last executing test programs: 4m52.805558939s ago: executing program 2 (id=680): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001300)=ANY=[@ANYBLOB="0d0054d20d3404e071877696ee59", @ANYRES32=r1, @ANYBLOB]) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002300)=""/200, 0xc8}], 0x3}, 0x2121) 4m52.456646302s ago: executing program 2 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./bus\x00', 0x0, 0x3c}, 0x18) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0xa, '\x00', r3, r4, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@verity_on}, {@metacopy_off}]}) 4m49.45519569s ago: executing program 2 (id=699): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010034000c0000002b0000000000000718"], 0x30}, 0x4000010) 4m49.289404616s ago: executing program 2 (id=701): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001300)=ANY=[@ANYBLOB="0d0054d20d3404e071877696ee59", @ANYRES32=r1, @ANYBLOB]) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002300)=""/200, 0xc8}], 0x3}, 0x2121) 4m48.915117151s ago: executing program 2 (id=704): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(0x0, 0x3) ftruncate(r4, 0xffff) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001300)=ANY=[@ANYBLOB="0d0054d20d3404e071877696ee59", @ANYRES32=r2, @ANYBLOB]) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d9345d63a2c00f30b74173b22e0822a92307f00000e970300"/228, 0xe4}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)=0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x10000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r8) 4m48.595439466s ago: executing program 2 (id=705): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) close(r1) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001040)={0x200f, {"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", 0x1000}}, 0x1006) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) syz_emit_ethernet(0x15, &(0x7f0000000a80)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x80, 0x89a6ef88c89f1828}}}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0x1) 4m33.390075471s ago: executing program 32 (id=705): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="41000000010001", 0x7) close(r1) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001040)={0x200f, {"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", 0x1000}}, 0x1006) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) syz_emit_ethernet(0x15, &(0x7f0000000a80)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x80, 0x89a6ef88c89f1828}}}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0x1) 24.297375701s ago: executing program 4 (id=1530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180006040000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 23.626173229s ago: executing program 4 (id=1533): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000002bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x48}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getdents64(0xffffffffffffffff, &(0x7f0000000880)=""/4100, 0x1004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = semget$private(0x0, 0x2, 0x580) semtimedop(r1, &(0x7f00000000c0)=[{0x2, 0x8, 0x1000}, {0x1, 0x7fff}, {0x3, 0xcf5f, 0x1000}, {0x1, 0x1ff}, {0x3, 0x7, 0x1000}, {0x0, 0x963}, {0x1, 0x6}], 0x7, &(0x7f0000000040)={0x77359400}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) sched_rr_get_interval(r2, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069100c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 22.650071476s ago: executing program 4 (id=1537): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, 0x0, r3}, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000100)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb23}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x6c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 20.394823626s ago: executing program 4 (id=1541): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000000c0)) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x81, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000400)='X', 0x1, 0x20008846, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) 19.2885731s ago: executing program 4 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000), 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r4, &(0x7f00000015c0), 0x0) 17.802355965s ago: executing program 4 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=0xc) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000240)='./file0\x00', r4, 0xee00) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0100001600010f0000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000008003300000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f44f000008001d"], 0x10c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f00000004c0)="69337fdeb631d5174aa8909d61a2736673f61202b61dbe65215b74378e3522fb4795a6c7535e69b555f535435ec3beaddfb2c95baf2de488e228a9ff7cda8ef43d866f3a605cac8eb71f7f23fd9275ce8fdcd5ec275a7867f7ec2c9bc7088902e22dcda38996e36b45851de188d1575d87d7307849ccbf64a92011066c64fc49254e9e22e69466e323942258f571931236f58384e6209bfecd42e9c529e8bd6d18c1420e8af62f91d70129d0e78dcc783101e912702c4c0279d0893564a1fec605c50fb8d1e10aaca43bb333000dea9a03b22904745a8448e68ea22945150c5c5d9d7075c5beedbca9000635027415", &(0x7f0000000700)=""/213}, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) 7.839296082s ago: executing program 3 (id=1580): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b17, &(0x7f0000000040)) 6.802864247s ago: executing program 1 (id=1585): socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000280)={0x98f904, 0x7, @value=0x100000001}) mkdir(0x0, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201, 0xffffffff}, 0x18}}, 0x0) 5.367014685s ago: executing program 5 (id=1588): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x191a, &(0x7f0000000180)={0x0, 0xe872, 0x0, 0xffffffff, 0x35e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 3) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x4400c030) 5.366142518s ago: executing program 3 (id=1589): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) syz_usb_connect(0x4, 0x774, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xbd, 0x24, 0x1d, 0x8, 0x93a, 0x2464, 0x4063, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x762, 0x2, 0xa1, 0x4, 0xa0, 0x80, [{{0x9, 0x4, 0x81, 0xb, 0xf, 0x98, 0x5a, 0xa4, 0x2, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "fdf910e07b"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x5, 0xf, 0x5}}, @generic={0x65, 0x4, "aeda7f3bfebb27015d76984309075023160e56cb7713283826b1bed7b4abbfc32666c613a0750bd3e360de82096f2bced5d87286fe2b9d058b8ef1cc57f66eaeb9b9e84eb9af1576cbce917d9af477146c490eadce415def0867f26b89906033314905"}], [{{0x9, 0x5, 0x3, 0x1, 0x7ff, 0xc, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x5, 0x8}, @generic={0xa3, 0x3, "324c13cc86a4eb19eb11d4d3932433093087e0242f21113650d864d3e25738414baffa4ee1ad0d89d1bb27c9cd6d7269aa0d3e35224052ea1e2a931fc2918f21c5bc98fe77d96ebfaec0fa5ded1b6de1711980c5b789f45b2c38b025f1aa5ca9998361be06cc43619ec3dfee757ae9404fc0308b1c4dbb69778de0f9b504550dbe53e8a7140e9cca018d90fd402e5e820e8b93f16a66ccc43f87c9d2e51ea125d0"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0x25, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x2, 0xea, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x9, 0x7e28244adbe55ab2, 0x0, 0x2, 0xf7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7f, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x1, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x49, 0x100}, @generic={0x9, 0x1, "21e9173db3d7a8"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x0, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x4, 0x401}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x2, 0x4, 0xe, [@generic={0x15, 0x7, "bef79f8ab6d7931e9187eb17c1699e402398fc"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x10, 0x1, 0x5, [@generic={0xd5, 0x21, "aeffdc5f650f93e89149c42afee16a4426f643596dcddc9464b724a864df689ea81bbeb93bf852a70539adb6d2fc48db3698a1577feb16b04f1fdd85d1dbf3220e539f16182f8a76ba009710ec14013d04853f8f11235a993c2f5e3451c676c7ca858229f7c5aa0e3bc1fce0369c2cc88c4399e75ff3b660300fb2d4c27149d699631ec088c47fdece1ad2668cd5dcd8a118851e7c6e657903ca324420fdf82b1141f6ce0d563c68fca44655b374c037d58614ec5bd650369a2ea07172a9699ebc74bad64de585a7b7c87a56265742ba1b20df"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x5, 0x65, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x1ff, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x1, 0xa, 0x400, 0x8, 0x4, 0xbe, [@generic={0x49, 0x8, "d97637a8c07700164e802a4e1bd39ca12991d966d37c2213ac26bec70b4b81259c41bc9f8a0421935a7124744e4914ab8e3ccd7c3f6585a32ddb735f37870877e1f7d71db53ca3"}, @generic={0xa8, 0x11, "e783017c9015db0da9e319e35367609bb8ade0337ec89bb65f4bbed241a76b08efda6dd80ece5e55ac3d29b8f7069ac8eae73c2fc484841f11f8778e93117bad2f788d50e8d270779681ca51eae59a2c02f76f50ed470ed15c44f439d25f3e89d2f682037925a28b7f1af42b3339a2a1152ef7c6a3ac36cfc4655c895a21bb23a6e7ef34211e47113979bacbfdf90760b8a1f8f524629fa59bbecf4c72d30f286c6b36e204d3"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x4, 0xff}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x2, 0x6, 0x9}}]}}, {{0x9, 0x4, 0xc6, 0x1, 0x9, 0x86, 0x3c, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x69f}}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0x1, 0x8, [@generic={0xb2, 0xb, "b036341ccba0bc424879857a1d245e178443a9075f8b547d34d859766f6dd8f4fec6d92cde0a3c1ac0ed1cb53fcd4108d1b282b68c7aabbf23a712c5223cc4934f39e976b1459dd3cdb58825be4a5f2aa1f8a4f3d672b29deccb123ce555d1219d3abb672e63625f999c1b2e7f83f548b14421a41da3e257891c885200c6146ae140d769048a2c62a05111e8796e205d65e21373c5dc692003b47fa1b3c886e41068e9955a70900d3aa479aa1e4361fe"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0xc0, 0xe8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x96, 0x4}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x9, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xbc, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x10}, @generic={0x1a, 0xf, "3e020cab82ce74cde70229862597e15cfd1dc6ddff0ad533"}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x400, 0x9, 0x8, 0x3, [@generic={0xf5, 0x23, "534d0f2dc179a7acf364e9c59597727f52549fca077c5dd4a6841914721008fff860d54f0eceac3b413a406fc678af1ac32e45609fb1b57c65bac5ab9045aff453afd0730af1d1de1fc49d93bde422017da07fe3536c0fa15cc20b862119503b535a6423b26a657256b20fa71e6b5617760fdc98339d206274e94c0f78a9cdd25a31c2b30002d30da8d39c60d560fe1b652377974928a0c499fae1e6c08e677efbe8805ae98d56c49ff0bc22545181776f578c2caf0829dcefd8bebfb4c99e089f63428dc544be5db663f92d895928c1166042cdb2d55a33c0c2f01eedbb3174a4d9e5cbcc20dbdc3f150b2cc8ecc3d302c2c0"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xfa, 0xa5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xfa, 0x81, 0xd, [@generic={0xcb, 0x23, "ab4d2a10d7d12e1f34d00d42693bb3d819a716d217c2955dfd08f1d3c7cc0ddd12e7d62967483dab6ffe7e1243812a2ddafc1e9625d632870645b0dffe43a6e1c16e0f68da654cef82fa474e2dcfd1d993b7fcc24ccbf2aaacb1a7ef8b981d59facb67b8279266860c9036328cad02cf4a03199b8f4eccf1041a54434daa012a9df795493bd088e1fab3912509f127863a24b92da5dd61f98cea9ced99b6f71df1c2b84bad02e16043c1d867e10b88112c84bef215103cab124e15ba22ba3b9c56b5dadd6ae9589f09"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x14, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x71, 0x49, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2f, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x50}, @generic={0x54, 0x33, "a8a959d76016a14d7ef5cba22d89068172238ccd952bf77fc7a93ca2dda044e38588dbe11168866790d3a86c2c1700ac66da0815ea9deda725e07286e7122681b4698bf2415e730f70706cba5c869a5d3a17"}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0xda, 0x9, 0x8, 0x4}, 0x119, &(0x7f0000000880)={0x5, 0xf, 0x119, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x8, 0x401}, @generic={0xf9, 0x10, 0xb, "8dccc7fb7c07a07309afa03dc5499725f7d23f572843518951c69c12560fa8e2772379b7ed4f9cd560da82f86ad50238c3b6ab58150a6427daddfae301e59354888d524057ac4319852b97469dc8746a4c012d1ce52e51bd9a9aa00dc4f8292ef528071ed169595f92dd6dcd3de14a6757526e2ae49b4f6c06837f413454ab83fa5efcb460c88d09137755b5b9ebfa57a09d776e658e59639a75790a29e8838f425152960ceb263824f3b014ec23a04b8f6124c964b9c04f6eaf603e48086da3f25d09149f92a1f3af335114489283fe4492c823267375db74517116295aced28b0f4b2ef0585804b5046599d5e613556ad15ff6d179"}, @ss_container_id={0x14, 0x10, 0x4, 0x70, "1a885624a2cbe5f85474fb02664d5131"}]}, 0x8, [{0xb9, &(0x7f00000009c0)=@string={0xb9, 0x3, "a48e0dc0a6bd2e8802e2d3fab4a09bea1bb96b5d4ead3fdbcd9bf7886024c93b6456f81b161e4e20b0dfa2ad0e4a61c1849840c479cca2cd15a8b78bdcd087a3f4dc5981232e09678c86e7b40c83b13d0b7380c725e295ca930d92a1e88dcee3f63120ca09a6f417672b411988e55d1c12b62c0b1532ddecb8ea62c99edbc45674e8a0cac2364f4c39bc1d1c48d261fa09ca8ab6e151efb82c2e5f2eb3a4b48bf2a442c849295195ccf922ef78c616e3af8bf29c3967bf"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x809}}, {0xbd, &(0x7f0000000ac0)=@string={0xbd, 0x3, "958cd395f8cd1b5ee055fa4e8ab6461e48a06872c39035d7e776ac38d61639ca8a9c168b1b8a4f9e47ac30d20641eac06179bdc5021f76d8653fa5ee7e474c48798f29d689a3451707a8e4ef8f74505ce1caee352448eb7fc77bde7cc26d13721b35e931a8f9b7502efd55bf242c0bf28072627d6aadff68ade555269e340b076bbdf0a264a658a2747f8658d82816fd8bf9bee978a08d8359270b34c603c75d391cda7cf13eac0a300c58d5dd6bb9560ca2c2737cf64f2be1ed72"}}, {0x8, &(0x7f0000000b80)=@string={0x8, 0x3, "9327ef161870"}}, {0x37, &(0x7f0000000bc0)=@string={0x37, 0x3, "f687086ffa1437115fffc3b786be4b382e01b2b7a4642ac3a54919e62156674c850e0deb8582b095860b9cfc234c91195d616550b5"}}, {0xfc, &(0x7f0000000c00)=@string={0xfc, 0x3, "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"}}, {0xd5, &(0x7f0000000d00)=@string={0xd5, 0x3, "9e72c73e3dd4777679731c7cc124a4ba597455a0f1f74800403e0a101a172291d9baae43d8442a265ae6aea49774139a4b867580a5dcdfc04516a19126076402987bb4f8ce78318c793b5282f5a92a78c0fa6a34efc070e7acbefdd1884f619c40846c82e0a41d56c0a923986516c5a4a8c4ca01ed3b4b81e50de5fd668d0ce94a675b95cf525ffa67233835a2e77219675225ba5996f2873f3ecca6efa63e49f936cddf30f192d08210d997eeab67dc365dfa4adc5b8a89143353d867a5b872130f0f08a1e850554e1c344223d4a02cbe9395"}}, {0x90, &(0x7f0000000e00)=@string={0x90, 0x3, "076b7cc641a1af58383bd08d7753ac5eb9b07970c23a21ddbb540fa3c646ff94ed336a5f544606fe961de757851b15d286225b4bae12ffd380ee9ea92baf736738bd61afa3b03abc2b9ab6cd56fbedd008af381e482b77215491416c8e11732bd8128b12cf5a1a5db331a8cbe7f261edcd309b2441bc8d709e959e008ae8d592f2c9f061f3d316e6e3fe22c3a12b"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141300000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4000010, r1, 0x0) 5.214732228s ago: executing program 1 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0xe, 0x1, &(0x7f00000000c0), &(0x7f0000000140), 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1f, 0x5, "54f884465781cee9cb75579f509973ee7ee07b562b0fc89b79fbd4"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 5.131118624s ago: executing program 0 (id=1591): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001300)=ANY=[@ANYBLOB="0d0054d20d3404e071877696ee59", @ANYRES32=r2, @ANYBLOB]) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d9345d63a2c00f30b74173b22e0822a92307f00000e970300"/228, 0xe4}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r6) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002300)=""/200, 0xc8}], 0x3}, 0x2121) 4.822173497s ago: executing program 0 (id=1592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000056c000/0x4000)=nil) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0x6}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) socket$nl_route(0x10, 0x3, 0x0) 4.772456572s ago: executing program 1 (id=1593): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\x00', 0x0, 0x2b, 0x1, @remote, @local}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x0, 0xfffc, 0xfffe, 0xa, 0x0, 0x30, 0x73}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x336a083a}, {0xd}, 0x0, 0x6e6bb2, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty, 0x34fd, 0x0, 0x0, 0x0, 0xff}}, 0xe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01eeffffffff210000000000000e14000000000000001b000500001e"], 0x3c}}, 0x0) mlock(&(0x7f0000807000/0x1000)=nil, 0x1000) 4.119194269s ago: executing program 3 (id=1594): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000080)="99", 0x1, 0x40, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2, 0x80000004}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000050, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xef2}, 0x8) r1 = dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0x2, 0xc, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa3}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0x3, &(0x7f00000005c0)=""/3, 0x41100, 0x8, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000640)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x8f49, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, r1, r1, r1], &(0x7f00000006c0), 0x10, 0x6, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000003c0)={0x3, &(0x7f00000002c0)=[{0x2, 0x0, 0xff}, {0x7d, 0xca, 0x1, 0x4}, {0x6, 0xd5, 0x8, 0x7}]}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x300}, 0x8) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000300)="054388a8b5cd1cca550c5de190638d5c", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 3.388365772s ago: executing program 1 (id=1595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@tcp6=r0}, 0x20) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) close(0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, @call={0x85, 0x0, 0x0, 0xb6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xf0f, 0x34, &(0x7f00000002c0)=""/52, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x7, 0x4, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0), 0x10, 0x0, @void, @value}, 0x94) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @null, 0x0, [@bcast, @rose, @remote, @rose, @null, @rose]}, &(0x7f0000000040)=0x40, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.386011867s ago: executing program 3 (id=1596): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000090e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.327118069s ago: executing program 5 (id=1597): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r4, &(0x7f00000041c0)=""/4111, 0x100f) (fail_nth: 3) 3.119753864s ago: executing program 3 (id=1598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) 2.522738253s ago: executing program 0 (id=1599): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r4, &(0x7f00000041c0)=""/4111, 0x100f) 2.497206684s ago: executing program 33 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=0xc) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000240)='./file0\x00', r4, 0xee00) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0100001600010f0000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000008003300000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f44f000008001d"], 0x10c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f00000004c0)="69337fdeb631d5174aa8909d61a2736673f61202b61dbe65215b74378e3522fb4795a6c7535e69b555f535435ec3beaddfb2c95baf2de488e228a9ff7cda8ef43d866f3a605cac8eb71f7f23fd9275ce8fdcd5ec275a7867f7ec2c9bc7088902e22dcda38996e36b45851de188d1575d87d7307849ccbf64a92011066c64fc49254e9e22e69466e323942258f571931236f58384e6209bfecd42e9c529e8bd6d18c1420e8af62f91d70129d0e78dcc783101e912702c4c0279d0893564a1fec605c50fb8d1e10aaca43bb333000dea9a03b22904745a8448e68ea22945150c5c5d9d7075c5beedbca9000635027415", &(0x7f0000000700)=""/213}, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) 2.168610286s ago: executing program 5 (id=1601): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffff3, &(0x7f0000000080)='cg\xff6\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) capset(&(0x7f00000000c0)={0x20071026, r7}, &(0x7f0000000280)={0x401, 0x37, 0xfff, 0x401, 0x0, 0x8}) write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0xa) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000380)=0x8) 1.921227785s ago: executing program 1 (id=1602): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.853762886s ago: executing program 1 (id=1603): r0 = socket(0x10, 