175.532728][ T7260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.532736][ T7260] R13: 0000000000000000 R14: 00007fe75dba5fa0 R15: 00007ffe81fbd818 [ 175.532759][ T7260] [ 175.900146][ T5870] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.118630][ T5870] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.200542][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.232053][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.274659][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.349846][ T7268] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 176.371492][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.371893][ T5870] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 176.506061][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.513346][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.526084][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.626272][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.684090][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.744450][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.753768][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.763140][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.773935][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 176.912114][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 177.108932][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.384'. [ 178.765726][ T25] usb 4-1: USB disconnect, device number 10 [ 179.929544][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 179.940187][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 179.962132][ T7295] ceph: No mds server is up or the cluster is laggy [ 182.034096][ T7326] vlan2: entered promiscuous mode [ 182.065715][ T7326] vlan2: entered allmulticast mode [ 182.070892][ T7326] hsr_slave_1: entered allmulticast mode [ 182.933345][ T7331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 183.332754][ T7326] __nla_validate_parse: 2 callbacks suppressed [ 183.332775][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 183.682421][ T7326] hsr_slave_1 (unregistering): left allmulticast mode [ 183.698552][ T119] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.805392][ T912] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 184.087518][ T7326] hsr_slave_1 (unregistering): left promiscuous mode [ 184.287310][ T912] usb 5-1: config 9 has an invalid interface number: 83 but max is 0 [ 184.680361][ T912] usb 5-1: config 9 has no interface number 0 [ 184.689994][ T912] usb 5-1: config 9 interface 83 has no altsetting 0 [ 184.701206][ T912] usb 5-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00 [ 184.711795][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.406'. [ 184.728347][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.738310][ T912] usb 5-1: Product: syz [ 184.742510][ T912] usb 5-1: Manufacturer: syz [ 184.747929][ T912] usb 5-1: SerialNumber: syz [ 184.790700][ T119] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 184.806983][ T119] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.816282][ T119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.846606][ T119] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.861124][ T912] usb-storage 5-1:9.83: USB Mass Storage device detected [ 185.875682][ T119] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 186.408944][ T912] usb 5-1: USB disconnect, device number 13 [ 186.508285][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.581885][ T7369] FAULT_INJECTION: forcing a failure. [ 186.581885][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.600096][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.2.410 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 186.600122][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.600132][ T7369] Call Trace: [ 186.600139][ T7369] [ 186.600146][ T7369] dump_stack_lvl+0x241/0x360 [ 186.600175][ T7369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.600198][ T7369] ? __pfx__printk+0x10/0x10 [ 186.600222][ T7369] ? __pfx_lock_release+0x10/0x10 [ 186.600249][ T7369] should_fail_ex+0x3b0/0x4e0 [ 186.600271][ T7369] _copy_from_user+0x2d/0xb0 [ 186.600286][ T7369] copy_msghdr_from_user+0xae/0x680 [ 186.600310][ T7369] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 186.600326][ T7369] ? __fget_files+0x2a/0x410 [ 186.600348][ T7369] ? __fget_files+0x2a/0x410 [ 186.600374][ T7369] __sys_sendmsg+0x209/0x350 [ 186.600401][ T7369] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.600434][ T7369] ? do_sys_openat2+0x17a/0x1d0 [ 186.600476][ T7369] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.600497][ T7369] ? do_syscall_64+0x100/0x230 [ 186.600519][ T7369] ? do_syscall_64+0xb6/0x230 [ 186.600540][ T7369] do_syscall_64+0xf3/0x230 [ 186.600558][ T7369] ? clear_bhb_loop+0x35/0x90 [ 186.600582][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.600602][ T7369] RIP: 0033:0x7f4f8838cd29 [ 186.600616][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.600629][ T7369] RSP: 002b:00007f4f861f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.600648][ T7369] RAX: ffffffffffffffda RBX: 00007f4f885a5fa0 RCX: 00007f4f8838cd29 [ 186.600659][ T7369] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 186.600670][ T7369] RBP: 00007f4f861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 186.600681][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.600690][ T7369] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 186.600715][ T7369] [ 187.507664][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 187.521429][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 187.534132][ T7389] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.549053][ T7390] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.649787][ T119] usb 2-1: USB disconnect, device number 17 [ 187.765538][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 188.033415][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 188.033433][ T29] audit: type=1326 audit(1737880030.808:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7402 comm="syz.2.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f8838cd29 code=0x0 [ 188.082806][ T7412] block nbd1: Unsupported socket: shutdown callout must be supported. [ 190.466954][ T7435] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 191.201696][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 191.432436][ T8] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 191.448211][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.503290][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.576650][ T7450] fuse: Bad value for 'user_id' [ 191.582481][ T7450] fuse: Bad value for 'user_id' [ 191.716571][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 191.726575][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 191.731879][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.733376][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 191.744096][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 192.005671][ T7450] 9pnet_fd: p9_fd_create_unix (7450): problem connecting socket: ./file0/../file0/file0: -2 [ 192.043640][ T8] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 192.218520][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.934557][ T29] audit: type=1400 audit(1737880035.391:47): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7463 comm="syz.0.441" daddr=::30:0:0:0:1 dest=20003 [ 193.000634][ T29] audit: type=1400 audit(1737880035.391:48): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7463 comm="syz.0.441" dest=20000 [ 193.060336][ T29] audit: type=1400 audit(1737880035.391:49): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7463 comm="syz.0.441" daddr=fc00:: dest=20002 [ 194.181920][ T5870] usb 2-1: USB disconnect, device number 18 [ 195.811331][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 196.226164][ T7504] hsr1: left allmulticast mode [ 196.231294][ T7504] syz_tun: left allmulticast mode [ 196.236385][ T7504] batadv_slave_0: left allmulticast mode [ 196.333962][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 196.450404][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.653880][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.809032][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.819729][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.838081][ T25] usb 1-1: Product: syz [ 196.842294][ T25] usb 1-1: Manufacturer: syz [ 196.846911][ T25] usb 1-1: SerialNumber: syz [ 196.947371][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 196.957842][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 197.741748][ T29] audit: type=1400 audit(1737880039.890:50): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7515 comm="syz.4.456" daddr=::30:0:0:0:1 dest=20003 [ 198.126652][ T25] usb 1-1: 0:2 : does not exist [ 198.179359][ T29] audit: type=1400 audit(1737880039.890:51): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7515 comm="syz.4.456" dest=20000 [ 198.195488][ T29] audit: type=1400 audit(1737880039.890:52): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7515 comm="syz.4.456" daddr=fc00:: dest=20002 [ 198.248850][ T7525] netlink: 'syz.0.446': attribute type 32 has an invalid length. [ 198.419467][ T5900] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.601387][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 198.659919][ T5900] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.673720][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.680834][ T5900] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 198.690897][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.702271][ T5900] usb 3-1: config 0 descriptor?? [ 198.846725][ T7543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.165953][ T25] usb 1-1: USB disconnect, device number 8 [ 199.314564][ T8] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 199.492094][ T5900] logitech-djreceiver 0003:046D:C517.000C: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input0 [ 199.511765][ T8] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 199.519976][ T8] usb 4-1: config 0 has no interface number 0 [ 199.547920][ T8] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 199.569850][ T5900] usb 3-1: USB disconnect, device number 8 [ 199.589681][ T8] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 199.631756][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 199.644195][ T8] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 199.656326][ T8] usb 4-1: Product: syz [ 199.662158][ T8] usb 4-1: Manufacturer: syz [ 199.667812][ T8] usb 4-1: SerialNumber: syz [ 199.686327][ T8] usb 4-1: config 0 descriptor?? [ 199.695579][ T8] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 199.711971][ T8] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 199.722467][ T8] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 199.739901][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 199.750677][ T8] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 199.766710][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 199.776884][ T8] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 199.795589][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 199.809711][ T8] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 199.828007][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 199.967486][ T8] usb 4-1: USB disconnect, device number 11 [ 200.091342][ T8] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 200.123728][ T8] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 200.675861][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.682216][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.845833][ T8] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 200.905216][ T8] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 200.943368][ T8] keyspan 4-1:0.107: device disconnected [ 201.594724][ T7565] nbd0: detected capacity change from 0 to 12 [ 201.616173][ T5870] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 201.875232][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 202.022226][ T5834] block nbd0: Send control failed (result -89) [ 202.033503][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.050885][ T5834] block nbd0: Request send failed, requeueing [ 