last executing test programs: 34.805883447s ago: executing program 4 (id=11534): userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/223, 0xdf}], 0x3}}], 0x1, 0x21, 0x0) recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 33.847748519s ago: executing program 4 (id=11547): unshare(0x4020400) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, 0x0) 33.650075718s ago: executing program 4 (id=11548): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x9) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r3, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) 32.286053055s ago: executing program 4 (id=11557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 32.176084688s ago: executing program 4 (id=11558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x2c, 0x68, 0x3, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x2}]}]}, 0x2c}, 0x1, 0x2000000000000000}, 0x40000c0) 31.958045123s ago: executing program 4 (id=11560): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 16.751192665s ago: executing program 32 (id=11560): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 12.273787625s ago: executing program 0 (id=11704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 10.629639188s ago: executing program 0 (id=11709): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x18100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "206432d78ca32ab3", "2e57f638f35065944101148c48e25075", "8d7bf25e", "13cf4eff79ca572a"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) msgget(0x1, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r4, 0x4000) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 10.349280438s ago: executing program 0 (id=11713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="58000000020601080000000000000000050000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080008c0000000d814000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x24014000}, 0x240488d5) socket$inet6_sctp(0xa, 0x5, 0x84) 10.161918973s ago: executing program 0 (id=11715): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8.915692886s ago: executing program 0 (id=11717): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x40000, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 8.693603531s ago: executing program 0 (id=11718): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r3, &(0x7f0000000040), 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000002a0000000800ffff000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030010000a20dde78ed90ef1654e773182353948d1e3ea3d38ce0ff8bb9a05a783b06326a7af0f48cb3ffcdca5fdf5f2dc5bce4de60430a73fe7f7a52eb710d028fab606f161f32034218fb5dc78ece496c6782881c6edc06fe9e46bd9d04f8e7d3ea41841d158fe58e368a128803766a8d57cd6"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4994) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000100), 0x4) 7.694435908s ago: executing program 3 (id=11724): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000580)=""/103) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000bc0)=ANY=[], 0x6dc}], 0x2}, 0x20044051) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001200971101000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468315f746f5f68737200000000"], 0x34}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r4, 0x40044591, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x21, 0x1, 0x26, 0xff}]}], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000580)=""/103) (async) socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000bc0)=ANY=[], 0x6dc}], 0x2}, 0x20044051) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001200971101000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468315f746f5f68737200000000"], 0x34}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) (async) ioctl$FS_IOC_RESVSP(r4, 0x40044591, 0x0) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) ioctl$SG_IO(r5, 0x2285, 0x0) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) (async) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x21, 0x1, 0x26, 0xff}]}], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) (async) 6.062384843s ago: executing program 3 (id=11735): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.105102176s ago: executing program 5 (id=11736): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4044890) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x18100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "206432d78ca32ab3", "2e57f638f35065944101148c48e25075", "8d7bf25e", "13cf4eff79ca572a"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) msgget(0x1, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r3, 0x4000) close(r3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 5.069071111s ago: executing program 1 (id=11737): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f00000002c0)) 4.208926035s ago: executing program 3 (id=11739): unshare(0x40020080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x6, @multicast1, 0x4e20, 0x3, 'lblc\x00', 0x1, 0x6, 0x48}, 0x2c) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 4.162138696s ago: executing program 2 (id=11740): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x40000, 0x0, 0x0) 4.156836104s ago: executing program 1 (id=11742): shutdown(0xffffffffffffffff, 0x1) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x2004, 0x0, 0x0, 0x0, 0x7}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./control\x00') r2 = inotify_init1(0x400) landlock_restrict_self(0xffffffffffffffff, 0x5) inotify_add_watch(r2, 0x0, 0xa4000960) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000700)=ANY=[@ANYBLOB="12011001000000406b1d018140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0c240201060201400a000c0509040100000102000009040101010102000009050109758b06200107250100060d000904020000010200000904020101010200001124020129040803000c0000000000000007240116050110090582090002ff08ff0725"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4843) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x4008883}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000005c0)={0x2004}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x6, 0x0) 3.966237911s ago: executing program 5 (id=11743): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'ovf\x00', 0x1d, 0x2, 0x60}, {@loopback, 0x4e23, 0x10000, 0x1, 0x9, 0xfffffffb}}, 0x44) 3.793989248s ago: executing program 2 (id=11744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.79369174s ago: executing program 5 (id=11745): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r1, 0x40045436, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000008600)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) r5 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x1b, &(0x7f00000042c0), 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r6 = inotify_init() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x1400037e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r6, &(0x7f0000001fc0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @local, 0xafdd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x20040) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.65250793s ago: executing program 3 (id=11746): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = getegid() r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_io_uring_complete(0x0) sendmmsg$unix(r2, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f00000000c0), 0x2, &(0x7f0000000900), 0x9c, 0x2000c080}}, {{0x0, 0x0, &(0x7f0000000ac0), 0x4, 0x0, 0x0, 0x8001}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e1e}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="f5f93627e0efb9beccbb0e6265500143c44d9cbe2fd0a3241b970bbf30114fc4bf0b3ff38a2e14418cbf653a287f3d0b577ffc92bf72c229dae0360cc2216c3a867d41f4ae9711c08a95432c13fc0f0210154ad085a343650e5d0fc443a063bbc007b1dc2b3fe237fdfbf30e426063426fcb5f87ccd678668e7088ad88a2012768d8fd4b759a02b2eb6af19167954761613e8465f773823536ddcc57337ec182616eb055694455185d08fa830faa44757e96753f5f737862c617a5f0ea656cc5636ddac93bfcffb4621824c30085c8bfed0bee3d8ee282bcb547f773cb139046826924e895d14bb60e733c7a65db8470fe5bea4cd3fd81", 0xf7}, {&(0x7f0000000c80)="f22ea8fe54d703d3503b65b4afaea35225149fb9617a56e4f93087bca1193ca2d9dee1d47512de5bd5e00d0c8c6e209b4192457642d6de4175f2454e6a2b193435ebb901fea4b7fe2e0fb551a3e05e4c7b6b4c25ffb10bad4c593d341091c15b587b7a4311712dad6c46c3dac64044f5df29", 0x72}, {&(0x7f0000000d00)="34d665eaf40d08f545f6a29d5aa50d05dfc3ee75a8681daada09e096d319297cec4b8df80a2d8dab652ae4f459778b20eb4476d5a995ad2bcc875703f23ba003229b171760fadcbef13e083ca9af143a37fdc547475b96a0ab3e9c505b687dc7a4a353982bf61cbfa7e36cc1e4d49c46134003530e0a0f60452cdee682225c0c862bc1ed3380f84439545b44ae03ffb3c889b42a50a06f63c8db30ffd6fbfb002a742d", 0xa3}, {&(0x7f0000000dc0)="b88c601c0f248cba111ff210376d5337f0e9a4b76fd0ed6bbf7ddbb7fea258dad416e6a9947865aa1aca7afab6da5baab662e288df4e8742312ab057c2f6cff77bd03b96876afaef5b1cf5aa41d42c49f6f2dd4cd0bdbecb7b86d6bec96c9c1766fee2d74fb50f3bc900624015597522224981055bdcc6dae3185d5fc081341a2b4784ba3fec58f5866403698d82a7a13e4d36fa6e100756878e31008e465a4dd8133a2a961b46929e5bc42a4cf4439fdd13bbec32177e0a1256aa035d4c131ed4fc2f1cc74ad9fe6aa52f7da19f0ec6f9cfab12d5fd297a1cfea752c5684a828c459722f8351900e4df6ef4dc165677", 0xf0}], 0x4, 0x0, 0x0, 0x44000}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000f00)="e08121e93c68c163974ef670bbf06cee7841d2251282d00dfeff75fb35baac9eecafe29c01fb050044db", 0x2a}, {&(0x7f0000000f40)="268b2459e50fdd402e8ac8d5e402ad592ca85d547a0df68697082d83a8fe5b84a62a748ebc9c0ab450d5", 0x2a}, {&(0x7f0000005780)="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", 0x1000}, {&(0x7f0000000f80)="7f9aeb819f8c9b68403652e8ec7a69647f0455cd0591c573b202d210d412e6e177918de84f75b61596b6380d0438f4c01dde0052e2810a3e5f97b8bd35ebe26296ceca0320ab755d6234523a35abb271b4bec3a7e980f49b", 0x58}, {&(0x7f0000003140)="05a87774a38770f92c55d050b0ceae0a54014e1140624378496f3dd030eb376069b6b3268039a9c17305eef58cf4cbab69d3504dfdff77e15175796461ca9b5b380ca8aee8736a409341b45019d6c99be7fd6630377500c19e3cc25a53fc1e1de2d9edee8b9c4b4a2164dbfda16acd715dcfda78672dc2290b95d382056566119341bba5774c5a80c52d0bc0d16bdc53b418473910532b96205a18817ac76e9c39559b4213f7c03df7397a83ef5e34f6da4cf9d79758e8ed36ad5db8fd5a257d02ba3c3c67b78c61", 0xc8}, {&(0x7f0000003240)="064c7c7324033463b721bb1aed94cef9e357751182211e56ca154d68749f1fc9641229f05700ba2559ce203dfde3ca3917ccb31f36872adc9365f910cf4b5cedea004102e8e768f97e2dd816f2ae33653d805f35a3c7e2ef1c75f5cfaa143dbeeaf74a1f0beaf80413828fd953e04e66c3bab5f93278e6718897e2f66cc28efb645bbb1196e3ee88f6fcbbdbf18b5c6fc3f9739172163febb33109c4439a8aa69a916dba38f2d1cb4ba0c6884aff483bbe802f93ddfc2bb404ff2af4610dca27dd5ac952f699a07b043798e7408c67fc131feb640426d54e131091e7fc0c18b5291f42a59774", 0xe6}, {&(0x7f0000003340)="5b4278cc690a1415ceb5fb8e09991a2585d91f2394bf3085c3c57fe811c0a1543479e4c453f1fe7451c1affb2bdc3c3310427b7b6bd5be425dbb946615bf8bd5ff96bfe6b20e557268ee6c59a200ed7dd9680cbe9c6f65a15802060822019341136a4fddd5dd22609d031412bdf94fdaf5bf66fe4224e97ad3379743a800d7af3a54f6228c9648fd498f03dd41d5da67aa5059dd738bc3c325ef0834672498e23c56a69d56438296266f84173e5b632c7e6cb507475bad2092a87ee67465512b1575820db3d75bd685c8cd23ef", 0xcd}, {&(0x7f0000001000)="844987fb50ee3ec7b34cdbfcb14c79b203760b45d6862f89a7f6248a02424e6377a1d87b8241b815e9e8874c018c06858810538538cf7309263e5f887062c84669a68d99304408b6809c2658", 0x4c}, {&(0x7f0000003440)="815347032ab9684135ea29d61229cc6518a1", 0x12}], 0x9, &(0x7f0000006940)=[@rights={{0x20, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, r2, r2]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r4]}}, @rights={{0xfe78, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x14, 0x1, 0x1, [r4, r4]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xe8, 0x801}}, {{&(0x7f0000006a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007bc0)=[{&(0x7f0000006ac0)="3465b7336162cbf412c69712232af1fd1a4173e28298b2c28a5ab57292bbaf0f6c755362d8e4b463f6fded1dfcd0c3e18250820c1c34b3ce3a69ecf3f05052053214549a5a30d3551bcf1dc8ddb2f07844b103ce58e484b2b58393e98c462ab9d809f9ba3b839008a48ecfcee7d0a3b49908ad490a8217c90595fc99ec3bcda6cbfb282591c28ad29362703a18f5739cecdc6aa85f247e931e6462d13324", 0x9e}, {&(0x7f0000006b80)="b11b2280bbd99bac5e89377e041e2f01bb58411242a2016b3ebb28c3fe3072c85b1d832fb4ce4f949a01287c88e513c484ac4bc423b266cdc6", 0x39}, {&(0x7f0000006bc0)="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", 0x1000}], 0x3, &(0x7f0000007cc0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r2, r5, r2, r2, r2]}}], 0x48, 0x4040001}}], 0x5, 0x4) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023893) shutdown(r7, 0x2) recvmmsg(r8, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/123, 0x7b}], 0x1, &(0x7f0000003780)=""/4078, 0xfee}, 0x4}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7d00fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 2.652195797s ago: executing program 5 (id=11747): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = getegid() r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r5 = syz_io_uring_complete(0x0) sendmmsg$unix(r2, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f00000000c0), 0x2, &(0x7f0000000900), 0x9c, 0x2000c080}}, {{0x0, 0x0, &(0x7f0000000ac0), 0x4, 0x0, 0x0, 0x8001}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e1e}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="f5f93627e0efb9beccbb0e6265500143c44d9cbe2fd0a3241b970bbf30114fc4bf0b3ff38a2e14418cbf653a287f3d0b577ffc92bf72c229dae0360cc2216c3a867d41f4ae9711c08a95432c13fc0f0210154ad085a343650e5d0fc443a063bbc007b1dc2b3fe237fdfbf30e426063426fcb5f87ccd678668e7088ad88a2012768d8fd4b759a02b2eb6af19167954761613e8465f773823536ddcc57337ec182616eb055694455185d08fa830faa44757e96753f5f737862c617a5f0ea656cc5636ddac93bfcffb4621824c30085c8bfed0bee3d8ee282bcb547f773cb139046826924e895d14bb60e733c7a65db8470fe5bea4cd3fd81", 0xf7}, {&(0x7f0000000c80)="f22ea8fe54d703d3503b65b4afaea35225149fb9617a56e4f93087bca1193ca2d9dee1d47512de5bd5e00d0c8c6e209b4192457642d6de4175f2454e6a2b193435ebb901fea4b7fe2e0fb551a3e05e4c7b6b4c25ffb10bad4c593d341091c15b587b7a4311712dad6c46c3dac64044f5df29", 0x72}, {&(0x7f0000000d00)="34d665eaf40d08f545f6a29d5aa50d05dfc3ee75a8681daada09e096d319297cec4b8df80a2d8dab652ae4f459778b20eb4476d5a995ad2bcc875703f23ba003229b171760fadcbef13e083ca9af143a37fdc547475b96a0ab3e9c505b687dc7a4a353982bf61cbfa7e36cc1e4d49c46134003530e0a0f60452cdee682225c0c862bc1ed3380f84439545b44ae03ffb3c889b42a50a06f63c8db30ffd6fbfb002a742d", 0xa3}, {&(0x7f0000000dc0)="b88c601c0f248cba111ff210376d5337f0e9a4b76fd0ed6bbf7ddbb7fea258dad416e6a9947865aa1aca7afab6da5baab662e288df4e8742312ab057c2f6cff77bd03b96876afaef5b1cf5aa41d42c49f6f2dd4cd0bdbecb7b86d6bec96c9c1766fee2d74fb50f3bc900624015597522224981055bdcc6dae3185d5fc081341a2b4784ba3fec58f5866403698d82a7a13e4d36fa6e100756878e31008e465a4dd8133a2a961b46929e5bc42a4cf4439fdd13bbec32177e0a1256aa035d4c131ed4fc2f1cc74ad9fe6aa52f7da19f0ec6f9cfab12d5fd297a1cfea752c5684a828c459722f8351900e4df6ef4dc165677", 0xf0}], 0x4, 0x0, 0x0, 0x44000}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000f00)="e08121e93c68c163974ef670bbf06cee7841d2251282d00dfeff75fb35baac9eecafe29c01fb050044db", 0x2a}, {&(0x7f0000000f40)="268b2459e50fdd402e8ac8d5e402ad592ca85d547a0df68697082d83a8fe5b84a62a748ebc9c0ab450d5", 0x2a}, {&(0x7f0000005780)="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", 0x1000}, {&(0x7f0000000f80)="7f9aeb819f8c9b68403652e8ec7a69647f0455cd0591c573b202d210d412e6e177918de84f75b61596b6380d0438f4c01dde0052e2810a3e5f97b8bd35ebe26296ceca0320ab755d6234523a35abb271b4bec3a7e980f49b", 0x58}, {&(0x7f0000003140)="05a87774a38770f92c55d050b0ceae0a54014e1140624378496f3dd030eb376069b6b3268039a9c17305eef58cf4cbab69d3504dfdff77e15175796461ca9b5b380ca8aee8736a409341b45019d6c99be7fd6630377500c19e3cc25a53fc1e1de2d9edee8b9c4b4a2164dbfda16acd715dcfda78672dc2290b95d382056566119341bba5774c5a80c52d0bc0d16bdc53b418473910532b96205a18817ac76e9c39559b4213f7c03df7397a83ef5e34f6da4cf9d79758e8ed36ad5db8fd5a257d02ba3c3c67b78c61", 0xc8}, {&(0x7f0000003240)="064c7c7324033463b721bb1aed94cef9e357751182211e56ca154d68749f1fc9641229f05700ba2559ce203dfde3ca3917ccb31f36872adc9365f910cf4b5cedea004102e8e768f97e2dd816f2ae33653d805f35a3c7e2ef1c75f5cfaa143dbeeaf74a1f0beaf80413828fd953e04e66c3bab5f93278e6718897e2f66cc28efb645bbb1196e3ee88f6fcbbdbf18b5c6fc3f9739172163febb33109c4439a8aa69a916dba38f2d1cb4ba0c6884aff483bbe802f93ddfc2bb404ff2af4610dca27dd5ac952f699a07b043798e7408c67fc131feb640426d54e131091e7fc0c18b5291f42a59774", 0xe6}, {&(0x7f0000003340)="5b4278cc690a1415ceb5fb8e09991a2585d91f2394bf3085c3c57fe811c0a1543479e4c453f1fe7451c1affb2bdc3c3310427b7b6bd5be425dbb946615bf8bd5ff96bfe6b20e557268ee6c59a200ed7dd9680cbe9c6f65a15802060822019341136a4fddd5dd22609d031412bdf94fdaf5bf66fe4224e97ad3379743a800d7af3a54f6228c9648fd498f03dd41d5da67aa5059dd738bc3c325ef0834672498e23c56a69d56438296266f84173e5b632c7e6cb507475bad2092a87ee67465512b1575820db3d75bd685c8cd23ef", 0xcd}, {&(0x7f0000001000)="844987fb50ee3ec7b34cdbfcb14c79b203760b45d6862f89a7f6248a02424e6377a1d87b8241b815e9e8874c018c06858810538538cf7309263e5f887062c84669a68d99304408b6809c2658", 0x4c}, {&(0x7f0000003440)="815347032ab9684135ea29d61229cc6518a1", 0x12}], 0x9, &(0x7f0000006940)=[@rights={{0x20, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, r2, r2]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r4]}}, @rights={{0xfe78, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x14, 0x1, 0x1, [r4, r4]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xe8, 