last executing test programs: 14.20845886s ago: executing program 1 (id=772): ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000004100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="080009140000700000"], 0x34}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000270001000000000000000000ac1e0101000000000000000000000000ac1c140d0000000000000000000000000000000000000000000000002c000000a9162c166a1c2106c8ce18b9592231c5720daf78e84514d4e0eee8224b6d46c51c016202f67bcdb78ac5139c14b6c75776722bea990a0f30", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.886957039s ago: executing program 1 (id=774): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) 12.121138128s ago: executing program 1 (id=776): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x48200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000001200)=""/214, 0x0, 0x1}}, 0x48) 11.672463828s ago: executing program 1 (id=779): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x20, 0xa}, 0x0, 0x0}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x78) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x7, &(0x7f0000000c80)=0x0) epoll_create1(0x80000) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, 0x0}]) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x11, 0x2d, {0x2d, 0x2, "7ccf53cf43340d7b5a70607ec1b05876b46c08d6b5d192e5d056253840aa734b162478addb2174d7a62327"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x40, 0x13, 0x70, "da3b8894dadd2c4475511bf2588d9b57aa33aca1c98b19e8f575af363c93942ab684f6ac75edb4087a77f2354ab8f3e05b0071637bd0decba7d35b24d4eea400cdbc48bdd9c5c8f71c8b5450cea61bcb75000db9cd6b2229d8a4a34988f5dd3c6b5565fb208f0206ce024381993e48f5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x21}}) ftruncate(r4, 0xc17a) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x4}) fstat(r4, &(0x7f0000000240)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100000000000000500000a14000000000100000000000000180a010400000000000000000d00000720000000080a03000000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a0000000000"], 0x8c}}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x7, &(0x7f0000000b00)=0xfffffffb, 0x4) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000080)={0x99c0, "e9e871b402e9b0e0d9749f282f0260da38a7cc5d1573603117b70f9d6475773e", 0x4, 0x2, 0x8, 0x14, 0x2, 0x1, 0x9ed}) r9 = open(0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r10 = fcntl$getown(r4, 0x9) timer_create(0x6, &(0x7f0000000100)={0x0, 0x29, 0x1, @tid=r10}, &(0x7f0000000140)) setsockopt$CAIFSO_LINK_SELECT(r9, 0x116, 0x7f, &(0x7f0000000000)=0x2f13, 0x4) 9.742534665s ago: executing program 4 (id=786): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000004b00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x50, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xcd, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x22ac, 0x0, 0x4, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0xeb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3, 0x4}}}}}]}}]}}, &(0x7f0000004fc0)={0x0, 0x0, 0xf, &(0x7f0000004bc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x40, 0x6}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) syz_usb_connect$uac1(0x6, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x80, 0xb0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x9, "dd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x6, 0x37}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1af, 0x2, 0xf, "8f5dcd"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x0, "15", "29db"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x47, 0xd4, 0x1, {0x7, 0x25, 0x1, 0x43, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x5, 0x6, "253a1ec6ccf5"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x2, "9c5c", "da18"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6a, 0x3, 0x80, 0x8, "4db61a54"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xca, 0x1, 0xf5, 0x1, "499dfb", "19"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x7, 0x5, {0x7, 0x25, 0x1, 0x84, 0x59, 0xd8b}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x0, 0xf, 0x5, 0x40, 0x8}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x3, 0x542e}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xd, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x6, 0xfb42}]}, 0x7, [{0xfc, &(0x7f0000000180)=@string={0xfc, 0x3, "e247c60ae9c6b0314151390e4b8d4ba47ce88eeb31a4304b4a25972c35d145ff440b13ec4fddacf47bef49b9d96a987049194b76c0ae53b9ee1889a45d3246e3d2d8c92c8131120d7c0d771d773cdecff285d2dda99f26b996743aea9e467c98bf347a09c672c04c5a8537f19086110679183f9bd9d7f92132cb377501f58b3346594ce4bc31de8201afd345b0e702086a8fc24939d83c8319bac98f19beaf30f72c5efcaa4a9c9b3aac59878fec458c4f2b0fcb4f182f387db07630959f21e96df91e0f8dfc2a9d9e175c274cc88f83864a71e078e05009d8aeb240bdde46b56c675a8dc9e59062a346a5dc067be35b5464b73429fecefc5a3e"}}, {0x9, &(0x7f0000000280)=@string={0x9, 0x3, "e4dfe0a903a661"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "6138d14dc975754a094a84bad76b1391e6520a0e49f1f60c89106cc2f618400ad1ace47d6a5cb0"}}, {0xa5, &(0x7f0000000300)=@string={0xa5, 0x3, "986f3f7897d0614b2566a7b6a7de74bd2dd1851f0a0e551de7d4e87462b7184fa48c2a9ae3158a13bc7671ec2749a86e0f074c8f8f5fc55ba7f193ecb137bfcd8835f4100bb9b45f6527482d3e2ab8d64b632af48f2a5c3e7ba77641fd631c7a7b7e442f645e4ee062d3cd7e589f75d8b1e8818d51b608b2a82eaa6ff4fce0478d97fc5f2db5b887fcd26f03cc268b91460bd68a97896cc434f161b6bcd57fb00ddf00"}}, {0xdb, &(0x7f00000003c0)=@string={0xdb, 0x3, "cbc6aea43f94c43a411d81de4dc5dedce22cd18dcf81d5c16f8f0b27c6476b0f97a6fed48b7ad4711f070728377d09cea9eda6ff7b0467a93384b2a194a765a31a232a36e2cd9a4be590549b855e3987bd3b44ab747644df0f12f8ce4940dd33d4225725f9902669b5121fd418cd6c251b66ddf06ba09d4ebd442800b66be36fff2f9af35d28684a91f5c638e670612e90a5045d1ecb79f4b8349f78c460a5c49fb305803b8ee3b348787eadea755125a87f72bfeeed7d71c564ecce51c2703f105370a2c22f752af788f562a6a13d1dd3e8a5ab28f8c62e6e"}}, {0xac, &(0x7f0000000680)=@string={0xac, 0x3, "351a9e62aaaa434b83f7dda6df5813f9c7d35adb7e19b72123d87730b4f99445d5ccf4d066d536bbb5b2cbf1f3da9205c959ebf53346629623daa7a4142be749425034957a6c10ee05d276e8cb8f4782ce3ca98f682f7ff6ec18a51d9be4010adae19753f08130d48938c700bd1d3d7d7f7fca1862ab08f87c16486f3a89cacec681f0af35f018c55a15c02a9bd2e59d59c88b0c283ce54869b459122f03aed709d39f73fd5fc1a67390"}}, {0xd8, &(0x7f0000000500)=@string={0xd8, 0x3, "3666bd2da213ceeeefb4c6bf0014110adca320adc311424c8b8d149f0b8d3e4573edb301b1bcb346cfbb812e3c5b88f7de17d04853fbe711f80b740fd30f8bce381a1d70fc1ce893b7b38cf85fc2b5ca24a3aa0deecf7d37bed79ef33ba30cb68d782f05474be1d9ed5d37e82964940bafc21ea3249443945963a4eff42596d1745a06a78256b8d4d5c524388839da8b4ef75f23c4f4e70b6329ad5005fc10e096cde1e79c13f98a3887b8ade47579a43de1e340b5a486ac8af17faa1f86b18d6d8a8e6f0cf83e7025a8de0f2150a8825ec07f7c2387"}}]}) 9.128427794s ago: executing program 1 (id=790): io_uring_setup(0x368e, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 6.990118333s ago: executing program 3 (id=795): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r5, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) syz_io_uring_setup(0xc61, &(0x7f0000000180)={0x0, 0x5fa2, 0x40, 0x3, 0x8109b}, 0x0, &(0x7f0000000380)) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000080)=@mmap={0x7, 0x8, 0x4, 0x1901, 0x608, {0x0, 0x2710}, {0x6, 0x8, 0x0, 0x1, 0x7, 0x4d, "0100"}, 0x2, 0x1, {}, 0xe0ee}) rseq(0x0, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0c006d2b39950000"], 0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r9, &(0x7f0000000100)=&(0x7f00000000c0), &(0x7f0000000140)=0x18) kcmp(r9, r4, 0x5, 0xffffffffffffffff, r1) 6.644139987s ago: executing program 0 (id=799): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x70) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/74], 0xfc}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x4) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r6, @ANYBLOB=',grou', @ANYRESDEC=0x0]) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) sendmmsg$inet6(r2, &(0x7f0000007180)=[{{&(0x7f0000001f00)={0xa, 0x4e23, 0x9, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x2400c8d0) io_uring_setup(0x7d9b, &(0x7f0000000140)={0x0, 0xfdcd, 0x40, 0x1, 0x24}) socket$xdp(0x2c, 0x3, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_INPUT(r1, &(0x7f0000002340)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45a], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 6.560524303s ago: executing program 2 (id=800): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket(0x200000100000011, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008001200000007000500050002000000050004000000000010000300686173683a69702c6d"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 6.560069433s ago: executing program 4 (id=801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 5.532023282s ago: executing program 4 (id=802): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d0101400001020301090293000301c4d61313b8ba845eac3a255d0000020904000000010100000a2401000000020102132406000006000000000000020002000000000924030000000003000924050007000000000924030000030404000624050400fd0904010000010200000904010101010200000905010940000000000725010307000009040200000102000009040201010102000009058209ff0300008007250100001dff"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000600000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x480bd72125a0c189, 0xa}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x880) connect$inet(r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r6, r6, 0x4}, 0x10) madvise(&(0x7f0000907000/0x4000)=nil, 0x4000, 0x17) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) 5.365579763s ago: executing program 0 (id=803): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000002c0)="e51b2731080200", 0x7, 0xfffffffffffffffc) (fail_nth: 3) 5.318286318s ago: executing program 3 (id=804): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0}], 0x1, 0x400c0fc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x20, 0x1, 0x1a5, r5, 0x0, 0x0, 0x1, 0x0, 0x1, r5}]) 5.065541492s ago: executing program 2 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 3.954841859s ago: executing program 2 (id=806): listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700"], 0x20}}, 0x800) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.880570583s ago: executing program 0 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 3.874960315s ago: executing program 3 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4082, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000043addc4b9882125ce4822e8ff875d38f2d3dc122bcc947b6ac987ee03916d30cc7074a1ca07dcd56eaf767d5a933ca7be6043591c676f44b5181dd48c5048ff3160ae4dfeb835011492047f4bbd6404bc7e2a6b0164d66df9ad5a422f909ff3e4683dbedd2b7a50c0f8cd736ed5fb6ba1c9c3fb70cc51f49d35ea67882ea7aa9342b4f6c94f3f36f8cfdc1ac4fba36b65bb91e18aff9adfc17bc7a5a154972414f5f18ab48ca71c60fcac2587ef15f840461f2765148cb5c0aa5e5a357979c94321fc311bb74be", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.601629166s ago: executing program 1 (id=809): r0 = syz_clone(0x0, &(0x7f0000005600), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000022c0)='net/ptype\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000005740)='cgroup\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000280)) r5 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x0, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x65) r7 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="03000000040034000000000001000000142bad3cc770dc1a337723ab80000000bb8784065c4afca2d70bd0968a4cebfad301d976d23c3e0832f1092a4e707a77508f3e6739e88b61e593d9c3a6b3fe1762018cf5c9dbf5fe345777531d9ff80dae6adfd501206a724020b3f63232297a7810087aa90fb0f11f03e5a5873116903c614fef2ed32b3d29ac18a4d84cc7498083f99ea34710089868180930f276e7ea14adb3cd5894b89dc300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001600"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x2e, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x5, 0x0) r9 = syz_io_uring_setup(0xc98, &(0x7f0000000800)={0x0, 0x588d, 0x800, 0x2, 0x183}, &(0x7f0000000740)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x20, 0x7, 0xffffffffffffffff, &(0x7f00000020c0)=0x80, &(0x7f0000002100)=@pppoe, 0x0, 0x80000}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) epoll_create1(0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) sendmmsg(r4, &(0x7f000000a740)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRESHEX=0x0, @ANYBLOB="776851847e2ded44808f7d82a253a90b651cecf0b21dde055440e08c4ba61f50de951f40ad205aec44b806ed11926a1f503894b1bdc30437e7b0e379fcd53eac481c2447f4f9711c2e3a72a0c1018a3fd0b1e7eb94a788daaa012d45ead53c7873732c6456402655893ade7b0023838be04b163068cafc79687590ff3bd97b26cd250ebfdb874169f9ba6a1fe639d0acc2bbea6ceee79cbdad", @ANYRESHEX=r4, @ANYRES64=0x0, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES8=r5, @ANYRESHEX=r7, @ANYRESDEC=r5], 0xf}}], 0x1, 0x40090) 1.95829707s ago: executing program 0 (id=810): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000680)="6965169b57baa789", 0x8}, {0x0}, {0x0}], 0x3, 0x0, 0xb, 0x0) 1.952283764s ago: executing program 2 (id=811): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000680)="6965169b57baa7899cdb5428bc13a3ce956339293c377b251a8766183004fb2dcdc255092c88fc1e5dad276493c086fe226b394471d9466b0cc6284e00bc14f5d46cddcf80ab49c521678c68518d8d8c82b5d1ef0083cbfc8344f241a8c7e9117a2767fdae54fcfe5934ee687b30b10796adb658dc7c7cc7243e19866ce318c8010bb3da879b4c503f", 0x89}, {0x0}, {0x0}], 0x3, 0x0, 0xb, 0x0) 1.94488053s ago: executing program 3 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 1.780432809s ago: executing program 2 (id=813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000008c0)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x2, &(0x7f0000000080)=0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f00000000c0)="9a", 0x1}]) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069060000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb70200000800e500b703000000400000850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x26000840) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.780004225s ago: executing program 4 (id=814): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.697854774s ago: executing program 0 (id=815): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket(0x200000100000011, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008001200000007000500050002000000050004000000000010000300686173683a69702c6d"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 1.568254426s ago: executing program 4 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 441.367328ms ago: executing program 3 (id=817): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x25, 0x0, 0x9}]}) 245.221531ms ago: executing program 3 (id=818): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0}], 0x1, 0x400c0fc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x20, 0x1, 0x1a5, r4, 0x0, 0x0, 0x1, 0x0, 0x1, r4}]) 217.430999ms ago: executing program 4 (id=819): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 0s ago: executing program 2 (id=821): r0 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x1000, &(0x7f0000000000)="393061e9f405c06ef4400c14c9517c62db1220a556c12443d49609add48a65ae10e6c99bd99e7775c58b7662c681d7261549caf4264e5f0f2075be4f93b5d1852310e9c1562813eece6af9b05571e538c0f49e97650b98d3de4838a786a4a6c1c1c17f804700cd02239ed5c4af10a040b8211180e7827c5821e273367af19516", 0x80, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="9576e8121dfe0404c82dbe91de856a973f99da6d230c835118331ddb349ac6b9e81a30dd02af1251c346e6fb0b6acf9e6874d79ea93b334dc8008b") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40008062, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r4, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='vfat\x00', 0x208000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r0, r4) recvmmsg$unix(r9, &(0x7f0000004e80)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001840)=""/189, 0xbd}, {&(0x7f0000000780)=""/3, 0x3}, {&(0x7f0000001900)=""/205, 0xcd}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/113, 0x71}], 0x5, &(0x7f0000001b80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001c00), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c80)=""/143, 0x8f}, {&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/203, 0xcb}, {&(0x7f0000001ec0)=""/202, 0xca}, {&(0x7f00000007c0)=""/58, 0x3a}, {&(0x7f0000001fc0)=""/66, 0x42}], 0x6, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002140), 0x6e, &(0x7f00000031c0)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003280), 0x6e, &(0x7f0000003440)=[{&(0x7f0000003300)=""/167, 0xa7}, {&(0x7f00000033c0)=""/123, 0x7b}], 0x2}}, {{&(0x7f0000003480), 0x6e, &(0x7f0000003940)=[{&(0x7f0000003500)=""/89, 0x59}, {&(0x7f0000003580)=""/215, 0xd7}, {&(0x7f0000003680)=""/165, 0xa5}, {&(0x7f0000003740)=""/241, 0xf1}, {&(0x7f0000003840)=""/249, 0xf9}], 0x5}}, {{&(0x7f00000039c0)=@abs, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000003a40)}, {&(0x7f0000003a80)=""/179, 