202.054460][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.110408][ T5825] block nbd0: Receive control failed (result -32) [ 202.110998][ T58] block nbd0: Dead connection, failed to find a fallback [ 202.127126][ T58] block nbd0: shutting down sockets [ 202.134257][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.143921][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.154124][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.164535][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.174917][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.185445][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.194705][ T5870] usb 5-1: Product: syz [ 202.198963][ T5870] usb 5-1: Manufacturer: syz [ 202.209661][ T5870] usb 5-1: SerialNumber: syz [ 202.224299][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.233784][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.248156][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.265981][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.298436][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.321625][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.333910][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.390501][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.433442][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.470572][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.520552][ T7584] netlink: 3 bytes leftover after parsing attributes in process `syz.3.473'. [ 202.524614][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.549509][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.559515][ T5834] ldm_validate_partition_table(): Disk read failed. [ 202.567155][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.576821][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.588108][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.609866][ T7584] batadv1: entered promiscuous mode [ 202.609891][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 202.627071][ T5834] Dev nbd0: unable to read RDB block 0 [ 202.632797][ T7584] batadv1: entered allmulticast mode [ 202.649833][ T5834] nbd0: unable to read partition table [ 202.702964][ T5834] nbd0: partition table beyond EOD, truncated [ 202.795979][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.835356][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.852172][ T5834] ldm_validate_partition_table(): Disk read failed. [ 202.916171][ T5834] Dev nbd0: unable to read RDB block 0 [ 202.942368][ T5870] usb 5-1: skipping empty audio interface (v1) [ 202.969839][ T5834] nbd0: unable to read partition table [ 203.039476][ T5870] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 203.048667][ T5834] nbd0: partition table beyond EOD, truncated [ 203.125444][ T5834] ldm_validate_partition_table(): Disk read failed. [ 203.175828][ T5834] Dev nbd0: unable to read RDB block 0 [ 203.231442][ T5834] nbd0: unable to read partition table [ 203.240129][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.280211][ T5834] nbd0: partition table beyond EOD, truncated [ 203.636418][ T5834] ldm_validate_partition_table(): Disk read failed. [ 203.678466][ T912] usb 5-1: USB disconnect, device number 14 [ 203.690622][ T5834] Dev nbd0: unable to read RDB block 0 [ 203.691065][ T7593] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 203.696442][ T5834] nbd0: unable to read partition table [ 203.745393][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 203.751236][ T7594] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 203.763664][ T5834] nbd0: partition table beyond EOD, truncated [ 203.801667][ T7593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 203.806902][ T7594] netlink: 3 bytes leftover after parsing attributes in process `syz.3.477'. [ 203.983870][ T7594] batadv1: entered promiscuous mode [ 204.007881][ T7594] batadv1: entered allmulticast mode [ 204.427522][ T7604] syz_tun: entered promiscuous mode [ 204.439328][ T7604] batadv_slave_0: entered promiscuous mode [ 204.456775][ T7604] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 204.486438][ T7604] Cannot create hsr debugfs directory [ 204.497439][ T7604] hsr1: entered allmulticast mode [ 204.518802][ T7604] syz_tun: entered allmulticast mode [ 204.534522][ T7604] batadv_slave_0: entered allmulticast mode [ 204.620038][ T912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 204.728085][ T29] audit: type=1400 audit(1737880046.429:53): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7611 comm="syz.2.484" daddr=2001::1 dest=20003 [ 204.782621][ T912] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 204.908903][ T912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.824743][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.829897][ T7619] fuse: Bad value for 'user_id' [ 205.837994][ T7619] fuse: Bad value for 'user_id' [ 206.157072][ T912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.234216][ T7619] 9pnet_fd: p9_fd_create_unix (7619): problem connecting socket: ./file0/../file0/file0: -2 [ 206.315772][ T912] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 206.509582][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.069002][ T5912] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 207.213375][ T7638] capability: warning: `syz.2.493' uses deprecated v2 capabilities in a way that may be insecure [ 207.613701][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 207.699784][ T119] usb 1-1: USB disconnect, device number 9 [ 207.708537][ T5912] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 207.747110][ T5912] usb 4-1: config 0 has no interface number 0 [ 207.761734][ T5912] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 207.793344][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.815069][ T5912] usb 4-1: config 0 descriptor?? [ 207.826435][ T5912] ftdi_sio 4-1:0.130: FTDI USB Serial Device converter detected [ 207.847193][ T5912] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 208.160806][ T29] audit: type=1400 audit(1737880049.609:54): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7644 comm="syz.1.490" daddr=::30:0:0:0:1 dest=20003 [ 208.343151][ T29] audit: type=1400 audit(1737880049.609:55): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7644 comm="syz.1.490" dest=20000 [ 208.509434][ T29] audit: type=1400 audit(1737880049.609:56): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7644 comm="syz.1.490" daddr=fc00:: dest=20002 [ 209.559554][ T912] usb 4-1: USB disconnect, device number 12 [ 209.575418][ T912] ftdi_sio 4-1:0.130: device disconnected [ 209.804231][ T29] audit: type=1400 audit(1737880051.171:57): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7663 comm="syz.1.504" [ 209.853989][ T7664] autofs: Unknown parameter '' [ 210.136501][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 210.375190][ T5870] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 210.459515][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.469475][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.484212][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.519509][ T5870] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 210.583200][ T5834] udevd[5834]: failed to send result of seq 12500 to main daemon: Connection refused [ 211.225108][ T7693] erofs (device nullb0): cannot find valid erofs superblock [ 212.882332][ T7699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.889243][ T7699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.896810][ T7699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.902982][ T7699] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.917075][ T7699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.924175][ T7699] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.936889][ T7699] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.943162][ T7699] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 213.107698][ T5821] usb 5-1: USB disconnect, device number 15 [ 213.260985][ T119] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.396986][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.441667][ T119] usb 1-1: Using ep0 maxpacket: 8 [ 213.470820][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.514959][ T119] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.546720][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.585046][ T119] usb 1-1: config 0 descriptor?? [ 213.633120][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.680781][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.713746][ T8] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 213.732904][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.750063][ T8] usb 3-1: config 0 descriptor?? [ 213.876230][ T119] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.049129][ T5821] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.120117][ T9] usb 1-1: USB disconnect, device number 10 [ 214.200292][ T119] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 214.208102][ T8] sony 0003:1430:474C.000D: hidraw0: USB HID v0.20 Device [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 214.219417][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 214.226209][ T8] sony 0003:1430:474C.000D: failed to claim input [ 214.234630][ T5821] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 214.243137][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.255551][ T5821] usb 5-1: config 0 has no interface number 0 [ 214.261693][ T5821] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 214.273205][ T5821] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 214.286513][ T5821] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 214.295659][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.307132][ T5821] usb 5-1: config 0 descriptor?? [ 214.333241][ T5821] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 214.391191][ T119] usb 2-1: Using ep0 maxpacket: 16 [ 214.398142][ T119] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 214.410255][ T119] usb 2-1: config 0 has no interface number 0 [ 214.419077][ T119] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 214.551008][ T5900] usb 5-1: USB disconnect, device number 16 [ 214.585144][ T6295] usb 5-1: Failed to submit usb control message: -71 [ 214.596842][ T6295] usb 5-1: unable to send the bmi data to the device: -71 [ 214.598295][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.620582][ T119] usb 2-1: Product: syz [ 214.625343][ T119] usb 2-1: Manufacturer: syz [ 214.630018][ T119] usb 2-1: SerialNumber: syz [ 214.644249][ T6295] usb 5-1: unable to get target info from device [ 214.652355][ T119] usb 2-1: config 0 descriptor?? [ 214.668417][ T6295] usb 5-1: could not get target info (-71) [ 214.680432][ T6295] usb 5-1: could not probe fw (-71) [ 214.761638][ T119] i2c-tiny-usb 2-1:0.39: version 70.6d found at bus 002 address 019 [ 215.065061][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 215.071505][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 215.085783][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 215.162833][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 215.245033][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 215.268929][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 215.277957][ T7743] netlink: 'syz.0.526': attribute type 14 has an invalid length. [ 215.302728][ T7743] netlink: 'syz.0.526': attribute type 13 has an invalid length. [ 215.394376][ T119] (null): failure reading functionality [ 215.535805][ T119] i2c i2c-1: failure reading functionality [ 215.586690][ T119] i2c i2c-1: connected i2c-tiny-usb device [ 215.599769][ T119] usb 2-1: USB disconnect, device number 19 [ 216.387986][ T912] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.391157][ T29] audit: type=1326 audit(1737880057.336:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 216.637933][ T9] usb 3-1: USB disconnect, device number 9 [ 216.648675][ T29] audit: type=1326 audit(1737880057.336:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 216.678640][ T29] audit: type=1326 audit(1737880057.336:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 216.822669][ T29] audit: type=1326 audit(1737880057.336:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 216.823077][ T7756] fuse: Bad value for 'user_id' [ 216.855105][ T7756] fuse: Bad value for 'user_id' [ 