last executing test programs: 9.651755147s ago: executing program 1 (id=189): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x148, 0x6c, 0x0, 0x0, 0x0, 0x2e0, 0x258, 0x258, 0x2e0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfd, 0x0}}, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xffffffff, 0x1, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x8000000000000001}}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0x160, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0x8, 0x80, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], [0xff000000, 0xff, 0xff, 0xffffff00], 0x40, 0x260}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x410) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 5.954086612s ago: executing program 1 (id=202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18020100000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 5.802646331s ago: executing program 1 (id=204): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010001e08003950323030302e"], 0x15) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x6f90, 0x4) r3 = memfd_create(&(0x7f0000000140)='\xcb12\x91\xfb\xa4\x97\xfd%\x03vD\x1aS\xaa\xcd\xaf\"\xd6[H\xa8\xd6\xb0\xcd7so\x89\xef\x0f\xe7\xaf\xf62~\xe3\xf7f\x84Y\x04`\x1e\xfe\xcb\x8c\x91\xbb\xb6\x9cN\xb9+\xef\xe1W\x11\xd4\x93L\xbf\x12+\xd0\t\x11\xde\xb4\x1b7!w\xd4S\xfe\x8b\x01\x00\x00\x00\x00\x00\x00\x003U\xff\xb1{3\xb3\x80\xb8\xa0\xf8\xdf3\xd8\x87\x8b\x96\xc3\x00\xd6-\xe5\x05\x00\xaa\xf3\x00%\xe0b\xe5\x04\xe9,\xfc\xfc\x8aX\x80y \b\xa4gG\x99S\x041Y4\xb2\t\xa3\xfd\xa4\x06d\xa7\xd0\xc2y\x9e\xd53\xa5\x87\xb7\x99\x9c\xe0bjE\xc3<\xcf\x01\xfe\xda\x95\x98$\xd5\xed\xb1%\x19D\xc1\xc1[\x86\xfd\x8e*\xc8lx\x00\x02\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0xffffffffffffffa3}}], 0x1, 0x2000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=ANY=[@ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r5, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRES32=r4], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, &(0x7f0000000280)) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023896) 5.039697782s ago: executing program 1 (id=208): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r2, 0xffc0}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x533e, 0x81, 0x101, 0x6, 0x0, 0xf831, 0x1, 0x6, r2}, &(0x7f00000000c0)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 4.580713531s ago: executing program 1 (id=209): bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="b927e4950e7cea266e3b49d3c228763d70536f9029f88d109918b734eb1b8ef3757a276b46cef1817a7443e518092b440b900bd18d196ab457f03a17728b30f182616694a25ea69dbaa0cfa229ae6996ccc02cce3f41693b77c8e5b58382a6e2"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r3, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6e7dbbfec51210c9, 0x8004) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000180000000fddbdf250900005700380007800800010003000000080002000300000008000100faffffff0c000300000000000000000008000200bb6d542608000200050000000c000980080001000e0000000400048034000380080003004000000008000300ff030000080003000400000008000300010000000800030004000000080003003c0000"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x8800) request_key(&(0x7f0000000240)='id_legacy\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@md0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)='usrquota') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000680009032cbd7000000000000a0000000000000004000b00080001000100000080442fc0887d80d810cece14535346193f8bf8bcbb5e82fa146496f06fbb78045a96c90b3eb8c6c94bf5ce09be9bac10c2885b191b56592792d940c86110913fa35e95778c2e14c1bf77550f376e27798dc9e0c61f8d4ca0c819ccc5bd006d5167c4c96c69f9bc39518277c71975051345203c671e82223cc3e4ad50c2dfaae80be0d5de"], 0x24}, 0x1, 0x9f, 0x0, 0x20004002}, 0x40004) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 3.961028425s ago: executing program 3 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="3ec5c2dce6e134bf000000000200000018110000d2b2fec76d251207850b26dbe4598dbefc1d2d2321b02c13008312a6b063fc0e13e08a681846b57ac5c860bc848dd48a7c99cf", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='ext4_es_shrink_scan_exit\x00'}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000005c0)='task_rename\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x18) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000d40)=@newqdisc={0x1cc, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x19c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x101}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x154, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa34}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x72}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa8e}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc7b}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x73bc6ee4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4aa3a041}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xaacb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xaf7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x18d}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8000000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}]}}]}, 0x1cc}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10d2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r11, 0x113, 0x3, 0x0, 0x0) 3.710748438s ago: executing program 4 (id=213): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1e4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)="62cdcd1026d8081e4fbb412efb92f4874e479d59b18944d06047a257e39522f69d17a8aeba8aebb089b6c30578220b2e24d694effb7c49abd612aa3ae477c90221dc64c23942a32804b1501cd9ebaa7b") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x9, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000001500)) 2.931754789s ago: executing program 1 (id=214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="af", 0x1, 0xc000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="4000330010380e00080211000001080211000000f3527d40ace1080020004b00030001002d1a100002001000000000000d71f678fc0de2b0e3e2360003000200"], 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = eventfd2(0x0, 0x800) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r9}, 0x66) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x7, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.541255562s ago: executing program 0 (id=215): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='0\x00', 0x2) 2.119289421s ago: executing program 4 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b9447020", @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf251c000000180001801400020065727370616e30000000000000000000"], 0x2c}}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000ac0)="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", 0x22d}, {0x0}], 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x1, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000e80)={0x104410000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[0x0], 0x1}, 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0xc0046209, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000000101040000000000000000020000001c001880080001400000000208000240000000000800034000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44010) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1000000000000000840000000800000018"], 0x28}, 0x41) close(r7) 1.986513013s ago: executing program 0 (id=217): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="25030000000000000000160000000c00018808000300030000001400028004000400040004000800010007000000780001"], 0xe8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf254c0000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x1000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x2000000, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000080015"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x10001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000200)={0x6, 0x28, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) close(0x4) 1.837118437s ago: executing program 4 (id=218): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read(r0, &(0x7f00000001c0)=""/192, 0xc0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3}, 0x21) unshare(0x22020400) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000200)={0x2a, 0x3, 0xfffffffe}, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x6, 0x100}) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = accept$inet6(r2, &(0x7f0000000900)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000940)=0x1c) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f00000002c0)={0x5, &(0x7f00000007c0)=[{0x9, 0x57, &(0x7f0000000240)="e7e4830c9d9d0dcc2b9e632749cb929d3436eea4411d7c05fc859a04982fa6021168bf1b93f4fadcb25b8d7c1587945d2f140e8bf7c8c8dfb12d41d79c886fe1a91191e316aaf33575b2da1d556a8957db01cb2cb011f1", 0x1}, {0x5, 0x50, &(0x7f00000004c0)="e2e467747eb5df2a071ff04730754ef4d46d06b93823a3a8936642d61acb37a0d44baa3fb3406431aef71126a2fea22f4944a54c146bdaed5708231c116927e0b0a99d3685627d0d040d2705df4916f8", 0x0, 0x1}, {0x555, 0xa7, &(0x7f0000000540)="fb49172cef1653049a97d57773190f43f4b971b6f1259bea43ce6a431bdd8f38fa995377320175c00ecc73a59354257277433a6cef89dc6a330b0e9fe51c618f0c064ea3078b04d970888cf1b83aafb7013500f2f04241868e5d553173e5ab5feb2c46eaa9f224b046c3f81222bc6206238c93408fcfacab1f0f9f8bc37d19911ef2f44ac2223e202fa5d114ea702fa4213d9cadffdb1bba8a862a9c436d9af6c2b2502609ff3c", 0x8d7f281ec243ec02}, {0x3, 0xd9, &(0x7f0000000600)="055db18a2635baa65a666999e38f33732787697c3f569cfc70a701d99da13ae6d279dcf63558bf907f72c3533d2028318efa457bb3467d15f321924087216557b5035c71ecedaebabd52c263d654768404cddaf4d324f6a9780c75715d4198d2d7303501a235ad3079cdc7849298056d9307efe0c843eddcd4e5f39e22fdb37c098c861a03ddb930ba1dbb366e65fa5732ace2f82740a16081f70ef408ef0d51c4152303c27fb3cbe91af30238a0af7124541a87de71f831d54a15426e9dbbffc7f81836018e1f9618b162301d9f8b1862364c0a47fa77e44f", 0x0, 0x1}, {0x5, 0xb1, &(0x7f0000000700)="f83c5b438565e579917850f1792a6bbabf72977b5cb7e855af024edddebd2927e709cbb6490395a36d628dc698b12c836f3a1896dbba2cbce309307a0e236d46efa51cb3b4baf7a46f2a55ddc16209d181f19b2d940d9f212bac65c487df83cdf8d88807bf3d00905ed4f4a4a2613ca28e2b587c9bfaf71e186a10b10e9e5c967ec3b7b5259da6ca81ce415ca3a1d7dd7abe731499fd72f3c49b2a0bf1316bcd8d7d822a23847bc18017b38cfa4cf3b199"}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201, 0x22) socket$nl_audit(0x10, 0x3, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) 1.753041119s ago: executing program 4 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x0, 0x0, 0x0, 0x100000002, 0x120042}) 1.536908828s ago: executing program 4 (id=220): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 1.277277129s ago: executing program 4 (id=221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022fa"], 0x0}, 0x0) 1.153495984s ago: executing program 3 (id=222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) io_setup(0x2adf, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x81, r0, 0x0}]) 1.075856884s ago: executing program 2 (id=223): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x48942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) lseek(r0, 0x10004e9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4040080) 921.181299ms ago: executing program 2 (id=224): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0xff}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 841.312878ms ago: executing program 3 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x1, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x100002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x2, r2, 0x1}) 737.190164ms ago: executing program 2 (id=226): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000000c0)="90", 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x8001, 0x2) 589.263951ms ago: executing program 0 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 555.166845ms ago: executing program 2 (id=228): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 478.16594ms ago: executing program 0 (id=229): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x20000000000101, 0xb) 425.323551ms ago: executing program 3 (id=230): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) r3 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x40000006}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000}) 250.785517ms ago: executing program 2 (id=231): openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="68000000190001002bb57000ffdbdf25802090000011ff0500"], 0x68}, 0x1, 0x0, 0x0, 0x40810}, 0x4000004) 250.663501ms ago: executing program 3 (id=232): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 250.585457ms ago: executing program 0 (id=233): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) 69.291885ms ago: executing program 3 (id=234): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000dc0)='syzkaller\x00', 0x7, 0x6a, &(0x7f0000000e00)=""/106, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1ef3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x76) 1.02642ms ago: executing program 0 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1) 0s ago: executing program 2 (id=236): capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000280)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa2180, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 83.900052][ T5807] cgroup: Unknown subsys name 'net' [ 84.031280][ T5807] cgroup: Unknown subsys name 'cpuset' [ 84.040432][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.705196][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.104358][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.109362][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.121245][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.128907][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.137302][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.145565][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.154001][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.154731][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.169443][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.171379][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.178762][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.185065][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.192529][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.199075][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.261651][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.263033][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.269865][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.283601][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.293660][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.301985][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.363069][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.380589][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.389995][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.398720][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.406875][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.996464][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 