0xb3}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/175, 0xaf}], 0x5, &(0x7f0000004d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}], 0x7, 0x20, &(0x7f0000005040)) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYRES8, @ANYRES32=r6, @ANYBLOB="5100330080800000ffffffffffff0802110000005050505050500000c80082000000f3ffffff00000000133b3189"], 0x70}}, 0x0) kernel console output (not intermixed with test programs): iter+0x3f5/0x15a0 [ 220.284491][ T6931] ? __pfx__copy_to_iter+0x10/0x10 [ 220.284529][ T6931] seq_read_iter+0xbeb/0xe10 [ 220.284573][ T6931] seq_read+0x2e2/0x3d0 [ 220.284604][ T6931] ? __pfx_seq_read+0x10/0x10 [ 220.284631][ T6931] ? __import_iovec+0x5d4/0x7f0 [ 220.284664][ T6931] ? __pfx_seq_read+0x10/0x10 [ 220.284683][ T6931] proc_reg_read+0x1e6/0x2e0 [ 220.284710][ T6931] vfs_readv+0x5a2/0x840 [ 220.284737][ T6931] ? __pfx_proc_reg_read+0x10/0x10 [ 220.284764][ T6931] ? __pfx_vfs_readv+0x10/0x10 [ 220.284797][ T6931] ? __fget_files+0x2a/0x420 [ 220.284831][ T6931] ? __fget_files+0x3a0/0x420 [ 220.284856][ T6931] ? __fget_files+0x2a/0x420 [ 220.284893][ T6931] __x64_sys_preadv+0x197/0x2a0 [ 220.284930][ T6931] ? __pfx___x64_sys_preadv+0x10/0x10 [ 220.284969][ T6931] do_syscall_64+0xf6/0x210 [ 220.284995][ T6931] ? clear_bhb_loop+0x45/0xa0 [ 220.285021][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.285040][ T6931] RIP: 0033:0x7f582a98e969 [ 220.285058][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.285074][ T6931] RSP: 002b:00007f582b8a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 220.285095][ T6931] RAX: ffffffffffffffda RBX: 00007f582abb5fa0 RCX: 00007f582a98e969 [ 220.285109][ T6931] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 220.285121][ T6931] RBP: 00007f582b8a1090 R08: 0000000000000f00 R09: 0000000000000000 [ 220.285132][ T6931] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 220.285143][ T6931] R13: 0000000000000000 R14: 00007f582abb5fa0 R15: 00007fff0ac04368 [ 220.285171][ T6931] [ 220.535042][ T5834] block nbd0: Receive control failed (result -107) [ 220.596886][ T6933] nbd0: detected capacity change from 0 to 32 [ 220.621892][ T6806] block nbd0: Dead connection, failed to find a fallback [ 220.663575][ T6806] block nbd0: shutting down sockets [ 220.683051][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.744609][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 220.828991][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.840105][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 220.848156][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.907263][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.093997][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.273450][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.460018][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.513345][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.575012][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.606563][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.614582][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.754911][ T6953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.833904][ T5836] Bluetooth: hci2: unexpected event for opcode 0x204e [ 221.854886][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.863077][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.874673][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.882721][ T6806] ldm_validate_partition_table(): Disk read failed. [ 221.890660][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.900465][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.908538][ T6806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.918078][ T6806] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.925852][ T30] audit: type=1400 audit(1746988948.456:6): lsm=SMACK fn=smack_file_receive action=denied subject="y" object="_" requested=w pid=6952 comm="syz.1.249" path="pipe:[4521]" dev="pipefs" ino=4521 [ 221.946917][ T30] audit: type=1400 audit(1746988948.466:7): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=6952 comm="syz.1.249" path="/dev/uinput" dev="devtmpfs" ino=920 [ 221.947224][ T6806] Dev nbd0: unable to read RDB block 0 [ 222.081257][ T6806] nbd0: unable to read partition table [ 222.149569][ T6806] ldm_validate_partition_table(): Disk read failed. [ 222.206022][ T6806] Dev nbd0: unable to read RDB block 0 [ 222.215026][ T6806] nbd0: unable to read partition table [ 223.186233][ T6973] overlayfs: missing 'workdir' [ 223.601409][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 223.607784][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 223.614530][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 223.625230][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 223.688230][ T30] audit: type=1107 audit(1746988949.706:8): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='1' [ 224.436578][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.625907][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 224.633060][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.673917][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 224.714170][ T24] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 224.732402][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.757690][ T24] usb 3-1: config 0 descriptor?? [ 225.899862][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 226.566395][ T6993] netlink: 52 bytes leftover after parsing attributes in process `syz.3.257'. [ 227.314505][ T7000] binder: 6977:7000 ioctl 40046201 200000000000 returned -22 [ 227.377080][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.255'. [ 227.594661][ T7007] binder: 6977:7007 ioctl 40086200 200000000240 returned -22 [ 228.072558][ T7000] xt_TCPMSS: Only works on TCP SYN packets [ 228.113696][ T24] usb 3-1: string descriptor 0 read error: -71 [ 228.150424][ T24] usb 3-1: USB disconnect, device number 14 [ 228.791473][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 229.024922][ T7024] Illegal XDP return value 703864320 on prog (id 92) dev N/A, expect packet loss! [ 229.439091][ T7042] afs: Unknown parameter '' [ 229.719104][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 230.035141][ T30] audit: type=1326 audit(1746988956.566:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.1.266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde7b98e969 code=0x0 [ 230.036585][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 230.147062][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.156652][ T24] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 230.175049][ T24] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 230.252072][ T24] usb 5-1: config 4 has no interface number 0 [ 230.269021][ T24] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 230.286541][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.362333][ T24] usb 5-1: Product: syz [ 230.379561][ T24] usb 5-1: Manufacturer: syz [ 230.393293][ T24] usb 5-1: SerialNumber: syz [ 230.526398][ T7060] FAULT_INJECTION: forcing a failure. [ 230.526398][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 230.540458][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.2.273 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 230.540484][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.540495][ T7060] Call Trace: [ 230.540508][ T7060] [ 230.540516][ T7060] dump_stack_lvl+0x189/0x250 [ 230.540550][ T7060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.540575][ T7060] ? __pfx__printk+0x10/0x10 [ 230.540609][ T7060] ? __pfx___might_resched+0x10/0x10 [ 230.540637][ T7060] ? fs_reclaim_acquire+0x7d/0x100 [ 230.540662][ T7060] should_fail_ex+0x414/0x560 [ 230.540697][ T7060] should_failslab+0xa8/0x100 [ 230.540728][ T7060] __kmalloc_noprof+0xcb/0x4f0 [ 230.540753][ T7060] ? kfree+0x4d/0x440 [ 230.540774][ T7060] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 230.540805][ T7060] tomoyo_realpath_from_path+0xe3/0x5d0 [ 230.540831][ T7060] ? tomoyo_domain+0xda/0x130 [ 230.540860][ T7060] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 230.540879][ T7060] tomoyo_path_number_perm+0x1e8/0x5a0 [ 230.540901][ T7060] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 230.540943][ T7060] ? __lock_acquire+0xaac/0xd20 [ 230.540986][ T7060] ? __fget_files+0x2a/0x420 [ 230.541019][ T7060] ? __fget_files+0x3a0/0x420 [ 230.541045][ T7060] ? __fget_files+0x2a/0x420 [ 230.541076][ T7060] security_file_ioctl+0xcb/0x2d0 [ 230.541100][ T7060] __se_sys_ioctl+0x47/0x170 [ 230.541126][ T7060] do_syscall_64+0xf6/0x210 [ 230.541161][ T7060] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 230.541179][ T7060] ? clear_bhb_loop+0x45/0xa0 [ 230.541201][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.541218][ T7060] RIP: 0033:0x7f582a98e969 [ 230.541254][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.541269][ T7060] RSP: 002b:00007f582b880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.541289][ T7060] RAX: ffffffffffffffda RBX: 00007f582abb6080 RCX: 00007f582a98e969 [ 230.541303][ T7060] RDX: 0000200000000180 RSI: 00000000c010640b RDI: 0000000000000007 [ 230.541316][ T7060] RBP: 00007f582b880090 R08: 0000000000000000 R09: 0000000000000000 [ 230.541327][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.541338][ T7060] R13: 0000000000000000 R14: 00007f582abb6080 R15: 00007fff0ac04368 [ 230.541369][ T7060] [ 230.541388][ T7060] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.536660][ T24] usb 5-1: can't set config #4, error -71 [ 232.561411][ T24] usb 5-1: USB disconnect, device number 9 [ 232.766846][ T5908] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 232.982610][ T5908] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 233.005815][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.025209][ T5908] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 233.056494][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.078914][ T5908] usb 3-1: config 0 descriptor?? [ 233.084676][ T7061] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 233.196650][ T5874] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.407981][ T5874] usb 4-1: device descriptor read/64, error -71 [ 233.670738][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 233.686403][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.726684][ T5874] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.738498][ T5908] usb 3-1: USB disconnect, device number 15 [ 234.326674][ T5874] usb 4-1: device descriptor read/64, error -71 [ 234.468535][ T5874] usb usb4-port1: attempt power cycle [ 234.854759][ T5874] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 234.944940][ T5874] usb 4-1: device descriptor read/8, error -71 [ 235.126553][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.296563][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 235.319772][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.349184][ T24] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 235.388977][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.407448][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.461818][ T24] usb 3-1: Product: syz [ 235.466765][ T24] usb 3-1: Manufacturer: syz [ 235.477553][ T24] usb 3-1: SerialNumber: syz [ 235.605603][ T7124] FAULT_INJECTION: forcing a failure. [ 235.605603][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.641452][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.1.289 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 235.641478][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.641492][ T7124] Call Trace: [ 235.641500][ T7124] [ 235.641508][ T7124] dump_stack_lvl+0x189/0x250 [ 235.641537][ T7124] ? __lock_acquire+0xaac/0xd20 [ 235.641563][ T7124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.641588][ T7124] ? __pfx__printk+0x10/0x10 [ 235.641615][ T7124] ? __might_fault+0xb0/0x130 [ 235.641660][ T7124] should_fail_ex+0x414/0x560 [ 235.641694][ T7124] _copy_from_user+0x2d/0xb0 [ 235.641719][ T7124] vmemdup_user+0x59/0xd0 [ 235.641761][ T7124] map_get_next_key+0x1be/0x5f0 [ 235.641787][ T7124] ? bpf_lsm_bpf+0x9/0x20 [ 235.641810][ T7124] ? security_bpf+0x7e/0x300 [ 235.641835][ T7124] __sys_bpf+0x7bf/0x860 [ 235.641859][ T7124] ? __pfx___sys_bpf+0x10/0x10 [ 235.641893][ T7124] ? ksys_write+0x1f0/0x250 [ 235.641918][ T7124] ? rcu_is_watching+0x15/0xb0 [ 235.641968][ T7124] __x64_sys_bpf+0x7c/0x90 [ 235.641988][ T7124] do_syscall_64+0xf6/0x210 [ 235.642013][ T7124] ? clear_bhb_loop+0x45/0xa0 [ 235.642036][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.642055][ T7124] RIP: 0033:0x7fde7b98e969 [ 235.642071][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.642087][ T7124] RSP: 002b:00007fde7c82b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.642107][ T7124] RAX: ffffffffffffffda RBX: 00007fde7bbb5fa0 RCX: 00007fde7b98e969 [ 235.642121][ T7124] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 235.642137][ T7124] RBP: 00007fde7c82b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.642149][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.642160][ T7124] R13: 0000000000000000 R14: 00007fde7bbb5fa0 R15: 00007ffe91e17bc8 [ 235.642190][ T7124] [ 235.838824][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.250735][ T7132] siw: device registration error -23 [ 237.943498][ T5874] usb 3-1: USB disconnect, device number 16 [ 238.532390][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 238.915614][ T7149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 238.922195][ T7149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.978614][ T7149] vhci_hcd vhci_hcd.0: Device attached [ 239.146531][ T5908] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 239.173873][ T7155] dummy0: entered promiscuous mode [ 239.216705][ T5887] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 239.224308][ T7155] macsec2: entered allmulticast mode [ 239.234546][ T7155] dummy0: entered allmulticast mode [ 239.289570][ T7155] dummy0: left allmulticast mode [ 239.309437][ T30] audit: type=1326 audit(1746988965.846:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.318183][ T7161] netlink: 'syz.4.299': attribute type 21 has an invalid length. [ 239.339121][ T7155] dummy0: left promiscuous mode [ 239.356647][ T5908] usb 3-1: no configurations [ 239.361341][ T5908] usb 3-1: can't read configurations, error -22 [ 239.362117][ T30] audit: type=1326 audit(1746988965.846:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.408471][ T30] audit: type=1326 audit(1746988965.846:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.434389][ T30] audit: type=1326 audit(1746988965.846:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.451055][ T7167] netlink: 76 bytes leftover after parsing attributes in process `syz.3.298'. [ 239.470126][ T30] audit: type=1326 audit(1746988965.846:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.498648][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 239.498745][ T30] audit: type=1326 audit(1746988965.846:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.535601][ T7161] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 239.543869][ T7161] netlink: 132 bytes leftover after parsing attributes in process `syz.4.299'. [ 239.560938][ T30] audit: type=1326 audit(1746988965.846:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.612931][ T30] audit: type=1326 audit(1746988965.846:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.685740][ T30] audit: type=1326 audit(1746988965.846:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 239.712851][ T5908] usb 3-1: no configurations [ 239.717791][ T5908] usb 3-1: can't read configurations, error -22 [ 239.762030][ T7174] FAULT_INJECTION: forcing a failure. [ 239.762030][ T7174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.767941][ T5908] usb usb3-port1: attempt power cycle [ 239.821390][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.1.301 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 239.821419][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.821432][ T7174] Call Trace: [ 239.821440][ T7174] [ 239.821448][ T7174] dump_stack_lvl+0x189/0x250 [ 239.821486][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.821525][ T7174] ? __pfx__printk+0x10/0x10 [ 239.821569][ T7174] should_fail_ex+0x414/0x560 [ 239.821607][ T7174] _copy_to_user+0x31/0xb0 [ 239.821637][ T7174] simple_read_from_buffer+0xe1/0x170 [ 239.821672][ T7174] proc_fail_nth_read+0x1df/0x250 [ 239.821696][ T7174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.821720][ T7174] ? rw_verify_area+0x258/0x650 [ 239.821745][ T7174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.821766][ T7174] vfs_read+0x1fd/0x980 [ 239.821798][ T7174] ? __pfx___mutex_lock+0x10/0x10 [ 239.821826][ T7174] ? __pfx_vfs_read+0x10/0x10 [ 239.821853][ T7174] ? __fget_files+0x2a/0x420 [ 239.821888][ T7174] ? __fget_files+0x3a0/0x420 [ 239.821917][ T7174] ? __fget_files+0x2a/0x420 [ 239.821956][ T7174] ksys_read+0x145/0x250 [ 239.821981][ T7174] ? ldsem_up_read+0xcd/0x130 [ 239.822011][ T7174] ? __pfx_ksys_read+0x10/0x10 [ 239.822041][ T7174] ? do_syscall_64+0xba/0x210 [ 239.822069][ T7174] do_syscall_64+0xf6/0x210 [ 239.822095][ T7174] ? clear_bhb_loop+0x45/0xa0 [ 239.822119][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.822139][ T7174] RIP: 0033:0x7fde7b98d37c [ 239.822156][ T7174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.822172][ T7174] RSP: 002b:00007fde7c82b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.822193][ T7174] RAX: ffffffffffffffda RBX: 00007fde7bbb5fa0 RCX: 00007fde7b98d37c [ 239.822207][ T7174] RDX: 000000000000000f RSI: 00007fde7c82b0a0 RDI: 0000000000000007 [ 239.822219][ T7174] RBP: 00007fde7c82b090 R08: 0000000000000000 R09: 0000000000000000 [ 239.822231][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.822243][ T7174] R13: 0000000000000000 R14: 00007fde7bbb5fa0 R15: 00007ffe91e17bc8 [ 239.822282][ T7174] [ 240.041178][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.063914][ T30] audit: type=1326 audit(1746988965.846:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe9c118e969 code=0x7ffc0000 [ 240.085069][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.749974][ T5908] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.798180][ T5908] usb 3-1: no configurations [ 240.813084][ T5908] usb 3-1: can't read configurations, error -22 [ 240.986673][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 241.046973][ T5908] usb 3-1: no configurations [ 241.051651][ T5908] usb 3-1: can't read configurations, error -22 [ 241.152655][ T5908] usb usb3-port1: unable to enumerate USB device [ 241.288356][ T7198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.615033][ T7195] sp0: Synchronizing with TNC [ 241.846897][ T7150] vhci_hcd: connection reset by peer [ 241.880508][ T6285] vhci_hcd: stop threads [ 241.899058][ T6285] vhci_hcd: release socket [ 241.943922][ T6285] vhci_hcd: disconnect device [ 241.975548][ T7203] fuse: Bad value for 'group_id' [ 241.986664][ T7203] fuse: Bad value for 'group_id' [ 242.298015][ T5908] IPVS: starting estimator thread 0... [ 242.447802][ T7213] IPVS: using max 27 ests per chain, 64800 per kthread [ 243.316680][ T5908] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 243.889294][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 243.920915][ T5908] usb 3-1: config 252 has an invalid interface number: 138 but max is 0 [ 243.929892][ T5908] usb 3-1: config 252 has no interface number 0 [ 243.936221][ T5908] usb 3-1: config 252 interface 138 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 244.097589][ T5908] usb 3-1: config 252 interface 138 has no altsetting 0 [ 244.106106][ T7228] ======================================================= [ 244.106106][ T7228] WARNING: The mand mount option has been deprecated and [ 244.106106][ T7228] and is ignored by this kernel. Remove the mand [ 244.106106][ T7228] option from the mount to silence this warning. [ 244.106106][ T7228] ======================================================= [ 244.172251][ T5908] usb 3-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=32.4b [ 244.205949][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.306586][ T5887] vhci_hcd: vhci_device speed not set [ 245.696555][ T5908] usb 3-1: string descriptor 0 read error: -71 [ 245.758335][ T7235] loop8: detected capacity change from 0 to 8 [ 245.766395][ T5908] usb 3-1: USB disconnect, device number 21 [ 245.816875][ T7235] Dev loop8: unable to read RDB block 8 [ 245.847612][ T7235] loop8: unable to read partition table [ 245.868273][ T7235] loop8: partition table beyond EOD, truncated [ 245.896634][ T7235] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 245.952734][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'. [ 246.136810][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 246.258165][ T7250] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 246.290490][ T9] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 246.313675][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.327456][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 246.337554][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.349924][ T9] usb 4-1: config 0 descriptor?? [ 246.365283][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 246.425043][ T7250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.617724][ T7252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.635231][ T7252] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.918206][ T7252] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 249.116803][ T7273] netlink: 11 bytes leftover after parsing attributes in process `syz.1.324'. [ 249.850170][ T5877] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 250.552320][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 250.591880][ T5877] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 250.612667][ T7291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.629774][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.689353][ T5877] usb 2-1: config 0 descriptor?? [ 250.696931][ T7273] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 250.867052][ T7299] FAULT_INJECTION: forcing a failure. [ 250.867052][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.949304][ T7299] CPU: 0 UID: 0 PID: 7299 Comm: syz.0.332 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 250.949336][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.949348][ T7299] Call Trace: [ 250.949356][ T7299] [ 250.949378][ T7299] dump_stack_lvl+0x189/0x250 [ 250.949417][ T7299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.949444][ T7299] ? __pfx__printk+0x10/0x10 [ 250.949489][ T7299] should_fail_ex+0x414/0x560 [ 250.949541][ T7299] _copy_from_user+0x2d/0xb0 [ 250.949569][ T7299] __copy_msghdr+0x3c5/0x5b0 [ 250.949600][ T7299] ___sys_sendmsg+0x1a5/0x2a0 [ 250.949627][ T7299] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.949690][ T7299] ? __fget_files+0x2a/0x420 [ 250.949719][ T7299] ? __fget_files+0x3a0/0x420 [ 250.949758][ T7299] __sys_sendmmsg+0x227/0x430 [ 250.949789][ T7299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.949824][ T7299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.949867][ T7299] ? ksys_write+0x1f0/0x250 [ 250.949891][ T7299] ? rcu_is_watching+0x15/0xb0 [ 250.949929][ T7299] __x64_sys_sendmmsg+0xa0/0xc0 [ 250.949956][ T7299] do_syscall_64+0xf6/0x210 [ 250.949981][ T7299] ? clear_bhb_loop+0x45/0xa0 [ 250.950005][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.950022][ T7299] RIP: 0033:0x7f367578e969 [ 250.950047][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.950062][ T7299] RSP: 002b:00007f367665c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.950083][ T7299] RAX: ffffffffffffffda RBX: 00007f36759b5fa0 RCX: 00007f367578e969 [ 250.950097][ T7299] RDX: 0000000000000001 RSI: 000020000000a740 RDI: 0000000000000003 [ 250.950109][ T7299] RBP: 00007f367665c090 R08: 0000000000000000 R09: 0000000000000000 [ 250.950121][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.950132][ T7299] R13: 0000000000000000 R14: 00007f36759b5fa0 R15: 00007fff55a7e6f8 [ 250.950168][ T7299] [ 251.210473][ T5877] a4tech 0003:09DA:022B.0008: unknown main item tag 0x5 [ 251.293707][ T5866] usb 4-1: USB disconnect, device number 17 [ 251.301724][ T5877] a4tech 0003:09DA:022B.0008: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 252.378692][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 252.642283][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 252.650176][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.674871][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.682622][ T5877] usb 2-1: reset full-speed USB device number 8 using dummy_hcd [ 253.045750][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 253.069176][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.130670][ T9] usb 3-1: config 0 descriptor?? [ 254.543628][ T5874] usb 2-1: USB disconnect, device number 8 [ 254.705629][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.764960][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.929613][ T7347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.036805][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.056783][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 255.062847][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.121776][ T9] usb 3-1: USB disconnect, device number 22 [ 255.140729][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 255.183155][ T7356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.344'. [ 255.201238][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 255.214238][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.255506][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.622856][ T7315] syz.2.335 (7315) used greatest stack depth: 19336 bytes left [ 255.819482][ T7371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.877043][ T5874] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 255.886196][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.904520][ T5874] usb 2-1: config 0 descriptor?? [ 255.917938][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 255.917951][ T30] audit: type=1400 audit(1746988982.406:31): lsm=SMACK fn=smack_file_receive action=denied subject="y" object="_" requested=w pid=7369 comm="syz.3.346" path="pipe:[4529]" dev="pipefs" ino=4529 [ 255.973171][ T30] audit: type=1400 audit(1746988982.456:32): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=7369 comm="syz.3.346" path="/dev/uinput" dev="devtmpfs" ino=920 [ 256.083611][ T30] audit: type=1400 audit(1746988982.476:33): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=7369 comm="syz.3.346" path="/dev/uinput" dev="devtmpfs" ino=920 [ 256.498299][ T7380] netlink: 11 bytes leftover after parsing attributes in process `syz.3.348'. [ 257.565112][ T7393] fuse: Bad value for 'fd' [ 257.804809][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 258.755348][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 258.920176][ T9] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 259.186411][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.234015][ T9] usb 4-1: config 0 descriptor?? [ 259.262968][ T5874] usbhid 2-1:0.0: can't add hid device: -71 [ 259.288241][ T9] usb 4-1: can't set config #0, error -71 [ 259.293208][ T5874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 259.316184][ T9] usb 4-1: USB disconnect, device number 18 [ 259.360901][ T5874] usb 2-1: USB disconnect, device number 9 [ 259.392203][ T7405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.413838][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 259.476299][ T7407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.356'. [ 259.737164][ T1207] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 259.791703][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 259.949972][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 260.296818][ T5874] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.736786][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 260.771428][ T1207] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.781661][ T1207] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 260.794217][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.807371][ T1207] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.830334][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.846344][ T5874] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 260.855610][ T1207] usb 3-1: Product: syz [ 260.855631][ T1207] usb 3-1: Manufacturer: syz [ 260.855647][ T1207] usb 3-1: SerialNumber: syz [ 260.894686][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.918603][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.944173][ T5874] usb 2-1: Product: syz [ 260.949807][ T5874] usb 2-1: Manufacturer: syz [ 260.960503][ T5874] usb 2-1: SerialNumber: syz [ 262.117935][ T7442] siw: device registration error -23 [ 262.155641][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.240016][ T7444] siw: device registration error -23 [ 262.281822][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.404400][ T5866] usb 3-1: USB disconnect, device number 23 [ 265.418200][ T5874] usb 2-1: USB disconnect, device number 10 [ 265.439620][ T7449] netlink: 11 bytes leftover after parsing attributes in process `syz.3.365'. [ 265.627262][ T7457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.787150][ T5877] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 265.808388][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 265.837024][ T7459] netlink: 52 bytes leftover after parsing attributes in process `syz.1.369'. [ 265.897606][ T7466] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 265.904183][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.955789][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 266.069306][ T30] audit: type=1326 audit(1746988992.596:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.1.373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde7b98e969 code=0x0 [ 266.148271][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 266.165034][ T5877] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 266.181294][ T7474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.186584][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.218914][ T7474] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 266.243103][ T5877] usb 4-1: config 0 descriptor?? [ 266.254211][ T7454] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.886201][ T1207] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 266.894133][ T5908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.067980][ T5877] usbhid 4-1:0.0: can't add hid device: -71 [ 267.074053][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 267.089201][ T5877] usb 4-1: USB disconnect, device number 19 [ 267.122510][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 267.159364][ T5908] usb 1-1: can't read configurations, error -61 [ 267.226612][ T7479] geneve2: entered promiscuous mode [ 267.255235][ T7479] geneve2: entered allmulticast mode [ 267.316675][ T5908] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 267.488396][ T5866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 267.656930][ T5877] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 267.726766][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 267.872378][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.986665][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 267.992856][ T5866] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 268.014978][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.038393][ T5877] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 268.055158][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.071479][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 268.079485][ T5908] usb 1-1: can't read configurations, error -61 [ 268.086201][ T5908] usb usb1-port1: attempt power cycle [ 268.202547][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.212031][ T5866] usb 2-1: Product: syz [ 268.217111][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.227625][ T5866] usb 2-1: Manufacturer: syz [ 268.232248][ T5866] usb 2-1: SerialNumber: syz [ 268.238898][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.250153][ T5877] usb 4-1: Product: syz [ 268.255054][ T5877] usb 4-1: Manufacturer: syz [ 268.260108][ T5877] usb 4-1: SerialNumber: syz [ 268.426563][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 268.875303][ T7501] siw: device registration error -23 [ 269.417057][ T7502] siw: device registration error -23 [ 270.203094][ T5908] usb 1-1: device descriptor read/8, error -71 [ 270.218940][ T7467] vhci_hcd: connection reset by peer [ 270.296132][ T3517] vhci_hcd: stop threads [ 270.324517][ T3517] vhci_hcd: release socket [ 270.406668][ T3517] vhci_hcd: disconnect device [ 270.506813][ T7508] openvswitch: netlink: Actions may not be safe on all matching packets [ 270.594330][ T5866] usb 2-1: USB disconnect, device number 11 [ 270.603139][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.384'. [ 270.778613][ T5908] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 270.850999][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 270.878361][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.906794][ T5908] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 270.915898][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.961588][ T5908] usb 1-1: config 0 descriptor?? [ 271.080895][ T9] usb 4-1: USB disconnect, device number 20 [ 271.480474][ T7523] netlink: 11 bytes leftover after parsing attributes in process `syz.3.387'. [ 272.136613][ T1207] vhci_hcd: vhci_device speed not set [ 272.446741][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 272.751439][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 272.782223][ T9] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 