0x803, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)={0x14c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x27, 0x8b, 0x2, 0x0, {0x4e23, 0x4e25, [0xfffffff3, 0x7fffffff, 0x6f, 0xffe], [0x7, 0x9, 0x8, 0x1], 0x0, [0x4, 0xff]}, 0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x18, 0x1, "5c10f754c87337134a284fa81bafef6f281ebc4b"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "be9c15987ae0b2b11e2961e351cc7104e4de6521d45eb0bdb76a6d8275866492da8cc60a9211c82486fe3c6e5c7e72cc63b7f4689c3c9d4f3d6f686a7ac7d10cf2eaaea1f2a25cf5aba042cabdba7906ed038ecdba4077b4af516287901d3cd401891955d5dc39a838e0946cd207244889f9d0f5a492510202bae2909849385a6fc7f4211ac069d23ae36e092d988efc667f3280f28b685296c7b3cf06ebae3eafd01d84bc0ed13fa8a4dcb78d322f0064a82204d9f7e30dbeb0c26792f0ed171aa264917a5cb87c20ff653bd7431a1808c61df7d1c12d2aef82d17e7fcaeb9d370b6041"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x11}, 0xc0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4b, 0xe6, 0x82, 0x10, 0xbfd, 0x104, 0xf104, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0xa7, 0x0, 0x1, 0x76, 0x2d, 0xbc, 0x0, [], [{{0x9, 0x5, 0x8a, 0x2, 0x200, 0x2, 0x4}}]}}]}}]}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x4c, 0x87, 0xc8, 0x10, 0x6cd, 0x115, 0x1a1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x60, 0x48, 0xfe, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 1.161903638s ago: executing program 0 (id=1604): socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500200000000000c92082c56a4573e22a23"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r2, 0x25, 0x8, @val=@iter={0x0}}, 0x20) 1.027159279s ago: executing program 0 (id=1605): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0x2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0x2}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) 988.872048ms ago: executing program 5 (id=1606): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="740000002800010000000000ffdbdf25620000800c0022000000000000000000140001000100000000000000000000000000000170b54c1767d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec7"], 0x74}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f0000000280)='./file0\x00', 0xb5fc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000100)) io_setup(0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000001c0)={0xfffffffc, [[0x1, 0xfffff7fc, 0x0, 0x0, 0x0, 0x80000000], [0x1, 0xfffffffb, 0x400], [0x91, 0x439c, 0x0, 0x40]], '\x00', [{0xfffffbfc, 0xfffffffe}, {0x40000000, 0xfffffffd}, {}, {0x0, 0x200}, {0x0, 0x9d1}], '\x00', 0x300}) fsmount(0xffffffffffffffff, 0x0, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000600)=""/242, &(0x7f00000000c0)=0xf2) memfd_create(0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x6b0001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffb, @local}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x96, &(0x7f0000000040), &(0x7f0000000080)=0x4) 938.811061ms ago: executing program 0 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x81) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/161, 0xa1}, {&(0x7f0000000880)=""/8, 0x8}, {&(0x7f00000008c0)=""/134, 0x86}], 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x5, 0x2, 0x0, 0x0, 0x67}, {0x2000000000, 0x67b0, 0x1, 0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x7}, {0x6, 0x80000ffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x40000002, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x4, 0xfffffffd, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9df}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022220000001760fee7dd0bbe4280efb1a429070b14d3f7aa8302000000a311096ce0834638b036a212d1d780ea48657c3c69a74fc9a2e0af71b4ae13511f72a55694b669ce6c87542dff245d920c8c34d877e278cbf592e0275de8e8bcdc0788c0af9ec0aeab16b80305e58bb2f865604a1e20a5e922445ad73acfbfe93857c6effe2f9f883e7e49073c1b41a7115521224679c10a0b54725392029635987bd746a6c8243e06240fd08c4b7c035304bb6f"], 0x0}, 0x0) 178.890291ms ago: executing program 5 (id=1608): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "d52374d95e0d2a05997d676d07934177f788b0c894c6aad4f72d9c6b35b6d002bb15716a3c324245c6f41db0889c2d5c9442eb281eb854b60323e728399653bbb1b3ec61243496be58fd2df2956ddc27541ce9acd3bfef63b26583b62001d7842c06f25d89e7b09f30e8ec82b0b763e9306e8f8e0588b250cb47f63b7c7fa1bbf5079bf5c75446b7613ad4b83b6a07b97739cd8d7610c1838222c6ffb180d66b0453b9f376"}, 0xb0) (async, rerun: 64) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_io_uring_setup(0xd1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x350}, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCGPKT(r1, 0x40045431, &(0x7f0000000040)) (rerun: 32) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000002280)="74c3", 0x2, 0xfffffffffffffffb) (async) r7 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r7}, 0x0, 0x0, 0x0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r9, 0x2}}, 0x18) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000008c0)={0x0, "473faa13ae623a1f1336039ed5959cca"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000018c0)={0x0, 0x6, 0x1, [0x401, 0xffffffff, 0x4, 0x7, 0x1], [0x7, 0x1, 0xda, 0x4, 0x5, 0x2, 0x9, 0x1, 0x2, 0xd543, 0x8000000000000000, 0x2800, 0xba, 0x6, 0x10, 0x20000000000000, 0x8, 0x9, 0x6, 0x1, 0x715, 0x7ff, 0x4, 0xe0a, 0x2, 0xffffffff, 0x401, 0x8, 0x1a10, 0x8, 0x6, 0x3, 0x7, 0x5, 0x3, 0x5, 0x1, 0xc, 0x8000000000000001, 0x6, 0xabf8, 0xb4d, 0x0, 0x5, 0x2, 0x5c, 0x4, 0xfffffffffffffff9, 0xffffffffffffff6f, 0x1, 0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x2, 0x3, 0x81, 0x7, 0x7, 0x200, 0x5, 0x8000000000000001, 0x7, 0x7, 0x80, 0x3a, 0x5, 0x2040000000000, 0x4, 0x3ff, 0xfff, 0x5, 0x3, 0x0, 0x2, 0x7f, 0x6, 0x3ff, 0x1, 0x6, 0x7fffffff, 0x3, 0xfc1, 0x2, 0x200, 0x80000000, 0x7, 0x7, 0x1, 0x0, 0x7, 0x4, 0x5, 0xfffffffffffffff7, 0x7, 0x100000001, 0x9, 0x4, 0x82, 0x81, 0x5, 0x9, 0x5, 0x9, 0x3, 0x1ff, 0x400, 0x7fffffffffffffff, 0x4, 0xe, 0x6, 0xd, 0x6, 0x5, 0x0, 0x4, 0xfff, 0xa8269a1, 0xb0b3, 0x0, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001d00)={0x0, 0x2, {0x8, @struct={0x5, 0x9}, r10, 0x3, 0x200, 0x4, 0x10000000000000, 0x8, 0x439, @struct={0x21cf, 0xf55}, 0x10001, 0x5, [0x2, 0x0, 0x9, 0x2, 0x2, 0xffffffff80000001]}, {0xb949, @struct={0xffffffff, 0xb35}, 0x0, 0x7, 0x9, 0x9, 0x6, 0x40, 0x401, @usage=0x11, 0x9, 0x12d0, [0x5f, 0x5, 0xd2ac, 0x123194f7, 0x7, 0xd]}, {0x1, @usage=0x7, r11, 0xab02000000000000, 0x52, 0x8, 0x80000001, 0x3, 0x434, @usage=0x3, 0xfffff91a, 0x7f, [0x8, 0x2, 0xb84, 0x3, 0x9, 0x2]}, {0x5, 0x4, 0x8}}) (async) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) (async, rerun: 64) r12 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r12, @ANYRES16=r3], 0x0) 72.026074ms ago: executing program 5 (id=1609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000056c000/0x4000)=nil) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0x6}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=1610): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newnexthop={0x38, 0x68, 0x1, 0x70bd2d, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x38}}, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/27, 0x1b}, {0x0}], 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_io_uring_setup(0x860, &(0x7f0000000200)={0x0, 0x388d, 0x200, 0x0, 0x187}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x4944, &(0x7f0000000280)={0x0, 0x4793, 0x1000, 0x0, 0x2cb}, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x22, 0x0, 0x5, 0x0, &(0x7f0000000380)="0536c27bb42cbcb9746350002dd0ba671a8f321ab9d1baea169aec42eefb09fd9a3498b43de1d1becada51fa26d67f68de0db4f520af57e45d798983c9afc4c3803160204514862ff8bc25626f3bb0ec5436461c5d1105dbaa074e73b6a34423dc9acf8322be3d9edd79f3166d03292ec37facc34d4bc30f976ef56f63106715587f6fa0a26e5d3781a21b0cc808e9ff3e40105e0d1e21dc4d25d8f96d98d468ab81487822560f2fea1de2fefdc052ccf28ef534aa6f41ccb900397f29823cc859c290fbd6126a1c79951392f3dbb9f455b3758980beffd8df3158eb2ee9cb0f082ef05b9e79", 0x8, 0x0, 0x1, {0xfffe, r4}}) socket$nl_route(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T8016] kvm: kvm [8004]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 229.565909][ T8009] team0: No ports can be present during mode change [ 230.776252][ T8043] netlink: 'syz.0.573': attribute type 7 has an invalid length. [ 230.810487][ T8043] netlink: 'syz.0.573': attribute type 5 has an invalid length. [ 230.832221][ T5881] usb 2-1: USB disconnect, device number 14 [ 230.863216][ T8043] netlink: 17 bytes leftover after parsing attributes in process `syz.0.573'. [ 232.259560][ T5834] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 233.058346][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 233.075338][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.120221][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.179160][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.305128][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.459997][ T5834] usb 2-1: Product: syz [ 233.541253][ T5834] usb 2-1: Manufacturer: syz [ 233.623815][ T5834] usb 2-1: SerialNumber: syz [ 233.741432][ T8089] netlink: 140 bytes leftover after parsing attributes in process `syz.2.583'. [ 233.777026][ T8089] netlink: 140 bytes leftover after parsing attributes in process `syz.2.583'. [ 233.895591][ T8089] ======================================================= [ 233.895591][ T8089] WARNING: The mand mount option has been deprecated and [ 233.895591][ T8089] and is ignored by this kernel. Remove the mand [ 233.895591][ T8089] option from the mount to silence this warning. [ 233.895591][ T8089] ======================================================= [ 233.930446][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.004329][ T5834] usb 2-1: 0:2 : does not exist [ 234.043075][ T5834] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 234.103050][ T5834] usb 2-1: USB disconnect, device number 15 [ 234.181427][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 234.394657][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.442383][ T8127] 9pnet: p9_errstr2errno: server reported unknown error ../file0 [ 236.866445][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 237.543275][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 237.831335][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.872618][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.942217][ T5834] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.962736][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.975612][ T5834] usb 5-1: config 0 descriptor?? [ 238.105675][ T8154] netlink: 'syz.0.599': attribute type 9 has an invalid length. [ 238.135452][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 238.215073][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 238.242291][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.255452][ T8154] hsr0: entered promiscuous mode [ 238.260884][ T8154] macvlan2: entered promiscuous mode [ 238.271997][ T5834] usb 5-1: USB disconnect, device number 11 [ 238.289301][ T8154] macvlan2: entered allmulticast mode [ 238.339259][ T8154] hsr0: entered allmulticast mode [ 238.355547][ T8154] hsr_slave_0: entered allmulticast mode [ 238.377620][ T8154] hsr_slave_1: entered allmulticast mode [ 238.681929][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.322807][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.492137][ T8174] Cannot find add_set index 0 as target [ 239.985147][ T52] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 240.645266][ T52] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.679691][ T52] usb 5-1: config 0 has no interface number 0 [ 240.703341][ T52] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 240.739621][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.809778][ T52] usb 5-1: config 0 descriptor?? [ 240.851881][ T52] usb 5-1: selecting invalid altsetting 1 [ 240.872442][ T52] dvb_ttusb_budget: ttusb_init_controller: error [ 240.914278][ T52] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 241.020552][ T52] DVB: Unable to find symbol cx22700_attach() [ 241.076786][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.122727][ T52] DVB: Unable to find symbol tda10046_attach() [ 241.163954][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.171871][ T5881] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.187518][ T52] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 241.397660][ T8214] xt_hashlimit: size too large, truncated to 1048576 [ 241.810766][ T8214] Cannot find add_set index 0 as target [ 241.876994][ T5881] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 241.903596][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.914604][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.924483][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 241.955123][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 241.964591][ T5881] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 241.972710][ T5881] usb 4-1: Manufacturer: syz [ 241.986935][ T5881] usb 4-1: config 0 descriptor?? [ 242.205217][ T5881] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 242.213977][ T5881] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 242.242513][ T5881] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 242.576336][ T52] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 242.609990][ T5879] usb 4-1: USB disconnect, device number 11 [ 242.644115][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 242.874555][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 243.212165][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 243.230481][ T24] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.323288][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.344161][ T24] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.372803][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.386093][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.395898][ T52] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.406202][ T24] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 243.415701][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.428799][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.854847][ T24] usb 3-1: config 0 descriptor?? [ 243.861256][ T52] usb 2-1: config 0 descriptor?? [ 244.433360][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 244.452309][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 244.534871][ T52] usb 2-1: USB disconnect, device number 16 [ 244.600822][ T24] itetech 0003:048D:8595.0007: item fetching failed at offset 4/5 [ 244.623750][ T24] itetech 0003:048D:8595.0007: probe with driver itetech failed with error -22 [ 244.722017][ T8254] FAULT_INJECTION: forcing a failure. [ 244.722017][ T8254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.747250][ T8254] CPU: 0 UID: 0 PID: 8254 Comm: syz.3.625 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 244.747276][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.747286][ T8254] Call Trace: [ 244.747292][ T8254] [ 244.747300][ T8254] dump_stack_lvl+0x241/0x360 [ 244.747331][ T8254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.747350][ T8254] ? __pfx__printk+0x10/0x10 [ 244.747380][ T8254] should_fail_ex+0x424/0x570 [ 244.747403][ T8254] _copy_to_user+0x31/0xb0 [ 244.747431][ T8254] kvm_vcpu_ioctl+0xb4b/0x1030 [ 244.747458][ T8254] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 244.747476][ T8254] ? __lock_acquire+0xad5/0xd80 [ 244.747493][ T8254] ? __asan_memset+0x23/0x50 [ 244.747514][ T8254] ? smack_file_ioctl+0x361/0x3b0 [ 244.747537][ T8254] ? __pfx_smack_file_ioctl+0x10/0x10 [ 244.747562][ T8254] ? __fget_files+0x2a/0x420 [ 244.747591][ T8254] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 244.747613][ T8254] __se_sys_ioctl+0xf1/0x160 [ 244.747638][ T8254] do_syscall_64+0xf3/0x230 [ 244.747657][ T8254] ? clear_bhb_loop+0x45/0xa0 [ 244.747676][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.747691][ T8254] RIP: 0033:0x7eff63d8d169 [ 244.747706][ T8254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.747720][ T8254] RSP: 002b:00007eff64c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.747738][ T8254] RAX: ffffffffffffffda RBX: 00007eff63fa5fa0 RCX: 00007eff63d8d169 [ 244.747751][ T8254] RDX: 0000200000000180 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 244.747762][ T8254] RBP: 00007eff64c73090 R08: 0000000000000000 R09: 0000000000000000 [ 244.747772][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.747783][ T8254] R13: 0000000000000000 R14: 00007eff63fa5fa0 R15: 00007ffdf9e69968 [ 244.747819][ T8254] [ 245.019587][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.028843][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.075788][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.097896][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.356568][ T5876] usb 3-1: USB disconnect, device number 19 [ 246.997561][ T1594] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 247.540924][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 247.608515][ T1594] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.642672][ T1594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.691990][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.708606][ T1594] usb 4-1: Product: syz [ 247.720544][ T8292] macvlan3: entered allmulticast mode [ 247.733203][ T1594] usb 4-1: Manufacturer: syz [ 247.740307][ T8292] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 247.750747][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.783202][ T1594] usb 4-1: SerialNumber: syz [ 247.842231][ T8292] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 249.052441][ T1594] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 249.062921][ T1594] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 249.395366][ T1594] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 249.625989][ T1594] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 249.843550][ T1594] usb 4-1: USB disconnect, device number 12 [ 249.850801][ T1594] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 254.049714][ T8389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.233724][ T5834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 254.644972][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 254.869718][ T5834] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 255.400358][ T5834] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 255.410141][ T5834] usb 4-1: config 0 has no interface number 0 [ 255.416675][ T5834] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.428664][ T5834] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 255.440297][ T5834] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 255.597849][ T52] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 255.638668][ T5834] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 255.682316][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 255.699291][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.706286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.720368][ T5834] usb 4-1: Product: syz [ 255.741279][ T8406] x_tables: duplicate underflow at hook 3 [ 255.751171][ T5834] usb 4-1: config 0 descriptor?? [ 255.761789][ T8387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.784044][ T8408] netlink: 144 bytes leftover after parsing attributes in process `syz.0.665'. [ 255.813465][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 255.822714][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.833955][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.850094][ T52] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.860858][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.878262][ T52] usb 2-1: config 0 descriptor?? [ 256.003362][ T5879] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.143420][ T5879] usb 3-1: device descriptor read/64, error -71 [ 256.298557][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 256.329407][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 256.342293][ T52] usb 2-1: USB disconnect, device number 17 [ 256.391587][ T5879] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 256.446758][ T5834] usb 4-1: USB disconnect, device number 13 [ 256.543573][ T5879] usb 3-1: device descriptor read/64, error -71 [ 