0x801}}, {{&(0x7f0000006a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007bc0)=[{&(0x7f0000006ac0)="3465b7336162cbf412c69712232af1fd1a4173e28298b2c28a5ab57292bbaf0f6c755362d8e4b463f6fded1dfcd0c3e18250820c1c34b3ce3a69ecf3f05052053214549a5a30d3551bcf1dc8ddb2f07844b103ce58e484b2b58393e98c462ab9d809f9ba3b839008a48ecfcee7d0a3b49908ad490a8217c90595fc99ec3bcda6cbfb282591c28ad29362703a18f5739cecdc6aa85f247e931e6462d13324", 0x9e}, {&(0x7f0000006b80)="b11b2280bbd99bac5e89377e041e2f01bb58411242a2016b3ebb28c3fe3072c85b1d832fb4ce4f949a01287c88e513c484ac4bc423b266cdc6", 0x39}, {&(0x7f0000006bc0)="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", 0x1000}], 0x3, &(0x7f0000007cc0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r2, r5, r2, r2, r2]}}], 0x48, 0x4040001}}], 0x5, 0x4) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023893) shutdown(r7, 0x2) recvmmsg(r8, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/123, 0x7b}], 0x1, &(0x7f0000003780)=""/4078, 0xfee}, 0x4}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7d00fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 2.650770836s ago: executing program 2 (id=11755): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2.166826155s ago: executing program 2 (id=11748): unshare(0x22020600) r0 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x2d, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) (fail_nth: 2) 1.350019693s ago: executing program 2 (id=11749): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.020578021s ago: executing program 5 (id=11750): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0xfffffff4, 0x1, 0x3, 0xd59f80, 0x40000004, 0x5, 0xb, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x39, 0x13, {0xffff945a, 0x1}, 0x4d, 0xed}}) 740.61448ms ago: executing program 1 (id=11751): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 410.521492ms ago: executing program 2 (id=11752): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4044890) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x18100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "206432d78ca32ab3", "2e57f638f35065944101148c48e25075", "8d7bf25e", "13cf4eff79ca572a"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) msgget(0x1, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r3, 0x4000) close(r3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 380.263469ms ago: executing program 3 (id=11753): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x40000, 0x0, 0x0) 325.654225ms ago: executing program 1 (id=11754): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'ovf\x00', 0x1d, 0x2, 0x60}, {@loopback, 0x4e23, 0x10000, 0x1, 0x9, 0xfffffffb}}, 0x44) 324.726614ms ago: executing program 5 (id=11756): pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close_range(r0, r1, 0x0) syz_usb_connect$uac1(0xb, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="bbdfc92131c0cb50389aec20c1bc7385018ce3d1ce2e998e1073e086fc8e02e40f20e9d2f34adfc3565e3671979fc73d681827b8a7f4539485da13c774f1c3a9869ed413aeb80ae9bd0b5dfa3577ad0443aa6b", @ANYRESOCT=r1], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08062d0c"], 0xb) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08062d0c"], 0xb) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) (async) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) msgctl$IPC_RMID(0x0, 0x0) 78.02972ms ago: executing program 1 (id=11757): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5100) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0xfffffff4, 0x1, 0x3, 0xd59f80, 0x40000004, 0x5, 0xb, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x39, 0x13, {0xffff945a, 0x1}, 0x4d, 0xed}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xffffff77}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 77.616184ms ago: executing program 3 (id=11758): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r3, &(0x7f0000000040), 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000002a0000000800ffff000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030010000a20dde78ed90ef1654e773182353948d1e3ea3d38ce0ff8bb9a05a783b06326a7af0f48cb3ffcdca5fdf5f2dc5bce4de60430a73fe7f7a52eb710d028fab606f161f32034218fb5dc78ece496c6782881c6edc06fe9e46bd9d04f8e7d3ea41841d158fe58e368a128803766a8d57cd6"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4994) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000100), 0x4) 0s ago: executing program 1 (id=11759): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) shutdown(r0, 0x1) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): B device number 54 using dummy_hcd [ 3135.416220][T12814] CPU: 1 UID: 0 PID: 12814 Comm: syz.0.11204 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3135.416239][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3135.416247][T12814] Call Trace: [ 3135.416252][T12814] [ 3135.416257][T12814] dump_stack_lvl+0x189/0x250 [ 3135.416279][T12814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3135.416293][T12814] ? __pfx__printk+0x10/0x10 [ 3135.416310][T12814] should_fail_ex+0x414/0x560 [ 3135.416327][T12814] _copy_to_user+0x31/0xb0 [ 3135.416339][T12814] simple_read_from_buffer+0xe1/0x170 [ 3135.416355][T12814] proc_fail_nth_read+0x1df/0x250 [ 3135.416370][T12814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3135.416390][T12814] ? rw_verify_area+0x258/0x650 [ 3135.416400][T12814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3135.416413][T12814] vfs_read+0x1fd/0x980 [ 3135.416426][T12814] ? __pfx___mutex_lock+0x10/0x10 [ 3135.416439][T12814] ? __pfx_vfs_read+0x10/0x10 [ 3135.416449][T12814] ? __fget_files+0x2a/0x420 [ 3135.416464][T12814] ? __fget_files+0x3a0/0x420 [ 3135.416474][T12814] ? __fget_files+0x2a/0x420 [ 3135.416490][T12814] ksys_read+0x145/0x250 [ 3135.416501][T12814] ? __pfx_ksys_read+0x10/0x10 [ 3135.416512][T12814] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3135.416525][T12814] ? lockdep_hardirqs_on+0x9c/0x150 [ 3135.416537][T12814] __do_fast_syscall_32+0xb4/0x110 [ 3135.416550][T12814] ? lockdep_hardirqs_on+0x9c/0x150 [ 3135.416563][T12814] do_fast_syscall_32+0x34/0x80 [ 3135.416574][T12814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3135.416588][T12814] RIP: 0023:0xf70be539 [ 3135.416598][T12814] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3135.416606][T12814] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3135.416618][T12814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50ae620 [ 3135.416625][T12814] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 3135.416631][T12814] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3135.416637][T12814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3135.416643][T12814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3135.416658][T12814] [ 3135.684052][ T30] audit: type=1326 audit(1748354042.627:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3135.712377][ T30] audit: type=1326 audit(1748354042.627:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3135.738871][T12802] bond0: (slave bond_slave_1): Releasing backup interface [ 3135.785099][T12802] team0: Port device team_slave_0 removed [ 3135.814989][T21973] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 3135.819933][T12802] team0: Port device team_slave_1 removed [ 3135.844644][T12802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3135.855166][T12802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3135.913958][ T8123] usb 5-1: Using ep0 maxpacket: 8 [ 3135.920869][ T8123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3135.945171][ T8123] usb 5-1: config 4 interface 0 has no altsetting 0 [ 3135.961667][ T8123] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3135.983849][ T8123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.176459][T21973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3136.189510][ T8123] usb 5-1: Product: syz [ 3136.194388][T21973] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3136.203814][ T8123] usb 5-1: Manufacturer: syz [ 3136.213612][ T8123] usb 5-1: SerialNumber: syz [ 3136.250147][T21973] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 3136.259920][T21973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.274241][T21973] usb 2-1: Product: syz [ 3136.278428][T21973] usb 2-1: Manufacturer: syz [ 3136.284004][T21973] usb 2-1: SerialNumber: syz [ 3136.299107][T21973] usb 2-1: config 0 descriptor?? [ 3136.525383][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3136.594550][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3136.686795][ T8137] usb 2-1: USB disconnect, device number 32 [ 3136.713963][ T8138] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 3136.866687][ T8138] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 3136.883309][ T8138] usb 4-1: config 7 has no interface number 0 [ 3136.901302][ T8138] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 3136.914039][ T8138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.922216][ T8138] usb 4-1: Product: syz [ 3136.944964][ T8138] usb 4-1: Manufacturer: syz [ 3136.949608][ T8138] usb 4-1: SerialNumber: syz [ 3137.751597][ T8138] as10x_usb: device has been detected [ 3137.970585][T12816] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3137.973862][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.017649][ T8138] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 3138.026158][ T8123] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3138.034663][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3138.059652][ T8123] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3138.133006][ T8123] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3138.147055][ T8123] usb 5-1: media controller created [ 3138.154827][T12816] usb 2-1: Using ep0 maxpacket: 16 [ 3138.237956][ T8138] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 3138.267503][ T8138] as10x_usb: error during firmware upload part1 [ 3138.277093][ T8138] Registered device Elgato EyeTV DTT Deluxe [ 3138.490244][T12839] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3138.517638][ T8123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3138.522718][T12838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3138.729764][ T8123] zl10353_read_register: readreg error (reg=127, ret==0) [ 3138.941140][ T8137] usb 4-1: USB disconnect, device number 23 [ 3139.032181][T12834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3139.155185][ T8137] Unregistered device Elgato EyeTV DTT Deluxe [ 3139.168396][ T8137] as10x_usb: device has been disconnected [ 3139.267214][ T8123] usb 5-1: USB disconnect, device number 54 [ 3140.913576][T12874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3141.173944][ T8139] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 3141.239743][T12816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3141.257540][T12816] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3141.266811][T12816] usb 2-1: can't read configurations, error -71 [ 3141.349945][T12886] FAULT_INJECTION: forcing a failure. [ 3141.349945][T12886] name failslab, interval 1, probability 0, space 0, times 0 [ 3141.363399][T12886] CPU: 0 UID: 0 PID: 12886 Comm: syz.1.11228 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3141.363426][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3141.363437][T12886] Call Trace: [ 3141.363445][T12886] [ 3141.363454][T12886] dump_stack_lvl+0x189/0x250 [ 3141.363491][T12886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3141.363516][T12886] ? __pfx__printk+0x10/0x10 [ 3141.363540][T12886] ? __pfx___might_resched+0x10/0x10 [ 3141.363583][T12886] should_fail_ex+0x414/0x560 [ 3141.363611][T12886] should_failslab+0xa8/0x100 [ 3141.363634][T12886] __kmalloc_noprof+0xcb/0x4f0 [ 3141.363653][T12886] ? sock_kmalloc+0xd6/0x160 [ 3141.363682][T12886] sock_kmalloc+0xd6/0x160 [ 3141.363707][T12886] af_alg_alloc_areq+0x8d/0x260 [ 3141.363729][T12886] skcipher_recvmsg+0x356/0x11c0 [ 3141.363761][T12886] ? aa_sk_perm+0x81e/0x950 [ 3141.363791][T12886] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 3141.363816][T12886] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 3141.363832][T12886] ? security_socket_recvmsg+0x7e/0x2e0 [ 3141.363858][T12886] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 3141.363881][T12886] sock_recvmsg+0x22c/0x270 [ 3141.363903][T12886] ____sys_recvmsg+0x1c9/0x460 [ 3141.363936][T12886] ? __pfx_____sys_recvmsg+0x10/0x10 [ 3141.363956][T12886] ? get_compat_msghdr+0x37e/0x4a0 [ 3141.363988][T12886] ? get_pid_task+0x20/0x1f0 [ 3141.364012][T12886] ___sys_recvmsg+0x1b5/0x510 [ 3141.364041][T12886] ? __pfx____sys_recvmsg+0x10/0x10 [ 3141.364092][T12886] ? __fget_files+0x3a0/0x420 [ 3141.364123][T12886] __sys_recvmsg+0x161/0x220 [ 3141.364148][T12886] ? __pfx___sys_recvmsg+0x10/0x10 [ 3141.364186][T12886] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3141.364208][T12886] ? lockdep_hardirqs_on+0x9c/0x150 [ 3141.364230][T12886] __do_fast_syscall_32+0xb4/0x110 [ 3141.364252][T12886] ? lockdep_hardirqs_on+0x9c/0x150 [ 3141.364276][T12886] do_fast_syscall_32+0x34/0x80 [ 3141.364297][T12886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3141.364318][T12886] RIP: 0023:0xf703e539 [ 3141.364334][T12886] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3141.364350][T12886] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 3141.364370][T12886] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 3141.364383][T12886] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3141.364395][T12886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3141.364406][T12886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3141.364417][T12886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3141.364446][T12886] [ 3141.624177][ T8123] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 3141.631935][ T8139] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3141.645097][ T8139] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3141.657460][ T8139] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 3141.666638][ T8139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.674334][T12887] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11227'. [ 3141.675037][ T8139] usb 5-1: Product: syz [ 3141.688012][ T8139] usb 5-1: Manufacturer: syz [ 3141.692592][ T8139] usb 5-1: SerialNumber: syz [ 3141.699086][ T8139] usb 5-1: config 0 descriptor?? [ 3141.879003][ T8123] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 3141.893771][ T8123] usb 4-1: config 7 has no interface number 0 [ 3141.902110][ T8123] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 3141.932943][ T8123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.966221][ T8123] usb 4-1: Product: syz [ 3141.970412][ T8123] usb 4-1: Manufacturer: syz [ 3141.985235][ T8123] usb 4-1: SerialNumber: syz [ 3142.123952][T12816] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3142.209448][T12892] FAULT_INJECTION: forcing a failure. [ 3142.209448][T12892] name failslab, interval 1, probability 0, space 0, times 0 [ 3142.223178][T12892] CPU: 1 UID: 0 PID: 12892 Comm: syz.2.11230 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3142.223206][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3142.223218][T12892] Call Trace: [ 3142.223227][T12892] [ 3142.223235][T12892] dump_stack_lvl+0x189/0x250 [ 3142.223268][T12892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3142.223293][T12892] ? __pfx__printk+0x10/0x10 [ 3142.223313][T12892] ? __pfx___might_resched+0x10/0x10 [ 3142.223336][T12892] ? fs_reclaim_acquire+0x7d/0x100 [ 3142.223363][T12892] should_fail_ex+0x414/0x560 [ 3142.223391][T12892] should_failslab+0xa8/0x100 [ 3142.223413][T12892] __kmalloc_noprof+0xcb/0x4f0 [ 3142.223432][T12892] ? tomoyo_encode+0x28b/0x550 [ 3142.223459][T12892] tomoyo_encode+0x28b/0x550 [ 3142.223508][T12892] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3142.223542][T12892] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3142.223563][T12892] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3142.223586][T12892] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3142.223625][T12892] ? __lock_acquire+0xab9/0xd20 [ 3142.223666][T12892] ? __fget_files+0x2a/0x420 [ 3142.223691][T12892] ? __fget_files+0x3a0/0x420 [ 3142.223710][T12892] ? __fget_files+0x2a/0x420 [ 3142.223731][T12892] security_file_ioctl_compat+0xcb/0x2d0 [ 3142.223752][T12892] __ia32_compat_sys_ioctl+0x128/0x840 [ 3142.223779][T12892] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3142.223803][T12892] ? __fget_files+0x3a0/0x420 [ 3142.223830][T12892] ? fput+0xa0/0xd0 [ 3142.223852][T12892] ? ksys_write+0x22a/0x250 [ 3142.223879][T12892] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3142.223908][T12892] ? lockdep_hardirqs_on+0x9c/0x150 [ 3142.223931][T12892] __do_fast_syscall_32+0xb4/0x110 [ 3142.223953][T12892] ? lockdep_hardirqs_on+0x9c/0x150 [ 3142.223985][T12892] do_fast_syscall_32+0x34/0x80 [ 3142.224006][T12892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3142.224026][T12892] RIP: 0023:0xf70de539 [ 3142.224043][T12892] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3142.224059][T12892] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3142.224080][T12892] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 3142.224093][T12892] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 3142.224105][T12892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3142.224116][T12892] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3142.224127][T12892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3142.224157][T12892] [ 