last executing test programs: 15.099790579s ago: executing program 0 (id=479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mknod$loop(0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) syz_io_uring_complete(r1) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000180)=0x1, 0x0, 0x4) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/210, 0xf6}], 0x1}, 0x61) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000028d0d800000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) 13.651054331s ago: executing program 1 (id=482): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socketpair(0x1e, 0x4, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000a0d000/0x2000)=nil, 0x2000, 0x100000c, 0x10010, r2, 0x70eab000) sendmmsg$sock(r4, &(0x7f0000000500)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x80, 0x0}}], 0x1, 0x101d0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0xfffff000) 13.299773912s ago: executing program 2 (id=484): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r3 = epoll_create(0x6) r4 = dup3(r2, r3, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r5 = syz_open_dev$vcsn(&(0x7f0000002080), 0x7, 0x4180) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r5, 0x21000) write(0xffffffffffffffff, &(0x7f0000000140)="fc00000018004b61ab092500090007000a100200000000020000369321000100ff2500000005d0000000001d000398996c92773411419da79bb94b46fe000000bc00050048036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b035", 0xd9) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000100)=0x9, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303", @ANYRESOCT=r2, @ANYRESDEC=r4, @ANYBLOB="12f773c8efe1bb05db9e885ca213ecb2c9ca34467be2530b2529ebcd333693574ee2fbe189faa02f484d653389adcb905ab5dcba41867d016b4d525c304bbaacfc94cfba213ed23290e3db85886006337ced7857fafd81e2b148a6a239525e18575fe22ba9ed866f5e3b51d1aab86806fb41a8a54583c11721894177e7b5803990907ba251a08eee37c0a189cd58c2cedfc5297a7a862f01e045"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x26000) 11.860297755s ago: executing program 0 (id=486): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) socket$inet6(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, r3, 0x0) read$FUSE(r4, 0x0, 0x6c) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 11.665757698s ago: executing program 1 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000010a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000050000000900010063797a30000000000900020073797a31000000001400038008000240000000020800014000000000380000001a0a0101000b000000000000010000000900020073797a3000000000090001"], 0xc0}}, 0x0) (fail_nth: 3) 11.26387293s ago: executing program 1 (id=488): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0xa4d39de854c2862b, 0x0, {0x9, 0x21, 0x301, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x6, 0x5, {0x5, 0x5, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10.687684815s ago: executing program 0 (id=489): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4074, &(0x7f00000010c0)=0xfea) (async) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4074, &(0x7f00000010c0)=0xfea) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="5000000010000305fdffffff0007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="0408020001ef000008000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x400c834) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="30000000051401"], 0x30}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000001280)=0x3) 10.482171524s ago: executing program 3 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) clock_adjtime(0x0, &(0x7f0000000100)={0x1ff, 0x6, 0x1, 0xfff, 0x172, 0x3, 0x8000000000000000, 0x4d0a, 0xa74, 0x7, 0x80000001, 0x5, 0xffffffffffffffff, 0x5d, 0x0, 0x6, 0x0, 0x7, 0xfffffffffffffff7, 0x100000000, 0x80000000, 0xb3, 0x6, 0x7fff, 0x100, 0x1}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a8010100", @ANYRES16=r7, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xd000}, 0x4805) r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x28402, 0x21) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd001708586dd", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents(r8, &(0x7f00000001c0)=""/122, 0x7a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r3, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@float={0xc, 0x0, 0x0, 0x10, 0x4}, @struct={0x0, 0x5, 0x0, 0x4, 0x1, 0x6c, [{0x2, 0x1, 0x4ae}, {0x6, 0x2, 0x1}, {0x7, 0x5, 0x3}, {0xf, 0x3, 0x800}, {0x3, 0x0, 0x7}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000a80)=""/182, 0x7e, 0xb6, 0x0, 0x6, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000c00)=""/39, 0x27, 0x0, &(0x7f0000000c40)=""/215, 0xd7}}, 0x10) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000dc0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x915}}, @alu={0x4, 0x0, 0x6, 0x0, 0x2, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xc, 0x2, 0x4, 0xffffffffffffffc0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000f00)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x1, 0xa, 0x3, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0x9, &(0x7f0000000340)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0xa, &(0x7f0000000580)=""/10, 0x40f00, 0x67, '\x00', r10, @fallback=0x2d, r11, 0x8, &(0x7f0000000b80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x7, 0x9, 0x9}, 0x10, r12, r13, 0x7, 0x0, &(0x7f0000001080)=[{0x0, 0x4, 0xd, 0x4}, {0x2, 0x3, 0xd, 0x9}, {0x4, 0x2, 0x8, 0x8}, {0x1, 0x3, 0x2, 0xa}, {0x1, 0x4, 0xa, 0x3}, {0x1, 0x5, 0x9, 0x5}, {0x3, 0x1, 0x3, 0x5}], 0x10, 0xb, @void, @value}, 0x94) 10.296459374s ago: executing program 4 (id=491): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000c406, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0x8464, 0x13580}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r4, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r5, 0xe85, 0xf8a1, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000f80)=""/4096, 0x1000, 0x9) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) r10 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec23, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, 0x0, 0x0) mmap(&(0x7f000033d000/0x3000)=nil, 0x3000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000440)={0x4, "ab00d21111b3a94c63c5e2dc82d3b40164c3000000000000000000000500"}) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r13, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r13, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 10.111303605s ago: executing program 0 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000001dc0)={0x75, 0x100070, 0x40000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d120100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000ec0)="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", 0x1000, 0xfffffffffffffffc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000680)='incremental-fs\x00', 0x12000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x2a0, 0xf0, 0xffffffff, 0xf0, 0x2a0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private2, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) sendmmsg$sock(r0, &(0x7f0000000d00)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0xa}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0xfb}, {&(0x7f0000000200)="a02843526e844b0b07d3d90b8e3d9f2e8074db1d6eb58a3e76bcd0b89cec92388e7e546c5e60c35dbcca8332f14c03b5903e9404b1db296602faa232b3bc6915e09b317f1e2eb6d580f2648a9f93853e4c4018b27d157657c1650c01f5fddb08fb2d2b6b27d5c323d4c58b4f5e39ca7b8f6c4735f4feda833c51262d9ae51b6cacdf5c17c74cad8c8c96b5ff8d7bb46e0e3d03c9d96d97be1fdba65eb052e66b906fef90305dd19b94c306c4", 0xac}, {&(0x7f0000000e00)="9a3ddce41f760841412ceb55bac95702101e3b09708e533c74eed95129de1b4e9ed58e9d30f779b73b73b515dd469aa09dd151be37bcafcbb3bca7d782a06891bb5ea2fc944f171534766c4eef4ac2061240402d6ed1a9dc7a3ab617d45e00f6e597a865bd437360f125d9adcf7f36e60770e1e4013f62b76356e81c1ece2c0c6d82ac4dd064968de6fdd0ab79ee40550117c6ac33f9a0b2abed9c55303c3487827f4ed3187c4aea5cb4a084e953e6930a394101de", 0xb5}], 0x3, &(0x7f0000000300)}}, {{&(0x7f0000000580)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000d80)="f4ab6dbf9a6385089919183ecdbbbdd9729909f09d1eb86fa482516b7721ad5f0a2ae980d3c6d6cc81f0b98834f887e45456f230801b351e6c836a1f207cfe81b5030290852eb54b9fe953ff1672de382763a01efdbd5f6e4cb800", 0x5b}, {&(0x7f0000001f40)="3ec49a830e1bf76839469ef9d13daa8bacc373733e82d32ada3cfd1d4ff1703f5b5f2defa200028b84153ab9dfa79a10b0e283bafc8cf1dba58144805017ab8f7662ff0dc3ccf21fa1888f2ed21c0da7072c3cb9429ef351f54b063eeeb2d7727fb7b09717e9e111433e48162b1feee2a6653d55e028aac2a0429cc856f12f8eab1227f214147e155e709395b6a6c1bf9e9d6d8f1cbb83fb5c50d2383cfdd97d1af3235b0379d472c2e281a250ce68b1f3edb02f6b41b48fb1c2484868e5150bd8943ff2fee6a49ebb162e8e968e21cada6797e5f9994be4dacc58148e4be639af6864b3fb63", 0xe6}, {&(0x7f0000000300)='u', 0x1}, {&(0x7f00000007c0)="7149ae11ef3c0e9d2cfb91", 0xb}, {&(0x7f0000000800)="18abac13b481437fb6fe946b008638dbe37620352b44ee1680ee9e8be6f869a36f956501b050e32d280e7b5fb84951453f5e7bddc5f924b72fffc13c0bfb1268772dce80ec398ffed158d11a8e0b9dfafcbcc3ccc16cbdfd9faa941db0565e385ae18ec3e529a894ce75a140f0e544621c72651e2562ca7ab6aa58290f8014e7249165d506b70465343b78d00f7fe4b5fdb97bcbdd5d2b490df985f562179ed24af90d8fddde6cca7afc9e68d1cbc1e65f1e3ace85f70934795c1b4080a5bc82334e3d6bbee1302138b1ea8f88a72e", 0xcf}, {&(0x7f0000000900)="1c8599f52b7ad3fc3727a57dc68f5e938673234bd74bc56aa0893d564fab99248833e81106b64c49d92164c47b5fb7021a328290d7459c27fb5f9fabc8c6343a52fa0760ef02191a849d05199e77a89f34dda7c54edfb49ea70e306949d41a9043c50bda396301efe548e0a503d97937e65f311cec55374b34e0a88f663188f42c5035ef3c1f83ff558e79fd5755fb5642a90a8507400bbba2fd56f6f45709988b1970a8", 0xa4}, {&(0x7f00000009c0)="5149cc1b2de361b20ee3a579858fb91db7ade4ae24bbcdc7cb2c7586e93abe61c02d537691c4650514650a413f5d390cd9eca496eba6cca46706b4960a1b260c18f0ef5d1cd2ffd512f5ad4e3ca8a14c623e2d83bfedd3ae523d2011231f8501605cad30ca43f66223d4ab31ac1d1e8ee77b4d8615115c4605544511c1b96668806d9be68d2887e897fd064edc3562b9c61d4be447451eb0866acb26705206b0dedc8a1061f4102e194f5ed39c9fe100ffbe22581c482d0e36c1fed40f5d33d84eea8ce8fcc15e6366777c74743eed5f642203", 0xd3}, {&(0x7f0000000ac0)="97e5eb8194712158faf26347c516dc5e7edd3507e1d1786ef21d176b5614b2d83bcc1b8b6eeef99c882faa4689f5c09a64ec6e9a3c6a54d6c4294fb001156c7322c02deba99f9e3cbfb9def3b8dfc08d32fb964b18af15e70c1733dbbb5e138cc021c9e12777ff3cfde4a0f79dfbf42301ae332becde3f9ee99cae59e1d5a27eef713b301b0f18b75f4ba58c4dad98a7", 0x90}, {&(0x7f0000000600)="37a75b82ec9a5f8e7a2b8b37388586c7c5b6489aff1d04374866f521eec3e671dea293b8302f0f41c07b880ca1b47170b3", 0x31}], 0x9, &(0x7f0000000c80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x59}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}], 0x2, 0x4008884) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r9, 0x4b41, 0x4000000000001) 10.110758105s ago: executing program 3 (id=493): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) (fail_nth: 5) 10.02542937s ago: executing program 4 (id=494): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x40, 0x21, 0x18, @empty, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) 9.61725118s ago: executing program 3 (id=495): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x0, 0x8000, 'lc\x00', 0x0, 0xffffffff}, 0x2c) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r5, &(0x7f0000001040)={&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf1, 0x6}, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x2, 0x3, 0xffffffffffffff12, 0x8, 0xffff, 0x21, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x9}, 0x0, 0x0, 0x9, 0x6, 0x6, 0x5, 0x8, 0x5}}], 0xb0, 0x8041}, 0x24008001) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffb}, 0x8) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x1a, "3eccd25569e20900"}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0xffffffffffffffff, 0x0}) 9.527275775s ago: executing program 2 (id=496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a0000000000000000018510000006", @ANYRES32, @ANYBLOB="0000000000000000660800001bc81a00180000000000000000000000000012009500000000000000360a02000000000018010000202078250000000000202020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8, 0x2) bind$rxrpc(r4, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0)=0x7fff, &(0x7f0000000200)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0xc1105511, &(0x7f00000007c0)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000040)="8f72fd6a87dccf26dbf4d0db80e3cd7ebc1edeae6aafa1e234ccffbc523305c4433097c9d80b4033ce03a639aebbc6ad037fdc100dba41049594aa102b9ce1247ed217cca29231a8c0122c2003413c62fc90f2e8d298f226b7be5244dec773", 0x5f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="77ba00000000000000001f0000000800010000000000"], 0x48}}, 0x40000) 9.483703683s ago: executing program 4 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000620000210000000100"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f00000003c0)=@v1={0x1000000, [{0x0, 0x3}]}, 0xc, 0x0) chdir(&(0x7f0000000380)='./bus\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) lchown(0x0, 0x0, 0x0) 7.673653662s ago: executing program 4 (id=498): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1a8d310da040d39963d0000000109021b0001000000000904c20001b4534b00090502022000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r0, 0x701, 0x0, 0x0, {0x45}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) 7.588142248s ago: executing program 3 (id=499): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) socket$inet6(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, r3, 0x0) read$FUSE(r4, 0x0, 0x6c) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.927654935s ago: executing program 1 (id=500): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) r2 = inotify_init() io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xf50003f0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa8042, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./file0\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r6, r4, 0x80000) readv(r7, 0x0, 0x0) write$tcp_mem(r4, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000e00), 0x12) ioctl$SIOCX25SCUDMATCHLEN(r9, 0x89e7, &(0x7f00000000c0)={0x14}) setsockopt$sock_linger(r8, 0x1, 0xd, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) 6.363819406s ago: executing program 2 (id=501): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$setperm(0x5, r4, 0x30925) keyctl$set_timeout(0xf, r4, 0x8) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, r4, 0x1) sendfile(r1, r2, 0x0, 0x20000023896) sendmsg$NFT_BATCH(r2, 0x0, 0x4040884) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) connect$bt_sco(r5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0xc, 0xc, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x33}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @dev={0xfe, 0x80, '\x00', 0x39}]}, 0x68) read$alg(r2, &(0x7f0000000300)=""/180, 0xb4) 4.407140216s ago: executing program 3 (id=502): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x1018, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x4}, {0x0, 0x8000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000a) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xa0000000, @mcast2, 0x3}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) 4.20054145s ago: executing program 1 (id=503): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x100000, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffea9, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3.541547117s ago: executing program 2 (id=504): r0 = socket$inet(0xa, 0x4, 0x2) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x82, &(0x7f0000000040)={0xffff, 0xfc9b1b96cb5ac3c8, 0xf09, 0x7}, &(0x7f0000000080)=0x10) 3.48381805s ago: executing program 4 (id=505): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1d0000007dccfa415c4a7c4484acbae393879420e026787314b1b28f9896fa06a5c6", @ANYRES16=r0, @ANYRESDEC, @ANYRES32], 0x1c}}, 0x20000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x280200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.692124081s ago: executing program 1 (id=506): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x10, 0x3f8, 0x1, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r3 = epoll_create(0x6) r4 = dup3(r2, r3, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r5 = syz_open_dev$vcsn(&(0x7f0000002080), 0x7, 0x4180) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r5, 0x21000) write(0xffffffffffffffff, &(0x7f0000000140)="fc00000018004b61ab092500090007000a100200000000020000369321000100ff2500000005d0000000001d000398996c92773411419da79bb94b46fe000000bc00050048036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b035", 0xd9) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000100)=0x9, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303", @ANYRESOCT=r2, @ANYRESDEC=r4, @ANYBLOB="12f773c8efe1bb05db9e885ca213ecb2c9ca34467be2530b2529ebcd333693574ee2fbe189faa02f484d653389adcb905ab5dcba41867d016b4d525c304bbaacfc94cfba213ed23290e3db85886006337ced7857fafd81e2b148a6a239525e18575fe22ba9ed866f5e3b51d1aab86806fb41a8a54583c11721894177e7b5803990907ba251a08eee37c0a189cd58c2cedfc5297a7a862f01e045"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x26000) 2.679515779s ago: executing program 2 (id=507): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040088beffffffff"}}}}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x140c82) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x8041, 0x8, 0x5}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff0100000000000000020000000865a7ea6da195d4a9e0000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad0000000000"], 0x658) fchownat(r1, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007b011800000000009500000000000000156b0525584845fc3f8c3b78e12db178fef1daa85c4a5acf88e849bd2c48da5fdfed8533ac72c96678d407220fc98d60ed1ba3347f13f757f7cebe8a09c3e18ced9a62397aaf18de5c985a1f9dabf1d326e8adfb6645055d986abfa6f32602e8aae3046d2a932a0d9dc3cee738dde776959ddce27c502badb58e38751ecd1fd94ac421c4c8e36daf106835e46836139acb1298ccdd2be1831684e089018bf2"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff79}, 