256.656046][ T5879] usb usb3-port1: attempt power cycle [ 256.980908][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 257.143263][ T5879] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 257.164346][ T5879] usb 3-1: device descriptor read/8, error -71 [ 257.315129][ T8426] netlink: 88 bytes leftover after parsing attributes in process `syz.1.674'. [ 257.466659][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 257.673035][ T5879] usb 3-1: device descriptor read/8, error -71 [ 257.844841][ T5879] usb usb3-port1: unable to enumerate USB device [ 259.571251][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.600283][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.943460][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 259.992831][ T8464] cgroup: Invalid name [ 260.347355][ T1594] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 261.375287][ T5879] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.386208][ T5879] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 261.397208][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.402717][ T8478] loop2: detected capacity change from 0 to 7 [ 261.407364][ T5879] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.416735][ T8478] Dev loop2: unable to read RDB block 7 [ 261.453848][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 261.465508][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.479560][ T5879] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.490136][ T8478] loop2: AHDI p1 p2 p3 [ 261.494680][ T8478] loop2: partition table partially beyond EOD, truncated [ 261.502428][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.545146][ T8478] loop2: p1 start 1634624559 is beyond EOD, truncated [ 261.581130][ T5879] usb 3-1: Product: syz [ 261.594151][ T8478] loop2: p2 start 1702059890 is beyond EOD, truncated [ 261.603108][ T5879] usb 3-1: Manufacturer: syz [ 261.666071][ T1594] usb 2-1: Using ep0 maxpacket: 16 [ 261.677185][ T1594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.677598][ T8453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.693186][ T1594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.695249][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.716484][ T1594] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.771031][ T5879] cdc_wdm 3-1:1.0: skipping garbage [ 261.788800][ T5879] cdc_wdm 3-1:1.0: skipping garbage [ 261.800292][ T1594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.854223][ T1594] usb 2-1: config 0 descriptor?? [ 261.968581][ T8452] overlayfs: conflicting options: metacopy=off,verity=on [ 261.987168][ T5879] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 261.995190][ T5879] cdc_wdm 3-1:1.0: Unknown control protocol [ 262.036428][ T9] usb 3-1: USB disconnect, device number 24 [ 262.285235][ T1594] usbhid 2-1:0.0: can't add hid device: -71 [ 262.308699][ T1594] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.341085][ T1594] usb 2-1: USB disconnect, device number 18 [ 263.335531][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.406179][ T5876] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 263.563461][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 263.576241][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.580231][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.619838][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.623464][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.643644][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.657491][ T5879] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.684161][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.691054][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.806705][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.810896][ T5879] usb 4-1: config 0 descriptor?? [ 263.975981][ T1594] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 264.042677][ T5876] usb 2-1: config 0 descriptor?? [ 264.256467][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.268211][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.429540][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.442484][ T1594] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.477905][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.704399][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 264.792724][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.810945][ T1594] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.831211][ T5876] usb 2-1: USB disconnect, device number 19 [ 264.848988][ T8524] tipc: Started in network mode [ 264.854244][ T1594] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.863314][ T8524] tipc: Node identity ffffffff, cluster identity 4711 [ 264.880511][ T8524] tipc: Node number set to 4294967295 [ 264.887465][ T1594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.896636][ T1594] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 264.912345][ T1594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.912507][ T5879] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 264.956682][ T1594] usb 3-1: config 0 descriptor?? [ 264.968109][ T5879] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 266.188132][ T8535] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.964707][ T5877] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 267.106291][ T5877] usb 4-1: device descriptor read/64, error -32 [ 267.462501][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.462792][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.070821][ T5876] usb 4-1: USB disconnect, device number 14 [ 269.244674][ T5879] hid-generic C990:0003:0000.0009: unknown main item tag 0x0 [ 269.329398][ T5879] hid-generic C990:0003:0000.0009: unknown main item tag 0x0 [ 271.014725][ T5879] hid-generic C990:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.355817][ T1594] usbhid 3-1:0.0: can't add hid device: -32 [ 271.363975][ T1594] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 274.425007][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.570454][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.933107][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 278.672829][ T8621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 279.397681][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.415464][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.926707][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.949026][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.969649][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.986272][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.998546][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.758997][ T1594] usb 3-1: USB disconnect, device number 25 [ 282.103667][ T5829] Bluetooth: hci5: command tx timeout [ 283.558319][ T8630] chnl_net:caif_netlink_parms(): no params data found [ 283.623271][ T1594] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 283.780984][ T8662] FAULT_INJECTION: forcing a failure. [ 283.780984][ T8662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.809541][ T1594] usb 4-1: Using ep0 maxpacket: 16 [ 283.810886][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.4.747 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 283.810909][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.810919][ T8662] Call Trace: [ 283.810926][ T8662] [ 283.810933][ T8662] dump_stack_lvl+0x241/0x360 [ 283.810962][ T8662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.810982][ T8662] ? __pfx__printk+0x10/0x10 [ 283.811014][ T8662] should_fail_ex+0x424/0x570 [ 283.811036][ T8662] _copy_to_user+0x31/0xb0 [ 283.811065][ T8662] simple_read_from_buffer+0xc4/0x170 [ 283.811088][ T8662] proc_fail_nth_read+0x1ef/0x260 [ 283.811111][ T8662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.811133][ T8662] ? rw_verify_area+0x246/0x630 [ 283.811152][ T8662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.811173][ T8662] vfs_read+0x21f/0xb90 [ 283.811199][ T8662] ? __pfx___mutex_lock+0x10/0x10 [ 283.811218][ T8662] ? __pfx_vfs_read+0x10/0x10 [ 283.811241][ T8662] ? __fget_files+0x2a/0x420 [ 283.811261][ T8662] ? __fget_files+0x39d/0x420 [ 283.811276][ T8662] ? __fget_files+0x2a/0x420 [ 283.811304][ T8662] ksys_read+0x19d/0x2d0 [ 283.811325][ T8662] ? __pfx_ksys_read+0x10/0x10 [ 283.811344][ T8662] ? rcu_is_watching+0x15/0xb0 [ 283.811363][ T8662] ? trace_sys_enter+0x25/0x120 [ 283.811385][ T8662] do_syscall_64+0xf3/0x230 [ 283.811403][ T8662] ? clear_bhb_loop+0x45/0xa0 [ 283.811421][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.811436][ T8662] RIP: 0033:0x7f522298bb7c [ 283.811450][ T8662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 283.811463][ T8662] RSP: 002b:00007f522386b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.811481][ T8662] RAX: ffffffffffffffda RBX: 00007f5222ba5fa0 RCX: 00007f522298bb7c [ 283.811492][ T8662] RDX: 000000000000000f RSI: 00007f522386b0a0 RDI: 0000000000000004 [ 283.811502][ T8662] RBP: 00007f522386b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.811512][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.811522][ T8662] R13: 0000000000000000 R14: 00007f5222ba5fa0 R15: 00007ffc5ca16348 [ 283.811549][ T8662] [ 283.893285][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 283.961430][ T1594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.276655][ T5829] Bluetooth: hci5: command tx timeout [ 284.292697][ T1594] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.310190][ T1594] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 284.320279][ T1594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.283380][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 285.289820][ T1594] usb 4-1: config 0 descriptor?? [ 285.306442][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.595017][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.603824][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.696612][ T1594] usbhid 4-1:0.0: can't add hid device: -71 [ 285.723398][ T1594] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 285.812278][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.820005][ T1594] usb 4-1: USB disconnect, device number 15 [ 285.825204][ T5879] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.825229][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.852756][ T8676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.749'. [ 285.922582][ T5879] usb 2-1: config 0 descriptor?? [ 285.935081][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.749'. [ 285.976112][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.991281][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.009274][ T8630] bridge_slave_0: entered allmulticast mode [ 286.020977][ T8630] bridge_slave_0: entered promiscuous mode [ 286.050046][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.069175][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.085830][ T8630] bridge_slave_1: entered allmulticast mode [ 286.094875][ T8630] bridge_slave_1: entered promiscuous mode [ 286.200015][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.231662][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.331572][ T8630] team0: Port device team_slave_0 added [ 286.337561][ T5829] Bluetooth: hci5: command tx timeout [ 286.358385][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 286.378687][ T5879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 286.379899][ T8630] team0: Port device team_slave_1 added [ 286.404041][ T1594] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.409043][ T5879] usb 2-1: USB disconnect, device number 20 [ 286.490998][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.508034][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.533963][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.546005][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.562242][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.577345][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.579326][ T1594] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 286.608501][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.628144][ T1594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.637317][ T1594] usb 4-1: Product: syz [ 286.641588][ T1594] usb 4-1: Manufacturer: syz [ 286.651382][ T1594] usb 4-1: SerialNumber: syz [ 286.674518][ T1594] usb 4-1: config 0 descriptor?? [ 286.692131][ T1594] ch341 4-1:0.0: ch341-uart converter detected [ 286.755983][ T8630] hsr_slave_0: entered promiscuous mode [ 286.809195][ T8630] hsr_slave_1: entered promiscuous mode [ 286.849047][ T8630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.916652][ T1594] usb 4-1: failed to receive control message: -121 [ 286.922637][ T8630] Cannot create hsr debugfs directory [ 286.948106][ T1594] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 288.420706][ T5829] Bluetooth: hci5: command tx timeout [ 288.555682][ T8630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 288.648103][ T8630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.682747][ T8630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.700249][ T8630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.878549][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.910903][ T8630] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.951687][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.958946][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.050930][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.058192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.152695][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.197552][ T1594] usb 4-1: USB disconnect, device number 16 [ 289.208361][ T1594] ch341 4-1:0.0: device disconnected [ 289.232149][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.237379][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.663287][ T24] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 291.600417][ T8757] vlan2: entered promiscuous mode [ 291.605606][ T8757] bridge0: entered promiscuous mode [ 291.611753][ T8757] vlan2: entered allmulticast mode [ 291.616990][ T8757] bridge0: entered allmulticast mode [ 292.203685][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 292.216977][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.228681][ T24] usb 2-1: config 0 descriptor?? [ 292.244043][ T24] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 292.398025][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.500857][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.042607][ T1594] usb 2-1: USB disconnect, device number 21 [ 294.127706][ T8630] veth0_vlan: entered promiscuous mode [ 294.217438][ T8630] veth1_vlan: entered promiscuous mode [ 294.312639][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.770'. [ 294.356052][ T8630] veth0_macvtap: entered promiscuous mode [ 294.377457][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.773'. [ 294.410561][ T8630] veth1_macvtap: entered promiscuous mode [ 294.452278][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.773'. [ 294.546141][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.578488][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.634275][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.682502][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.709758][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.751212][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.773794][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.790264][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.804179][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.842492][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.881645][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.918902][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.934343][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.944843][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.955431][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.965463][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.977142][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.988484][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.007164][ T8630] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.226177][ T8630] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.378308][ T8630] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.434483][ T8630] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.857691][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.883609][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.182971][ T6121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.241736][ T6121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.422307][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.510129][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.727415][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 298.914666][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 298.949947][ T5876] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 299.011573][ T5876] usb 6-1: config 0 interface 0 has no altsetting 1 [ 299.049320][ T5876] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 299.073940][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.096156][ T5876] usb 6-1: SerialNumber: syz [ 299.110082][ T5876] usb 6-1: config 0 descriptor?? [ 299.131548][ T5876] usb-storage 6-1:0.0: USB Mass Storage device detected [ 299.158481][ T5876] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 299.547438][ T8832] xt_recent: Unsupported userspace flags (000000da) [ 300.050554][ T24] usb 6-1: USB disconnect, device number 2 [ 300.730469][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 301.456674][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.469891][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.851592][ T8885] smb3: Unknown parameter 'nolazytimw' [ 301.883211][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.104460][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 302.303802][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.328236][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.376539][ T5834] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.408303][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 302.420723][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.464335][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 302.534839][ T5834] usb 6-1: config 0 descriptor?? [ 303.060665][ T5834] usbhid 6-1:0.0: can't add hid device: -71 [ 303.122082][ T5834] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 303.205440][ T5834] usb 6-1: USB disconnect, device number 3 [ 303.573758][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 303.625668][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 304.958382][ T8910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 305.364444][ T8914] netlink: 830 bytes leftover after parsing attributes in process `syz.1.811'. [ 305.687538][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.734074][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.757438][ T30] audit: type=1804 audit(1744103600.994:11): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.815" name="/newroot/3/file0" dev="tmpfs" ino=35 res=1 errno=0 [ 305.773996][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.816'. [ 305.777429][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.925264][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.816'. [ 305.989509][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 306.388496][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 306.396698][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 306.427351][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 306.454382][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.919046][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.937106][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.954348][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.443592][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 307.443654][ T10] usbtmc 4-1:16.0: can't read capabilities [ 307.639561][ T5834] usb 4-1: USB disconnect, device number 17 [ 309.685189][ T1594] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 