3142.488627][T12892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3142.514118][T12816] usb 2-1: Using ep0 maxpacket: 8 [ 3142.521533][T12816] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 3142.529883][T12816] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 3142.538733][T12816] usb 2-1: config 0 has no interface number 0 [ 3142.544941][T12816] usb 2-1: config 0 interface 228 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 3142.556572][T12816] usb 2-1: config 0 interface 228 altsetting 2 endpoint 0xC has an invalid bInterval 62, changing to 7 [ 3142.567732][T12816] usb 2-1: config 0 interface 228 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 3142.578478][T12816] usb 2-1: config 0 interface 228 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3142.589412][T12816] usb 2-1: config 0 interface 228 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 3142.601215][T12816] usb 2-1: config 0 interface 228 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3142.612662][T12816] usb 2-1: config 0 interface 228 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3142.623620][T12816] usb 2-1: config 0 interface 228 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 3142.634447][T12816] usb 2-1: config 0 interface 228 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3142.645470][T12816] usb 2-1: config 0 interface 228 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 3142.656374][T12816] usb 2-1: config 0 interface 228 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 3142.667776][T12816] usb 2-1: config 0 interface 228 has no altsetting 0 [ 3142.677103][T12816] usb 2-1: New USB device found, idVendor=1199, idProduct=0024, bcdDevice=4c.9e [ 3142.686491][T12816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3142.694621][T12816] usb 2-1: Product: syz [ 3142.698813][T12816] usb 2-1: Manufacturer: syz [ 3142.703410][T12816] usb 2-1: SerialNumber: syz [ 3142.711488][T12816] usb 2-1: config 0 descriptor?? [ 3142.718940][T12890] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3142.740687][T12816] sierra 2-1:0.228: Sierra USB modem converter detected [ 3142.819065][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 3142.819084][ T30] audit: type=1326 audit(1748354050.707:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3142.850625][ T8123] as10x_usb: device has been detected [ 3142.871671][ T8123] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 3142.971837][T12816] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 3142.976566][ T30] audit: type=1326 audit(1748354050.747:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.008085][ T30] audit: type=1326 audit(1748354050.777:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.008196][T12816] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 3143.038626][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3143.097086][ T30] audit: type=1326 audit(1748354050.777:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.097567][ T8123] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 3143.120795][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3143.262187][T12902] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3143.310720][ T30] audit: type=1326 audit(1748354050.777:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.396126][ T30] audit: type=1326 audit(1748354050.777:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.466815][T12816] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 3143.475818][ T30] audit: type=1326 audit(1748354050.777:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.510897][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.512558][T12816] usb 2-1: USB disconnect, device number 34 [ 3143.517680][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.523525][ T8123] as10x_usb: error during firmware upload part1 [ 3143.532418][ T30] audit: type=1326 audit(1748354050.777:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.559711][ T30] audit: type=1326 audit(1748354050.777:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.582941][ T30] audit: type=1326 audit(1748354050.777:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.2.11231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 3143.758003][T12897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3143.767848][ T8123] Registered device Elgato EyeTV DTT Deluxe [ 3143.806171][ T5882] usb 5-1: USB disconnect, device number 55 [ 3143.887224][T12816] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 3143.929444][T12816] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 3144.015004][T12816] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 3144.053610][T12816] sierra 2-1:0.228: device disconnected [ 3144.236076][ T5882] usb 4-1: USB disconnect, device number 24 [ 3144.279123][ T5882] Unregistered device Elgato EyeTV DTT Deluxe [ 3144.280707][ T5882] as10x_usb: device has been disconnected [ 3144.542896][T12915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3144.782716][T12921] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11238'. [ 3144.883105][T12924] bond0: entered promiscuous mode [ 3144.890795][T12924] bond_slave_0: entered promiscuous mode [ 3144.924287][T12929] netlink: 'syz.3.11241': attribute type 1 has an invalid length. [ 3144.952531][T12924] bond_slave_1: entered promiscuous mode [ 3144.977092][T12924] team0: entered promiscuous mode [ 3144.982142][T12924] team_slave_0: entered promiscuous mode [ 3145.016622][T12924] team_slave_1: entered promiscuous mode [ 3145.044731][T12935] FAULT_INJECTION: forcing a failure. [ 3145.044731][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 3145.080333][T12936] netlink: 'syz.1.11243': attribute type 1 has an invalid length. [ 3145.114214][T12935] CPU: 1 UID: 0 PID: 12935 Comm: syz.3.11241 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3145.114243][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3145.114255][T12935] Call Trace: [ 3145.114263][T12935] [ 3145.114273][T12935] dump_stack_lvl+0x189/0x250 [ 3145.114304][T12935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3145.114329][T12935] ? __pfx__printk+0x10/0x10 [ 3145.114357][T12935] ? __pfx___might_resched+0x10/0x10 [ 3145.114383][T12935] should_fail_ex+0x414/0x560 [ 3145.114409][T12935] should_failslab+0xa8/0x100 [ 3145.114431][T12935] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3145.114451][T12935] ? __alloc_skb+0x112/0x2d0 [ 3145.114475][T12935] __alloc_skb+0x112/0x2d0 [ 3145.114499][T12935] netlink_sendmsg+0x5c6/0xb30 [ 3145.114528][T12935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3145.114559][T12935] ? __import_iovec+0x5d4/0x7f0 [ 3145.114576][T12935] ? aa_sock_msg_perm+0x94/0x160 [ 3145.114599][T12935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3145.114617][T12935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3145.114638][T12935] __sock_sendmsg+0x21c/0x270 [ 3145.114667][T12935] ____sys_sendmsg+0x505/0x830 [ 3145.114696][T12935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3145.114735][T12935] ___sys_sendmsg+0x21f/0x2a0 [ 3145.114760][T12935] ? __pfx____sys_sendmsg+0x10/0x10 [ 3145.114819][T12935] ? __fget_files+0x2a/0x420 [ 3145.114839][T12935] ? __fget_files+0x3a0/0x420 [ 3145.114870][T12935] __sys_sendmsg+0x164/0x220 [ 3145.114895][T12935] ? __pfx___sys_sendmsg+0x10/0x10 [ 3145.114932][T12935] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3145.114954][T12935] ? lockdep_hardirqs_on+0x9c/0x150 [ 3145.114977][T12935] __do_fast_syscall_32+0xb4/0x110 [ 3145.114999][T12935] ? lockdep_hardirqs_on+0x9c/0x150 [ 3145.115023][T12935] do_fast_syscall_32+0x34/0x80 [ 3145.115045][T12935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3145.115067][T12935] RIP: 0023:0xf7fa7539 [ 3145.115083][T12935] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3145.115099][T12935] RSP: 002b:00000000f508455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3145.115119][T12935] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 3145.115133][T12935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3145.115144][T12935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3145.115155][T12935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3145.115166][T12935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3145.115193][T12935] [ 3145.454745][T12932] bond1: entered promiscuous mode [ 3145.638318][T12932] bond1: entered allmulticast mode [ 3145.647380][T12932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3145.722449][T12940] bridge11: entered promiscuous mode [ 3145.790070][T12942] bond1: entered promiscuous mode [ 3145.819111][T12942] bond1: entered allmulticast mode [ 3145.830333][T12942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3145.861632][T12946] bridge8: entered promiscuous mode [ 3145.894388][T12946] bridge8: entered allmulticast mode [ 3145.911749][T12946] bond1: (slave bridge8): Enslaving as a backup interface with an up link [ 3145.923230][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3146.016616][ T5882] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 3146.063913][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3146.472738][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3146.488657][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3146.501968][ T5882] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 3146.514500][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3146.528363][ T5882] usb 5-1: Product: syz [ 3146.553582][T12960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3146.588304][ T5882] usb 5-1: Manufacturer: syz [ 3146.593135][ T5882] usb 5-1: SerialNumber: syz [ 3146.689364][ T5882] usb 5-1: config 0 descriptor?? [ 3147.284835][T12967] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3147.309609][T12969] FAULT_INJECTION: forcing a failure. [ 3147.309609][T12969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3147.323447][T12969] CPU: 1 UID: 0 PID: 12969 Comm: syz.3.11252 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3147.323463][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3147.323471][T12969] Call Trace: [ 3147.323476][T12969] [ 3147.323480][T12969] dump_stack_lvl+0x189/0x250 [ 3147.323501][T12969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3147.323515][T12969] ? __pfx__printk+0x10/0x10 [ 3147.323532][T12969] should_fail_ex+0x414/0x560 [ 3147.323548][T12969] _copy_to_user+0x31/0xb0 [ 3147.323559][T12969] simple_read_from_buffer+0xe1/0x170 [ 3147.323574][T12969] proc_fail_nth_read+0x1df/0x250 [ 3147.323588][T12969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3147.323602][T12969] ? rw_verify_area+0x258/0x650 [ 3147.323612][T12969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3147.323625][T12969] vfs_read+0x1fd/0x980 [ 3147.323638][T12969] ? __pfx___mutex_lock+0x10/0x10 [ 3147.323650][T12969] ? __pfx_vfs_read+0x10/0x10 [ 3147.323661][T12969] ? __fget_files+0x2a/0x420 [ 3147.323675][T12969] ? __fget_files+0x3a0/0x420 [ 3147.323686][T12969] ? __fget_files+0x2a/0x420 [ 3147.323702][T12969] ksys_read+0x145/0x250 [ 3147.323721][T12969] ? __pfx_ksys_read+0x10/0x10 [ 3147.323738][T12969] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3147.323758][T12969] ? lockdep_hardirqs_on+0x9c/0x150 [ 3147.323777][T12969] __do_fast_syscall_32+0xb4/0x110 [ 3147.323798][T12969] ? lockdep_hardirqs_on+0x9c/0x150 [ 3147.323819][T12969] do_fast_syscall_32+0x34/0x80 [ 3147.323839][T12969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3147.323859][T12969] RIP: 0023:0xf7fa7539 [ 3147.323875][T12969] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3147.323888][T12969] RSP: 002b:00000000f50c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3147.323908][T12969] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50c6620 [ 3147.323920][T12969] RDX: 000000000000000f RSI: 00000000f7432ff4 RDI: 0000000000000000 [ 3147.323931][T12969] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3147.323941][T12969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3147.323951][T12969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3147.323980][T12969] [ 3147.670063][T12961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3148.206925][T12816] usb 5-1: USB disconnect, device number 56 [ 3148.705674][T12816] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3148.770952][T12996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3148.854021][T12816] usb 5-1: device descriptor read/64, error -71 [ 3149.059277][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11263'. [ 3149.108536][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 3149.108554][ T30] audit: type=1326 audit(1748354056.987:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.137452][T12816] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3149.160684][ T30] audit: type=1326 audit(1748354056.987:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.201469][ T30] audit: type=1326 audit(1748354056.987:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.240343][ T30] audit: type=1326 audit(1748354056.987:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.284045][T12816] usb 5-1: device descriptor read/64, error -71 [ 3149.311337][ T30] audit: type=1326 audit(1748354056.987:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.407703][T12816] usb usb5-port1: attempt power cycle [ 3149.471297][ T30] audit: type=1326 audit(1748354056.987:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.522046][ T30] audit: type=1326 audit(1748354056.987:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.561596][T13012] FAULT_INJECTION: forcing a failure. [ 3149.561596][T13012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3149.595215][T13012] CPU: 0 UID: 0 PID: 13012 Comm: syz.0.11265 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3149.595243][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3149.595255][T13012] Call Trace: [ 3149.595266][T13012] [ 3149.595275][T13012] dump_stack_lvl+0x189/0x250 [ 3149.595307][T13012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3149.595332][T13012] ? __pfx__printk+0x10/0x10 [ 3149.595363][T13012] should_fail_ex+0x414/0x560 [ 3149.595391][T13012] _copy_to_user+0x31/0xb0 [ 3149.595413][T13012] simple_read_from_buffer+0xe1/0x170 [ 3149.595439][T13012] proc_fail_nth_read+0x1df/0x250 [ 3149.595465][T13012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3149.595490][T13012] ? rw_verify_area+0x258/0x650 [ 3149.595505][T13012] ? aa_sk_perm+0x81e/0x950 [ 3149.595524][T13012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3149.595548][T13012] vfs_read+0x1fd/0x980 [ 3149.595565][T13012] ? __pfx_aa_sk_perm+0x10/0x10 [ 3149.595583][T13012] ? tomoyo_socket_bind_permission+0x150/0x290 [ 3149.595612][T13012] ? __pfx_vfs_read+0x10/0x10 [ 3149.595636][T13012] ? __sys_bind+0x2e9/0x3e0 [ 3149.595658][T13012] ? __pfx___sys_bind+0x10/0x10 [ 3149.595683][T13012] ksys_read+0x145/0x250 [ 3149.595704][T13012] ? __pfx_ksys_read+0x10/0x10 [ 3149.595724][T13012] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3149.595746][T13012] ? lockdep_hardirqs_on+0x9c/0x150 [ 3149.595769][T13012] __do_fast_syscall_32+0xb4/0x110 [ 3149.595791][T13012] ? lockdep_hardirqs_on+0x9c/0x150 [ 3149.595814][T13012] do_fast_syscall_32+0x34/0x80 [ 3149.595835][T13012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3149.595861][T13012] RIP: 0023:0xf70be539 [ 3149.595879][T13012] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3149.595895][T13012] RSP: 002b:00000000f50ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3149.595916][T13012] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ae620 [ 3149.595930][T13012] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 3149.595942][T13012] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3149.595953][T13012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3149.595964][T13012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3149.595999][T13012] [ 3149.843377][ T30] audit: type=1326 audit(1748354056.987:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.865863][ T30] audit: type=1326 audit(1748354056.987:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.888151][ T30] audit: type=1326 audit(1748354056.987:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.3.11261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3149.923913][T12816] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3150.145123][T12816] usb 5-1: device descriptor read/8, error -71 [ 3150.463915][T12816] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3150.533280][T13020] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3150.583104][T12816] usb 5-1: device descriptor read/8, error -71 [ 3150.706022][T12816] usb usb5-port1: unable to enumerate USB device [ 3151.172247][T13016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3151.292443][T13014] bond0: left promiscuous mode [ 3151.334798][T13014] bond_slave_0: left promiscuous mode [ 3151.356287][T13014] bond_slave_1: left promiscuous mode [ 3151.387285][T13014] team0: left promiscuous mode [ 3151.402865][T13014] team_slave_0: left promiscuous mode [ 3151.575541][T13014] team_slave_1: left promiscuous mode [ 3152.175126][T13038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3152.314019][ T8138] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3152.464056][ T8138] usb 5-1: Using ep0 maxpacket: 32 [ 3152.471193][ T8138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3152.481763][ T8138] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3152.501744][ T8138] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 3152.511324][ T8138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.519779][ T8138] usb 5-1: Product: syz [ 3152.524665][ T8138] usb 5-1: Manufacturer: syz [ 3152.529295][ T8138] usb 5-1: SerialNumber: syz [ 3152.536393][ T8138] usb 5-1: config 0 descriptor?? [ 3152.751899][ T8138] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 3153.083952][T13036] netlink: 'syz.4.11271': attribute type 1 has an invalid length. [ 3153.112570][ T8138] f6 f2 2c fa 89 99 d8 d7 [ 3153.181015][ T8138] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 3153.372363][T13051] bond2: entered promiscuous mode [ 3153.389907][T13051] bond2: entered allmulticast mode [ 3153.428034][T13051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3153.474276][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3153.491777][T13052] bridge19: entered promiscuous mode [ 3153.523999][T13052] bridge19: entered allmulticast mode [ 3153.535271][T13052] bond2: (slave bridge19): Enslaving as an active interface with an up link [ 3153.563627][T13058] FAULT_INJECTION: forcing a failure. [ 3153.563627][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.585662][T13058] CPU: 1 UID: 0 PID: 13058 Comm: syz.1.11278 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3153.585690][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3153.585702][T13058] Call Trace: [ 3153.585710][T13058] [ 3153.585719][T13058] dump_stack_lvl+0x189/0x250 [ 3153.585751][T13058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3153.585776][T13058] ? __pfx__printk+0x10/0x10 [ 3153.585797][T13058] ? __pfx___might_resched+0x10/0x10 [ 3153.585819][T13058] ? fs_reclaim_acquire+0x7d/0x100 [ 3153.585848][T13058] should_fail_ex+0x414/0x560 [ 3153.585876][T13058] should_failslab+0xa8/0x100 [ 3153.585899][T13058] __kmalloc_noprof+0xcb/0x4f0 [ 3153.585918][T13058] ? tomoyo_encode+0x28b/0x550 [ 3153.585946][T13058] tomoyo_encode+0x28b/0x550 [ 3153.585975][T13058] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3153.586001][T13058] ? tomoyo_domain+0xda/0x130 [ 3153.586030][T13058] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3153.586050][T13058] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3153.586073][T13058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3153.586112][T13058] ? __lock_acquire+0xab9/0xd20 [ 3153.586154][T13058] ? __fget_files+0x2a/0x420 [ 3153.586180][T13058] ? __fget_files+0x3a0/0x420 [ 3153.586199][T13058] ? __fget_files+0x2a/0x420 [ 3153.586225][T13058] security_file_ioctl_compat+0xcb/0x2d0 [ 3153.586247][T13058] __ia32_compat_sys_ioctl+0x128/0x840 [ 3153.586277][T13058] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3153.586304][T13058] ? __fget_files+0x3a0/0x420 [ 3153.586332][T13058] ? fput+0xa0/0xd0 [ 3153.586355][T13058] ? ksys_write+0x22a/0x250 [ 3153.586382][T13058] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3153.586405][T13058] ? lockdep_hardirqs_on+0x9c/0x150 [ 3153.586428][T13058] __do_fast_syscall_32+0xb4/0x110 [ 3153.586450][T13058] ? lockdep_hardirqs_on+0x9c/0x150 [ 3153.586474][T13058] do_fast_syscall_32+0x34/0x80 [ 3153.586503][T13058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3153.586523][T13058] RIP: 0023:0xf703e539 [ 3153.586538][T13058] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3153.586553][T13058] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3153.586573][T13058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005460 [ 3153.586586][T13058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3153.586597][T13058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3153.586608][T13058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3153.586619][T13058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3153.586652][T13058] [ 3153.586740][T13058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3153.656682][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3153.920662][T13066] FAULT_INJECTION: forcing a failure. [ 3153.920662][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 3153.954113][T13066] CPU: 0 UID: 0 PID: 13066 Comm: syz.3.11280 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3153.954143][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3153.954156][T13066] Call Trace: [ 3153.954164][T13066] [ 3153.954173][T13066] dump_stack_lvl+0x189/0x250 [ 3153.954206][T13066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3153.954232][T13066] ? __pfx__printk+0x10/0x10 [ 3153.954256][T13066] ? __pfx___might_resched+0x10/0x10 [ 3153.954284][T13066] should_fail_ex+0x414/0x560 [ 3153.954312][T13066] should_failslab+0xa8/0x100 [ 3153.954335][T13066] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3153.954357][T13066] ? __alloc_skb+0x112/0x2d0 [ 3153.954382][T13066] __alloc_skb+0x112/0x2d0 [ 3153.954407][T13066] netlink_sendmsg+0x5c6/0xb30 [ 3153.954438][T13066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3153.954460][T13066] ? __import_iovec+0x5d4/0x7f0 [ 3153.954475][T13066] ? aa_sock_msg_perm+0x94/0x160 [ 3153.954500][T13066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3153.954517][T13066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3153.954538][T13066] __sock_sendmsg+0x21c/0x270 [ 3153.954568][T13066] ____sys_sendmsg+0x505/0x830 [ 3153.954597][T13066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3153.954635][T13066] ___sys_sendmsg+0x21f/0x2a0 [ 3153.954660][T13066] ? __pfx____sys_sendmsg+0x10/0x10 [ 3153.954725][T13066] ? __fget_files+0x2a/0x420 [ 3153.954745][T13066] ? __fget_files+0x3a0/0x420 [ 3153.954779][T13066] __sys_sendmsg+0x164/0x220 [ 3153.954804][T13066] ? __pfx___sys_sendmsg+0x10/0x10 [ 3153.954841][T13066] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3153.954864][T13066] ? lockdep_hardirqs_on+0x9c/0x150 [ 3153.954886][T13066] __do_fast_syscall_32+0xb4/0x110 [ 3153.954908][T13066] ? lockdep_hardirqs_on+0x9c/0x150 [ 3153.954931][T13066] do_fast_syscall_32+0x34/0x80 [ 3153.954952][T13066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3153.954973][T13066] RIP: 0023:0xf7fa7539 [ 3153.954989][T13066] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3153.955003][T13066] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3153.955021][T13066] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 3153.955034][T13066] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 3153.955045][T13066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3153.955056][T13066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3153.955067][T13066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3153.955095][T13066] [ 3154.219454][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 3154.219473][ T30] audit: type=1326 audit(1748354061.857:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.248017][ T30] audit: type=1326 audit(1748354061.857:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.270714][ T30] audit: type=1326 audit(1748354061.857:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.293201][ T30] audit: type=1326 audit(1748354061.857:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.315500][ T30] audit: type=1326 audit(1748354061.857:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.337889][ T30] audit: type=1326 audit(1748354061.857:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.360124][ T30] audit: type=1326 audit(1748354061.867:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.382363][ T30] audit: type=1326 audit(1748354061.867:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.405045][ T30] audit: type=1326 audit(1748354061.867:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.427116][ T30] audit: type=1326 audit(1748354061.867:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.0.11277" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3154.722041][T13075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3154.889205][T13077] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3155.111346][ T8138] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3155.201133][ T8139] usb 5-1: USB disconnect, device number 61 [ 3155.264928][ T8138] usb 2-1: device descriptor read/64, error -71 [ 3155.442126][T13069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3155.524116][ T8138] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3155.585426][T13087] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3155.654914][ T8138] usb 2-1: device descriptor read/64, error -71 [ 3155.764495][ T8138] usb usb2-port1: attempt power cycle [ 3156.214275][ T8138] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3156.275625][T13080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3156.310028][ T8138] usb 2-1: device descriptor read/8, error -71 [ 3156.644281][ T8138] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3156.666959][ T8138] usb 2-1: device descriptor read/8, error -71 [ 3156.774321][ T8138] usb usb2-port1: unable to enumerate USB device [ 3157.437033][T13108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11292'. [ 3157.658401][T13114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3157.742237][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11296'. [ 3157.793264][ T8136] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 3157.959585][ T8136] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 3157.977775][ T8136] usb 5-1: config 7 has no interface number 0 [ 3158.271326][ T8136] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 3158.303877][ T8136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3158.323512][ T8136] usb 5-1: Product: syz [ 3158.349466][ T8136] usb 5-1: Manufacturer: syz [ 3158.354866][ T8136] usb 5-1: SerialNumber: syz [ 3158.895129][T13132] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3159.153581][ T8136] as10x_usb: device has been detected [ 3159.170501][ T8136] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 3159.269072][ T8136] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 3159.319161][ T8136] as10x_usb: error during firmware upload part1 [ 3159.331898][ T8136] Registered device Elgato EyeTV DTT Deluxe [ 3159.360035][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3159.384737][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3159.607929][T13128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3160.079630][ T8139] usb 5-1: USB disconnect, device number 62 [ 3160.241318][ T8139] Unregistered device Elgato EyeTV DTT Deluxe [ 3160.455105][ T8139] as10x_usb: device has been disconnected [ 3160.617293][T13157] tipc: New replicast peer: 0.0.0.0 [ 3160.794620][T13157] tipc: Enabled bearer , priority 10 [ 3160.839277][T13157] tipc: New replicast peer: 172.20.20.170 [ 3160.892560][T13161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3160.934038][T13157] netlink: 'syz.4.11306': attribute type 2 has an invalid length. [ 3160.967392][T13157] : entered promiscuous mode [ 3161.074891][T13165] FAULT_INJECTION: forcing a failure. [ 3161.074891][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.181593][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.3.11308 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3161.181611][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3161.181618][T13165] Call Trace: [ 3161.181623][T13165] [ 3161.181629][T13165] dump_stack_lvl+0x189/0x250 [ 3161.181650][T13165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3161.181664][T13165] ? __pfx__printk+0x10/0x10 [ 3161.181676][T13165] ? __pfx___might_resched+0x10/0x10 [ 3161.181695][T13165] ? fs_reclaim_acquire+0x7d/0x100 [ 3161.181712][T13165] should_fail_ex+0x414/0x560 [ 3161.181728][T13165] should_failslab+0xa8/0x100 [ 3161.181741][T13165] __kmalloc_noprof+0xcb/0x4f0 [ 3161.181751][T13165] ? tomoyo_encode+0x28b/0x550 [ 3161.181767][T13165] tomoyo_encode+0x28b/0x550 [ 3161.181784][T13165] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3161.181798][T13165] ? tomoyo_domain+0xda/0x130 [ 3161.181815][T13165] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3161.181827][T13165] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3161.181839][T13165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3161.181860][T13165] ? __lock_acquire+0xab9/0xd20 [ 3161.181882][T13165] ? __fget_files+0x2a/0x420 [ 3161.181896][T13165] ? __fget_files+0x3a0/0x420 [ 3161.181906][T13165] ? __fget_files+0x2a/0x420 [ 3161.181920][T13165] security_file_ioctl_compat+0xcb/0x2d0 [ 3161.181934][T13165] __ia32_compat_sys_ioctl+0x128/0x840 [ 3161.181952][T13165] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3161.181967][T13165] ? __fget_files+0x3a0/0x420 [ 3161.181982][T13165] ? fput+0xa0/0xd0 [ 3161.181995][T13165] ? ksys_write+0x22a/0x250 [ 3161.182004][T13165] ? rcu_is_watching+0x15/0xb0 [ 3161.182021][T13165] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3161.182034][T13165] ? lockdep_hardirqs_on+0x9c/0x150 [ 3161.182046][T13165] __do_fast_syscall_32+0xb4/0x110 [ 3161.182058][T13165] ? lockdep_hardirqs_on+0x9c/0x150 [ 3161.182072][T13165] do_fast_syscall_32+0x34/0x80 [ 3161.182083][T13165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3161.182095][T13165] RIP: 0023:0xf7fa7539 [ 3161.182105][T13165] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3161.182113][T13165] RSP: 002b:00000000f50a555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3161.182125][T13165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005424 [ 3161.182132][T13165] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3161.182138][T13165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3161.182143][T13165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3161.182149][T13165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3161.182164][T13165] [ 3161.182177][T13165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3161.537039][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 3161.538159][ T30] audit: type=1326 audit(1748354069.357:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13167 comm="syz.4.11309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3161.603079][T13175] wireguard: wg1: Could not create IPv4 socket [ 3161.612180][ T30] audit: type=1326 audit(1748354069.357:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13167 comm="syz.4.11309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3161.847480][T13182] netlink: 'syz.2.11313': attribute type 4 has an invalid length. [ 3162.473608][T12816] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 3162.674003][ T8136] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 3162.683241][T12816] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 3162.694982][T12816] usb 4-1: config 0 has no interface number 0 [ 3162.709410][T12816] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3162.811871][T12816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.830672][T12816] usb 4-1: Product: syz [ 3162.835196][T12816] usb 4-1: Manufacturer: syz [ 3162.840063][T12816] usb 4-1: SerialNumber: syz [ 3162.848371][T12816] usb 4-1: config 0 descriptor?? [ 3162.862569][ T8136] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 3162.897478][ T8136] usb 5-1: config 7 has no interface number 0 [ 3162.907478][ T8136] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 3162.934313][T13199] tipc: Enabling of bearer rejected, already enabled [ 3162.942121][ T8136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.950843][T13199] tipc: New replicast peer: 172.20.20.170 [ 3162.956735][ T8136] usb 5-1: Product: syz [ 3162.960820][ T8136] usb 5-1: Manufacturer: syz [ 3162.964193][T13199] netlink: 'syz.1.11319': attribute type 2 has an invalid length. [ 3162.971125][ T8136] usb 5-1: SerialNumber: syz [ 3162.999738][T13199] : entered promiscuous mode [ 3163.178274][T13206] fuse: Unknown parameter '017777777777777777777770x0000000000000005' [ 3163.325430][T13207] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3163.355878][T12816] usb 4-1: Firmware version (0.0) predates our first public release. [ 3163.364944][T12816] usb 4-1: Please update to version 0.2 or newer [ 3163.376954][T12816] usb 4-1: Firmware: build ÜD [ 3163.508746][T13211] netlink: 600 bytes leftover after parsing attributes in process `syz.1.11322'. [ 3163.545596][T13212] netlink: 600 bytes leftover after parsing attributes in process `syz.1.11322'. [ 3163.574074][T13211] netlink: 'syz.1.11322': attribute type 4 has an invalid length. [ 3163.769793][ T8136] as10x_usb: device has been detected [ 3163.918881][T13200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3163.935028][ T8136] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 3163.958908][T13214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.967967][T13214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3164.011630][ T8136] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 3164.041447][ T8136] as10x_usb: error during firmware upload part1 [ 3164.056014][ T8136] Registered device Elgato EyeTV DTT Deluxe [ 3164.379202][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11314'. [ 3164.552365][T12816] usb 5-1: USB disconnect, device number 63 [ 3164.593165][T12816] Unregistered device Elgato EyeTV DTT Deluxe [ 3164.609646][T12816] as10x_usb: device has been disconnected [ 3165.024620][ T5882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3165.166168][ T5882] usb 2-1: device descriptor read/64, error -71 [ 3165.182926][T13243] input: syz0 as /devices/virtual/input/input98 [ 3165.484605][ T5882] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3165.727220][ T5882] usb 2-1: device descriptor read/64, error -71 [ 3165.809531][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11333'. [ 3165.834281][ T5882] usb