0x1, 0x0, 0x0, 0x10}, 0x8011) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0xd74}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xafa6, 0x800f, 0x1, 0x8, r6}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 2.581559323s ago: executing program 4 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pipe2(0x0, 0x84880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) shutdown(r0, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0001000000000904c50003ff01070009050100000000030109050c00ff03028603090587"], 0x0) 1.76784413s ago: executing program 0 (id=509): getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x24) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x17, 0x3, "91abc12404cf378042f26c43f91f68d8a90767"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9, 0x0, 0x0, {0x3}}], {0x14}}, 0x98}}, 0x0) renameat2(r0, &(0x7f0000000080)='./file0/../file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) syz_open_dev$vcsu(0x0, 0x0, 0x346) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0xfffffffd, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) brk(0x20ffc004) 84.877456ms ago: executing program 0 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="62208463b9ce58e32b5839337d5ad4", @ANYBLOB="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"], 0x7c}}, 0x20040040) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 38.00756ms ago: executing program 3 (id=511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) (fail_nth: 5) 0s ago: executing program 2 (id=512): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x1a, "3eccd25569e20900"}) kernel console output (not intermixed with test programs): nsport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.374868][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.394286][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.401896][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.428858][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.472710][ T5831] team0: Port device team_slave_0 added [ 90.484795][ T5831] team0: Port device team_slave_1 added [ 90.506655][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.513635][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.540915][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.574153][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.581650][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.607915][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.666498][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.673478][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.699638][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.788143][ T5821] hsr_slave_0: entered promiscuous mode [ 90.794638][ T5821] hsr_slave_1: entered promiscuous mode [ 90.801073][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.809300][ T5821] Cannot create hsr debugfs directory [ 90.832365][ T5824] hsr_slave_0: entered promiscuous mode [ 90.839768][ T5824] hsr_slave_1: entered promiscuous mode [ 90.846088][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.853667][ T5824] Cannot create hsr debugfs directory [ 90.880354][ T5828] hsr_slave_0: entered promiscuous mode [ 90.888019][ T5828] hsr_slave_1: entered promiscuous mode [ 90.894177][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.901998][ T5828] Cannot create hsr debugfs directory [ 90.995274][ T5831] hsr_slave_0: entered promiscuous mode [ 91.001715][ T5831] hsr_slave_1: entered promiscuous mode [ 91.009044][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.016753][ T5831] Cannot create hsr debugfs directory [ 91.366430][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.424751][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.464197][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.483218][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.562214][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.577760][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.604792][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.628621][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.686825][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.698227][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.727243][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.740225][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.798436][ T9] cfg80211: failed to load regulatory.db [ 91.872004][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.880793][ T5825] Bluetooth: hci0: command tx timeout [ 91.911437][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.923778][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.955924][ T5825] Bluetooth: hci1: command tx timeout [ 91.972326][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.983726][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.036837][ T5825] Bluetooth: hci3: command tx timeout [ 92.042360][ T5825] Bluetooth: hci2: command tx timeout [ 92.048795][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.067710][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.074977][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.115336][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.122538][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.130299][ T5825] Bluetooth: hci4: command tx timeout [ 92.149876][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.179731][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.193309][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.226444][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.238204][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.283511][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.298471][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.305915][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.320269][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.327518][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.341094][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.420832][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.492657][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.499890][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.535315][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.542527][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.683099][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.819984][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.841155][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.858917][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.890770][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.898065][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.920166][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.927394][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.954529][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.000820][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.008175][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.052997][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.060227][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.141500][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.151377][ T5817] veth0_vlan: entered promiscuous mode [ 93.234575][ T5817] veth1_vlan: entered promiscuous mode [ 93.262997][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.293489][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.448701][ T5817] veth0_macvtap: entered promiscuous mode [ 93.488830][ T5817] veth1_macvtap: entered promiscuous mode [ 93.570271][ T5824] veth0_vlan: entered promiscuous mode [ 93.589214][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.620656][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.659156][ T5824] veth1_vlan: entered promiscuous mode [ 93.682116][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.693337][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.702650][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.712201][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.782258][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.810836][ T5824] veth0_macvtap: entered promiscuous mode [ 93.834149][ T5824] veth1_macvtap: entered promiscuous mode [ 93.898708][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.926457][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.935468][ T5828] veth0_vlan: entered promiscuous mode [ 93.937543][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.956530][ T5825] Bluetooth: hci0: command tx timeout [ 94.004293][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.015792][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.029951][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.041498][ T5825] Bluetooth: hci1: command tx timeout [ 94.059163][ T5828] veth1_vlan: entered promiscuous mode [ 94.067320][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.086768][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.096319][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.099897][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.118537][ T5825] Bluetooth: hci2: command tx timeout [ 94.119276][ T5130] Bluetooth: hci3: command tx timeout [ 94.130594][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.143683][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.152925][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.162194][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.171906][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.196894][ T5130] Bluetooth: hci4: command tx timeout [ 94.302445][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.308566][ T5828] veth0_macvtap: entered promiscuous mode [ 94.351303][ T5831] veth0_vlan: entered promiscuous mode [ 94.419759][ T5821] veth0_vlan: entered promiscuous mode [ 94.433483][ T5828] veth1_macvtap: entered promiscuous mode [ 94.490272][ T5831] veth1_vlan: entered promiscuous mode [ 94.523258][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.548286][ T5821] veth1_vlan: entered promiscuous mode [ 94.560570][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.579144][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.588133][ T5899] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 94.592871][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.614117][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.625159][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.638631][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.726697][ T5831] veth0_macvtap: entered promiscuous mode [ 94.734243][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.739995][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.748221][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.765385][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.775532][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.787082][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.798628][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.817330][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.828987][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.840133][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.849238][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.861746][ T5831] veth1_macvtap: entered promiscuous mode [ 94.903646][ T5821] veth0_macvtap: entered promiscuous mode [ 94.937649][ T5821] veth1_macvtap: entered promiscuous mode [ 94.981986][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.993445][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.007059][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.033201][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.053187][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.064522][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.078759][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.193366][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.221406][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.251388][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.279336][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.296124][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.306942][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.317616][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.329449][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.341543][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.356853][ T976] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.432987][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.686224][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 95.756234][ T976] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 95.801639][ T976] usb 2-1: config 8 has no interface number 0 [ 95.843328][ T976] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 95.905599][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.917085][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.927215][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.931898][ T976] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 95.942011][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.953041][ T976] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 95.961197][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.982514][ T976] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 95.986855][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.993612][ T976] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 96.016951][ T976] usb 2-1: config 8 interface 206 has no altsetting 0 [ 96.024756][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.029085][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 96.035353][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.045044][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.062709][ T5130] Bluetooth: hci0: command tx timeout [ 96.064023][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.073356][ T976] usb 2-1: Product: syz [ 96.080720][ T976] usb 2-1: Manufacturer: syz [ 96.085362][ T976] usb 2-1: SerialNumber: syz [ 96.111265][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.120553][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.128447][ T5130] Bluetooth: hci1: command tx timeout [ 96.177273][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.196275][ T5130] Bluetooth: hci3: command tx timeout [ 96.201767][ T5130] Bluetooth: hci2: command tx timeout [ 96.235875][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.258396][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.276331][ T5825] Bluetooth: hci4: command tx timeout [ 96.304789][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.315072][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.325630][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.335628][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.346284][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.358964][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.391594][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.392611][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.409270][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.418952][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427944][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.457137][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.490865][ T976] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 96.507668][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.523938][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.535527][ T976] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 96.550940][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.560696][ T976] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 96.571011][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.593901][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.623900][ T976] usb 2-1: USB disconnect, device number 2 [ 96.662233][ T5916] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 96.684014][ T976] garmin_gps 2-1:8.206: device disconnected [ 96.699008][ T5912] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.755330][ T5912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.871780][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.897180][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.905050][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.915359][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.939979][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.965139][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 96.985017][ T5912] wlan0 speed is unknown, defaulting to 1000 [ 97.043029][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.076736][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.186060][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.207667][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.224249][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.253728][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.268123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.516248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.549492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.559542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.651979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.661448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.870179][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 98.879006][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 98.887976][ T5942] Zero length message leads to an empty skb [ 98.926114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.053403][ T5946] openvswitch: netlink: Key type 81 is out of range max 32 [ 99.062438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.217518][ T5941] sctp: [Deprecated]: syz.3.4 (pid 5941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.217518][ T5941] Use struct sctp_sack_info instead [ 99.954145][ T5948] wlan0 speed is unknown, defaulting to 1000 [ 100.580491][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 