272.812360][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.859859][ T9] usb 4-1: config 0 descriptor?? [ 272.873038][ T7524] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.966527][ T5908] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 273.137990][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 273.155668][ T5908] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 273.175537][ T5908] usb 2-1: config 0 has no interface number 0 [ 273.189217][ T5908] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 273.199936][ T5908] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 273.214205][ T5908] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 273.223929][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.232385][ T5908] usb 2-1: Product: syz [ 273.253135][ T5908] usb 2-1: Manufacturer: syz [ 273.268520][ T5908] usb 2-1: SerialNumber: syz [ 273.313233][ T5908] usb 2-1: config 0 descriptor?? [ 273.324405][ T9] a4tech 0003:09DA:022B.0009: unknown main item tag 0x5 [ 273.341483][ T7529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 273.356312][ T7529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 273.367823][ T9] a4tech 0003:09DA:022B.0009: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.3-1/input0 [ 273.396005][ T5908] usb-storage 2-1:0.20: USB Mass Storage device detected [ 273.458069][ T5908] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 273.598305][ T5908] scsi host1: usb-storage 2-1:0.20 [ 273.684405][ T5908] usb 2-1: USB disconnect, device number 12 [ 273.872001][ T9] usb 1-1: USB disconnect, device number 10 [ 274.056697][ T7562] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 274.063266][ T7562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.086624][ T5866] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 274.117212][ T7562] vhci_hcd vhci_hcd.0: Device attached [ 274.258524][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 274.276615][ T5866] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 274.285762][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.299902][ T5866] usb 3-1: config 0 descriptor?? [ 274.314490][ T7554] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 274.356549][ T5874] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 274.368182][ T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 274.496640][ T1207] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 274.656553][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 274.665826][ T1207] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.694666][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 274.835361][ T47] usb 1-1: can't read configurations, error -61 [ 275.205734][ T1207] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 275.218092][ T1207] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.238924][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.257264][ T1207] usb 2-1: Product: syz [ 275.297561][ T5866] elan 0003:04F3:0755.000A: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 275.335347][ T5866] usb 3-1: USB disconnect, device number 24 [ 275.341776][ T5877] usb 4-1: USB disconnect, device number 21 [ 275.388488][ T1207] usb 2-1: Manufacturer: syz [ 275.393483][ T1207] usb 2-1: SerialNumber: syz [ 275.406922][ T47] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 275.593650][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 275.749434][ T47] usb 1-1: can't read configurations, error -61 [ 276.599218][ T5877] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 276.718328][ T7592] siw: device registration error -23 [ 276.762326][ T47] usb usb1-port1: attempt power cycle [ 276.956602][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 277.160259][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.365391][ T47] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 277.380116][ T5877] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 277.480791][ T7588] fido_id[7588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 277.516679][ T47] usb 1-1: device descriptor read/8, error -71 [ 277.536600][ T7563] vhci_hcd: connection reset by peer [ 277.539136][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.565794][ T6287] vhci_hcd: stop threads [ 277.576633][ T6287] vhci_hcd: release socket [ 277.585369][ T6287] vhci_hcd: disconnect device [ 277.592105][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.606260][ T5877] usb 4-1: Product: syz [ 277.611284][ T5877] usb 4-1: Manufacturer: syz [ 277.616052][ T5877] usb 4-1: SerialNumber: syz [ 278.214926][ T7606] siw: device registration error -23 [ 278.822586][ T1207] usb 2-1: USB disconnect, device number 13 [ 278.967900][ T7609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.035742][ T30] audit: type=1400 audit(1746989005.566:35): lsm=SMACK fn=smack_file_receive action=denied subject="y" object="_" requested=w pid=7608 comm="syz.0.403" path="pipe:[4518]" dev="pipefs" ino=4518 [ 279.211920][ T30] audit: type=1400 audit(1746989005.566:36): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=7608 comm="syz.0.403" path="/dev/uinput" dev="devtmpfs" ino=920 [ 279.420466][ T30] audit: type=1400 audit(1746989005.596:37): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=7608 comm="syz.0.403" path="/dev/uinput" dev="devtmpfs" ino=920 [ 279.583047][ T5874] vhci_hcd: vhci_device speed not set [ 280.049899][ T47] usb 4-1: USB disconnect, device number 22 [ 280.153790][ T7624] netlink: 11 bytes leftover after parsing attributes in process `syz.2.407'. [ 280.467553][ T5866] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 282.448393][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 282.472651][ T5866] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 282.499009][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.535770][ T5866] usb 3-1: config 0 descriptor?? [ 282.547248][ T7627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.656646][ T1207] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.847056][ T1207] usb 1-1: Using ep0 maxpacket: 16 [ 283.076989][ T7637] FAULT_INJECTION: forcing a failure. [ 283.076989][ T7637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.150519][ T1207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.181513][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.1.412 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 283.181543][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.181554][ T7637] Call Trace: [ 283.181562][ T7637] [ 283.181570][ T7637] dump_stack_lvl+0x189/0x250 [ 283.181618][ T7637] ? __lock_acquire+0xaac/0xd20 [ 283.181659][ T7637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.181685][ T7637] ? __pfx__printk+0x10/0x10 [ 283.181719][ T7637] ? __might_fault+0xb0/0x130 [ 283.181759][ T7637] should_fail_ex+0x414/0x560 [ 283.181805][ T7637] _copy_from_user+0x2d/0xb0 [ 283.181829][ T7637] io_submit_one+0xc2/0x1240 [ 283.181864][ T7637] ? __lock_acquire+0xaac/0xd20 [ 283.181891][ T7637] ? __pfx_io_submit_one+0x10/0x10 [ 283.181918][ T7637] ? __might_fault+0xb0/0x130 [ 283.181971][ T7637] ? __might_fault+0xb0/0x130 [ 283.182002][ T7637] __se_sys_io_submit+0x185/0x2f0 [ 283.182038][ T7637] ? __pfx___se_sys_io_submit+0x10/0x10 [ 283.182062][ T7637] ? ksys_write+0x1f0/0x250 [ 283.182097][ T7637] ? do_syscall_64+0xba/0x210 [ 283.182124][ T7637] do_syscall_64+0xf6/0x210 [ 283.182147][ T7637] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.182168][ T7637] ? clear_bhb_loop+0x45/0xa0 [ 283.182191][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.182209][ T7637] RIP: 0033:0x7fde7b98e969 [ 283.182227][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.182255][ T7637] RSP: 002b:00007fde7c82b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 283.182276][ T7637] RAX: ffffffffffffffda RBX: 00007fde7bbb5fa0 RCX: 00007fde7b98e969 [ 283.182289][ T7637] RDX: 00002000000005c0 RSI: 000000000000047f RDI: 00007fde7c802000 [ 283.182301][ T7637] RBP: 00007fde7c82b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.182312][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.182323][ T7637] R13: 0000000000000000 R14: 00007fde7bbb5fa0 R15: 00007ffe91e17bc8 [ 283.182350][ T7637] [ 283.185496][ T5866] a4tech 0003:09DA:022B.000B: unknown main item tag 0x5 [ 283.214751][ T1207] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 284.065633][ T5866] a4tech 0003:09DA:022B.000B: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.2-1/input0 [ 284.596481][ T1207] usb 1-1: config 1 has no interface number 0 [ 285.046721][ T5866] usb 3-1: USB disconnect, device number 25 [ 285.056833][ T1207] usb 1-1: string descriptor 0 read error: -71 [ 285.063172][ T1207] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 285.093711][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.120682][ T1207] usb 1-1: can't set config #1, error -71 [ 285.197052][ T1207] usb 1-1: USB disconnect, device number 15 [ 285.278394][ T7653] fido_id[7653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 285.316401][ T7661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.079619][ T30] audit: type=1400 audit(1746989012.586:38): lsm=SMACK fn=smack_file_receive action=denied subject="y" object="_" requested=w pid=7657 comm="syz.4.416" path="pipe:[4532]" dev="pipefs" ino=4532 [ 286.229428][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 286.256532][ T30] audit: type=1400 audit(1746989012.606:39): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=7657 comm="syz.4.416" path="/dev/uinput" dev="devtmpfs" ino=920 [ 286.308239][ T7664] Failed to get privilege flags for destination (handle=0x2:0x9) [ 286.369152][ T30] audit: type=1400 audit(1746989012.606:40): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=7657 comm="syz.4.416" path="/dev/uinput" dev="devtmpfs" ino=920 [ 286.759275][ T5877] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 287.036785][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 287.310980][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.348511][ T5877] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 287.389296][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.409922][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.426601][ T5877] usb 4-1: Product: syz [ 287.430888][ T5877] usb 4-1: Manufacturer: syz [ 287.435586][ T5877] usb 4-1: SerialNumber: syz [ 288.156330][ T7690] siw: device registration error -23 [ 288.841504][ T7693] fuse: Bad value for 'group_id' [ 288.846688][ T7693] fuse: Bad value for 'group_id' [ 289.118557][ T7698] FAULT_INJECTION: forcing a failure. [ 289.118557][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 289.131441][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.4.430 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 289.131488][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.131499][ T7698] Call Trace: [ 289.131507][ T7698] [ 289.131515][ T7698] dump_stack_lvl+0x189/0x250 [ 289.131547][ T7698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.131571][ T7698] ? __pfx__printk+0x10/0x10 [ 289.131604][ T7698] ? __pfx___might_resched+0x10/0x10 [ 289.131630][ T7698] ? fs_reclaim_acquire+0x7d/0x100 [ 289.131654][ T7698] should_fail_ex+0x414/0x560 [ 289.131688][ T7698] should_failslab+0xa8/0x100 [ 289.131717][ T7698] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 289.131743][ T7698] ? hugetlbfs_alloc_inode+0xef/0x130 [ 289.131773][ T7698] hugetlbfs_alloc_inode+0xef/0x130 [ 289.131814][ T7698] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 289.131837][ T7698] alloc_inode+0x67/0x1b0 [ 289.131866][ T7698] new_inode+0x22/0x170 [ 289.131894][ T7698] ? resv_map_alloc+0x1da/0x2c0 [ 289.131920][ T7698] hugetlbfs_get_inode+0x80/0x660 [ 289.131943][ T7698] ? fput+0xa0/0xd0 [ 289.131966][ T7698] hugetlb_file_setup+0x21d/0x630 [ 289.132003][ T7698] ksys_mmap_pgoff+0x22f/0x760 [ 289.132037][ T7698] do_syscall_64+0xf6/0x210 [ 289.132061][ T7698] ? clear_bhb_loop+0x45/0xa0 [ 289.132084][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.132101][ T7698] RIP: 0033:0x7fe9c118e969 [ 289.132117][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.132133][ T7698] RSP: 002b:00007fe9c20a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 289.132152][ T7698] RAX: ffffffffffffffda RBX: 00007fe9c13b5fa0 RCX: 00007fe9c118e969 [ 289.132166][ T7698] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 289.132196][ T7698] RBP: 00007fe9c20a2090 R08: ffffffffffffffff R09: 0000000000000000 [ 289.132208][ T7698] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 289.132220][ T7698] R13: 0000000000000000 R14: 00007fe9c13b5fa0 R15: 00007fffdef74f88 [ 289.132261][ T7698] [ 289.431800][ T7699] input: syz1 as /devices/virtual/input/input13 [ 289.445255][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 290.506728][ T5866] usb 4-1: USB disconnect, device number 23 [ 290.979204][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 291.655127][ T7722] netlink: 'syz.4.438': attribute type 3 has an invalid length. [ 291.823587][ T7728] veth1_macvtap: left promiscuous mode [ 291.837734][ T7728] macsec0: entered promiscuous mode [ 292.777548][ T7731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.433'. [ 294.307590][ T5866] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 294.315634][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 294.526628][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 294.533912][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.565364][ T5866] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 294.638475][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.683374][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.778916][ T5866] usb 2-1: Product: syz [ 294.798085][ T5866] usb 2-1: Manufacturer: syz [ 294.802968][ T5866] usb 2-1: SerialNumber: syz [ 294.931986][ T30] audit: type=1326 audit(1746989021.466:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7766 comm="syz.0.451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f367578e969 code=0x0 [ 295.136759][ T5887] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 295.227397][ T7772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.380248][ T7773] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 295.461516][ T7775] siw: device registration error -23 [ 296.031950][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 296.072354][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.120808][ T5887] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 296.162617][ T5887] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.187866][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.195899][ T5887] usb 3-1: Product: syz [ 296.245728][ T5887] usb 3-1: Manufacturer: syz [ 296.412459][ T5887] usb 3-1: SerialNumber: syz [ 297.785510][ T7582] usb 2-1: USB disconnect, device number 14 [ 298.240583][ T7789] siw: device registration error -23 [ 299.598966][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.1.455'. [ 299.790621][ T5866] usb 3-1: USB disconnect, device number 26 [ 299.949580][ T7804] netlink: 52 bytes leftover after parsing attributes in process `syz.4.459'. [ 300.066536][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 300.256070][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 300.289861][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.314824][ T9] usb 4-1: config 0 descriptor?? [ 302.209110][ T9] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 303.367297][ T30] audit: type=1326 audit(1746989029.796:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7805 comm="syz.3.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f012f78e969 code=0x0 [ 303.639892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db55000: rx timeout, send abort [ 304.144327][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880247e6400: rx timeout, send abort [ 304.156453][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db55000: abort rx timeout. Force session deactivation [ 304.652615][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880247e6400: abort rx timeout. Force session deactivation [ 305.096809][ T7582] usb 4-1: USB disconnect, device number 24 [ 306.086530][ T7582] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 306.245455][ T7865] syzkaller1: entered promiscuous mode [ 306.258469][ T7865] syzkaller1: entered allmulticast mode [ 306.449809][ T7582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.461051][ T7582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.486082][ T7582] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 306.580706][ T7582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.882913][ T7582] usb 4-1: config 0 descriptor?? [ 307.421666][ T7582] kone 0003:1E7D:2CED.