last executing test programs: 7.383791013s ago: executing program 3 (id=288): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x48000) socket$igmp(0x2, 0x3, 0x2) unshare(0x20040600) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 7.336841481s ago: executing program 3 (id=289): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, 0x0, 0x0, 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 6.392168547s ago: executing program 3 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000008200), 0x0, 0x12002, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x383882) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="8643c6c1726b456c36fc33bee3e38798674bed27baf4cf6f948e4ba132d73231764342d9db19f4c5a269ecb5575ffb4d5bb5a7a024106a4d766285de5ad419afe63bf315ce385acf7543d6a1ec79910e8bd1331204fce9de32ad6830e83a7e4a6e7737e4c9b52c0d8648cf4a25ac7ea69650f73b49a9c8a869e0a7d6056d44f120c9a1b26f493a0870556f4b38c6ea0011fe41ce17f751c6bc047683a6c1d18a57af4e537ed4f06cdc0645b5871f7250522856a75d70c325b9", 0xb9}], 0x1) 5.266701617s ago: executing program 3 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001900010928bd701c00000000021880000000ff000010000b1d580008000100ac14140008000700ac141443"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x48000) socket$igmp(0x2, 0x3, 0x2) unshare(0x20040600) fsmount(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x20, @mcast1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="fca3d74d27d688c805b546eecdf4a81b142a2efc380b06984846", 0x1a}, {&(0x7f0000001680)="39ca9a6bf0cc2a897e7f7efcf6095f693a2b5a8f03d5ec1c46f43795a35de3e5155257afdaffd194eb9b", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x2, 0xc8040) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6e}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x74f, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xfe, 0x8, 0x0, 0x8, 0x2}, 0x4c, &(0x7f00000001c0)={0x5, 0xf, 0x4c, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0xf00f, 0xe14, [0xc0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "a9b93c1140dc357a529f49a26302942e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x3, 0x1, 0x80}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x7f, 0x3, 0x101, 0xf}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xba, &(0x7f00000002c0)=@string={0xba, 0x3, "e1a6e313040a0dfd5738a63622dd1de4a423fb52df42c2b680c512d34b467489d7dd1a7f1578faf8846b16190205bc6da03a2d1a269f791bccafe25acb4cd9be5cb4be323cc488f468868fe5a8c075288673026720562652a1c08cea921a5688c0103f7ea19c059553661e2b72e29e91b3078b5c64800b944dcbb53a6ccbc982299488dcc92134b88dccd7543cc7c2d4176d9e2b5e9ea7ba9f32681c8800149c83683e44f50c0b8c4df67ef1aff409d3c021d304d3bfe114"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x447}}, {0x99, &(0x7f0000000bc0)=@string={0x99, 0x3, "e7e3c84fda6658786ce4deed71c045277002f495b7b6ee58ee15281b55a8b152e37368c05d8422ac4a013af91d1f15f3f8fb21ae00dec7b0c1d032887b6ffbbee4354df30aeb3f73e67affb6da842d3803cc0290a355ec0350e5277f3606b0957d61025da190179afde822fb0c868faad6ddb2dc2d8e7e13f3e1291ccba46e530c5352c3083482c34e0db09b5a77a009111c0ced119c7c"}}, {0x59, &(0x7f0000000c80)=@string={0x59, 0x3, "3b1107ab841203b4caae14576ec8a905e50c52a555ff47e05d188af28f64d979519f3baa6edc4d673e5e3645ccab235a6130ddfa383fce886a2c534722d562be02a85bbadddcd2a3540cfe6b46739d14f7aecc2ae80d24"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x1d, &(0x7f0000000000), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.156850525s ago: executing program 2 (id=314): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2000000}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x18}, 0x40c0) 4.137785833s ago: executing program 2 (id=315): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000a00)=ANY=[@ANYRES8=r1], 0xfdef) read(r2, &(0x7f0000003100)=""/4089, 0xffffffc5) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000640)=""/274, 0x103, 0x0, 0x1, 0x2}}, 0xffffff9d) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16=r4], 0x0) 3.597073567s ago: executing program 4 (id=318): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil) (fail_nth: 16) 3.558456504s ago: executing program 2 (id=319): syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.502046151s ago: executing program 2 (id=320): socket$xdp(0x2c, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x305e, &(0x7f00000005c0)={0x0, 0xbc23, 0x10000, 0x2, 0x403f, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x3, 0x9, 0x0, 0xa00, 0x7fffffff}, 0x0, 0x0) 3.340137667s ago: executing program 3 (id=322): socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 3.197966791s ago: executing program 3 (id=324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000003c0)="05", 0x1}], 0x1}}], 0x1, 0x2400c042) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000023106a053103000000000001090224000100007e1109040002010300010009210000000122f80409058103"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0x3, 0x4, 0x5, 0x0, 0x0, [{{r0}, 0x75}, {{r0}, 0x5}, {{r4}, 0x7}, {{}, 0x4}, {{r3}, 0x1}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000002000fdffffff03000000280001800d0001007564703a73797a320000000014000280080001001e00000008000200317d0000"], 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x8800) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x1e, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) 3.141111836s ago: executing program 0 (id=325): r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x101002) shutdown(r0, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0xfc0, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast}, "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"}}}, 0xfce) lseek(r1, 0x0, 0x0) 2.951460696s ago: executing program 0 (id=328): syz_usb_connect(0x7ffffffe, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x4c, 0xb6, 0xe8, 0x10, 0x10c5, 0x819a, 0x9591, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x19, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x24, 0x86, 0x7}}]}}]}}]}}, 0x0) 2.39444925s ago: executing program 2 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (fail_nth: 43) 2.172272261s ago: executing program 1 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x40, r5, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "2d0100", 0x19, 0x84, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xb, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.171818355s ago: executing program 2 (id=332): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.171393594s ago: executing program 4 (id=333): syz_io_uring_setup(0x124b, &(0x7f00000000c0)={0x0, 0x2170, 0x4, 0x3, 0x4000000}, 0x0, 0x0) (async) r0 = socket$pptp(0x18, 0x1, 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x705f9641}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x39}, 0x8) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008aeba, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r6 = getuid() quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r6, &(0x7f0000000200)={0xf, 0x4, 0x0, 0xff, 0x40, 0x100000000, 0x7, 0x10}) (async) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103"], 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 2.096943645s ago: executing program 0 (id=334): socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 1.896443127s ago: executing program 4 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.855670149s ago: executing program 0 (id=336): unshare(0x6020480) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) 1.841985823s ago: executing program 4 (id=337): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1e, 0x0, 0x1300) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000f00)={0x2, 0x0, [{0x2000, 0xf5, &(0x7f0000000a00)=""/245}, {0x4, 0x75, &(0x7f0000000bc0)=""/117}]}) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x3ff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000000400000129fddd00090500020000000000000094ef6333ef"], 0x0) 1.636861706s ago: executing program 0 (id=338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="12040e00e0ff030002004788aa96a13bb1000000000086ddffff", 0x10029, 0x1200, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.635432991s ago: executing program 0 (id=339): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r3, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.065414213s ago: executing program 1 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 952.543314ms ago: executing program 1 (id=341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) 855.833055ms ago: executing program 1 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x6}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) 661.004472ms ago: executing program 1 (id=343): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) (fail_nth: 1) 217.004383ms ago: executing program 1 (id=344): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306e53f070d00006f958e491c5f0b3f1b03002a94018316"], 0x0}, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) 45.412408ms ago: executing program 4 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100fe8000000000000000000000000000214e2300004e200003aad8d3c377290200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d533000000ac1414aa00000000000000000000000000000000000000001000000000000000040000000000000001800000000000000800000000000000f707000000000000f0aa000000000000020000000000000002005000000000000400000000000000040000000000000002000000000000000ac900008a262721080000002fbd7000073500080a0000061000000000000000ff"], 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 0s ago: executing program 4 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100fe8000000000000000000000000000214e2300004e200003aad8d3c377290200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d533000000ac1414aa00000000000000000000000000000000000000001000000000000000040000000000000001800000000000000800000000000000f707000000000000f0aa000000000000020000000000000002005000000000000400000000000000040000000000000002000000000000000ac900008a262721080000002fbd7000073500080a00000610000000"], 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 50.143588][ T5840] cgroup: Unknown subsys name 'net' [ 50.238082][ T5840] cgroup: Unknown subsys name 'cpuset' [ 50.245302][ T5840] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.269408][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.211954][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.225484][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.247031][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.254255][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.254355][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.269347][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.269839][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.283805][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.286571][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.291200][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.298574][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.305299][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.314233][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.319478][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.336346][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.344481][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.353783][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.357033][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.361449][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.375480][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.444221][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.452603][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.460549][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.472694][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.480894][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.621823][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 