101.620925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.980319][ T2148] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.442773][ T2148] usb 2-1: device descriptor read/64, error -71 [ 102.611130][ T5991] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 102.740171][ T2148] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 103.016289][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.085965][ T2148] usb 2-1: device descriptor read/64, error -71 [ 103.205868][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 103.207517][ T2148] usb usb2-port1: attempt power cycle [ 103.218394][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.226716][ T976] usb 3-1: config 0 has no interface number 0 [ 103.235599][ T976] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 103.249278][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.257532][ T976] usb 3-1: Product: syz [ 103.263017][ T976] usb 3-1: Manufacturer: syz [ 103.268068][ T976] usb 3-1: SerialNumber: syz [ 103.276804][ T976] usb 3-1: config 0 descriptor?? [ 103.287329][ T976] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 103.296201][ T976] usb 3-1: selecting invalid altsetting 1 [ 103.301936][ T976] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 103.324997][ T976] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.336334][ T976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 103.344814][ T976] usb 3-1: media controller created [ 103.373034][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.636441][ T976] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 103.636847][ T976] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 103.722900][ T976] DVB: Unable to find symbol mxl5005s_attach() [ 103.816709][ T2148] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 103.838391][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 103.857708][ T2148] usb 2-1: device descriptor read/8, error -71 [ 103.893330][ T976] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 103.952149][ T6002] batadv_slave_1: entered promiscuous mode [ 103.981544][ T6002] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 103.999943][ T6002] veth0: entered promiscuous mode [ 104.012775][ T976] usb 3-1: USB disconnect, device number 2 [ 104.026645][ T6001] veth0: left promiscuous mode [ 104.035216][ T6001] batadv_slave_1: left promiscuous mode [ 104.108205][ T2148] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 104.157434][ T2148] usb 2-1: device descriptor read/8, error -71 [ 104.266233][ T2148] usb usb2-port1: unable to enumerate USB device [ 104.323586][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.498827][ T6012] xt_recent: Unsupported userspace flags (000000de) [ 105.515751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.306090][ T6025] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 106.345350][ T6026] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 106.676242][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.986490][ T976] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.005777][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 107.029678][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.062873][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.107076][ T47] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 107.128165][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.371360][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 107.379960][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.388119][ T976] usb 3-1: config 0 has no interface number 0 [ 107.482682][ T6051] FAULT_INJECTION: forcing a failure. [ 107.482682][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 107.495537][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.0.39 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 107.495564][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.495595][ T6051] Call Trace: [ 107.495604][ T6051] [ 107.495618][ T6051] dump_stack_lvl+0x189/0x250 [ 107.495650][ T6051] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.495686][ T6051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.495729][ T6051] should_fail_ex+0x414/0x560 [ 107.495773][ T6051] should_failslab+0xa8/0x100 [ 107.495806][ T6051] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 107.495836][ T6051] ? __alloc_skb+0x112/0x2d0 [ 107.495860][ T6051] __alloc_skb+0x112/0x2d0 [ 107.495884][ T6051] pfkey_sendmsg+0xca5/0x1090 [ 107.495919][ T6051] ? __switch_to+0xd70/0x1600 [ 107.495955][ T6051] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 107.496013][ T6051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.496033][ T6051] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 107.496061][ T6051] __sock_sendmsg+0x219/0x270 [ 107.496091][ T6051] ____sys_sendmsg+0x505/0x830 [ 107.496119][ T6051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.496151][ T6051] ? import_iovec+0x74/0xa0 [ 107.496181][ T6051] ___sys_sendmsg+0x21f/0x2a0 [ 107.496205][ T6051] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.496232][ T6051] ? rcu_is_watching+0x15/0xb0 [ 107.496274][ T6051] ? irqentry_exit+0x74/0x90 [ 107.496306][ T6051] ? __x64_sys_sendmsg+0xe3/0x260 [ 107.496340][ T6051] __x64_sys_sendmsg+0x19b/0x260 [ 107.496366][ T6051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.496406][ T6051] ? do_syscall_64+0xba/0x210 [ 107.496430][ T6051] do_syscall_64+0xf6/0x210 [ 107.496451][ T6051] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 107.496471][ T6051] ? clear_bhb_loop+0x45/0xa0 [ 107.496495][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.496515][ T6051] RIP: 0033:0x7f428e38e969 [ 107.496537][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.496553][ T6051] RSP: 002b:00007f428f178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.496578][ T6051] RAX: ffffffffffffffda RBX: 00007f428e5b6160 RCX: 00007f428e38e969 [ 107.496593][ T6051] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 107.496605][ T6051] RBP: 00007f428f178090 R08: 0000000000000000 R09: 0000000000000000 [ 107.496617][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.496628][ T6051] R13: 0000000000000000 R14: 00007f428e5b6160 R15: 00007ffe308b6a78 [ 107.496659][ T6051] [ 107.757837][ T976] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 107.776101][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.804602][ T976] usb 3-1: Product: syz [ 107.815075][ T976] usb 3-1: Manufacturer: syz [ 107.830042][ T976] usb 3-1: SerialNumber: syz [ 108.126752][ T47] usb 5-1: config 0 descriptor?? [ 108.132871][ T976] usb 3-1: config 0 descriptor?? [ 108.165409][ T976] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.203120][ T976] usb 3-1: selecting invalid altsetting 1 [ 108.240085][ T976] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.503080][ T976] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.862091][ T6056] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿ§¢ëN†Û$  [ 108.959256][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 108.976586][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 108.986945][ T976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 109.011079][ T976] usb 3-1: media controller created [ 109.036115][ T47] usb 5-1: USB disconnect, device number 2 [ 109.110427][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.218698][ T976] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 109.238685][ T976] zl10353_read_register: readreg error (reg=127, ret==-71) [ 109.456613][ T976] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 109.574245][ T6064] xt_recent: Unsupported userspace flags (000000de) [ 110.213064][ T976] usb 3-1: USB disconnect, device number 3 [ 110.596412][ T6074] overlayfs: failed to resolve './file0': -2 [ 110.912543][ T6078] usb usb3: usbfs: interface 0 claimed by hub while 'syz.4.44' sets config #1 [ 111.967743][ T6092] netlink: 156 bytes leftover after parsing attributes in process `syz.3.46'. [ 113.157478][ T6101] mmap: syz.1.50 (6101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.173907][ T6101] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.307218][ T2148] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.089727][ T2148] usb 4-1: Using ep0 maxpacket: 8 [ 114.106482][ T2148] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 114.125771][ T2148] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 114.136040][ T2148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.157963][ T2148] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.185771][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.194809][ T6107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.52'. [ 114.234988][ T2148] usb 4-1: Product: ⬀㙈垖㬔겨迫奈晲飪Ⲻ鷊è•è‹¸ãŠ´ë¹¡à§ï´¿ïº²á™Šâ“žì¡·æ¦¹ï€êžµî¡‚虇ä«éš¦Î…隳矓 [ 114.308549][ T2148] usb 4-1: Manufacturer: ì ïª›é¹…架㖊５⯇ç‰ä‡’᪠긴藟æ¯ì»­è¦›á´å”›åŒ­ï¦ç¼¨é–¾ã¡¨å‹°ã¬¦ç®Ó™ë€·æ¥œã›«åˆ²å§½èƒÇšé…‹è´¾è»¼ã„”倷훦뜄芋îŠá¦¶á½ˆæ§‹á¿¤ã§ á §î—®ï‰„Ếäªì‡¡å†µç¢’ê¿®çŠà¶¡åš„â ç›–ꮭ䙩凕鹼㈉é–ᠤ㉣唕쌄魔￩췟䵖Ėè¹ï©™â ‹ä»“ᢅã¿æˆî‹šêŽªçº—ì†å­”哸〉çŒã¢†çŽç¤¸î——꫹⾦Ḿ婘㙊티쬭ప锼 [ 115.141012][ T5918] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.209379][ T2148] usb 4-1: SerialNumber: syz [ 115.227628][ T2148] usb 4-1: can't set config #1, error -71 [ 115.246201][ T2148] usb 4-1: USB disconnect, device number 2 [ 115.918544][ T5918] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 115.935911][ T5918] usb 2-1: config 0 has no interface number 0 [ 115.942226][ T5918] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.975785][ T5918] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 115.999688][ T5918] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0x87 has invalid maxpacket 1025, setting to 1024 [ 116.021608][ T5918] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 116.055413][ T5918] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 116.075826][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.083879][ T5918] usb 2-1: Product: syz [ 116.105876][ T5918] usb 2-1: Manufacturer: syz [ 116.110746][ T5918] usb 2-1: SerialNumber: syz [ 116.132047][ T5918] usb 2-1: config 0 descriptor?? [ 116.143236][ T6113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.159342][ T5918] qmi_wwan 2-1:0.197: probe with driver qmi_wwan failed with error -22 [ 116.176520][ T2148] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.378544][ T2148] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 116.386827][ T2148] usb 4-1: config 0 has no interface number 0 [ 116.393100][ T2148] usb 4-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.405365][ T2148] usb 4-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 116.414517][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.422755][ T5866] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.430345][ T2148] usb 4-1: Product: syz [ 116.434573][ T2148] usb 4-1: Manufacturer: syz [ 116.439508][ T2148] usb 4-1: SerialNumber: syz [ 116.447782][ T2148] usb 4-1: config 0 descriptor?? [ 116.590443][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.601068][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.611945][ T5866] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.621195][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.632475][ T5866] usb 3-1: SerialNumber: syz [ 116.685282][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.887417][ T5866] usb 3-1: 0:2 : does not exist [ 116.951344][ T5866] usb 3-1: USB disconnect, device number 4 [ 117.017755][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.155201][ T5918] usb 2-1: USB disconnect, device number 7 [ 118.737490][ T30] audit: type=1326 audit(1745782370.009:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 118.873163][ T30] audit: type=1326 audit(1745782370.149:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 119.263444][ T30] audit: type=1326 audit(1745782370.169:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 119.376452][ T30] audit: type=1326 audit(1745782370.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 119.591823][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.633318][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.782203][ T30] audit: type=1326 audit(1745782370.179:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 119.805116][ T30] audit: type=1326 audit(1745782370.209:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 119.826432][ T30] audit: type=1326 audit(1745782370.209:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 119.850636][ T30] audit: type=1326 audit(1745782370.209:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 120.803066][ T30] audit: type=1326 audit(1745782370.209:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 120.824457][ T30] audit: type=1326 audit(1745782370.779:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1a78e969 code=0x7ffc0000 [ 121.032334][ T6174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 121.039140][ T6174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.107380][ T6174] vhci_hcd vhci_hcd.0: Device attached [ 121.166368][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.335946][ T5918] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 122.760978][ T5866] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.179814][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.616668][ T6206] Unknown options in mask 5 [ 123.877526][ T5866] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.956308][ T5866] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 124.080947][ T6175] vhci_hcd: connection reset by peer [ 124.098906][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.382721][ T5866] usb 3-1: config 0 descriptor?? [ 124.389770][ T175] vhci_hcd: stop threads [ 124.394710][ T175] vhci_hcd: release socket [ 124.584784][ T5866] usb 3-1: can't set config #0, error -71 [ 125.139719][ T175] vhci_hcd: disconnect device [ 125.182732][ T5866] usb 3-1: USB disconnect, device number 5 [ 125.692130][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 125.700994][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.80'. [ 126.538122][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.565894][ T5918] vhci_hcd: vhci_device speed not set [ 127.246094][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.526797][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 127.583608][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.602215][ T47] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 127.628801][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.657931][ T47] usb 5-1: Product: syz [ 127.662586][ T47] usb 5-1: Manufacturer: syz [ 127.669675][ T47] usb 5-1: SerialNumber: syz [ 127.678786][ T47] usb 5-1: config 0 descriptor?? [ 127.699846][ T47] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 127.915836][ T47] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 127.946830][ T47] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 128.161342][ T47] usb 5-1: USB disconnect, device number 3 [ 129.224015][ T6257] tty tty2: ldisc open failed (-12), clearing slot 1 [ 130.019139][ T6265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 130.025723][ T6265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.075951][ T6265] vhci_hcd vhci_hcd.0: Device attached [ 130.326003][ T5866] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 130.674281][ T2148] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.527717][ T2148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.540590][ T2148] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.552165][ T2148] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 131.552196][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.575093][ T2148] usb 5-1: config 0 descriptor?? [ 131.622279][ T6282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.95'. [ 131.781470][ T6290] FAULT_INJECTION: forcing a failure. [ 131.781470][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 131.794444][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.1.96 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 131.794471][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 131.794483][ T6290] Call Trace: [ 131.794491][ T6290] [ 131.794500][ T6290] dump_stack_lvl+0x189/0x250 [ 131.794535][ T6290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.794562][ T6290] ? __pfx__printk+0x10/0x10 [ 131.794599][ T6290] ? __pfx___might_resched+0x10/0x10 [ 131.794631][ T6290] should_fail_ex+0x414/0x560 [ 131.794665][ T6290] should_failslab+0xa8/0x100 [ 131.794691][ T6290] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 131.794714][ T6290] ? __kasan_kmalloc+0x93/0xb0 [ 131.794735][ T6290] ? ip6_setup_cork+0x6d3/0x11c0 [ 131.794754][ T6290] kmemdup_noprof+0x2b/0x70 [ 131.794775][ T6290] ip6_setup_cork+0x6d3/0x11c0 [ 131.794797][ T6290] ip6_make_skb+0x1bd/0x410 [ 131.794811][ T6290] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 131.794841][ T6290] ? __pfx_ip6_make_skb+0x10/0x10 [ 131.794867][ T6290] ? __rcu_read_unlock+0x84/0xe0 [ 131.794883][ T6290] ? ip6_dst_hoplimit+0x96/0x350 [ 131.794906][ T6290] udpv6_sendmsg+0x1c06/0x2700 [ 131.794932][ T6290] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 131.794966][ T6290] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 131.794986][ T6290] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 131.795033][ T6290] ? irqentry_exit+0x74/0x90 [ 131.795047][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.795082][ T6290] ? inet6_sendmsg+0xe4/0x120 [ 131.795107][ T6290] __sock_sendmsg+0xe5/0x270 [ 131.795131][ T6290] ____sys_sendmsg+0x52d/0x830 [ 131.795153][ T6290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.795177][ T6290] ? import_iovec+0x74/0xa0 [ 131.795201][ T6290] ___sys_sendmsg+0x21f/0x2a0 [ 131.795220][ T6290] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.795266][ T6290] ? __fget_files+0x2a/0x420 [ 131.795289][ T6290] ? __fget_files+0x3a0/0x420 [ 131.795321][ T6290] __sys_sendmmsg+0x227/0x430 [ 131.795343][ T6290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 131.795367][ T6290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.795402][ T6290] ? ksys_write+0x1f0/0x250 [ 131.795421][ T6290] ? rcu_is_watching+0x15/0xb0 [ 131.795451][ T6290] __x64_sys_sendmmsg+0xa0/0xc0 [ 131.795471][ T6290] do_syscall_64+0xf6/0x210 [ 131.795487][ T6290] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 131.795502][ T6290] ? clear_bhb_loop+0x45/0xa0 [ 131.795521][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.795536][ T6290] RIP: 0033:0x7fe60ad8e969 [ 131.795550][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.795563][ T6290] RSP: 002b:00007fe608bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.795580][ T6290] RAX: ffffffffffffffda RBX: 00007fe60afb6160 RCX: 00007fe60ad8e969 [ 131.795591][ T6290] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005 [ 131.795601][ T6290] RBP: 00007fe608bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 131.795611][ T6290] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.795620][ T6290] R13: 0000000000000000 R14: 00007fe60afb6160 R15: 00007fff6d359ee8 [ 131.795644][ T6290] [ 132.615965][ T6268] usb 41-1: recv xbuf, 0 [ 132.646869][ T175] vhci_hcd: stop threads [ 132.652014][ T175] vhci_hcd: release socket [ 132.724100][ T5825] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 132.732860][ T5825] Bluetooth: hci2: Injecting HCI hardware error event [ 132.748466][ T5825] Bluetooth: hci2: hardware error 0x00 [ 132.761349][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798904][ T175] vhci_hcd: disconnect device [ 132.830771][ T5866] usb 41-1: device descriptor read/64, error -71 [ 132.837413][ T10] usb 5-1: USB disconnect, device number 4 [ 132.872529][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.931331][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.078744][ T5866] vhci_hcd: vhci_device speed not set [ 136.439298][ T5825] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 136.506085][ T976] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.124447][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.315752][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 137.427393][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.445888][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 137.445988][ T5866] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.478328][ T976] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.542852][ T976] usb 2-1: config 179 has no interface number 0 [ 137.594428][ T976] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 137.595753][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.776096][ T976] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 137.787715][ T976] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 137.799189][ T976] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 137.811330][ T976] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.824807][ T976] usb 2-1: config 179 interface 65 has no altsetting 0 [ 137.831792][ T976] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 137.843211][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.883997][ T5866] usb 3-1: config 0 descriptor?? [ 137.920139][ T6325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.386311][ T976] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 138.409535][ T6343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.437908][ T6341] xt_recent: Unsupported userspace flags (000000de) [ 138.471278][ T5175] input input5: unable to receive magic message: -71 [ 138.580471][ T976] usb 2-1: USB disconnect, device number 8 [ 138.586483][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.599134][ T976] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 138.650056][ T6343] wireguard0: entered promiscuous mode [ 138.655628][ T6343] wireguard0: entered allmulticast mode [ 138.828351][ T6348] ======================================================= [ 138.828351][ T6348] WARNING: The mand mount option has been deprecated and [ 138.828351][ T6348] and is ignored by this kernel. Remove the mand [ 138.828351][ T6348] option from the mount to silence this warning. [ 138.828351][ T6348] ======================================================= [ 138.995327][ T6348] option changes via remount are deprecated (pid=6326 comm=syz.2.109) [ 139.842109][ T6360] xt_recent: Unsupported userspace flags (000000de) [ 140.650124][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 140.656393][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 140.664910][ T6363] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.671822][ T6363] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.697280][ T5866] usb 3-1: USB disconnect, device number 6 [ 140.707808][ T6363] hsr_slave_0: left promiscuous mode [ 140.718502][ T6363] hsr_slave_1: left promiscuous mode [ 140.756180][ T5825] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 140.765550][ T5825] Bluetooth: hci4: Injecting HCI hardware error event [ 140.767795][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.116'. [ 140.773974][ T5130] Bluetooth: hci4: hardware error 0x00 [ 140.805884][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.816403][ T6364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 140.850278][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.116'. [ 140.892834][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.116'. [ 140.976027][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 140.987802][ T5864] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.012857][ T5864] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.029540][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.036644][ T5864] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 141.058030][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.113068][ T5864] usb 5-1: config 0 descriptor?? [ 141.272443][ T6369] FAULT_INJECTION: forcing a failure. [ 141.272443][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 141.285749][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.1.117 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 141.285775][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 141.285786][ T6369] Call Trace: [ 141.285794][ T6369] [ 141.285801][ T6369] dump_stack_lvl+0x189/0x250 [ 141.285838][ T6369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.285866][ T6369] ? __pfx__printk+0x10/0x10 [ 141.285899][ T6369] ? __pfx___might_resched+0x10/0x10 [ 141.285935][ T6369] should_fail_ex+0x414/0x560 [ 141.285971][ T6369] should_failslab+0xa8/0x100 [ 141.286003][ T6369] __kmalloc_cache_noprof+0x70/0x3d0 [ 141.286032][ T6369] ? rdma_resolve_ip+0x6b/0x840 [ 141.286067][ T6369] rdma_resolve_ip+0x6b/0x840 [ 141.286095][ T6369] ? __pfx_addr_handler+0x10/0x10 [ 141.286131][ T6369] rdma_resolve_addr+0x7a7/0x2030 [ 141.286172][ T6369] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 141.286207][ T6369] ? __mutex_lock+0xcbc/0xe80 [ 141.286244][ T6369] ? ucma_resolve_ip+0x1a5/0x280 [ 141.286286][ T6369] ? ucma_resolve_ip+0xa7/0x280 [ 141.286314][ T6369] ucma_resolve_ip+0x1db/0x280 [ 141.286339][ T6369] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 141.286381][ T6369] ucma_write+0x246/0x2e0 [ 141.286405][ T6369] ? __pfx_ucma_write+0x10/0x10 [ 141.286425][ T6369] ? security_file_permission+0x75/0x290 [ 141.286448][ T6369] ? rw_verify_area+0x258/0x650 [ 141.286473][ T6369] ? __pfx_ucma_write+0x10/0x10 [ 141.286496][ T6369] vfs_write+0x27b/0xa90 [ 141.286532][ T6369] ? __pfx_vfs_write+0x10/0x10 [ 141.286560][ T6369] ? __fget_files+0x2a/0x420 [ 141.286593][ T6369] ? __fget_files+0x2a/0x420 [ 141.286621][ T6369] ? __fget_files+0x3a0/0x420 [ 141.286649][ T6369] ? __fget_files+0x2a/0x420 [ 141.286689][ T6369] ksys_write+0x145/0x250 [ 141.286718][ T6369] ? __pfx_ksys_write+0x10/0x10 [ 141.286749][ T6369] ? do_syscall_64+0xba/0x210 [ 141.286774][ T6369] do_syscall_64+0xf6/0x210 [ 141.286795][ T6369] ? clear_bhb_loop+0x45/0xa0 [ 141.286820][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.286839][ T6369] RIP: 0033:0x7fe60ad8e969 [ 141.286857][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.286874][ T6369] RSP: 002b:00007fe608bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.286895][ T6369] RAX: ffffffffffffffda RBX: 00007fe60afb6080 RCX: 00007fe60ad8e969 [ 141.286909][ T6369] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000005 [ 141.286922][ T6369] RBP: 00007fe608bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 141.286934][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.286946][ T6369] R13: 0000000000000000 R14: 00007fe60afb6080 R15: 00007fff6d359ee8 [ 141.286977][ T6369] [ 142.151158][ T5864] itetech 0003:048D:8595.0001: item fetching failed at offset 4/5 [ 142.170540][ T5864] itetech 0003:048D:8595.0001: probe with driver itetech failed with error -22 [ 142.865491][ T5130] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 144.507766][ T6359] wlan0 speed is unknown, defaulting to 1000 [ 144.927898][ T6396] Unknown options in mask 5 [ 145.157499][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.168371][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.728961][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.123'. [ 145.769244][ T6401] misc userio: The device must be registered before sending interrupts [ 146.384394][ T6412] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.390932][ T6412] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.450750][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 146.463463][ T6412] hsr_slave_0: left promiscuous mode [ 146.470702][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 146.496570][ T6412] hsr_slave_1: left promiscuous mode [ 146.521793][ T6418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.127'. [ 146.563192][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'. [ 146.693724][ T6418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.127'. [ 146.705390][ T6418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.127'. [ 147.325441][ T6421] tty tty25: ldisc open failed (-12), clearing slot 24 [ 147.534849][ T6416] syz.1.128 (6416) used greatest stack depth: 19480 bytes left [ 147.629911][ T5866] usb 5-1: USB disconnect, device number 5 [ 148.062082][ T6443] Unknown options in mask 5 [ 148.752522][ T6438] netlink: 'syz.4.131': attribute type 4 has an invalid length. [ 151.454381][ T6478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 151.460979][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.334938][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 152.869252][ T175] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.038373][ T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.409524][ T5866] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 153.891834][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.924744][ T976] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.944040][ T6499] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 153.983142][ T976] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 154.013419][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.057234][ T976] usb 5-1: config 0 descriptor?? [ 154.208767][ T6499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.292266][ T976] usb 5-1: USB disconnect, device number 6 [ 154.303093][ T6479] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 154.332348][ T175] vhci_hcd: stop threads [ 154.372867][ T175] vhci_hcd: release socket [ 154.383149][ T175] vhci_hcd: disconnect device [ 154.405049][ T6494] bond1: (slave gretap1): making interface the new active one [ 154.422254][ T6509] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 154.433958][ T6494] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 154.478317][ T6508] batadv_slave_1: entered promiscuous mode [ 154.601902][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.613769][ T6507] batadv_slave_1: left promiscuous mode [ 154.760188][ T6521] Unknown options in mask 5 [ 154.964039][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 154.986583][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.473643][ T6525] misc userio: The device must be registered before sending interrupts [ 155.514008][ T6525] FAULT_INJECTION: forcing a failure. [ 155.514008][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 155.528179][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.1.146 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 155.528208][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.528220][ T6525] Call Trace: [ 155.528228][ T6525] [ 155.528236][ T6525] dump_stack_lvl+0x189/0x250 [ 155.528267][ T6525] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.528300][ T6525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.528343][ T6525] should_fail_ex+0x414/0x560 [ 155.528380][ T6525] should_failslab+0xa8/0x100 [ 155.528412][ T6525] kmem_cache_alloc_noprof+0x73/0x3c0 [ 155.528440][ T6525] ? skb_clone+0x212/0x3a0 [ 155.528469][ T6525] skb_clone+0x212/0x3a0 [ 155.528496][ T6525] __netlink_deliver_tap+0x404/0x850 [ 155.528542][ T6525] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.528574][ T6525] netlink_deliver_tap+0x19c/0x1b0 [ 155.528606][ T6525] netlink_unicast+0x72f/0x8d0 [ 155.528646][ T6525] netlink_sendmsg+0x805/0xb30 [ 155.528687][ T6525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.528726][ T6525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.528746][ T6525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.528778][ T6525] __sock_sendmsg+0x219/0x270 [ 155.528809][ T6525] ____sys_sendmsg+0x505/0x830 [ 155.528839][ T6525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.528872][ T6525] ? import_iovec+0x74/0xa0 [ 155.528901][ T6525] ___sys_sendmsg+0x21f/0x2a0 [ 155.528926][ T6525] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.528994][ T6525] ? __fget_files+0x2a/0x420 [ 155.529023][ T6525] ? __fget_files+0x3a0/0x420 [ 155.529064][ T6525] __x64_sys_sendmsg+0x19b/0x260 [ 155.529090][ T6525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.529137][ T6525] do_syscall_64+0xf6/0x210 [ 155.529157][ T6525] ? asm_sysvec_call_function_single+0x1a/0x20 [ 155.529178][ T6525] ? clear_bhb_loop+0x45/0xa0 [ 155.529202][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.529220][ T6525] RIP: 0033:0x7fe60ad8e969 [ 155.529238][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.529254][ T6525] RSP: 002b:00007fe608bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.529275][ T6525] RAX: ffffffffffffffda RBX: 00007fe60afb6080 RCX: 00007fe60ad8e969 [ 155.529290][ T6525] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000005 [ 155.529302][ T6525] RBP: 00007fe608bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 155.529314][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.529325][ T6525] R13: 0000000000000000 R14: 00007fe60afb6080 R15: 00007fff6d359ee8 [ 155.529358][ T6525] [ 157.322293][ T6538] netlink: 100 bytes leftover after parsing attributes in process `syz.2.149'. [ 157.446352][ T6548] FAULT_INJECTION: forcing a failure. [ 157.446352][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 157.500318][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.0.151 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 157.500348][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.500360][ T6548] Call Trace: [ 157.500368][ T6548] [ 157.500377][ T6548] dump_stack_lvl+0x189/0x250 [ 157.500412][ T6548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.500440][ T6548] ? __pfx__printk+0x10/0x10 [ 157.500472][ T6548] ? __pfx___might_resched+0x10/0x10 [ 157.500501][ T6548] ? fs_reclaim_acquire+0x7d/0x100 [ 157.500527][ T6548] should_fail_ex+0x414/0x560 [ 157.500563][ T6548] should_failslab+0xa8/0x100 [ 157.500595][ T6548] __kmalloc_cache_noprof+0x70/0x3d0 [ 157.500623][ T6548] ? sctp_stream_init_ext+0x57/0x180 [ 157.500648][ T6548] sctp_stream_init_ext+0x57/0x180 [ 157.500671][ T6548] sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 157.500696][ T6548] ? __asan_memcpy+0x40/0x70 [ 157.500728][ T6548] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 157.500768][ T6548] ? sctp_connect_new_asoc+0x3f0/0x690 [ 157.500795][ T6548] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 157.500821][ T6548] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 157.500849][ T6548] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 157.500875][ T6548] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 157.500900][ T6548] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 157.500927][ T6548] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 157.500949][ T6548] ? security_sctp_bind_connect+0x7e/0x2e0 [ 157.500974][ T6548] sctp_sendmsg+0x1941/0x2810 [ 157.501014][ T6548] ? __pfx_sctp_sendmsg+0x10/0x10 [ 157.501041][ T6548] ? __lock_acquire+0xaac/0xd20 [ 157.501083][ T6548] ? sock_rps_record_flow+0x19/0x400 [ 157.501118][ T6548] ? inet_sendmsg+0x2f4/0x370 [ 157.501140][ T6548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.501163][ T6548] __sock_sendmsg+0x19c/0x270 [ 157.501194][ T6548] __sys_sendto+0x3bd/0x520 [ 157.501216][ T6548] ? __pfx___sys_sendto+0x10/0x10 [ 157.501232][ T6548] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 157.501266][ T6548] ? __fget_files+0x3a0/0x420 [ 157.501308][ T6548] ? ksys_write+0x1f0/0x250 [ 157.501333][ T6548] ? rcu_is_watching+0x15/0xb0 [ 157.501370][ T6548] __x64_sys_sendto+0xde/0x100 [ 157.501394][ T6548] do_syscall_64+0xf6/0x210 [ 157.501416][ T6548] ? clear_bhb_loop+0x45/0xa0 [ 157.501441][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.501460][ T6548] RIP: 0033:0x7f428e38e969 [ 157.501477][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.501493][ T6548] RSP: 002b:00007f428f1ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.501513][ T6548] RAX: ffffffffffffffda RBX: 00007f428e5b5fa0 RCX: 00007f428e38e969 [ 157.501528][ T6548] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000005 [ 157.501540][ T6548] RBP: 00007f428f1ba090 R08: 000020000005ffe4 R09: 000000000000001c [ 157.501553][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.501565][ T6548] R13: 0000000000000000 R14: 00007f428e5b5fa0 R15: 00007ffe308b6a78 [ 157.501596][ T6548] [ 158.666353][ T5866] vhci_hcd: vhci_device speed not set [ 158.831096][ T6568] capability: warning: `syz.3.157' uses deprecated v2 capabilities in a way that may be insecure [ 159.134012][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 159.144564][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.158'. [ 159.396777][ T5130] Bluetooth: hci3: command tx timeout [ 161.350295][ T6592] Unknown options in mask 5 [ 162.095123][ T6598] warning: `syz.3.