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 307.620185][ T5908] usb 4-1: USB disconnect, device number 25 [ 308.267770][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 308.279133][ T7883] fido_id[7883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 308.299718][ T7891] netlink: 52 bytes leftover after parsing attributes in process `syz.3.485'. [ 308.618193][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 308.627288][ T7902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.645145][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.297589][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.412327][ T7912] FAULT_INJECTION: forcing a failure. [ 309.412327][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 309.425307][ T7912] CPU: 1 UID: 0 PID: 7912 Comm: syz.2.490 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 309.425329][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.425340][ T7912] Call Trace: [ 309.425348][ T7912] [ 309.425356][ T7912] dump_stack_lvl+0x189/0x250 [ 309.425388][ T7912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.425412][ T7912] ? __pfx__printk+0x10/0x10 [ 309.425444][ T7912] ? __pfx___might_resched+0x10/0x10 [ 309.425474][ T7912] should_fail_ex+0x414/0x560 [ 309.425507][ T7912] should_failslab+0xa8/0x100 [ 309.425535][ T7912] __kmalloc_noprof+0xcb/0x4f0 [ 309.425567][ T7912] ? io_cache_alloc_new+0x40/0x100 [ 309.425596][ T7912] io_cache_alloc_new+0x40/0x100 [ 309.425621][ T7912] io_rsrc_node_alloc+0x172/0x280 [ 309.425648][ T7912] io_register_clone_buffers+0x8c7/0xbf0 [ 309.425684][ T7912] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 309.425712][ T7912] ? __se_sys_io_uring_register+0x7e4/0x11b0 [ 309.425741][ T7912] __se_sys_io_uring_register+0x7f4/0x11b0 [ 309.425770][ T7912] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 309.425792][ T7912] ? ksys_write+0x1f0/0x250 [ 309.425813][ T7912] ? rcu_is_watching+0x15/0xb0 [ 309.425846][ T7912] ? do_syscall_64+0xba/0x210 [ 309.425889][ T7912] do_syscall_64+0xf6/0x210 [ 309.425910][ T7912] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 309.425936][ T7912] ? clear_bhb_loop+0x45/0xa0 [ 309.425958][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.425976][ T7912] RIP: 0033:0x7f582a98e969 [ 309.425992][ T7912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.426009][ T7912] RSP: 002b:00007f582b85f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 309.426029][ T7912] RAX: ffffffffffffffda RBX: 00007f582abb6160 RCX: 00007f582a98e969 [ 309.426042][ T7912] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 309.426055][ T7912] RBP: 00007f582b85f090 R08: 0000000000000000 R09: 0000000000000000 [ 309.426066][ T7912] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 309.426077][ T7912] R13: 0000000000000000 R14: 00007f582abb6160 R15: 00007fff0ac04368 [ 309.426106][ T7912] [ 310.487968][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 310.688135][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 310.716750][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 311.736495][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 311.741746][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 311.752979][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.764141][ T5887] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 311.773315][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.796627][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 311.808345][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.826610][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.836341][ T5887] usb 2-1: Product: syz [ 311.842197][ T5887] usb 2-1: Manufacturer: syz [ 311.847288][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.856362][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.864926][ T5887] usb 2-1: SerialNumber: syz [ 311.871449][ T9] usb 5-1: Product: syz [ 311.876032][ T9] usb 5-1: Manufacturer: syz [ 311.897435][ T9] usb 5-1: SerialNumber: syz [ 312.091652][ T7934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.412033][ T7939] siw: device registration error -23 [ 313.038361][ T7942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.499'. [ 313.047894][ T7942] netlink: 52 bytes leftover after parsing attributes in process `syz.3.499'. [ 313.080215][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 313.120144][ T7944] Failed to get privilege flags for destination (handle=0x2:0x9) [ 313.132603][ T7938] netlink: 52 bytes leftover after parsing attributes in process `syz.0.498'. [ 313.905101][ T7954] veth1_macvtap: left promiscuous mode [ 313.910818][ T7954] macsec0: entered promiscuous mode [ 314.166598][ T5887] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 314.192770][ T47] usb 2-1: USB disconnect, device number 15 [ 314.380740][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 314.422031][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.471254][ T5887] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 314.510836][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.536608][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.575425][ T5887] usb 4-1: Product: syz [ 315.342675][ T5887] usb 4-1: Manufacturer: syz [ 315.599902][ T5887] usb 4-1: SerialNumber: syz [ 315.762240][ T5908] usb 5-1: USB disconnect, device number 10 [ 316.985634][ T7974] siw: device registration error -23 [ 318.438125][ T5887] usb 4-1: USB disconnect, device number 26 [ 318.582225][ T30] audit: type=1326 audit(1746989045.116:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7975 comm="syz.0.512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f367578e969 code=0x0 [ 318.639229][ T7979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.755713][ T7985] FAULT_INJECTION: forcing a failure. [ 318.755713][ T7985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.780246][ T7983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.828807][ T7979] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 318.845016][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.2.514 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 318.845056][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.845067][ T7985] Call Trace: [ 318.845075][ T7985] [ 318.845089][ T7985] dump_stack_lvl+0x189/0x250 [ 318.845123][ T7985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.845148][ T7985] ? __pfx__printk+0x10/0x10 [ 318.845188][ T7985] should_fail_ex+0x414/0x560 [ 318.845222][ T7985] _copy_to_user+0x31/0xb0 [ 318.845250][ T7985] vfs_readlink+0x1d2/0x550 [ 318.845281][ T7985] ? __pfx_vfs_readlink+0x10/0x10 [ 318.845316][ T7985] ? getname_flags+0x1e5/0x540 [ 318.845337][ T7985] do_readlinkat+0x215/0x500 [ 318.845361][ T7985] ? __pfx_do_readlinkat+0x10/0x10 [ 318.845378][ T7985] ? ksys_write+0x1f0/0x250 [ 318.845411][ T7985] __x64_sys_readlinkat+0x9a/0xb0 [ 318.845432][ T7985] do_syscall_64+0xf6/0x210 [ 318.845455][ T7985] ? clear_bhb_loop+0x45/0xa0 [ 318.845475][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.845492][ T7985] RIP: 0033:0x7f582a98e969 [ 318.845508][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.845523][ T7985] RSP: 002b:00007f582b8a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 318.845543][ T7985] RAX: ffffffffffffffda RBX: 00007f582abb5fa0 RCX: 00007f582a98e969 [ 318.845556][ T7985] RDX: ffffffffffffffff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 318.845569][ T7985] RBP: 00007f582b8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 318.845581][ T7985] R10: 00000000000000b4 R11: 0000000000000246 R12: 0000000000000001 [ 318.845592][ T7985] R13: 0000000000000000 R14: 00007f582abb5fa0 R15: 00007fff0ac04368 [ 318.845620][ T7985] [ 321.374488][ T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 321.498238][ T7582] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 321.562194][ T8014] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 321.606507][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 321.817159][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.854273][ T7582] usb 4-1: Using ep0 maxpacket: 16 [ 321.905289][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.953308][ T7582] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.963723][ T47] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 321.974606][ T7582] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 321.991438][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.005416][ T7582] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.014913][ T7582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.029305][ T47] usb 2-1: config 0 descriptor?? [ 322.035988][ T7582] usb 4-1: Product: syz [ 322.059365][ T7582] usb 4-1: Manufacturer: syz [ 322.072946][ T7582] usb 4-1: SerialNumber: syz [ 322.287387][ T47] usbhid 2-1:0.0: can't add hid device: -71 [ 322.314446][ T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 322.559950][ T47] usb 2-1: USB disconnect, device number 16 [ 322.682886][ T8032] siw: device registration error -23 [ 323.473054][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.481923][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.397908][ T7582] usb 4-1: USB disconnect, device number 27 [ 325.726487][ T30] audit: type=1326 audit(1746989052.256:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8056 comm="syz.4.531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9c118e969 code=0x0 [ 325.789049][ T8058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.850565][ T8060] netlink: 'syz.1.534': attribute type 16 has an invalid length. [ 325.872333][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 325.899585][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 326.349270][ T8046] xt_hashlimit: size too large, truncated to 1048576 [ 327.893731][ T8081] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 327.976669][ T5887] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 328.159033][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 328.182009][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.198198][ T5887] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 328.222778][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.241773][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.258765][ T5887] usb 2-1: Product: syz [ 328.268330][ T5887] usb 2-1: Manufacturer: syz [ 328.283612][ T5887] usb 2-1: SerialNumber: syz [ 328.923206][ T8089] siw: device registration error -23 [ 331.510904][ T5887] usb 2-1: USB disconnect, device number 17 [ 331.552762][ T8101] netlink: 11 bytes leftover after parsing attributes in process `syz.1.546'. [ 331.653969][ T30] audit: type=1326 audit(1746989058.186:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8102 comm="syz.2.547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f582a98e969 code=0x0 [ 331.711105][ T8106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.957854][ T5887] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 331.970192][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 223 [ 332.252759][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 332.969361][ T5887] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 332.997456][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.026641][ T5887] usb 2-1: config 0 descriptor?? [ 333.044912][ T8101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.467273][ T5887] a4tech 0003:09DA:022B.000D: unknown main item tag 0x5 [ 333.507434][ T5887] a4tech 0003:09DA:022B.000D: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 334.024952][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'. [ 334.046281][ T8142] netlink: 52 bytes leftover after parsing attributes in process `syz.0.556'. [ 334.237844][ T8149] lo speed is unknown, defaulting to 1000 [ 334.486126][ T30] audit: type=1326 audit(1746989061.016:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8161 comm="syz.2.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f582a98e969 code=0x0 [ 334.639158][ T8163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.998700][ T7582] usb 2-1: USB disconnect, device number 18 [ 335.852137][ T8176] xt_hashlimit: size too large, truncated to 1048576 [ 336.381993][ T8175] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 336.381993][ T8175] program syz.0.562 not setting count and/or reply_len properly [ 337.565287][ T8201] fuse: Bad value for 'fd' [ 338.475400][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 338.496041][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 338.616250][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 338.625401][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 338.626814][ T5908] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 338.814377][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 338.826769][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.858283][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.889899][ T5908] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 338.926469][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.947057][ T5908] usb 1-1: config 0 descriptor?? [ 338.985316][ T30] audit: type=1326 audit(1746989065.516:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8219 comm="syz.3.577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f012f78e969 code=0x0 [ 339.038927][ T8221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.046287][ T1207] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 339.216660][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 339.226918][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.256667][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.276792][ T1207] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 339.285887][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.438828][ T5908] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 339.471427][ T1207] usb 2-1: config 0 descriptor?? [ 339.525107][ T5908] holtek 0003:1241:5015.000E: unknown main item tag 0x0 [ 339.599133][ T8228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 339.605697][ T8228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.649934][ T5908] holtek 0003:1241:5015.000E: item fetching failed at offset 2/5 [ 339.852238][ T5908] holtek 0003:1241:5015.000E: parse failed [ 340.023072][ T5908] holtek 0003:1241:5015.000E: probe with driver holtek failed with error -22 [ 340.147320][ T8228] vhci_hcd vhci_hcd.0: Device attached [ 340.234873][ T5908] usb 1-1: USB disconnect, device number 16 [ 340.268043][ T8218] xt_ipcomp: unknown flags 12 [ 340.512079][ T47] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 340.611778][ T7582] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 341.021678][ T7582] usb 3-1: config 0 has no interfaces? [ 341.044846][ T7582] usb 3-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 341.067506][ T7582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.077383][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 341.103449][ T7582] usb 3-1: config 0 descriptor?? [ 341.136973][ T8249] netlink: 27 bytes leftover after parsing attributes in process `syz.0.585'. [ 341.184488][ T8247] Failed to get privilege flags for destination (handle=0x2:0x9) [ 341.230051][ T1207] usbhid 2-1:0.0: can't add hid device: -71 [ 341.244503][ T1207] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 341.267400][ T1207] usb 2-1: USB disconnect, device number 19 [ 341.324770][ T8229] usbip_core: unknown command [ 341.356864][ T8229] vhci_hcd: unknown pdu 808464432 [ 341.372679][ T8229] usbip_core: unknown command [ 341.378924][ T5874] usb 3-1: USB disconnect, device number 27 [ 341.390020][ T3017] vhci_hcd: stop threads [ 341.403643][ T3017] vhci_hcd: release socket [ 341.412204][ T3017] vhci_hcd: disconnect device [ 341.966940][ T1207] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 342.153370][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 342.185503][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.217243][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.264816][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 342.285963][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 342.315317][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.356790][ T1207] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.388490][ T1207] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.416290][ T1207] usb 4-1: Manufacturer: syz [ 342.441113][ T1207] usb 4-1: config 0 descriptor?? [ 342.700379][ T8257] fuse: Unknown parameter 'gmoup_id' [ 342.975036][ T30] audit: type=1326 audit(1746989069.506:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8264 comm="syz.0.591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f367578e969 code=0x0 [ 343.077884][ T8266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.712721][ T1207] rc_core: IR keymap rc-hauppauge not found [ 343.712741][ T1207] Registered IR keymap rc-empty [ 343.713482][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.732977][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.748566][ T1207] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 343.750972][ T1207] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 343.802097][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.840043][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.858867][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.881924][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 