216.903706][ T912] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.958908][ T29] audit: type=1326 audit(1737880057.336:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 216.964176][ T912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.097931][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.168263][ T912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.170813][ T29] audit: type=1326 audit(1737880057.336:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 217.237013][ T29] audit: type=1326 audit(1737880057.336:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 217.246903][ T912] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 217.320752][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 217.327211][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 217.334651][ T29] audit: type=1326 audit(1737880057.336:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 217.378703][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 217.392929][ T29] audit: type=1326 audit(1737880057.336:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7746 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 218.069075][ T7745] 9pnet_fd: p9_fd_create_unix (7745): problem connecting socket: ./file0/../file0/file0: -2 [ 218.475023][ T912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.646169][ T912] usb 3-1: Using ep0 maxpacket: 8 [ 218.659455][ T912] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 218.672846][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.682908][ T912] usb 3-1: Product: syz [ 218.687444][ T912] usb 3-1: Manufacturer: syz [ 218.693014][ T912] usb 3-1: SerialNumber: syz [ 218.700358][ T912] usb 3-1: config 0 descriptor?? [ 218.708601][ T912] gspca_main: sq930x-2.14.0 probing 2770:930c [ 218.759505][ T29] audit: type=1400 audit(1737880059.553:67): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7790 comm="syz.3.537" dest=20000 [ 218.944358][ T7795] syz_tun (unregistering): left promiscuous mode [ 219.221665][ T9] usb 1-1: USB disconnect, device number 11 [ 219.234356][ T5900] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 219.424870][ T7808] kvm: emulating exchange as write [ 219.432444][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 219.454421][ T5900] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 219.472513][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.489474][ T5900] usb 2-1: Product: syz [ 219.499366][ T5900] usb 2-1: Manufacturer: syz [ 219.507858][ T5900] usb 2-1: SerialNumber: syz [ 219.518274][ T5900] usb 2-1: config 0 descriptor?? [ 219.651202][ T912] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 219.657165][ T912] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 219.676339][ T912] usb 3-1: USB disconnect, device number 10 [ 220.014822][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 220.484458][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 220.579700][ T5900] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 220.623683][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.636456][ T9] usb 5-1: Product: syz [ 220.640666][ T9] usb 5-1: Manufacturer: syz [ 220.666994][ T9] usb 5-1: SerialNumber: syz [ 220.691771][ T9] usb 5-1: config 0 descriptor?? [ 220.995043][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 221.372757][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 221.423238][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.457841][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.474218][ T5900] usb write operation failed. (-71) [ 221.516966][ T5900] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.538890][ T5900] dvbdev: DVB: registering new adapter (Terratec H7) [ 221.558132][ T5900] usb 2-1: media controller created [ 221.573302][ T5900] usb read operation failed. (-71) [ 221.583336][ T5900] usb write operation failed. (-71) [ 221.601029][ T5900] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 221.619323][ T5900] usb 2-1: USB disconnect, device number 20 [ 221.917817][ T912] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 222.088442][ T912] usb 1-1: Using ep0 maxpacket: 16 [ 222.095580][ T912] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.106894][ T912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.113655][ T912] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 222.125927][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.137269][ T912] usb 1-1: config 0 descriptor?? [ 222.323874][ T5900] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 222.488998][ T5900] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 222.500243][ T5900] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.510635][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.524056][ T5900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.542167][ T5900] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 222.576526][ T912] usbhid 1-1:0.0: can't add hid device: -71 [ 222.583492][ T912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 222.593956][ T912] usb 1-1: USB disconnect, device number 12 [ 222.689126][ T7848] syz_tun: entered promiscuous mode [ 222.695552][ T7848] syz_tun: left promiscuous mode [ 222.730140][ T5873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 222.881239][ T9] usb 5-1: USB disconnect, device number 17 [ 222.956081][ T7851] FAULT_INJECTION: forcing a failure. [ 222.956081][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.970881][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.2.557 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 222.970905][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 222.970915][ T7851] Call Trace: [ 222.970921][ T7851] [ 222.970929][ T7851] dump_stack_lvl+0x241/0x360 [ 222.970960][ T7851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.970982][ T7851] ? __pfx__printk+0x10/0x10 [ 222.971006][ T7851] ? __pfx_lock_release+0x10/0x10 [ 222.971032][ T7851] should_fail_ex+0x3b0/0x4e0 [ 222.971053][ T7851] _copy_from_user+0x2d/0xb0 [ 222.971069][ T7851] sctp_setsockopt+0xcc/0x11c0 [ 222.971091][ T7851] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.971110][ T7851] do_sock_setsockopt+0x3af/0x720 [ 222.971135][ T7851] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 222.971160][ T7851] ? __fget_files+0x395/0x410 [ 222.971178][ T7851] ? __fget_files+0x2a/0x410 [ 222.971203][ T7851] __x64_sys_setsockopt+0x1ee/0x280 [ 222.971229][ T7851] do_syscall_64+0xf3/0x230 [ 222.971250][ T7851] ? clear_bhb_loop+0x35/0x90 [ 222.971273][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.971292][ T7851] RIP: 0033:0x7f4f8838cd29 [ 222.971307][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.971321][ T7851] RSP: 002b:00007f4f861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.971339][ T7851] RAX: ffffffffffffffda RBX: 00007f4f885a5fa0 RCX: 00007f4f8838cd29 [ 222.971351][ T7851] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 222.971361][ T7851] RBP: 00007f4f861f6090 R08: 0000000000000008 R09: 0000000000000000 [ 222.971371][ T7851] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 222.971381][ T7851] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 222.971405][ T7851] [ 223.197201][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 223.204990][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.215970][ T5873] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.225285][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.236809][ T5873] usb 4-1: config 0 descriptor?? [ 223.596073][ T5821] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 223.971811][ T5873] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.987858][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 223.997218][ T5821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.010917][ T5821] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.020373][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.029935][ T5821] usb 3-1: Product: syz [ 224.034777][ T5821] usb 3-1: Manufacturer: syz [ 224.111300][ T5821] usb 3-1: SerialNumber: syz [ 224.111921][ T7859] blk_print_req_error: 60 callbacks suppressed [ 224.111938][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.132317][ T7859] buffer_io_error: 60 callbacks suppressed [ 224.132334][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.136100][ T5821] usb 3-1: config 0 descriptor?? [ 224.138984][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.171236][ T7855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.189054][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.213903][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.303493][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.344981][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.490973][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.559069][ T5821] usb 3-1: USB disconnect, device number 11 [ 224.591858][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.639608][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.731407][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.808131][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.836259][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.850494][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.863056][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.873751][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.886978][ T7859] ldm_validate_partition_table(): Disk read failed. [ 224.894031][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.910258][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.924364][ T7859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.962085][ T7859] Buffer I/O error on dev nbd0, logical block 0, async page read [ 224.971278][ T7859] Dev nbd0: unable to read RDB block 0 [ 224.979107][ T7859] nbd0: unable to read partition table [ 224.979274][ T7859] nbd0: partition table beyond EOD, truncated [ 225.252948][ T5821] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 225.328904][ T119] usb 2-1: USB disconnect, device number 21 [ 225.488261][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 225.496071][ T5821] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.507616][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.514819][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 225.524372][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.533902][ T5821] usb 5-1: config 0 descriptor?? [ 225.689237][ T7868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.690524][ T5873] usb 4-1: USB disconnect, device number 13 [ 225.695752][ T7868] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 225.711415][ T7868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.717392][ T7868] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 225.725698][ T7868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.731628][ T7868] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 225.744144][ T7868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.750165][ T7868] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 225.759048][ T7868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.764993][ T7868] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 225.851601][ T119] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 226.006937][ T5821] logitech-djreceiver 0003:046D:C517.000E: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.4-1/input0 [ 226.029367][ T119] usb 2-1: Using ep0 maxpacket: 8 [ 226.051750][ T119] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.069112][ T7889] FAULT_INJECTION: forcing a failure. [ 226.069112][ T7889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.076307][ T119] usb 2-1: config 0 has no interface number 0 [ 226.082592][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.2.570 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 226.082617][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.082627][ T7889] Call Trace: [ 226.082634][ T7889] [ 226.082641][ T7889] dump_stack_lvl+0x241/0x360 [ 226.082672][ T7889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.082695][ T7889] ? __pfx__printk+0x10/0x10 [ 226.082718][ T7889] ? __pfx_lock_release+0x10/0x10 [ 226.082744][ T7889] should_fail_ex+0x3b0/0x4e0 [ 226.082766][ T7889] _copy_from_user+0x2d/0xb0 [ 226.082782][ T7889] move_addr_to_kernel+0x82/0x150 [ 226.082801][ T7889] copy_msghdr_from_user+0x43e/0x680 [ 226.082823][ T7889] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 226.082838][ T7889] ? __fget_files+0x2a/0x410 [ 226.082859][ T7889] ? __fget_files+0x2a/0x410 [ 226.082885][ T7889] __sys_sendmmsg+0x32b/0x720 [ 226.082917][ T7889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.082948][ T7889] ? __pfx_lock_release+0x10/0x10 [ 226.082965][ T7889] ? kstrtouint_from_user+0x128/0x190 [ 226.083004][ T7889] ? ksys_write+0x22a/0x2b0 [ 226.083027][ T7889] ? __pfx_lock_release+0x10/0x10 [ 226.083051][ T7889] ? sb_end_write+0xe9/0x1c0 [ 226.083070][ T7889] ? vfs_write+0x7fa/0xd10 [ 226.083093][ T7889] ? __mutex_unlock_slowpath+0x227/0x800 [ 226.083136][ T7889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.083158][ T7889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.083178][ T7889] ? do_syscall_64+0x100/0x230 [ 226.083201][ T7889] __x64_sys_sendmmsg+0xa0/0xb0 [ 226.083223][ T7889] do_syscall_64+0xf3/0x230 [ 226.083241][ T7889] ? clear_bhb_loop+0x35/0x90 [ 226.083263][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.083283][ T7889] RIP: 0033:0x7f4f8838cd29 [ 226.083297][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.083310][ T7889] RSP: 002b:00007f4f861f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.083328][ T7889] RAX: ffffffffffffffda RBX: 00007f4f885a5fa0 RCX: 00007f4f8838cd29 [ 226.083349][ T7889] RDX: 0000000000000001 RSI: 0000000020004900 RDI: 0000000000000003 [ 226.083359][ T7889] RBP: 00007f4f861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.083369][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.083379][ T7889] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 226.083403][ T7889] [ 226.442574][ T7893] fuse: Bad value for 'user_id' [ 226.447750][ T7893] fuse: Bad value for 'user_id' [ 226.483903][ T5821] usb 5-1: USB disconnect, device number 18 [ 226.576245][ T7893] 9pnet_fd: p9_fd_create_unix (7893): problem connecting socket: ./file0/../file0/file0: -2 [ 226.868769][ T119] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 226.885492][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.894086][ T119] usb 2-1: Product: syz [ 226.899487][ T119] usb 2-1: Manufacturer: syz [ 226.904194][ T119] usb 2-1: SerialNumber: syz [ 226.911622][ T119] usb 2-1: config 0 descriptor?? [ 226.922707][ T119] usb 2-1: selecting invalid altsetting 1 [ 226.930475][ T119] dvb_ttusb_budget: ttusb_init_controller: error [ 226.956051][ T119] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 227.032721][ T119] DVB: Unable to find symbol stv0299_attach() [ 227.085036][ T119] DVB: Unable to find symbol tda8083_attach() [ 227.098465][ T119] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 227.262828][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 227.289027][ T7884] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 227.353923][ T5900] usb 2-1: USB disconnect, device number 22 [ 227.824999][ T7912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.873822][ T8] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 227.902219][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.921772][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.950226][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.986323][ T8] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 228.909226][ T5900] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 229.005395][ T912] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 229.112227][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 229.121294][ T5900] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.143652][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.152016][ T912] usb 5-1: device descriptor read/64, error -71 [ 229.165203][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 229.186090][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.208096][ T5900] usb 2-1: config 0 descriptor?? [ 229.462277][ T912] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.636545][ T5873] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.658596][ T912] usb 5-1: device descriptor read/64, error -71 [ 229.698738][ T5900] usbhid 2-1:0.0: can't add hid device: -71 [ 229.706442][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 229.751529][ T5900] usb 2-1: USB disconnect, device number 23 [ 229.786834][ T912] usb usb5-port1: attempt power cycle [ 229.850498][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 229.916373][ T5873] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.942467][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.967332][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 229.980811][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.991157][ T5873] usb 4-1: config 0 descriptor?? [ 230.195043][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 230.195061][ T29] audit: type=1400 audit(1737880070.253:70): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=7945 comm="syz.2.589" daddr=::ffff:127.0.0.1 [ 230.202733][ T912] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 230.264794][ T912] usb 5-1: device descriptor read/8, error -71 [ 230.319375][ T8] usb 1-1: USB disconnect, device number 13 [ 230.482797][ T5873] logitech-djreceiver 0003:046D:C517.000F: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input0 [ 230.534124][ T912] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 230.598438][ T912] usb 5-1: device descriptor read/8, error -71 [ 230.842525][ T119] usb 4-1: USB disconnect, device number 14 [ 230.880199][ T7955] 9pnet_fd: Insufficient options for proto=fd [ 231.352426][ T5900] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 231.453871][ T912] usb usb5-port1: unable to enumerate USB device [ 231.785246][ T5900] usb 3-1: Invalid ep0 maxpacket: 16 [ 232.586764][ T29] audit: type=1326 audit(1737880072.414:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7966 comm="syz.3.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x7fc00000 [ 232.715469][ T5900] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 232.918374][ T5900] usb 3-1: Invalid ep0 maxpacket: 16 [ 232.944410][ T5900] usb usb3-port1: attempt power cycle [ 233.378504][ T5900] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 233.524883][ T5900] usb 3-1: device descriptor read/8, error -71 [ 233.612952][ T912] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.571025][ T912] usb 1-1: Using ep0 maxpacket: 8 [ 234.579136][ T912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 234.593761][ T912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.616725][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.682184][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.726283][ T912] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 234.735480][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.758689][ T912] usb 1-1: Product: syz [ 234.767747][ T912] usb 1-1: Manufacturer: syz [ 234.772402][ T912] usb 1-1: SerialNumber: syz [ 234.793878][ T912] usb 1-1: config 0 descriptor?? [ 234.817753][ T7986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.174567][ T912] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 235.225399][ T912] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 235.875161][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.890053][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 235.914749][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 235.929472][ T5900] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 235.974608][ T5900] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 236.009523][ T5900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.046155][ T5900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.243402][ T5900] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.243598][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 236.257072][ T5900] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.264545][ T8018] fuse: Bad value for 'user_id' [ 236.271307][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.283972][ T8018] fuse: Bad value for 'user_id' [ 236.930327][ T29] audit: type=1326 audit(1737880076.558:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1ad8cd29 code=0x7fc00000 [ 236.972889][ T8] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 237.053243][ T8023] 9pnet_fd: p9_fd_create_unix (8023): problem connecting socket: ./file0/../file0/file0: -2 [ 237.080865][ T8] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 237.155439][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 237.458259][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.458435][ T5900] usb 3-1: GET_CAPABILITIES returned 0 [ 237.486415][ T5900] usbtmc 3-1:16.0: can't read capabilities [ 237.599953][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.692213][ T119] usb 3-1: USB disconnect, device number 15 [ 237.715999][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.753937][ T8] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 237.775881][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.797894][ T8] usb 4-1: config 0 descriptor?? [ 237.805931][ C1] powermate: config urb returned -71 [ 237.811564][ C1] powermate: config urb returned -71 [ 237.822542][ T5821] usb 1-1: USB disconnect, device number 14 [ 237.822560][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 237.873368][ T29] audit: type=1400 audit(1737880077.437:73): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8030 comm="syz.4.611" dest=20000 [ 238.138917][ T8] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.002805][ T8] usb 4-1: USB disconnect, device number 15 [ 239.019974][ T8] usblp0: removed [ 239.907066][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 239.974167][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.111119][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.291746][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.325417][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.371764][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.409749][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.438598][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.550016][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.566339][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.575293][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.582737][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.598135][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.606890][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.615149][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.691721][ T8060] fuse: Bad value for 'user_id' [ 240.696672][ T8060] fuse: Bad value for 'user_id' [ 240.806159][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.848967][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 240.856603][ T5821] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 241.020246][ T8062] 9pnet_fd: p9_fd_create_unix (8062): problem connecting socket: ./file0/../file0/file0: -2 [ 242.096759][ T5900] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 242.116947][ T5821] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 242.283156][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 242.301398][ T5900] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.313738][ T912] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 242.321802][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.343871][ T5900] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 242.375414][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.434453][ T5900] usb 3-1: config 0 descriptor?? [ 242.475645][ T912] usb 4-1: device descriptor read/64, error -71 [ 242.892922][ T912] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 242.967387][ T5900] usbhid 3-1:0.0: can't add hid device: -71 [ 242.986815][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 242.997593][ T5900] usb 3-1: USB disconnect, device number 16 [ 243.128149][ T912] usb 4-1: device descriptor read/64, error -71 [ 243.257422][ T912] usb usb4-port1: attempt power cycle [ 243.273914][ C0] Illegal XDP return value 16128 on prog (id 167) dev bond_slave_0, expect packet loss! [ 243.352207][ T5821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 244.255478][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 244.274460][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.301487][ T8079] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 244.378460][ T912] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 244.400059][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.463064][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.533529][ T8081] fuse: Bad value for 'user_id' [ 244.538742][ T8081] fuse: Bad value for 'user_id' [ 244.598940][ T912] usb 4-1: device descriptor read/8, error -71 [ 244.627283][ T5821] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 244.641768][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.711690][ T5821] usb 5-1: config 0 descriptor?? [ 245.046840][ T8083] 9pnet_fd: p9_fd_create_unix (8083): problem connecting socket: ./file0/../file0/file0: -2 [ 245.541900][ T5821] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 245.554011][ T5821] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 245.578550][ T5821] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 245.603458][ T5821] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 245.629810][ T5821] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 245.658101][ T5821] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 245.732208][ T5821] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 245.763969][ T8068] random: crng reseeded on system resumption [ 245.801251][ T5821] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 246.161203][ T8108] fuse: Bad value for 'fd' [ 246.265430][ T8108] 9pnet_fd: p9_fd_create_unix (8108): problem connecting socket: ./file0/../file0/file0: -2 [ 246.738178][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.755909][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.845964][ T119] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 246.862066][ T8] usb 5-1: USB disconnect, device number 23 [ 246.890372][ T119] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.916140][ T119] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.938236][ T119] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 247.020402][ T5821] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 247.200770][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 247.207875][ T5821] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.220810][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.234697][ T5821] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 247.244508][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.257175][ T5821] usb 2-1: config 0 descriptor?? [ 247.425442][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 247.671618][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 247.780420][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.032630][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 248.238775][ T5821] logitech-djreceiver 0003:046D:C517.0012: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0 [ 248.259072][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.300778][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 248.334031][ T8] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 248.348007][ T5821] usb 2-1: USB disconnect, device number 24 [ 248.383317][ T8] usb 4-1: Product: syz [ 248.542104][ T8] usb 4-1: Manufacturer: syz [ 248.627358][ T8139] fuse: Bad value for 'user_id' [ 248.632673][ T8139] fuse: Bad value for 'user_id' [ 248.654761][ T8] usb 4-1: SerialNumber: syz [ 248.725090][ T8139] 9pnet_fd: p9_fd_create_unix (8139): problem connecting socket: ./file0/../file0/file0: -2 [ 248.922169][ T8122] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.934382][ T8] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 248.983464][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 249.097233][ T8148] netlink: 'syz.0.644': attribute type 6 has an invalid length. [ 249.319805][ T912] usb 4-1: USB disconnect, device number 20 [ 249.381133][ T912] appletouch 4-1:1.0: input: appletouch disconnected [ 249.385469][ T8164] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 249.436127][ T8169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.652'. [ 249.445149][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 249.617014][ T5821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 249.664772][ T5873] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 249.817736][ T8176] fuse: Bad value for 'user_id' [ 249.823928][ T8176] fuse: Bad value for 'user_id' [ 249.860959][ T8176] 9pnet_fd: p9_fd_create_unix (8176): problem connecting socket: ./file0/../file0/file0: -2 [ 249.891948][ T5873] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 249.915355][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 249.920520][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.958890][ T5821] usb 5-1: config 129 has an invalid interface number: 23 but max is 0 [ 249.984649][ T5873] usb 2-1: config 0 descriptor?? [ 250.113238][ T5821] usb 5-1: config 129 has no interface number 0 [ 250.161966][ T5821] usb 5-1: config 129 interface 23 has no altsetting 0 [ 250.197196][ T5821] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=d5.ed [ 250.255060][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.822556][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 250.840683][ T5821] usb 5-1: Product: syz [ 250.848881][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 250.867396][ T5821] usb 5-1: Manufacturer: syz [ 250.872718][ T5821] usb 5-1: SerialNumber: syz [ 250.884474][ T5873] usb 2-1: USB disconnect, device number 25 [ 251.122132][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.649'. [ 251.134099][ T8189] loop6: detected capacity change from 0 to 64 [ 251.150488][ C1] blk_print_req_error: 5 callbacks suppressed [ 251.150510][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.165827][ C1] buffer_io_error: 5 callbacks suppressed [ 251.165842][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.166397][ T5821] flexcop_usb: set interface failed. [ 251.172541][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.194435][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.219992][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.229240][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.248927][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.258122][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.283715][ T5821] b2c2_flexcop_usb 5-1:129.23: probe with driver b2c2_flexcop_usb failed with error -22 [ 251.343097][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.352474][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.381760][ T5821] usb 5-1: USB disconnect, device number 24 [ 251.542943][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.552284][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.563269][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.572443][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.595493][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.604697][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.618939][ T8189] ldm_validate_partition_table(): Disk read failed. [ 251.814917][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.824158][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.835605][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.844878][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 251.853416][ T8189] Dev loop6: unable to read RDB block 0 [ 251.860814][ T8189] loop6: unable to read partition table [ 251.872893][ T8189] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 251.897307][ T8191] ldm_validate_partition_table(): Disk read failed. [ 251.909547][ T8191] Dev loop6: unable to read RDB block 0 [ 251.916998][ T8191] loop6: unable to read partition table [ 251.923048][ T8191] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 252.040571][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.059754][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.102351][ T8204] FAULT_INJECTION: forcing a failure. [ 252.102351][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 252.115298][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: syz.3.665 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 252.115319][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.115329][ T8204] Call Trace: [ 252.115335][ T8204] [ 252.115342][ T8204] dump_stack_lvl+0x241/0x360 [ 252.115373][ T8204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.115396][ T8204] ? __pfx__printk+0x10/0x10 [ 252.115417][ T8204] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 252.115439][ T8204] ? __pfx___might_resched+0x10/0x10 [ 252.115461][ T8204] should_fail_ex+0x3b0/0x4e0 [ 252.115483][ T8204] should_failslab+0xac/0x100 [ 252.115503][ T8204] kmem_cache_alloc_node_noprof+0x77/0x380 [ 252.115522][ T8204] ? __alloc_skb+0x1c3/0x440 [ 252.115546][ T8204] __alloc_skb+0x1c3/0x440 [ 252.115571][ T8204] ? __pfx___alloc_skb+0x10/0x10 [ 252.115591][ T8204] ? netlink_autobind+0xd6/0x2f0 [ 252.115611][ T8204] ? netlink_autobind+0x2b0/0x2f0 [ 252.115635][ T8204] netlink_sendmsg+0x638/0xcb0 [ 252.115666][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.115698][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.115716][ T8204] __sock_sendmsg+0x221/0x270 [ 252.115736][ T8204] ____sys_sendmsg+0x52a/0x7e0 [ 252.115765][ T8204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.115784][ T8204] ? __fget_files+0x2a/0x410 [ 252.115803][ T8204] ? __fget_files+0x2a/0x410 [ 252.115827][ T8204] __sys_sendmsg+0x269/0x350 [ 252.115907][ T8204] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.115939][ T8204] ? do_sys_openat2+0x17a/0x1d0 [ 252.115980][ T8204] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.116002][ T8204] ? do_syscall_64+0x100/0x230 [ 252.116024][ T8204] ? do_syscall_64+0xb6/0x230 [ 252.116045][ T8204] do_syscall_64+0xf3/0x230 [ 252.116063][ T8204] ? clear_bhb_loop+0x35/0x90 [ 252.116086][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.116106][ T8204] RIP: 0033:0x7f683af8cd29 [ 252.116121][ T8204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.116135][ T8204] RSP: 002b:00007f683bda7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.116153][ T8204] RAX: ffffffffffffffda RBX: 00007f683b1a5fa0 RCX: 00007f683af8cd29 [ 252.116165][ T8204] RDX: 0000000004000004 RSI: 00000000200024c0 RDI: 0000000000000003 [ 252.116175][ T8204] RBP: 00007f683bda7090 R08: 0000000000000000 R09: 0000000000000000 [ 252.116185][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.116195][ T8204] R13: 0000000000000000 R14: 00007f683b1a5fa0 R15: 00007ffd911fac18 [ 252.116221][ T8204] [ 252.368918][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.375469][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803405b800: rx timeout, send abort [ 252.386420][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803405b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.439235][ T5900] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 252.447059][ T5873] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 252.663887][ T5821] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 252.741714][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 252.749416][ T5873] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 252.757553][ T5873] usb 1-1: config 0 has no interface number 0 [ 252.763992][ T5873] usb 1-1: config 0 interface 41 has no altsetting 0 [ 252.771401][ T5900] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 252.779811][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.792966][ T5873] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 252.802286][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.810661][ T5873] usb 1-1: Product: syz [ 252.815389][ T5821] usb 5-1: device descriptor read/64, error -71 [ 252.815880][ T5873] usb 1-1: Manufacturer: syz [ 252.816083][ T5900] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 252.835876][ T5873] usb 1-1: SerialNumber: syz [ 252.841015][ T5900] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 252.854026][ T5873] usb 1-1: config 0 descriptor?? [ 252.871404][ T5873] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 252.881532][ T5900] usb 2-1: Manufacturer: syz [ 253.354871][ T5900] usb 2-1: config 0 descriptor?? [ 253.714814][ T5906] usb 1-1: USB disconnect, device number 15 [ 253.715674][ T5821] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 253.767806][ T5900] rc_core: IR keymap rc-hauppauge not found [ 253.773761][ T5900] Registered IR keymap rc-empty [ 253.784764][ T8231] netlink: 'syz.3.671': attribute type 4 has an invalid length. [ 253.854145][ T5900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 253.895116][ T5821] usb 5-1: device descriptor read/64, error -71 [ 254.200832][ T5900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 254.289167][ T5821] usb usb5-port1: attempt power cycle [ 254.641665][ T5900] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.781577][ T5821] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 254.866037][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.218943][ T5821] usb 5-1: device descriptor read/8, error -71 [ 255.498423][ T5821] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 255.531790][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.550176][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 255.641170][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.888146][ T8] usb 4-1: config 0 descriptor?? [ 255.897304][ T8] cp210x 4-1:0.0: cp210x converter detected [ 255.928099][ T5821] usb 5-1: device descriptor read/8, error -71 [ 255.956453][ T5900] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.005763][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.007790][ T5871] usb 2-1: USB disconnect, device number 26 [ 256.035777][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 256.047934][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.058554][ T5821] usb usb5-port1: unable to enumerate USB device [ 256.197390][ T5900] usb 1-1: config 0 descriptor?? [ 256.319447][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 256.730157][ T8] usb 4-1: USB disconnect, device number 21 [ 256.760216][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.895258][ T29] audit: type=1400 audit(1737880095.229:74): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8256 comm="syz.4.678" dest=2 [ 257.086529][ T8] cp210x 4-1:0.0: device disconnected [ 257.108159][ T5900] logitech-djreceiver 0003:046D:C517.0013: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0 [ 257.187840][ T5900] usb 1-1: USB disconnect, device number 16 [ 257.582665][ T8277] 9pnet_fd: Insufficient options for proto=fd [ 257.758851][ T29] audit: type=1326 audit(1737880096.033:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.0.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe75d98cd29 code=0x0 [ 257.795235][ T5821] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 257.832204][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 257.969076][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 257.977647][ T5821] usb 2-1: not running at top speed; connect to a high speed hub [ 257.986440][ T5821] usb 2-1: config 8 has an invalid interface number: 236 but max is 1 [ 257.994874][ T5871] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 258.002689][ T5821] usb 2-1: config 8 has an invalid interface number: 141 but max is 1 [ 258.012296][ T5821] usb 2-1: config 8 has no interface number 0 [ 258.018403][ T5821] usb 2-1: config 8 has no interface number 1 [ 258.025850][ T5821] usb 2-1: config 8 interface 236 has no altsetting 0 [ 258.033884][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.045471][ T5821] usb 2-1: config 8 interface 141 has no altsetting 0 [ 258.053613][ T8] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 258.061711][ T8] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 258.070854][ T8] usb 5-1: config 1 has no interface number 3 [ 258.077180][ T8] usb 5-1: too many endpoints for config 1 interface 4 altsetting 184: 97, using maximum allowed: 30 [ 258.089854][ T8] usb 5-1: config 1 interface 4 altsetting 184 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 258.103653][ T8] usb 5-1: config 1 interface 4 has no altsetting 0 [ 258.110471][ T119] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 258.118371][ T5821] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=87.63 [ 258.127516][ T8] usb 5-1: config 1 interface 1 has no altsetting 0 [ 258.134215][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.143340][ T5821] usb 2-1: Product: syz [ 258.147742][ T5821] usb 2-1: Manufacturer: syz [ 258.152445][ T5821] usb 2-1: SerialNumber: syz [ 258.157639][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.168913][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.177095][ T8] usb 5-1: Product: syz [ 258.180061][ T5900] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 258.181955][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 258.194104][ T8] usb 5-1: Manufacturer: syz [ 258.198736][ T8] usb 5-1: SerialNumber: syz [ 258.208821][ T5871] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 258.217787][ T5871] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 258.226473][ T5871] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 258.235540][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.245312][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.255147][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.268267][ T5871] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 258.279414][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.289588][ T5871] usb 4-1: config 0 descriptor?? [ 258.297588][ T119] usb 3-1: Using ep0 maxpacket: 16 [ 258.304404][ T119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.315404][ T119] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.328283][ T119] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.337737][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.347768][ T119] usb 3-1: config 0 descriptor?? [ 258.352831][ T5900] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.352858][ T5900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.352876][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.354750][ T5900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.390181][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.398395][ T5900] usb 1-1: Product: syz [ 258.407393][ T5900] usb 1-1: Manufacturer: syz [ 258.412026][ T5900] usb 1-1: SerialNumber: syz [ 258.420015][ T5821] hub 2-1:8.236: bad descriptor, ignoring hub [ 258.430480][ T5821] hub 2-1:8.236: probe with driver hub failed with error -5 [ 258.445363][ T5821] hub 2-1:8.141: bad descriptor, ignoring hub [ 258.452385][ T5821] hub 2-1:8.141: probe with driver hub failed with error -5 [ 258.480759][ T5821] usb 2-1: USB disconnect, device number 27 [ 258.507385][ T8] usb 5-1: 2:1 : sample bitwidth 65 in over sample bytes 2 [ 258.529546][ T8] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 258.536155][ T5871] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 258.547432][ T8] usb 5-1: 2:1 : invalid channels 0 [ 258.570891][ T8] usb 5-1: USB disconnect, device number 29 [ 258.767179][ T5873] usb 4-1: USB disconnect, device number 22 [ 258.782926][ T5873] usblp0: removed [ 260.305466][ T8296] loop7: detected capacity change from 0 to 16384 [ 260.352117][ T8301] loop7: detected capacity change from 16384 to 16383 [ 261.841542][ T5900] usb 1-1: 0:2 : does not exist [ 262.639040][ T5900] usb 1-1: USB disconnect, device number 17 [ 262.756305][ T8323] tipc: Started in network mode [ 262.760343][ T119] usbhid 3-1:0.0: can't add hid device: -71 [ 262.768342][ T119] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 262.785695][ T119] usb 3-1: USB disconnect, device number 17 [ 262.786102][ T8323] tipc: Node identity ac141441, cluster identity 4711 [ 262.831992][ T8323] tipc: Enabled bearer , priority 10 [ 262.871982][ T8329] 9pnet_fd: Insufficient options for proto=fd [ 263.183192][ T119] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 263.311443][ T912] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 263.472022][ T912] usb 2-1: Using ep0 maxpacket: 16 [ 263.516192][ T912] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 263.526346][ T912] usb 2-1: config 1 has no interface number 1 [ 263.534133][ T912] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.547434][ T912] usb 2-1: config 1 interface 2 has no altsetting 1 [ 263.556254][ T912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.566254][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.570730][ T119] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.574714][ T912] usb 2-1: Product: syz [ 263.594334][ T119] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 263.595431][ T912] usb 2-1: Manufacturer: syz [ 263.606094][ T119] usb 3-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=47.7c [ 263.614648][ T912] usb 2-1: SerialNumber: syz [ 263.624236][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.638201][ T119] usb 3-1: Product: syz [ 263.645560][ T8345] serio: Serial port ttynull [ 263.653254][ T119] usb 3-1: Manufacturer: syz [ 263.661036][ T119] usb 3-1: SerialNumber: syz [ 263.669373][ T119] usb 3-1: config 0 descriptor?? [ 263.850229][ T912] usb 2-1: 2:129 : invalid UAC_AS_GENERAL desc [ 263.875312][ T912] usb 2-1: USB disconnect, device number 28 [ 263.914340][ T8327] pim6reg1: entered promiscuous mode [ 264.035975][ T119] tipc: Node number set to 2886997057 [ 264.341702][ T5900] usb 3-1: USB disconnect, device number 18 [ 266.166996][ T8361] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 266.171662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.187197][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.202916][ T8363] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 266.880622][ T8373] 9pnet_fd: Insufficient options for proto=fd [ 267.662628][ T119] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 267.663389][ T912] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 267.690864][ T8388] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 267.739489][ T8388] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 267.748577][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.757316][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.780220][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.787649][ T8388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.795168][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.803532][ T8388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.823335][ T119] usb 3-1: Using ep0 maxpacket: 16 [ 267.839063][ T119] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.852374][ T8388] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.861225][ T119] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.865710][ T912] usb 2-1: Using ep0 maxpacket: 16 [ 267.868004][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 267.881671][ T119] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 267.892230][ T8390] FAULT_INJECTION: forcing a failure. [ 267.892230][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 267.906698][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.917166][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.3.718 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 267.917193][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.917204][ T8390] Call Trace: [ 267.917210][ T8390] [ 267.917217][ T8390] dump_stack_lvl+0x241/0x360 [ 267.917249][ T8390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.917273][ T8390] ? __pfx__printk+0x10/0x10 [ 267.917297][ T8390] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 267.917319][ T8390] ? __pfx___might_resched+0x10/0x10 [ 267.917343][ T8390] should_fail_ex+0x3b0/0x4e0 [ 267.917364][ T8390] should_failslab+0xac/0x100 [ 267.917386][ T8390] kmem_cache_alloc_node_noprof+0x77/0x380 [ 267.917405][ T8390] ? __alloc_skb+0x1c3/0x440 [ 267.917429][ T8390] __alloc_skb+0x1c3/0x440 [ 267.917454][ T8390] ? __pfx___alloc_skb+0x10/0x10 [ 267.917472][ T8390] ? __local_bh_enable_ip+0x168/0x200 [ 267.917489][ T8390] ? pppoe_sendmsg+0x51/0x790 [ 267.917507][ T8390] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 267.917523][ T8390] ? do_raw_spin_unlock+0x13c/0x8b0 [ 267.917544][ T8390] sock_wmalloc+0xab/0x120 [ 267.917570][ T8390] pppoe_sendmsg+0x1fa/0x790 [ 267.917592][ T8390] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 267.917617][ T8390] __sock_sendmsg+0x221/0x270 [ 267.917639][ T8390] ____sys_sendmsg+0x52a/0x7e0 [ 267.917668][ T8390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.917688][ T8390] ? __fget_files+0x2a/0x410 [ 