309.907454][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'. [ 310.300928][ T1594] usb 6-1: Using ep0 maxpacket: 16 [ 310.737211][ T1594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.944405][ T1594] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.027484][ T1594] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 311.036613][ T1594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.055401][ T1594] usb 6-1: config 0 descriptor?? [ 311.786707][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.829'. [ 311.801598][ T1594] usbhid 6-1:0.0: can't add hid device: -71 [ 311.813313][ T1594] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 311.833961][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.829'. [ 311.863772][ T1594] usb 6-1: USB disconnect, device number 4 [ 312.009463][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.060352][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.554382][ T5834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 313.047551][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.233021][ T5834] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 313.376586][ T5834] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 313.628165][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.961768][ T5834] usb 2-1: config 0 descriptor?? [ 314.794983][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'. [ 315.357217][ T5834] usb 2-1: Direct firmware load for ar3k/ramps_0x291523aa_19.dfu failed with error -2 [ 315.367544][ T5834] usb 2-1: Falling back to sysfs fallback for: ar3k/ramps_0x291523aa_19.dfu [ 315.386281][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.563776][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.620405][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'. [ 315.676244][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'. [ 317.144404][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150716][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.786172][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 321.836910][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.854'. [ 321.874165][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.854'. [ 325.627252][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.696337][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.616067][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 327.640888][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.870'. [ 327.652264][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.870'. [ 329.141979][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.313252][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.422044][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 329.684578][ T5896] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 330.326645][ T9128] pim6reg: tun_chr_ioctl cmd 2147767521 [ 330.801695][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.878'. [ 330.932267][ T9148] FAULT_INJECTION: forcing a failure. [ 330.932267][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.946084][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.5.880 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 330.946106][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.946116][ T9148] Call Trace: [ 330.946124][ T9148] [ 330.946131][ T9148] dump_stack_lvl+0x241/0x360 [ 330.946161][ T9148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.946182][ T9148] ? __pfx__printk+0x10/0x10 [ 330.946214][ T9148] should_fail_ex+0x424/0x570 [ 330.946236][ T9148] _copy_from_user+0x2d/0xb0 [ 330.946259][ T9148] copy_msghdr_from_user+0xb3/0x580 [ 330.946286][ T9148] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 330.946304][ T9148] ? __fget_files+0x2a/0x420 [ 330.946326][ T9148] ? __fget_files+0x2a/0x420 [ 330.946352][ T9148] __sys_sendmsg+0x20a/0x360 [ 330.946375][ T9148] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.946439][ T9148] ? rcu_is_watching+0x15/0xb0 [ 330.946459][ T9148] ? trace_sys_enter+0x25/0x120 [ 330.946482][ T9148] do_syscall_64+0xf3/0x230 [ 330.946501][ T9148] ? clear_bhb_loop+0x45/0xa0 [ 330.946521][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.946536][ T9148] RIP: 0033:0x7f5d90f8d169 [ 330.946552][ T9148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.946566][ T9148] RSP: 002b:00007f5d91ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.946583][ T9148] RAX: ffffffffffffffda RBX: 00007f5d911a5fa0 RCX: 00007f5d90f8d169 [ 330.946593][ T9148] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 330.946603][ T9148] RBP: 00007f5d91ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 330.946613][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.946623][ T9148] R13: 0000000000000000 R14: 00007f5d911a5fa0 R15: 00007fff7eda9138 [ 330.946648][ T9148] [ 331.264650][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 331.391677][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.883'. [ 331.476845][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 331.786688][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.857548][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 331.882071][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 331.901593][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.926420][ T5896] usb 4-1: config 0 descriptor?? [ 332.129701][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.5.886'. [ 332.142340][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.5.886'. [ 332.888594][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 332.902183][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.594104][ T5896] usb 4-1: USB disconnect, device number 19 [ 333.784126][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.889'. [ 335.658198][ T9188] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 336.464728][ T5876] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 337.263276][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 337.271580][ T5876] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.293196][ T5876] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.302988][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 337.513837][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.533447][ T5876] hub 4-1:4.0: USB hub found [ 337.581016][ T9206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.897'. [ 337.663755][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.897'. [ 337.900673][ T5876] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 337.932422][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.947609][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.383818][ T1594] usb 4-1: USB disconnect, device number 20 [ 341.858835][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 341.892364][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 342.132262][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.174230][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.809420][ T9274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.819745][ T9274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.832000][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.918'. [ 344.462333][ T9287] 9pnet_fd: Insufficient options for proto=fd [ 344.582354][ T10] hid-generic C990:0003:0000.000A: unknown main item tag 0x0 [ 344.673816][ T10] hid-generic C990:0003:0000.000A: unknown main item tag 0x0 [ 344.923819][ T10] hid-generic C990:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 346.561620][ T9296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.926'. [ 347.356714][ T9296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.926'. [ 347.637700][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.647927][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.482203][ T9326] netlink: 'syz.5.935': attribute type 10 has an invalid length. [ 351.457654][ T9343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'. [ 351.467432][ T9343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'. [ 354.823729][ T5877] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 355.135769][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 355.179334][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 355.190245][ T5877] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 355.201028][ T5877] usb 4-1: config 7 has no interface number 0 [ 355.217630][ T5877] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 355.229073][ T5877] usb 4-1: config 7 interface 187 has no altsetting 0 [ 356.124806][ T5877] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 356.159900][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.953'. [ 356.188641][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.211452][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.953'. [ 356.230796][ T5877] usb 4-1: Product: syz [ 356.248671][ T5877] usb 4-1: Manufacturer: syz [ 356.253825][ T5877] usb 4-1: SerialNumber: syz [ 356.363406][ T5877] usb 4-1: can't set config #7, error -71 [ 356.395489][ T5877] usb 4-1: USB disconnect, device number 21 [ 363.706404][ T9444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.970'. [ 363.744926][ T9444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.970'. [ 367.384224][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.985'. [ 367.406809][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.985'. [ 368.014612][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 368.023861][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 368.040295][ T9501] batadv0: entered promiscuous mode [ 368.062048][ T9501] team0: entered promiscuous mode [ 368.075037][ T9501] team_slave_0: entered promiscuous mode [ 368.091476][ T9501] team_slave_1: entered promiscuous mode [ 368.108137][ T9501] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 368.130617][ T9501] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 370.162933][ T9520] UHID_CREATE from different security context by process 660 (syz.3.994), this is not allowed. [ 370.525972][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.993'. [ 370.535052][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.993'. [ 371.316018][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.998'. [ 371.372839][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.998'. [ 373.579705][ T9566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.589029][ T9566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.704806][ T5877] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 373.993666][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 374.510482][ T5877] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 374.538688][ T5877] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 374.578934][ T5877] usb 4-1: can't read configurations, error -61 [ 374.601624][ T9574] ceph: No mds server is up or the cluster is laggy [ 374.872693][ T5877] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 375.654682][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 375.673639][ T5877] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 375.925079][ T5877] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 375.932722][ T5877] usb 4-1: can't read configurations, error -71 [ 376.004049][ T5877] usb usb4-port1: attempt power cycle [ 376.141069][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 376.152213][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 376.753067][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 377.100238][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 378.593958][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.603366][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.706991][ T5834] Bluetooth: Configuration file not found ar3k/ramps_0x291523aa_19.dfu [ 379.336253][ T5834] Bluetooth: Loading sysconfig file failed [ 379.342247][ T5834] ath3k 2-1:0.0: probe with driver ath3k failed with error -110 [ 379.366382][ T5834] usb 2-1: USB disconnect, device number 22 [ 380.377804][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 380.873265][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 380.880735][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.917940][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.931846][ T5896] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.002778][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.184869][ T5896] usb 6-1: config 0 descriptor?? [ 381.424874][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 381.434602][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 381.503928][ T5896] usb 6-1: USB disconnect, device number 5 [ 382.283854][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1030'. [ 382.298886][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1030'. [ 382.343805][ T5881] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 382.429086][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'. [ 382.506792][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 382.535169][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.556495][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.602276][ T5881] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.629771][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.653119][ T5881] usb 2-1: config 0 descriptor?? [ 383.751608][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 383.806579][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 383.872247][ T5881] usb 2-1: USB disconnect, device number 23 [ 384.723458][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.783874][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.600674][ T9701] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 388.366084][ T1594] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 388.473502][ T5881] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 388.599020][ T1594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.613135][ T1594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.227030][ T1594] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 389.291650][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 389.297156][ T1594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.309087][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.324900][ T1594] usb 6-1: SerialNumber: syz [ 389.354821][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.388632][ T5881] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.413380][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.442646][ T5881] usb 4-1: config 0 descriptor?? [ 389.594636][ T1594] usb 6-1: 0:2 : does not exist [ 389.612114][ T1594] usb 6-1: unit 5 not found! [ 389.702704][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 389.715295][ T1594] usb 6-1: USB disconnect, device number 6 [ 389.727863][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 389.803933][ T5881] usb 4-1: USB disconnect, device number 25 [ 390.047192][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.145270][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.158189][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.730583][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1068'. [ 390.773913][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1068'. [ 393.084183][ T5877] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 393.393847][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 393.487130][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.554481][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.586895][ T5877] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.604083][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.719596][ T5834] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 393.810190][ T5877] usb 4-1: config 0 descriptor?? [ 394.023415][ T5834] usb 2-1: device descriptor read/64, error -71 [ 394.168479][ T5877] usbhid 4-1:0.0: can't add hid device: -71 [ 394.177587][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.198811][ T5877] usb 4-1: USB disconnect, device number 26 [ 394.228780][ T9808] netlink: 'syz.0.1085': attribute type 6 has an invalid length. [ 394.237388][ T9808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1085'. [ 394.323378][ T5834] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 394.483473][ T5834] usb 2-1: device descriptor read/64, error -71 [ 394.595475][ T5834] usb usb2-port1: attempt power cycle [ 394.773743][ T5877] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 394.968911][ T5877] usb 6-1: config 1 interface 0 has no altsetting 0 [ 395.075187][ T5877] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 395.136671][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.190775][ T5877] usb 6-1: Product: syz [ 395.234094][ T5877] usb 6-1: Manufacturer: syz [ 395.248648][ T5834] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 395.255223][ T5877] usb 6-1: SerialNumber: syz [ 395.566896][ T5896] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 395.797719][ T5834] usb 2-1: device descriptor read/8, error -71 [ 396.663422][ T5896] usb 4-1: device descriptor read/64, error -71 [ 397.200413][ T5877] usbhid 6-1:1.0: can't add hid device: -71 [ 397.206648][ T5877] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 397.303525][ T5877] usb 6-1: USB disconnect, device number 7 [ 397.323319][ T5896] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 397.393854][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1093'. [ 400.243508][ T1594] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 400.390854][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1101'. [ 400.406275][ T1594] usb 4-1: Using ep0 maxpacket: 16 [ 400.414944][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1101'. [ 400.437673][ T1594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.457486][ T1594] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.474302][ T1594] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.484840][ T1594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.509626][ T1594] usb 4-1: config 0 descriptor?? [ 400.756525][ T1594] usbhid 4-1:0.0: can't add hid device: -71 [ 400.796194][ T1594] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 400.834889][ T1594] usb 4-1: USB disconnect, device number 29 [ 403.572161][ T9899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1114'. [ 403.584741][ T9899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1114'. [ 403.982939][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.007623][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.623516][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 404.783291][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 405.627861][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.716500][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.792661][ T5877] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.810567][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.822063][ T5877] usb 2-1: config 0 descriptor?? [ 406.085132][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 406.109697][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 406.218022][ T5877] usb 2-1: USB disconnect, device number 28 [ 406.253318][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 406.580100][ T9925] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128) [ 407.759860][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.768810][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.354416][ T30] audit: type=1326 audit(1744103705.564:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9979 comm="syz.0.1142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac3918d169 code=0x0 [ 411.482582][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.533510][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.810019][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 411.837602][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 412.011402][T10003] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 412.019609][T10003] syzkaller0: linktype set to 270 [ 412.282208][T10006] No control pipe specified [ 412.328539][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1149'. [ 413.254152][ T5876] hid-generic C990:0003:0000.000B: unknown main item tag 0x0 [ 413.353098][ T5876] hid-generic C990:0003:0000.000B: unknown main item tag 0x0 [ 413.633721][ T5876] hid-generic