53.808995][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 53.848849][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 53.859535][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.866864][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.873985][ T5866] bridge_slave_0: entered allmulticast mode [ 53.880928][ T5866] bridge_slave_0: entered promiscuous mode [ 53.918639][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.925815][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.933139][ T5866] bridge_slave_1: entered allmulticast mode [ 53.940002][ T5866] bridge_slave_1: entered promiscuous mode [ 53.952537][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 54.013714][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.025382][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.034875][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 54.051763][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.059039][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.066280][ T5871] bridge_slave_0: entered allmulticast mode [ 54.072815][ T5871] bridge_slave_0: entered promiscuous mode [ 54.101825][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.108989][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.116475][ T5871] bridge_slave_1: entered allmulticast mode [ 54.122931][ T5871] bridge_slave_1: entered promiscuous mode [ 54.154998][ T5866] team0: Port device team_slave_0 added [ 54.170055][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.177358][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.184522][ T5870] bridge_slave_0: entered allmulticast mode [ 54.191545][ T5870] bridge_slave_0: entered promiscuous mode [ 54.198519][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.205574][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.212782][ T5870] bridge_slave_1: entered allmulticast mode [ 54.219745][ T5870] bridge_slave_1: entered promiscuous mode [ 54.234251][ T5866] team0: Port device team_slave_1 added [ 54.256740][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.291297][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.315148][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.322371][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.329684][ T5868] bridge_slave_0: entered allmulticast mode [ 54.336216][ T5868] bridge_slave_0: entered promiscuous mode [ 54.344483][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.356063][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.371486][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.378657][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.404616][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.416798][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.423743][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.450164][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.475233][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.482433][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.489648][ T5868] bridge_slave_1: entered allmulticast mode [ 54.496364][ T5868] bridge_slave_1: entered promiscuous mode [ 54.509884][ T5871] team0: Port device team_slave_0 added [ 54.534773][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.542230][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.549580][ T5874] bridge_slave_0: entered allmulticast mode [ 54.556015][ T5874] bridge_slave_0: entered promiscuous mode [ 54.570692][ T5871] team0: Port device team_slave_1 added [ 54.585455][ T5870] team0: Port device team_slave_0 added [ 54.598026][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.605160][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.612381][ T5874] bridge_slave_1: entered allmulticast mode [ 54.619739][ T5874] bridge_slave_1: entered promiscuous mode [ 54.640616][ T5870] team0: Port device team_slave_1 added [ 54.656960][ T5866] hsr_slave_0: entered promiscuous mode [ 54.662953][ T5866] hsr_slave_1: entered promiscuous mode [ 54.684262][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.693877][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.701228][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.727171][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.744985][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.752319][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.779519][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.792375][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.803468][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.813442][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.820493][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.846630][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.869192][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.876652][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.902761][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.919150][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.950267][ T5868] team0: Port device team_slave_0 added [ 54.975954][ T5874] team0: Port device team_slave_0 added [ 54.983662][ T5868] team0: Port device team_slave_1 added [ 55.007959][ T5874] team0: Port device team_slave_1 added [ 55.048409][ T5871] hsr_slave_0: entered promiscuous mode [ 55.054476][ T5871] hsr_slave_1: entered promiscuous mode [ 55.060801][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 55.066931][ T5871] Cannot create hsr debugfs directory [ 55.079358][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.086425][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.112417][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.138807][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.145763][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.171740][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.185414][ T5870] hsr_slave_0: entered promiscuous mode [ 55.191873][ T5870] hsr_slave_1: entered promiscuous mode [ 55.197827][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 55.203548][ T5870] Cannot create hsr debugfs directory [ 55.209570][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.216608][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.242560][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.264108][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.271259][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.297416][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.377215][ T5868] hsr_slave_0: entered promiscuous mode [ 55.383206][ T5868] hsr_slave_1: entered promiscuous mode [ 55.388988][ T5857] Bluetooth: hci0: command tx timeout [ 55.390734][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 55.400308][ T5868] Cannot create hsr debugfs directory [ 55.441769][ T5874] hsr_slave_0: entered promiscuous mode [ 55.448362][ T5874] hsr_slave_1: entered promiscuous mode [ 55.454209][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 55.460375][ T5874] Cannot create hsr debugfs directory [ 55.466263][ T5857] Bluetooth: hci3: command tx timeout [ 55.471660][ T5857] Bluetooth: hci2: command tx timeout [ 55.477098][ T5865] Bluetooth: hci1: command tx timeout [ 55.546153][ T5857] Bluetooth: hci4: command tx timeout [ 55.635719][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.661033][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.684031][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.701036][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.725418][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.747539][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.760512][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.776911][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.805703][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.814699][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.824794][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.842144][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.893425][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.910824][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.920852][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.948095][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.015665][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.028817][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.038564][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.048933][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.058106][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.103059][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.131931][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.139072][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.152116][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.169308][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.176452][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.192989][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.229572][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.242090][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.260503][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.267638][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.285439][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.303619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.310759][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.320599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.327705][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.339950][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.355189][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.381570][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.388733][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.398074][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.405149][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.424260][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.431386][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.489450][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.511433][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.524796][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.554975][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.562120][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.578605][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.585727][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.595217][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.634820][ T5866] veth0_vlan: entered promiscuous mode [ 56.658687][ T5866] veth1_vlan: entered promiscuous mode [ 56.684656][ T5868] veth0_vlan: entered promiscuous mode [ 56.697729][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.707460][ T5868] veth1_vlan: entered promiscuous mode [ 56.720246][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.755653][ T5868] veth0_macvtap: entered promiscuous mode [ 56.771956][ T5868] veth1_macvtap: entered promiscuous mode [ 56.800135][ T5871] veth0_vlan: entered promiscuous mode [ 56.810607][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.821245][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.832687][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.856025][ T5866] veth0_macvtap: entered promiscuous mode [ 56.863162][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.872150][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.890777][ T5866] veth1_macvtap: entered promiscuous mode [ 56.898283][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.907393][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.917701][ T5871] veth1_vlan: entered promiscuous mode [ 56.940944][ T5870] veth0_vlan: entered promiscuous mode [ 56.959459][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.969466][ T5870] veth1_vlan: entered promiscuous mode [ 56.989211][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.028408][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.037821][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.052851][ T5874] veth0_vlan: entered promiscuous mode [ 57.064260][ T5871] veth0_macvtap: entered promiscuous mode [ 57.072620][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.081617][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.101788][ T5871] veth1_macvtap: entered promiscuous mode [ 57.112544][ T5870] veth0_macvtap: entered promiscuous mode [ 57.121727][ T5874] veth1_vlan: entered promiscuous mode [ 57.130056][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.143990][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.158581][ T5870] veth1_macvtap: entered promiscuous mode [ 57.173414][ T5874] veth0_macvtap: entered promiscuous mode [ 57.192348][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.208054][ T5874] veth1_macvtap: entered promiscuous mode [ 57.237420][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.249149][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.250042][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.265693][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.281541][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.292911][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.305953][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.320344][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.320617][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.330630][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.354265][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.368734][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.394262][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.416313][ T3600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.425685][ T3600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.457116][ T3600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.465883][ T3600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.475445][ T5857] Bluetooth: hci0: command tx timeout [ 57.486399][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.494299][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.504953][ T3600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.514885][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.518107][ T3600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.546811][ T5865] Bluetooth: hci2: command tx timeout [ 57.552213][ T5182] Bluetooth: hci1: command tx timeout [ 57.557647][ T5857] Bluetooth: hci3: command tx timeout [ 57.564174][ T3600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.597511][ T3600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.607158][ T3600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.627602][ T5865] Bluetooth: hci4: command tx timeout [ 57.678155][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.685998][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.712178][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.742381][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.767923][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.780499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.861951][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.876131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 57.917154][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.931368][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.012004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.154305][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.305127][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.526338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.899856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.633427][ T5865] Bluetooth: hci0: command tx timeout [ 59.637392][ T5857] Bluetooth: hci2: command tx timeout [ 59.639012][ T5865] Bluetooth: hci3: command tx timeout [ 59.644388][ T5857] Bluetooth: hci1: command tx timeout [ 59.714631][ T5857] Bluetooth: hci4: command tx timeout [ 59.816223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.825105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 59.978372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.016244][ T844] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.116203][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.161603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 60.246598][ T844] usb 5-1: Using ep0 maxpacket: 32 [ 60.298321][ T844] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.307425][ T844] usb 5-1: config 0 has no interface number 0 [ 60.313501][ T844] usb 5-1: config 0 interface 184 has no altsetting 0 [ 60.320530][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 60.333936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.336677][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.377488][ T844] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.399471][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.446223][ T844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.466400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.564276][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.574400][ T844] usb 5-1: Product: syz [ 60.632082][ T844] usb 5-1: Manufacturer: syz [ 60.645188][ T43] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 60.667432][ T844] usb 5-1: SerialNumber: syz [ 60.677049][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.685598][ T844] usb 5-1: config 0 descriptor?? [ 60.705689][ T43] usb 1-1: config 0 descriptor?? [ 60.716957][ T844] smsc75xx v1.0.0 [ 60.741225][ T844] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 60.752224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 60.796386][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.077879][ T844] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 61.270944][ T5971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.281221][ T5986] Zero length message leads to an empty skb [ 61.287391][ T5971] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 61.297999][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.305463][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.316662][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 61.320153][ T5987] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 61.330258][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.343507][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.354360][ T5971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.364927][ T5971] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 61.394986][ T5910] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 61.429014][ T5910] usb 2-1: config 0 has no interface number 0 [ 61.542188][ T5910] usb 2-1: config 0 interface 184 has no altsetting 0 [ 61.554047][ T5971] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.582124][ T5971] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 61.599853][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.607333][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.634693][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.641865][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.649259][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.656381][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.677606][ T5987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 61.694227][ T5910] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 61.703441][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.713011][ T5857] Bluetooth: hci3: command tx timeout [ 61.714312][ T5182] Bluetooth: hci2: command tx timeout [ 61.727643][ T5910] usb 2-1: Product: syz [ 61.738078][ T5910] usb 2-1: Manufacturer: syz [ 61.744134][ T5971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.751886][ T5971] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 61.774274][ T5910] usb 2-1: SerialNumber: syz [ 61.786473][ T5182] Bluetooth: hci4: command tx timeout [ 61.798626][ T5971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 61.805348][ T5971] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 61.826839][ T5910] usb 2-1: config 0 descriptor?? [ 61.872162][ T5910] smsc75xx v1.0.0 [ 61.877449][ T5910] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 61.929397][ T5910] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 62.124509][ T6000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 62.131053][ T6000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.139066][ T6000] vhci_hcd vhci_hcd.0: Device attached [ 62.316399][ T5937] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.404702][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.433073][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.440501][ T5910] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 62.730886][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.739446][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.045987][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.065601][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.152396][ T844] usb 5-1: USB disconnect, device number 2 [ 63.232330][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.378866][ T5937] usb 4-1: too many configurations: 111, using maximum allowed: 8 [ 63.421055][ T5937] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 63.463158][ T5937] usb 4-1: can't read configurations, error -71 [ 63.546243][ T6001] vhci_hcd: connection reset by peer [ 63.552106][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 63.559596][ T1105] vhci_hcd: stop threads [ 63.569502][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 63.584337][ T1105] vhci_hcd: release socket [ 63.596579][ T1105] vhci_hcd: disconnect device [ 63.605570][ T43] usb 1-1: USB disconnect, device number 2 [ 63.791469][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 64.380628][ T43] usb 2-1: USB disconnect, device number 2 [ 64.676211][ T5937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 64.693408][ T6050] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 64.753759][ T6048] vxcan1: entered allmulticast mode [ 64.846123][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 64.874756][ T5937] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.950335][ T5937] usb 4-1: config 0 has no interface number 0 [ 64.960287][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 64.962757][ T5937] usb 4-1: config 0 interface 184 has no altsetting 0 [ 65.325624][ T5937] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 65.367374][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.386658][ T5937] usb 4-1: Product: syz [ 65.390859][ T5937] usb 4-1: Manufacturer: syz [ 65.395459][ T5937] usb 4-1: SerialNumber: syz [ 65.444359][ T5937] usb 4-1: config 0 descriptor?? [ 65.460628][ T6064] kvm: user requested TSC rate below hardware speed [ 65.466653][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.468690][ T5937] smsc75xx v1.0.0 [ 65.492800][ T5937] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 65.503501][ T5937] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 65.542699][ T6070] kernel profiling enabled (shift: 8) [ 65.629378][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.639956][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.699560][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.718814][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.727560][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.735833][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.743951][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.746602][ T5917] usb 2-1: too many configurations: 111, using maximum allowed: 8 [ 65.764391][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 65.772551][ T5917] usb 2-1: can't read configurations, error -71 [ 66.426168][ T5937] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 66.558422][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 66.580225][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.614859][ T5937] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 66.657106][ T6092] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 66.664725][ T6092] netlink: 17 bytes leftover after parsing attributes in process `syz.2.41'. [ 66.715096][ T6092] delete_channel: no stack [ 66.763281][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.787151][ T5937] usb 5-1: config 0 descriptor?? [ 67.474130][ T5938] usb 4-1: USB disconnect, device number 3 [ 67.868807][ T5910] vhci_hcd: vhci_device speed not set [ 67.963357][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 68.345549][ T6119] binfmt_misc: register: failed to install interpreter file ./file0 [ 68.430071][ T6119] loop6: detected capacity change from 0 to 7 [ 68.454080][ T5976] Dev loop6: unable to read RDB block 7 [ 68.464713][ T5976] loop6: AHDI p1 p2 p3 [ 68.474571][ T5976] loop6: partition table partially beyond EOD, truncated [ 68.529800][ T5976] loop6: p1 start 1405162169 is beyond EOD, truncated [ 68.553874][ T5976] loop6: p2 size 46 extends beyond EOD, truncated [ 68.641388][ T6119] Dev loop6: unable to read RDB block 7 [ 68.650944][ T6119] loop6: AHDI p1 p2 p3 [ 68.656839][ T6119] loop6: partition table partially beyond EOD, truncated [ 68.671808][ T6119] loop6: p1 start 1405162169 is beyond EOD, truncated [ 68.699207][ T6119] loop6: p2 size 46 extends beyond EOD, truncated [ 68.970309][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 69.002392][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 69.024954][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 69.181360][ T5937] usbhid 5-1:0.0: can't add hid device: -71 [ 69.213124][ T5937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 69.246002][ T5937] usb 5-1: USB disconnect, device number 3 [ 69.505016][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 69.580849][ T6146] netlink: 15 bytes leftover after parsing attributes in process `syz.0.55'. [ 69.590058][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 69.702724][ T5937] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.096320][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 70.185053][ T5937] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.193570][ T5937] usb 5-1: config 0 has no interface number 0 [ 70.199964][ T5937] usb 5-1: config 0 interface 184 has no altsetting 0 [ 70.215628][ T5937] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.224911][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.233575][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.241872][ T5937] usb 5-1: Product: syz [ 70.246592][ T5937] usb 5-1: Manufacturer: syz [ 70.251281][ T5937] usb 5-1: SerialNumber: syz [ 70.284607][ T5937] usb 5-1: config 0 descriptor?? [ 70.297230][ T5937] smsc75xx v1.0.0 [ 70.301030][ T5937] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 70.314727][ T5937] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 70.641509][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 70.649782][ T43] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.659295][ T43] usb 3-1: config 179 has no interface number 0 [ 70.665729][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 70.684127][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 70.834307][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 70.899194][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 70.941635][ T43] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 71.012856][ T43] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 71.049616][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.065579][ T6150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.275336][ T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 71.344855][ T6167] process 'syz.3.63' launched './file0' with NULL argv: empty string added [ 71.353640][ T5917] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 71.409130][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.417342][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.738157][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.749297][ T5917] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 71.760217][ T5938] usb 3-1: USB disconnect, device number 2 [ 71.760285][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 71.774741][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 71.822781][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.933651][ T5917] usb 2-1: config 0 descriptor?? [ 72.572473][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 72.802713][ T980] usb 5-1: USB disconnect, device number 4 [ 73.670991][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 73.885511][ T6211] input: syz1 as /devices/virtual/input/input6 [ 74.024276][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 74.060060][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 74.188371][ T5917] usb 2-1: USB disconnect, device number 5 [ 74.335949][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 74.367045][ T6220] sctp: [Deprecated]: syz.1.82 (pid 6220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.367045][ T6220] Use struct sctp_sack_info instead [ 74.788737][ T6192] syz.0.72 (6192): drop_caches: 2 [ 74.906213][ T980] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.076133][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 75.084450][ T980] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 75.097822][ T980] usb 3-1: config 0 has no interface number 0 [ 75.104566][ T980] usb 3-1: config 0 interface 184 has no altsetting 0 [ 75.117230][ T980] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 75.129785][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.141363][ T980] usb 3-1: Product: syz [ 75.145658][ T980] usb 3-1: Manufacturer: syz [ 75.150811][ T980] usb 3-1: SerialNumber: syz [ 75.158058][ T980] usb 3-1: config 0 descriptor?? [ 75.169085][ T980] smsc75xx v1.0.0 [ 75.172832][ T980] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 75.185632][ T980] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 75.226259][ T844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.374988][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.382521][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.391901][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.400454][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.403131][ T844] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 75.416752][ T844] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 75.427589][ T844] usb 1-1: config 220 has no interface number 2 [ 75.434527][ T844] usb 1-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x58, changing to 0x8 [ 75.446550][ T844] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 75.458352][ T844] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 75.472058][ T844] usb 1-1: config 220 interface 0 has no altsetting 0 [ 75.479281][ T844] usb 1-1: config 220 interface 76 has no altsetting 0 [ 75.486721][ T844] usb 1-1: config 220 interface 1 has no altsetting 0 [ 75.496814][ T844] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 75.505997][ T844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.514555][ T844] usb 1-1: Product: syz [ 75.519251][ T844] usb 1-1: Manufacturer: syz [ 75.524206][ T844] usb 1-1: SerialNumber: syz [ 77.240384][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 77.373038][ T6273] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 77.390950][ T6273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.594991][ T5861] usb 3-1: USB disconnect, device number 3 [ 77.806481][ T980] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.856156][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.952079][ T844] usb 1-1: selecting invalid altsetting 0 [ 77.966543][ T844] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 77.985394][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.995604][ T844] usb 1-1: No valid video chain found. [ 78.100053][ T5917] usb 5-1: device descriptor read/64, error -71 [ 78.104576][ T844] usb 1-1: selecting invalid altsetting 0 [ 78.113150][ T844] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 78.121645][ T980] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.301712][ T844] usb 1-1: USB disconnect, device number 3 [ 78.303030][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.319239][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.338681][ T6293] sctp: [Deprecated]: syz.0.105 (pid 6293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.338681][ T6293] Use struct sctp_sack_info instead [ 78.355003][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.364871][ T980] usb 2-1: Product: syz [ 78.369475][ T980] usb 2-1: Manufacturer: syz [ 78.375029][ T980] usb 2-1: SerialNumber: syz [ 78.390754][ T980] usb 2-1: config 0 descriptor?? [ 78.406312][ T980] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 