267.917712][ T8390] ? __fget_files+0x2a/0x410 [ 267.917739][ T8390] __sys_sendmmsg+0x36a/0x720 [ 267.917772][ T8390] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.917806][ T8390] ? __pfx_lock_release+0x10/0x10 [ 267.917824][ T8390] ? kstrtouint_from_user+0x128/0x190 [ 267.917868][ T8390] ? ksys_write+0x22a/0x2b0 [ 267.917891][ T8390] ? __pfx_lock_release+0x10/0x10 [ 267.917916][ T8390] ? sb_end_write+0xe9/0x1c0 [ 267.917937][ T8390] ? vfs_write+0x7fa/0xd10 [ 267.917961][ T8390] ? __mutex_unlock_slowpath+0x227/0x800 [ 267.918009][ T8390] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.918032][ T8390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.918053][ T8390] ? do_syscall_64+0x100/0x230 [ 267.918077][ T8390] __x64_sys_sendmmsg+0xa0/0xb0 [ 267.918101][ T8390] do_syscall_64+0xf3/0x230 [ 267.918120][ T8390] ? clear_bhb_loop+0x35/0x90 [ 267.918144][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.918164][ T8390] RIP: 0033:0x7f683af8cd29 [ 267.918178][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.918208][ T8390] RSP: 002b:00007f683bd86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.918227][ T8390] RAX: ffffffffffffffda RBX: 00007f683b1a6080 RCX: 00007f683af8cd29 [ 267.918239][ T8390] RDX: 00000000000003e8 RSI: 0000000020002340 RDI: 0000000000000003 [ 267.918250][ T8390] RBP: 00007f683bd86090 R08: 0000000000000000 R09: 0000000000000000 [ 267.918260][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.918269][ T8390] R13: 0000000000000001 R14: 00007f683b1a6080 R15: 00007ffd911fac18 [ 267.918296][ T8390] [ 268.124048][ T912] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.187258][ T119] usb 3-1: config 0 descriptor?? [ 268.230984][ T912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.240902][ T12] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 268.247305][ T912] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 268.259863][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.282787][ T912] usb 2-1: config 0 descriptor?? [ 268.314832][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 268.369980][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 268.393547][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 268.408760][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.433583][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 268.461693][ T8] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 268.495179][ T8] usb 5-1: Product: syz [ 268.519262][ T8] usb 5-1: Manufacturer: syz [ 268.523939][ T8] usb 5-1: SerialNumber: syz [ 268.560103][ T8386] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 268.591712][ T8] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 269.252686][ T8396] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 269.378404][ T912] logitech-djreceiver 0003:046D:C517.0014: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0 [ 269.425195][ T119] logitech-djreceiver 0003:046D:C517.0015: hidraw1: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input0 [ 269.446216][ T8] usb 5-1: USB disconnect, device number 30 [ 269.463912][ T8] appletouch 5-1:1.0: input: appletouch disconnected [ 269.474551][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 269.488399][ T912] usb 2-1: USB disconnect, device number 29 [ 269.504494][ T119] usb 3-1: USB disconnect, device number 19 [ 269.583701][ T8410] FAULT_INJECTION: forcing a failure. [ 269.583701][ T8410] name failslab, interval 1, probability 0, space 0, times 0 [ 269.597336][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.3.723 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 269.597364][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 269.597374][ T8410] Call Trace: [ 269.597380][ T8410] [ 269.597388][ T8410] dump_stack_lvl+0x241/0x360 [ 269.597427][ T8410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.597449][ T8410] ? __pfx__printk+0x10/0x10 [ 269.597471][ T8410] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 269.597491][ T8410] ? __pfx___might_resched+0x10/0x10 [ 269.597511][ T8410] should_fail_ex+0x3b0/0x4e0 [ 269.597532][ T8410] should_failslab+0xac/0x100 [ 269.597553][ T8410] kmem_cache_alloc_node_noprof+0x77/0x380 [ 269.597572][ T8410] ? __alloc_skb+0x1c3/0x440 [ 269.597592][ T8410] __alloc_skb+0x1c3/0x440 [ 269.597616][ T8410] ? __pfx___alloc_skb+0x10/0x10 [ 269.597636][ T8410] ? netlink_autobind+0xd6/0x2f0 [ 269.597657][ T8410] ? netlink_autobind+0x2b0/0x2f0 [ 269.597682][ T8410] netlink_sendmsg+0x638/0xcb0 [ 269.597712][ T8410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.597742][ T8410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.597761][ T8410] __sock_sendmsg+0x221/0x270 [ 269.597781][ T8410] ____sys_sendmsg+0x52a/0x7e0 [ 269.597808][ T8410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.597827][ T8410] ? __fget_files+0x2a/0x410 [ 269.597849][ T8410] ? __fget_files+0x2a/0x410 [ 269.597874][ T8410] __sys_sendmsg+0x269/0x350 [ 269.597898][ T8410] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.597930][ T8410] ? do_sys_openat2+0x17a/0x1d0 [ 269.597969][ T8410] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.597992][ T8410] ? do_syscall_64+0x100/0x230 [ 269.598014][ T8410] ? do_syscall_64+0xb6/0x230 [ 269.598032][ T8410] do_syscall_64+0xf3/0x230 [ 269.598051][ T8410] ? clear_bhb_loop+0x35/0x90 [ 269.598074][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.598092][ T8410] RIP: 0033:0x7f683af8cd29 [ 269.598107][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.598121][ T8410] RSP: 002b:00007f683bda7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.598139][ T8410] RAX: ffffffffffffffda RBX: 00007f683b1a5fa0 RCX: 00007f683af8cd29 [ 269.598150][ T8410] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 269.598160][ T8410] RBP: 00007f683bda7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.598169][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.598178][ T8410] R13: 0000000000000000 R14: 00007f683b1a5fa0 R15: 00007ffd911fac18 [ 269.598202][ T8410] [ 270.238967][ T119] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 270.443757][ T119] usb 4-1: Using ep0 maxpacket: 16 [ 270.468808][ T119] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.508923][ T119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 270.529639][ T119] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 270.618726][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.673199][ T119] usb 4-1: config 0 descriptor?? [ 271.746714][ T29] audit: type=1400 audit(1737880108.306:76): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8429 comm="syz.4.732" daddr=::30:0:0:0:1 dest=20003 [ 272.070214][ T119] logitech-djreceiver 0003:046D:C517.0016: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input0 [ 272.087454][ T29] audit: type=1400 audit(1737880108.306:77): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8429 comm="syz.4.732" dest=20000 [ 272.114741][ T29] audit: type=1400 audit(1737880108.306:78): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8429 comm="syz.4.732" daddr=fc00:: dest=20002 [ 272.438519][ T8] usb 4-1: USB disconnect, device number 23 [ 272.478027][ T29] audit: type=1400 audit(1737880109.802:79): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8439 comm="syz.4.734" [ 272.569608][ T5870] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 272.599608][ T8444] FAULT_INJECTION: forcing a failure. [ 272.599608][ T8444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.613946][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.2.735 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 272.613969][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 272.613980][ T8444] Call Trace: [ 272.613986][ T8444] [ 272.613993][ T8444] dump_stack_lvl+0x241/0x360 [ 272.614024][ T8444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.614048][ T8444] ? __pfx__printk+0x10/0x10 [ 272.614076][ T8444] ? snprintf+0xda/0x120 [ 272.614094][ T8444] should_fail_ex+0x3b0/0x4e0 [ 272.614117][ T8444] _copy_to_user+0x31/0xb0 [ 272.614136][ T8444] simple_read_from_buffer+0xca/0x150 [ 272.614158][ T8444] proc_fail_nth_read+0x1e9/0x250 [ 272.614179][ T8444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.614201][ T8444] ? rw_verify_area+0x243/0x630 [ 272.614223][ T8444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.614250][ T8444] vfs_read+0x1f8/0xb40 [ 272.614273][ T8444] ? fdget_pos+0x254/0x320 [ 272.614294][ T8444] ? __pfx___mutex_lock+0x10/0x10 [ 272.614314][ T8444] ? __pfx_vfs_read+0x10/0x10 [ 272.614339][ T8444] ? __fget_files+0x2a/0x410 [ 272.614360][ T8444] ? __fget_files+0x395/0x410 [ 272.614378][ T8444] ? __fget_files+0x2a/0x410 [ 272.614406][ T8444] ksys_read+0x18f/0x2b0 [ 272.614431][ T8444] ? __pfx_ksys_read+0x10/0x10 [ 272.614451][ T8444] ? do_syscall_64+0x100/0x230 [ 272.614472][ T8444] ? do_syscall_64+0xb6/0x230 [ 272.614493][ T8444] do_syscall_64+0xf3/0x230 [ 272.614512][ T8444] ? clear_bhb_loop+0x35/0x90 [ 272.614536][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.614556][ T8444] RIP: 0033:0x7f4f8838b73c [ 272.614571][ T8444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.614585][ T8444] RSP: 002b:00007f4f861f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.614603][ T8444] RAX: ffffffffffffffda RBX: 00007f4f885a5fa0 RCX: 00007f4f8838b73c [ 272.614621][ T8444] RDX: 000000000000000f RSI: 00007f4f861f60a0 RDI: 0000000000000004 [ 272.614631][ T8444] RBP: 00007f4f861f6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.614642][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.614652][ T8444] R13: 0000000000000000 R14: 00007f4f885a5fa0 R15: 00007ffe50e363a8 [ 272.614679][ T8444] [ 272.868829][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 272.888487][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.899698][ T5870] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.933263][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.984560][ T5870] usb 1-1: config 0 descriptor?? [ 273.104068][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 273.158278][ T29] audit: type=1326 audit(1737880110.448:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8448 comm="syz.2.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f8838cd29 code=0x0 [ 273.219745][ T5870] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 273.277575][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 273.316734][ T8] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.334854][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.355075][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 273.378771][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.399530][ T8] usb 5-1: config 0 descriptor?? [ 273.700149][ T29] audit: type=1326 audit(1737880110.943:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.3.740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f683af8cd29 code=0x0 [ 273.853218][ T8] logitech-djreceiver 0003:046D:C517.0017: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.4-1/input0 [ 273.913318][ T8466] input: syz1 as /devices/virtual/input/input14 [ 273.934754][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 274.006462][ T8468] netlink: 112 bytes leftover after parsing attributes in process `syz.3.744'. [ 274.123757][ T8] usb 5-1: USB disconnect, device number 31 [ 275.659477][ T5900] usb 1-1: USB disconnect, device number 18 [ 275.927397][ T119] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.097479][ T119] usb 4-1: Using ep0 maxpacket: 8 [ 276.107254][ T119] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 276.119655][ T119] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 276.201320][ T119] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 276.247382][ T5900] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 276.253037][ T119] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.288709][ T119] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.401344][ T119] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.429422][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.440116][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 276.478184][ T5900] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.551217][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 276.625554][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 