91.008777][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 91.185275][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.231167][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 91.369861][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.377188][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.384594][ T5822] bridge_slave_0: entered allmulticast mode [ 91.392170][ T5822] bridge_slave_0: entered promiscuous mode [ 91.452674][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.460352][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.467699][ T5822] bridge_slave_1: entered allmulticast mode [ 91.475075][ T5822] bridge_slave_1: entered promiscuous mode [ 91.487093][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.494245][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.501671][ T5823] bridge_slave_0: entered allmulticast mode [ 91.509508][ T5823] bridge_slave_0: entered promiscuous mode [ 91.574412][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.585739][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.593213][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.601220][ T5823] bridge_slave_1: entered allmulticast mode [ 91.608756][ T5823] bridge_slave_1: entered promiscuous mode [ 91.676350][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.716325][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.723495][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.731025][ T5831] bridge_slave_0: entered allmulticast mode [ 91.738935][ T5831] bridge_slave_0: entered promiscuous mode [ 91.746705][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.753888][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.765028][ T5818] bridge_slave_0: entered allmulticast mode [ 91.772705][ T5818] bridge_slave_0: entered promiscuous mode [ 91.785557][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.806664][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.816141][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.823947][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.831327][ T5831] bridge_slave_1: entered allmulticast mode [ 91.839712][ T5831] bridge_slave_1: entered promiscuous mode [ 91.861728][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.869069][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.876674][ T5818] bridge_slave_1: entered allmulticast mode [ 91.884011][ T5818] bridge_slave_1: entered promiscuous mode [ 91.920690][ T59] cfg80211: failed to load regulatory.db [ 91.935705][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.035920][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.048861][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.080104][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.092437][ T5822] team0: Port device team_slave_0 added [ 92.122450][ T5823] team0: Port device team_slave_0 added [ 92.132209][ T5823] team0: Port device team_slave_1 added [ 92.154950][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.165751][ T5822] team0: Port device team_slave_1 added [ 92.237949][ T5129] Bluetooth: hci0: command tx timeout [ 92.289049][ T5831] team0: Port device team_slave_0 added [ 92.312554][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.319835][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.346317][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.358089][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.365294][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.373095][ T5834] bridge_slave_0: entered allmulticast mode [ 92.382354][ T5834] bridge_slave_0: entered promiscuous mode [ 92.394484][ T5831] team0: Port device team_slave_1 added [ 92.402287][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.406499][ T5824] Bluetooth: hci1: command tx timeout [ 92.413763][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.414962][ T5824] Bluetooth: hci3: command tx timeout [ 92.446418][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.446492][ T5129] Bluetooth: hci2: command tx timeout [ 92.465853][ T5818] team0: Port device team_slave_0 added [ 92.472642][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.479827][ T5824] Bluetooth: hci4: command tx timeout [ 92.481417][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.511675][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.536441][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.543711][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.551559][ T5834] bridge_slave_1: entered allmulticast mode [ 92.559702][ T5834] bridge_slave_1: entered promiscuous mode [ 92.618729][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.625728][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.652619][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.666464][ T5818] team0: Port device team_slave_1 added [ 92.712178][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.719856][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.746486][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.797652][ T5822] hsr_slave_0: entered promiscuous mode [ 92.804185][ T5822] hsr_slave_1: entered promiscuous mode [ 92.814736][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.825125][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.832222][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.858518][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.895107][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.902260][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.928545][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.941423][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.948467][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.974402][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.988763][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.097386][ T5831] hsr_slave_0: entered promiscuous mode [ 93.103855][ T5831] hsr_slave_1: entered promiscuous mode [ 93.110860][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.119204][ T5831] Cannot create hsr debugfs directory [ 93.142071][ T5834] team0: Port device team_slave_0 added [ 93.154243][ T5823] hsr_slave_0: entered promiscuous mode [ 93.160813][ T5823] hsr_slave_1: entered promiscuous mode [ 93.167977][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.175557][ T5823] Cannot create hsr debugfs directory [ 93.220516][ T5834] team0: Port device team_slave_1 added [ 93.282345][ T5818] hsr_slave_0: entered promiscuous mode [ 93.288948][ T5818] hsr_slave_1: entered promiscuous mode [ 93.295041][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.302912][ T5818] Cannot create hsr debugfs directory [ 93.352281][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.360125][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.386835][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.450174][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.457886][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.484461][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.656129][ T5834] hsr_slave_0: entered promiscuous mode [ 93.663568][ T5834] hsr_slave_1: entered promiscuous mode [ 93.669831][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.677712][ T5834] Cannot create hsr debugfs directory [ 94.031146][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.043793][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.071099][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.091442][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.178700][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.191154][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.203807][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.215389][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.303069][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.315716][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.316569][ T5824] Bluetooth: hci0: command tx timeout [ 94.333057][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.348718][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.479956][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.486920][ T5824] Bluetooth: hci3: command tx timeout [ 94.492358][ T5129] Bluetooth: hci2: command tx timeout [ 94.497583][ T5824] Bluetooth: hci1: command tx timeout [ 94.525640][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.549710][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.560775][ T5824] Bluetooth: hci4: command tx timeout [ 94.575530][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.607369][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.620867][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.695281][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.702671][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.719994][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.731279][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.744209][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.754537][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.789203][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.796380][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.842654][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.889162][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.942583][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.989351][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.996624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.022899][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.051411][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.058630][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.103675][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.110922][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.143579][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.150813][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.285990][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.339906][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.369859][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.451013][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.458758][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.482628][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.494873][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.559222][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.566523][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.641341][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.648596][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.689051][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.696304][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.853982][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.011793][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.185835][ T5823] veth0_vlan: entered promiscuous mode [ 96.258220][ T5823] veth1_vlan: entered promiscuous mode [ 96.360536][ T5831] veth0_vlan: entered promiscuous mode [ 96.396916][ T5824] Bluetooth: hci0: command tx timeout [ 96.430742][ T5823] veth0_macvtap: entered promiscuous mode [ 96.441830][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.462200][ T5831] veth1_vlan: entered promiscuous mode [ 96.480576][ T5823] veth1_macvtap: entered promiscuous mode [ 96.509100][ T5822] veth0_vlan: entered promiscuous mode [ 96.521052][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.548640][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.557170][ T5824] Bluetooth: hci1: command tx timeout [ 96.557559][ T5821] Bluetooth: hci3: command tx timeout [ 96.569037][ T5129] Bluetooth: hci2: command tx timeout [ 96.589739][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.599747][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.608874][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.618154][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.629889][ T5822] veth1_vlan: entered promiscuous mode [ 96.636696][ T5129] Bluetooth: hci4: command tx timeout [ 96.654229][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.701159][ T5834] veth0_vlan: entered promiscuous mode [ 96.737459][ T5831] veth0_macvtap: entered promiscuous mode [ 96.769294][ T5834] veth1_vlan: entered promiscuous mode [ 96.790278][ T5831] veth1_macvtap: entered promiscuous mode [ 96.846966][ T5822] veth0_macvtap: entered promiscuous mode [ 96.881165][ T5822] veth1_macvtap: entered promiscuous mode [ 96.898520][ T5818] veth0_vlan: entered promiscuous mode [ 96.920197][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.932176][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.944389][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.955724][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.974290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.992764][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.005525][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.015673][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.028851][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.040871][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.048901][ T5818] veth1_vlan: entered promiscuous mode [ 97.067356][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.079284][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.091429][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.104047][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.114787][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.125920][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.136955][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.148496][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.178553][ T5834] veth0_macvtap: entered promiscuous mode [ 97.189644][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.200055][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.209123][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.217958][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.235822][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.245064][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.254200][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.263462][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301550][ T5834] veth1_macvtap: entered promiscuous mode [ 97.312220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.328919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.381472][ T5818] veth0_macvtap: entered promiscuous mode [ 97.401298][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.416021][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.425969][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.437542][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.447511][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.458054][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.471546][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.495138][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.512067][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.522416][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.533796][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.543712][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.554210][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.565797][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.583177][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.623734][ T5818] veth1_macvtap: entered promiscuous mode [ 97.644405][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653596][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.663342][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.672561][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.699735][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.730408][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.812375][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.813258][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.823156][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.843095][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.853804][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.865449][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.866914][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.877360][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.893591][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.905156][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.919975][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.953727][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.965303][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.976005][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.987660][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.998169][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.008828][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.019261][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.030056][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.041501][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.050326][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.068049][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.084139][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.111700][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.121873][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.132369][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.141285][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.184562][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.198602][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.213891][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.238591][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 98.262699][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.273435][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.306602][ T5876] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 98.327524][ T5876] usb 4-1: config 0 has no interface number 0 [ 98.333740][ T5876] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 98.355816][ T5876] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 98.414896][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.437059][ T5876] usb 4-1: config 0 interface 88 has no altsetting 0 [ 98.450440][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.466393][ T5876] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 98.475512][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 98.496589][ T5129] Bluetooth: hci0: command tx timeout [ 98.526325][ T5876] usb 4-1: Product: syz [ 98.534682][ T5876] usb 4-1: Manufacturer: syz [ 98.539463][ T5876] usb 4-1: SerialNumber: syz [ 98.557665][ T5876] usb 4-1: config 0 descriptor?? [ 98.584604][ T5911] sctp: [Deprecated]: syz.1.2 (pid 5911) Use of int in maxseg socket option. [ 98.584604][ T5911] Use struct sctp_assoc_value instead [ 98.597051][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.634034][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.641826][ T5129] Bluetooth: hci3: command tx timeout [ 98.647646][ T5129] Bluetooth: hci2: command tx timeout [ 98.648758][ T5821] Bluetooth: hci1: command tx timeout [ 98.717009][ T5821] Bluetooth: hci4: command tx timeout [ 98.771246][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.820160][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.900488][ T5876] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input5 [ 99.028219][ T5876] usb 4-1: USB disconnect, device number 2 [ 99.324625][ T5920] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 99.327784][ T5919] process 'syz.2.6' launched '/dev/fd/4' with NULL argv: empty string added [ 100.187738][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.565075][ T5935] FAULT_INJECTION: forcing a failure. [ 100.565075][ T5935] name failslab, interval 1, probability 0, space 0, times 1 [ 100.940495][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.2.9 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 100.940527][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.940548][ T5935] Call Trace: [ 100.940561][ T5935] [ 100.940573][ T5935] dump_stack_lvl+0x189/0x250 [ 100.940621][ T5935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.940650][ T5935] ? __pfx__printk+0x10/0x10 [ 100.940690][ T5935] ? __pfx___might_resched+0x10/0x10 [ 100.940729][ T5935] should_fail_ex+0x414/0x560 [ 100.940757][ T5935] should_failslab+0xa8/0x100 [ 100.940780][ T5935] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 100.940815][ T5935] ? __alloc_skb+0x112/0x2d0 [ 100.940846][ T5935] __alloc_skb+0x112/0x2d0 [ 100.940877][ T5935] netlink_sendmsg+0x5c6/0xb30 [ 100.940915][ T5935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.940950][ T5935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.940973][ T5935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.940999][ T5935] __sock_sendmsg+0x21c/0x270 [ 100.941025][ T5935] ____sys_sendmsg+0x505/0x830 [ 100.941061][ T5935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.941101][ T5935] ? import_iovec+0x74/0xa0 [ 100.941135][ T5935] ___sys_sendmsg+0x21f/0x2a0 [ 100.941167][ T5935] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.941245][ T5935] ? __fget_files+0x2a/0x420 [ 100.941265][ T5935] ? __fget_files+0x3a0/0x420 [ 100.941297][ T5935] __x64_sys_sendmsg+0x19b/0x260 [ 100.941331][ T5935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.941380][ T5935] ? do_syscall_64+0xba/0x210 [ 100.941413][ T5935] do_syscall_64+0xf6/0x210 [ 100.941441][ T5935] ? clear_bhb_loop+0x60/0xb0 [ 100.941468][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.941489][ T5935] RIP: 0033:0x7f2a6a78e969 [ 100.941517][ T5935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.941535][ T5935] RSP: 002b:00007f2a6b60c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.941558][ T5935] RAX: ffffffffffffffda RBX: 00007f2a6a9b5fa0 RCX: 00007f2a6a78e969 [ 100.941574][ T5935] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 100.941587][ T5935] RBP: 00007f2a6b60c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.941600][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.941612][ T5935] R13: 0000000000000000 R14: 00007f2a6a9b5fa0 R15: 00007ffe626f8708 [ 100.941646][ T5935] [ 101.526368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.688062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.759083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.769489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.779331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.789264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.806780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.816570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.837653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.847798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.097288][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.192905][ T5952] xt_connbytes: Forcing CT accounting to be enabled [ 103.201265][ T5952] Cannot find add_set index 0 as target [ 104.226434][ T5960] IPv6: syztnl0: Disabled Multicast RS [ 104.491529][ T5973] sp0: Synchronizing with TNC [ 105.078155][ T5973] [U] è [ 105.166417][ T59] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.321962][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 105.557561][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 106.535342][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.550179][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.560232][ T59] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.569363][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.580678][ T59] usb 4-1: config 0 descriptor?? [ 106.634330][ T59] hub 4-1:0.0: USB hub found [ 106.997196][ T5999] FAULT_INJECTION: forcing a failure. [ 106.997196][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.047907][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.4.28 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 107.047940][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.047956][ T5999] Call Trace: [ 107.047964][ T5999] [ 107.047973][ T5999] dump_stack_lvl+0x189/0x250 [ 107.048018][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.048047][ T5999] ? __pfx__printk+0x10/0x10 [ 107.048095][ T5999] should_fail_ex+0x414/0x560 [ 107.048124][ T5999] _copy_to_user+0x31/0xb0 [ 107.048157][ T5999] simple_read_from_buffer+0xe1/0x170 [ 107.048196][ T5999] proc_fail_nth_read+0x1df/0x250 [ 107.048224][ T5999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.048250][ T5999] ? rw_verify_area+0x258/0x650 [ 107.048280][ T5999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.048304][ T5999] vfs_read+0x200/0x980 [ 107.048340][ T5999] ? __pfx___mutex_lock+0x10/0x10 [ 107.048369][ T5999] ? __pfx_vfs_read+0x10/0x10 [ 107.048401][ T5999] ? __fget_files+0x2a/0x420 [ 107.048427][ T5999] ? __fget_files+0x3a0/0x420 [ 107.048446][ T5999] ? __fget_files+0x2a/0x420 [ 107.048475][ T5999] ksys_read+0x145/0x250 [ 107.048510][ T5999] ? __pfx_ksys_read+0x10/0x10 [ 107.048544][ T5999] ? do_syscall_64+0xba/0x210 [ 107.048577][ T5999] do_syscall_64+0xf6/0x210 [ 107.048607][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 107.048633][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.048655][ T5999] RIP: 0033:0x7fc414d8d37c [ 107.048674][ T5999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.048692][ T5999] RSP: 002b:00007fc415b64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.048714][ T5999] RAX: ffffffffffffffda RBX: 00007fc414fb5fa0 RCX: 00007fc414d8d37c [ 107.048730][ T5999] RDX: 000000000000000f RSI: 00007fc415b640a0 RDI: 0000000000000004 [ 107.048743][ T5999] RBP: 00007fc415b64090 R08: 0000000000000000 R09: 0000000000000000 [ 107.048756][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.048769][ T5999] R13: 0000000000000000 R14: 00007fc414fb5fa0 R15: 00007ffe7ed85318 [ 107.048802][ T5999] [ 107.266951][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.339979][ T6000] cgroup: fork rejected by pids controller in /syz1 [ 107.418726][ T59] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 107.431775][ T59] usbhid 4-1:0.0: can't add hid device: -71 [ 107.437920][ T59] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 107.488203][ T59] usb 4-1: USB disconnect, device number 3 [ 107.524474][ T6103] FAULT_INJECTION: forcing a failure. [ 107.524474][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.555085][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.4.29 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 107.555117][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.555130][ T6103] Call Trace: [ 107.555139][ T6103] [ 107.555148][ T6103] dump_stack_lvl+0x189/0x250 [ 107.555181][ T6103] ? __lock_acquire+0xaac/0xd20 [ 107.555214][ T6103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.555242][ T6103] ? __pfx__printk+0x10/0x10 [ 107.555275][ T6103] ? __might_fault+0xb0/0x130 [ 107.555320][ T6103] should_fail_ex+0x414/0x560 [ 107.555348][ T6103] _copy_from_iter+0x1db/0x15a0 [ 107.555383][ T6103] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 107.555414][ T6103] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 107.555449][ T6103] ? __pfx__copy_from_iter+0x10/0x10 [ 107.555476][ T6103] ? __build_skb_around+0x257/0x3e0 [ 107.555506][ T6103] ? netlink_sendmsg+0x642/0xb30 [ 107.555530][ T6103] ? skb_put+0x11b/0x210 [ 107.555560][ T6103] netlink_sendmsg+0x6b2/0xb30 [ 107.555584][ T6103] ? is_bpf_text_address+0x26/0x2b0 [ 107.555624][ T6103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.555658][ T6103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.555680][ T6103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.555706][ T6103] __sock_sendmsg+0x21c/0x270 [ 107.555731][ T6103] ____sys_sendmsg+0x505/0x830 [ 107.555767][ T6103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.555806][ T6103] ? import_iovec+0x74/0xa0 [ 107.555840][ T6103] ___sys_sendmsg+0x21f/0x2a0 [ 107.555872][ T6103] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.555946][ T6103] ? __fget_files+0x2a/0x420 [ 107.555966][ T6103] ? __fget_files+0x3a0/0x420 [ 107.555997][ T6103] __x64_sys_sendmsg+0x19b/0x260 [ 107.556030][ T6103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.556082][ T6103] ? do_syscall_64+0xba/0x210 [ 107.556114][ T6103] do_syscall_64+0xf6/0x210 [ 107.556143][ T6103] ? clear_bhb_loop+0x60/0xb0 [ 107.556168][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.556188][ T6103] RIP: 0033:0x7fc414d8e969 [ 107.556207][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.556224][ T6103] RSP: 002b:00007fc415b64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.556246][ T6103] RAX: ffffffffffffffda RBX: 00007fc414fb5fa0 RCX: 00007fc414d8e969 [ 107.556262][ T6103] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 107.556275][ T6103] RBP: 00007fc415b64090 R08: 0000000000000000 R09: 0000000000000000 [ 107.556288][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.556300][ T6103] R13: 0000000000000000 R14: 00007fc414fb5fa0 R15: 00007ffe7ed85318 [ 107.556332][ T6103] [ 108.160572][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.443692][ T6476] hugetlbfs: syz.4.32 (6476): Using mlock ulimits for SHM_HUGETLB is obsolete [ 108.472175][ T5874] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.928843][ T6474] overlay: Unknown parameter 'uid' [ 109.073574][ T6471] Zero length message leads to an empty skb [ 109.198699][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 109.255085][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 109.296571][ T5874] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.601364][ T5874] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 109.726288][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.787748][ T6487] FAULT_INJECTION: forcing a failure. [ 109.787748][ T6487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.802047][ T5874] usb 3-1: config 0 has no interface number 0 [ 109.859723][ T5874] usb 3-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.923063][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.4.34 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 109.923095][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.923108][ T6487] Call Trace: [ 109.923116][ T6487] [ 109.923125][ T6487] dump_stack_lvl+0x189/0x250 [ 109.923158][ T6487] ? __lock_acquire+0xaac/0xd20 [ 109.923191][ T6487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.923220][ T6487] ? __pfx__printk+0x10/0x10 [ 109.923253][ T6487] ? __might_fault+0xb0/0x130 [ 109.923299][ T6487] should_fail_ex+0x414/0x560 [ 109.923326][ T6487] _copy_from_iter+0x1db/0x15a0 [ 109.923361][ T6487] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 109.923391][ T6487] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 109.923426][ T6487] ? __pfx__copy_from_iter+0x10/0x10 [ 109.923454][ T6487] ? __build_skb_around+0x257/0x3e0 [ 109.923493][ T6487] ? netlink_sendmsg+0x642/0xb30 [ 109.923520][ T6487] ? skb_put+0x11b/0x210 [ 109.923551][ T6487] netlink_sendmsg+0x6b2/0xb30 [ 109.923574][ T6487] ? is_bpf_text_address+0x26/0x2b0 [ 109.923614][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.923648][ T6487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.923671][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.923697][ T6487] __sock_sendmsg+0x21c/0x270 [ 109.923721][ T6487] ____sys_sendmsg+0x505/0x830 [ 109.923757][ T6487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.923796][ T6487] ? import_iovec+0x74/0xa0 [ 109.923828][ T6487] ___sys_sendmsg+0x21f/0x2a0 [ 109.923858][ T6487] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.923925][ T6487] ? __fget_files+0x2a/0x420 [ 109.923944][ T6487] ? __fget_files+0x3a0/0x420 [ 109.923975][ T6487] __x64_sys_sendmsg+0x19b/0x260 [ 109.924007][ T6487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.924055][ T6487] ? do_syscall_64+0xba/0x210 [ 109.924087][ T6487] do_syscall_64+0xf6/0x210 [ 109.924115][ T6487] ? clear_bhb_loop+0x60/0xb0 [ 109.924141][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.924162][ T6487] RIP: 0033:0x7fc414d8e969 [ 109.924180][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.924197][ T6487] RSP: 002b:00007fc415b64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.924219][ T6487] RAX: ffffffffffffffda RBX: 00007fc414fb5fa0 RCX: 00007fc414d8e969 [ 109.924235][ T6487] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004 [ 109.924249][ T6487] RBP: 00007fc415b64090 R08: 0000000000000000 R09: 0000000000000000 [ 109.924261][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.924274][ T6487] R13: 0000000000000000 R14: 00007fc414fb5fa0 R15: 00007ffe7ed85318 [ 109.924306][ T6487] [ 110.209262][ T5874] usb 3-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 110.222434][ T5874] usb 3-1: config 0 interface 242 has no altsetting 0 [ 110.296471][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.386749][ T5874] usb 3-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 110.395856][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.404229][ T5874] usb 3-1: Product: syz [ 110.408480][ T5874] usb 3-1: Manufacturer: syz [ 110.413097][ T5874] usb 3-1: SerialNumber: syz [ 110.425936][ T5874] usb 3-1: config 0 descriptor?? [ 110.680616][ T47] usb 3-1: USB disconnect, device number 2 [ 110.867562][ T30] audit: type=1326 audit(1747328113.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6484 comm="syz.1.35" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b53f8e969 code=0x0 [ 112.363543][ T6523] FAULT_INJECTION: forcing a failure. [ 112.363543][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.391487][ T6518] sp0: Synchronizing with TNC [ 112.399018][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.441784][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.3.43 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 112.441815][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.441828][ T6523] Call Trace: [ 112.441836][ T6523] [ 112.441845][ T6523] dump_stack_lvl+0x189/0x250 [ 112.441876][ T6523] ? __lock_acquire+0xaac/0xd20 [ 112.441907][ T6523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.441940][ T6523] ? __pfx__printk+0x10/0x10 [ 112.441973][ T6523] ? __might_fault+0xb0/0x130 [ 112.442018][ T6523] should_fail_ex+0x414/0x560 [ 112.442045][ T6523] _copy_from_user+0x2d/0xb0 [ 112.442075][ T6523] ___sys_sendmsg+0x158/0x2a0 [ 112.442106][ T6523] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.442170][ T6523] ? __fget_files+0x2a/0x420 [ 112.442188][ T6523] ? __fget_files+0x3a0/0x420 [ 112.442219][ T6523] __x64_sys_sendmsg+0x19b/0x260 [ 112.442259][ T6523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.442307][ T6523] ? do_syscall_64+0xba/0x210 [ 112.442339][ T6523] do_syscall_64+0xf6/0x210 [ 112.442367][ T6523] ? clear_bhb_loop+0x60/0xb0 [ 112.442393][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.442413][ T6523] RIP: 0033:0x7f4e4858e969 [ 112.442432][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.442449][ T6523] RSP: 002b:00007f4e4949c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.442470][ T6523] RAX: ffffffffffffffda RBX: 00007f4e487b5fa0 RCX: 00007f4e4858e969 [ 112.442486][ T6523] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 112.442499][ T6523] RBP: 00007f4e4949c090 R08: 0000000000000000 R09: 0000000000000000 [ 112.442512][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.442524][ T6523] R13: 0000000000000000 R14: 00007f4e487b5fa0 R15: 00007ffe28c4a3d8 [ 112.442557][ T6523] [ 112.724312][ T6519] [U] è [ 112.776526][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 112.863403][ T5874] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.906372][ T5874] usb 3-1: config 179 has no interface number 0 [ 112.915929][ T5874] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 112.955757][ T6529] FAULT_INJECTION: forcing a failure. [ 112.955757][ T6529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.964023][ T5874] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 112.985534][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.0.45 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 112.985564][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.985577][ T6529] Call Trace: [ 112.985586][ T6529] [ 112.985595][ T6529] dump_stack_lvl+0x189/0x250 [ 112.985627][ T6529] ? __lock_acquire+0xaac/0xd20 [ 112.985660][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.985690][ T6529] ? __pfx__printk+0x10/0x10 [ 112.985723][ T6529] ? __might_fault+0xb0/0x130 [ 112.985769][ T6529] should_fail_ex+0x414/0x560 [ 112.985797][ T6529] _copy_from_iter+0x1db/0x15a0 [ 112.985832][ T6529] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 112.985862][ T6529] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 112.985896][ T6529] ? __pfx__copy_from_iter+0x10/0x10 [ 112.985925][ T6529] ? __build_skb_around+0x257/0x3e0 [ 112.985955][ T6529] ? netlink_sendmsg+0x642/0xb30 [ 112.985978][ T6529] ? skb_put+0x11b/0x210 [ 112.986009][ T6529] netlink_sendmsg+0x6b2/0xb30 [ 112.986032][ T6529] ? is_bpf_text_address+0x26/0x2b0 [ 112.986072][ T6529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.986106][ T6529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.986128][ T6529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.986158][ T6529] __sock_sendmsg+0x21c/0x270 [ 112.986181][ T6529] ____sys_sendmsg+0x505/0x830 [ 112.986223][ T6529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.986260][ T6529] ? import_iovec+0x74/0xa0 [ 112.986292][ T6529] ___sys_sendmsg+0x21f/0x2a0 [ 112.986322][ T6529] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.986388][ T6529] ? __fget_files+0x2a/0x420 [ 112.986408][ T6529] ? __fget_files+0x3a0/0x420 [ 112.986438][ T6529] __x64_sys_sendmsg+0x19b/0x260 [ 112.986471][ T6529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.986518][ T6529] ? do_syscall_64+0xba/0x210 [ 112.986550][ T6529] do_syscall_64+0xf6/0x210 [ 112.986578][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 112.986605][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.986625][ T6529] RIP: 0033:0x7f50afb8e969 [ 112.986644][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.986661][ T6529] RSP: 002b:00007f50ad9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.986682][ T6529] RAX: ffffffffffffffda RBX: 00007f50afdb5fa0 RCX: 00007f50afb8e969 [ 112.986698][ T6529] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 112.986712][ T6529] RBP: 00007f50ad9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.986724][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.986737][ T6529] R13: 0000000000000000 R14: 00007f50afdb5fa0 R15: 00007ffdb5b0e8a8 [ 112.986769][ T6529] [ 113.253362][ T5874] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 113.264879][ T5874] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 113.276405][ T5874] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.289886][ T5874] usb 3-1: config 179 interface 65 has no altsetting 0 [ 113.296879][ T5874] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 113.306889][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.442391][ T6533] FAULT_INJECTION: forcing a failure. [ 113.442391][ T6533] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.457414][ T5874] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 113.475230][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.3.47 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 113.475260][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.475272][ T6533] Call Trace: [ 113.475281][ T6533] [ 113.475290][ T6533] dump_stack_lvl+0x189/0x250 [ 113.475328][ T6533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.475357][ T6533] ? __pfx__printk+0x10/0x10 [ 113.475391][ T6533] ? fs_reclaim_acquire+0x7d/0x100 [ 113.475423][ T6533] should_fail_ex+0x414/0x560 [ 113.475452][ T6533] prepare_alloc_pages+0x213/0x610 [ 113.475484][ T6533] __alloc_frozen_pages_noprof+0x123/0x370 [ 113.475514][ T6533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.475547][ T6533] ? policy_nodemask+0x27c/0x720 [ 113.475586][ T6533] alloc_pages_mpol+0x232/0x4a0 [ 113.475625][ T6533] folio_alloc_mpol_noprof+0x39/0x70 [ 113.475661][ T6533] shmem_alloc_and_add_folio+0x447/0xf60 [ 113.475686][ T6533] ? filemap_get_entry+0xad/0x2f0 [ 113.475718][ T6533] ? filemap_get_entry+0xad/0x2f0 [ 113.475748][ T6533] ? filemap_get_entry+0xad/0x2f0 [ 113.475783][ T6533] ? shmem_huge_global_enabled+0x174/0x3a0 [ 113.475814][ T6533] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 113.475839][ T6533] ? shmem_allowable_huge_orders+0x414/0x420 [ 113.475878][ T6533] shmem_get_folio_gfp+0x597/0x15f0 [ 113.475931][ T6533] shmem_fault+0x179/0x390 [ 113.475961][ T6533] __do_fault+0x135/0x390 [ 113.475986][ T6533] __handle_mm_fault+0x17f9/0x5380 [ 113.476018][ T6533] ? mt_find+0x15c/0x5f0 [ 113.476063][ T6533] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.476110][ T6533] ? find_vma+0xe7/0x160 [ 113.476129][ T6533] ? __pfx_find_vma+0x10/0x10 [ 113.476157][ T6533] handle_mm_fault+0x2d5/0x7f0 [ 113.476209][ T6533] do_user_addr_fault+0x764/0x1390 [ 113.476261][ T6533] exc_page_fault+0x68/0x110 [ 113.476290][ T6533] asm_exc_page_fault+0x26/0x30 [ 113.476309][ T6533] RIP: 0010:do_sys_poll+0xe37/0x1050 [ 113.476342][ T6533] Code: 24 58 48 83 c2 06 ff cb 48 8b 74 24 28 4c 8d 76 12 45 31 ff 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 2b 42 0f b7 44 fe 12 <66> 89 02 49 89 d5 44 39 fb 74 3b e8 39 f4 89 ff 4c 89 ea 48 83 c2 [ 113.476359][ T6533] RSP: 0018:ffffc9000af5f860 EFLAGS: 00050246 [ 113.476378][ T6533] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.476390][ T6533] RDX: 0000200000000186 RSI: ffffc9000af5fc70 RDI: 0000000000000000 [ 113.476405][ T6533] RBP: ffffc9000af5fe10 R08: ffff8880227eb827 R09: 1ffff110044fd704 [ 113.476420][ T6533] R10: dffffc0000000000 R11: ffffed10044fd705 R12: dffffc0000000000 [ 113.476436][ T6533] R13: 0000000000000001 R14: ffffc9000af5fc82 R15: 0000000000000000 [ 113.476475][ T6533] ? do_sys_poll+0x681/0x1050 [ 113.476517][ T6533] ? __pfx_do_sys_poll+0x10/0x10 [ 113.476569][ T6533] ? __pfx_pollwake+0x10/0x10 [ 113.476655][ T6533] ? rcu_read_lock_any_held+0xb3/0x120 [ 113.476690][ T6533] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 113.476729][ T6533] ? vfs_write+0x8d8/0xa90 [ 113.476786][ T6533] ? set_user_sigmask+0xc7/0x1b0 [ 113.476819][ T6533] ? __pfx_set_user_sigmask+0x10/0x10 [ 113.476854][ T6533] ? __irq_exit_rcu+0xca/0x1f0 [ 113.476892][ T6533] __se_sys_ppoll+0x1ff/0x260 [ 113.476927][ T6533] ? __pfx___se_sys_ppoll+0x10/0x10 [ 113.476968][ T6533] ? do_syscall_64+0xba/0x210 [ 113.476994][ T6533] ? __x64_sys_ppoll+0x20/0xc0 [ 113.477027][ T6533] do_syscall_64+0xf6/0x210 [ 113.477053][ T6533] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 113.477076][ T6533] ? clear_bhb_loop+0x60/0xb0 [ 113.477102][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.477123][ T6533] RIP: 0033:0x7f4e4858e969 [ 113.477143][ T6533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.477160][ T6533] RSP: 002b:00007f4e4949c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 113.477188][ T6533] RAX: ffffffffffffffda RBX: 00007f4e487b5fa0 RCX: 00007f4e4858e969 [ 113.477203][ T6533] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 113.477216][ T6533] RBP: 00007f4e4949c090 R08: 0000000000000000 R09: 0000000000000000 [ 113.477229][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.477241][ T6533] R13: 0000000000000000 R14: 00007f4e487b5fa0 R15: 00007ffe28c4a3d8 [ 113.477275][ T6533] [ 113.497001][ T5174] input input6: unable to receive magic message: -110 [ 113.983970][ T6513] overlayfs: failed to resolve './file1': -2 [ 114.064902][ T6513] ======================================================= [ 114.064902][ T6513] WARNING: The mand mount option has been deprecated and [ 114.064902][ T6513] and is ignored by this kernel. Remove the mand [ 114.064902][ T6513] option from the mount to silence this warning. [ 114.064902][ T6513] ======================================================= [ 114.208640][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 114.217497][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 114.227071][ T5874] usb 3-1: USB disconnect, device number 3 [ 114.279367][ T5874] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 114.551921][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 114.558489][ T30] audit: type=1326 audit(1747328117.356:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4858e969 code=0x7ffc0000 [ 114.643277][ T30] audit: type=1326 audit(1747328117.