C990:0003:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 416.002294][T10030] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 416.212826][T10036] netlink: 'syz.0.1158': attribute type 23 has an invalid length. [ 416.294465][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1159'. [ 416.311623][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.321107][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.403011][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1159'. [ 417.947119][ T5878] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 418.573555][T10066] ceph: No mds server is up or the cluster is laggy [ 418.673264][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 418.682087][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 418.719908][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 418.772135][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.933262][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.969596][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.213471][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.262705][T10084] smb3: Unknown parameter 'nolazytimw' [ 419.521078][ T5878] usb 2-1: GET_CAPABILITIES returned 0 [ 419.546998][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 419.804609][ T5877] usb 2-1: USB disconnect, device number 29 [ 419.905832][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1174'. [ 419.932187][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1174'. [ 420.393472][ T5896] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 421.343377][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 421.393321][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.695592][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.826204][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.979473][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.043726][ T5896] usb 4-1: config 0 descriptor?? [ 423.101676][T10118] ceph: No mds server is up or the cluster is laggy [ 423.137270][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 423.156632][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 423.251075][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 423.267130][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 423.298174][ T5896] usb 4-1: USB disconnect, device number 30 [ 423.821978][T10141] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1189'. [ 423.914394][T10141] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1189'. [ 427.939768][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 427.983318][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 428.096057][T10167] tipc: Enabled bearer , priority 12 [ 428.144929][T10167] overlayfs: failed to resolve './file1': -2 [ 429.057592][ T5834] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 429.346305][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 429.370164][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.405177][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.873099][ T5834] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.027656][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.049501][ T5834] usb 4-1: config 0 descriptor?? [ 430.940083][ T5834] usbhid 4-1:0.0: can't add hid device: -71 [ 430.953329][ T5834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 431.012582][ T5834] usb 4-1: USB disconnect, device number 31 [ 434.157687][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1218'. [ 434.214085][T10240] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 434.596760][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.719246][ T6117] bridge_slave_0: left allmulticast mode [ 434.725668][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.766494][ T6117] bridge_slave_0: left promiscuous mode [ 434.829572][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.240884][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1222'. [ 437.574375][ T6117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.601406][ T6117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.643014][ T6117] bond0 (unregistering): Released all slaves [ 437.696119][T10279] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1222'. [ 437.728695][T10279] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1222'. [ 438.017104][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1227'. [ 440.338712][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.360650][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.417940][T10335] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 442.054480][T10368] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 442.809115][T10368] batman_adv: batadv0: Adding interface: team0 [ 442.891388][T10368] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.920446][T10368] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 443.815773][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.974027][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1242'. [ 444.313658][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.332369][T10384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'. [ 444.507577][T10390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1243'. [ 445.670962][ T36] kworker/u8:2 (36) used greatest stack depth: 18600 bytes left [ 446.081980][ T5876] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 446.120614][ T6117] team0 (unregistering): Port device team_slave_1 removed [ 446.159789][ T6117] team0 (unregistering): Port device team_slave_0 removed [ 446.279396][ T5876] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 446.289865][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.319669][ T5876] usb 4-1: config 0 descriptor?? [ 446.486585][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 446.500859][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 446.769591][ T5876] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 446.782105][T10417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'. [ 446.817655][T10417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'. [ 446.946340][ T5896] usb 4-1: USB disconnect, device number 32 [ 447.846000][T10443] tipc: Started in network mode [ 447.851756][T10443] tipc: Node identity 7, cluster identity 4711 [ 447.858816][T10443] tipc: Node number set to 7 [ 448.142870][T10437] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1257'. [ 450.463791][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1261'. [ 452.276794][T10482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.353246][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1266'. [ 452.406235][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1266'. [ 452.661075][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 452.842644][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 452.858560][ T1594] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 452.892816][ T10] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 452.924943][ T10] usb 2-1: config 0 has no interface number 0 [ 452.946900][ T10] usb 2-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 453.091187][ T1594] usb 4-1: Using ep0 maxpacket: 8 [ 453.135755][ T10] usb 2-1: config 0 interface 81 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 453.170264][ T10] usb 2-1: config 0 interface 81 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.185427][ T1594] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 453.196244][ T1594] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.209788][ T10] usb 2-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 453.227371][ T1594] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.251156][ T10] usb 2-1: config 0 interface 81 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 453.331173][ T1594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.532254][ T10] usb 2-1: config 0 interface 81 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 453.571867][ T10] usb 2-1: config 0 interface 81 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.661615][ T1594] usbtmc 4-1:16.0: bulk endpoints not found [ 454.021075][ T10] usb 2-1: config 0 interface 81 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 454.055975][ T10] usb 2-1: config 0 interface 81 altsetting 0 endpoint 0x8E has invalid maxpacket 49216, setting to 64 [ 454.077969][ T10] usb 2-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 454.114864][ T10] usb 2-1: config 0 interface 81 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 454.126778][ T10] usb 2-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 454.137717][ T10] usb 2-1: config 0 interface 81 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 454.156679][ T10] usb 2-1: config 0 interface 81 altsetting 0 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 454.177007][ T10] usb 2-1: New USB device found, idVendor=1a8d, idProduct=1011, bcdDevice=d7.f9 [ 454.200730][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.219145][ T10] usb 2-1: Product: syz [ 454.223426][ T10] usb 2-1: Manufacturer: syz [ 454.228032][ T10] usb 2-1: SerialNumber: syz [ 454.246963][ T10] usb 2-1: config 0 descriptor?? [ 454.268712][ T10] option 2-1:0.81: GSM modem (1-port) converter detected [ 454.753064][ T1594] usb 2-1: USB disconnect, device number 30 [ 455.285578][T10539] FAULT_INJECTION: forcing a failure. [ 455.285578][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 455.332439][ T1594] option 2-1:0.81: device disconnected [ 455.351083][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.5.1277 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 455.351108][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.351117][T10539] Call Trace: [ 455.351124][T10539] [ 455.351130][T10539] dump_stack_lvl+0x241/0x360 [ 455.351159][T10539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.351180][T10539] ? __pfx__printk+0x10/0x10 [ 455.351202][T10539] ? __pfx___might_resched+0x10/0x10 [ 455.351224][T10539] should_fail_ex+0x424/0x570 [ 455.351252][T10539] should_failslab+0xac/0x100 [ 455.351270][T10539] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 455.351286][T10539] ? __alloc_skb+0x1c2/0x480 [ 455.351311][T10539] __alloc_skb+0x1c2/0x480 [ 455.351335][T10539] ? __pfx___alloc_skb+0x10/0x10 [ 455.351357][T10539] ? netlink_autobind+0xd6/0x2f0 [ 455.351375][T10539] ? netlink_autobind+0x2b0/0x2f0 [ 455.351400][T10539] netlink_sendmsg+0x638/0xcd0 [ 455.351431][T10539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.351462][T10539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.351479][T10539] __sock_sendmsg+0x221/0x270 [ 455.351501][T10539] ____sys_sendmsg+0x523/0x860 [ 455.351524][T10539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.351538][T10539] ? __fget_files+0x2a/0x420 [ 455.351558][T10539] ? __fget_files+0x2a/0x420 [ 455.351581][T10539] __sys_sendmsg+0x271/0x360 [ 455.351603][T10539] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.351662][T10539] ? rcu_is_watching+0x15/0xb0 [ 455.351680][T10539] ? trace_sys_enter+0x25/0x120 [ 455.351702][T10539] do_syscall_64+0xf3/0x230 [ 455.351722][T10539] ? clear_bhb_loop+0x45/0xa0 [ 455.351740][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.351755][T10539] RIP: 0033:0x7f5d90f8d169 [ 455.351770][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.351783][T10539] RSP: 002b:00007f5d91ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.351802][T10539] RAX: ffffffffffffffda RBX: 00007f5d911a5fa0 RCX: 00007f5d90f8d169 [ 455.351813][T10539] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 455.351823][T10539] RBP: 00007f5d91ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 455.351832][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.351841][T10539] R13: 0000000000000000 R14: 00007f5d911a5fa0 R15: 00007fff7eda9138 [ 455.351867][T10539] [ 455.593958][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.770640][ T10] usb 4-1: USB disconnect, device number 33 [ 456.041002][ T5878] kernel read not supported for file /snd/midiC2D0 (pid: 5878 comm: kworker/1:4) [ 457.376436][T10555] mmap: syz.5.1282 (10555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 460.542419][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.556586][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.607598][ T1594] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 462.182163][ T1594] usb 4-1: Using ep0 maxpacket: 8 [ 462.255361][ T1594] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.340189][ T1594] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.379334][ T1594] usb 4-1: config 0 interface 0 has no altsetting 0 [ 462.458681][T10623] 9pnet_fd: Insufficient options for proto=fd [ 462.718314][ T1594] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 463.210383][ T1594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.235151][ T1594] usb 4-1: config 0 descriptor?? [ 463.509879][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 463.850873][ T1594] usbhid 4-1:0.0: can't add hid device: -71 [ 463.856861][ T1594] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 463.936098][ T1594] usb 4-1: USB disconnect, device number 34 [ 464.334015][ T1594] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 464.543647][ T1594] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 464.589121][ T1594] usb 4-1: config 0 has no interface number 0 [ 465.387212][ T1594] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 465.396347][ T1594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.404404][ T1594] usb 4-1: Product: syz [ 465.408829][ T1594] usb 4-1: Manufacturer: syz [ 465.413748][ T1594] usb 4-1: SerialNumber: syz [ 465.572322][ T1594] usb 4-1: config 0 descriptor?? [ 465.760150][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 465.935993][ T5896] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 466.002455][ T5896] usb 6-1: config 0 has no interface number 0 [ 466.140330][ T5896] usb 6-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 466.404672][ T1594] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 466.427716][ T5896] usb 6-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 466.505096][ T5896] usb 6-1: config 0 interface 153 has no altsetting 0 [ 466.521550][ T1594] usb 4-1: No valid video chain found. [ 466.533227][ T1594] usb 4-1: USB disconnect, device number 35 [ 466.582732][ T5896] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 466.590306][T10678] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 466.616791][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.648831][ T5896] usb 6-1: Product: syz [ 466.669766][ T5896] usb 6-1: Manufacturer: syz [ 466.699449][ T5896] usb 6-1: SerialNumber: syz [ 466.712936][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 466.721252][ T5896] usb 6-1: config 0 descriptor?? [ 466.739794][ T5896] hub 6-1:0.153: bad descriptor, ignoring hub [ 466.748699][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 466.766187][ T5896] hub 6-1:0.153: probe with driver hub failed with error -5 [ 466.797197][ T5896] sierra 6-1:0.153: Sierra USB modem converter detected [ 467.580257][ T5878] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 467.772676][ T5896] usb 6-1: USB disconnect, device number 8 [ 467.786544][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 467.805059][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 467.828915][ T5896] sierra 6-1:0.153: device disconnected [ 467.872972][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 467.907238][T10706] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 467.934919][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 467.989220][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 468.036349][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 468.062785][T10708] netlink: 'syz.4.1317': attribute type 23 has an invalid length. [ 468.080909][ T5878] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 468.111694][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.133382][ T5878] usb 4-1: Product: syz [ 468.147111][ T5878] usb 4-1: Manufacturer: syz [ 468.155489][ T5878] usb 4-1: SerialNumber: syz [ 468.163511][ T5878] usb 4-1: config 0 descriptor?? [ 468.180022][T10714] FAULT_INJECTION: forcing a failure. [ 468.180022][T10714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.193207][T10714] CPU: 1 UID: 0 PID: 10714 Comm: syz.1.1319 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 468.193222][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.193234][T10714] Call Trace: [ 468.193239][T10714] [ 468.193243][T10714] dump_stack_lvl+0x241/0x360 [ 468.193263][T10714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.193277][T10714] ? __pfx__printk+0x10/0x10 [ 468.193302][T10714] should_fail_ex+0x424/0x570 [ 468.193316][T10714] _copy_to_iter+0x1f6/0x1c90 [ 468.193331][T10714] ? __pfx_n_tty_read+0x10/0x10 [ 468.193350][T10714] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 468.193365][T10714] ? __pfx__copy_to_iter+0x10/0x10 [ 468.193377][T10714] ? __pfx_woken_wake_function+0x10/0x10 [ 468.193399][T10714] tty_read+0x2ba/0x6b0 [ 468.193416][T10714] ? __pfx_tty_read+0x10/0x10 [ 468.193427][T10714] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 468.193446][T10714] ? bpf_lsm_file_permission+0x9/0x10 [ 468.193461][T10714] vfs_read+0x9a0/0xb90 [ 468.193479][T10714] ? __pfx_vfs_read+0x10/0x10 [ 468.193494][T10714] ? __fget_files+0x2a/0x420 [ 468.193507][T10714] ? __fget_files+0x2a/0x420 [ 468.193522][T10714] ksys_read+0x19d/0x2d0 [ 468.193536][T10714] ? __pfx_ksys_read+0x10/0x10 [ 468.193548][T10714] ? rcu_is_watching+0x15/0xb0 [ 468.193559][T10714] ? trace_sys_enter+0x25/0x120 [ 468.193573][T10714] do_syscall_64+0xf3/0x230 [ 468.193585][T10714] ? clear_bhb_loop+0x45/0xa0 [ 468.193597][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.193606][T10714] RIP: 0033:0x7fb3ec38d169 [ 468.193616][T10714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.193624][T10714] RSP: 002b:00007fb3ed214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.193635][T10714] RAX: ffffffffffffffda RBX: 00007fb3ec5a6080 RCX: 00007fb3ec38d169 [ 468.193642][T10714] RDX: 0000000000002020 RSI: 0000200000003f80 RDI: 0000000000000004 [ 468.193648][T10714] RBP: 00007fb3ed214090 R08: 0000000000000000 R09: 0000000000000000 [ 468.193653][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.193659][T10714] R13: 0000000000000000 R14: 00007fb3ec5a6080 R15: 00007ffe07d29e38 [ 468.193675][T10714] [ 468.412539][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.702038][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 468.709403][ T5878] input input38: Device does not respond to id packet M [ 468.737279][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 468.828144][ T5878] input input38: Device does not respond to id packet P [ 468.927777][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 468.997081][ T5878] input input38: Device does not respond to id packet B [ 469.247001][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.287328][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.376940][T10726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1323'. [ 469.438254][T10726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1323'. [ 469.480403][ T5876] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 469.891150][ T5876] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.914584][ T5876] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 469.935566][ T5876] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.016471][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 470.042970][ T5878] input input38: Device does not respond to id packet N [ 470.052736][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 470.059185][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 470.080223][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 470.128858][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 470.136910][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.215202][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 470.520522][ T5878] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input38 [ 470.557301][T10721] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 471.141364][ T5876] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.144465][ T5878] usb 4-1: USB