78.456616][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.595292][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.737294][ T5917] usb 5-1: device descriptor read/64, error -71 [ 78.770891][ T5861] usb 2-1: USB disconnect, device number 6 [ 78.857038][ T5917] usb usb5-port1: attempt power cycle [ 78.875013][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'. [ 79.056208][ T980] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.216234][ T5917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.223858][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 79.228221][ T6311] FAULT_INJECTION: forcing a failure. [ 79.228221][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.233379][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.242796][ T6311] CPU: 1 UID: 0 PID: 6311 Comm: syz.0.111 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 79.242821][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.242832][ T6311] Call Trace: [ 79.242839][ T6311] [ 79.242846][ T6311] dump_stack_lvl+0x189/0x250 [ 79.242872][ T6311] ? __pfx____ratelimit+0x10/0x10 [ 79.242896][ T6311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.242917][ T6311] ? __pfx__printk+0x10/0x10 [ 79.242940][ T6311] ? __might_fault+0xb0/0x130 [ 79.242967][ T6311] ? rcu_is_watching+0x15/0xb0 [ 79.242986][ T6311] should_fail_ex+0x414/0x560 [ 79.243010][ T6311] _copy_from_user+0x2d/0xb0 [ 79.243031][ T6311] get_compat_msghdr+0xad/0x4a0 [ 79.243059][ T6311] ? aa_file_perm+0x13a/0x1550 [ 79.243075][ T6311] ? rcu_is_watching+0x15/0xb0 [ 79.243093][ T6311] ? __pfx_get_compat_msghdr+0x10/0x10 [ 79.243121][ T6311] ? __pfx_css_rstat_updated+0x10/0x10 [ 79.243142][ T6311] ___sys_sendmsg+0x193/0x2a0 [ 79.243160][ T6311] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.243178][ T6311] ? kstrtoull+0x12f/0x1d0 [ 79.243213][ T6311] ? __fget_files+0x2a/0x420 [ 79.243228][ T6311] ? __fget_files+0x3a0/0x420 [ 79.243247][ T6311] __sys_sendmmsg+0x28e/0x430 [ 79.243266][ T6311] ? __pfx___sys_sendmmsg+0x10/0x10 [ 79.243287][ T6311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.243319][ T6311] ? ksys_write+0x22a/0x250 [ 79.243343][ T6311] ? __pfx_ksys_write+0x10/0x10 [ 79.243366][ T6311] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 79.243384][ T6311] __do_fast_syscall_32+0xb6/0x2b0 [ 79.243411][ T6311] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 79.243437][ T6311] do_fast_syscall_32+0x34/0x80 [ 79.243468][ T6311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.243490][ T6311] RIP: 0023:0xf70ee539 [ 79.243516][ T6311] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 79.243531][ T6311] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 79.243551][ T6311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540 [ 79.243563][ T6311] RDX: 00000000040001b6 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.243574][ T6311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.243585][ T6311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.243595][ T6311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.243612][ T6311] [ 79.503758][ T5917] usb 5-1: device descriptor read/8, error -71 [ 79.510398][ T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.520230][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.526905][ T980] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 79.535945][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.545277][ T980] usb 3-1: config 0 descriptor?? [ 79.576476][ T844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.636164][ T5938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.736153][ T844] usb 1-1: Using ep0 maxpacket: 32 [ 79.742908][ T844] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.746226][ T5917] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.751235][ T844] usb 1-1: config 0 has no interface number 0 [ 79.766159][ T5938] usb 4-1: device descriptor read/64, error -71 [ 79.775891][ T844] usb 1-1: config 0 interface 184 has no altsetting 0 [ 79.794499][ T5917] usb 5-1: device descriptor read/8, error -71 [ 79.804971][ T844] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.823175][ T844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.841041][ T844] usb 1-1: Product: syz [ 79.850847][ T844] usb 1-1: Manufacturer: syz [ 79.861116][ T844] usb 1-1: SerialNumber: syz [ 79.876812][ T844] usb 1-1: config 0 descriptor?? [ 79.886965][ T844] smsc75xx v1.0.0 [ 79.890945][ T844] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 79.908142][ T5917] usb usb5-port1: unable to enumerate USB device [ 79.926328][ T844] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 80.007047][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.137703][ T6316] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 80.144256][ T6316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.151935][ T5938] usb 4-1: device descriptor read/64, error -71 [ 80.152849][ T6316] vhci_hcd vhci_hcd.0: Device attached [ 80.167320][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.174889][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.183191][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.235838][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.276612][ T5938] usb usb4-port1: attempt power cycle [ 80.396162][ T844] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 80.630047][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 80.658068][ T5938] usb 4-1: device descriptor read/8, error -71 [ 80.753146][ T6327] delete_channel: no stack [ 80.906413][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 80.947057][ T5938] usb 4-1: device descriptor read/8, error -71 [ 81.066308][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 81.076305][ T5938] usb usb4-port1: unable to enumerate USB device [ 81.217511][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.230122][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.240322][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.249566][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.259790][ T6327] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 81.269973][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.513343][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.523357][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.627311][ T10] cfg80211: failed to load regulatory.db [ 81.831426][ T6317] vhci_hcd: connection reset by peer [ 81.841014][ T1105] vhci_hcd: stop threads [ 81.847491][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 81.863106][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 81.867110][ T1105] vhci_hcd: release socket [ 81.887867][ T980] usb 3-1: USB disconnect, device number 4 [ 81.901163][ T1105] vhci_hcd: disconnect device [ 81.977059][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 82.183010][ T6342] FAULT_INJECTION: forcing a failure. [ 82.183010][ T6342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.196766][ T6342] CPU: 1 UID: 0 PID: 6342 Comm: syz.1.123 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 82.196793][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.196805][ T6342] Call Trace: [ 82.196811][ T6342] [ 82.196819][ T6342] dump_stack_lvl+0x189/0x250 [ 82.196846][ T6342] ? __pfx____ratelimit+0x10/0x10 [ 82.196870][ T6342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.196891][ T6342] ? __pfx__printk+0x10/0x10 [ 82.196912][ T6342] ? __might_fault+0xb0/0x130 [ 82.196939][ T6342] ? rcu_is_watching+0x15/0xb0 [ 82.196959][ T6342] should_fail_ex+0x414/0x560 [ 82.196983][ T6342] _copy_from_user+0x2d/0xb0 [ 82.197005][ T6342] __sys_bpf+0x1ed/0x870 [ 82.197029][ T6342] ? __pfx___sys_bpf+0x10/0x10 [ 82.197056][ T6342] ? ksys_write+0x22a/0x250 [ 82.197081][ T6342] ? __pfx_ksys_write+0x10/0x10 [ 82.197110][ T6342] __ia32_sys_bpf+0x7c/0x90 [ 82.197140][ T6342] __do_fast_syscall_32+0xb6/0x2b0 [ 82.197168][ T6342] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 82.197194][ T6342] do_fast_syscall_32+0x34/0x80 [ 82.197219][ T6342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.197240][ T6342] RIP: 0023:0xf7ff2539 [ 82.197255][ T6342] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 82.197271][ T6342] RSP: 002b:00000000f551655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 82.197291][ T6342] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000ac0 [ 82.197305][ T6342] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.197315][ T6342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.197325][ T6342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.197335][ T6342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.197353][ T6342] [ 82.433171][ T980] usb 1-1: USB disconnect, device number 4 [ 82.671977][ T6353] FAULT_INJECTION: forcing a failure. [ 82.671977][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.719609][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.3.125 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 82.719635][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.719647][ T6353] Call Trace: [ 82.719653][ T6353] [ 82.719660][ T6353] dump_stack_lvl+0x189/0x250 [ 82.719686][ T6353] ? __pfx____ratelimit+0x10/0x10 [ 82.719711][ T6353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.719732][ T6353] ? __pfx__printk+0x10/0x10 [ 82.719752][ T6353] ? __might_fault+0xb0/0x130 [ 82.719779][ T6353] ? rcu_is_watching+0x15/0xb0 [ 82.719799][ T6353] should_fail_ex+0x414/0x560 [ 82.719822][ T6353] _copy_to_iter+0x1db/0x16f0 [ 82.719838][ T6353] ? rcu_is_watching+0x15/0xb0 [ 82.719855][ T6353] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.719897][ T6353] ? __pfx__copy_to_iter+0x10/0x10 [ 82.719912][ T6353] ? remove_wait_queue+0x33/0x120 [ 82.719935][ T6353] ? sk_wait_data+0x404/0x4a0 [ 82.719956][ T6353] __skb_datagram_iter+0x41a/0x990 [ 82.719977][ T6353] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 82.719999][ T6353] skb_copy_datagram_iter+0xc5/0x230 [ 82.720018][ T6353] tcp_recvmsg_locked+0xec6/0x3660 [ 82.720066][ T6353] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 82.720090][ T6353] ? mntput_no_expire+0xb9/0x9d0 [ 82.720112][ T6353] ? rcu_is_watching+0x15/0xb0 [ 82.720129][ T6353] ? mntput_no_expire+0xb9/0x9d0 [ 82.720151][ T6353] ? unwind_next_frame+0xa5/0x2390 [ 82.720171][ T6353] ? rcu_is_watching+0x15/0xb0 [ 82.720188][ T6353] ? aa_label_sk_perm+0x4cd/0x630 [ 82.720216][ T6353] ? rcu_is_watching+0x15/0xb0 [ 82.720234][ T6353] ? tcp_recvmsg+0x1fa/0x810 [ 82.720257][ T6353] ? __local_bh_enable_ip+0x12d/0x1c0 [ 82.720278][ T6353] tcp_recvmsg+0x216/0x810 [ 82.720301][ T6353] ? __pfx___might_resched+0x10/0x10 [ 82.720319][ T6353] ? __pfx_tcp_recvmsg+0x10/0x10 [ 82.720344][ T6353] ? aa_sk_perm+0x81e/0x950 [ 82.720365][ T6353] ? __pfx_tcp_recvmsg+0x10/0x10 [ 82.720385][ T6353] inet6_recvmsg+0x138/0x6b0 [ 82.720402][ T6353] ? __pfx_aa_sk_perm+0x10/0x10 [ 82.720426][ T6353] ? __pfx_inet6_recvmsg+0x10/0x10 [ 82.720442][ T6353] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 82.720461][ T6353] ? security_socket_recvmsg+0x7e/0x2e0 [ 82.720482][ T6353] sock_recvmsg+0x105/0x270 [ 82.720505][ T6353] sock_read_iter+0x231/0x2f0 [ 82.720527][ T6353] ? __pfx_sock_read_iter+0x10/0x10 [ 82.720551][ T6353] ? bpf_lsm_file_permission+0x9/0x20 [ 82.720572][ T6353] ? security_file_permission+0x75/0x290 [ 82.720598][ T6353] vfs_read+0x55a/0xa30 [ 82.720624][ T6353] ? __pfx_vfs_read+0x10/0x10 [ 82.720648][ T6353] ? __fget_files+0x2a/0x420 [ 82.720665][ T6353] ksys_read+0x145/0x250 [ 82.720684][ T6353] ? __pfx_ksys_read+0x10/0x10 [ 82.720699][ T6353] __do_fast_syscall_32+0xb6/0x2b0 [ 82.720714][ T6353] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 82.720729][ T6353] do_fast_syscall_32+0x34/0x80 [ 82.720743][ T6353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.720756][ T6353] RIP: 0023:0xf709e539 [ 82.720765][ T6353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 82.720774][ T6353] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 82.720786][ T6353] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800007c0 [ 82.720793][ T6353] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.720798][ T6353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.720804][ T6353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.720809][ T6353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.720818][ T6353] [ 82.813071][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 83.026395][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 83.273679][ T6379] netlink: 755 bytes leftover after parsing attributes in process `syz.1.137'. [ 83.618998][ T6400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.643890][ T5938] usb 5-1: USB disconnect, device number 9 [ 83.906170][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 84.079187][ T6400] "syz.1.140" (6400) uses obsolete ecb(arc4) skcipher [ 84.266454][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 84.274857][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.284080][ T24] usb 4-1: config 0 has no interface number 0 [ 84.293772][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 84.334975][ T6424] kvm: user requested TSC rate below hardware speed [ 84.463984][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.485106][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.570305][ T24] usb 4-1: Product: syz [ 84.581796][ T24] usb 4-1: Manufacturer: syz [ 84.607528][ T24] usb 4-1: SerialNumber: syz [ 84.636807][ T24] usb 4-1: config 0 descriptor?? [ 84.660609][ T24] smsc75xx v1.0.0 [ 84.691792][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 84.715519][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 84.785767][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 85.239085][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 85.316548][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.358275][ T6437] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 85.476259][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 85.490171][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.501663][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 85.516431][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.528878][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.536195][ T844] vhci_hcd: vhci_device speed not set [ 85.657273][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 85.718784][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.765733][ T10] usb 2-1: config 0 descriptor?? [ 86.510200][ T24] usb 4-1: USB disconnect, device number 8 [ 86.609380][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 86.723017][ T6467] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 86.748769][ T6467] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 87.941836][ T6483] hub 9-0:1.0: USB hub found [ 87.948884][ T6483] hub 9-0:1.0: 1 port detected [ 88.407336][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 88.413501][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 88.432528][ T10] usb 2-1: USB disconnect, device number 7 [ 88.484276][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.166'. [ 88.536394][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 88.786464][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 89.177776][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.186051][ T24] usb 4-1: config 179 has no interface number 0 [ 89.194326][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 89.205703][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 89.220939][ T24] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 89.231324][ T24] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.245126][ T24] usb 4-1: config 179 interface 65 has no altsetting 0 [ 89.256669][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 89.265959][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.456863][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.536257][ T5938] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 89.565913][ T10] usb 4-1: USB disconnect, device number 9 [ 89.649864][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 89.663944][ T43] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.676158][ T5938] usb 3-1: device descriptor read/64, error -71 [ 89.689025][ T43] usb 5-1: config 0 has no interface number 0 [ 89.703320][ T43] usb 5-1: config 0 interface 184 has no altsetting 0 [ 89.725302][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.740857][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.771439][ T43] usb 5-1: Product: syz [ 89.780062][ T43] usb 5-1: Manufacturer: syz [ 89.807033][ T43] usb 5-1: SerialNumber: syz [ 89.825477][ T43] usb 5-1: config 0 descriptor?? [ 89.840338][ T43] smsc75xx v1.0.0 [ 89.845259][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 89.864566][ T43] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 89.936827][ T5938] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 90.127506][ T5938] usb 3-1: device descriptor read/64, error -71 [ 90.236833][ T5938] usb usb3-port1: attempt power cycle [ 90.546163][ T5917] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 90.636205][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.645076][ T5938] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 90.758942][ T5938] usb 3-1: device descriptor read/8, error -71 [ 90.807412][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.817726][ T5917] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 90.827582][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.837420][ T5917] usb 4-1: config 0 descriptor?? [ 90.906315][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 90.912851][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.924060][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.933857][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.940642][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 90.950156][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.961387][ T10] usb 2-1: config 0 descriptor?? [ 91.016168][ T5938] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 91.046751][ T5938] usb 3-1: device descriptor read/8, error -71 [ 91.157405][ T5938] usb usb3-port1: unable to enumerate USB device [ 91.399953][ T6532] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 91.406486][ T6532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.426518][ T6532] vhci_hcd vhci_hcd.0: Device attached [ 91.435692][ T6532] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 91.447673][ T6532] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 91.646228][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.666374][ T43] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 91.792759][ T5938] usb 5-1: USB disconnect, device number 10 [ 91.797550][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 91.860712][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.870320][ T24] usb 1-1: config 0 has no interface number 0 [ 91.878117][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 91.890325][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 91.891414][ T6546] netlink: 'syz.2.183': attribute type 32 has an invalid length. [ 91.908176][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 91.911381][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.917492][ T6546] (unnamed net_device) (uninitialized): option coupled_control: invalid value (32) [ 91.940828][ T24] usb 1-1: Product: syz [ 91.946571][ T24] usb 1-1: Manufacturer: syz [ 91.951302][ T24] usb 1-1: SerialNumber: syz [ 91.955013][ T6546] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 91.960879][ T24] usb 1-1: config 0 descriptor?? [ 91.962383][ T6546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.964232][ T6546] vhci_hcd vhci_hcd.0: Device attached [ 92.146696][ T5861] vhci_hcd: vhci_device speed not set [ 92.176200][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 92.206133][ T5861] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 92.329886][ T5938] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 92.339078][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.347272][ T5938] usb 5-1: Product: syz [ 92.351472][ T5938] usb 5-1: Manufacturer: syz [ 92.357544][ T5938] usb 5-1: SerialNumber: syz [ 92.365444][ T5938] usb 5-1: config 0 descriptor?? [ 92.372322][ T5938] ch341 5-1:0.0: ch341-uart converter detected [ 92.671680][ T24] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 92.694768][ T24] usb 1-1: USB disconnect, device number 5 [ 92.757506][ T6547] vhci_hcd: connection reset by peer [ 92.763182][ T3600] vhci_hcd: stop threads [ 92.767998][ T3600] vhci_hcd: release socket [ 92.772570][ T3600] vhci_hcd: disconnect device [ 93.304960][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 93.330864][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 93.364159][ T5917] usb 4-1: USB disconnect, device number 10 [ 93.385964][ T5938] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 93.399683][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 93.427633][ T6537] vhci_hcd: connection reset by peer [ 93.439984][ T49] vhci_hcd: stop threads [ 93.444319][ T49] vhci_hcd: release socket [ 93.455755][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 93.464660][ T49] vhci_hcd: disconnect device [ 93.480663][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 93.534434][ T10] usb 2-1: USB disconnect, device number 8 [ 93.607880][ T5917] usb 5-1: USB disconnect, device number 11 [ 93.631202][ T5917] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 93.696648][ T5917] ch341 5-1:0.0: device disconnected [ 94.161032][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 94.206334][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.496592][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 94.503261][ T6593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.196'. [ 94.555734][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.757270][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 94.789487][ T10] usb 1-1: config 0 has no interface number 0 [ 94.908498][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 95.026366][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 95.050679][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.063419][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.418229][ T10] usb 1-1: Product: syz [ 95.486411][ T10] usb 1-1: Manufacturer: syz [ 95.491105][ T10] usb 1-1: SerialNumber: syz [ 