usb2-port1: attempt power cycle [ 3165.840731][ T8123] usb 4-1: USB disconnect, device number 25 [ 3165.973553][T13248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3165.984053][T13249] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11333'. [ 3166.006171][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11333'. [ 3166.177023][ T5882] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3166.225349][ T5882] usb 2-1: device descriptor read/8, error -71 [ 3166.259335][ T30] audit: type=1326 audit(1748354074.147:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13257 comm="syz.0.11339" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be539 code=0x0 [ 3166.358385][ T8123] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3166.466120][ T5882] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3166.494767][ T5882] usb 2-1: device descriptor read/8, error -71 [ 3166.513910][ T8123] usb 4-1: Using ep0 maxpacket: 32 [ 3166.540722][ T8123] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 3166.567082][ T8123] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3166.588264][ T8123] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3166.599645][ T8123] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3166.634507][ T5882] usb usb2-port1: unable to enumerate USB device [ 3166.674013][ T8123] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3166.700480][ T8123] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3166.713530][ T8123] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3166.731910][ T8123] usb 4-1: Product: syz [ 3166.737760][T13272] binder: 13271:13272 ioctl c0306201 80000480 returned -14 [ 3166.745295][ T8123] usb 4-1: Manufacturer: syz [ 3166.755940][ T8123] usb 4-1: SerialNumber: syz [ 3166.773411][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11345'. [ 3166.773535][ T8123] usb 4-1: config 0 descriptor?? [ 3166.833675][ T8123] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3166.854436][ T8123] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3167.185528][ T5882] usb 4-1: USB disconnect, device number 26 [ 3167.185524][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 3167.197870][T13251] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 3167.247833][ T5882] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3168.433852][T12816] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3168.603248][T12816] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 3168.613089][T12816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3168.633846][T12816] usb 4-1: Product: syz [ 3168.638052][T12816] usb 4-1: Manufacturer: syz [ 3168.642638][T12816] usb 4-1: SerialNumber: syz [ 3168.649831][T12816] usb 4-1: config 0 descriptor?? [ 3168.663629][T12816] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 3168.886151][T12816] usb 4-1: USB disconnect, device number 27 [ 3169.030628][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11371'. [ 3169.053672][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11371'. [ 3169.658595][ T30] audit: type=1326 audit(1748354077.547:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13367 comm="syz.3.11381" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa7539 code=0x0 [ 3169.745047][T13370] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11382'. [ 3169.784764][T13370] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11382'. [ 3170.084132][ T30] audit: type=1326 audit(1748354077.967:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 3170.166306][ T30] audit: type=1326 audit(1748354077.967:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3170.223947][ T30] audit: type=1326 audit(1748354077.967:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 3170.250589][ T30] audit: type=1326 audit(1748354077.967:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3170.276748][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11386'. [ 3170.291479][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.306018][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.318749][ T30] audit: type=1326 audit(1748354077.997:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3170.342333][ T30] audit: type=1326 audit(1748354077.997:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 3170.370813][T13382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3170.475223][ T30] audit: type=1326 audit(1748354077.997:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 3170.569573][ T30] audit: type=1326 audit(1748354077.997:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3170.648079][ T30] audit: type=1326 audit(1748354077.997:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13365 comm="syz.1.11380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3170.725750][T28234] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 3170.883411][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11390'. [ 3171.374058][ T8139] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 3171.572416][ T8139] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3171.591642][ T8139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.648253][ T8139] usb 2-1: config 0 descriptor?? [ 3171.685933][ T8139] cp210x 2-1:0.0: cp210x converter detected [ 3172.112129][ T8139] usb 2-1: cp210x converter now attached to ttyUSB0 [ 3172.298501][ T8139] usb 2-1: USB disconnect, device number 43 [ 3172.328787][ T8139] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3172.359139][ T8139] cp210x 2-1:0.0: device disconnected [ 3174.764600][T28234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 3174.774884][T28234] Bluetooth: hci0: Injecting HCI hardware error event [ 3174.783872][T28234] Bluetooth: hci0: hardware error 0x00 [ 3175.450571][ T4000] Bluetooth: hci3: unexpected cc 0x0c5b length: 5 > 1 [ 3175.459231][ T4000] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 3176.844669][T28234] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 3177.051385][T13548] fuse: Unknown parameter 'grou00000000000000000000' [ 3177.652277][ T30] kauditd_printk_skb: 361 callbacks suppressed [ 3177.652298][ T30] audit: type=1326 audit(1748354085.477:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.11455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3177.723223][ T30] audit: type=1326 audit(1748354085.487:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.11455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3177.796139][ T30] audit: type=1326 audit(1748354085.597:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.11455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3177.859878][ T30] audit: type=1326 audit(1748354085.597:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.11455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3177.919255][ T30] audit: type=1326 audit(1748354085.597:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.11455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3178.394227][ T8136] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 3178.624346][ T8136] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3178.633442][ T8136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3178.696677][ T8136] usb 2-1: config 0 descriptor?? [ 3179.076929][ T30] audit: type=1326 audit(1748354086.967:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.4.11462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000 [ 3179.193924][ T8123] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3179.348224][ T8123] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3179.367021][ T8123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3179.395051][ T8123] usb 4-1: config 0 descriptor?? [ 3179.426646][ T8123] cp210x 4-1:0.0: cp210x converter detected [ 3179.754909][ T30] audit: type=1326 audit(1748354087.637:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.4.11462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7fc00000 [ 3180.037442][ T8123] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 3180.055701][ T8123] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 3180.083052][ T8123] usb 4-1: cp210x converter now attached to ttyUSB0 [ 3180.100522][ T8123] usb 4-1: USB disconnect, device number 28 [ 3180.123194][T32134] udevd[32134]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 3180.130229][ T8123] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3180.164352][ T8123] cp210x 4-1:0.0: device disconnected [ 3180.544625][ T8136] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3180.556913][ T8136] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 3180.568986][ T8136] asix 2-1:0.0: probe with driver asix failed with error -71 [ 3180.595996][ T8136] usb 2-1: USB disconnect, device number 44 [ 3181.379285][T13595] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11470'. [ 3181.388678][T13595] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11470'. [ 3182.304054][ T8123] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 3182.446719][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11491'. [ 3182.466133][ T8123] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3182.489716][ T8123] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3182.498489][ T8123] usb 5-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00 [ 3182.529457][ T8123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.554143][ T8123] usb 5-1: config 0 descriptor?? [ 3182.764530][T13650] input: syz0 as /devices/virtual/input/input99 [ 3182.999312][ T8123] apple 0003:05AC:021B.0024: hidraw0: USB HID v0.00 Device [HID 05ac:021b] on usb-dummy_hcd.4-1/input0 [ 3183.187635][ T8123] usb 5-1: USB disconnect, device number 64 [ 3183.971033][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11517'. [ 3184.049985][T13696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3184.057322][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 3184.067676][T13696] lo: entered allmulticast mode [ 3184.073370][T13696] tunl0: entered allmulticast mode [ 3184.087422][T13696] gre0: entered allmulticast mode [ 3184.122794][T13696] gretap0: entered allmulticast mode [ 3184.134369][ T8138] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3184.178953][T13696] erspan0: entered allmulticast mode [ 3184.221116][T13696] ip_vti0: entered allmulticast mode [ 3184.256295][T13696] ip6_vti0: entered allmulticast mode [ 3184.265556][T13696] sit0: entered allmulticast mode [ 3184.304373][ T8138] usb 4-1: Using ep0 maxpacket: 32 [ 3184.315462][T13696] ip6tnl0: entered allmulticast mode [ 3184.326305][ T8138] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3184.346613][ T8138] usb 4-1: config 0 has no interface number 0 [ 3184.353545][T13696] ip6gre0: entered allmulticast mode [ 3184.369899][ T8138] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3184.396385][T13696] syz_tun: entered allmulticast mode [ 3184.404695][ T8138] usb 4-1: config 0 interface 2 has no altsetting 0 [ 3184.423363][T13696] ip6gretap0: entered allmulticast mode [ 3184.444617][ T8138] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 3184.455871][T13696] bridge0: left promiscuous mode [ 3184.468387][T13696] vcan0: entered allmulticast mode [ 3184.471368][ T8138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3184.499457][ T8138] usb 4-1: Product: syz [ 3184.504568][ T8138] usb 4-1: Manufacturer: syz [ 3184.506636][T13696] bond0: entered allmulticast mode [ 3184.509442][ T8138] usb 4-1: SerialNumber: syz [ 3184.531278][ T8138] usb 4-1: config 0 descriptor?? [ 3184.540545][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11520'. [ 3184.551944][T13696] bond_slave_0: entered allmulticast mode [ 3184.565675][T13696] bond_slave_1: entered allmulticast mode [ 3184.625030][T13696] team0: entered allmulticast mode [ 3184.630356][T13696] team_slave_0: entered allmulticast mode [ 3184.637542][T13696] team_slave_1: entered allmulticast mode [ 3184.657696][T13696] dummy0: left promiscuous mode [ 3184.675106][T13696] dummy0: entered allmulticast mode [ 3184.698076][T13696] nlmon0: entered allmulticast mode [ 3184.738655][T13696] caif0: entered allmulticast mode [ 3184.766801][ T8138] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3184.781679][T13696] batadv0: entered allmulticast mode [ 3184.801503][T13696] vxcan0: entered allmulticast mode [ 3184.835045][T13696] vxcan1: entered allmulticast mode [ 3184.854251][ T8138] usb 4-1: USB disconnect, device number 29 [ 3184.862374][T13696] veth0: entered allmulticast mode [ 3184.913521][T13696] veth1: entered allmulticast mode [ 3184.989599][ T2792] udevd[2792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3185.019904][T13696] wg0: entered allmulticast mode [ 3185.089992][T13696] wg1: entered allmulticast mode [ 3185.116219][T13696] wg2: entered allmulticast mode [ 3185.153249][T13696] veth0_to_bridge: entered allmulticast mode [ 3185.213412][T13696] veth1_to_bridge: entered allmulticast mode [ 3185.255716][T13696] veth0_to_bond: entered allmulticast mode [ 3185.296840][T13696] veth1_to_bond: entered allmulticast mode [ 3185.364125][T13696] veth0_to_team: entered allmulticast mode [ 3185.390628][T13696] veth1_to_team: entered allmulticast mode [ 3185.427763][T13696] veth0_to_batadv: entered allmulticast mode [ 3185.453376][T13696] batadv_slave_0: entered allmulticast mode [ 3185.478014][T13696] veth1_to_batadv: entered allmulticast mode [ 3185.500412][T13696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3185.527481][T13696] batadv_slave_1: entered allmulticast mode [ 3185.551159][T13696] xfrm0: entered allmulticast mode [ 3185.572682][T13696] veth0_to_hsr: entered allmulticast mode [ 3185.602024][T13696] hsr_slave_0: entered allmulticast mode [ 3185.629737][T13696] veth1_to_hsr: entered allmulticast mode [ 3185.653585][T13696] hsr_slave_1: entered allmulticast mode [ 3185.688167][T13696] hsr0: entered allmulticast mode [ 3185.713435][T13696] veth1_virt_wifi: entered allmulticast mode [ 3185.742299][T13696] veth0_virt_wifi: entered allmulticast mode [ 3185.761888][T13696] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 3185.789702][T13696] veth1_vlan: entered allmulticast mode [ 3185.812391][T13696] veth0_vlan: entered allmulticast mode [ 3185.862354][T13696] vlan0: entered allmulticast mode [ 3185.875882][T13696] vlan1: entered allmulticast mode [ 3185.896456][T13696] macvlan0: entered allmulticast mode [ 3185.932186][T13696] macvlan1: entered allmulticast mode [ 3185.955223][T13696] ipvlan0: entered allmulticast mode [ 3185.974001][T13696] ipvlan1: entered allmulticast mode [ 3185.989289][T13696] veth1_macvtap: entered allmulticast mode [ 3186.049703][T13696] veth0_macvtap: entered allmulticast mode [ 3186.099510][T13696] macvtap0: entered allmulticast mode [ 3186.118531][T13696] macsec0: entered allmulticast mode [ 3186.135460][T13696] geneve0: entered allmulticast mode [ 3186.148294][T13696] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.168453][T13696] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.178780][T13696] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.192099][T13696] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.211124][T13696] geneve1: entered allmulticast mode [ 3186.239770][T13696] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 3186.255008][T13696] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 3186.273997][T13696] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 3186.301208][T13696] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 3186.331961][T13696] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 3186.356051][T13696] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 3186.373369][T13696] bridge1: entered allmulticast mode [ 3186.380052][T13696] bridge2: entered allmulticast mode [ 3186.388421][T13696] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3186.397932][T13696] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3186.407075][T13696] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3186.415996][T13696] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3186.427094][T13696] vxlan0: entered allmulticast mode [ 3186.440527][T13696] bridge3: entered allmulticast mode [ 3186.446652][T13696] ip6_vti1: entered allmulticast mode [ 3186.452234][T13696] bridge4: entered allmulticast mode [ 3186.457864][T13696] bridge5: entered allmulticast mode [ 3186.463368][T13696] bridge6: entered allmulticast mode [ 3186.469321][T13696] bridge7: entered allmulticast mode [ 3186.475404][T13696] bond1: left promiscuous mode [ 3186.480271][T13696] bridge8: left promiscuous mode [ 3186.500399][T13696] bridge9: entered allmulticast mode [ 3186.506975][T13696] syztnl2: entered allmulticast mode [ 3186.512400][T13696] : entered allmulticast mode [ 3186.665377][T13751] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11536'. [ 3186.680390][T13751] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11536'. [ 3187.034223][ T8137] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 3187.221289][ T8137] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3187.246223][ T8137] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3187.276692][ T8137] usb 2-1: config 1 has no interface number 0 [ 3187.282889][ T8137] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3187.365660][ T8137] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 3187.396635][ T8137] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3187.436085][ T8137] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3187.453910][ T8137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3187.464381][ T8137] usb 2-1: Product: syz [ 