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4858e969 code=0x7ffc0000 [ 114.731432][ T30] audit: type=1326 audit(1747328117.356:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4858d2d0 code=0x7ffc0000 [ 114.784387][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 114.821118][ T30] audit: type=1326 audit(1747328117.356:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4858d2d0 code=0x7ffc0000 [ 114.916258][ T30] audit: type=1326 audit(1747328117.356:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4858e969 code=0x7ffc0000 [ 115.000746][ T30] audit: type=1326 audit(1747328117.356:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4858e969 code=0x7ffc0000 [ 115.098085][ T30] audit: type=1326 audit(1747328117.366:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e4858e969 code=0x7ffc0000 [ 115.134389][ T6566] FAULT_INJECTION: forcing a failure. [ 115.134389][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 115.168313][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.4.55 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 115.168344][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.168358][ T6566] Call Trace: [ 115.168366][ T6566] [ 115.168376][ T6566] dump_stack_lvl+0x189/0x250 [ 115.168415][ T6566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.168445][ T6566] ? __pfx__printk+0x10/0x10 [ 115.168486][ T6566] ? __pfx___might_resched+0x10/0x10 [ 115.168518][ T6566] ? fs_reclaim_acquire+0x7d/0x100 [ 115.168547][ T6566] should_fail_ex+0x414/0x560 [ 115.168576][ T6566] should_failslab+0xa8/0x100 [ 115.168599][ T6566] __kmalloc_noprof+0xcb/0x4f0 [ 115.168632][ T6566] ? bpf_test_init+0xc2/0x170 [ 115.168659][ T6566] bpf_test_init+0xc2/0x170 [ 115.168687][ T6566] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 115.168729][ T6566] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 115.168759][ T6566] ? __fget_files+0x2a/0x420 [ 115.168782][ T6566] ? __fget_files+0x2a/0x420 [ 115.168801][ T6566] ? __fget_files+0x3a0/0x420 [ 115.168820][ T6566] ? __fget_files+0x2a/0x420 [ 115.168845][ T6566] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 115.168874][ T6566] bpf_prog_test_run+0x2a9/0x340 [ 115.168907][ T6566] __sys_bpf+0x4a4/0x860 [ 115.168936][ T6566] ? __pfx___sys_bpf+0x10/0x10 [ 115.168977][ T6566] ? ksys_write+0x1f0/0x250 [ 115.169006][ T6566] ? rcu_is_watching+0x15/0xb0 [ 115.169050][ T6566] __x64_sys_bpf+0x7c/0x90 [ 115.169082][ T6566] do_syscall_64+0xf6/0x210 [ 115.169112][ T6566] ? clear_bhb_loop+0x60/0xb0 [ 115.169139][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.169166][ T6566] RIP: 0033:0x7fc414d8e969 [ 115.169186][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.169203][ T6566] RSP: 002b:00007fc415b64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.169227][ T6566] RAX: ffffffffffffffda RBX: 00007fc414fb5fa0 RCX: 00007fc414d8e969 [ 115.169243][ T6566] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 115.169256][ T6566] RBP: 00007fc415b64090 R08: 0000000000000000 R09: 0000000000000000 [ 115.169269][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.169282][ T6566] R13: 0000000000000000 R14: 00007fc414fb5fa0 R15: 00007ffe7ed85318 [ 115.169315][ T6566] [ 115.409585][ T30] audit: type=1326 audit(1747328117.366:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4858e969 code=0x7ffc0000 [ 115.432023][ T30] audit: type=1326 audit(1747328117.366:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.3.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4858d2d0 code=0x7ffc0000 [ 115.751515][ T6569] netlink: 56 bytes leftover after parsing attributes in process `syz.2.54'. [ 116.262525][ T6575] FAULT_INJECTION: forcing a failure. [ 116.262525][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.277161][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.2.59 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 116.277191][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.277204][ T6575] Call Trace: [ 116.277212][ T6575] [ 116.277229][ T6575] dump_stack_lvl+0x189/0x250 [ 116.277262][ T6575] ? __lock_acquire+0xaac/0xd20 [ 116.277296][ T6575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.277326][ T6575] ? __pfx__printk+0x10/0x10 [ 116.277361][ T6575] ? __might_fault+0xb0/0x130 [ 116.277407][ T6575] should_fail_ex+0x414/0x560 [ 116.277435][ T6575] _copy_from_iter+0x1db/0x15a0 [ 116.277470][ T6575] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 116.277499][ T6575] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 116.277533][ T6575] ? __pfx__copy_from_iter+0x10/0x10 [ 116.277562][ T6575] ? __build_skb_around+0x257/0x3e0 [ 116.277593][ T6575] ? netlink_sendmsg+0x642/0xb30 [ 116.277617][ T6575] ? skb_put+0x11b/0x210 [ 116.277648][ T6575] netlink_sendmsg+0x6b2/0xb30 [ 116.277672][ T6575] ? is_bpf_text_address+0x26/0x2b0 [ 116.277711][ T6575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.277746][ T6575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.277769][ T6575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.277796][ T6575] __sock_sendmsg+0x21c/0x270 [ 116.277821][ T6575] ____sys_sendmsg+0x505/0x830 [ 116.277857][ T6575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.277897][ T6575] ? import_iovec+0x74/0xa0 [ 116.277930][ T6575] ___sys_sendmsg+0x21f/0x2a0 [ 116.277963][ T6575] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.278032][ T6575] ? __fget_files+0x2a/0x420 [ 116.278052][ T6575] ? __fget_files+0x3a0/0x420 [ 116.278083][ T6575] __x64_sys_sendmsg+0x19b/0x260 [ 116.278116][ T6575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.278163][ T6575] ? do_syscall_64+0xba/0x210 [ 116.278195][ T6575] do_syscall_64+0xf6/0x210 [ 116.278232][ T6575] ? clear_bhb_loop+0x60/0xb0 [ 116.278259][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.278280][ T6575] RIP: 0033:0x7f2a6a78e969 [ 116.278298][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.278317][ T6575] RSP: 002b:00007f2a6b60c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.278339][ T6575] RAX: ffffffffffffffda RBX: 00007f2a6a9b5fa0 RCX: 00007f2a6a78e969 [ 116.278355][ T6575] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 116.278369][ T6575] RBP: 00007f2a6b60c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.278382][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.278394][ T6575] R13: 0000000000000000 R14: 00007f2a6a9b5fa0 R15: 00007ffe626f8708 [ 116.278427][ T6575] [ 116.813296][ T6584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 117.554408][ T6590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 117.561217][ T6590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.570454][ T6590] vhci_hcd vhci_hcd.0: Device attached [ 117.582086][ T6590] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(19) [ 117.588755][ T6590] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.598609][ T6590] vhci_hcd vhci_hcd.0: Device attached [ 117.631796][ T6590] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.673642][ T6593] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(25) [ 117.680291][ T6593] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.688616][ T6590] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 117.695236][ T6590] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.705416][ T6590] vhci_hcd vhci_hcd.0: Device attached [ 117.708204][ T6593] vhci_hcd vhci_hcd.0: Device attached [ 117.775305][ T6599] vhci_hcd: connection closed [ 117.778343][ T13] vhci_hcd: stop threads [ 117.787774][ T5877] vhci_hcd: vhci_device speed not set [ 117.803540][ T6600] vhci_hcd: connection closed [ 117.805666][ T6596] vhci_hcd: connection closed [ 117.811447][ T6594] vhci_hcd: connection closed [ 117.825011][ T13] vhci_hcd: release socket [ 117.874703][ T13] vhci_hcd: disconnect device [ 117.881568][ T5877] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 117.920412][ T6602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.937845][ T6595] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 117.938442][ T13] vhci_hcd: stop threads [ 117.981616][ T13] vhci_hcd: release socket [ 118.010659][ T13] vhci_hcd: disconnect device [ 118.091811][ T13] vhci_hcd: stop threads [ 118.112958][ T13] vhci_hcd: release socket [ 118.121291][ T13] vhci_hcd: disconnect device [ 118.137171][ T13] vhci_hcd: stop threads [ 118.154150][ T13] vhci_hcd: release socket [ 118.175270][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.66'. [ 118.184655][ T13] vhci_hcd: disconnect device [ 118.328555][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.341240][ T6618] syz.1.67: attempt to access beyond end of device [ 118.341240][ T6618] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 118.401359][ T6618] MINIX-fs: unable to read superblock [ 118.486321][ T59] usb 3-1: device descriptor read/64, error -71 [ 118.493049][ T6623] kAFS: unparsable volume name [ 119.496345][ T59] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.676436][ T59] usb 3-1: device descriptor read/64, error -71 [ 119.830745][ T59] usb usb3-port1: attempt power cycle [ 120.238619][ T59] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.289522][ T59] usb 3-1: device descriptor read/8, error -71 [ 120.310746][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.520594][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 120.531300][ T5835] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.546288][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.562539][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.578168][ T59] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.596374][ T5835] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.621704][ T59] usb 3-1: device descriptor read/8, error -71 [ 120.636213][ T5835] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.656211][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.739790][ T59] usb usb3-port1: unable to enumerate USB device [ 120.756852][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.926231][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 120.937026][ T5835] usb 2-1: GET_CAPABILITIES returned 0 [ 120.948492][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.966269][ T5835] usbtmc 2-1:16.0: can't read capabilities [ 120.976305][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.022256][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.050441][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.084825][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.135438][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.165001][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 121.165025][ T30] audit: type=1326 audit(1747328123.976:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b53f8e969 code=0x7ffc0000 [ 121.211428][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 121.225574][ T5874] usb 2-1: USB disconnect, device number 2 [ 121.271318][ T30] audit: type=1326 audit(1747328124.016:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2b53f8e969 code=0x7ffc0000 [ 121.355519][ T30] audit: type=1326 audit(1747328124.016:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b53f8e969 code=0x7ffc0000 [ 121.400516][ T5876] usb 1-1: GET_CAPABILITIES returned 0 [ 121.410363][ T5876] usbtmc 1-1:16.0: can't read capabilities [ 121.418691][ T30] audit: type=1326 audit(1747328124.016:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b53f8d2d0 code=0x7ffc0000 [ 121.453364][ T30] audit: type=1326 audit(1747328124.026:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b53f8e969 code=0x7ffc0000 [ 121.601877][ T6641] FAULT_INJECTION: forcing a failure. [ 121.601877][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 121.640668][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.0.74 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 121.640701][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.640718][ T6641] Call Trace: [ 121.640728][ T6641] [ 121.640737][ T6641] dump_stack_lvl+0x189/0x250 [ 121.640787][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.640823][ T6641] ? __pfx__printk+0x10/0x10 [ 121.640864][ T6641] ? __pfx___might_resched+0x10/0x10 [ 121.640902][ T6641] should_fail_ex+0x414/0x560 [ 121.640931][ T6641] should_failslab+0xa8/0x100 [ 121.640954][ T6641] __kmalloc_noprof+0xcb/0x4f0 [ 121.640987][ T6641] ? usb_alloc_urb+0x46/0x150 [ 121.641018][ T6641] usb_alloc_urb+0x46/0x150 [ 121.641045][ T6641] usbtmc_generic_read+0x420/0x1700 [ 121.641096][ T6641] ? __pfx_usbtmc_generic_read+0x10/0x10 [ 121.641143][ T6641] usbtmc_ioctl_generic_read+0xe7/0x170 [ 121.641174][ T6641] ? __pfx_smack_file_ioctl+0x10/0x10 [ 121.641196][ T6641] ? __pfx_usbtmc_ioctl_generic_read+0x10/0x10 [ 121.641235][ T6641] ? __fget_files+0x3a0/0x420 [ 121.641259][ T6641] usbtmc_ioctl+0x485/0x720 [ 121.641288][ T6641] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 121.641315][ T6641] __se_sys_ioctl+0xf9/0x170 [ 121.641347][ T6641] do_syscall_64+0xf6/0x210 [ 121.641378][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 121.641405][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.641426][ T6641] RIP: 0033:0x7f50afb8e969 [ 121.641453][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.641471][ T6641] RSP: 002b:00007f50ad9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.641501][ T6641] RAX: ffffffffffffffda RBX: 00007f50afdb5fa0 RCX: 00007f50afb8e969 [ 121.641517][ T6641] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 121.641531][ T6641] RBP: 00007f50ad9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.641545][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.641555][ T6641] R13: 0000000000000000 R14: 00007f50afdb5fa0 R15: 00007ffdb5b0e8a8 [ 121.641586][ T6641] [ 121.642695][ T59] usb 1-1: USB disconnect, device number 2 [ 122.046296][ T5835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.144256][ T30] audit: type=1326 audit(1747328124.026:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b53f8d2d0 code=0x7ffc0000 [ 122.166321][ T30] audit: type=1326 audit(1747328124.026:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b53f90197 code=0x7ffc0000 [ 122.234043][ T30] audit: type=1326 audit(1747328124.026:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b53f8e969 code=0x7ffc0000 [ 122.258287][ T5835] usb 5-1: device descriptor read/64, error -71 [ 122.288930][ T30] audit: type=1326 audit(1747328124.026:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b53f90197 code=0x7ffc0000 [ 122.332132][ T30] audit: type=1326 audit(1747328124.026:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2b53f8d5ca code=0x7ffc0000 [ 122.536402][ T5835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.696990][ T5835] usb 5-1: device descriptor read/64, error -71 [ 122.818515][ T5835] usb usb5-port1: attempt power cycle [ 123.036825][ T5877] vhci_hcd: vhci_device speed not set [ 123.119974][ T59] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.207588][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 123.219911][ T5835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.269160][ T5835] usb 5-1: device descriptor read/8, error -71 [ 123.390665][ T59] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.402177][ T59] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.418472][ T59] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 123.432773][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.481579][ T59] usb 1-1: config 0 descriptor?? [ 123.641571][ T6666] netlink: 52 bytes leftover after parsing attributes in process `syz.3.84'. [ 123.794025][ T5835] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.833678][ T6656] Bluetooth: MGMT ver 1.23 [ 124.006343][ T5835] usb 5-1: device not accepting address 5, error -71 [ 124.109259][ T5835] usb usb5-port1: unable to enumerate USB device [ 124.410796][ T5876] usb 1-1: USB disconnect, device number 3 [ 125.946273][ T5874] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.387322][ T6696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.080060][ T6698] sp0: Synchronizing with TNC [ 128.029561][ T6688] [U] è [ 128.146724][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 128.189209][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.436590][ T5874] usb 2-1: device descriptor read/all, error -71 [ 129.092422][ T6701] capability: warning: `syz.4.91' uses deprecated v2 capabilities in a way that may be insecure [ 129.111536][ T6701] netlink: 252 bytes leftover after parsing attributes in process `syz.4.91'. [ 131.526834][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.555493][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 132.564834][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 132.727160][ T24] usb 2-1: no configurations [ 132.731969][ T24] usb 2-1: can't read configurations, error -22 [ 132.881492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899893][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.932671][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.129279][ T24] usb 2-1: no configurations [ 133.134076][ T24] usb 2-1: can't read configurations, error -22 [ 133.148657][ T24] usb usb2-port1: attempt power cycle [ 133.661904][ T24] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 133.797983][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 133.830947][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.844359][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 133.854293][ T24] usb 2-1: config 0 has an invalid interface number: 145 but max is 1 [ 133.863094][ T24] usb 2-1: config 0 has an invalid interface number: 217 but max is 1 [ 133.872488][ T24] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 133.885145][ T24] usb 2-1: config 0 has no interface number 0 [ 133.891661][ T24] usb 2-1: config 0 has no interface number 1 [ 133.898769][ T24] usb 2-1: config 0 interface 217 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.908893][ T24] usb 2-1: config 0 interface 217 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 133.922189][ T24] usb 2-1: config 0 interface 145 has no altsetting 0 [ 133.929068][ T24] usb 2-1: config 0 interface 217 has no altsetting 0 [ 133.945131][ T24] usb 2-1: New USB device found, idVendor=14aa, idProduct=0001, bcdDevice=a3.c8 [ 133.954564][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.963208][ T24] usb 2-1: Product: syz [ 133.967551][ T24] usb 2-1: Manufacturer: syz [ 133.972184][ T24] usb 2-1: SerialNumber: syz [ 133.987730][ T24] usb 2-1: config 0 descriptor?? [ 134.208528][ T6745] Invalid source name [ 134.212772][ T6745] UBIFS error (pid: 6745): cannot open "./file0", error -22 [ 134.224578][ T24] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 134.258724][ T24] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 134.269355][ T24] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 134.756633][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.906416][ T5876] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.099990][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.141649][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.336534][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.360457][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.374244][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.404278][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 135.523639][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.552365][ T5876] usb 5-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 135.573534][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.619570][ T10] usb 4-1: config 0 descriptor?? [ 135.653732][ T5876] usb 5-1: config 0 descriptor?? [ 136.476934][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 136.485927][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 136.784925][ T6774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.846111][ T5876] rtsx_usb 5-1:0.0: probe with driver rtsx_usb failed with error -8 [ 136.882883][ T6774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.893670][ T6774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.218248][ T10] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 137.315873][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 137.375968][ T6782] mmap: syz.0.115 (6782) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.401284][ T6756] netlink: 56 bytes leftover after parsing attributes in process `syz.4.109'. [ 137.443179][ T6756] netlink: 212 bytes leftover after parsing attributes in process `syz.4.109'. [ 137.786314][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 137.786363][ T30] audit: type=1326 audit(1747328140.506:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b53f8e969 code=0x0 [ 138.510115][ T5876] usb 4-1: USB disconnect, device number 6 [ 138.531777][ T5877] usb 5-1: USB disconnect, device number 6 [ 139.722610][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 139.731787][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.125'. [ 140.478918][ T59] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.507918][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.886307][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 140.895304][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.906900][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 140.950226][ T59] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 141.034220][ T59] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 141.045035][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.067318][ T59] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 141.190556][ T6826] ip6gre1: entered allmulticast mode [ 141.237587][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.328149][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.747100][ T10] usb 4-1: config 0 descriptor?? [ 141.752240][ T59] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.762369][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.780464][ T59] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 141.846642][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.109663][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 142.123427][ T59] usb 3-1: config 0 descriptor?? [ 142.348222][ T6832] sp0: Synchronizing with TNC [ 146.188927][ T5887] usb 4-1: USB disconnect, device number 7 [ 146.353510][ T59] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 146.570754][ T59] usb 3-1: USB disconnect, device number 8 [ 146.577238][ T6832] [U] è [ 146.788743][ T59] usblp1: removed [ 147.891986][ T59] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.098390][ T59] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.776280][ T59] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.783017][ T59] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 148.832235][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.891645][ T59] usb 3-1: config 0 descriptor?? [ 149.229846][ T6871] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.139'. [ 149.303954][ T6872] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.139'. [ 149.313443][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 149.802890][ T59] usbhid 3-1:0.0: can't add hid device: -71 [ 149.924436][ T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 149.946323][ T59] usb 3-1: USB disconnect, device number 9 [ 152.447559][ T6893] FAULT_INJECTION: forcing a failure. [ 152.447559][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 152.460523][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.4.145 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 152.460552][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.460565][ T6893] Call Trace: [ 152.460574][ T6893] [ 152.460582][ T6893] dump_stack_lvl+0x189/0x250 [ 152.460621][ T6893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.460651][ T6893] ? __pfx__printk+0x10/0x10 [ 152.460691][ T6893] ? __pfx___might_resched+0x10/0x10 [ 152.460723][ T6893] ? fs_reclaim_acquire+0x7d/0x100 [ 152.460753][ T6893] should_fail_ex+0x414/0x560 [ 152.460780][ T6893] should_failslab+0xa8/0x100 [ 152.460803][ T6893] __kmalloc_noprof+0xcb/0x4f0 [ 152.460834][ T6893] ? kfree+0x4d/0x440 [ 152.460861][ T6893] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.460897][ T6893] tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.460928][ T6893] ? tomoyo_domain+0xda/0x130 [ 152.460964][ T6893] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 152.460989][ T6893] tomoyo_path_number_perm+0x1e8/0x5a0 [ 152.461016][ T6893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.461039][ T6893] ? sb_end_write+0x197/0x1c0 [ 152.461078][ T6893] ? __lock_acquire+0xaac/0xd20 [ 152.461128][ T6893] ? __fget_files+0x2a/0x420 [ 152.461153][ T6893] ? __fget_files+0x3a0/0x420 [ 152.461172][ T6893] ? __fget_files+0x2a/0x420 [ 152.461197][ T6893] security_file_ioctl+0xcb/0x2d0 [ 152.461225][ T6893] __se_sys_ioctl+0x47/0x170 [ 152.461256][ T6893] do_syscall_64+0xf6/0x210 [ 152.461284][ T6893] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 152.461306][ T6893] ? clear_bhb_loop+0x60/0xb0 [ 152.461339][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.461360][ T6893] RIP: 0033:0x7fc414d8e969 [ 152.461379][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.461397][ T6893] RSP: 002b:00007fc415b22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.461419][ T6893] RAX: ffffffffffffffda RBX: 00007fc414fb6160 RCX: 00007fc414d8e969 [ 152.461435][ T6893] RDX: 00002000000000c0 RSI: 00000000c058534f RDI: 0000000000000006 [ 152.461449][ T6893] RBP: 00007fc415b22090 R08: 0000000000000000 R09: 0000000000000000 [ 152.461462][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.461475][ T6893] R13: 0000000000000000 R14: 00007fc414fb6160 R15: 00007ffe7ed85318 [ 152.461508][ T6893] [ 152.461540][ T6893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.183163][ T6908] FAULT_INJECTION: forcing a failure. [ 154.183163][ T6908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.336472][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.0.151 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 154.336504][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.336517][ T6908] Call Trace: [ 154.336525][ T6908] [ 154.336534][ T6908] dump_stack_lvl+0x189/0x250 [ 154.336566][ T6908] ? __lock_acquire+0xaac/0xd20 [ 154.336596][ T6908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.336625][ T6908] ? __pfx__printk+0x10/0x10 [ 154.336658][ T6908] ? __might_fault+0xb0/0x130 [ 154.336699][ T6908] should_fail_ex+0x414/0x560 [ 154.336724][ T6908] _copy_from_iter+0x1db/0x15a0 [ 154.336756][ T6908] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 154.336785][ T6908] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 154.336818][ T6908] ? __pfx__copy_from_iter+0x10/0x10 [ 154.336846][ T6908] ? __build_skb_around+0x257/0x3e0 [ 154.336876][ T6908] ? netlink_sendmsg+0x642/0xb30 [ 154.336898][ T6908] ? skb_put+0x11b/0x210 [ 154.336928][ T6908] netlink_sendmsg+0x6b2/0xb30 [ 154.336962][ T6908] ? is_bpf_text_address+0x26/0x2b0 [ 154.337001][ T6908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.337035][ T6908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.337058][ T6908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.337084][ T6908] __sock_sendmsg+0x21c/0x270 [ 154.337108][ T6908] ____sys_sendmsg+0x505/0x830 [ 154.337141][ T6908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.337177][ T6908] ? import_iovec+0x74/0xa0 [ 154.337210][ T6908] ___sys_sendmsg+0x21f/0x2a0 [ 154.337241][ T6908] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.337306][ T6908] ? __fget_files+0x2a/0x420 [ 154.337325][ T6908] ? __fget_files+0x3a0/0x420 [ 154.337355][ T6908] __x64_sys_sendmsg+0x19b/0x260 [ 154.337387][ T6908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.337433][ T6908] ? do_syscall_64+0xba/0x210 [ 154.337464][ T6908] do_syscall_64+0xf6/0x210 [ 154.337491][ T6908] ? clear_bhb_loop+0x60/0xb0 [ 154.337515][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.337535][ T6908] RIP: 0033:0x7f50afb8e969 [ 154.337555][ T6908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.337571][ T6908] RSP: 002b:00007f50ad9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.337593][ T6908] RAX: ffffffffffffffda RBX: 00007f50afdb5fa0 RCX: 00007f50afb8e969 [ 154.337609][ T6908] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 154.337621][ T6908] RBP: 00007f50ad9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.337633][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.337646][ T6908] R13: 0000000000000000 R14: 00007f50afdb5fa0 R15: 00007ffdb5b0e8a8 [ 154.337677][ T6908] [ 157.839248][ T6947] FAULT_INJECTION: forcing a failure. [ 157.839248][ T6947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.907848][ T6947] CPU: 1 UID: 0 PID: 6947 Comm: syz.3.163 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 157.907879][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.907899][ T6947] Call Trace: [ 157.907907][ T6947] [ 157.907917][ T6947] dump_stack_lvl+0x189/0x250 [ 157.907950][ T6947] ? __lock_acquire+0xaac/0xd20 [ 157.907982][ T6947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.908011][ T6947] ? __pfx__printk+0x10/0x10 [ 157.908044][ T6947] ? __might_fault+0xb0/0x130 [ 157.908089][ T6947] should_fail_ex+0x414/0x560 [ 157.908117][ T6947] _copy_from_iter+0x1db/0x15a0 [ 157.908153][ T6947] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 157.908183][ T6947] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 157.908217][ T6947] ? __pfx__copy_from_iter+0x10/0x10 [ 157.908245][ T6947] ? __build_skb_around+0x257/0x3e0 [ 157.908276][ T6947] ? netlink_sendmsg+0x642/0xb30 [ 157.908299][ T6947] ? skb_put+0x11b/0x210 [ 157.908329][ T6947] netlink_sendmsg+0x6b2/0xb30 [ 157.908352][ T6947] ? is_bpf_text_address+0x26/0x2b0 [ 157.908391][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.908424][ T6947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.908447][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.908473][ T6947] __sock_sendmsg+0x21c/0x270 [ 157.908498][ T6947] ____sys_sendmsg+0x505/0x830 [ 157.908533][ T6947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.908571][ T6947] ? import_iovec+0x74/0xa0 [ 157.908604][ T6947] ___sys_sendmsg+0x21f/0x2a0 [ 157.908636][ T6947] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.908701][ T6947] ? __fget_files+0x2a/0x420 [ 157.908720][ T6947] ? __fget_files+0x3a0/0x420 [ 157.908750][ T6947] __x64_sys_sendmsg+0x19b/0x260 [ 157.908782][ T6947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.908829][ T6947] ? do_syscall_64+0xba/0x210 [ 157.908860][ T6947] do_syscall_64+0xf6/0x210 [ 157.908898][ T6947] ? clear_bhb_loop+0x60/0xb0 [ 157.908924][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.908945][ T6947] RIP: 0033:0x7f4e4858e969 [ 157.908963][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.908980][ T6947] RSP: 002b:00007f4e4949c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.909003][ T6947] RAX: ffffffffffffffda RBX: 00007f4e487b5fa0 RCX: 00007f4e4858e969 [ 157.909018][ T6947] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 157.909030][ T6947] RBP: 00007f4e4949c090 R08: 0000000000000000 R09: 0000000000000000 [ 157.909043][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.909055][ T6947] R13: 0000000000000000 R14: 00007f4e487b5fa0 R15: 00007ffe28c4a3d8 [ 157.909085][ T6947] [ 158.941117][ T6974] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[6974] [ 160.776311][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.966370][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 161.695332][ T10] usb 3-1: config 0 has no interfaces? [ 161.742031][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.966618][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.678877][ T10] usb 3-1: config 0 descriptor?? [ 163.011601][ T5812] usb 3-1: USB disconnect, device number 10 [ 163.153592][ T7018] warning: `syz.3.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 163.717844][ T7037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.735016][ T7037] bridge0: port 3(erspan0) entered blocking state [ 163.747143][ T7037] bridge0: port 3(erspan0) entered disabled state [ 163.754289][ T7037] erspan0: entered allmulticast mode [ 163.763321][ T7037] erspan0: entered promiscuous mode [ 163.770230][ T7037] bridge0: port 3(erspan0) entered blocking state [ 163.777114][ T7037] bridge0: port 3(erspan0) entered forwarding state [ 163.872353][ T7041] erspan0: left allmulticast mode [ 163.881568][ T7041] erspan0: left promiscuous mode [ 163.994904][ T7041] bridge0: port 3(erspan0) entered disabled state [ 164.130033][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 164.266335][ T5812] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.752557][ T5812] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 165.801525][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.821838][ T5812] usb 5-1: Product: syz [ 165.830818][ T5812] usb 5-1: Manufacturer: syz [ 165.840889][ T5812] usb 5-1: SerialNumber: syz [ 165.883839][ T7055] FAULT_INJECTION: forcing a failure. [ 165.883839][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.175363][ T5812] usb 5-1: config 0 descriptor?? [ 166.307714][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.3.198 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 166.307746][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.307759][ T7055] Call Trace: [ 166.307768][ T7055] [ 166.307777][ T7055] dump_stack_lvl+0x189/0x250 [ 166.307814][ T7055] ? __lock_acquire+0xaac/0xd20 [ 166.307845][ T7055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.307872][ T7055] ? __pfx__printk+0x10/0x10 [ 166.307905][ T7055] ? __might_fault+0xb0/0x130 [ 166.307956][ T7055] should_fail_ex+0x414/0x560 [ 166.307982][ T7055] _copy_from_iter+0x1db/0x15a0 [ 166.308016][ T7055] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 166.308043][ T7055] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 166.308077][ T7055] ? __pfx__copy_from_iter+0x10/0x10 [ 166.308103][ T7055] ? __build_skb_around+0x257/0x3e0 [ 166.308133][ T7055] ? netlink_sendmsg+0x642/0xb30 [ 166.308155][ T7055] ? skb_put+0x11b/0x210 [ 166.308185][ T7055] netlink_sendmsg+0x6b2/0xb30 [ 166.308207][ T7055] ? is_bpf_text_address+0x26/0x2b0 [ 166.308245][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.308278][ T7055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.308300][ T7055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.308325][ T7055] __sock_sendmsg+0x21c/0x270 [ 166.308350][ T7055] ____sys_sendmsg+0x505/0x830 [ 166.308384][ T7055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.308422][ T7055] ? import_iovec+0x74/0xa0 [ 166.308454][ T7055] ___sys_sendmsg+0x21f/0x2a0 [ 166.308484][ T7055] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.308549][ T7055] ? __fget_files+0x2a/0x420 [ 166.308568][ T7055] ? __fget_files+0x3a0/0x420 [ 166.308598][ T7055] __x64_sys_sendmsg+0x19b/0x260 [ 166.308628][ T7055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.308675][ T7055] ? do_syscall_64+0xba/0x210 [ 166.308707][ T7055] do_syscall_64+0xf6/0x210 [ 166.308732][ T7055] ? clear_bhb_loop+0x60/0xb0 [ 166.308757][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.308777][ T7055] RIP: 0033:0x7f4e4858e969 [ 166.308795][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.308811][ T7055] RSP: 002b:00007f4e4949c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.308833][ T7055] RAX: ffffffffffffffda RBX: 00007f4e487b5fa0 RCX: 00007f4e4858e969 [ 166.308848][ T7055] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 166.308861][ T7055] RBP: 00007f4e4949c090 R08: 0000000000000000 R09: 0000000000000000 [ 166.308874][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.308886][ T7055] R13: 0000000000000000 R14: 00007f4e487b5fa0 R15: 00007ffe28c4a3d8 [ 166.308916][ T7055] [ 166.590012][ T5812] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 167.421549][ T7080] FAULT_INJECTION: forcing a failure. [ 167.421549][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.447030][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.3.206 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 167.447062][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.447075][ T7080] Call Trace: [ 167.447084][ T7080] [ 167.447093][ T7080] dump_stack_lvl+0x189/0x250 [ 167.447127][ T7080] ? __lock_acquire+0xaac/0xd20 [ 167.447172][ T7080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.447202][ T7080] ? __pfx__printk+0x10/0x10 [ 167.447235][ T7080] ? __might_fault+0xb0/0x130 [ 167.447283][ T7080] should_fail_ex+0x414/0x560 [ 167.447311][ T7080] _copy_from_iter+0x1db/0x15a0 [ 167.447353][ T7080] ? __pfx__copy_from_iter+0x10/0x10 [ 167.447384][ T7080] ? rcu_is_watching+0x15/0xb0 [ 167.447417][ T7080] ? trace_kmalloc+0x1f/0xd0 [ 167.447449][ T7080] ? kernfs_fop_write_iter+0x158/0x4f0 [ 167.447484][ T7080] kernfs_fop_write_iter+0x19f/0x4f0 [ 167.447522][ T7080] vfs_write+0x54b/0xa90 [ 167.447558][ T7080] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 167.447589][ T7080] ? __pfx_vfs_write+0x10/0x10 [ 167.447632][ T7080] ? __fget_files+0x2a/0x420 [ 167.447663][ T7080] ksys_write+0x145/0x250 [ 167.447692][ T7080] ? rcu_is_watching+0x15/0xb0 [ 167.447724][ T7080] ? __pfx_ksys_write+0x10/0x10 [ 167.447759][ T7080] ? do_syscall_64+0xba/0x210 [ 167.447792][ T7080] do_syscall_64+0xf6/0x210 [ 167.447820][ T7080] ? clear_bhb_loop+0x60/0xb0 [ 167.447847][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.447868][ T7080] RIP: 0033:0x7f4e4858e969 [ 167.447887][ T7080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.447903][ T7080] RSP: 002b:00007f4e4949c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.447925][ T7080] RAX: ffffffffffffffda RBX: 00007f4e487b5fa0 RCX: 00007f4e4858e969 [ 167.447941][ T7080] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000003 [ 167.447954][ T7080] RBP: 00007f4e4949c090 R08: 0000000000000000 R09: 0000000000000000 [ 167.447967][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.447980][ T7080] R13: 0000000000000000 R14: 00007f4e487b5fa0 R15: 00007ffe28c4a3d8 [ 167.448013][ T7080] [ 167.475311][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.346284][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 168.436825][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 168.451647][ T5874] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 168.471386][ T5812] gspca_sunplus: reg_r err -71 [ 168.481112][ T5812] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 168.574683][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.576389][ T5812] usb 5-1: USB disconnect, device number 7 [ 168.595138][ T5874] usb 1-1: config 0 has no interface number 0 [ 168.615546][ T5874] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 168.636423][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.645626][ T5874] usb 1-1: Product: syz [ 168.650132][ T5874] usb 1-1: Manufacturer: syz [ 168.654857][ T5874] usb 1-1: SerialNumber: syz [ 168.663022][ T5874] usb 1-1: config 0 descriptor?? [ 168.694802][ T7093] FAULT_INJECTION: forcing a failure. [ 168.694802][ T7093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.710862][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.3.210 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 168.710893][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.710906][ T7093] Call Trace: [ 168.710914][ T7093] [ 168.710924][ T7093] dump_stack_lvl+0x189/0x250 [ 168.710957][ T7093] ? __lock_acquire+0xaac/0xd20 [ 168.710990][ T7093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.711026][ T7093] ? __pfx__printk+0x10/0x10 [ 168.711060][ T7093] ? __might_fault+0xb0/0x130 [ 168.711105][ T7093] should_fail_ex+0x414/0x560 [ 168.711132][ T7093] _copy_from_user+0x2d/0xb0 [ 168.711163][ T7093] ___sys_sendmsg+0x158/0x2a0 [ 168.711195][ T7093] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.711262][ T7093] ? __fget_files+0x2a/0x420 [ 168.711281][ T7093] ? __fget_files+0x3a0/0x420 [ 168.711312][ T7093] __x64_sys_sendmsg+0x19b/0x260 [ 168.711344][ T7093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.711403][ T7093] ? do_syscall_64+0xba/0x210 [ 168.711435][ T7093] do_syscall_64+0xf6/0x210 [ 168.711463][ T7093] ? clear_bhb_loop+0x60/0xb0 [ 168.711489][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.711515][ T7093] RIP: 0033:0x7f4e4858e969 [ 168.711534][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.711552][ T7093] RSP: 002b:00007f4e4949c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.711574][ T7093] RAX: ffffffffffffffda RBX: 00007f4e487b5fa0 RCX: 00007f4e4858e969 [ 168.711589][ T7093] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 168.711602][ T7093] RBP: 00007f4e4949c090 R08: 0000000000000000 R09: 0000000000000000 [ 168.711615][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.711627][ T7093] R13: 0000000000000000 R14: 00007f4e487b5fa0 R15: 00007ffe28c4a3d8 [ 168.711658][ T7093] [ 169.310583][ T59] usb 1-1: USB disconnect, device number 4 [ 169.467180][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.533626][ T7103] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 169.816222][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 170.603635][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.614802][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.624667][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.646122][ T5887] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 170.655293][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.666795][ T5887] usb 3-1: config 0 descriptor?? [ 171.029827][ T7112] netlink: 192 bytes leftover after parsing attributes in process `syz.4.216'. [ 171.101853][ T7114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.217'. [ 171.176382][ T7114] netlink: 116 bytes leftover after parsing attributes in process `syz.0.217'. [ 171.219360][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 171.290893][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.300912][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.313868][ T7099] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.211'. [ 171.332216][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 171.338349][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.349469][ T5887] usb 3-1: USB disconnect, device number 11 [ 171.946551][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.097711][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 172.119542][ T5874] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.158424][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.165141][ T5874] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 172.213182][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.249336][ T5874] usb 5-1: config 0 descriptor?? [ 172.687419][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.727572][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.744906][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.775140][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.792401][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.819965][ T7149] netlink: 76 bytes leftover after parsing attributes in process `syz.2.231'. [ 172.826024][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.836409][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.843336][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.851838][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.915418][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.922637][ T5874] wacom 0003:056A:0331.0003: unknown main item tag 0x0 [ 172.943694][ T5874] ------------[ cut here ]------------ [ 172.963144][ T5874] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 172.986021][ T5874] shift exponent 64 is too large for 64-bit type 'unsigned long' [ 173.015664][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:3 