343.906463][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 344.035002][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 344.056633][ T8284] netlink: 27 bytes leftover after parsing attributes in process `syz.2.596'. [ 344.077023][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 344.097861][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 344.176470][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 344.216984][ T1207] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 344.314161][ T1207] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 344.377070][ T1207] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 344.920072][ T1207] usb 4-1: USB disconnect, device number 28 [ 345.085438][ T8300] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 345.092003][ T8300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.152028][ T8300] vhci_hcd vhci_hcd.0: Device attached [ 345.396681][ T5874] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 345.476832][ T5866] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 345.688186][ T47] vhci_hcd: vhci_device speed not set [ 345.753670][ T5866] usb 2-1: config 0 has no interfaces? [ 345.839597][ T5866] usb 2-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 346.000642][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.081620][ T5866] usb 2-1: config 0 descriptor?? [ 346.264178][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.597'. [ 346.380570][ T8302] usbip_core: unknown command [ 346.432431][ T8302] vhci_hcd: unknown pdu 808464432 [ 346.438559][ T8302] usbip_core: unknown command [ 346.461630][ T6287] vhci_hcd: stop threads [ 346.465912][ T6287] vhci_hcd: release socket [ 346.471040][ T5887] usb 2-1: USB disconnect, device number 20 [ 346.939414][ T8308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.993675][ T6287] vhci_hcd: disconnect device [ 347.027962][ T8308] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 347.142340][ T8308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.193325][ T8308] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 347.236879][ T8308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.243184][ T8308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 347.298633][ T8308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.305138][ T8308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 347.345468][ T8308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 347.366633][ T8308] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 348.451030][ T7582] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 348.458735][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 349.008773][ T9] IPVS: starting estimator thread 0... [ 349.053543][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 349.136476][ T7582] usb 3-1: Using ep0 maxpacket: 16 [ 349.144373][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 349.156747][ T7582] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.177187][ T7582] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 349.186712][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.203028][ T8335] IPVS: using max 32 ests per chain, 76800 per kthread [ 349.218865][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 349.227410][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.248488][ T7582] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.257592][ T30] audit: type=1400 audit(1746989075.776:49): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=8337 comm="syz.0.611" path="/dev/uinput" dev="devtmpfs" ino=920 [ 349.257637][ T30] audit: type=1400 audit(1746989075.776:50): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=8337 comm="syz.0.611" path="/dev/uinput" dev="devtmpfs" ino=920 [ 349.296586][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 349.306602][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 349.356470][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 349.356609][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 349.373969][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 349.412222][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.662563][ T47] usb 5-1: string descriptor 0 read error: -71 [ 349.676305][ T7582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.702643][ T47] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.139429][ T8351] input: syz1 as /devices/virtual/input/input18 [ 350.185830][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 350.685113][ T7582] usb 3-1: Product: syz [ 350.699527][ T7582] usb 3-1: Manufacturer: syz [ 350.720025][ T47] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.740932][ T7582] usb 3-1: SerialNumber: syz [ 350.747275][ T5874] vhci_hcd: vhci_device speed not set [ 351.116825][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 351.176940][ T47] usb 5-1: config 0 descriptor?? [ 351.256787][ T47] usb 5-1: can't set config #0, error -71 [ 351.276712][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 351.315560][ T47] usb 5-1: USB disconnect, device number 11 [ 351.359829][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 351.396631][ T7582] usb 3-1: can't set config #1, error -71 [ 351.440773][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 351.440800][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 351.520599][ T7582] usb 3-1: USB disconnect, device number 28 [ 352.186559][ T8367] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 352.193125][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.336126][ T8370] mmap: syz.0.618 (8370): VmData 37896192 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 352.592485][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 353.248601][ T7582] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 353.262732][ T5874] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 353.615169][ T5874] usb 3-1: config 0 has no interfaces? [ 353.620933][ T5874] usb 3-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 353.644584][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.688823][ T5874] usb 3-1: config 0 descriptor?? [ 353.845002][ T8386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.872031][ T30] audit: type=1400 audit(1746989080.406:51): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=8385 comm="syz.4.623" path="/dev/uinput" dev="devtmpfs" ino=920 [ 353.915230][ T8371] usbip_core: unknown command [ 353.920098][ T8371] vhci_hcd: unknown pdu 808464432 [ 353.929176][ T8371] usbip_core: unknown command [ 353.939533][ T30] audit: type=1400 audit(1746989080.406:52): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=8385 comm="syz.4.623" path="/dev/uinput" dev="devtmpfs" ino=920 [ 353.997295][ T5874] usb 3-1: USB disconnect, device number 29 [ 354.016677][ T6248] vhci_hcd: stop threads [ 354.023470][ T6248] vhci_hcd: release socket [ 354.036500][ T6248] vhci_hcd: disconnect device [ 354.144076][ T8390] xt_TPROXY: Can be used only with -p tcp or -p udp [ 354.161809][ T5887] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 354.336742][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 354.344425][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.360197][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.411053][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 354.435919][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 354.528096][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 354.990655][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.005204][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 355.032584][ T5887] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.046439][ T5887] usb 1-1: Manufacturer: syz [ 355.051140][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 355.097755][ T5887] usb 1-1: config 0 descriptor?? [ 355.241745][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 355.508621][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.526464][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 355.582742][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.605916][ T8388] fuse: Unknown parameter 'gmoup_id' [ 355.878261][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.886429][ T9] usb 3-1: Product: syz [ 355.890850][ T9] usb 3-1: Manufacturer: syz [ 355.899477][ T9] usb 3-1: SerialNumber: syz [ 356.109597][ T5887] rc_core: IR keymap rc-hauppauge not found [ 356.135966][ T5887] Registered IR keymap rc-empty [ 356.155414][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 356.186890][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 356.248176][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 356.439626][ T8417] siw: device registration error -23 [ 356.918914][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 356.956362][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.022327][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.077099][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.116811][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.157087][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.186943][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.213647][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.250756][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.306886][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.336774][ T5887] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 357.365680][ T5887] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 357.419889][ T5887] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 357.445156][ T5887] usb 1-1: USB disconnect, device number 17 [ 357.896936][ T5887] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 358.489528][ T5874] usb 3-1: USB disconnect, device number 30 [ 358.546525][ T7582] vhci_hcd: vhci_device speed not set [ 358.729795][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 358.737072][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.748579][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.609618][ T8445] input: syz1 as /devices/virtual/input/input20 [ 359.789536][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 359.950511][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 360.366345][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 360.394266][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.409822][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 360.428481][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 360.437773][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 360.445201][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 360.468155][ T5887] usb 1-1: string descriptor 0 read error: -71 [ 360.557825][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.576619][ T8449] netlink: 52 bytes leftover after parsing attributes in process `syz.2.641'. [ 360.607775][ T5887] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.658023][ T5887] usb 1-1: config 0 descriptor?? [ 360.679597][ T5887] usb 1-1: can't set config #0, error -71 [ 360.697499][ T5887] usb 1-1: USB disconnect, device number 18 [ 363.381749][ T8484] siw: device registration error -23 [ 364.856860][ T8490] netlink: 11 bytes leftover after parsing attributes in process `syz.4.652'. [ 365.156941][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 365.380109][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 365.441656][ T5934] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 365.454738][ T9] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 365.540474][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.643162][ T9] usb 5-1: config 0 descriptor?? [ 365.683514][ T8492] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.693619][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 365.761517][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.868900][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.952208][ T5934] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 365.970434][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.000600][ T5934] usb 3-1: config 0 descriptor?? [ 366.076514][ T47] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 366.191752][ T9] a4tech 0003:09DA:022B.000F: unknown main item tag 0x5 [ 366.233516][ T9] a4tech 0003:09DA:022B.000F: hidraw0: USB HID vd0.17 Device [HID 09da:022b] on usb-dummy_hcd.4-1/input0 [ 366.266942][ T5874] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 366.459138][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 366.467418][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.478718][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.489917][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 366.500939][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 366.512256][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.531047][ T47] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.557645][ T47] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.587333][ T8506] siw: device registration error -23 [ 366.616597][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 366.627906][ T47] usb 2-1: Manufacturer: syz [ 367.127960][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.152837][ T47] usb 2-1: config 0 descriptor?? [ 367.163874][ T5874] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 367.181675][ T5874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.193137][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.203912][ T5874] usb 1-1: Product: syz [ 367.209315][ T5874] usb 1-1: Manufacturer: syz [ 367.215674][ T5874] usb 1-1: SerialNumber: syz [ 367.253314][ T8498] xt_ipcomp: unknown flags 12 [ 367.388732][ T8494] fuse: Unknown parameter 'gmoup_id' [ 367.481712][ T5887] usb 5-1: USB disconnect, device number 12 [ 367.787655][ T8512] siw: device registration error -23 [ 368.437342][ T47] rc_core: IR keymap rc-hauppauge not found [ 368.476579][ T47] Registered IR keymap rc-empty [ 368.511888][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 368.523782][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 368.527024][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 368.551361][ T5934] usb 3-1: USB disconnect, device number 31 [ 368.607968][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 368.653675][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 368.702900][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 368.760919][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 368.987246][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.017599][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.139481][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.232985][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.687005][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.796685][ T8525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.659'. [ 369.817145][ T5866] usb 1-1: USB disconnect, device number 19 [ 369.839124][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.857320][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.882754][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 369.930143][ T47] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 370.159144][ T47] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 370.206465][ T47] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 370.248114][ T47] usb 2-1: USB disconnect, device number 21 [ 371.262234][ T8561] netlink: 11 bytes leftover after parsing attributes in process `syz.3.668'. [ 371.339466][ T5887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 371.474773][ T47] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 371.506451][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 371.518214][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.536582][ T5887] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 371.560164][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.576597][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.594916][ T5887] usb 1-1: Product: syz [ 371.599287][ T5887] usb 1-1: Manufacturer: syz [ 371.603898][ T5887] usb 1-1: SerialNumber: syz [ 371.648170][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 371.669656][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.703408][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.746137][ T47] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 371.768730][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.794669][ T47] usb 5-1: config 0 descriptor?? [ 372.204529][ T8577] siw: device registration error -23 [ 372.823418][ T8560] xt_ipcomp: unknown flags 12 [ 373.148743][ T8590] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 373.156493][ T8590] netlink: 228 bytes leftover after parsing attributes in process `syz.2.672'. [ 373.167037][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 223 [ 373.474390][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 374.335906][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 374.347467][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.466722][ T24] usb 1-1: USB disconnect, device number 20 [ 374.499480][ T47] usb 5-1: USB disconnect, device number 13 [ 374.641910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.770890][ T8609] 9pnet_fd: Insufficient options for proto=fd [ 374.803315][ T5887] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 375.093089][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 375.495195][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.556259][ T5887] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 375.599490][ T5887] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.613144][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.657036][ T5887] usb 3-1: Product: syz [ 375.661244][ T5887] usb 3-1: Manufacturer: syz [ 375.676084][ T5887] usb 3-1: SerialNumber: syz [ 376.423685][ T8622] siw: device registration error -23 [ 377.422832][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 377.508408][ T8633] netlink: 52 bytes leftover after parsing attributes in process `syz.0.684'. [ 377.728042][ T8633] lo speed is unknown, defaulting to 1000 [ 377.905759][ T8643] xt_ipcomp: unknown flags 12 [ 378.007494][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 378.377369][ T5874] usb 3-1: USB disconnect, device number 32 [ 378.406528][ T5887] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 378.417286][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 378.450205][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.469040][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 378.494142][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.514250][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.523138][ T9] usb 5-1: Product: syz [ 378.529632][ T9] usb 5-1: Manufacturer: syz [ 378.534416][ T9] usb 5-1: SerialNumber: syz [ 378.600029][ T8655] veth1_macvtap: left promiscuous mode [ 378.605691][ T8655] macsec0: entered promiscuous mode [ 378.613969][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 378.623386][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.636621][ T5887] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 378.664920][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.677752][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.689451][ T5887] usb 1-1: Product: syz [ 378.706265][ T5887] usb 1-1: Manufacturer: syz [ 378.711104][ T5887] usb 1-1: SerialNumber: syz [ 379.743503][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'. [ 380.006471][ T8671] siw: device registration error -23 [ 380.888892][ T47] usb 5-1: USB disconnect, device number 14 [ 381.065652][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 381.113694][ T8682] netlink: 52 bytes leftover after parsing attributes in process `syz.3.698'. [ 381.546791][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 381.838863][ T8687] lo speed is unknown, defaulting to 1000 [ 381.906561][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 381.920574][ T47] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 382.150532][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.247662][ T5866] usb 1-1: USB disconnect, device number 21 [ 382.256610][ T47] usb 5-1: Product: syz [ 382.260843][ T47] usb 5-1: Manufacturer: syz [ 382.265456][ T47] usb 5-1: SerialNumber: syz [ 382.280597][ T47] usb 5-1: config 0 descriptor?? [ 382.327072][ T47] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 382.327184][ T5887] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 382.502216][ T47] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 382.518829][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 382.543994][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.562782][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.573746][ T5887] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 382.598241][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.620995][ T5887] usb 3-1: config 0 descriptor?? [ 382.736560][ T47] visor 5-1:0.0: probe with driver visor failed with error -71 [ 382.758328][ T47] usb 5-1: USB disconnect, device number 15 [ 383.927632][ T8715] xt_ipcomp: unknown flags 12 [ 384.185908][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 384.195023][ T8731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.715'. [ 384.229779][ T8729] veth0_to_team: entered promiscuous mode [ 384.284564][ T8729] macvtap1: entered promiscuous mode [ 384.296940][ T8729] macvtap1: entered allmulticast mode [ 384.369690][ T8729] veth0_to_team: entered allmulticast mode [ 384.420393][ T8729] veth0_to_team: left allmulticast mode [ 384.433071][ T8729] veth0_to_team: left promiscuous mode [ 384.507980][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 384.550092][ T8738] lo speed is unknown, defaulting to 1000 [ 384.882972][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.890226][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.124058][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 385.206517][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 385.212515][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 385.269852][ T5887] usb 3-1: USB disconnect, device number 33 [ 385.316459][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 385.328834][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.344987][ T5908] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 385.472432][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.483967][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.495881][ T5908] usb 5-1: Product: syz [ 385.785535][ T8761] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 385.801992][ T5908] usb 5-1: Manufacturer: syz [ 385.807871][ T5908] usb 5-1: SerialNumber: syz [ 387.081137][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.727'. [ 387.266847][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.727'. [ 388.185732][ T8778] lo speed is unknown, defaulting to 1000 [ 388.244581][ T8790] FAULT_INJECTION: forcing a failure. [ 388.244581][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.262101][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.2.729 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 388.262126][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.262137][ T8790] Call Trace: [ 388.262144][ T8790] [ 388.262152][ T8790] dump_stack_lvl+0x189/0x250 [ 388.262187][ T8790] ? __lock_acquire+0xaac/0xd20 [ 388.262224][ T8790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.262247][ T8790] ? __pfx__printk+0x10/0x10 [ 388.262274][ T8790] ? __might_fault+0xb0/0x130 [ 388.262313][ T8790] should_fail_ex+0x414/0x560 [ 388.262348][ T8790] _copy_from_iter+0x1db/0x15a0 [ 388.262380][ T8790] ? __pfx__copy_from_iter+0x10/0x10 [ 388.262404][ T8790] ? dev_get_by_index+0x22/0x2e0 [ 388.262433][ T8790] ? dev_get_by_index+0x22/0x2e0 [ 388.262463][ T8790] packet_sendmsg+0x3322/0x5400 [ 388.262513][ T8790] ? __lock_acquire+0xaac/0xd20 [ 388.262546][ T8790] ? smack_socket_sendmsg+0x1fa/0x520 [ 388.262571][ T8790] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 388.262597][ T8790] ? __pfx_packet_sendmsg+0x10/0x10 [ 388.262624][ T8790] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 388.262657][ T8790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.262676][ T8790] ? __pfx_packet_sendmsg+0x10/0x10 [ 388.262697][ T8790] __sock_sendmsg+0x219/0x270 [ 388.262727][ T8790] ____sys_sendmsg+0x505/0x830 [ 388.262754][ T8790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.262784][ T8790] ? import_iovec+0x74/0xa0 [ 388.262810][ T8790] ___sys_sendmsg+0x21f/0x2a0 [ 388.262834][ T8790] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.262886][ T8790] ? __fget_files+0x2a/0x420 [ 388.262912][ T8790] ? __fget_files+0x3a0/0x420 [ 388.262946][ T8790] __x64_sys_sendmsg+0x19b/0x260 [ 388.262986][ T8790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.263025][ T8790] ? do_syscall_64+0xba/0x210 [ 388.263052][ T8790] do_syscall_64+0xf6/0x210 [ 388.263074][ T8790] ? clear_bhb_loop+0x45/0xa0 [ 388.263098][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.263115][ T8790] RIP: 0033:0x7f582a98e969 [ 388.263132][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.263147][ T8790] RSP: 002b:00007f582b8a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.263165][ T8790] RAX: ffffffffffffffda RBX: 00007f582abb5fa0 RCX: 00007f582a98e969 [ 388.263179][ T8790] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 388.263190][ T8790] RBP: 00007f582b8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 388.263201][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.263211][ T8790] R13: 0000000000000000 R14: 00007f582abb5fa0 R15: 00007fff0ac04368 [ 388.263238][ T8790] [ 388.536954][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 388.674413][ T9] usb 5-1: USB disconnect, device number 16 [ 388.716056][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 388.774938][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 389.103951][ T8802] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 390.076785][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 390.246691][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 390.257704][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.272143][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.283478][ T5887] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 390.297946][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.312707][ T5887] usb 5-1: config 0 descriptor?? [ 391.406638][ T8812] xt_ipcomp: unknown flags 12 [ 392.192829][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 393.361099][ T8851] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 394.470173][ T8858] FAULT_INJECTION: forcing a failure. [ 394.470173][ T8858] name failslab, interval 1, probability 0, space 0, times 0 [ 394.493077][ T8858] CPU: 0 UID: 0 PID: 8858 Comm: syz.2.753 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 394.493103][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.493120][ T8858] Call Trace: [ 394.493127][ T8858] [ 394.493135][ T8858] dump_stack_lvl+0x189/0x250 [ 394.493168][ T8858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.493193][ T8858] ? __pfx__printk+0x10/0x10 [ 394.493222][ T8858] ? __pfx___might_resched+0x10/0x10 [ 394.493257][ T8858] ? fs_reclaim_acquire+0x7d/0x100 [ 394.493281][ T8858] should_fail_ex+0x414/0x560 [ 394.493315][ T8858] should_failslab+0xa8/0x100 [ 394.493342][ T8858] __kmalloc_noprof+0xcb/0x4f0 [ 394.493361][ T8858] ? iovec_from_user+0x87/0x250 [ 394.493380][ T8858] iovec_from_user+0x87/0x250 [ 394.493400][ T8858] __import_iovec+0x163/0x7f0 [ 394.493428][ T8858] import_iovec+0x74/0xa0 [ 394.493455][ T8858] ___sys_recvmsg+0x43a/0x510 [ 394.493484][ T8858] ? __pfx____sys_recvmsg+0x10/0x10 [ 394.493531][ T8858] ? __fget_files+0x3a0/0x420 [ 394.493568][ T8858] do_recvmmsg+0x307/0x760 [ 394.493591][ T8858] ? __pfx_do_recvmmsg+0x10/0x10 [ 394.493616][ T8858] ? _copy_from_user+0x94/0xb0 [ 394.493644][ T8858] __x64_sys_recvmmsg+0x1af/0x240 [ 394.493661][ T8858] ? rcu_is_watching+0x15/0xb0 [ 394.493683][ T8858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 394.493703][ T8858] ? do_syscall_64+0xba/0x210 [ 394.493721][ T8858] do_syscall_64+0xf6/0x210 [ 394.493737][ T8858] ? clear_bhb_loop+0x45/0xa0 [ 394.493753][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.493766][ T8858] RIP: 0033:0x7f582a98e969 [ 394.493778][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.493789][ T8858] RSP: 002b:00007f582b8a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 394.493803][ T8858] RAX: ffffffffffffffda RBX: 00007f582abb5fa0 RCX: 00007f582a98e969 [ 394.493813][ T8858] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 394.493821][ T8858] RBP: 00007f582b8a1090 R08: 0000200000003700 R09: 0000000000000000 [ 394.493830][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.493837][ T8858] R13: 0000000000000000 R14: 00007f582abb5fa0 R15: 00007fff0ac04368 [ 394.493857][ T8858] [ 394.494595][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 395.529932][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 395.547505][ T5887] usb 5-1: USB disconnect, device number 17 [ 395.761598][ T8868] tmpfs: Unknown parameter 'üˆ.#F^1aIöÌøxqæ@0x0000000000000009' [ 395.826562][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 395.976461][ T5887] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 396.626698][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 396.633916][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.646475][ T5887] usb 3-1: New USB device found, idVendor=056a, idProduct=0321, bcdDevice= 0.00 [ 396.655534][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.671723][ T5887] usb 3-1: config 0 descriptor?? [ 397.108353][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.232274][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.243113][ T5887] hid (null): global environment stack underflow [ 397.330382][ T8892] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 397.370266][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.413298][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.487668][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.501080][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.513760][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.525154][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.535558][ T8892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.542430][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.552896][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.563044][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.570073][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.583170][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.590261][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.597445][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.604431][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.611537][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.618808][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.625941][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.633037][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.640314][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.664975][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.683807][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.716280][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.739872][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.750429][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.782055][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.807522][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.879710][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.922036][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 397.946690][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.029857][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.056303][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.100974][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.126781][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.170004][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.220755][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.237263][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.265241][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.298759][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.394062][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.413379][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.456469][ T5908] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 398.495163][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 398.681845][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.413985][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.526494][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 399.531814][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.543100][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.550686][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.560845][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.600850][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.612729][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.637434][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.644485][ T5908] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 399.667701][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.701238][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.725743][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.766647][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.784754][ T5908] usb 1-1: config 0 descriptor?? [ 399.790156][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.820502][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.852677][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.878561][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.902188][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.919986][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.942307][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x0 [ 399.966446][ T5887] wacom 0003:056A:0321.0010: unknown main item tag 0x2 [ 400.025815][ T5887] wacom 0003:056A:0321.0010: unexpected long global item [ 400.059562][ T5887] wacom 0003:056A:0321.0010: parse failed [ 400.066130][ T5887] wacom 0003:056A:0321.0010: probe with driver wacom failed with error -22 [ 400.113543][ T5887] usb 3-1: USB disconnect, device number 34 [ 400.496722][ T8931] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 400.915758][ T8941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.772'. [ 400.925419][ T8941] unsupported nlmsg_type 40 [ 401.086942][ T8909] xt_ipcomp: unknown flags 12 [ 401.229883][ T8931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.402782][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.775'. [ 402.439680][ T8958] 9pnet_fd: Insufficient options for proto=fd [ 403.675418][ T8974] FAULT_INJECTION: forcing a failure. [ 403.675418][ T8974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.956686][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.2.780 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 403.956718][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.956731][ T8974] Call Trace: [ 403.956745][ T8974] [ 403.956755][ T8974] dump_stack_lvl+0x189/0x250 [ 403.956787][ T8974] ? __lock_acquire+0xaac/0xd20 [ 403.956816][ T8974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.956842][ T8974] ? __pfx__printk+0x10/0x10 [ 403.956872][ T8974] ? __might_fault+0xb0/0x130 [ 403.956914][ T8974] should_fail_ex+0x414/0x560 [ 403.956951][ T8974] _copy_from_user+0x2d/0xb0 [ 403.956979][ T8974] vt_event_wait_ioctl+0xa1/0x300 [ 403.957013][ T8974] ? __pfx_vt_event_wait_ioctl+0x10/0x10 [ 403.957048][ T8974] ? bpf_lsm_capable+0x9/0x20 [ 403.957074][ T8974] ? security_capable+0x7e/0x2e0 [ 403.957106][ T8974] vt_ioctl+0x11d9/0x1d70 [ 403.957140][ T8974] ? __pfx_vt_ioctl+0x10/0x10 [ 403.957163][ T8974] ? __asan_memset+0x22/0x50 [ 403.957187][ T8974] ? smack_file_ioctl+0x24a/0x340 [ 403.957221][ T8974] ? __pfx_smack_file_ioctl+0x10/0x10 [ 403.957267][ T8974] ? tty_jobctrl_ioctl+0x369/0xb70 [ 403.957293][ T8974] ? __fget_files+0x3a0/0x420 [ 403.957322][ T8974] ? __fget_files+0x2a/0x420 [ 403.957353][ T8974] tty_ioctl+0x926/0xde0 [ 403.957373][ T8974] ? __pfx_tty_ioctl+0x10/0x10 [ 403.957393][ T8974] __se_sys_ioctl+0xf9/0x170 [ 403.957420][ T8974] do_syscall_64+0xf6/0x210 [ 403.957445][ T8974] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.957466][ T8974] ? clear_bhb_loop+0x45/0xa0 [ 403.957489][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.957509][ T8974] RIP: 0033:0x7f582a98e969 [ 403.957527][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.957543][ T8974] RSP: 002b:00007f582b8a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.957564][ T8974] RAX: ffffffffffffffda RBX: 00007f582abb5fa0 RCX: 00007f582a98e969 [ 403.957579][ T8974] RDX: 0000200000000140 RSI: 000000000000560e RDI: 0000000000000005 [ 403.957592][ T8974] RBP: 00007f582b8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 403.957605][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.957616][ T8974] R13: 0000000000000000 R14: 00007f582abb5fa0 R15: 00007fff0ac04368 [ 403.957647][ T8974] [ 404.496931][ T5908] usbhid 1-1:0.0: can't add hid device: -71 [ 404.541690][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 404.582481][ T5908] usb 1-1: USB disconnect, device number 22 [ 404.705250][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 405.096979][ T5908] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 405.259686][ T5908] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 405.315950][ T5908] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 405.344212][ T5908] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.647375][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 223 [ 405.684023][ T5908] usb 5-1: config 1 interface 0 has no altsetting 0 [ 405.694204][ T5908] usb 5-1: string descriptor 0 read error: -22 [ 405.734120][ T5908] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.764320][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.806856][ T8996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 405.816573][ T8996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 405.878648][ T5908] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 406.690514][ T9023] syz.2.791: attempt to access beyond end of device [ 406.690514][ T9023] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 406.705933][ T9023] syz.2.791: attempt to access beyond end of device [ 406.705933][ T9023] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 406.720161][ T9023] Mount JFS Failure: -5 [ 406.724611][ T9023] jfs_mount failed w/return code = -5 [ 407.209850][ T24] usb 5-1: USB disconnect, device number 18 [ 407.319800][ T9025] netem: change failed [ 407.446072][ T9031] xt_ipcomp: unknown flags 12 [ 407.461862][ T9033] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 408.182760][ T9050] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 409.319708][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 409.827260][ T9067] FAULT_INJECTION: forcing a failure. [ 409.827260][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.858208][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.0.803 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 409.858236][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.858248][ T9067] Call Trace: [ 409.858255][ T9067] [ 409.858263][ T9067] dump_stack_lvl+0x189/0x250 [ 409.858293][ T9067] ? __lock_acquire+0xaac/0xd20 [ 409.858327][ T9067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.858352][ T9067] ? __pfx__printk+0x10/0x10 [ 409.858380][ T9067] ? __might_fault+0xb0/0x130 [ 409.858419][ T9067] should_fail_ex+0x414/0x560 [ 409.858460][ T9067] _copy_from_user+0x2d/0xb0 [ 409.858489][ T9067] memdup_user+0x5e/0xd0 [ 409.858513][ T9067] strndup_user+0x68/0xd0 [ 409.858535][ T9067] __se_sys_add_key+0x1af/0x400 [ 409.858557][ T9067] ? __pfx___se_sys_add_key+0x10/0x10 [ 409.858582][ T9067] ? do_syscall_64+0xba/0x210 [ 409.858604][ T9067] ? __x64_sys_add_key+0x20/0xc0 [ 409.858624][ T9067] do_syscall_64+0xf6/0x210 [ 409.858645][ T9067] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 409.858663][ T9067] ? clear_bhb_loop+0x45/0xa0 [ 409.858685][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.858707][ T9067] RIP: 0033:0x7f367578e969 [ 409.858724][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.858740][ T9067] RSP: 002b:00007f367661a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 409.858760][ T9067] RAX: ffffffffffffffda RBX: 00007f36759b6160 RCX: 00007f367578e969 [ 409.858787][ T9067] RDX: 00002000000002c0 RSI: 0000200000000440 RDI: 0000200000000000 [ 409.858803][ T9067] RBP: 00007f367661a090 R08: fffffffffffffffc R09: 0000000000000000 [ 409.858816][ T9067] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 409.858827][ T9067] R13: 0000000000000000 R14: 00007f36759b6160 R15: 00007fff55a7e6f8 [ 409.858859][ T9067] [ 410.427244][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 410.438846][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.466529][ T24] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 410.517491][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.760685][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.785333][ T24] usb 5-1: Product: syz [ 410.790078][ T24] usb 5-1: Manufacturer: syz [ 411.750607][ T24] usb 5-1: SerialNumber: syz [ 412.702768][ T24] usb 5-1: USB disconnect, device number 19 [ 414.267285][ T9114] loop7: detected capacity change from 0 to 16384 [ 415.307109][ T9118] loop7: detected capacity change from 16384 to 0 [ 415.314347][ T9118] [ 415.316695][ T9118] ====================================================== [ 415.323720][ T9118] WARNING: possible circular locking dependency detected [ 415.330741][ T9118] 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 Not tainted [ 415.337848][ T9118] ------------------------------------------------------ [ 415.344854][ T9118] syz.4.819/9118 is trying to acquire lock: [ 415.350733][ T9118] ffffffff8f645988 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 415.361280][ T9118] [ 415.361280][ T9118] but task is already holding lock: [ 415.368639][ T9118] ffff88814331e228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 415.378838][ T9118] [ 415.378838][ T9118] which lock already depends on the new lock. [ 415.378838][ T9118] [ 415.389233][ T9118] [ 415.389233][ T9118] the existing dependency chain (in reverse order) is: [ 415.398236][ T9118] [ 415.398236][ T9118] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 415.406866][ T9118] lock_acquire+0x120/0x360 [ 415.411908][ T9118] blk_alloc_queue+0x538/0x620 [ 415.417187][ T9118] __blk_mq_alloc_disk+0x164/0x350 [ 415.422816][ T9118] loop_add+0x41d/0xae0 [ 415.427491][ T9118] loop_init+0x173/0x230 [ 415.432270][ T9118] do_one_initcall+0x233/0x820 [ 415.437577][ T9118] do_initcall_level+0x137/0x1f0 [ 415.443040][ T9118] do_initcalls+0x69/0xd0 [ 415.447902][ T9118] kernel_init_freeable+0x3d9/0x570 [ 415.453625][ T9118] kernel_init+0x1d/0x1d0 [ 415.458482][ T9118] ret_from_fork+0x4b/0x80 [ 415.463428][ T9118] ret_from_fork_asm+0x1a/0x30 [ 415.468721][ T9118] [ 415.468721][ T9118] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 415.475944][ T9118] lock_acquire+0x120/0x360 [ 415.480977][ T9118] fs_reclaim_acquire+0x72/0x100 [ 415.486435][ T9118] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 415.492769][ T9118] __alloc_skb+0x112/0x2d0 [ 415.497707][ T9118] alloc_uevent_skb+0x7d/0x230 [ 415.502999][ T9118] kobject_uevent_net_broadcast+0x2fa/0x560 [ 415.509430][ T9118] kobject_uevent_env+0x55b/0x8c0 [ 415.514979][ T9118] kobject_synth_uevent+0x527/0xb00 [ 415.520703][ T9118] bus_uevent_store+0x115/0x170 [ 415.526075][ T9118] kernfs_fop_write_iter+0x375/0x4f0 [ 415.531879][ T9118] vfs_write+0x548/0xa90 [ 415.536643][ T9118] ksys_write+0x145/0x250 [ 415.541932][ T9118] do_syscall_64+0xf6/0x210 [ 415.546966][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.553374][ T9118] [ 415.553374][ T9118] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 415.561217][ T9118] validate_chain+0xb9b/0x2140 [ 415.566513][ T9118] __lock_acquire+0xaac/0xd20 [ 415.571708][ T9118] lock_acquire+0x120/0x360 [ 415.576736][ T9118] __mutex_lock+0x182/0xe80 [ 415.581775][ T9118] kobject_uevent_net_broadcast+0x27e/0x560 [ 415.588193][ T9118] kobject_uevent_env+0x55b/0x8c0 [ 415.593741][ T9118] loop_set_status+0x4d1/0xaf0 [ 415.599028][ T9118] lo_ioctl+0xa5d/0x2410 [ 415.603800][ T9118] blkdev_ioctl+0x5a5/0x6d0 [ 415.608824][ T9118] __se_sys_ioctl+0xf9/0x170 [ 415.613928][ T9118] do_syscall_64+0xf6/0x210 [ 415.618945][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.625365][ T9118] [ 415.625365][ T9118] other info that might help us debug this: [ 415.625365][ T9118] [ 415.635601][ T9118] Chain exists of: [ 415.635601][ T9118] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 415.635601][ T9118] [ 415.649340][ T9118] Possible unsafe locking scenario: [ 415.649340][ T9118] [ 415.656789][ T9118] CPU0 CPU1 [ 415.662155][ T9118] ---- ---- [ 415.667532][ T9118] lock(&q->q_usage_counter(io)#24); [ 415.672905][ T9118] lock(fs_reclaim); [ 415.679401][ T9118] lock(&q->q_usage_counter(io)#24); [ 415.687302][ T9118] lock(uevent_sock_mutex); [ 415.691890][ T9118] [ 415.691890][ T9118] *** DEADLOCK *** [ 415.691890][ T9118] [ 415.700021][ T9118] 3 locks held by syz.4.819/9118: [ 415.705033][ T9118] #0: ffff888143348368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xaf0 [ 415.714751][ T9118] #1: ffff88814331e228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 415.725378][ T9118] #2: ffff88814331e260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_set_status+0x225/0xaf0 [ 415.736265][ T9118] [ 415.736265][ T9118] stack backtrace: [ 415.742149][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.4.819 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 415.742170][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.742180][ T9118] Call Trace: [ 415.742187][ T9118] [ 415.742194][ T9118] dump_stack_lvl+0x189/0x250 [ 415.742220][ T9118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.742241][ T9118] ? __pfx__printk+0x10/0x10 [ 415.742278][ T9118] ? print_lock_name+0xde/0x100 [ 415.742301][ T9118] print_circular_bug+0x2ee/0x310 [ 415.742327][ T9118] check_noncircular+0x134/0x160 [ 415.742360][ T9118] validate_chain+0xb9b/0x2140 [ 415.742383][ T9118] ? number+0xd18/0xf60 [ 415.742412][ T9118] __lock_acquire+0xaac/0xd20 [ 415.742433][ T9118] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 415.742454][ T9118] lock_acquire+0x120/0x360 [ 415.742472][ T9118] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 415.742499][ T9118] __mutex_lock+0x182/0xe80 [ 415.742516][ T9118] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 415.742539][ T9118] ? vsnprintf+0xe11/0xf00 [ 415.742561][ T9118] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 415.742584][ T9118] ? __pfx___mutex_lock+0x10/0x10 [ 415.742600][ T9118] ? add_uevent_var+0x278/0x450 [ 415.742623][ T9118] ? kobject_uevent_env+0x50a/0x8c0 [ 415.742643][ T9118] ? __pfx_add_uevent_var+0x10/0x10 [ 415.742665][ T9118] kobject_uevent_net_broadcast+0x27e/0x560 [ 415.742689][ T9118] kobject_uevent_env+0x55b/0x8c0 [ 415.742713][ T9118] loop_set_status+0x4d1/0xaf0 [ 415.742736][ T9118] lo_ioctl+0xa5d/0x2410 [ 415.742755][ T9118] ? is_bpf_text_address+0x26/0x2b0 [ 415.742778][ T9118] ? __pfx_lo_ioctl+0x10/0x10 [ 415.742793][ T9118] ? is_bpf_text_address+0x26/0x2b0 [ 415.742813][ T9118] ? kernel_text_address+0xa5/0xe0 [ 415.742832][ T9118] ? __kernel_text_address+0xd/0x40 [ 415.742849][ T9118] ? unwind_get_return_address+0x4d/0x90 [ 415.742868][ T9118] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 415.742883][ T9118] ? arch_stack_walk+0xfc/0x150 [ 415.742906][ T9118] ? __lock_acquire+0xaac/0xd20 [ 415.742927][ T9118] ? __lock_acquire+0xaac/0xd20 [ 415.742948][ T9118] ? __lock_acquire+0xaac/0xd20 [ 415.742971][ T9118] ? __lock_acquire+0xaac/0xd20 [ 415.742993][ T9118] ? __lock_acquire+0xaac/0xd20 [ 415.743018][ T9118] ? is_bpf_text_address+0x26/0x2b0 [ 415.743038][ T9118] ? is_bpf_text_address+0x292/0x2b0 [ 415.743056][ T9118] ? is_bpf_text_address+0x26/0x2b0 [ 415.743075][ T9118] ? kernel_text_address+0xa5/0xe0 [ 415.743093][ T9118] ? __kernel_text_address+0xd/0x40 [ 415.743110][ T9118] ? unwind_get_return_address+0x4d/0x90 [ 415.743130][ T9118] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 415.743144][ T9118] ? arch_stack_walk+0xfc/0x150 [ 415.743171][ T9118] ? kasan_save_track+0x4f/0x80 [ 415.743190][ T9118] ? kasan_save_track+0x3e/0x80 [ 415.743225][ T9118] ? kasan_quarantine_put+0xdd/0x220 [ 415.743245][ T9118] ? blkdev_common_ioctl+0xfc3/0x2450 [ 415.743264][ T9118] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 415.743278][ T9118] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 415.743294][ T9118] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 415.743308][ T9118] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 415.743326][ T9118] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 415.743341][ T9118] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 415.743358][ T9118] ? count_memcg_event_mm+0x92/0x3b0 [ 415.743380][ T9118] ? __lock_acquire+0xaac/0xd20 [ 415.743400][ T9118] ? __asan_memset+0x22/0x50 [ 415.743417][ T9118] ? smack_file_ioctl+0x24a/0x340 [ 415.743441][ T9118] ? __pfx_smack_file_ioctl+0x10/0x10 [ 415.743463][ T9118] ? __pfx_lo_ioctl+0x10/0x10 [ 415.743480][ T9118] blkdev_ioctl+0x5a5/0x6d0 [ 415.743497][ T9118] ? __pfx_blkdev_ioctl+0x10/0x10 [ 415.743512][ T9118] ? __fget_files+0x3a0/0x420 [ 415.743534][ T9118] ? __fget_files+0x2a/0x420 [ 415.743557][ T9118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.743592][ T9118] ? __pfx_blkdev_ioctl+0x10/0x10 [ 415.743609][ T9118] __se_sys_ioctl+0xf9/0x170 [ 415.743629][ T9118] do_syscall_64+0xf6/0x210 [ 415.743661][ T9118] ? clear_bhb_loop+0x45/0xa0 [ 415.743678][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.743692][ T9118] RIP: 0033:0x7fe9c118e969 [ 415.743706][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.743719][ T9118] RSP: 002b:00007fe9c2081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.743735][ T9118] RAX: ffffffffffffffda RBX: 00007fe9c13b6080 RCX: 00007fe9c118e969 [ 415.743746][ T9118] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000005 [ 415.743756][ T9118] RBP: 00007fe9c1210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 415.743765][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.743773][ T9118] R13: 0000000000000001 R14: 00007fe9c13b6080 R15: 00007fffdef74f88 [ 415.743790][ T9118] [ 416.333376][ C1] blk_print_req_error: 27 callbacks suppressed [ 416.333395][ C1] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 416.360577][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0