3187.478696][ T8137] usb 2-1: Manufacturer: syz [ 3187.483367][ T8137] usb 2-1: SerialNumber: syz [ 3187.823634][ T30] audit: type=1326 audit(1748354095.707:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13793 comm="syz.3.11556" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x0 [ 3188.358658][ T8137] cdc_ncm 2-1:1.1: bind() failure [ 3188.661599][ T8137] usb 2-1: USB disconnect, device number 45 [ 3189.705252][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11567'. [ 3189.830274][ T30] audit: type=1326 audit(1748354097.717:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3189.857173][ T30] audit: type=1326 audit(1748354097.717:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3189.880529][ T30] audit: type=1326 audit(1748354097.747:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3189.933863][ T30] audit: type=1326 audit(1748354097.747:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3189.973918][ T30] audit: type=1326 audit(1748354097.747:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3190.070429][ T30] audit: type=1326 audit(1748354097.777:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3190.107412][ T30] audit: type=1326 audit(1748354097.777:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3190.130405][ T30] audit: type=1326 audit(1748354097.777:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3190.153599][ T30] audit: type=1326 audit(1748354097.797:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.0.11568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 3192.236746][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11595'. [ 3192.334510][T21973] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3192.483884][T21973] usb 2-1: Using ep0 maxpacket: 16 [ 3192.491776][T21973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3192.505333][T21973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3192.518940][T21973] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3192.532390][T21973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.546145][T21973] usb 2-1: Product: syz [ 3192.550355][T21973] usb 2-1: Manufacturer: syz [ 3192.557752][T21973] usb 2-1: SerialNumber: syz [ 3192.982089][T21973] usb 2-1: 0:2 : does not exist [ 3193.720657][T21973] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 3193.760151][T21973] usb 2-1: USB disconnect, device number 46 [ 3193.822082][T32134] udevd[32134]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3194.018424][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11601'. [ 3194.704430][ T8136] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3194.874020][ T8136] usb 4-1: Using ep0 maxpacket: 16 [ 3194.889008][ T8136] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3194.910023][ T8136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.928519][ T8136] usb 4-1: Product: syz [ 3194.938893][ T8136] usb 4-1: Manufacturer: syz [ 3194.948985][ T8136] usb 4-1: SerialNumber: syz [ 3194.973680][ T8136] r8152-cfgselector 4-1: Unknown version 0x0000 [ 3194.988349][ T8136] r8152-cfgselector 4-1: config 0 descriptor?? [ 3195.405060][ T8136] r8152-cfgselector 4-1: USB disconnect, device number 30 [ 3195.707691][T28234] Bluetooth: Wrong link type (-71) [ 3196.615169][T13979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3196.713913][ T8136] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 3196.875365][ T8136] usb 4-1: not running at top speed; connect to a high speed hub [ 3196.884917][ T8136] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3196.894355][ T8136] usb 4-1: config 1 has no interface number 1 [ 3196.902545][ T8136] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3196.911847][ T8136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3196.919992][ T8136] usb 4-1: Product: syz [ 3196.924577][ T8136] usb 4-1: Manufacturer: syz [ 3196.929337][ T8136] usb 4-1: SerialNumber: syz [ 3197.152122][ T8136] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3197.191604][ T8136] usb 4-1: USB disconnect, device number 31 [ 3197.259681][T32134] udevd[32134]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3200.064750][T21973] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3200.072470][T28234] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 3200.233943][T21973] usb 4-1: Using ep0 maxpacket: 16 [ 3200.257905][T21973] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3200.270559][T21973] usb 4-1: config 1 has no interface number 1 [ 3200.280229][T21973] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3200.302105][T21973] usb 4-1: string descriptor 0 read error: -22 [ 3200.319386][T21973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3200.330740][T21973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3200.351099][T14053] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3200.387415][T21973] usb 4-1: 2:1: invalid format type 0x93c3 is detected, processed as PCM [ 3200.416137][T21973] usb 4-1: 2:1 : sample bitwidth 129 in over sample bytes 2 [ 3200.423508][T21973] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 3200.644265][T21973] usb 4-1: USB disconnect, device number 32 [ 3201.159192][T14072] FAULT_INJECTION: forcing a failure. [ 3201.159192][T14072] name failslab, interval 1, probability 0, space 0, times 0 [ 3201.172111][T14072] CPU: 0 UID: 0 PID: 14072 Comm: syz.0.11679 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3201.172136][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3201.172147][T14072] Call Trace: [ 3201.172156][T14072] [ 3201.172165][T14072] dump_stack_lvl+0x189/0x250 [ 3201.172197][T14072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3201.172221][T14072] ? __pfx__printk+0x10/0x10 [ 3201.172245][T14072] ? __pfx___might_resched+0x10/0x10 [ 3201.172272][T14072] should_fail_ex+0x414/0x560 [ 3201.172298][T14072] should_failslab+0xa8/0x100 [ 3201.172321][T14072] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3201.172341][T14072] ? __alloc_skb+0x112/0x2d0 [ 3201.172367][T14072] __alloc_skb+0x112/0x2d0 [ 3201.172390][T14072] netlink_sendmsg+0x5c6/0xb30 [ 3201.172427][T14072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3201.172457][T14072] ? __import_iovec+0x5d4/0x7f0 [ 3201.172473][T14072] ? aa_sock_msg_perm+0x94/0x160 [ 3201.172496][T14072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3201.172520][T14072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3201.172540][T14072] __sock_sendmsg+0x21c/0x270 [ 3201.172569][T14072] ____sys_sendmsg+0x505/0x830 [ 3201.172598][T14072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3201.172636][T14072] ___sys_sendmsg+0x21f/0x2a0 [ 3201.172660][T14072] ? __pfx____sys_sendmsg+0x10/0x10 [ 3201.172718][T14072] ? __fget_files+0x2a/0x420 [ 3201.172737][T14072] ? __fget_files+0x3a0/0x420 [ 3201.172766][T14072] __sys_sendmsg+0x164/0x220 [ 3201.172791][T14072] ? __pfx___sys_sendmsg+0x10/0x10 [ 3201.172827][T14072] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3201.172849][T14072] ? lockdep_hardirqs_on+0x9c/0x150 [ 3201.172871][T14072] __do_fast_syscall_32+0xb4/0x110 [ 3201.172893][T14072] ? lockdep_hardirqs_on+0x9c/0x150 [ 3201.172916][T14072] do_fast_syscall_32+0x34/0x80 [ 3201.172937][T14072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3201.172957][T14072] RIP: 0023:0xf70be539 [ 3201.172973][T14072] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3201.172988][T14072] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3201.173007][T14072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 3201.173020][T14072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3201.173030][T14072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3201.173041][T14072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3201.173052][T14072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3201.173080][T14072] [ 3203.237487][T14115] sctp: [Deprecated]: syz.0.11684 (pid 14115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3203.237487][T14115] Use struct sctp_sack_info instead [ 3203.813990][T13703] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3203.964537][T13703] usb 4-1: Using ep0 maxpacket: 32 [ 3203.971798][T13703] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 3203.984139][T13703] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3203.995519][T13703] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3204.006922][T13703] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3204.020450][T13703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3204.030058][T13703] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3204.039835][T13703] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3204.048826][T13703] usb 4-1: Product: syz [ 3204.094234][T13703] usb 4-1: Manufacturer: syz [ 3204.099024][T13703] usb 4-1: SerialNumber: syz [ 3204.127870][T13703] usb 4-1: config 0 descriptor?? [ 3204.146619][T13703] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3204.185598][T13703] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3204.849646][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.856497][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.994011][ T4000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3205.057593][ T4000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3205.070835][ T4000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3205.080248][ T4000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3205.088096][ T4000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3205.639979][T14137] chnl_net:caif_netlink_parms(): no params data found [ 3205.856217][T21973] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3206.024227][T21973] usb 2-1: Using ep0 maxpacket: 32 [ 3206.033517][T21973] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3206.064954][T14137] bridge0: port 1(bridge_slave_0) entered blocking state [ 3206.097033][T21973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3206.123184][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 3206.146803][T21973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3206.158227][T14137] bridge_slave_0: entered allmulticast mode [ 3206.183590][T21973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3206.199099][T14137] bridge_slave_0: entered promiscuous mode [ 3206.215915][T14137] bridge0: port 2(bridge_slave_1) entered blocking state [ 3206.223405][T21973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3206.246566][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 3206.265111][T21973] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3206.274914][T21973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3206.283134][T21973] usb 2-1: Product: syz [ 3206.289481][T14137] bridge_slave_1: entered allmulticast mode [ 3206.341834][T21973] usb 2-1: Manufacturer: syz [ 3206.385854][T14137] bridge_slave_1: entered promiscuous mode [ 3206.393599][T21973] usb 2-1: SerialNumber: syz [ 3206.535151][T21973] usb 2-1: config 0 descriptor?? [ 3206.703477][T14137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3206.737156][T14137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3206.827163][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.838450][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.872120][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.884348][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.895108][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.902751][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.922549][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.946984][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.955649][T14167] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3206.966676][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3206.974263][T14172] FAULT_INJECTION: forcing a failure. [ 3206.974263][T14172] name failslab, interval 1, probability 0, space 0, times 0 [ 3206.994195][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.003221][T14167] kvm: pic: non byte read [ 3207.004972][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.013269][T14167] kvm: pic: level sensitive irq not supported [ 3207.021078][T14172] CPU: 1 UID: 0 PID: 14172 Comm: syz.1.11699 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3207.021108][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3207.021120][T14172] Call Trace: [ 3207.021128][T14172] [ 3207.021136][T14172] dump_stack_lvl+0x189/0x250 [ 3207.021169][T14172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3207.021194][T14172] ? __pfx__printk+0x10/0x10 [ 3207.021224][T14172] ? __pfx___might_resched+0x10/0x10 [ 3207.021252][T14172] should_fail_ex+0x414/0x560 [ 3207.021279][T14172] should_failslab+0xa8/0x100 [ 3207.021301][T14172] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 3207.021323][T14172] ? __get_vm_area_node+0x13f/0x300 [ 3207.021349][T14172] __get_vm_area_node+0x13f/0x300 [ 3207.021375][T14172] __vmalloc_node_range_noprof+0x301/0x1340 [ 3207.021398][T14172] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.021447][T14172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3207.021467][T14172] ? __might_fault+0xb0/0x130 [ 3207.021489][T14172] ? _parse_integer_limit+0x1ae/0x1f0 [ 3207.021517][T14172] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.021535][T14172] __vmalloc_noprof+0xb1/0xf0 [ 3207.021557][T14172] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.021579][T14172] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.021605][T14172] bpf_prog_alloc+0x3c/0x1a0 [ 3207.021627][T14172] bpf_prog_load+0x735/0x1930 [ 3207.021659][T14172] ? __pfx_bpf_prog_load+0x10/0x10 [ 3207.021699][T14172] ? bpf_lsm_bpf+0x9/0x20 [ 3207.021718][T14172] ? security_bpf+0x7e/0x300 [ 3207.021741][T14172] __sys_bpf+0x5f1/0x860 [ 3207.021762][T14172] ? __pfx___sys_bpf+0x10/0x10 [ 3207.021793][T14172] ? ksys_write+0x22a/0x250 [ 3207.021824][T14172] __ia32_sys_bpf+0x7c/0x90 [ 3207.021851][T14172] __do_fast_syscall_32+0xb4/0x110 [ 3207.021874][T14172] ? lockdep_hardirqs_on+0x9c/0x150 [ 3207.021899][T14172] do_fast_syscall_32+0x34/0x80 [ 3207.021920][T14172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3207.021941][T14172] RIP: 0023:0xf703e539 [ 3207.021958][T14172] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3207.021974][T14172] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 3207.021993][T14172] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 3207.022006][T14172] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 3207.022017][T14172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3207.022028][T14172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3207.022039][T14172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3207.022066][T14172] [ 3207.022076][T14172] syz.1.11699: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 3207.068055][T14137] team0: Port device team_slave_0 added [ 3207.084740][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.094116][T14167] kvm: pic: non byte read [ 3207.123942][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.124520][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.140363][T14137] team0: Port device team_slave_1 added [ 3207.169696][T14172] ,cpuset= [ 3207.169853][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.170024][T14172] / [ 3207.183847][ T4000] Bluetooth: hci5: command tx timeout [ 3207.184675][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.190586][T14167] kvm: pic: level sensitive irq not supported [ 3207.198526][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.226046][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.236207][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.278178][T14167] kvm: pic: non byte read [ 3207.301530][T21973] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 3207.303882][T14172] ,mems_allowed=0-1 [ 3207.305610][T21973] input input100: Timeout waiting for response from device. [ 3207.434278][T14172] [ 3207.437040][T14172] CPU: 1 UID: 0 PID: 14172 Comm: syz.1.11699 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3207.437064][T14172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3207.437075][T14172] Call Trace: [ 3207.437083][T14172] [ 3207.437091][T14172] dump_stack_lvl+0x189/0x250 [ 3207.437127][T14172] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 3207.437151][T14172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3207.437175][T14172] ? __pfx__printk+0x10/0x10 [ 3207.437194][T14172] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3207.437218][T14172] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3207.437251][T14172] warn_alloc+0x214/0x310 [ 3207.437280][T14172] ? __pfx_warn_alloc+0x10/0x10 [ 3207.437304][T14172] ? __get_vm_area_node+0x13f/0x300 [ 3207.437329][T14172] ? __get_vm_area_node+0x2b5/0x300 [ 3207.437356][T14172] __vmalloc_node_range_noprof+0x326/0x1340 [ 3207.437408][T14172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3207.437428][T14172] ? __might_fault+0xb0/0x130 [ 3207.437449][T14172] ? _parse_integer_limit+0x1ae/0x1f0 [ 3207.437478][T14172] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.437497][T14172] __vmalloc_noprof+0xb1/0xf0 [ 3207.437518][T14172] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.437540][T14172] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 3207.437565][T14172] bpf_prog_alloc+0x3c/0x1a0 [ 3207.437599][T14172] bpf_prog_load+0x735/0x1930 [ 3207.437629][T14172] ? __pfx_bpf_prog_load+0x10/0x10 [ 3207.437673][T14172] ? bpf_lsm_bpf+0x9/0x20 [ 3207.437690][T14172] ? security_bpf+0x7e/0x300 [ 3207.437713][T14172] __sys_bpf+0x5f1/0x860 [ 3207.437734][T14172] ? __pfx___sys_bpf+0x10/0x10 [ 3207.437766][T14172] ? ksys_write+0x22a/0x250 [ 3207.437796][T14172] __ia32_sys_bpf+0x7c/0x90 [ 3207.437823][T14172] __do_fast_syscall_32+0xb4/0x110 [ 3207.437846][T14172] ? lockdep_hardirqs_on+0x9c/0x150 [ 3207.437870][T14172] do_fast_syscall_32+0x34/0x80 [ 3207.437891][T14172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3207.437911][T14172] RIP: 0023:0xf703e539 [ 3207.437928][T14172] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3207.437943][T14172] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 3207.437962][T14172] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800017c0 [ 3207.437975][T14172] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 3207.437986][T14172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3207.437997][T14172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3207.438008][T14172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3207.438036][T14172] [ 3207.438068][T14172] Mem-Info: [ 3207.709569][T14172] active_anon:9296 inactive_anon:1 isolated_anon:0 [ 3207.709569][T14172] active_file:23575 inactive_file:41095 isolated_file:0 [ 3207.709569][T14172] unevictable:768 dirty:87 writeback:0 [ 3207.709569][T14172] slab_reclaimable:11432 slab_unreclaimable:113957 [ 3207.709569][T14172] mapped:36655 shmem:4288 pagetables:1201 [ 3207.709569][T14172] sec_pagetables:0 bounce:0 [ 3207.709569][T14172] kernel_misc_reclaimable:0 [ 3207.709569][T14172] free:1280405 free_pcp:627 free_cma:0 [ 3207.779376][T14172] Node 0 active_anon:37084kB inactive_anon:4kB active_file:93876kB inactive_file:164176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146460kB dirty:348kB writeback:0kB shmem:15616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12096kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3207.821311][T21973] usb 2-1: USB disconnect, device number 47 [ 3207.848222][T14137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3207.862378][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3207.896384][T14172] Node 1 active_anon:0kB inactive_anon:0kB active_file:424kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:212kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3207.905677][T14137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3207.943916][T14172] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3207.988703][T14172] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 3208.008978][T14137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3208.012300][T14172] Node 0 [ 3208.025344][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3208.028374][T14172] DMA32 free:1183404kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:36976kB inactive_anon:4kB active_file:93876kB inactive_file:162360kB unevictable:1536kB writepending:356kB present:3129332kB managed:2561648kB mlocked:0kB bounce:0kB free_pcp:2420kB local_pcp:1604kB free_cma:0kB [ 3208.028449][T14172] lowmem_reserve[]: [ 3208.094868][T14137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3208.110607][T14172] 0 0 1 1 1 [ 3208.133630][T14172] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3208.175045][T14172] lowmem_reserve[]: 0 0 0 0 0 [ 3208.179975][T14172] Node 1 Normal free:3923504kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:424kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3208.209803][T14172] lowmem_reserve[]: 0 0 0 0 0 [ 3208.274187][T14172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3208.297944][T14172] Node 0 DMA32: 73*4kB (ME) 325*8kB (UME) 241*16kB (ME) 504*32kB (UME) 271*64kB (UME) 152*128kB (UME) 73*256kB (UME) 94*512kB (UM) 60*1024kB (UME) 14*2048kB (UM) 236*4096kB (UM) = 1183260kB [ 3208.387027][T14172] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 3208.407534][T14172] Node 1 Normal: 172*4kB (UME) 50*8kB (UME) 39*16kB (UME) 206*32kB (UME) 81*64kB (UME) 33*128kB (UME) 13*256kB (UME) 10*512kB (UME) 2*1024kB (UE) 4*2048kB (UME) 949*4096kB (M) = 3923504kB [ 3208.428002][T14172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3208.456037][T14137] hsr_slave_0: entered promiscuous mode [ 3208.463015][T14137] hsr_slave_1: entered promiscuous mode [ 3208.469040][T14172] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3208.480284][T14137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3208.488464][T14172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3208.498647][T14137] Cannot create hsr debugfs directory [ 3208.518647][T14172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3208.547217][T14172] 68957 total pagecache pages [ 3208.551972][T14172] 1 pages in swap cache [ 3208.557300][T14172] Free swap = 124992kB [ 3208.574675][T14172] Total swap = 124996kB [ 3208.578913][T14172] 2097051 pages RAM [ 3208.582846][T14172] 0 pages HighMem/MovableOnly [ 3208.610125][T14172] 424533 pages reserved [ 3208.624722][T14172] 0 pages cma reserved [ 3209.256150][ T4000] Bluetooth: hci5: command tx timeout [ 3209.405696][T14120] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 3209.569059][T12816] usb 4-1: USB disconnect, device number 33 [ 3209.584827][T12816] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3209.890409][T14137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3209.943049][T14137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3210.022394][T14137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3210.201268][T14137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3210.505305][T14137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3210.565283][T14137] 8021q: adding VLAN 0 to HW filter on device team0 [ 3210.686167][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 3210.693386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3210.705139][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 3210.705157][ T30] audit: type=1326 audit(1748354118.547:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3210.750507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 3210.757750][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3210.868618][ T30] audit: type=1326 audit(1748354118.547:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3210.897291][ T30] audit: type=1326 audit(1748354118.547:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3210.951692][T14137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3210.991431][ T30] audit: type=1326 audit(1748354118.547:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3211.141149][T14137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3211.153367][ T30] audit: type=1326 audit(1748354118.547:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3211.343225][ T4000] Bluetooth: hci5: command tx timeout [ 3211.454051][ T8140] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3211.633877][ T8140] usb 2-1: Using ep0 maxpacket: 8 [ 3211.648752][ T8140] usb 2-1: config 5 has an invalid interface number: 72 but max is 0 [ 3211.711144][ T30] audit: type=1326 audit(1748354118.547:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3211.721287][ T8140] usb 2-1: config 5 has no interface number 0 [ 3211.786991][ T8140] usb 2-1: config 5 interface 72 has no altsetting 0 [ 3211.819170][T14137] veth0_vlan: entered promiscuous mode [ 3211.829240][ T8140] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 3211.845959][ T30] audit: type=1326 audit(1748354118.547:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3211.873912][ T8140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.882761][T14137] veth1_vlan: entered promiscuous mode [ 3211.914643][ T8140] usb 2-1: Product: syz [ 3211.916898][ T30] audit: type=1326 audit(1748354118.547:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3211.918839][ T8140] usb 2-1: Manufacturer: syz [ 3212.025819][T14137] veth0_macvtap: entered promiscuous mode [ 3212.043321][ T8140] usb 2-1: SerialNumber: syz [ 3212.072307][ T30] audit: type=1326 audit(1748354118.547:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3212.105603][T14137] veth1_macvtap: entered promiscuous mode [ 3212.168869][ T30] audit: type=1326 audit(1748354118.547:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.11712" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 3212.195547][T14137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3212.211606][T14137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3212.262639][T14137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3212.292277][T14137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3212.312580][T14137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3212.332838][T14137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3212.377983][ T8140] ftdi_sio 2-1:5.72: FTDI USB Serial Device converter detected [ 3212.403140][ T8140] usb 2-1: Detected FT4232H [ 3212.413678][ T8140] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3212.428707][ T8140] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3212.438423][ T8140] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3212.520238][ T8140] usb 2-1: USB disconnect, device number 48 [ 3212.562480][ T8140] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3212.607013][ T8140] ftdi_sio 2-1:5.72: device disconnected [ 3212.649943][T26918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3212.660333][T26918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3212.869606][T26918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3212.907622][T26918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3213.201866][T14256] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 3213.201866][T14256] program syz.3.11724 not setting count and/or reply_len properly [ 3213.376726][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11725'. [ 3213.413867][ T4000] Bluetooth: hci5: command tx timeout [ 3213.436272][T14261] FAULT_INJECTION: forcing a failure. [ 3213.436272][T14261] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.458179][T14261] CPU: 0 UID: 0 PID: 14261 Comm: syz.1.11725 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3213.458206][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3213.458217][T14261] Call Trace: [ 3213.458224][T14261] [ 3213.458232][T14261] dump_stack_lvl+0x189/0x250 [ 3213.458265][T14261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3213.458289][T14261] ? __pfx__printk+0x10/0x10 [ 3213.458312][T14261] ? __pfx___might_resched+0x10/0x10 [ 3213.458339][T14261] should_fail_ex+0x414/0x560 [ 3213.458365][T14261] should_failslab+0xa8/0x100 [ 3213.458387][T14261] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3213.458407][T14261] ? __alloc_skb+0x112/0x2d0 [ 3213.458432][T14261] __alloc_skb+0x112/0x2d0 [ 3213.458456][T14261] netlink_sendmsg+0x5c6/0xb30 [ 3213.458491][T14261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3213.458513][T14261] ? __import_iovec+0x5d4/0x7f0 [ 3213.458529][T14261] ? aa_sock_msg_perm+0x94/0x160 [ 3213.458553][T14261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3213.458570][T14261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3213.458591][T14261] __sock_sendmsg+0x21c/0x270 [ 3213.458621][T14261] ____sys_sendmsg+0x505/0x830 [ 3213.458649][T14261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3213.458686][T14261] ___sys_sendmsg+0x21f/0x2a0 [ 3213.458710][T14261] ? __pfx____sys_sendmsg+0x10/0x10 [ 3213.458767][T14261] ? __fget_files+0x2a/0x420 [ 3213.458784][T14261] ? __fget_files+0x3a0/0x420 [ 3213.458809][T14261] __sys_sendmsg+0x164/0x220 [ 3213.458831][T14261] ? __pfx___sys_sendmsg+0x10/0x10 [ 3213.458866][T14261] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3213.458886][T14261] ? lockdep_hardirqs_on+0x9c/0x150 [ 3213.458908][T14261] __do_fast_syscall_32+0xb4/0x110 [ 3213.458927][T14261] ? lockdep_hardirqs_on+0x9c/0x150 [ 3213.458949][T14261] do_fast_syscall_32+0x34/0x80 [ 3213.458968][T14261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3213.458988][T14261] RIP: 0023:0xf703e539 [ 3213.459004][T14261] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3213.459019][T14261] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3213.459036][T14261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 3213.459047][T14261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3213.459055][T14261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3213.459064][T14261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3213.459074][T14261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3213.459097][T14261] [ 3213.503885][T12816] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3213.984049][T12816] usb 4-1: Using ep0 maxpacket: 32 [ 3213.992149][T12816] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 3213.997669][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11729'. [ 3214.000631][T12816] usb 4-1: config 0 has no interface number 0 [ 3214.069371][T12816] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 3214.103841][T12816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.149858][T12816] usb 4-1: Product: syz [ 3214.175262][T12816] usb 4-1: Manufacturer: syz [ 3214.179940][T12816] usb 4-1: SerialNumber: syz [ 3214.223555][T12816] usb 4-1: config 0 descriptor?? [ 3214.288195][T14278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11732'. [ 3214.595360][T12816] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3214.784371][T12816] usb 4-1: USB disconnect, device number 34 [ 3215.020091][ T2792] udevd[2792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3215.313369][T14292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11734'. [ 3216.068969][T14299] FAULT_INJECTION: forcing a failure. [ 3216.068969][T14299] name failslab, interval 1, probability 0, space 0, times 0 [ 3216.124693][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.2.11738 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3216.124711][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3216.124718][T14299] Call Trace: [ 3216.124723][T14299] [ 3216.124729][T14299] dump_stack_lvl+0x189/0x250 [ 3216.124750][T14299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3216.124765][T14299] ? __pfx__printk+0x10/0x10 [ 3216.124778][T14299] ? __pfx___might_resched+0x10/0x10 [ 3216.124790][T14299] ? fs_reclaim_acquire+0x7d/0x100 [ 3216.124807][T14299] should_fail_ex+0x414/0x560 [ 3216.124822][T14299] should_failslab+0xa8/0x100 [ 3216.124836][T14299] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3216.124847][T14299] ? __pmd_alloc+0xb8/0x3a0 [ 3216.124860][T14299] __pmd_alloc+0xb8/0x3a0 [ 3216.124873][T14299] __handle_mm_fault+0xa63/0x55e0 [ 3216.124889][T14299] ? mt_find+0x46f/0x5f0 [ 3216.124903][T14299] ? __pfx___handle_mm_fault+0x10/0x10 [ 3216.124931][T14299] ? find_vma+0xe7/0x160 [ 3216.124942][T14299] ? __pfx_find_vma+0x10/0x10 [ 3216.124955][T14299] handle_mm_fault+0x3f6/0x8c0 [ 3216.124970][T14299] do_user_addr_fault+0x764/0x1390 [ 3216.124991][T14299] exc_page_fault+0x76/0xf0 [ 3216.125003][T14299] asm_exc_page_fault+0x26/0x30 [ 3216.125013][T14299] RIP: 0010:__put_user_8+0xd/0x20 [ 3216.125025][T14299] Code: 89 01 31 c9 0f 01 ca e9 51 2e 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3216.125034][T14299] RSP: 0018:ffffc9000bacfd18 EFLAGS: 00050206 [ 3216.125045][T14299] RAX: 00000000d666d946 RBX: 0000000000000000 RCX: 00000000800002c0 [ 3216.125052][T14299] RDX: 0000000000000000 RSI: ffffffff8db46571 RDI: ffffffff8be24c40 [ 3216.125060][T14299] RBP: ffffc9000bacfe10 R08: 0000000000000000 R09: ffffffff820b6d60 [ 3216.125066][T14299] R10: dffffc0000000000 R11: fffffbfff1f3f857 R12: 0000000000000000 [ 3216.125073][T14299] R13: 1ffff92001759fb0 R14: 00000000800002c0 R15: ffff888057c35b00 [ 3216.125084][T14299] ? __might_fault+0xb0/0x130 [ 3216.125100][T14299] sched_core_share_pid+0x2d0/0x7b0 [ 3216.125117][T14299] ? sched_core_share_pid+0xc8/0x7b0 [ 3216.125128][T14299] ? cap_task_prctl+0x1de/0xaa0 [ 3216.125140][T14299] ? __pfx_sched_core_share_pid+0x10/0x10 [ 3216.125152][T14299] ? static_key_count+0x41/0x70 [ 3216.125163][T14299] ? security_task_prctl+0x163/0x190 [ 3216.125180][T14299] __se_sys_prctl+0x22c/0x1940 [ 3216.125193][T14299] ? __pfx___se_sys_prctl+0x10/0x10 [ 3216.125205][T14299] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3216.125216][T14299] ? __ia32_sys_prctl+0x20/0xc0 [ 3216.125228][T14299] __do_fast_syscall_32+0xb4/0x110 [ 3216.125240][T14299] ? lockdep_hardirqs_on+0x9c/0x150 [ 3216.125253][T14299] do_fast_syscall_32+0x34/0x80 [ 3216.125265][T14299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3216.125277][T14299] RIP: 0023:0xf70de539 [ 3216.125285][T14299] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3216.125294][T14299] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 3216.125303][T14299] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000000000 [ 3216.125310][T14299] RDX: 000000000000055a RSI: 0000000000000000 RDI: 00000000800002c0 [ 3216.125316][T14299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3216.125322][T14299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3216.125328][T14299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3216.125342][T14299] [ 3216.564635][T28234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3216.584049][T28234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3216.623159][ T5252] bond0: (slave syz_tun): Releasing backup interface [ 3216.634092][T28234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3216.707915][T28234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3216.719440][T28234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3216.916705][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 3216.916724][ T30] audit: type=1326 