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 173.015698][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.015713][ T5874] Workqueue: usb_hub_wq hub_event [ 173.015750][ T5874] Call Trace: [ 173.015759][ T5874] [ 173.015769][ T5874] dump_stack_lvl+0x189/0x250 [ 173.015800][ T5874] ? usb_probe_device+0x1c4/0x390 [ 173.015835][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.015865][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.015896][ T5874] ? __pfx__printk+0x10/0x10 [ 173.015927][ T5874] ? process_scheduled_works+0xadb/0x17a0 [ 173.015963][ T5874] ? ret_from_fork_asm+0x1a/0x30 [ 173.016012][ T5874] ubsan_epilogue+0xa/0x40 [ 173.016033][ T5874] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 173.016076][ T5874] ? trace_kmalloc+0x1f/0xd0 [ 173.016120][ T5874] __kfifo_alloc+0x1a2/0x220 [ 173.016149][ T5874] wacom_parse_and_register+0x2a5/0x6510 [ 173.016176][ T5874] ? kasan_save_track+0x3e/0x80 [ 173.016205][ T5874] ? __kasan_slab_free+0x62/0x70 [ 173.016235][ T5874] ? kfree+0x193/0x440 [ 173.016264][ T5874] ? hid_open_report+0xa51/0xee0 [ 173.016285][ T5874] ? wacom_probe+0x7bb/0xa30 [ 173.016303][ T5874] ? hid_device_probe+0x397/0x710 [ 173.016326][ T5874] ? really_probe+0x26a/0x9a0 [ 173.016351][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.016377][ T5874] ? driver_probe_device+0x4f/0x430 [ 173.016404][ T5874] ? __device_attach_driver+0x2ce/0x530 [ 173.016433][ T5874] ? __device_attach+0x2b8/0x400 [ 173.016467][ T5874] ? hid_add_device+0x398/0x540 [ 173.016493][ T5874] ? usbhid_probe+0xe13/0x12a0 [ 173.016523][ T5874] ? usb_probe_interface+0x641/0xbc0 [ 173.016541][ T5874] ? really_probe+0x26a/0x9a0 [ 173.016567][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.016593][ T5874] ? driver_probe_device+0x4f/0x430 [ 173.016622][ T5874] ? bus_for_each_drv+0x251/0x2e0 [ 173.016642][ T5874] ? bus_probe_device+0x185/0x260 [ 173.016660][ T5874] ? device_add+0x7b6/0xb50 [ 173.016682][ T5874] ? usb_set_configuration+0x1a87/0x20e0 [ 173.016712][ T5874] ? usb_generic_driver_probe+0x8d/0x150 [ 173.016742][ T5874] ? usb_probe_device+0x1c4/0x390 [ 173.016774][ T5874] ? really_probe+0x26a/0x9a0 [ 173.016800][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.016825][ T5874] ? driver_probe_device+0x4f/0x430 [ 173.016852][ T5874] ? __device_attach_driver+0x2ce/0x530 [ 173.016879][ T5874] ? bus_for_each_drv+0x251/0x2e0 [ 173.016897][ T5874] ? __device_attach+0x2b8/0x400 [ 173.016922][ T5874] ? bus_probe_device+0x185/0x260 [ 173.016944][ T5874] ? __pfx_wacom_parse_and_register+0x10/0x10 [ 173.016966][ T5874] ? kthread+0x70e/0x8a0 [ 173.016989][ T5874] ? ret_from_fork+0x4b/0x80 [ 173.017008][ T5874] ? ret_from_fork_asm+0x1a/0x30 [ 173.017056][ T5874] ? kasan_quarantine_put+0xdd/0x220 [ 173.017086][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.017122][ T5874] ? hid_open_report+0xa51/0xee0 [ 173.017144][ T5874] ? kfree+0x193/0x440 [ 173.017182][ T5874] ? hid_open_report+0xa51/0xee0 [ 173.017214][ T5874] ? __pfx_hid_open_report+0x10/0x10 [ 173.017245][ T5874] ? init_timer_key+0x171/0x2d0 [ 173.017275][ T5874] wacom_probe+0x80c/0xa30 [ 173.017303][ T5874] hid_device_probe+0x397/0x710 [ 173.017338][ T5874] ? driver_sysfs_add+0x1fe/0x210 [ 173.017368][ T5874] ? __pfx_hid_device_probe+0x10/0x10 [ 173.017393][ T5874] really_probe+0x26a/0x9a0 [ 173.017431][ T5874] __driver_probe_device+0x18c/0x2f0 [ 173.017472][ T5874] driver_probe_device+0x4f/0x430 [ 173.017506][ T5874] __device_attach_driver+0x2ce/0x530 [ 173.017542][ T5874] bus_for_each_drv+0x251/0x2e0 [ 173.017566][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 173.017597][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 173.017632][ T5874] __device_attach+0x2b8/0x400 [ 173.017664][ T5874] ? __pfx___device_attach+0x10/0x10 [ 173.017696][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 173.017727][ T5874] bus_probe_device+0x185/0x260 [ 173.017753][ T5874] device_add+0x7b6/0xb50 [ 173.017785][ T5874] hid_add_device+0x398/0x540 [ 173.017819][ T5874] usbhid_probe+0xe13/0x12a0 [ 173.017866][ T5874] usb_probe_interface+0x641/0xbc0 [ 173.017901][ T5874] ? __pfx_usb_probe_interface+0x10/0x10 [ 173.017934][ T5874] really_probe+0x26a/0x9a0 [ 173.017971][ T5874] __driver_probe_device+0x18c/0x2f0 [ 173.018004][ T5874] driver_probe_device+0x4f/0x430 [ 173.018038][ T5874] __device_attach_driver+0x2ce/0x530 [ 173.018073][ T5874] bus_for_each_drv+0x251/0x2e0 [ 173.018096][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 173.018126][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 173.018161][ T5874] __device_attach+0x2b8/0x400 [ 173.018192][ T5874] ? __pfx___device_attach+0x10/0x10 [ 173.018224][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 173.018255][ T5874] bus_probe_device+0x185/0x260 [ 173.018281][ T5874] device_add+0x7b6/0xb50 [ 173.018314][ T5874] usb_set_configuration+0x1a87/0x20e0 [ 173.018383][ T5874] usb_generic_driver_probe+0x8d/0x150 [ 173.018420][ T5874] usb_probe_device+0x1c4/0x390 [ 173.018469][ T5874] ? __pfx_usb_probe_device+0x10/0x10 [ 173.018501][ T5874] really_probe+0x26a/0x9a0 [ 173.018540][ T5874] __driver_probe_device+0x18c/0x2f0 [ 173.018574][ T5874] driver_probe_device+0x4f/0x430 [ 173.018609][ T5874] __device_attach_driver+0x2ce/0x530 [ 173.018645][ T5874] bus_for_each_drv+0x251/0x2e0 [ 173.018667][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 173.018697][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 173.018733][ T5874] __device_attach+0x2b8/0x400 [ 173.018764][ T5874] ? __pfx___device_attach+0x10/0x10 [ 173.018798][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 173.018828][ T5874] bus_probe_device+0x185/0x260 [ 173.018854][ T5874] device_add+0x7b6/0xb50 [ 173.018886][ T5874] usb_new_device+0xa39/0x16c0 [ 173.018929][ T5874] ? __pfx_usb_new_device+0x10/0x10 [ 173.018960][ T5874] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.018983][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.019013][ T5874] hub_event+0x2941/0x4a00 [ 173.019109][ T5874] ? __pfx_hub_event+0x10/0x10 [ 173.019140][ T5874] ? process_scheduled_works+0x9ec/0x17a0 [ 173.019183][ T5874] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.019205][ T5874] ? process_scheduled_works+0x9ec/0x17a0 [ 173.019237][ T5874] ? process_scheduled_works+0x9ec/0x17a0 [ 173.019274][ T5874] process_scheduled_works+0xadb/0x17a0 [ 173.019345][ T5874] ? __pfx_process_scheduled_works+0x10/0x10 [ 173.019404][ T5874] worker_thread+0x8a0/0xda0 [ 173.019429][ T5874] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.019474][ T5874] ? __kthread_parkme+0x7b/0x200 [ 173.019509][ T5874] kthread+0x70e/0x8a0 [ 173.019539][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 173.019559][ T5874] ? __pfx_kthread+0x10/0x10 [ 173.019587][ T5874] ? __pfx_kthread+0x10/0x10 [ 173.019612][ T5874] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.019636][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.019663][ T5874] ? __pfx_kthread+0x10/0x10 [ 173.019688][ T5874] ret_from_fork+0x4b/0x80 [ 173.019708][ T5874] ? __pfx_kthread+0x10/0x10 [ 173.019734][ T5874] ret_from_fork_asm+0x1a/0x30 [ 173.019788][ T5874] [ 173.756655][ T7107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.795297][ T5874] ---[ end trace ]--- [ 173.799418][ T5874] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 173.806658][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:3 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 173.818769][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.829164][ T5874] Workqueue: usb_hub_wq hub_event [ 173.834227][ T5874] Call Trace: [ 173.837610][ T5874] [ 173.840554][ T5874] dump_stack_lvl+0x99/0x250 [ 173.845170][ T5874] ? __asan_memcpy+0x40/0x70 [ 173.849776][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.854993][ T5874] ? __pfx__printk+0x10/0x10 [ 173.859625][ T5874] panic+0x2db/0x790 [ 173.863599][ T5874] ? __pfx_panic+0x10/0x10 [ 173.868030][ T5874] ? _printk+0xcf/0x120 [ 173.872206][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.877685][ T5874] ? __pfx__printk+0x10/0x10 [ 173.882290][ T5874] ? process_scheduled_works+0xadb/0x17a0 [ 173.888036][ T5874] ? ret_from_fork_asm+0x1a/0x30 [ 173.893001][ T5874] check_panic_on_warn+0x89/0xb0 [ 173.897954][ T5874] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 173.904404][ T5874] ? trace_kmalloc+0x1f/0xd0 [ 173.909019][ T5874] __kfifo_alloc+0x1a2/0x220 [ 173.913624][ T5874] wacom_parse_and_register+0x2a5/0x6510 [ 173.919268][ T5874] ? kasan_save_track+0x3e/0x80 [ 173.924139][ T5874] ? __kasan_slab_free+0x62/0x70 [ 173.929098][ T5874] ? kfree+0x193/0x440 [ 173.933189][ T5874] ? hid_open_report+0xa51/0xee0 [ 173.938139][ T5874] ? wacom_probe+0x7bb/0xa30 [ 173.942736][ T5874] ? hid_device_probe+0x397/0x710 [ 173.947772][ T5874] ? really_probe+0x26a/0x9a0 [ 173.952499][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.957987][ T5874] ? driver_probe_device+0x4f/0x430 [ 173.963216][ T5874] ? __device_attach_driver+0x2ce/0x530 [ 173.968796][ T5874] ? __device_attach+0x2b8/0x400 [ 173.973751][ T5874] ? hid_add_device+0x398/0x540 [ 173.978614][ T5874] ? usbhid_probe+0xe13/0x12a0 [ 173.983432][ T5874] ? usb_probe_interface+0x641/0xbc0 [ 173.988728][ T5874] ? really_probe+0x26a/0x9a0 [ 173.993419][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 173.998891][ T5874] ? driver_probe_device+0x4f/0x430 [ 174.004108][ T5874] ? bus_for_each_drv+0x251/0x2e0 [ 174.009138][ T5874] ? bus_probe_device+0x185/0x260 [ 174.014170][ T5874] ? device_add+0x7b6/0xb50 [ 174.018681][ T5874] ? usb_set_configuration+0x1a87/0x20e0 [ 174.024334][ T5874] ? usb_generic_driver_probe+0x8d/0x150 [ 174.030023][ T5874] ? usb_probe_device+0x1c4/0x390 [ 174.035066][ T5874] ? really_probe+0x26a/0x9a0 [ 174.039756][ T5874] ? __driver_probe_device+0x18c/0x2f0 [ 174.045225][ T5874] ? driver_probe_device+0x4f/0x430 [ 174.050440][ T5874] ? __device_attach_driver+0x2ce/0x530 [ 174.056002][ T5874] ? bus_for_each_drv+0x251/0x2e0 [ 174.061032][ T5874] ? __device_attach+0x2b8/0x400 [ 174.065984][ T5874] ? bus_probe_device+0x185/0x260 [ 174.071019][ T5874] ? __pfx_wacom_parse_and_register+0x10/0x10 [ 174.077097][ T5874] ? kthread+0x70e/0x8a0 [ 174.081350][ T5874] ? ret_from_fork+0x4b/0x80 [ 174.085951][ T5874] ? ret_from_fork_asm+0x1a/0x30 [ 174.090918][ T5874] ? kasan_quarantine_put+0xdd/0x220 [ 174.096217][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.101431][ T5874] ? hid_open_report+0xa51/0xee0 [ 174.106384][ T5874] ? kfree+0x193/0x440 [ 174.110472][ T5874] ? hid_open_report+0xa51/0xee0 [ 174.115426][ T5874] ? __pfx_hid_open_report+0x10/0x10 [ 174.120730][ T5874] ? init_timer_key+0x171/0x2d0 [ 174.125593][ T5874] wacom_probe+0x80c/0xa30 [ 174.130030][ T5874] hid_device_probe+0x397/0x710 [ 174.134902][ T5874] ? driver_sysfs_add+0x1fe/0x210 [ 174.139949][ T5874] ? __pfx_hid_device_probe+0x10/0x10 [ 174.145335][ T5874] really_probe+0x26a/0x9a0 [ 174.149869][ T5874] __driver_probe_device+0x18c/0x2f0 [ 174.155169][ T5874] driver_probe_device+0x4f/0x430 [ 174.160213][ T5874] __device_attach_driver+0x2ce/0x530 [ 174.165603][ T5874] bus_for_each_drv+0x251/0x2e0 [ 174.170467][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 174.176381][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.181771][ T5874] __device_attach+0x2b8/0x400 [ 174.186606][ T5874] ? __pfx___device_attach+0x10/0x10 [ 174.191908][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 174.197124][ T5874] bus_probe_device+0x185/0x260 [ 174.201987][ T5874] device_add+0x7b6/0xb50 [ 174.206333][ T5874] hid_add_device+0x398/0x540 [ 174.211035][ T5874] usbhid_probe+0xe13/0x12a0 [ 174.215652][ T5874] usb_probe_interface+0x641/0xbc0 [ 174.220781][ T5874] ? __pfx_usb_probe_interface+0x10/0x10 [ 174.226523][ T5874] really_probe+0x26a/0x9a0 [ 174.231057][ T5874] __driver_probe_device+0x18c/0x2f0 [ 174.236379][ T5874] driver_probe_device+0x4f/0x430 [ 174.241439][ T5874] __device_attach_driver+0x2ce/0x530 [ 174.246857][ T5874] bus_for_each_drv+0x251/0x2e0 [ 174.251721][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 174.257635][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.263023][ T5874] __device_attach+0x2b8/0x400 [ 174.267802][ T5874] ? __pfx___device_attach+0x10/0x10 [ 174.273098][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 174.278311][ T5874] bus_probe_device+0x185/0x260 [ 174.283201][ T5874] device_add+0x7b6/0xb50 [ 174.287637][ T5874] usb_set_configuration+0x1a87/0x20e0 [ 174.293140][ T5874] usb_generic_driver_probe+0x8d/0x150 [ 174.298639][ T5874] usb_probe_device+0x1c4/0x390 [ 174.303517][ T5874] ? __pfx_usb_probe_device+0x10/0x10 [ 174.308908][ T5874] really_probe+0x26a/0x9a0 [ 174.313522][ T5874] __driver_probe_device+0x18c/0x2f0 [ 174.318837][ T5874] driver_probe_device+0x4f/0x430 [ 174.323890][ T5874] __device_attach_driver+0x2ce/0x530 [ 174.329371][ T5874] bus_for_each_drv+0x251/0x2e0 [ 174.334238][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 174.340239][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.345641][ T5874] __device_attach+0x2b8/0x400 [ 174.350424][ T5874] ? __pfx___device_attach+0x10/0x10 [ 174.355728][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 174.360966][ T5874] bus_probe_device+0x185/0x260 [ 174.365853][ T5874] device_add+0x7b6/0xb50 [ 174.370206][ T5874] usb_new_device+0xa39/0x16c0 [ 174.374998][ T5874] ? __pfx_usb_new_device+0x10/0x10 [ 174.380233][ T5874] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.385445][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.390661][ T5874] hub_event+0x2941/0x4a00 [ 174.395149][ T5874] ? __pfx_hub_event+0x10/0x10 [ 174.399930][ T5874] ? process_scheduled_works+0x9ec/0x17a0 [ 174.405673][ T5874] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.410882][ T5874] ? process_scheduled_works+0x9ec/0x17a0 [ 174.416621][ T5874] ? process_scheduled_works+0x9ec/0x17a0 [ 174.422363][ T5874] process_scheduled_works+0xadb/0x17a0 [ 174.428041][ T5874] ? __pfx_process_scheduled_works+0x10/0x10 [ 174.434071][ T5874] worker_thread+0x8a0/0xda0 [ 174.438686][ T5874] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.445034][ T5874] ? __kthread_parkme+0x7b/0x200 [ 174.449993][ T5874] kthread+0x70e/0x8a0 [ 174.454081][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 174.459206][ T5874] ? __pfx_kthread+0x10/0x10 [ 174.463811][ T5874] ? __pfx_kthread+0x10/0x10 [ 174.468422][ T5874] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.473630][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.478858][ T5874] ? __pfx_kthread+0x10/0x10 [ 174.483469][ T5874] ret_from_fork+0x4b/0x80 [ 174.487894][ T5874] ? __pfx_kthread+0x10/0x10 [ 174.492605][ T5874] ret_from_fork_asm+0x1a/0x30 [ 174.497426][ T5874] [ 174.500819][ T5874] Kernel Offset: disabled [ 174.505206][ T5874] Rebooting in 86400 seconds..