disconnect, device number 36 [ 471.660827][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 471.800503][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1333'. [ 471.833575][T10764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1331'. [ 471.960189][ T5878] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 472.071435][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.085910][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.136249][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.179866][ T5878] usb 2-1: config 0 has no interfaces? [ 472.198396][ T5878] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 472.208511][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.224107][ T5878] usb 2-1: config 0 descriptor?? [ 472.253628][T10782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1336'. [ 472.269357][T10782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1336'. [ 472.290185][ T5896] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 472.399974][ T5876] usb 6-1: USB disconnect, device number 9 [ 472.453780][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.484670][ T5896] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 472.508520][ T5896] usb 4-1: config 0 has no interface number 0 [ 472.516014][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.524617][ T5896] usb 4-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 472.549917][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 472.590238][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 472.610159][ T5896] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 472.619268][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.652870][ T5834] usb 2-1: USB disconnect, device number 31 [ 472.688340][ T5896] usb 4-1: Product: syz [ 472.707991][ T5896] usb 4-1: Manufacturer: syz [ 472.748948][ T5896] usb 4-1: SerialNumber: syz [ 472.819020][ T5896] usb 4-1: config 0 descriptor?? [ 472.891358][T10775] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 473.003761][ T5896] kvaser_usb 4-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 474.850823][T10775] tipc: Started in network mode [ 474.855729][T10775] tipc: Node identity ffffffff, cluster identity 4711 [ 474.862760][T10775] tipc: Node number set to 4294967295 [ 474.882708][ T5876] usb 4-1: USB disconnect, device number 37 [ 475.143664][T10817] No source specified [ 475.344578][T10818] __nla_validate_parse: 2 callbacks suppressed [ 475.344596][T10818] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1342'. [ 476.419578][T10825] fuse: Unknown parameter 'fd9ôŘ­—ę믚č6' [ 477.576576][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.719274][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 477.778892][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.130698][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 478.154229][ T5876] usb 6-1: New USB device found, idVendor=056e, idProduct=01e6, bcdDevice= 0.00 [ 478.208401][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.446647][ T5876] usb 6-1: config 0 descriptor?? [ 479.213744][ T5876] hid-generic 0003:056E:01E6.000D: item fetching failed at offset 5/7 [ 479.223520][ T5876] hid-generic 0003:056E:01E6.000D: probe with driver hid-generic failed with error -22 [ 479.839641][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.897999][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.965034][ T5876] usb 6-1: USB disconnect, device number 10 [ 481.698451][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 483.198862][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.269652][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.707114][T10933] overlayfs: failed to resolve './file0': -2 [ 486.061531][ T1594] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 486.144227][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 486.203500][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.268186][ T1594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.297829][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.309477][ T1594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 486.324689][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.333915][ T1594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.380359][ T1594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.398043][T10946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 486.434534][ T1594] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.479428][T10955] bridge_slave_1 (unregistering): left allmulticast mode [ 486.567587][T10955] bridge_slave_1 (unregistering): left promiscuous mode [ 486.607675][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.659396][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.067506][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.111152][ T1594] usb 4-1: USB disconnect, device number 38 [ 487.401461][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.504304][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.570316][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.556768][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1380'. [ 488.570003][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1380'. [ 488.611597][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.642487][T10987] tmpfs: Bad value for 'mpol' [ 488.745511][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.887061][ T30] audit: type=1326 audit(1744106361.131:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 488.943915][ T30] audit: type=1326 audit(1744106361.131:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 488.951048][T10998] vivid-000: disconnect [ 489.009987][ T30] audit: type=1326 audit(1744106361.171:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.068985][ T30] audit: type=1326 audit(1744106361.171:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.097219][T10997] vivid-000: reconnect [ 489.118791][ T30] audit: type=1326 audit(1744106361.171:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.180173][ T30] audit: type=1326 audit(1744106361.171:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.240247][ T30] audit: type=1326 audit(1744106361.171:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.261759][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.272837][ T30] audit: type=1326 audit(1744106361.171:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.294221][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.358097][T11009] veth0_to_bridge: entered promiscuous mode [ 489.364658][ T30] audit: type=1326 audit(1744106361.171:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.433155][ T30] audit: type=1326 audit(1744106361.171:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10997 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 489.466837][T11008] veth0_to_bridge: left promiscuous mode [ 489.828624][ T5878] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 489.832313][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1390'. [ 489.957253][T11034] input: syz0 as /devices/virtual/input/input39 [ 490.543460][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 490.580536][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1393'. [ 490.600351][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 490.652948][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1393'. [ 490.662250][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 490.714101][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 490.769560][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.861208][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.901008][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.939285][ T5878] usbtmc 6-1:16.0: bulk endpoints not found [ 491.053850][T11049] blktrace: Concurrent blktraces are not allowed on sg0 [ 491.789665][T11058] blktrace: Concurrent blktraces are not allowed on sg0 [ 492.589694][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.600121][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.672669][T11072] cgroup: Invalid name [ 492.884419][ T1594] usb 6-1: USB disconnect, device number 11 [ 494.271099][T11095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1406'. [ 494.289908][T11095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1406'. [ 494.388324][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 494.388341][ T30] audit: type=1326 audit(1744106366.631:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11100 comm="syz.3.1407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff63d8d169 code=0x0 [ 494.506599][T11106] blktrace: Concurrent blktraces are not allowed on sg0 [ 495.643394][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 495.955384][T11121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.009582][T11121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.824490][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 497.050828][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 497.057919][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 497.580234][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 497.610657][ T9] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.709981][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.785644][T11148] xt_hashlimit: size too large, truncated to 1048576 [ 498.124337][T11148] Cannot find del_set index 2 as target [ 498.160330][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.169650][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.234970][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 499.486670][ T9] usb 4-1: USB disconnect, device number 39 [ 500.717322][T11183] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1425'. [ 501.459888][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.468800][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.522986][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.541448][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.788064][T11231] afs: Unknown parameter 'dynd˙~' [ 504.049486][T11246] FAULT_INJECTION: forcing a failure. [ 504.049486][T11246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.075506][T11246] CPU: 0 UID: 0 PID: 11246 Comm: syz.0.1440 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 504.075533][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.075543][T11246] Call Trace: [ 504.075551][T11246] [ 504.075558][T11246] dump_stack_lvl+0x241/0x360 [ 504.075589][T11246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.075609][T11246] ? __pfx__printk+0x10/0x10 [ 504.075642][T11246] should_fail_ex+0x424/0x570 [ 504.075664][T11246] _copy_from_user+0x2d/0xb0 [ 504.075687][T11246] copy_msghdr_from_user+0xb3/0x580 [ 504.075715][T11246] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 504.075733][T11246] ? __fget_files+0x2a/0x420 [ 504.075754][T11246] ? __fget_files+0x2a/0x420 [ 504.075781][T11246] __sys_sendmmsg+0x361/0x7b0 [ 504.075810][T11246] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.075863][T11246] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 504.075888][T11246] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 504.075965][T11246] ? rcu_is_watching+0x15/0xb0 [ 504.075988][T11246] __x64_sys_sendmmsg+0xa0/0xb0 [ 504.076008][T11246] do_syscall_64+0xf3/0x230 [ 504.076028][T11246] ? clear_bhb_loop+0x45/0xa0 [ 504.076048][T11246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.076064][T11246] RIP: 0033:0x7fac3918d169 [ 504.076080][T11246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.076093][T11246] RSP: 002b:00007fac39fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.076112][T11246] RAX: ffffffffffffffda RBX: 00007fac393a5fa0 RCX: 00007fac3918d169 [ 504.076124][T11246] RDX: 0000000000000001 RSI: 00002000000053c0 RDI: 0000000000000004 [ 504.076133][T11246] RBP: 00007fac39fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 504.076143][T11246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.076153][T11246] R13: 0000000000000000 R14: 00007fac393a5fa0 R15: 00007ffd83f63c58 [ 504.076176][T11246] [ 504.506846][T11260] bond1: entered promiscuous mode [ 504.520958][T11260] bond1: entered allmulticast mode [ 505.184834][T11260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.316069][T11267] x_tables: unsorted entry at hook 2 [ 505.678875][T11275] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1448'. [ 506.300702][T11260] bond1 (unregistering): Released all slaves [ 506.505688][T11270] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 506.604502][T11270] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 506.973137][T11297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 507.003311][T11297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 508.275482][T11327] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1462'. [ 508.285273][ T5878] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 508.632239][ T5878] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 508.673997][ T5878] usb 4-1: config 0 has no interface number 0 [ 508.968871][ T5878] usb 4-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 509.199641][ T5878] usb 4-1: New USB device found, idVendor=0bfc, idProduct=0104, bcdDevice=f1.04 [ 509.224809][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.333697][ T5878] usb 4-1: Product: syz [ 509.337911][ T5878] usb 4-1: Manufacturer: syz [ 509.342730][ T5878] usb 4-1: SerialNumber: syz [ 509.361031][ T5878] usb 4-1: config 0 descriptor?? [ 509.366692][T11324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 509.726313][T11324] input: syz1 as /devices/virtual/input/input40 [ 510.356144][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 510.561956][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.570868][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.584483][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.593311][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.655957][ T5896] usb 4-1: USB disconnect, device number 40 [ 511.836927][T11385] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1477'. [ 512.701950][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'. [ 514.494780][T11432] ceph: No mds server is up or the cluster is laggy [ 515.513628][ T5834] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 515.609290][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1489'. [ 515.690188][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 515.779309][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1489'. [ 516.543780][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 516.592703][ T5834] usb 6-1: config 7 has an invalid interface number: 142 but max is 0 [ 516.615852][ T5834] usb 6-1: config 7 has no interface number 0 [ 516.666834][ T5834] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 516.704603][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.781469][ T5834] usb 6-1: Product: syz [ 516.786363][ T5834] usb 6-1: Manufacturer: syz [ 516.847273][ T5834] usb 6-1: SerialNumber: syz [ 517.212800][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 517.480367][T11439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.513795][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 517.526139][T11439] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 517.566133][T11439] bond0: (slave sit0): Error -95 calling set_mac_address [ 518.920147][ T5834] usb 6-1: USB disconnect, device number 12 [ 519.905041][T11511] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1503'. [ 519.931450][T11511] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1503'. [ 519.963437][T11517] blktrace: Concurrent blktraces are not allowed on sg0 [ 520.562359][T11522] PKCS7: Unknown OID: [4] 0.38.35.34.956032.117(bad) [ 520.569437][T11522] PKCS7: Only support pkcs7_signedData type [ 521.960818][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 522.851670][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 522.922384][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 522.943130][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.964644][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.976845][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.987975][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.000127][ T10] usb 4-1: Product: syz [ 523.571649][ T10] usb 4-1: Manufacturer: syz [ 523.576306][ T10] usb 4-1: SerialNumber: syz [ 523.866737][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.882343][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.186713][ T10] usb 4-1: 0:2 : does not exist [ 524.916125][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.944385][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.046723][ T10] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 525.217277][ T10] usb 4-1: USB disconnect, device number 41 [ 525.626926][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.331438][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 528.511603][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 528.539408][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 528.571927][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 528.691461][T11648] netlink: 'syz.4.1533': attribute type 12 has an invalid length. [ 528.759857][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.923871][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.179456][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.322974][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.044497][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 531.053538][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 531.893460][ T9] usb 6-1: usb_control_msg returned -71 [ 531.899711][ T9] usbtmc 6-1:16.0: can't read capabilities [ 532.479884][T11680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.512038][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.520815][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.530799][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.566607][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.584704][ T9] usb 6-1: USB disconnect, device number 13 [ 533.683258][T11691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.701818][T11704] blktrace: Concurrent blktraces are not allowed on sg0 [ 534.178478][T11693] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 534.526095][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 534.591375][T11714] usb 1-1: USB disconnect, device number 3 [ 535.938407][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 536.870145][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 536.924532][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 536.970105][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 537.140233][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.154989][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.168908][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.179214][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.835457][ T9] usb 2-1: usb_control_msg returned -71 [ 537.917884][T11744] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1554'. [ 537.926484][ T9] usbtmc 2-1:16.0: can't read capabilities [ 537.960734][ T9] usb 2-1: USB disconnect, device number 32 [ 538.078506][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.089117][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.955158][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.996114][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.161106][T11827] SET target dimension over the limit! [ 543.551793][T11858] openvswitch: netlink: EtherType 0 is less than min 600 [ 544.430304][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 544.631102][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 544.640820][ T5834] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 544.682254][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.703454][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.725615][ T5896] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 544.739493][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.768842][ T30] audit: type=1326 audit(1744106417.001:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 544.790347][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.799330][ T30] audit: type=1326 audit(1744106417.001:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 