audit(1748354124.807:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e539 code=0x0 [ 3217.081236][T14317] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11745'. [ 3217.255189][ T8140] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3217.652072][ T8140] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3217.674015][ T8140] usb 2-1: config 1 has no interface number 1 [ 3217.681809][ T8140] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3217.727494][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3217.764025][ T8140] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 3217.789654][ T8140] usb 2-1: New USB device found, idVendor=1d6b, idProduct=8101, bcdDevice= 0.40 [ 3217.803836][ T8140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.828319][ T8140] usb 2-1: Product: syz [ 3217.837626][ T8140] usb 2-1: Manufacturer: syz [ 3217.852164][ T8140] usb 2-1: SerialNumber: syz [ 3217.924189][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3217.937666][T14313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3218.066787][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3218.171845][ T30] audit: type=1326 audit(1748354126.057:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.262641][ T30] audit: type=1326 audit(1748354126.057:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.298371][ T30] audit: type=1326 audit(1748354126.057:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.309481][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3218.322958][ T30] audit: type=1326 audit(1748354126.057:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.355001][ T30] audit: type=1326 audit(1748354126.097:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.378744][ T30] audit: type=1326 audit(1748354126.097:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.401662][ T30] audit: type=1326 audit(1748354126.097:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.670159][ T30] audit: type=1326 audit(1748354126.097:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.748446][T14308] chnl_net:caif_netlink_parms(): no params data found [ 3218.823325][ T30] audit: type=1326 audit(1748354126.097:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14306 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3218.852246][T14341] FAULT_INJECTION: forcing a failure. [ 3218.852246][T14341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3218.872994][T28234] Bluetooth: hci4: command tx timeout [ 3219.104492][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz.2.11748 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3219.104510][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3219.104517][T14341] Call Trace: [ 3219.104522][T14341] [ 3219.104527][T14341] dump_stack_lvl+0x189/0x250 [ 3219.104548][T14341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3219.104563][T14341] ? __pfx__printk+0x10/0x10 [ 3219.104579][T14341] should_fail_ex+0x414/0x560 [ 3219.104599][T14341] _copy_to_user+0x31/0xb0 [ 3219.104611][T14341] simple_read_from_buffer+0xe1/0x170 [ 3219.104625][T14341] proc_fail_nth_read+0x1df/0x250 [ 3219.104641][T14341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3219.104655][T14341] ? rw_verify_area+0x258/0x650 [ 3219.104665][T14341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3219.104678][T14341] vfs_read+0x1fd/0x980 [ 3219.104694][T14341] ? __pfx_vfs_read+0x10/0x10 [ 3219.104704][T14341] ? rcu_is_watching+0x15/0xb0 [ 3219.104717][T14341] ? trace_irq_disable+0x37/0x110 [ 3219.104728][T14341] ? preempt_schedule_irq+0xde/0x150 [ 3219.104739][T14341] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 3219.104749][T14341] ? __sys_bind+0x2e9/0x3e0 [ 3219.104766][T14341] ksys_read+0x145/0x250 [ 3219.104777][T14341] ? __pfx_ksys_read+0x10/0x10 [ 3219.104792][T14341] __do_fast_syscall_32+0xb4/0x110 [ 3219.104806][T14341] ? lockdep_hardirqs_on+0x9c/0x150 [ 3219.104819][T14341] do_fast_syscall_32+0x34/0x80 [ 3219.104831][T14341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3219.104843][T14341] RIP: 0023:0xf70de539 [ 3219.104853][T14341] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3219.104862][T14341] RSP: 002b:00000000f50ce590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 3219.104874][T14341] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ce620 [ 3219.104882][T14341] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 3219.104888][T14341] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3219.104894][T14341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3219.104900][T14341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3219.104914][T14341] [ 3220.096807][ T8140] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 3220.141603][ T8140] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 3220.192798][T14308] bridge0: port 1(bridge_slave_0) entered blocking state [ 3220.200198][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 3220.221871][T14308] bridge_slave_0: entered allmulticast mode [ 3220.264847][T14308] bridge_slave_0: entered promiscuous mode [ 3220.282407][ T8140] usb 2-1: USB disconnect, device number 49 [ 3220.429683][T31615] udevd[31615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3220.430558][T14308] bridge0: port 2(bridge_slave_1) entered blocking state [ 3220.502258][T14308] bridge0: port 2(bridge_slave_1) entered disabled state [ 3220.523585][T14308] bridge_slave_1: entered allmulticast mode [ 3220.532418][T14308] bridge_slave_1: entered promiscuous mode [ 3220.657767][T28234] Bluetooth: hci5: unexpected cc 0x0c2d length: 5 > 4 [ 3220.747061][ T12] bridge_slave_1: left allmulticast mode [ 3220.752777][ T12] bridge_slave_1: left promiscuous mode [ 3220.769060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 3220.808652][ T12] bridge_slave_0: left allmulticast mode [ 3220.825673][ T12] bridge_slave_0: left promiscuous mode [ 3220.831541][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 3220.854701][ T31] INFO: task kworker/1:0:6268 blocked for more than 143 seconds. [ 3220.863908][ T31] Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 [ 3220.871232][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3220.914964][ T31] task:kworker/1:0 state:D stack:21736 pid:6268 tgid:6268 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 3220.934354][T28234] Bluetooth: hci4: command tx timeout [ 3220.958172][ T31] Workqueue: usb_hub_wq hub_event [ 3220.975498][ T31] Call Trace: [ 3220.988195][ T31] [ 3221.058507][ T31] __schedule+0x16f5/0x4d00 [ 3221.063103][ T31] ? schedule+0x165/0x360 [ 3221.084164][ T31] ? __pfx___schedule+0x10/0x10 [ 3221.089099][ T31] ? schedule+0x91/0x360 [ 3221.105715][ T31] schedule+0x165/0x360 [ 3221.109943][ T31] schedule_timeout+0x9a/0x270 [ 3221.150467][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3221.164308][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3221.169591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3221.193823][ T31] ? wait_for_completion+0x267/0x5d0 [ 3221.199572][ T31] wait_for_completion+0x2bf/0x5d0 [ 3221.211581][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 3221.231098][ T31] i2c_del_adapter+0x581/0x6e0 [ 3221.243970][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 3221.249313][ T31] ? rcu_is_watching+0x15/0xb0 [ 3221.283922][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 3221.289337][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 3221.317220][ T31] dvb_usb_device_exit+0x1be/0x350 [ 3221.322416][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3221.329285][ T6268] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3221.345632][ T31] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 3221.371725][ T31] ? __schedule+0x16f5/0x4d00 [ 3221.376967][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 3221.382249][ T31] ? schedule+0x165/0x360 [ 3221.404830][ T31] ? __lock_acquire+0xab9/0xd20 [ 3221.409762][ T31] ? __pfx___schedule+0x10/0x10 [ 3221.424201][ T31] ? schedule+0x91/0x360 [ 3221.428516][ T31] ? schedule+0x165/0x360 [ 3221.432895][ T31] ? schedule_timeout+0x12b/0x270 [ 3221.454006][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3221.459456][ T31] ? usb_control_msg+0x2bf/0x3e0 [ 3221.473816][ T31] ? __pfx_process_timeout+0x10/0x10 [ 3221.479241][ T31] ? hub_ext_port_status+0x52d/0x820 [ 3221.493943][ T31] ? msleep+0x39/0x100 [ 3221.498212][ T31] ? msleep+0xa2/0x100 [ 3221.502312][ T31] ? hub_port_debounce+0x204/0x310 [ 3221.543807][ T31] ? trace_rpm_usage+0x7e/0x1f0 [ 3221.548772][ T31] ? kcov_remote_stop+0x78/0x6d0 [ 3221.583816][ T31] ? hub_event+0x45bd/0x4a00 [ 3221.588482][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 3221.614031][ T31] ? do_raw_spin_lock+0x121/0x290 [ 3221.619143][ T31] ? register_lock_class+0x51/0x320 [ 3221.641279][ T31] ? __pfx_hub_event+0x10/0x10 [ 3221.654060][ T31] ? __schedule+0x16c3/0x4d00 [ 3221.658809][ T31] ? __schedule+0x16f5/0x4d00 [ 3221.663559][ T31] ? schedule+0x165/0x360 [ 3221.690863][ T31] ? __lock_acquire+0xab9/0xd20 [ 3221.703790][ T31] ? __pfx___schedule+0x10/0x10 [ 3221.708721][ T31] ? schedule+0x91/0x360 [ 3221.713420][ T31] ? schedule+0x165/0x360 [ 3221.733453][ T31] ? worker_thread+0xa82/0xda0 [ 3221.741242][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3221.747751][ T31] ? __kthread_parkme+0x7b/0x200 [ 3221.752711][ T31] ? kthread+0x70e/0x8a0 [ 3221.757270][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3221.762414][ T31] ? __pfx_kthread+0x10/0x10 [ 3221.767081][ T31] ? __pfx_kthread+0x10/0x10 [ 3221.771717][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3221.777196][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3221.782438][ T31] ? __pfx_kthread+0x10/0x10 [ 3221.787176][ T31] ? ret_from_fork+0x4e/0x80 [ 3221.791776][ T31] ? __pfx_kthread+0x10/0x10 [ 3221.796522][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 3221.801476][ T31] [ 3221.804847][ T31] [ 3221.804847][ T31] Showing all locks held in the system: [ 3221.812972][ T31] 6 locks held by kworker/u8:0/12: [ 3221.818895][ T31] 5 locks held by kworker/u8:1/13: [ 3221.824360][ T31] 2 locks held by ksoftirqd/0/15: [ 3221.829440][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 3221.839585][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 3221.851446][ T31] 1 lock held by khungtaskd/31: [ 3221.857291][ T31] #0: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3221.868675][ T31] 3 locks held by kworker/u8:3/37: [ 3221.874226][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 3221.886242][ T31] #1: ffffc90000ad7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 3221.897439][ T31] #2: ffffffff8f503588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 3221.906487][ T31] 1 lock held by dhcpcd/5494: [ 3221.911168][ T31] #0: ffffffff8f503588 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 3221.920923][ T31] 2 locks held by getty/5588: [ 3221.925664][ T31] #0: ffff888035f0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3221.935575][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 3221.945743][ T31] 3 locks held by kworker/u8:2/26918: [ 3221.951135][ T31] #0: ffff8880b8739f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 3221.961307][ T31] #1: ffff88801d288a28 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 3221.970859][ T31] #2: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xd2/0x610 [ 3221.980809][ T31] 3 locks held by kworker/0:12/8140: [ 3221.986165][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 3221.997388][ T31] #1: ffffc9000b5bfc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 3222.008409][ T31] #2: ffffffff8f503588 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 3222.019201][ T31] 1 lock held by syz-executor/14308: [ 3222.024567][ T31] #0: ffffffff8f503588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 3222.033657][ T31] 1 lock held by syz.2.11752/14352: [ 3222.039027][ T31] #0: ffffffff8f503588 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x9ae/0x2fb0 [ 3222.048771][ T31] 2 locks held by syz.3.11758/14373: [ 3222.054271][ T31] #0: ffffffff8dff87c8 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x52/0x170 [ 3222.063954][ T31] #1: ffffffff8e1424b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 3222.077271][ T31] 1 lock held by syz.3.11758/14375: [ 3222.082523][ T31] #0: ffff88802e320cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 3222.093689][ T31] 2 locks held by syz.3.11758/14378: [ 3222.099515][ T31] #0: ffffffff99f62118 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv+0x5ff/0x2530 [ 3222.109870][ T31] #1: ffff88802e320cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 3222.204055][ T31] [ 3222.206445][ T31] ============================================= [ 3222.206445][ T31] [ 3222.290457][ T31] NMI backtrace for cpu 0 [ 3222.290482][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3222.290505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3222.290515][ T31] Call Trace: [ 3222.290523][ T31] [ 3222.290531][ T31] dump_stack_lvl+0x189/0x250 [ 3222.290561][ T31] ? __wake_up_klogd+0xd9/0x110 [ 3222.290589][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3222.290613][ T31] ? __pfx__printk+0x10/0x10 [ 3222.290643][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3222.290672][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3222.290694][ T31] ? _printk+0xcf/0x120 [ 3222.290716][ T31] ? __pfx__printk+0x10/0x10 [ 3222.290736][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3222.290760][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3222.290792][ T31] watchdog+0xfee/0x1030 [ 3222.290813][ T31] ? watchdog+0x1de/0x1030 [ 3222.290839][ T31] kthread+0x70e/0x8a0 [ 3222.290860][ T31] ? __pfx_watchdog+0x10/0x10 [ 3222.290877][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.290895][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.290911][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3222.290929][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3222.290949][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.290964][ T31] ret_from_fork+0x4e/0x80 [ 3222.290983][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.290999][ T31] ret_from_fork_asm+0x1a/0x30 [ 3222.291032][ T31] [ 3222.291039][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3222.439443][ C1] NMI backtrace for cpu 1 [ 3222.439459][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3222.439479][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3222.439489][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3222.439512][ C1] Code: 83 d6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 2a 00 f3 0f 1e fa fb f4 58 d6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3222.439526][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 3222.439547][ C1] RAX: 8e3321c9db150000 RBX: ffffffff8196fea8 RCX: 8e3321c9db150000 [ 3222.439560][ C1] RDX: 0000000000000001 RSI: ffffffff8d95a9e9 RDI: ffffffff8be24c40 [ 3222.439571][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 3222.439583][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fc2b0 [ 3222.439595][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad2b40 [ 3222.439606][ C1] FS: 0000000000000000(0000) GS:ffff888125d91000(0000) knlGS:0000000000000000 [ 3222.439619][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3222.439630][ C1] CR2: 0000000080202018 CR3: 000000000df36000 CR4: 00000000003526f0 [ 3222.439644][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3222.439654][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3222.439664][ C1] Call Trace: [ 3222.439671][ C1] [ 3222.439678][ C1] default_idle+0x13/0x20 [ 3222.439696][ C1] default_idle_call+0x74/0xb0 [ 3222.439716][ C1] do_idle+0x1e8/0x510 [ 3222.439739][ C1] ? __pfx_do_idle+0x10/0x10 [ 3222.439755][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 3222.439781][ C1] cpu_startup_entry+0x44/0x60 [ 3222.439799][ C1] start_secondary+0x101/0x110 [ 3222.439815][ C1] common_startup_64+0x13e/0x147 [ 3222.439837][ C1] [ 3222.626533][ C1] vkms_vblank_simulate: vblank timer overrun [ 3222.816672][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3222.823584][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 3222.835062][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3222.845157][ T31] Call Trace: [ 3222.848454][ T31] [ 3222.851401][ T31] dump_stack_lvl+0x99/0x250 [ 3222.856016][ T31] ? __asan_memcpy+0x40/0x70 [ 3222.860617][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3222.865816][ T31] ? __pfx__printk+0x10/0x10 [ 3222.870669][ T31] panic+0x2db/0x790 [ 3222.874563][ T31] ? __pfx_panic+0x10/0x10 [ 3222.878973][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 3222.884778][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3222.890159][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 3222.896334][ T31] watchdog+0x102d/0x1030 [ 3222.900673][ T31] ? watchdog+0x1de/0x1030 [ 3222.905105][ T31] kthread+0x70e/0x8a0 [ 3222.909173][ T31] ? __pfx_watchdog+0x10/0x10 [ 3222.913849][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.918432][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.923010][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3222.928200][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3222.933395][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.937974][ T31] ret_from_fork+0x4e/0x80 [ 3222.942386][ T31] ? __pfx_kthread+0x10/0x10 [ 3222.946970][ T31] ret_from_fork_asm+0x1a/0x30 [ 3222.951737][ T31] [ 3222.955016][ T31] Kernel Offset: disabled [ 3222.959330][ T31] Rebooting in 86400 seconds..