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.195849][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 165.536562][ T6657] Unknown options in mask 5 [ 169.155907][ T5811] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 169.212455][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.184'. [ 169.305229][ T6697] bridge0: entered allmulticast mode [ 169.686636][ T6701] Unknown options in mask 5 [ 170.116535][ T5811] usb 3-1: config 0 has no interfaces? [ 170.143350][ T5811] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 170.155880][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.194675][ T5811] usb 3-1: Product: syz [ 170.212695][ T5811] usb 3-1: Manufacturer: syz [ 170.302008][ T6704] sp0: Synchronizing with TNC [ 170.320872][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.187'. [ 170.853625][ T5811] usb 3-1: SerialNumber: syz [ 171.024239][ T5811] usb 3-1: config 0 descriptor?? [ 171.066778][ T6702] [U] è [ 172.785782][ T5811] usb 3-1: can't set config #0, error -71 [ 173.195281][ T5811] usb 3-1: USB disconnect, device number 7 [ 174.756290][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.775553][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.561087][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 175.658325][ T6737] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.810816][ T6751] Unknown options in mask 5 [ 178.592007][ T6765] xt_recent: Unsupported userspace flags (000000de) [ 181.990182][ T6794] syz.3.211(6794): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 185.117847][ T6815] xt_recent: Unsupported userspace flags (000000de) [ 189.386571][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.395146][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.209119][ T6858] xt_recent: Unsupported userspace flags (000000de) [ 194.237939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244348][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.405477][ T6883] Unknown options in mask 5 [ 196.923399][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 197.100336][ T6916] veth0_vlan: entered allmulticast mode [ 199.242973][ T6937] Unknown options in mask 5 [ 201.447095][ T6952] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.504482][ T2148] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 202.700985][ T2148] usb 3-1: device descriptor read/64, error -71 [ 203.315976][ T2148] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 203.455965][ T2148] usb 3-1: device descriptor read/64, error -71 [ 203.587188][ T2148] usb usb3-port1: attempt power cycle [ 204.131223][ T2148] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 204.867590][ T2148] usb 3-1: device descriptor read/8, error -71 [ 204.935794][ T6981] Unknown options in mask 5 [ 205.345330][ T2148] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 205.438833][ T2148] usb 3-1: device descriptor read/8, error -71 [ 205.546489][ T2148] usb usb3-port1: unable to enumerate USB device [ 205.931996][ T6991] ./cgroup: Can't lookup blockdev [ 208.633573][ T7021] Unknown options in mask 5 [ 209.845537][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.972673][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.181854][ T7044] FAULT_INJECTION: forcing a failure. [ 211.181854][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 211.181900][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.2.283 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 211.181924][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 211.181936][ T7044] Call Trace: [ 211.181944][ T7044] [ 211.181953][ T7044] dump_stack_lvl+0x189/0x250 [ 211.181988][ T7044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.182015][ T7044] ? __pfx__printk+0x10/0x10 [ 211.182049][ T7044] ? lock_acquire+0x175/0x360 [ 211.182074][ T7044] ? __pfx___might_resched+0x10/0x10 [ 211.182109][ T7044] should_fail_ex+0x414/0x560 [ 211.182145][ T7044] should_failslab+0xa8/0x100 [ 211.182177][ T7044] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 211.182207][ T7044] ? __get_vm_area_node+0x131/0x2d0 [ 211.182242][ T7044] __get_vm_area_node+0x131/0x2d0 [ 211.182276][ T7044] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 211.182297][ T7044] ? vc_uniscr_check+0x195/0x7b0 [ 211.182322][ T7044] ? validate_chain+0x897/0x2140 [ 211.182381][ T7044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 211.182410][ T7044] ? vc_uniscr_check+0x195/0x7b0 [ 211.182434][ T7044] vzalloc_noprof+0x79/0x90 [ 211.182453][ T7044] ? vc_uniscr_check+0x195/0x7b0 [ 211.182478][ T7044] vc_uniscr_check+0x195/0x7b0 [ 211.182518][ T7044] vcs_read+0x612/0xdb0 [ 211.182572][ T7044] loop_rw_iter+0x422/0x660 [ 211.182620][ T7044] __io_read+0x131d/0x14f0 [ 211.182654][ T7044] ? __lock_acquire+0xaac/0xd20 [ 211.182706][ T7044] ? __pfx___io_read+0x10/0x10 [ 211.182737][ T7044] ? __fget_files+0x2a/0x420 [ 211.182770][ T7044] ? __fget_files+0x2a/0x420 [ 211.182803][ T7044] io_read+0x1c/0x60 [ 211.182832][ T7044] __io_issue_sqe+0x1d3/0x3b0 [ 211.182864][ T7044] io_issue_sqe+0x165/0x1040 [ 211.182892][ T7044] ? __asan_memset+0x22/0x50 [ 211.182922][ T7044] io_submit_sqes+0xa65/0x1d20 [ 211.182987][ T7044] __se_sys_io_uring_enter+0x2df/0x2b20 [ 211.183038][ T7044] ? ksys_write+0x1cb/0x250 [ 211.183069][ T7044] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 211.183096][ T7044] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 211.183118][ T7044] ? __pfx_vfs_write+0x10/0x10 [ 211.183148][ T7044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.183172][ T7044] ? __fget_files+0x3a0/0x420 [ 211.183210][ T7044] ? fput+0xa0/0xd0 [ 211.183231][ T7044] ? ksys_write+0x1f0/0x250 [ 211.183255][ T7044] ? rcu_is_watching+0x15/0xb0 [ 211.183293][ T7044] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 211.183327][ T7044] do_syscall_64+0xf6/0x210 [ 211.183348][ T7044] ? clear_bhb_loop+0x45/0xa0 [ 211.183374][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.183393][ T7044] RIP: 0033:0x7faa15f8e969 [ 211.183410][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.183427][ T7044] RSP: 002b:00007faa16de2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 211.183447][ T7044] RAX: ffffffffffffffda RBX: 00007faa161b5fa0 RCX: 00007faa15f8e969 [ 211.183462][ T7044] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000007 [ 211.183473][ T7044] RBP: 00007faa16de2090 R08: 0000000000000000 R09: 0000000000000000 [ 211.183485][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.183497][ T7044] R13: 0000000000000000 R14: 00007faa161b5fa0 R15: 00007fff1f8a1388 [ 211.183529][ T7044] [ 211.183872][ T7044] syz.2.283: vmalloc error: size 576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 211.184111][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.2.283 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 211.184134][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 211.184145][ T7044] Call Trace: [ 211.184153][ T7044] [ 211.184160][ T7044] dump_stack_lvl+0x189/0x250 [ 211.184192][ T7044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.184220][ T7044] ? __pfx__printk+0x10/0x10 [ 211.184250][ T7044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 211.184280][ T7044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 211.184313][ T7044] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 211.184347][ T7044] warn_alloc+0x214/0x310 [ 211.184374][ T7044] ? __pfx_warn_alloc+0x10/0x10 [ 211.184406][ T7044] ? __get_vm_area_node+0x27f/0x2d0 [ 211.184444][ T7044] __vmalloc_node_range_noprof+0x316/0x12c0 [ 211.184464][ T7044] ? validate_chain+0x897/0x2140 [ 211.184523][ T7044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 211.184553][ T7044] ? vc_uniscr_check+0x195/0x7b0 [ 211.184578][ T7044] vzalloc_noprof+0x79/0x90 [ 211.184597][ T7044] ? vc_uniscr_check+0x195/0x7b0 [ 211.184622][ T7044] vc_uniscr_check+0x195/0x7b0 [ 211.184661][ T7044] vcs_read+0x612/0xdb0 [ 211.184721][ T7044] loop_rw_iter+0x422/0x660 [ 211.184769][ T7044] __io_read+0x131d/0x14f0 [ 211.184802][ T7044] ? __lock_acquire+0xaac/0xd20 [ 211.184841][ T7044] ? __pfx___io_read+0x10/0x10 [ 211.184872][ T7044] ? __fget_files+0x2a/0x420 [ 211.184905][ T7044] ? __fget_files+0x2a/0x420 [ 211.184937][ T7044] io_read+0x1c/0x60 [ 211.184966][ T7044] __io_issue_sqe+0x1d3/0x3b0 [ 211.184999][ T7044] io_issue_sqe+0x165/0x1040 [ 211.185027][ T7044] ? __asan_memset+0x22/0x50 [ 211.185058][ T7044] io_submit_sqes+0xa65/0x1d20 [ 211.185121][ T7044] __se_sys_io_uring_enter+0x2df/0x2b20 [ 211.185173][ T7044] ? ksys_write+0x1cb/0x250 [ 211.185203][ T7044] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 211.185231][ T7044] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 211.185251][ T7044] ? __pfx_vfs_write+0x10/0x10 [ 211.185281][ T7044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.185306][ T7044] ? __fget_files+0x3a0/0x420 [ 211.185343][ T7044] ? fput+0xa0/0xd0 [ 211.185364][ T7044] ? ksys_write+0x1f0/0x250 [ 211.185388][ T7044] ? rcu_is_watching+0x15/0xb0 [ 211.185426][ T7044] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 211.185459][ T7044] do_syscall_64+0xf6/0x210 [ 211.185481][ T7044] ? clear_bhb_loop+0x45/0xa0 [ 211.185506][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.185525][ T7044] RIP: 0033:0x7faa15f8e969 [ 211.185542][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.185558][ T7044] RSP: 002b:00007faa16de2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 211.185577][ T7044] RAX: ffffffffffffffda RBX: 00007faa161b5fa0 RCX: 00007faa15f8e969 [ 211.185591][ T7044] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000007 [ 211.185603][ T7044] RBP: 00007faa16de2090 R08: 0000000000000000 R09: 0000000000000000 [ 211.185615][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.185626][ T7044] R13: 0000000000000000 R14: 00007faa161b5fa0 R15: 00007fff1f8a1388 [ 211.185661][ T7044] [ 211.225763][ T7044] Mem-Info: [ 211.225786][ T7044] active_anon:307 inactive_anon:7611 isolated_anon:0 [ 211.225786][ T7044] active_file:4396 inactive_file:35667 isolated_file:0 [ 211.225786][ T7044] unevictable:768 dirty:147 writeback:0 [ 211.225786][ T7044] slab_reclaimable:9689 slab_unreclaimable:99728 [ 211.225786][ T7044] mapped:29457 shmem:1401 pagetables:1054 [ 211.225786][ T7044] sec_pagetables:0 bounce:0 [ 211.225786][ T7044] kernel_misc_reclaimable:0 [ 211.225786][ T7044] free:1345219 free_pcp:261 free_cma:0 [ 211.225841][ T7044] Node 0 active_anon:1228kB inactive_anon:30444kB active_file:17508kB inactive_file:142668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117828kB dirty:584kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11184kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 211.225896][ T7044] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 211.225947][ T7044] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.226004][ T7044] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 211.226210][ T7044] Node 0 DMA32 free:1454140kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:1224kB inactive_anon:30440kB active_file:17416kB inactive_file:142656kB unevictable:1536kB writepending:584kB present:3129332kB managed:2564636kB mlocked:0kB bounce:0kB free_pcp:1996kB local_pcp:772kB free_cma:0kB [ 211.226271][ T7044] lowmem_reserve[]: 0 0 0 0 0 [ 211.226317][ T7044] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.226371][ T7044] lowmem_reserve[]: 0 0 0 0 0 [ 211.226416][ T7044] Node 1 Normal free:3910776kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 211.226474][ T7044] lowmem_reserve[]: 0 0 0 0 0 [ 211.226523][ T7044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.226693][ T7044] Node 0 DMA32: 580*4kB (UE) 269*8kB (U) 119*16kB (UME) 97*32kB (UE) 153*64kB (UME) 93*128kB (UME) 36*256kB (UME) 23*512kB (UM) 7*1024kB (UME) 1*2048kB (M) 340*4096kB (UM) = 1454024kB [ 211.226892][ T7044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 211.227013][ T7044] Node 1 Normal: 214*4kB (UME) 56*8kB (UE) 42*16kB (UE) 192*32kB (UME) 85*64kB (UME) 31*128kB (UME) 20*256kB (UME) 10*512kB (UME) 2*1024kB (UM) 5*2048kB (UE) 945*4096kB (M) = 3910776kB [ 211.227218][ T7044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.227237][ T7044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.227254][ T7044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.227272][ T7044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.227289][ T7044] 41466 total pagecache pages [ 211.227302][ T7044] 0 pages in swap cache [ 211.227311][ T7044] Free swap = 124996kB [ 211.227320][ T7044] Total swap = 124996kB [ 211.227330][ T7044] 2097051 pages RAM [ 211.227338][ T7044] 0 pages HighMem/MovableOnly [ 211.227347][ T7044] 424233 pages reserved [ 211.227355][ T7044] 0 pages cma reserved [ 211.749598][ T7035] tmpfs: Bad value for 'mpol' [ 211.893060][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 211.893110][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.893153][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 212.135785][ T5918] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.287312][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 212.307960][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.310043][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.333287][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.335437][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 212.335472][ T5918] usb 5-1: can't read configurations, error -71 [ 213.196618][ T7059] tty tty27: ldisc open failed (-12), clearing slot 26 [ 214.304156][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 214.437192][ T7081] Unknown options in mask 5 [ 216.308193][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.045919][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 217.060754][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.075426][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.307495][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.326329][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 217.357379][ T10] usb 2-1: can't read configurations, error -71 [ 218.268176][ T7128] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.274712][ T7128] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.310937][ T7128] hsr_slave_0: left promiscuous mode [ 218.324842][ T7128] hsr_slave_1: left promiscuous mode [ 218.424172][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.305'. [ 218.464846][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 218.522708][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.305'. [ 218.567368][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.305'. [ 218.872839][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 218.881763][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'. [ 219.681210][ T7141] Unknown options in mask 5 [ 222.044376][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 222.869465][ T5918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 222.925891][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.967001][ T5918] usb 3-1: config 0 descriptor?? [ 223.000858][ T5918] cp210x 3-1:0.0: cp210x converter detected [ 223.011321][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.106180][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.177356][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.193101][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.080537][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 224.089500][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 224.590811][ T5918] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.641765][ T5918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 224.688062][ T7186] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.694589][ T7186] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.057531][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'. [ 225.079991][ T7186] hsr_slave_0: left promiscuous mode [ 225.082357][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 225.107540][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'. [ 225.159646][ T7186] hsr_slave_1: left promiscuous mode [ 225.163654][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'. [ 225.473498][ T5918] usb 3-1: USB disconnect, device number 12 [ 225.545581][ T7195] Unknown options in mask 5 [ 226.007135][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.090246][ T5918] cp210x 3-1:0.0: device disconnected [ 226.113602][ T7188] xt_connbytes: Forcing CT accounting to be enabled [ 226.121274][ T7188] Cannot find set identified by id 0 to match [ 229.006845][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 229.015782][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.333'. [ 229.444680][ T7231] veth0_vlan: entered allmulticast mode [ 229.555857][ T7231] netlink: 248 bytes leftover after parsing attributes in process `syz.2.332'. [ 230.190488][ T5866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.470748][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 230.505043][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.546450][ T7240] netlink: 104 bytes leftover after parsing attributes in process `syz.3.336'. [ 230.594316][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.689333][ T7240] netlink: 300 bytes leftover after parsing attributes in process `syz.3.336'. [ 230.712052][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.717992][ T5918] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 230.731602][ T5866] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 230.743948][ T5866] usb 2-1: can't read configurations, error -71 [ 230.773873][ T7244] Unknown options in mask 5 [ 231.235077][ T5918] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.285545][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.365235][ T5918] usb 5-1: config 0 descriptor?? [ 231.391871][ T5918] cp210x 5-1:0.0: cp210x converter detected [ 231.568324][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 231.647570][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.339'. [ 231.735426][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 231.786415][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 231.860877][ T5918] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 231.936943][ T5918] usb 5-1: cp210x converter now attached to ttyUSB0 [ 232.526428][ T7258] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 233.424201][ T47] usb 5-1: USB disconnect, device number 9 [ 233.486774][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.571064][ T47] cp210x 5-1:0.0: device disconnected [ 234.168520][ T5130] Bluetooth: hci1: command 0x0406 tx timeout [ 234.486316][ T5918] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 234.845763][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 234.858033][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.891094][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.127063][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.141111][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 235.152699][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.171472][ T5918] usb 3-1: config 0 descriptor?? [ 235.460896][ T5811] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.295802][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.415701][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.445038][ T5918] apple 0003:05AC:0245.0002: unknown main item tag 0x1 [ 236.448490][ T5811] usb 5-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 236.471647][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.496945][ T5918] apple 0003:05AC:0245.0002: unknown global tag 0xe [ 236.519758][ T5811] usb 5-1: config 0 descriptor?? [ 236.535040][ T5918] apple 0003:05AC:0245.0002: item 0 0 1 14 parsing failed [ 236.566081][ T5918] apple 0003:05AC:0245.0002: parse failed [ 236.571983][ T5918] apple 0003:05AC:0245.0002: probe with driver apple failed with error -22 [ 236.640534][ T5918] usb 3-1: USB disconnect, device number 13 [ 238.013013][ T5811] usbhid 5-1:0.0: can't add hid device: -71 [ 238.196372][ T5811] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.212323][ T5811] usb 5-1: USB disconnect, device number 10 [ 240.185129][ T7366] FAULT_INJECTION: forcing a failure. [ 240.185129][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 240.226303][ T7366] CPU: 0 UID: 0 PID: 7366 Comm: syz.2.367 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 240.226333][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.226345][ T7366] Call Trace: [ 240.226353][ T7366] [ 240.226361][ T7366] dump_stack_lvl+0x189/0x250 [ 240.226390][ T7366] ? __lock_acquire+0xaac/0xd20 [ 240.226420][ T7366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.226445][ T7366] ? __pfx__printk+0x10/0x10 [ 240.226488][ T7366] ? __might_fault+0xb0/0x130 [ 240.226528][ T7366] should_fail_ex+0x414/0x560 [ 240.226563][ T7366] _copy_from_user+0x2d/0xb0 [ 240.226588][ T7366] ___sys_sendmsg+0x158/0x2a0 [ 240.226612][ T7366] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.226668][ T7366] ? __fget_files+0x2a/0x420 [ 240.226696][ T7366] ? __fget_files+0x3a0/0x420 [ 240.226736][ T7366] __x64_sys_sendmsg+0x19b/0x260 [ 240.226759][ T7366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.226797][ T7366] ? do_syscall_64+0xba/0x210 [ 240.226821][ T7366] do_syscall_64+0xf6/0x210 [ 240.226842][ T7366] ? clear_bhb_loop+0x45/0xa0 [ 240.226866][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.226885][ T7366] RIP: 0033:0x7faa15f8e969 [ 240.226902][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.226918][ T7366] RSP: 002b:00007faa16de2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.226937][ T7366] RAX: ffffffffffffffda RBX: 00007faa161b5fa0 RCX: 00007faa15f8e969 [ 240.226951][ T7366] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 240.226963][ T7366] RBP: 00007faa16de2090 R08: 0000000000000000 R09: 0000000000000000 [ 240.226975][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.226986][ T7366] R13: 0000000000000000 R14: 00007faa161b5fa0 R15: 00007fff1f8a1388 [ 240.227017][ T7366] [ 240.673885][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 240.707636][ T7369] netlink: 56 bytes leftover after parsing attributes in process `syz.0.369'. [ 240.754936][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 241.427053][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.663498][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 241.689597][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.664367][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.682531][ T5866] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.691401][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 242.699889][ T5866] usb 3-1: can't read configurations, error -71 [ 242.863456][ T7400] ipip0: entered allmulticast mode [ 243.576333][ T7402] wlan0 speed is unknown, defaulting to 1000 [ 243.607207][ T7405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.375'. [ 245.828040][ T7425] FAULT_INJECTION: forcing a failure. [ 245.828040][ T7425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.855028][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.1.380 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 245.855055][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 245.855077][ T7425] Call Trace: [ 245.855085][ T7425] [ 245.855092][ T7425] dump_stack_lvl+0x189/0x250 [ 245.855122][ T7425] ? __lock_acquire+0xaac/0xd20 [ 245.855148][ T7425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.855182][ T7425] ? __pfx__printk+0x10/0x10 [ 245.855212][ T7425] ? __might_fault+0xb0/0x130 [ 245.855252][ T7425] should_fail_ex+0x414/0x560 [ 245.855288][ T7425] _copy_from_user+0x2d/0xb0 [ 245.855314][ T7425] ___sys_sendmsg+0x158/0x2a0 [ 245.855339][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.855398][ T7425] ? __fget_files+0x2a/0x420 [ 245.855427][ T7425] ? __fget_files+0x3a0/0x420 [ 245.855467][ T7425] __x64_sys_sendmsg+0x19b/0x260 [ 245.855492][ T7425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.855530][ T7425] ? do_syscall_64+0xba/0x210 [ 245.855554][ T7425] do_syscall_64+0xf6/0x210 [ 245.855574][ T7425] ? clear_bhb_loop+0x45/0xa0 [ 245.855598][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.855617][ T7425] RIP: 0033:0x7fe60ad8e969 [ 245.855640][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.855655][ T7425] RSP: 002b:00007fe608bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.855676][ T7425] RAX: ffffffffffffffda RBX: 00007fe60afb5fa0 RCX: 00007fe60ad8e969 [ 245.855690][ T7425] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 245.855702][ T7425] RBP: 00007fe608bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.855714][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.855725][ T7425] R13: 0000000000000000 R14: 00007fe60afb5fa0 R15: 00007fff6d359ee8 [ 245.855756][ T7425] [ 250.218164][ T7463] FAULT_INJECTION: forcing a failure. [ 250.218164][ T7463] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 250.276787][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.1.389 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 250.276819][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 250.276831][ T7463] Call Trace: [ 250.276839][ T7463] [ 250.276848][ T7463] dump_stack_lvl+0x189/0x250 [ 250.276885][ T7463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.276912][ T7463] ? __pfx__printk+0x10/0x10 [ 250.276945][ T7463] ? fs_reclaim_acquire+0x7d/0x100 [ 250.276976][ T7463] should_fail_ex+0x414/0x560 [ 250.277014][ T7463] prepare_alloc_pages+0x213/0x610 [ 250.277044][ T7463] __alloc_frozen_pages_noprof+0x123/0x370 [ 250.277072][ T7463] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 250.277106][ T7463] ? policy_nodemask+0x27c/0x720 [ 250.277134][ T7463] ? __lock_acquire+0xaac/0xd20 [ 250.277163][ T7463] alloc_pages_mpol+0x232/0x4a0 [ 250.277199][ T7463] vma_alloc_folio_noprof+0xe4/0x200 [ 250.277229][ T7463] ? page_table_check_set+0x16b/0x710 [ 250.277259][ T7463] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 250.277304][ T7463] folio_prealloc+0x30/0x180 [ 250.277337][ T7463] __handle_mm_fault+0x2b28/0x5380 [ 250.277387][ T7463] ? __pfx___handle_mm_fault+0x10/0x10 [ 250.277431][ T7463] ? follow_page_pte+0x888/0x13c0 [ 250.277472][ T7463] handle_mm_fault+0x2d5/0x7f0 [ 250.277500][ T7463] ? vma_is_secretmem+0xd/0x50 [ 250.277537][ T7463] __get_user_pages+0x16f0/0x2a40 [ 250.277607][ T7463] ? __pfx___get_user_pages+0x10/0x10 [ 250.277647][ T7463] __gup_longterm_locked+0x3e3/0x15b0 [ 250.277685][ T7463] ? xdp_umem_pin_pages+0xc6/0x340 [ 250.277711][ T7463] ? rcu_is_watching+0x15/0xb0 [ 250.277738][ T7463] ? xdp_umem_pin_pages+0x52/0x340 [ 250.277760][ T7463] pin_user_pages+0x9e/0xd0 [ 250.277793][ T7463] xdp_umem_pin_pages+0x117/0x340 [ 250.277819][ T7463] xdp_umem_create+0x677/0x8e0 [ 250.277863][ T7463] xsk_setsockopt+0x62a/0x710 [ 250.277895][ T7463] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.277937][ T7463] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 250.277957][ T7463] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.277988][ T7463] do_sock_setsockopt+0x257/0x3e0 [ 250.278013][ T7463] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 250.278030][ T7463] ? __fget_files+0x2a/0x420 [ 250.278065][ T7463] ? __fget_files+0x3a0/0x420 [ 250.278093][ T7463] ? __fget_files+0x2a/0x420 [ 250.278130][ T7463] __x64_sys_setsockopt+0x18b/0x220 [ 250.278153][ T7463] do_syscall_64+0xf6/0x210 [ 250.278170][ T7463] ? clear_bhb_loop+0x45/0xa0 [ 250.278190][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.278205][ T7463] RIP: 0033:0x7fe60ad8e969 [ 250.278220][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.278233][ T7463] RSP: 002b:00007fe608bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.278250][ T7463] RAX: ffffffffffffffda RBX: 00007fe60afb5fa0 RCX: 00007fe60ad8e969 [ 250.278261][ T7463] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000c [ 250.278270][ T7463] RBP: 00007fe608bf6090 R08: 000000000000001c R09: 0000000000000000 [ 250.278280][ T7463] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 250.278290][ T7463] R13: 0000000000000000 R14: 00007fe60afb5fa0 R15: 00007fff6d359ee8 [ 250.278315][ T7463] [ 251.647333][ T7484] tty tty29: ldisc open failed (-12), clearing slot 28 [ 254.851612][ T7543] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 255.293643][ T7550] netlink: 260 bytes leftover after parsing attributes in process `syz.3.407'. [ 256.336786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.343374][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.204573][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.228830][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.271316][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.318336][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.485746][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.508239][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.648412][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.418'. [ 260.867940][ T5130] Bluetooth: hci3: unexpected event for opcode 0x041c [ 264.915809][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 264.924525][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 264.951060][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.3.431'. [ 265.475864][ T5825] Bluetooth: hci3: command 0x0405 tx timeout [ 265.482209][ T5130] Bluetooth: hci3: hardware error 0x00 [ 265.666522][ T7647] fuse: Bad value for 'fd' [ 266.075737][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.276264][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 266.407923][ T5918] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 266.528855][ T5918] usb 3-1: config 179 has no interface number 0 [ 266.756117][ T5918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 266.822798][ T5918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 266.989186][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 267.231450][ T5918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 267.282821][ T10] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 267.350990][ T5918] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 267.360607][ T10] usb 2-1: config 0 has no interface number 0 [ 267.414366][ T10] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.438253][ T5918] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 267.448288][ T10] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 267.448324][ T10] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0x87 has invalid maxpacket 1025, setting to 1024 [ 267.448350][ T10] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 267.566262][ T5918] usb 3-1: config 179 interface 65 has no altsetting 0 [ 267.573873][ T5918] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 267.586500][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.625696][ T5130] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 267.664487][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 267.685741][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.765466][ T10] usb 2-1: Product: syz [ 267.779909][ T10] usb 2-1: Manufacturer: syz [ 267.785477][ T10] usb 2-1: SerialNumber: syz [ 267.917013][ T10] usb 2-1: config 0 descriptor?? [ 267.989643][ T7649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 268.582656][ T5918] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 268.675083][ T5175] input input6: unable to receive magic message: -71 [ 269.898111][ T5175] input input6: unable to receive magic message: -71 [ 270.015877][ T5175] input input6: unable to receive magic message: -71 [ 270.016147][ T5918] usb 3-1: USB disconnect, device number 16 [ 270.022840][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 270.022902][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 271.050730][ T5918] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 271.434723][ T10] usb 2-1: can't set config #0, error -71 [ 271.466825][ T10] usb 2-1: USB disconnect, device number 13 [ 271.626597][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.635478][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.716418][ T7705] overlayfs: failed to resolve './file1': -2 [ 271.734328][ T7709] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 272.354539][ T7717] FAULT_INJECTION: forcing a failure. [ 272.354539][ T7717] name failslab, interval 1, probability 0, space 0, times 0 [ 272.367743][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.2.451 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 272.367771][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.367782][ T7717] Call Trace: [ 272.367789][ T7717] [ 272.367796][ T7717] dump_stack_lvl+0x189/0x250 [ 272.367821][ T7717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.367840][ T7717] ? __pfx__printk+0x10/0x10 [ 272.367866][ T7717] ? __pfx___might_resched+0x10/0x10 [ 272.367884][ T7717] ? fs_reclaim_acquire+0x7d/0x100 [ 272.367902][ T7717] should_fail_ex+0x414/0x560 [ 272.367927][ T7717] should_failslab+0xa8/0x100 [ 272.367950][ T7717] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.367971][ T7717] ? alloc_vmap_area+0x251/0x24d0 [ 272.367995][ T7717] alloc_vmap_area+0x251/0x24d0 [ 272.368031][ T7717] ? __pfx_alloc_vmap_area+0x10/0x10 [ 272.368052][ T7717] ? __kasan_kmalloc+0x93/0xb0 [ 272.368072][ T7717] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 272.368092][ T7717] ? __get_vm_area_node+0x131/0x2d0 [ 272.368115][ T7717] __get_vm_area_node+0x1c5/0x2d0 [ 272.368140][ T7717] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 272.368153][ T7717] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.368175][ T7717] ? rcu_is_watching+0x15/0xb0 [ 272.368201][ T7717] ? trace_sched_exit_tp+0x38/0x120 [ 272.368217][ T7717] ? __schedule+0x16ad/0x4c70 [ 272.368246][ T7717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.368264][ T7717] ? rcu_is_watching+0x15/0xb0 [ 272.368284][ T7717] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.368300][ T7717] __vmalloc_noprof+0x7a/0x90 [ 272.368312][ T7717] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.368329][ T7717] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.368349][ T7717] bpf_prog_alloc+0x3c/0x1a0 [ 272.368367][ T7717] bpf_prog_load+0x735/0x1930 [ 272.368392][ T7717] ? __pfx_bpf_prog_load+0x10/0x10 [ 272.368407][ T7717] ? irqentry_exit+0x74/0x90 [ 272.368432][ T7717] ? __pfx_bpf_lsm_bpf+0x10/0x10 [ 272.368450][ T7717] ? bpf_lsm_bpf+0x9/0x20 [ 272.368465][ T7717] ? security_bpf+0x7e/0x300 [ 272.368482][ T7717] __sys_bpf+0x5f1/0x860 [ 272.368499][ T7717] ? __pfx___sys_bpf+0x10/0x10 [ 272.368524][ T7717] ? ksys_write+0x1f0/0x250 [ 272.368551][ T7717] __x64_sys_bpf+0x7c/0x90 [ 272.368565][ T7717] do_syscall_64+0xf6/0x210 [ 272.368579][ T7717] ? asm_sysvec_call_function_single+0x1a/0x20 [ 272.368593][ T7717] ? clear_bhb_loop+0x45/0xa0 [ 272.368616][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.368635][ T7717] RIP: 0033:0x7faa15f8e969 [ 272.368652][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.368668][ T7717] RSP: 002b:00007faa16dc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.368685][ T7717] RAX: ffffffffffffffda RBX: 00007faa161b6080 RCX: 00007faa15f8e969 [ 272.368695][ T7717] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 272.368704][ T7717] RBP: 00007faa16dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 272.368712][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.368720][ T7717] R13: 0000000000000000 R14: 00007faa161b6080 R15: 00007fff1f8a1388 [ 272.368741][ T7717] [ 272.368820][ T7717] syz.2.451: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.724942][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.2.451 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 272.724972][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.724983][ T7717] Call Trace: [ 272.724990][ T7717] [ 272.724996][ T7717] dump_stack_lvl+0x189/0x250 [ 272.725019][ T7717] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 272.725037][ T7717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.725056][ T7717] ? __pfx__printk+0x10/0x10 [ 272.725079][ T7717] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.725102][ T7717] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.725129][ T7717] warn_alloc+0x214/0x310 [ 272.725144][ T7717] ? kasan_quarantine_put+0xdd/0x220 [ 272.725168][ T7717] ? __pfx_warn_alloc+0x10/0x10 [ 272.725183][ T7717] ? kfree+0x193/0x440 [ 272.725206][ T7717] ? __get_vm_area_node+0x1de/0x2d0 [ 272.725232][ T7717] __vmalloc_node_range_noprof+0x316/0x12c0 [ 272.725252][ T7717] ? rcu_is_watching+0x15/0xb0 [ 272.725273][ T7717] ? trace_sched_exit_tp+0x38/0x120 [ 272.725290][ T7717] ? __schedule+0x16ad/0x4c70 [ 272.725320][ T7717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.725338][ T7717] ? rcu_is_watching+0x15/0xb0 [ 272.725359][ T7717] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.725376][ T7717] __vmalloc_noprof+0x7a/0x90 [ 272.725389][ T7717] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.725407][ T7717] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 272.725427][ T7717] bpf_prog_alloc+0x3c/0x1a0 [ 272.725446][ T7717] bpf_prog_load+0x735/0x1930 [ 272.725471][ T7717] ? __pfx_bpf_prog_load+0x10/0x10 [ 272.725487][ T7717] ? irqentry_exit+0x74/0x90 [ 272.725513][ T7717] ? __pfx_bpf_lsm_bpf+0x10/0x10 [ 272.725532][ T7717] ? bpf_lsm_bpf+0x9/0x20 [ 272.725547][ T7717] ? security_bpf+0x7e/0x300 [ 272.725566][ T7717] __sys_bpf+0x5f1/0x860 [ 272.725583][ T7717] ? __pfx___sys_bpf+0x10/0x10 [ 272.725609][ T7717] ? ksys_write+0x1f0/0x250 [ 272.725650][ T7717] __x64_sys_bpf+0x7c/0x90 [ 272.725670][ T7717] do_syscall_64+0xf6/0x210 [ 272.725690][ T7717] ? asm_sysvec_call_function_single+0x1a/0x20 [ 272.725705][ T7717] ? clear_bhb_loop+0x45/0xa0 [ 272.725722][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.725735][ T7717] RIP: 0033:0x7faa15f8e969 [ 272.725749][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.725760][ T7717] RSP: 002b:00007faa16dc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.725775][ T7717] RAX: ffffffffffffffda RBX: 00007faa161b6080 RCX: 00007faa15f8e969 [ 272.725785][ T7717] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 272.725794][ T7717] RBP: 00007faa16dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 272.725802][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.725810][ T7717] R13: 0000000000000000 R14: 00007faa161b6080 R15: 00007fff1f8a1388 [ 272.725832][ T7717] [ 273.019482][ T7717] Mem-Info: [ 273.022917][ T7717] active_anon:2520 inactive_anon:5302 isolated_anon:0 [ 273.022917][ T7717] active_file:4829 inactive_file:44794 isolated_file:0 [ 273.022917][ T7717] unevictable:768 dirty:171 writeback:0 [ 273.022917][ T7717] slab_reclaimable:9772 slab_unreclaimable:99790 [ 273.022917][ T7717] mapped:29570 shmem:3622 pagetables:1105 [ 273.022917][ T7717] sec_pagetables:0 bounce:0 [ 273.022917][ T7717] kernel_misc_reclaimable:0 [ 273.022917][ T7717] free:1334620 free_pcp:402 free_cma:0 [ 273.075821][ T7717] Node 0 active_anon:10080kB inactive_anon:21208kB active_file:19240kB inactive_file:179176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118280kB dirty:680kB writeback:0kB shmem:12952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11276kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.110148][ T7717] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.148978][ T7717] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.176614][ T7717] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 273.182923][ T7717] Node 0 DMA32 free:1411684kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:10076kB inactive_anon:21204kB active_file:19148kB inactive_file:179164kB unevictable:1536kB writepending:680kB present:3129332kB managed:2564636kB mlocked:0kB bounce:0kB free_pcp:1604kB local_pcp:272kB free_cma:0kB [ 273.214070][ T7717] lowmem_reserve[]: 0 0 0 0 0 [ 273.219441][ T7717] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.254258][ T7717] lowmem_reserve[]: 0 0 0 0 0 [ 273.259607][ T7717] Node 1 Normal free:3910796kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.288664][ T7717] lowmem_reserve[]: 0 0 0 0 0 [ 273.293950][ T7717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.308097][ T7717] Node 0 DMA32: 70*4kB (UME) 99*8kB (UM) 366*16kB (UME) 385*32kB (UM) 356*64kB (UM) 96*128kB (UME) 13*256kB (UME) 12*512kB (UM) 8*1024kB (UME) 2*2048kB (UM) 326*4096kB (UM) = 1411376kB [ 273.328129][ T7717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.342136][ T7717] Node 1 Normal: 213*4kB (UE) 57*8kB (UME) 43*16kB (UME) 192*32kB (UME) 85*64kB (UME) 31*128kB (UME) 20*256kB (UME) 10*512kB (UME) 2*1024kB (UM) 5*2048kB (UE) 945*4096kB (M) = 3910796kB [ 273.381083][ T7717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.391541][ T7717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.401561][ T7717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.413909][ T7717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.424476][ T7717] 53245 total pagecache pages [ 273.430313][ T7717] 0 pages in swap cache [ 273.435417][ T7717] Free swap = 124996kB [ 273.440676][ T7717] Total swap = 124996kB [ 273.446104][ T7717] 2097051 pages RAM [ 273.456554][ T7717] 0 pages HighMem/MovableOnly [ 273.461419][ T7717] 424233 pages reserved [ 273.465792][ T7717] 0 pages cma reserved [ 275.742788][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.766830][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.436123][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 276.797375][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.815830][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.835940][ T10] usb 2-1: config 0 descriptor?? [ 276.849814][ T10] cp210x 2-1:0.0: cp210x converter detected [ 276.927791][ T7746] overlayfs: missing 'workdir' [ 277.263652][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 277.311832][ T7750] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 277.359549][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 278.208765][ T5864] usb 2-1: USB disconnect, device number 14 [ 278.324058][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.056018][ T5864] cp210x 2-1:0.0: device disconnected [ 279.358468][ T5865] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 279.666569][ T5864] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.867307][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 279.875821][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 279.887669][ T5864] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.896434][ T5864] usb 2-1: config 179 has no interface number 0 [ 279.903433][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.904136][ T5864] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 279.933384][ T5864] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 279.945993][ T5864] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 279.958095][ T5864] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 279.971162][ T5864] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.985295][ T5865] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 279.985543][ T5864] usb 2-1: config 179 interface 65 has no altsetting 0 [ 280.002797][ T5864] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 280.012456][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.015712][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.026270][ T7777] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 280.055691][ T5865] usb 5-1: Product: syz [ 280.060060][ T5865] usb 5-1: Manufacturer: syz [ 280.064847][ T5865] usb 5-1: SerialNumber: syz [ 280.088381][ T5864] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 280.110662][ T5865] usb 5-1: config 0 descriptor?? [ 280.157679][ T5865] usb 5-1: bad CDC descriptors [ 280.163957][ T5865] usb 5-1: unsupported MDLM descriptors [ 280.176202][ T5175] input input7: unable to receive magic message: -110 [ 280.190189][ T5175] input input7: unable to receive magic message: -32 [ 280.356592][ T5864] usb 2-1: USB disconnect, device number 15 [ 280.356682][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 280.356736][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 280.413131][ T5864] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 280.427371][ T47] usb 5-1: USB disconnect, device number 11 [ 280.560657][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.621261][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.206999][ T7791] overlayfs: missing 'lowerdir' [ 281.455757][ T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 283.463041][ T47] usb 2-1: device descriptor read/64, error -71 [ 283.701592][ T7794] overlayfs: missing 'workdir' [ 283.917527][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.946081][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.125757][ T47] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 284.275783][ T47] usb 2-1: device descriptor read/64, error -71 [ 284.413183][ T7803] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 285.143222][ T6093] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.248841][ T47] usb usb2-port1: attempt power cycle [ 285.690455][ T7809] autofs: Unknown parameter './file1' [ 286.367108][ T5825] Bluetooth: hci0: unexpected event for opcode 0x041c [ 287.156627][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 287.163091][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.676526][ T5811] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 289.935214][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 289.997791][ T7841] overlayfs: missing 'workdir' [ 290.388314][ T7845] program syz.1.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.436068][ T5130] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 290.444812][ T5130] Bluetooth: hci0: Injecting HCI hardware error event [ 290.454257][ T5825] Bluetooth: hci0: hardware error 0x00 [ 290.653417][ T5811] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.665247][ T5811] usb 3-1: config 179 has no interface number 0 [ 290.672748][ T5811] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 290.695687][ T5811] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 290.707268][ T5811] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 290.718899][ T5811] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 290.730521][ T5811] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 290.744355][ T5811] usb 3-1: config 179 interface 65 has no altsetting 0 [ 290.751377][ T5811] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 290.764159][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.785442][ T7832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.802610][ T5811] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 290.860668][ T5175] input input8: unable to receive magic message: -110 [ 290.875798][ T47] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 290.936785][ T5175] input input8: unable to receive magic message: -32 [ 291.000992][ T5175] input input8: unable to receive magic message: -32 [ 291.036088][ T7848] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 291.088901][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 291.120654][ T5811] usb 3-1: USB disconnect, device number 17 [ 291.121600][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 291.126749][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 291.143761][ T5811] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 291.155105][ T7850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 291.222899][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 291.244362][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.257176][ T7848] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 291.264213][ T47] usb 2-1: config 0 descriptor?? [ 291.490930][ T7860] FAULT_INJECTION: forcing a failure. [ 291.490930][ T7860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.522789][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.3.493 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 291.522821][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 291.522833][ T7860] Call Trace: [ 291.522841][ T7860] [ 291.522850][ T7860] dump_stack_lvl+0x189/0x250 [ 291.522885][ T7860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.522912][ T7860] ? __pfx__printk+0x10/0x10 [ 291.522957][ T7860] should_fail_ex+0x414/0x560 [ 291.522994][ T7860] _copy_to_user+0x31/0xb0 [ 291.523022][ T7860] simple_read_from_buffer+0xe1/0x170 [ 291.523056][ T7860] proc_fail_nth_read+0x1df/0x250 [ 291.523079][ T7860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.523103][ T7860] ? rw_verify_area+0x258/0x650 [ 291.523129][ T7860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.523150][ T7860] vfs_read+0x1fd/0x980 [ 291.523182][ T7860] ? __pfx___mutex_lock+0x10/0x10 [ 291.523202][ T7860] ? __pfx_vfs_read+0x10/0x10 [ 291.523230][ T7860] ? __fget_files+0x2a/0x420 [ 291.523265][ T7860] ? __fget_files+0x3a0/0x420 [ 291.523293][ T7860] ? __fget_files+0x2a/0x420 [ 291.523332][ T7860] ksys_read+0x145/0x250 [ 291.523369][ T7860] ? __pfx_ksys_read+0x10/0x10 [ 291.523400][ T7860] ? do_syscall_64+0xba/0x210 [ 291.523425][ T7860] do_syscall_64+0xf6/0x210 [ 291.523446][ T7860] ? clear_bhb_loop+0x45/0xa0 [ 291.523471][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.523490][ T7860] RIP: 0033:0x7fc41a98d37c [ 291.523509][ T7860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.523526][ T7860] RSP: 002b:00007fc41b888030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.523547][ T7860] RAX: ffffffffffffffda RBX: 00007fc41abb5fa0 RCX: 00007fc41a98d37c [ 291.523562][ T7860] RDX: 000000000000000f RSI: 00007fc41b8880a0 RDI: 0000000000000004 [ 291.523574][ T7860] RBP: 00007fc41b888090 R08: 0000000000000000 R09: 0000000000000000 [ 291.523587][ T7860] R10: 0000200000001680 R11: 0000000000000246 R12: 0000000000000001 [ 291.523599][ T7860] R13: 0000000000000000 R14: 00007fc41abb5fa0 R15: 00007fff84d76dc8 [ 291.523632][ T7860] [ 291.749774][ T47] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 291.757094][ T47] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 291.764268][ T47] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 291.817383][ T47] logitech 0003:046D:C295.0003: hidraw0: USB HID v3.01 Device [HID 046d:c295] on usb-dummy_hcd.1-1/input0 [ 291.885408][ T47] logitech 0003:046D:C295.0003: no inputs found [ 291.984404][ T47] usb 2-1: USB disconnect, device number 19 [ 293.181836][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 293.844322][ T2148] IPVS: starting estimator thread 0... [ 293.935891][ T7875] IPVS: using max 26 ests per chain, 62400 per kthread [ 294.010230][ T7877] Unknown options in mask 5 [ 294.835766][ T5863] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 296.836281][ T7887] overlayfs: missing 'lowerdir' [ 296.855741][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 296.870149][ T5863] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 296.893521][ T5863] usb 5-1: config 0 has no interface number 0 [ 296.930741][ T5863] usb 5-1: config 0 interface 194 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 297.003188][ T5863] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3d.96 [ 297.027377][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.048021][ T5863] usb 5-1: config 0 descriptor?? [ 297.056630][ T7881] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 297.275524][ T5863] ath6kl: Failed to submit usb control message: -71 [ 297.317038][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 297.357128][ T5863] ath6kl: Unable to send get target info: -71 [ 297.537440][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 297.911492][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 297.926836][ T5863] ath6kl_usb 5-1:0.194: probe with driver ath6kl_usb failed with error -71 [ 297.978202][ T5863] usb 5-1: USB disconnect, device number 12 [ 298.477295][ T7897] bridge_slave_1: left allmulticast mode [ 298.483404][ T7897] bridge_slave_1: left promiscuous mode [ 298.512315][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.667672][ T7906] openvswitch: netlink: IP tunnel dst address not specified [ 298.894685][ T7897] bridge_slave_0: left allmulticast mode [ 298.925833][ T7897] bridge_slave_0: left promiscuous mode [ 298.960559][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.065905][ T5865] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 300.608170][ T5865] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 300.633685][ T5865] usb 5-1: config 0 has no interface number 0 [ 300.647802][ T5865] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.658740][ T5865] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 300.886282][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 300.940009][ T5865] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0x87 has invalid maxpacket 1025, setting to 1024 [ 301.425897][ T5865] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 301.463446][ T5865] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 301.535882][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.566625][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 301.570580][ T5865] usb 5-1: Product: syz [ 301.572470][ T7933] FAULT_INJECTION: forcing a failure. [ 301.572470][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.573755][ T7933] [ 301.573763][ T7933] ====================================================== [ 301.573771][ T7933] WARNING: possible circular locking dependency detected [ 301.573786][ T7933] 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 Not tainted [ 301.573797][ T7933] ------------------------------------------------------ [ 301.573805][ T7933] syz.3.511/7933 is trying to acquire lock: [ 301.573816][ T7933] ffffffff8df2fa20 (console_owner){-...