544.823527][ T5896] usb 6-1: config 0 descriptor?? [ 544.860309][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 544.869541][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.890269][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.903155][ T30] audit: type=1326 audit(1744106417.001:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 544.924646][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.939432][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.950416][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.964551][ T30] audit: type=1326 audit(1744106417.001:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.018244][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.030470][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.041142][ T30] audit: type=1326 audit(1744106417.001:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.074029][ T30] audit: type=1326 audit(1744106417.001:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.096380][ T30] audit: type=1326 audit(1744106417.001:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.125048][ T30] audit: type=1326 audit(1744106417.001:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.158260][ T30] audit: type=1326 audit(1744106417.001:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.212017][ T30] audit: type=1326 audit(1744106417.001:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11871 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ec38d169 code=0x7ffc0000 [ 545.277278][ T5834] usb 4-1: usb_control_msg returned -32 [ 545.283301][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 545.293613][ T5834] usbtmc 4-1:16.0: can't read capabilities [ 545.300680][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 545.337117][ T5834] usb 4-1: USB disconnect, device number 42 [ 545.366358][ T5896] usb 6-1: USB disconnect, device number 14 [ 546.785385][T11900] bridge0: port 3(veth0_to_bridge) entered blocking state [ 546.809592][T11900] bridge0: port 3(veth0_to_bridge) entered disabled state [ 546.819146][T11900] veth0_to_bridge: entered allmulticast mode [ 546.837935][T11900] veth0_to_bridge: entered promiscuous mode [ 546.859792][T11900] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.900719][T11900] bridge0: port 3(veth0_to_bridge) entered blocking state [ 546.907979][T11900] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 547.174485][T11904] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 32 [ 548.887839][T11928] netlink: 'syz.3.1596': attribute type 10 has an invalid length. [ 549.026724][T11933] FAULT_INJECTION: forcing a failure. [ 549.026724][T11933] name failslab, interval 1, probability 0, space 0, times 0 [ 549.039865][T11933] CPU: 1 UID: 0 PID: 11933 Comm: syz.5.1597 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 549.039888][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.039898][T11933] Call Trace: [ 549.039905][T11933] [ 549.039913][T11933] dump_stack_lvl+0x241/0x360 [ 549.039943][T11933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.039964][T11933] ? __pfx__printk+0x10/0x10 [ 549.039991][T11933] ? __pfx___might_resched+0x10/0x10 [ 549.040017][T11933] should_fail_ex+0x424/0x570 [ 549.040040][T11933] should_failslab+0xac/0x100 [ 549.040057][T11933] kmem_cache_alloc_noprof+0x78/0x390 [ 549.040072][T11933] ? security_inode_alloc+0x37/0x310 [ 549.040094][T11933] security_inode_alloc+0x37/0x310 [ 549.040114][T11933] inode_init_always_gfp+0xa0f/0xd90 [ 549.040136][T11933] ? __pfx_proc_alloc_inode+0x10/0x10 [ 549.040160][T11933] alloc_inode+0xa3/0x1b0 [ 549.040179][T11933] new_inode+0x22/0x180 [ 549.040201][T11933] proc_pid_make_inode+0x1f/0x130 [ 549.040226][T11933] proc_fdinfo_instantiate+0x52/0x250 [ 549.040271][T11933] proc_fill_cache+0x331/0x440 [ 549.040291][T11933] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 549.040309][T11933] ? __pfx_proc_fill_cache+0x10/0x10 [ 549.040322][T11933] ? snprintf+0xdd/0x130 [ 549.040344][T11933] ? preempt_schedule_thunk+0x16/0x30 [ 549.040370][T11933] ? fget_task_next+0x5b2/0x620 [ 549.040399][T11933] proc_readfd_common+0x486/0x820 [ 549.040425][T11933] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 549.040443][T11933] ? __pfx_proc_readfd_common+0x10/0x10 [ 549.040470][T11933] ? __fget_files+0x2a/0x420 [ 549.040494][T11933] iterate_dir+0x5a9/0x760 [ 549.040524][T11933] __se_sys_getdents64+0x1e4/0x4c0 [ 549.040557][T11933] ? __pfx___se_sys_getdents64+0x10/0x10 [ 549.040585][T11933] ? __pfx_filldir64+0x10/0x10 [ 549.040612][T11933] ? rcu_is_watching+0x15/0xb0 [ 549.040632][T11933] ? trace_sys_enter+0x25/0x120 [ 549.040656][T11933] do_syscall_64+0xf3/0x230 [ 549.040675][T11933] ? clear_bhb_loop+0x45/0xa0 [ 549.040695][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.040710][T11933] RIP: 0033:0x7f5d90f8d169 [ 549.040726][T11933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.040740][T11933] RSP: 002b:00007f5d91d99038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 549.040759][T11933] RAX: ffffffffffffffda RBX: 00007f5d911a6160 RCX: 00007f5d90f8d169 [ 549.040771][T11933] RDX: 000000000000100f RSI: 00002000000041c0 RDI: 0000000000000008 [ 549.040782][T11933] RBP: 00007f5d91d99090 R08: 0000000000000000 R09: 0000000000000000 [ 549.040793][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.040803][T11933] R13: 0000000000000000 R14: 00007f5d911a6160 R15: 00007fff7eda9138 [ 549.040833][T11933] [ 549.312841][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.183396][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 550.736405][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 550.736421][ T30] audit: type=1326 audit(1744106422.981:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11941 comm="syz.5.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d90f8d169 code=0x0 [ 550.775755][T11949] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1603'. [ 550.800161][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 550.807416][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.836952][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 550.853692][ T5876] usb 5-1: USB disconnect, device number 12 [ 550.923091][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 550.952782][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.999271][ T10] usb 4-1: config 0 descriptor?? [ 551.023403][ T1594] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 551.159599][T11958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.273864][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.291619][T11958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.356194][ T1594] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 551.372729][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.372812][ T1594] usb 2-1: config 0 has no interface number 0 [ 551.381910][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.386750][ T1594] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 551.396599][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.419676][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.452481][T11958] netlink: 'syz.0.1607': attribute type 27 has an invalid length. [ 551.468527][ T1594] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 551.510790][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 551.630974][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 551.662886][ T1594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.762663][ T1594] usb 2-1: Product: syz [ 551.776191][ T1594] usb 2-1: Manufacturer: syz [ 551.781453][ T10] usb 4-1: USB disconnect, device number 43 [ 551.804045][ T1594] usb 2-1: SerialNumber: syz [ 551.842873][ T1594] usb 2-1: config 0 descriptor?? [ 551.848576][T11949] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 551.861990][ T1594] kvaser_usb 2-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 551.937730][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.945200][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.074462][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.083764][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.161010][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.191850][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.314140][T11958] vlan0: left promiscuous mode [ 553.354922][T11958] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.376961][T11958] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.394439][T11958] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.408872][T11958] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.469467][T11958] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.478690][T11958] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.488026][T11958] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.497083][T11958] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.533325][ T5829] Bluetooth: hci1: command tx timeout [ 553.554201][T11958] hsr0: left allmulticast mode [ 553.559062][T11958] hsr_slave_0: left allmulticast mode [ 553.564670][T11958] hsr_slave_1: left allmulticast mode [ 553.573953][T11958] macvlan2: left promiscuous mode [ 553.579067][T11958] macvlan2: left allmulticast mode [ 553.705071][ T6121] [ 553.706122][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.707924][ T6121] ============================= [ 553.707950][ T6121] WARNING: suspicious RCU usage [ 553.707958][ T6121] 6.15.0-rc1-syzkaller #0 Not tainted [ 553.707969][ T6121] ----------------------------- [ 553.707975][ T6121] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 553.745295][ T6121] [ 553.745295][ T6121] other info that might help us debug this: [ 553.745295][ T6121] [ 553.755614][ T6121] [ 553.755614][ T6121] rcu_scheduler_active = 2, debug_locks = 1 [ 553.763759][ T6121] 3 locks held by kworker/u8:17/6121: [ 553.769137][ T6121] #0: ffff88807b922148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 553.780729][ T6121] #1: ffffc90004ec7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 553.793770][ T6121] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 553.803576][ T6121] [ 553.803576][ T6121] stack backtrace: [ 553.809635][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 553.809657][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.809668][ T6121] Workqueue: bond0 bond_mii_monitor [ 553.809688][ T6121] Call Trace: [ 553.809693][ T6121] [ 553.809699][ T6121] dump_stack_lvl+0x241/0x360 [ 553.809721][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.809737][ T6121] ? __pfx__printk+0x10/0x10 [ 553.809756][ T6121] ? print_lock+0x171/0x1a0 [ 553.809774][ T6121] lockdep_rcu_suspicious+0x175/0x200 [ 553.809791][ T6121] dev_deactivate_queue+0x8f/0x1b0 [ 553.809811][ T6121] dev_deactivate_many+0x14c/0xca0 [ 553.809832][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 553.809852][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 553.809868][ T6121] dev_deactivate+0x186/0x280 [ 553.809890][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 553.809912][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 553.809927][ T6121] linkwatch_do_dev+0x10a/0x170 [ 553.809941][ T6121] ethtool_op_get_link+0x15/0x60 [ 553.809958][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 553.809974][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 553.809993][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 553.810022][ T6121] bond_mii_monitor+0x49d/0x3170 [ 553.810054][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 553.810086][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 553.810108][ T6121] ? register_lock_class+0x54/0x330 [ 553.810130][ T6121] ? __lock_acquire+0xad5/0xd80 [ 553.810146][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 553.810175][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 553.810188][ T6121] process_scheduled_works+0xac3/0x18e0 [ 553.810223][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.810248][ T6121] ? assign_work+0x367/0x3d0 [ 553.810265][ T6121] worker_thread+0x870/0xd50 [ 553.810290][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 553.810307][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 553.810320][ T6121] kthread+0x7b7/0x940 [ 553.810337][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 553.810351][ T6121] ? __pfx_kthread+0x10/0x10 [ 553.810365][ T6121] ? __pfx_kthread+0x10/0x10 [ 553.810379][ T6121] ? __pfx_kthread+0x10/0x10 [ 553.810393][ T6121] ? __pfx_kthread+0x10/0x10 [ 553.810408][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.810419][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 553.810432][ T6121] ? __pfx_kthread+0x10/0x10 [ 553.810448][ T6121] ret_from_fork+0x4b/0x80 [ 553.810459][ T6121] ? __pfx_kthread+0x10/0x10 [ 553.810475][ T6121] ret_from_fork_asm+0x1a/0x30 [ 553.810506][ T6121] [ 554.129063][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.229553][ T1594] usb 2-1: USB disconnect, device number 33 [ 554.243619][ T6121] [ 554.245984][ T6121] ============================= [ 554.250923][ T6121] WARNING: suspicious RCU usage [ 554.255781][ T6121] 6.15.0-rc1-syzkaller #0 Not tainted [ 554.261223][ T6121] ----------------------------- [ 554.266080][ T6121] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 554.275303][ T6121] [ 554.275303][ T6121] other info that might help us debug this: [ 554.275303][ T6121] [ 554.285562][ T6121] [ 554.285562][ T6121] rcu_scheduler_active = 2, debug_locks = 1 [ 554.293652][ T6121] 3 locks held by kworker/u8:17/6121: [ 554.299028][ T6121] #0: ffff88807b922148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 554.310257][ T6121] #1: ffffc90004ec7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 554.323317][ T6121] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 554.333160][ T6121] [ 554.333160][ T6121] stack backtrace: [ 554.339060][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 554.339074][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.339081][ T6121] Workqueue: bond0 bond_mii_monitor [ 554.339099][ T6121] Call Trace: [ 554.339104][ T6121] [ 554.339109][ T6121] dump_stack_lvl+0x241/0x360 [ 554.339127][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.339139][ T6121] ? __pfx__printk+0x10/0x10 [ 554.339158][ T6121] lockdep_rcu_suspicious+0x175/0x200 [ 554.339171][ T6121] dev_deactivate_many+0x228/0xca0 [ 554.339189][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 554.339205][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 554.339222][ T6121] dev_deactivate+0x186/0x280 [ 554.339237][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 554.339253][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 554.339264][ T6121] linkwatch_do_dev+0x10a/0x170 [ 554.339274][ T6121] ethtool_op_get_link+0x15/0x60 [ 554.339288][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 554.339301][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 554.339315][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 554.339336][ T6121] bond_mii_monitor+0x49d/0x3170 [ 554.339354][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 554.339372][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 554.339386][ T6121] ? register_lock_class+0x54/0x330 [ 554.339398][ T6121] ? __lock_acquire+0xad5/0xd80 [ 554.339408][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 554.339427][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 554.339437][ T6121] process_scheduled_works+0xac3/0x18e0 [ 554.339461][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.339475][ T6121] ? assign_work+0x367/0x3d0 [ 554.339488][ T6121] worker_thread+0x870/0xd50 [ 554.339505][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 554.339517][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 554.339528][ T6121] kthread+0x7b7/0x940 [ 554.339540][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 554.339551][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.339561][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.339572][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.339583][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.339595][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.339603][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 554.339613][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.339625][ T6121] ret_from_fork+0x4b/0x80 [ 554.339634][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.339645][ T6121] ret_from_fork_asm+0x1a/0x30 [ 554.339667][ T6121] [ 554.579402][ T6121] BUG: sleeping function called from invalid context at net/core/dev.c:11837 [ 554.588223][ T6121] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6121, name: kworker/u8:17 [ 554.597538][ T6121] preempt_count: 0, expected: 0 [ 554.602530][ T6121] RCU nest depth: 1, expected: 0 [ 554.607447][ T6121] 3 locks held by kworker/u8:17/6121: [ 554.612822][ T6121] #0: ffff88807b922148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 554.623883][ T6121] #1: ffffc90004ec7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 554.637252][ T6121] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 554.660491][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 554.660514][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.660525][ T6121] Workqueue: bond0 bond_mii_monitor [ 554.660549][ T6121] Call Trace: [ 554.660555][ T6121] [ 554.660561][ T6121] dump_stack_lvl+0x241/0x360 [ 554.660586][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.660623][ T6121] __might_resched+0x558/0x6c0 [ 554.660645][ T6121] ? dev_deactivate_many+0x2f4/0xca0 [ 554.660667][ T6121] ? __pfx___might_resched+0x10/0x10 [ 554.660685][ T6121] ? __local_bh_enable_ip+0x168/0x200 [ 554.660708][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 554.660728][ T6121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 554.660751][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 554.660777][ T6121] synchronize_net+0x1b/0x90 [ 554.660795][ T6121] dev_deactivate_many+0x565/0xca0 [ 554.660819][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 554.660841][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 554.660867][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 554.660889][ T6121] dev_deactivate+0x186/0x280 [ 554.660912][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 554.660938][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 554.660957][ T6121] linkwatch_do_dev+0x10a/0x170 [ 554.660976][ T6121] ethtool_op_get_link+0x15/0x60 [ 554.660996][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 554.661015][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 554.661039][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 554.661077][ T6121] bond_mii_monitor+0x49d/0x3170 [ 554.661110][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 554.661143][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 554.661165][ T6121] ? register_lock_class+0x54/0x330 [ 554.661193][ T6121] ? __lock_acquire+0xad5/0xd80 [ 554.661212][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 554.661249][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 554.661266][ T6121] process_scheduled_works+0xac3/0x18e0 [ 554.661312][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.661339][ T6121] ? assign_work+0x367/0x3d0 [ 554.661362][ T6121] worker_thread+0x870/0xd50 [ 554.661395][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 554.661417][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 554.661435][ T6121] kthread+0x7b7/0x940 [ 554.661456][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 554.661474][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.661491][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.661510][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.661529][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.661547][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.661561][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 554.661579][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.661599][ T6121] ret_from_fork+0x4b/0x80 [ 554.661615][ T6121] ? __pfx_kthread+0x10/0x10 [ 554.661634][ T6121] ret_from_fork_asm+0x1a/0x30 [ 554.661672][ T6121] [ 554.661680][ T6121] [ 554.941178][ T6121] ============================= [ 554.946035][ T6121] WARNING: suspicious RCU usage [ 554.950953][ T6121] 6.15.0-rc1-syzkaller #0 Tainted: G W [ 