276.674380][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.686493][ T5900] usb 2-1: config 0 descriptor?? [ 276.742238][ T119] usb 4-1: GET_CAPABILITIES returned 0 [ 276.758817][ T119] usbtmc 4-1:16.0: can't read capabilities [ 276.966868][ T119] usb 4-1: USB disconnect, device number 24 [ 277.154616][ T5900] logitech-djreceiver 0003:046D:C517.0018: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0 [ 277.231196][ T5870] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 277.387715][ T8520] fuse: Bad value for 'user_id' [ 277.392932][ T8520] fuse: Bad value for 'user_id' [ 277.423183][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 277.487421][ T5870] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 277.557545][ T5870] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 277.586284][ T5873] usb 2-1: USB disconnect, device number 30 [ 277.652064][ T5870] usb 3-1: config 135 has no interface number 0 [ 277.661586][ T5870] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 277.694955][ T5870] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 277.747040][ T5870] usb 3-1: config 135 interface 230 has no altsetting 0 [ 277.834551][ T5870] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 277.886234][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.948226][ T5870] usb 3-1: Product: syz [ 277.960493][ T5870] usb 3-1: Manufacturer: syz [ 277.968058][ T5870] usb 3-1: SerialNumber: syz [ 277.982201][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 278.118296][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 278.127526][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 278.515543][ T5870] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 278.550465][ T5870] usb 3-1: No valid video chain found. [ 279.442546][ T8545] process 'syz.0.768' launched './file0' with NULL argv: empty string added [ 279.658686][ T119] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 280.740687][ T8561] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 280.812089][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 280.844245][ T119] usb 4-1: Using ep0 maxpacket: 32 [ 280.857237][ T119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 280.897764][ T119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 280.910570][ T119] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.318864][ T119] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 281.337134][ T119] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 281.347652][ T8] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 281.425905][ T119] usb 4-1: Product: syz [ 281.441009][ T119] usb 4-1: Manufacturer: syz [ 281.484248][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.526219][ T119] usb 4-1: SerialNumber: syz [ 281.592704][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.712299][ T8542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.756432][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.780124][ T5912] usb 3-1: USB disconnect, device number 20 [ 281.788972][ T119] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 281.862851][ T8] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 282.093093][ T5912] usb 4-1: USB disconnect, device number 25 [ 282.106417][ T5912] appletouch 4-1:1.0: input: appletouch disconnected [ 282.895980][ T8579] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 285.836994][ T119] usb 1-1: USB disconnect, device number 19 [ 286.067740][ T8619] ======================================================= [ 286.067740][ T8619] WARNING: The mand mount option has been deprecated and [ 286.067740][ T8619] and is ignored by this kernel. Remove the mand [ 286.067740][ T8619] option from the mount to silence this warning. [ 286.067740][ T8619] ======================================================= [ 286.816227][ T8635] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.863439][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.870880][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.895429][ T8635] bridge0: entered allmulticast mode [ 287.066181][ T5912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 287.696998][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 288.275294][ T5912] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.750032][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 289.047129][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 289.057340][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.071469][ T5912] usb 4-1: config 0 descriptor?? [ 289.551001][ T29] audit: type=1400 audit(1737880125.732:82): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=8667 comm="syz.4.801" daddr=::ffff:172.20.20.187 [ 289.746734][ T5912] logitech-djreceiver 0003:046D:C517.0019: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input0 [ 290.369189][ T5912] usb 4-1: USB disconnect, device number 26 [ 290.581109][ T8683] FAULT_INJECTION: forcing a failure. [ 290.581109][ T8683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.594839][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.1.806 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 290.594864][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.594873][ T8683] Call Trace: [ 290.594880][ T8683] [ 290.594887][ T8683] dump_stack_lvl+0x241/0x360 [ 290.594917][ T8683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.594941][ T8683] ? __pfx__printk+0x10/0x10 [ 290.594965][ T8683] ? __pfx_lock_release+0x10/0x10 [ 290.594993][ T8683] should_fail_ex+0x3b0/0x4e0 [ 290.595015][ T8683] _copy_from_user+0x2d/0xb0 [ 290.595032][ T8683] do_ip_setsockopt+0x3b7/0x3cd0 [ 290.595057][ T8683] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 290.595074][ T8683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.595099][ T8683] ? __local_bh_enable_ip+0x168/0x200 [ 290.595115][ T8683] ? lockdep_hardirqs_on+0x99/0x150 [ 290.595135][ T8683] ? __local_bh_enable_ip+0x168/0x200 [ 290.595151][ T8683] ? mptcp_setsockopt+0xcdd/0x3bc0 [ 290.595172][ T8683] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 290.595193][ T8683] ip_setsockopt+0x63/0x100 [ 290.595212][ T8683] mptcp_setsockopt+0xf3c/0x3bc0 [ 290.595240][ T8683] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 290.595272][ T8683] ? __pfx_lock_acquire+0x10/0x10 [ 290.595299][ T8683] ? sock_common_setsockopt+0x37/0xc0 [ 290.595321][ T8683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 290.595339][ T8683] do_sock_setsockopt+0x3af/0x720 [ 290.595366][ T8683] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.595391][ T8683] ? __fget_files+0x395/0x410 [ 290.595409][ T8683] ? __fget_files+0x2a/0x410 [ 290.595435][ T8683] __x64_sys_setsockopt+0x1ee/0x280 [ 290.595463][ T8683] do_syscall_64+0xf3/0x230 [ 290.595481][ T8683] ? clear_bhb_loop+0x35/0x90 [ 290.595504][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.595522][ T8683] RIP: 0033:0x7f482698cd29 [ 290.595536][ T8683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.595550][ T8683] RSP: 002b:00007f4827708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.595567][ T8683] RAX: ffffffffffffffda RBX: 00007f4826ba5fa0 RCX: 00007f482698cd29 [ 290.595583][ T8683] RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000003 [ 290.595593][ T8683] RBP: 00007f4827708090 R08: 0000000000000004 R09: 0000000000000000 [ 290.595603][ T8683] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.595614][ T8683] R13: 0000000000000000 R14: 00007f4826ba5fa0 R15: 00007ffeedaec918 [ 290.595639][ T8683] [ 292.769305][ T8726] overlay: filesystem on ./bus not supported [ 294.922256][ T8763] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 295.227782][ T1161] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] PREEMPT SMP KASAN PTI [ 295.249431][ T1161] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 295.257873][ T1161] CPU: 0 UID: 0 PID: 1161 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 295.268391][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.278470][ T1161] Workqueue: events_unbound netfs_write_collection_worker [ 295.285613][ T1161] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 295.291186][ T1161] Code: 20 00 74 08 4c 89 ef e8 a4 e1 44 fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 ad [ 295.310801][ T1161] RSP: 0018:ffffc900040ff630 EFLAGS: 00010203 [ 295.316865][ T1161] RAX: 0000000000000023 RBX: ffffc900040ff7c0 RCX: ffff888027c80000 [ 295.324830][ T1161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.332798][ T1161] RBP: 000000000000011e R08: ffffffff84dea2b5 R09: ffffffff84dea144 [ 295.340761][ T1161] R10: 0000000000000004 R11: ffff888027c80000 R12: dffffc0000000000 [ 295.348727][ T1161] R13: 0000000000000000 R14: 000000000000005d R15: 000000000000001e [ 295.356686][ T1161] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 295.365605][ T1161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.372179][ T1161] CR2: 00007f5f702ad440 CR3: 000000007b910000 CR4: 00000000003526f0 [ 295.380142][ T1161] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.388102][ T1161] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.396068][ T1161] Call Trace: [ 295.399337][ T1161] [ 295.402259][ T1161] ? __die_body+0x5f/0xb0 [ 295.406585][ T1161] ? die_addr+0xb0/0xe0 [ 295.410737][ T1161] ? exc_general_protection+0x3dd/0x5d0 [ 295.416283][ T1161] ? asm_exc_general_protection+0x26/0x30 [ 295.421997][ T1161] ? iov_iter_revert+0x104/0x590 [ 295.427105][ T1161] ? iov_iter_revert+0x275/0x590 [ 295.432038][ T1161] ? iov_iter_revert+0x2da/0x590 [ 295.436971][ T1161] netfs_retry_writes+0x17db/0x19b0 [ 295.442864][ T1161] ? __pfx_validate_chain+0x10/0x10 [ 295.448057][ T1161] ? mark_lock+0x9a/0x360 [ 295.452381][ T1161] ? __lock_acquire+0x1397/0x2100 [ 295.457401][ T1161] ? __pfx_netfs_retry_writes+0x10/0x10 [ 295.462936][ T1161] ? register_lock_class+0x102/0x980 [ 295.468216][ T1161] ? __pfx_register_lock_class+0x10/0x10 [ 295.473849][ T1161] netfs_write_collection_worker+0x2f90/0x3bb0 [ 295.480013][ T1161] ? process_scheduled_works+0x976/0x1840 [ 295.485720][ T1161] process_scheduled_works+0xa66/0x1840 [ 295.491262][ T1161] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.497230][ T1161] ? assign_work+0x364/0x3d0 [ 295.501809][ T1161] worker_thread+0x870/0xd30 [ 295.506391][ T1161] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.512273][ T1161] ? __kthread_parkme+0x169/0x1d0 [ 295.517288][ T1161] ? __pfx_worker_thread+0x10/0x10 [ 295.522475][ T1161] kthread+0x7a9/0x920 [ 295.526628][ T1161] ? __pfx_kthread+0x10/0x10 [ 295.531209][ T1161] ? __pfx_worker_thread+0x10/0x10 [ 295.536309][ T1161] ? __pfx_kthread+0x10/0x10 [ 295.540889][ T1161] ? __pfx_kthread+0x10/0x10 [ 295.545494][ T1161] ? __pfx_kthread+0x10/0x10 [ 295.550076][ T1161] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.555264][ T1161] ? lockdep_hardirqs_on+0x99/0x150 [ 295.560453][ T1161] ? __pfx_kthread+0x10/0x10 [ 295.565039][ T1161] ret_from_fork+0x4b/0x80 [ 295.569445][ T1161] ? __pfx_kthread+0x10/0x10 [ 295.574021][ T1161] ret_from_fork_asm+0x1a/0x30 [ 295.578786][ T1161] [ 295.581817][ T1161] Modules linked in: [ 295.586453][ T1161] ---[ end trace 0000000000000000 ]--- [ 295.595387][ T1161] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 295.601157][ T1161] Code: 20 00 74 08 4c 89 ef e8 a4 e1 44 fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 ad [ 295.620934][ T1161] RSP: 0018:ffffc900040ff630 EFLAGS: 00010203 [ 295.627099][ T1161] RAX: 0000000000000023 RBX: ffffc900040ff7c0 RCX: ffff888027c80000 [ 295.635263][ T1161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.643352][ T1161] RBP: 000000000000011e R08: ffffffff84dea2b5 R09: ffffffff84dea144 [ 295.651559][ T1161] R10: 0000000000000004 R11: ffff888027c80000 R12: dffffc0000000000 [ 295.663164][ T1161] R13: 0000000000000000 R14: 000000000000005d R15: 000000000000001e [ 295.671470][ T1161] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 295.680578][ T1161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.687391][ T1161] CR2: 0000000000000000 CR3: 0000000036444000 CR4: 00000000003526f0 [ 295.695591][ T1161] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.799612][ T1161] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 295.808228][ T1161] Kernel panic - not syncing: Fatal exception [ 295.814445][ T1161] Kernel Offset: disabled [ 295.818763][ T1161] Rebooting in 86400 seconds..