}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 301.573887][ T7933] [ 301.573887][ T7933] but task is already holding lock: [ 301.573894][ T7933] ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 301.573946][ T7933] [ 301.573946][ T7933] which lock already depends on the new lock. [ 301.573946][ T7933] [ 301.573953][ T7933] [ 301.573953][ T7933] the existing dependency chain (in reverse order) is: [ 301.573960][ T7933] [ 301.573960][ T7933] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 301.573987][ T7933] lock_acquire+0x120/0x360 [ 301.574011][ T7933] _raw_spin_lock_nested+0x32/0x50 [ 301.574040][ T7933] raw_spin_rq_lock_nested+0x2a/0x140 [ 301.574066][ T7933] task_rq_lock+0xbc/0x470 [ 301.574091][ T7933] cgroup_move_task+0x9a/0x590 [ 301.574120][ T7933] css_set_move_task+0x658/0x9e0 [ 301.574148][ T7933] cgroup_post_fork+0x1ef/0x790 [ 301.574176][ T7933] copy_process+0x37e6/0x3b80 [ 301.574207][ T7933] kernel_clone+0x224/0x7f0 [ 301.574223][ T7933] user_mode_thread+0xdd/0x140 [ 301.574241][ T7933] rest_init+0x23/0x300 [ 301.574263][ T7933] start_kernel+0x470/0x4f0 [ 301.574284][ T7933] x86_64_start_reservations+0x2a/0x30 [ 301.574310][ T7933] x86_64_start_kernel+0x66/0x70 [ 301.574335][ T7933] common_startup_64+0x13e/0x147 [ 301.574361][ T7933] [ 301.574361][ T7933] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 301.574387][ T7933] lock_acquire+0x120/0x360 [ 301.574410][ T7933] _raw_spin_lock_irqsave+0xa7/0xf0 [ 301.574437][ T7933] try_to_wake_up+0x6e/0x1290 [ 301.574456][ T7933] __wake_up_common_lock+0x134/0x1f0 [ 301.574477][ T7933] tty_port_default_wakeup+0xa2/0xf0 [ 301.574499][ T7933] serial8250_tx_chars+0x72e/0x970 [ 301.574516][ T7933] serial8250_handle_irq+0x633/0xbb0 [ 301.574534][ T7933] serial8250_default_handle_irq+0xbf/0x1b0 [ 301.574555][ T7933] serial8250_interrupt+0xa2/0x1d0 [ 301.574581][ T7933] __handle_irq_event_percpu+0x289/0x980 [ 301.574600][ T7933] handle_irq_event+0x8b/0x1e0 [ 301.574617][ T7933] handle_edge_irq+0x24d/0xb60 [ 301.574646][ T7933] __common_interrupt+0x140/0x250 [ 301.574675][ T7933] common_interrupt+0x5e/0xe0 [ 301.574699][ T7933] asm_common_interrupt+0x26/0x40 [ 301.574719][ T7933] [ 301.574719][ T7933] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 301.574746][ T7933] lock_acquire+0x120/0x360 [ 301.574769][ T7933] _raw_spin_lock_irqsave+0xa7/0xf0 [ 301.574796][ T7933] __wake_up_common_lock+0x2f/0x1f0 [ 301.574817][ T7933] tty_port_default_wakeup+0xa2/0xf0 [ 301.574836][ T7933] serial8250_tx_chars+0x72e/0x970 [ 301.574861][ T7933] serial8250_handle_irq+0x633/0xbb0 [ 301.574879][ T7933] serial8250_default_handle_irq+0xbf/0x1b0 [ 301.574901][ T7933] serial8250_interrupt+0xa2/0x1d0 [ 301.574926][ T7933] __handle_irq_event_percpu+0x289/0x980 [ 301.574944][ T7933] handle_irq_event+0x8b/0x1e0 [ 301.574962][ T7933] handle_edge_irq+0x24d/0xb60 [ 301.574990][ T7933] __common_interrupt+0x140/0x250 [ 301.575018][ T7933] common_interrupt+0xb6/0xe0 [ 301.575040][ T7933] asm_common_interrupt+0x26/0x40 [ 301.575058][ T7933] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 301.575086][ T7933] uart_write+0x3ba/0xa40 [ 301.575113][ T7933] n_tty_write+0xd32/0x11d0 [ 301.575135][ T7933] file_tty_write+0x4fe/0x990 [ 301.575163][ T7933] vfs_write+0x548/0xa90 [ 301.575187][ T7933] ksys_write+0x145/0x250 [ 301.575210][ T7933] do_syscall_64+0xf6/0x210 [ 301.575228][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.575247][ T7933] [ 301.575247][ T7933] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 301.575273][ T7933] lock_acquire+0x120/0x360 [ 301.575296][ T7933] _raw_spin_lock_irqsave+0xa7/0xf0 [ 301.575322][ T7933] serial8250_console_write+0x17e/0x1ba0 [ 301.575342][ T7933] console_flush_all+0x728/0xc40 [ 301.575359][ T7933] console_unlock+0xc4/0x270 [ 301.575387][ T7933] vprintk_emit+0x5b7/0x7a0 [ 301.575414][ T7933] _printk+0xcf/0x120 [ 301.575442][ T7933] register_console+0xa8b/0xf90 [ 301.575459][ T7933] univ8250_console_init+0x52/0x90 [ 301.575479][ T7933] console_init+0x1a1/0x670 [ 301.575500][ T7933] start_kernel+0x2cb/0x4f0 [ 301.575519][ T7933] x86_64_start_reservations+0x2a/0x30 [ 301.575545][ T7933] x86_64_start_kernel+0x66/0x70 [ 301.575571][ T7933] common_startup_64+0x13e/0x147 [ 301.575597][ T7933] [ 301.575597][ T7933] -> #0 (console_owner){-...}-{0:0}: [ 301.575623][ T7933] validate_chain+0xb9b/0x2140 [ 301.575650][ T7933] __lock_acquire+0xaac/0xd20 [ 301.575673][ T7933] lock_acquire+0x120/0x360 [ 301.575695][ T7933] vprintk_emit+0x460/0x7a0 [ 301.575722][ T7933] _printk+0xcf/0x120 [ 301.575749][ T7933] should_fail_ex+0x3f5/0x560 [ 301.575778][ T7933] strncpy_from_user+0x36/0x290 [ 301.575804][ T7933] strncpy_from_user_nofault+0x72/0x140 [ 301.575822][ T7933] bpf_probe_read_user_str+0x2a/0x70 [ 301.575846][ T7933] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 301.575868][ T7933] bpf_trace_run4+0x28b/0x4a0 [ 301.575886][ T7933] __bpf_trace_sched_switch+0x17a/0x1e0 [ 301.575905][ T7933] __traceiter_sched_switch+0x9a/0xd0 [ 301.575926][ T7933] __schedule+0x22b0/0x4c70 [ 301.575950][ T7933] preempt_schedule_irq+0xb5/0x150 [ 301.575973][ T7933] irqentry_exit+0x6f/0x90 [ 301.575985][ T7933] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.576000][ T7933] kasan_check_range+0x18d/0x2b0 [ 301.576022][ T7933] __asan_memset+0x22/0x50 [ 301.576037][ T7933] __alloc_skb+0x16b/0x2d0 [ 301.576050][ T7933] netlink_sendmsg+0x5c6/0xb30 [ 301.576072][ T7933] __sock_sendmsg+0x219/0x270 [ 301.576092][ T7933] ____sys_sendmsg+0x505/0x830 [ 301.576106][ T7933] ___sys_sendmsg+0x21f/0x2a0 [ 301.576120][ T7933] __x64_sys_sendmsg+0x19b/0x260 [ 301.576134][ T7933] do_syscall_64+0xf6/0x210 [ 301.576148][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.576162][ T7933] [ 301.576162][ T7933] other info that might help us debug this: [ 301.576162][ T7933] [ 301.576167][ T7933] Chain exists of: [ 301.576167][ T7933] console_owner --> &p->pi_lock --> &rq->__lock [ 301.576167][ T7933] [ 301.576190][ T7933] Possible unsafe locking scenario: [ 301.576190][ T7933] [ 301.576195][ T7933] CPU0 CPU1 [ 301.576200][ T7933] ---- ---- [ 301.576205][ T7933] lock(&rq->__lock); [ 301.576214][ T7933] lock(&p->pi_lock); [ 301.576225][ T7933] lock(&rq->__lock); [ 301.576235][ T7933] lock(console_owner); [ 301.576245][ T7933] [ 301.576245][ T7933] *** DEADLOCK *** [ 301.576245][ T7933] [ 301.576249][ T7933] 2 locks held by syz.3.511/7933: [ 301.576258][ T7933] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 301.576299][ T7933] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 301.576333][ T7933] [ 301.576333][ T7933] stack backtrace: [ 301.576341][ T7933] CPU: 1 UID: 0 PID: 7933 Comm: syz.3.511 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 301.576359][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.576370][ T7933] Call Trace: [ 301.576376][ T7933] [ 301.576382][ T7933] dump_stack_lvl+0x189/0x250 [ 301.576405][ T7933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.576426][ T7933] ? __pfx__printk+0x10/0x10 [ 301.576450][ T7933] ? print_lock_name+0xde/0x100 [ 301.576474][ T7933] print_circular_bug+0x2ee/0x310 [ 301.576500][ T7933] check_noncircular+0x134/0x160 [ 301.576526][ T7933] validate_chain+0xb9b/0x2140 [ 301.576558][ T7933] __lock_acquire+0xaac/0xd20 [ 301.576579][ T7933] ? vprintk_emit+0x444/0x7a0 [ 301.576601][ T7933] lock_acquire+0x120/0x360 [ 301.576620][ T7933] ? vprintk_emit+0x444/0x7a0 [ 301.576645][ T7933] ? do_raw_spin_unlock+0x122/0x240 [ 301.576660][ T7933] ? vprintk_emit+0x444/0x7a0 [ 301.576683][ T7933] vprintk_emit+0x460/0x7a0 [ 301.576705][ T7933] ? vprintk_emit+0x444/0x7a0 [ 301.576728][ T7933] ? __pfx_vprintk_emit+0x10/0x10 [ 301.576751][ T7933] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 301.576776][ T7933] ? __bad_area_nosemaphore+0x11a/0x780 [ 301.576800][ T7933] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 301.576827][ T7933] _printk+0xcf/0x120 [ 301.576848][ T7933] ? do_user_addr_fault+0x100d/0x1390 [ 301.576880][ T7933] ? __pfx__printk+0x10/0x10 [ 301.576903][ T7933] ? exc_page_fault+0x91/0x110 [ 301.576931][ T7933] should_fail_ex+0x3f5/0x560 [ 301.576955][ T7933] strncpy_from_user+0x36/0x290 [ 301.576979][ T7933] strncpy_from_user_nofault+0x72/0x140 [ 301.576995][ T7933] bpf_probe_read_user_str+0x2a/0x70 [ 301.577015][ T7933] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 301.577027][ T7933] bpf_trace_run4+0x28b/0x4a0 [ 301.577042][ T7933] ? bpf_trace_run4+0x19c/0x4a0 [ 301.577057][ T7933] ? __pfx_bpf_trace_run4+0x10/0x10 [ 301.577071][ T7933] ? kvm_sched_clock_read+0x11/0x20 [ 301.577094][ T7933] ? sched_clock_cpu+0x74/0x430 [ 301.577117][ T7933] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 301.577135][ T7933] __bpf_trace_sched_switch+0x17a/0x1e0 [ 301.577152][ T7933] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 301.577168][ T7933] ? psi_group_change+0xbc7/0x1210 [ 301.577191][ T7933] ? rcu_read_lock_sched_held+0x89/0x100 [ 301.577213][ T7933] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 301.577237][ T7933] ? psi_task_switch+0x318/0x6d0 [ 301.577262][ T7933] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 301.577287][ T7933] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 301.577304][ T7933] __traceiter_sched_switch+0x9a/0xd0 [ 301.577322][ T7933] __schedule+0x22b0/0x4c70 [ 301.577351][ T7933] ? preempt_schedule_irq+0xb5/0x150 [ 301.577373][ T7933] ? kasan_save_track+0x4f/0x80 [ 301.577392][ T7933] ? __kasan_slab_alloc+0x6c/0x80 [ 301.577414][ T7933] ? __pfx___schedule+0x10/0x10 [ 301.577434][ T7933] ? __x64_sys_sendmsg+0x19b/0x260 [ 301.577449][ T7933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.577471][ T7933] ? preempt_schedule_irq+0xaa/0x150 [ 301.577495][ T7933] preempt_schedule_irq+0xb5/0x150 [ 301.577518][ T7933] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 301.577545][ T7933] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 301.577568][ T7933] irqentry_exit+0x6f/0x90 [ 301.577581][ T7933] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.577597][ T7933] RIP: 0010:kasan_check_range+0x18d/0x2b0 [ 301.577623][ T7933] Code: 85 e4 4d 0f 49 ec 49 c1 ed 03 45 85 ed 74 24 45 31 f6 4f 8b 3c 33 4d 85 ff 75 4f 49 83 c6 08 41 ff cd 75 ee 4d 89 cc 4d 29 dc <4d> 29 f4 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 [ 301.577636][ T7933] RSP: 0018:ffffc9001b7df840 EFLAGS: 00000207 [ 301.577649][ T7933] RAX: ffff8880593a6d01 RBX: dffffc0000000001 RCX: ffffffff8930b52b [ 301.577661][ T7933] RDX: 0000000000000001 RSI: 00000000000000c8 RDI: ffff8880578d4500 [ 301.577672][ T7933] RBP: 0000000000000000 R08: ffff8880578d45c7 R09: 1ffff1100af1a8b8 [ 301.577682][ T7933] R10: dffffc0000000000 R11: ffffed100af1a8a0 R12: 2000040000000018 [ 301.577694][ T7933] R13: 0000000000000000 R14: 0000000000000018 R15: 0000000000000000 [ 301.577707][ T7933] ? __alloc_skb+0x16b/0x2d0 [ 301.577725][ T7933] __asan_memset+0x22/0x50 [ 301.577743][ T7933] __alloc_skb+0x16b/0x2d0 [ 301.577758][ T7933] netlink_sendmsg+0x5c6/0xb30 [ 301.577781][ T7933] ? is_bpf_text_address+0x26/0x2b0 [ 301.577804][ T7933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.577831][ T7933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.577846][ T7933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.577877][ T7933] __sock_sendmsg+0x219/0x270 [ 301.577903][ T7933] ____sys_sendmsg+0x505/0x830 [ 301.577919][ T7933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.577937][ T7933] ? import_iovec+0x74/0xa0 [ 301.577956][ T7933] ___sys_sendmsg+0x21f/0x2a0 [ 301.577971][ T7933] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.577999][ T7933] ? __fget_files+0x2a/0x420 [ 301.578020][ T7933] ? __fget_files+0x3a0/0x420 [ 301.578044][ T7933] __x64_sys_sendmsg+0x19b/0x260 [ 301.578059][ T7933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.578081][ T7933] ? do_syscall_64+0xba/0x210 [ 301.578096][ T7933] do_syscall_64+0xf6/0x210 [ 301.578110][ T7933] ? clear_bhb_loop+0x45/0xa0 [ 301.578125][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.578138][ T7933] RIP: 0033:0x7fc41a98e969 [ 301.578150][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.578162][ T7933] RSP: 002b:00007fc41b888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.578176][ T7933] RAX: ffffffffffffffda RBX: 00007fc41abb5fa0 RCX: 00007fc41a98e969 [ 301.578186][ T7933] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 301.578195][ T7933] RBP: 00007fc41b888090 R08: 0000000000000000 R09: 0000000000000000 [ 301.578203][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.578212][ T7933] R13: 0000000000000000 R14: 00007fc41abb5fa0 R15: 00007fff84d76dc8 [ 301.578227][ T7933] [ 302.888214][ T7933] CPU: 1 UID: 0 PID: 7933 Comm: syz.3.511 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 302.888235][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 302.888247][ T7933] Call Trace: [ 302.888255][ T7933] [ 302.888267][ T7933] dump_stack_lvl+0x189/0x250 [ 302.888290][ T7933] ? do_user_addr_fault+0x100d/0x1390 [ 302.888313][ T7933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.888331][ T7933] ? __pfx__printk+0x10/0x10 [ 302.888353][ T7933] ? exc_page_fault+0x91/0x110 [ 302.888379][ T7933] should_fail_ex+0x414/0x560 [ 302.888402][ T7933] strncpy_from_user+0x36/0x290 [ 302.888424][ T7933] strncpy_from_user_nofault+0x72/0x140 [ 302.888439][ T7933] bpf_probe_read_user_str+0x2a/0x70 [ 302.888459][ T7933] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 302.888483][ T7933] bpf_trace_run4+0x28b/0x4a0 [ 302.888497][ T7933] ? bpf_trace_run4+0x19c/0x4a0 [ 302.888511][ T7933] ? __pfx_bpf_trace_run4+0x10/0x10 [ 302.888523][ T7933] ? kvm_sched_clock_read+0x11/0x20 [ 302.888543][ T7933] ? sched_clock_cpu+0x74/0x430 [ 302.888565][ T7933] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 302.888582][ T7933] __bpf_trace_sched_switch+0x17a/0x1e0 [ 302.888599][ T7933] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 302.888613][ T7933] ? psi_group_change+0xbc7/0x1210 [ 302.888634][ T7933] ? rcu_read_lock_sched_held+0x89/0x100 [ 302.888654][ T7933] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 302.888676][ T7933] ? psi_task_switch+0x318/0x6d0 [ 302.888699][ T7933] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 302.888722][ T7933] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 302.888737][ T7933] __traceiter_sched_switch+0x9a/0xd0 [ 302.888755][ T7933] __schedule+0x22b0/0x4c70 [ 302.888782][ T7933] ? preempt_schedule_irq+0xb5/0x150 [ 302.888801][ T7933] ? kasan_save_track+0x4f/0x80 [ 302.888820][ T7933] ? __kasan_slab_alloc+0x6c/0x80 [ 302.888840][ T7933] ? __pfx___schedule+0x10/0x10 [ 302.888858][ T7933] ? __x64_sys_sendmsg+0x19b/0x260 [ 302.888873][ T7933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.888893][ T7933] ? preempt_schedule_irq+0xaa/0x150 [ 302.888915][ T7933] preempt_schedule_irq+0xb5/0x150 [ 302.888936][ T7933] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 302.888960][ T7933] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 302.888981][ T7933] irqentry_exit+0x6f/0x90 [ 302.888993][ T7933] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.889009][ T7933] RIP: 0010:kasan_check_range+0x18d/0x2b0 [ 302.889036][ T7933] Code: 85 e4 4d 0f 49 ec 49 c1 ed 03 45 85 ed 74 24 45 31 f6 4f 8b 3c 33 4d 85 ff 75 4f 49 83 c6 08 41 ff cd 75 ee 4d 89 cc 4d 29 dc <4d> 29 f4 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 [ 302.889048][ T7933] RSP: 0018:ffffc9001b7df840 EFLAGS: 00000207 [ 302.889061][ T7933] RAX: ffff8880593a6d01 RBX: dffffc0000000001 RCX: ffffffff8930b52b [ 302.889072][ T7933] RDX: 0000000000000001 RSI: 00000000000000c8 RDI: ffff8880578d4500 [ 302.889082][ T7933] RBP: 0000000000000000 R08: ffff8880578d45c7 R09: 1ffff1100af1a8b8 [ 302.889092][ T7933] R10: dffffc0000000000 R11: ffffed100af1a8a0 R12: 2000040000000018 [ 302.889103][ T7933] R13: 0000000000000000 R14: 0000000000000018 R15: 0000000000000000 [ 302.889115][ T7933] ? __alloc_skb+0x16b/0x2d0 [ 302.889132][ T7933] __asan_memset+0x22/0x50 [ 302.889148][ T7933] __alloc_skb+0x16b/0x2d0 [ 302.889163][ T7933] netlink_sendmsg+0x5c6/0xb30 [ 302.889184][ T7933] ? is_bpf_text_address+0x26/0x2b0 [ 302.889205][ T7933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.889230][ T7933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.889244][ T7933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.889265][ T7933] __sock_sendmsg+0x219/0x270 [ 302.889285][ T7933] ____sys_sendmsg+0x505/0x830 [ 302.889302][ T7933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.889320][ T7933] ? import_iovec+0x74/0xa0 [ 302.889339][ T7933] ___sys_sendmsg+0x21f/0x2a0 [ 302.889354][ T7933] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.889382][ T7933] ? __fget_files+0x2a/0x420 [ 302.889403][ T7933] ? __fget_files+0x3a0/0x420 [ 302.889427][ T7933] __x64_sys_sendmsg+0x19b/0x260 [ 302.889443][ T7933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.889464][ T7933] ? do_syscall_64+0xba/0x210 [ 302.889484][ T7933] do_syscall_64+0xf6/0x210 [ 302.889498][ T7933] ? clear_bhb_loop+0x45/0xa0 [ 302.889514][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.889528][ T7933] RIP: 0033:0x7fc41a98e969 [ 302.889540][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.889552][ T7933] RSP: 002b:00007fc41b888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.889565][ T7933] RAX: ffffffffffffffda RBX: 00007fc41abb5fa0 RCX: 00007fc41a98e969 [ 302.889576][ T7933] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 302.889584][ T7933] RBP: 00007fc41b888090 R08: 0000000000000000 R09: 0000000000000000 [ 302.889593][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.889601][ T7933] R13: 0000000000000000 R14: 00007fc41abb5fa0 R15: 00007fff84d76dc8 [ 302.889617][ T7933] [ 303.375364][ T5865] usb 5-1: Manufacturer: syz [ 303.380195][ T5865] usb 5-1: SerialNumber: syz [ 303.405410][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 303.431726][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 303.439171][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 303.441054][ T5865] usb 5-1: config 0 descriptor?? [ 303.449747][ T5864] usb 2-1: unable to read config index 0 descriptor/all [ 303.453624][ T7922] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 303.459634][ T5864] usb 2-1: can't read configurations, error -32 [ 303.467608][ T5865] qmi_wwan 5-1:0.197: probe with driver qmi_wwan failed with error -22 [ 304.040678][ T5863] usb 5-1: USB disconnect, device number 13