554.957904][ T6121] ----------------------------- [ 554.963185][ T6121] kernel/rcu/tree_exp.h:971 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 554.974082][ T6121] [ 554.974082][ T6121] other info that might help us debug this: [ 554.974082][ T6121] [ 554.984336][ T6121] [ 554.984336][ T6121] rcu_scheduler_active = 2, debug_locks = 1 [ 554.992542][ T6121] 3 locks held by kworker/u8:17/6121: [ 554.997895][ T6121] #0: ffff88807b922148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 555.008975][ T6121] #1: ffffc90004ec7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 555.022021][ T6121] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 555.031708][ T6121] [ 555.031708][ T6121] stack backtrace: [ 555.037585][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 555.037601][ T6121] Tainted: [W]=WARN [ 555.037604][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 555.037611][ T6121] Workqueue: bond0 bond_mii_monitor [ 555.037628][ T6121] Call Trace: [ 555.037633][ T6121] [ 555.037637][ T6121] dump_stack_lvl+0x241/0x360 [ 555.037654][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.037667][ T6121] ? __pfx__printk+0x10/0x10 [ 555.037685][ T6121] lockdep_rcu_suspicious+0x175/0x200 [ 555.037698][ T6121] synchronize_rcu_expedited+0x131/0x830 [ 555.037713][ T6121] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 555.037728][ T6121] ? add_taint+0x99/0xe0 [ 555.037739][ T6121] ? __might_resched+0x564/0x6c0 [ 555.037755][ T6121] ? __local_bh_enable_ip+0x168/0x200 [ 555.037769][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 555.037783][ T6121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 555.037797][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 555.037814][ T6121] dev_deactivate_many+0x565/0xca0 [ 555.037828][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 555.037842][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 555.037858][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 555.037870][ T6121] dev_deactivate+0x186/0x280 [ 555.037885][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 555.037901][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 555.037913][ T6121] linkwatch_do_dev+0x10a/0x170 [ 555.037923][ T6121] ethtool_op_get_link+0x15/0x60 [ 555.037938][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 555.037950][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 555.037964][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 555.037985][ T6121] bond_mii_monitor+0x49d/0x3170 [ 555.038004][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 555.038022][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 555.038046][ T6121] ? register_lock_class+0x54/0x330 [ 555.038065][ T6121] ? __lock_acquire+0xad5/0xd80 [ 555.038082][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 555.038116][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 555.038130][ T6121] process_scheduled_works+0xac3/0x18e0 [ 555.038180][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.038206][ T6121] ? assign_work+0x367/0x3d0 [ 555.038226][ T6121] worker_thread+0x870/0xd50 [ 555.038256][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 555.038278][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 555.038295][ T6121] kthread+0x7b7/0x940 [ 555.038314][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 555.038333][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.038347][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.038363][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.038380][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.038394][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.038403][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 555.038413][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.038425][ T6121] ret_from_fork+0x4b/0x80 [ 555.038434][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.038446][ T6121] ret_from_fork_asm+0x1a/0x30 [ 555.038468][ T6121] [ 555.340823][ T6121] [ 555.343180][ T6121] ============================= [ 555.348024][ T6121] [ BUG: Invalid wait context ] [ 555.352868][ T6121] 6.15.0-rc1-syzkaller #0 Tainted: G W [ 555.359801][ T6121] ----------------------------- [ 555.364644][ T6121] kworker/u8:17/6121 is trying to lock: [ 555.370181][ T6121] ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 555.380629][ T6121] other info that might help us debug this: [ 555.386500][ T6121] context-{5:5} [ 555.389936][ T6121] 3 locks held by kworker/u8:17/6121: [ 555.395286][ T6121] #0: ffff88807b922148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 555.406328][ T6121] #1: ffffc90004ec7c60 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 555.419189][ T6121] #2: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x17f/0x3170 [ 555.428835][ T6121] stack backtrace: [ 555.432539][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 555.432558][ T6121] Tainted: [W]=WARN [ 555.432562][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 555.432572][ T6121] Workqueue: bond0 bond_mii_monitor [ 555.432589][ T6121] Call Trace: [ 555.432595][ T6121] [ 555.432601][ T6121] dump_stack_lvl+0x241/0x360 [ 555.432620][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.432636][ T6121] ? __pfx__printk+0x10/0x10 [ 555.432653][ T6121] __lock_acquire+0xc30/0xd80 [ 555.432668][ T6121] lock_acquire+0x116/0x2f0 [ 555.432679][ T6121] ? synchronize_rcu_expedited+0x454/0x830 [ 555.432697][ T6121] __mutex_lock+0x1a5/0x10c0 [ 555.432712][ T6121] ? synchronize_rcu_expedited+0x454/0x830 [ 555.432730][ T6121] ? synchronize_rcu_expedited+0x454/0x830 [ 555.432744][ T6121] ? __pfx___mutex_lock+0x10/0x10 [ 555.432757][ T6121] ? do_raw_spin_lock+0x151/0x370 [ 555.432774][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 555.432791][ T6121] synchronize_rcu_expedited+0x454/0x830 [ 555.432807][ T6121] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 555.432823][ T6121] ? add_taint+0x99/0xe0 [ 555.432836][ T6121] ? __might_resched+0x564/0x6c0 [ 555.432852][ T6121] ? __local_bh_enable_ip+0x168/0x200 [ 555.432869][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 555.432887][ T6121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 555.432904][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 555.432921][ T6121] dev_deactivate_many+0x565/0xca0 [ 555.432938][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 555.432954][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 555.432972][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 555.432985][ T6121] dev_deactivate+0x186/0x280 [ 555.433002][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 555.433019][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 555.433032][ T6121] linkwatch_do_dev+0x10a/0x170 [ 555.433044][ T6121] ethtool_op_get_link+0x15/0x60 [ 555.433061][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 555.433077][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 555.433093][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 555.433112][ T6121] bond_mii_monitor+0x49d/0x3170 [ 555.433136][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 555.433154][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 555.433170][ T6121] ? register_lock_class+0x54/0x330 [ 555.433182][ T6121] ? __lock_acquire+0xad5/0xd80 [ 555.433194][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 555.433211][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 555.433223][ T6121] process_scheduled_works+0xac3/0x18e0 [ 555.433244][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.433259][ T6121] ? assign_work+0x367/0x3d0 [ 555.433272][ T6121] worker_thread+0x870/0xd50 [ 555.433289][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 555.433304][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 555.433316][ T6121] kthread+0x7b7/0x940 [ 555.433331][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 555.433344][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.433357][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.433371][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.433384][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.433398][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.433409][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 555.433421][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.433435][ T6121] ret_from_fork+0x4b/0x80 [ 555.433447][ T6121] ? __pfx_kthread+0x10/0x10 [ 555.433461][ T6121] ret_from_fork_asm+0x1a/0x30 [ 555.433481][ T6121] [ 555.762639][ T6121] ------------[ cut here ]------------ [ 555.768108][ T6121] Voluntary context switch within RCU read-side critical section! [ 555.768202][ T6121] WARNING: CPU: 0 PID: 6121 at kernel/rcu/tree_plugin.h:332 rcu_note_context_switch+0x702/0x1060 [ 555.774155][ T5829] Bluetooth: hci1: command tx timeout [ 555.776018][ T6121] Modules linked in: [ 555.776039][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 555.807766][ T6121] Tainted: [W]=WARN [ 555.811553][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 555.821594][ T6121] Workqueue: bond0 bond_mii_monitor [ 555.826789][ T6121] RIP: 0010:rcu_note_context_switch+0x702/0x1060 [ 555.833111][ T6121] Code: 00 e9 cc 00 00 00 41 83 fd 06 0f 84 92 00 00 00 e9 bd 00 00 00 c6 05 ca 3c 9f 0e 01 90 48 c7 c7 80 00 4c 8c e8 ff fe d8 ff 90 <0f> 0b 90 90 e9 36 fa ff ff 90 0f 0b 90 45 84 ff 0f 84 fc f9 ff ff [ 555.852701][ T6121] RSP: 0018:ffffc90004ec6e20 EFLAGS: 00010046 [ 555.858754][ T6121] RAX: 6ecce214461f4300 RBX: ffff88801d375e44 RCX: ffff88801d375a00 [ 555.866712][ T6121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.874668][ T6121] RBP: ffffc90004ec6f70 R08: ffffffff818268d2 R09: fffffbfff1d7a978 [ 555.882625][ T6121] R10: dffffc0000000000 R11: fffffbfff1d7a978 R12: ffff888124fc9000 [ 555.890581][ T6121] R13: dffffc0000000000 R14: ffff88801d375a00 R15: 0000000000000000 [ 555.898561][ T6121] FS: 0000000000000000(0000) GS:ffff888124fc9000(0000) knlGS:0000000000000000 [ 555.907483][ T6121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.914059][ T6121] CR2: 0000001b2fc0bff8 CR3: 0000000046d7e000 CR4: 00000000003526f0 [ 555.922020][ T6121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.929979][ T6121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.937938][ T6121] Call Trace: [ 555.941207][ T6121] [ 555.944126][ T6121] ? __pfx__printk+0x10/0x10 [ 555.948707][ T6121] ? is_bpf_text_address+0x288/0x2a0 [ 555.953978][ T6121] ? is_bpf_text_address+0x26/0x2a0 [ 555.959163][ T6121] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 555.965134][ T6121] ? rcu_is_watching+0x15/0xb0 [ 555.969883][ T6121] __schedule+0x3b3/0x51f0 [ 555.974286][ T6121] ? validate_chain+0x20e/0x24e0 [ 555.979204][ T6121] ? __printk_cpu_sync_put+0x67/0x80 [ 555.984478][ T6121] ? dump_stack_lvl+0x305/0x360 [ 555.989315][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.994502][ T6121] ? schedule+0x163/0x360 [ 555.998818][ T6121] ? rcu_is_watching+0x15/0xb0 [ 556.003564][ T6121] ? __pfx___schedule+0x10/0x10 [ 556.008399][ T6121] ? __mutex_trylock_common+0x94/0x2e0 [ 556.013848][ T6121] ? __pfx___mutex_trylock_common+0x10/0x10 [ 556.019728][ T6121] schedule+0x163/0x360 [ 556.023865][ T6121] schedule_preempt_disabled+0x13/0x30 [ 556.029305][ T6121] __mutex_lock+0x441/0x10c0 [ 556.033882][ T6121] ? synchronize_rcu_expedited+0x454/0x830 [ 556.039675][ T6121] ? __pfx___mutex_lock+0x10/0x10 [ 556.044682][ T6121] ? do_raw_spin_lock+0x151/0x370 [ 556.049693][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 556.054876][ T6121] synchronize_rcu_expedited+0x454/0x830 [ 556.060494][ T6121] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 556.066633][ T6121] ? add_taint+0x99/0xe0 [ 556.070860][ T6121] ? __might_resched+0x564/0x6c0 [ 556.075784][ T6121] ? __local_bh_enable_ip+0x168/0x200 [ 556.081154][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 556.086426][ T6121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 556.092135][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 556.097323][ T6121] dev_deactivate_many+0x565/0xca0 [ 556.102443][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 556.107717][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 556.113335][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 556.119209][ T6121] dev_deactivate+0x186/0x280 [ 556.123873][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 556.129056][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 556.133890][ T6121] linkwatch_do_dev+0x10a/0x170 [ 556.138808][ T6121] ethtool_op_get_link+0x15/0x60 [ 556.143734][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 556.149368][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 556.154482][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 556.160111][ T6121] bond_mii_monitor+0x49d/0x3170 [ 556.165045][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 556.170156][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 556.175522][ T6121] ? register_lock_class+0x54/0x330 [ 556.180707][ T6121] ? __lock_acquire+0xad5/0xd80 [ 556.185542][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 556.190907][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 556.196629][ T6121] process_scheduled_works+0xac3/0x18e0 [ 556.202167][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.208135][ T6121] ? assign_work+0x367/0x3d0 [ 556.212709][ T6121] worker_thread+0x870/0xd50 [ 556.217287][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 556.222295][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 556.227390][ T6121] kthread+0x7b7/0x940 [ 556.231445][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 556.236539][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.241113][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.245690][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.250285][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.254878][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.260073][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 556.265268][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.269851][ T6121] ret_from_fork+0x4b/0x80 [ 556.274254][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.278834][ T6121] ret_from_fork_asm+0x1a/0x30 [ 556.283592][ T6121] [ 556.286606][ T6121] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 556.293883][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: kworker/u8:17 Tainted: G W 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 556.305941][ T6121] Tainted: [W]=WARN [ 556.309725][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 556.319768][ T6121] Workqueue: bond0 bond_mii_monitor [ 556.324968][ T6121] Call Trace: [ 556.328231][ T6121] [ 556.331145][ T6121] dump_stack_lvl+0x241/0x360 [ 556.335817][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.341023][ T6121] ? __pfx__printk+0x10/0x10 [ 556.345615][ T6121] ? vscnprintf+0x5d/0x90 [ 556.349938][ T6121] panic+0x349/0x880 [ 556.353837][ T6121] ? __warn+0x174/0x4d0 [ 556.357989][ T6121] ? __pfx_panic+0x10/0x10 [ 556.362403][ T6121] ? ret_from_fork_asm+0x1a/0x30 [ 556.367339][ T6121] __warn+0x344/0x4d0 [ 556.371313][ T6121] ? rcu_note_context_switch+0x702/0x1060 [ 556.377035][ T6121] report_bug+0x2b3/0x500 [ 556.381356][ T6121] ? rcu_note_context_switch+0x702/0x1060 [ 556.387069][ T6121] ? rcu_note_context_switch+0x702/0x1060 [ 556.392790][ T6121] ? rcu_note_context_switch+0x704/0x1060 [ 556.398501][ T6121] handle_bug+0x89/0x170 [ 556.402735][ T6121] exc_invalid_op+0x1a/0x50 [ 556.407232][ T6121] asm_exc_invalid_op+0x1a/0x20 [ 556.412068][ T6121] RIP: 0010:rcu_note_context_switch+0x702/0x1060 [ 556.418385][ T6121] Code: 00 e9 cc 00 00 00 41 83 fd 06 0f 84 92 00 00 00 e9 bd 00 00 00 c6 05 ca 3c 9f 0e 01 90 48 c7 c7 80 00 4c 8c e8 ff fe d8 ff 90 <0f> 0b 90 90 e9 36 fa ff ff 90 0f 0b 90 45 84 ff 0f 84 fc f9 ff ff [ 556.437987][ T6121] RSP: 0018:ffffc90004ec6e20 EFLAGS: 00010046 [ 556.444044][ T6121] RAX: 6ecce214461f4300 RBX: ffff88801d375e44 RCX: ffff88801d375a00 [ 556.452000][ T6121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.459957][ T6121] RBP: ffffc90004ec6f70 R08: ffffffff818268d2 R09: fffffbfff1d7a978 [ 556.467913][ T6121] R10: dffffc0000000000 R11: fffffbfff1d7a978 R12: ffff888124fc9000 [ 556.475873][ T6121] R13: dffffc0000000000 R14: ffff88801d375a00 R15: 0000000000000000 [ 556.483834][ T6121] ? __warn_printk+0x2a2/0x360 [ 556.488587][ T6121] ? __pfx__printk+0x10/0x10 [ 556.493168][ T6121] ? is_bpf_text_address+0x288/0x2a0 [ 556.498455][ T6121] ? is_bpf_text_address+0x26/0x2a0 [ 556.503658][ T6121] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 556.509638][ T6121] ? rcu_is_watching+0x15/0xb0 [ 556.514394][ T6121] __schedule+0x3b3/0x51f0 [ 556.518799][ T6121] ? validate_chain+0x20e/0x24e0 [ 556.523724][ T6121] ? __printk_cpu_sync_put+0x67/0x80 [ 556.529000][ T6121] ? dump_stack_lvl+0x305/0x360 [ 556.533850][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.539035][ T6121] ? schedule+0x163/0x360 [ 556.543348][ T6121] ? rcu_is_watching+0x15/0xb0 [ 556.548097][ T6121] ? __pfx___schedule+0x10/0x10 [ 556.552933][ T6121] ? __mutex_trylock_common+0x94/0x2e0 [ 556.558382][ T6121] ? __pfx___mutex_trylock_common+0x10/0x10 [ 556.564261][ T6121] schedule+0x163/0x360 [ 556.568401][ T6121] schedule_preempt_disabled+0x13/0x30 [ 556.573845][ T6121] __mutex_lock+0x441/0x10c0 [ 556.578424][ T6121] ? synchronize_rcu_expedited+0x454/0x830 [ 556.584220][ T6121] ? __pfx___mutex_lock+0x10/0x10 [ 556.589229][ T6121] ? do_raw_spin_lock+0x151/0x370 [ 556.594287][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 556.599475][ T6121] synchronize_rcu_expedited+0x454/0x830 [ 556.605097][ T6121] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 556.611241][ T6121] ? add_taint+0x99/0xe0 [ 556.615468][ T6121] ? __might_resched+0x564/0x6c0 [ 556.620392][ T6121] ? __local_bh_enable_ip+0x168/0x200 [ 556.625751][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 556.631029][ T6121] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 556.636736][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 556.641925][ T6121] dev_deactivate_many+0x565/0xca0 [ 556.647026][ T6121] ? dev_deactivate_many+0x2e5/0xca0 [ 556.652298][ T6121] ? __pfx_dev_deactivate_many+0x10/0x10 [ 556.657918][ T6121] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 556.663797][ T6121] dev_deactivate+0x186/0x280 [ 556.668460][ T6121] ? __pfx_dev_deactivate+0x10/0x10 [ 556.673646][ T6121] ? rfc2863_policy+0x1ce/0x3f0 [ 556.678484][ T6121] linkwatch_do_dev+0x10a/0x170 [ 556.683321][ T6121] ethtool_op_get_link+0x15/0x60 [ 556.688247][ T6121] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 556.693865][ T6121] bond_check_dev_link+0x1fb/0x4b0 [ 556.698985][ T6121] ? __pfx_bond_check_dev_link+0x10/0x10 [ 556.704633][ T6121] bond_mii_monitor+0x49d/0x3170 [ 556.709575][ T6121] ? bond_mii_monitor+0x17f/0x3170 [ 556.714682][ T6121] ? __pfx_bond_mii_monitor+0x10/0x10 [ 556.720051][ T6121] ? register_lock_class+0x54/0x330 [ 556.725244][ T6121] ? __lock_acquire+0xad5/0xd80 [ 556.730084][ T6121] ? __pfx_preempt_schedule+0x10/0x10 [ 556.735453][ T6121] ? process_scheduled_works+0x9cb/0x18e0 [ 556.741164][ T6121] process_scheduled_works+0xac3/0x18e0 [ 556.746706][ T6121] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.752679][ T6121] ? assign_work+0x367/0x3d0 [ 556.757254][ T6121] worker_thread+0x870/0xd50 [ 556.761833][ T6121] ? __kthread_parkme+0x1a8/0x200 [ 556.766845][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 556.771953][ T6121] kthread+0x7b7/0x940 [ 556.776019][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 556.781118][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.785707][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.790281][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.794857][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.799431][ T6121] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.804614][ T6121] ? lockdep_hardirqs_on+0x9d/0x150 [ 556.809800][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.814379][ T6121] ret_from_fork+0x4b/0x80 [ 556.818780][ T6121] ? __pfx_kthread+0x10/0x10 [ 556.823355][ T6121] ret_from_fork_asm+0x1a/0x30 [ 556.828108][ T6121] [ 556.831388][ T6121] Kernel Offset: disabled [ 556.835694][ T6121] Rebooting in 86400 seconds..