95.492751][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.514029][ T10] usb 1-1: config 0 descriptor?? [ 95.520218][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 95.539252][ T10] smsc75xx v1.0.0 [ 95.556119][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 95.584098][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.612443][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 95.651759][ T24] usb 4-1: config 0 descriptor?? [ 96.029547][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 96.608040][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 96.615895][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.628017][ T5937] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.638272][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.645639][ T5937] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 96.658158][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.668354][ T5937] usb 3-1: config 0 descriptor?? [ 96.815007][ T10] usb 1-1: USB disconnect, device number 6 [ 96.823159][ T43] vhci_hcd: vhci_device speed not set [ 96.982300][ T6626] sctp: [Deprecated]: syz.0.207 (pid 6626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.982300][ T6626] Use struct sctp_sack_info instead [ 97.020276][ T6628] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.045064][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 97.047295][ T6628] netlink: 'syz.1.208': attribute type 21 has an invalid length. [ 97.065024][ T6628] netlink: 156 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.077899][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.218102][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'. [ 97.264650][ T6607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 97.271185][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.301685][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 97.323754][ T6640] netdevsim netdevsim2: Direct firmware load for nel/address_bits failed with error -2 [ 97.365059][ T6640] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/address_bits [ 97.472161][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 97.548600][ T6652] sctp: [Deprecated]: syz.1.216 (pid 6652) Use of int in maxseg socket option. [ 97.548600][ T6652] Use struct sctp_assoc_value instead [ 97.564103][ T6652] FAULT_INJECTION: forcing a failure. [ 97.564103][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.569215][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.584696][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.585682][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz.1.216 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 97.585706][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.585718][ T6652] Call Trace: [ 97.585725][ T6652] [ 97.585732][ T6652] dump_stack_lvl+0x189/0x250 [ 97.585758][ T6652] ? __pfx____ratelimit+0x10/0x10 [ 97.585783][ T6652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.585803][ T6652] ? __pfx__printk+0x10/0x10 [ 97.585829][ T6652] ? rcu_is_watching+0x15/0xb0 [ 97.585848][ T6652] should_fail_ex+0x414/0x560 [ 97.585873][ T6652] _copy_to_user+0x31/0xb0 [ 97.585894][ T6652] simple_read_from_buffer+0xe1/0x170 [ 97.585921][ T6652] proc_fail_nth_read+0x1b3/0x220 [ 97.585942][ T6652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.585962][ T6652] ? rw_verify_area+0x2a6/0x4d0 [ 97.585984][ T6652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.586004][ T6652] vfs_read+0x1fd/0xa30 [ 97.586024][ T6652] ? fdget_pos+0x247/0x320 [ 97.586040][ T6652] ? __pfx___mutex_lock+0x10/0x10 [ 97.586069][ T6652] ? __pfx_vfs_read+0x10/0x10 [ 97.586093][ T6652] ? __fget_files+0x3a0/0x420 [ 97.586108][ T6652] ? __fget_files+0x2a/0x420 [ 97.586126][ T6652] ksys_read+0x145/0x250 [ 97.586148][ T6652] ? __pfx_ksys_read+0x10/0x10 [ 97.586173][ T6652] __do_fast_syscall_32+0xb6/0x2b0 [ 97.586200][ T6652] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 97.586226][ T6652] do_fast_syscall_32+0x34/0x80 [ 97.586251][ T6652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.586273][ T6652] RIP: 0023:0xf7ff2539 [ 97.586288][ T6652] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 97.586303][ T6652] RSP: 002b:00000000f5516590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 97.586322][ T6652] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5516620 [ 97.586335][ T6652] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 97.586346][ T6652] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 97.586357][ T6652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.586367][ T6652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.586384][ T6652] [ 97.729667][ T6657] FAULT_INJECTION: forcing a failure. [ 97.729667][ T6657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.773581][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 97.779329][ T5861] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 97.787633][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: syz.3.218 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 97.787660][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.787670][ T6657] Call Trace: [ 97.787678][ T6657] [ 97.787685][ T6657] dump_stack_lvl+0x189/0x250 [ 97.787712][ T6657] ? __pfx____ratelimit+0x10/0x10 [ 97.787738][ T6657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.787759][ T6657] ? __pfx__printk+0x10/0x10 [ 97.787794][ T6657] ? rcu_is_watching+0x15/0xb0 [ 97.787814][ T6657] should_fail_ex+0x414/0x560 [ 97.787839][ T6657] _copy_to_user+0x31/0xb0 [ 97.787861][ T6657] simple_read_from_buffer+0xe1/0x170 [ 97.787889][ T6657] proc_fail_nth_read+0x1b3/0x220 [ 97.787911][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.787933][ T6657] ? rw_verify_area+0x2a6/0x4d0 [ 97.787955][ T6657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.787976][ T6657] vfs_read+0x1fd/0xa30 [ 97.787998][ T6657] ? fdget_pos+0x247/0x320 [ 97.788016][ T6657] ? __pfx___mutex_lock+0x10/0x10 [ 97.788042][ T6657] ? __pfx_vfs_read+0x10/0x10 [ 97.788067][ T6657] ? __fget_files+0x3a0/0x420 [ 97.788082][ T6657] ? __fget_files+0x2a/0x420 [ 97.788101][ T6657] ksys_read+0x145/0x250 [ 97.788125][ T6657] ? __pfx_ksys_read+0x10/0x10 [ 97.788147][ T6657] ? __secure_computing+0xe2/0x2a0 [ 97.788168][ T6657] __do_fast_syscall_32+0xb6/0x2b0 [ 97.788220][ T6657] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 97.788246][ T6657] do_fast_syscall_32+0x34/0x80 [ 97.788272][ T6657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.788294][ T6657] RIP: 0023:0xf709e539 [ 97.788309][ T6657] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 97.788324][ T6657] RSP: 002b:00000000f548e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 97.788343][ T6657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f548e620 [ 97.788356][ T6657] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 97.788366][ T6657] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 97.788377][ T6657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.788388][ T6657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.788404][ T6657] [ 97.795444][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.085650][ T24] usb 4-1: USB disconnect, device number 11 [ 98.222735][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.275796][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.285405][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.306020][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.366411][ T6668] netlink: ct family unspecified [ 98.372433][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.428359][ T6660] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.536584][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 98.614497][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 98.623779][ T6660] usb 2-1: Using ep0 maxpacket: 32 [ 98.732337][ T6660] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.801328][ T6660] usb 2-1: config 0 has no interface number 0 [ 99.101672][ T6638] vhci_hcd: connection reset by peer [ 99.145796][ T6660] usb 2-1: config 0 interface 184 has no altsetting 0 [ 99.155594][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 99.170015][ T49] vhci_hcd: stop threads [ 99.174501][ T49] vhci_hcd: release socket [ 99.181363][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.209287][ T49] vhci_hcd: disconnect device [ 99.226289][ T6660] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.256005][ T5937] usb 3-1: USB disconnect, device number 9 [ 99.336117][ T6660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.344137][ T6660] usb 2-1: Product: syz [ 99.399348][ T6660] usb 2-1: Manufacturer: syz [ 99.459420][ T6660] usb 2-1: SerialNumber: syz [ 99.553880][ T6660] usb 2-1: config 0 descriptor?? [ 99.575459][ T6660] smsc75xx v1.0.0 [ 99.579322][ T6660] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 99.609860][ T6660] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 99.627786][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 99.923551][ T6701] openvswitch: netlink: Flow actions attr not present in new flow. [ 100.022993][ T6704] FAULT_INJECTION: forcing a failure. [ 100.022993][ T6704] name failslab, interval 1, probability 0, space 0, times 0 [ 100.053000][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.2.232 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 100.053027][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.053039][ T6704] Call Trace: [ 100.053046][ T6704] [ 100.053053][ T6704] dump_stack_lvl+0x189/0x250 [ 100.053080][ T6704] ? __pfx____ratelimit+0x10/0x10 [ 100.053115][ T6704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.053136][ T6704] ? __pfx__printk+0x10/0x10 [ 100.053159][ T6704] ? read_seqbegin+0x1ac/0x250 [ 100.053182][ T6704] ? __pfx___might_resched+0x10/0x10 [ 100.053200][ T6704] ? lock_acquire+0x5f/0x360 [ 100.053227][ T6704] should_fail_ex+0x414/0x560 [ 100.053251][ T6704] should_failslab+0xa8/0x100 [ 100.053278][ T6704] __kmalloc_noprof+0xcb/0x4f0 [ 100.053302][ T6704] ? tomoyo_encode+0x28b/0x550 [ 100.053321][ T6704] tomoyo_encode+0x28b/0x550 [ 100.053341][ T6704] tomoyo_realpath_from_path+0x58d/0x5d0 [ 100.053364][ T6704] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 100.053388][ T6704] tomoyo_path_number_perm+0x1e8/0x5a0 [ 100.053414][ T6704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.053439][ T6704] ? kstrtouint+0x6e/0xe0 [ 100.053465][ T6704] ? get_pid_task+0x20/0x1f0 [ 100.053486][ T6704] ? rcu_is_watching+0x15/0xb0 [ 100.053521][ T6704] ? lock_release+0x4b/0x3e0 [ 100.053549][ T6704] ? __fget_files+0x3a0/0x420 [ 100.053570][ T6704] ? __fget_files+0x2a/0x420 [ 100.053587][ T6704] security_file_ioctl_compat+0xcb/0x2d0 [ 100.053612][ T6704] __ia32_compat_sys_ioctl+0x128/0x840 [ 100.053636][ T6704] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 100.053659][ T6704] ? __fget_files+0x3a0/0x420 [ 100.053678][ T6704] ? ksys_write+0x22a/0x250 [ 100.053704][ T6704] ? __secure_computing+0xe2/0x2a0 [ 100.053725][ T6704] __do_fast_syscall_32+0xb6/0x2b0 [ 100.053753][ T6704] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 100.053780][ T6704] do_fast_syscall_32+0x34/0x80 [ 100.053806][ T6704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.053829][ T6704] RIP: 0023:0xf709e539 [ 100.053844][ T6704] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 100.053860][ T6704] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 100.053880][ T6704] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008561c [ 100.053896][ T6704] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.053908][ T6704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.053919][ T6704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.053930][ T6704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.053947][ T6704] [ 100.055118][ T6704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.351068][ T6704] vivid-000: disconnect [ 100.431269][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 100.454733][ T5937] vivid-000: reconnect [ 100.483167][ T6717] sctp: [Deprecated]: syz.3.237 (pid 6717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.483167][ T6717] Use struct sctp_sack_info instead [ 100.525814][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 100.706145][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 101.268562][ T5924] usb 2-1: USB disconnect, device number 9 [ 101.308519][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 101.315266][ T10] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 101.323824][ T10] usb 3-1: config 0 has no interface number 0 [ 101.332026][ T10] usb 3-1: config 0 interface 209 altsetting 1 bulk endpoint 0xB has invalid maxpacket 16 [ 101.350552][ T10] usb 3-1: config 0 interface 209 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 101.509754][ T10] usb 3-1: config 0 interface 209 has no altsetting 0 [ 101.776015][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=68.92 [ 101.828337][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.847106][ T10] usb 3-1: Product: syz [ 101.855277][ T10] usb 3-1: Manufacturer: syz [ 101.860527][ T10] usb 3-1: SerialNumber: syz [ 101.868119][ T10] usb 3-1: config 0 descriptor?? [ 101.874481][ T6716] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.217455][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.250'. [ 102.346556][ T6756] sctp: [Deprecated]: syz.3.249 (pid 6756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.346556][ T6756] Use struct sctp_sack_info instead [ 102.892083][ T6771] sctp: [Deprecated]: syz.1.263 (pid 6771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.892083][ T6771] Use struct sctp_sack_info instead [ 102.908636][ T5861] vhci_hcd: vhci_device speed not set [ 103.622635][ T6787] netlink: 'syz.4.258': attribute type 10 has an invalid length. [ 103.639342][ T6787] netlink: 2 bytes leftover after parsing attributes in process `syz.4.258'. [ 103.972238][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 104.000202][ T6792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.220143][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 104.514169][ T6804] sctp: [Deprecated]: syz.3.266 (pid 6804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.514169][ T6804] Use struct sctp_sack_info instead [ 104.530838][ T844] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 104.693094][ T844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.703703][ T844] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 104.713736][ T844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.723962][ T844] usb 5-1: config 0 descriptor?? [ 105.043036][ T844] usbhid 5-1:0.0: can't add hid device: -71 [ 105.049698][ T844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.064512][ T844] usb 5-1: USB disconnect, device number 12 [ 105.096268][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.113699][ T10] usb 3-1: invalid MIDI in EP 0 [ 105.245931][ T10] snd-usb-audio 3-1:0.209: probe with driver snd-usb-audio failed with error -22 [ 105.289818][ T10] usb 3-1: USB disconnect, device number 10 [ 105.315261][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.209/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.439061][ T6818] openvswitch: netlink: Message has 8 unknown bytes. [ 105.469522][ T6818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.483895][ T6822] Invalid logical block size (510) [ 105.575338][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.276'. [ 105.634644][ T6829] netlink: 104 bytes leftover after parsing attributes in process `syz.3.273'. [ 105.646481][ T6835] sctp: [Deprecated]: syz.4.277 (pid 6835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.646481][ T6835] Use struct sctp_sack_info instead [ 105.823997][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.279'. [ 105.839574][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.279'. [ 105.877049][ T6848] mmap: syz.1.282 (6848) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.947249][ T6844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.279'. [ 106.697923][ T5917] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 106.903828][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.914661][ T5917] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 106.927944][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.939064][ T5917] usb 3-1: config 0 descriptor?? [ 107.022431][ T6876] sctp: [Deprecated]: syz.1.290 (pid 6876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.022431][ T6876] Use struct sctp_sack_info instead [ 107.208799][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 107.220952][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 107.234887][ T5917] usb 3-1: USB disconnect, device number 11 [ 107.252063][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 107.828747][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.084750][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 108.101981][ T5917] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.110474][ T5917] usb 1-1: config 0 has no interface number 0 [ 108.131986][ T5917] usb 1-1: config 0 interface 184 has no altsetting 0 [ 108.323213][ T844] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 108.487289][ T5917] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.506590][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.517285][ T5917] usb 1-1: Product: syz [ 108.521708][ T5917] usb 1-1: Manufacturer: syz [ 108.572108][ T5917] usb 1-1: SerialNumber: syz [ 108.574242][ T844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.583651][ T5917] usb 1-1: config 0 descriptor?? [ 108.623844][ T5917] smsc75xx v1.0.0 [ 108.630618][ T5917] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 108.642187][ T5917] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 108.692406][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.303'. [ 108.721646][ T844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.791669][ T844] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.800815][ T844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.809231][ T844] usb 3-1: SerialNumber: syz [ 109.042347][ T844] usb 3-1: 0:2 : does not exist [ 109.047490][ T844] usb 3-1: unit 5: unexpected type 0x03 [ 109.071471][ T844] usb 3-1: USB disconnect, device number 12 [ 109.087347][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 109.181236][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.221832][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 109.231966][ T5861] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 109.243969][ T6930] openvswitch: netlink: Missing valid actions attribute. [ 109.253550][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.386129][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 109.392747][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 109.406422][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 109.457378][ T5861] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 109.471563][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.488312][ T5861] usb 4-1: config 0 descriptor?? [ 109.506287][ T5917] IPVS: starting estimator thread 0... [ 109.531106][ T6940] tipc: Started in network mode [ 109.536040][ T6940] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.543432][ T6940] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.676197][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.706219][ T6939] IPVS: using max 41 ests per chain, 98400 per kthread [ 109.758806][ T6940] tipc: Enabled bearer , priority 10 [ 109.816349][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.956119][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.093993][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.102646][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.184930][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.228205][ T5861] aquacomputer_d5next 0003:0C70:F010.0001: unknown main item tag 0x0 [ 110.236203][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.236599][ T5861] aquacomputer_d5next 0003:0C70:F010.0001: unknown main item tag 0x0 [ 110.268422][ T5861] aquacomputer_d5next 0003:0C70:F010.0001: unknown main item tag 0x0 [ 110.284129][ T5861] aquacomputer_d5next 0003:0C70:F010.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.3-1/input0 [ 110.376116][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.457612][ T5861] usb 4-1: USB disconnect, device number 12 [ 110.488349][ T10] usb 1-1: USB disconnect, device number 7 [ 110.516390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.548833][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 110.566119][ T844] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 110.669919][ T6660] tipc: Node number set to 2886997162 [ 110.718734][ T844] usb 5-1: config 0 has no interfaces? [ 110.727532][ T844] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.737600][ T844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.752674][ T844] usb 5-1: Product: syz [ 110.757607][ T844] usb 5-1: Manufacturer: syz [ 110.762549][ T844] usb 5-1: SerialNumber: syz [ 110.831643][ T844] usb 5-1: config 0 descriptor?? [ 111.050743][ T6956] FAULT_INJECTION: forcing a failure. [ 111.050743][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 111.139417][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.4.318 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 111.139445][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.139456][ T6956] Call Trace: [ 111.139462][ T6956] [ 111.139470][ T6956] dump_stack_lvl+0x189/0x250 [ 111.139496][ T6956] ? __pfx____ratelimit+0x10/0x10 [ 111.139522][ T6956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.139541][ T6956] ? __pfx__printk+0x10/0x10 [ 111.139567][ T6956] ? fs_reclaim_acquire+0x7d/0x100 [ 111.139593][ T6956] ? __pfx___might_resched+0x10/0x10 [ 111.139609][ T6956] ? lock_acquire+0x5f/0x360 [ 111.139634][ T6956] should_fail_ex+0x414/0x560 [ 111.139658][ T6956] should_failslab+0xa8/0x100 [ 111.139685][ T6956] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.139732][ T6956] ? vm_area_dup+0x2b/0x680 [ 111.139758][ T6956] vm_area_dup+0x2b/0x680 [ 111.139787][ T6956] copy_vma+0x4da/0x940 [ 111.139808][ T6956] ? __pfx_copy_vma+0x10/0x10 [ 111.139833][ T6956] ? percpu_counter_add_batch+0xea/0x1e0 [ 111.139857][ T6956] move_vma+0x81f/0x1840 [ 111.139879][ T6956] ? mtree_load+0x100/0x700 [ 111.139905][ T6956] ? arch_get_unmapped_area_topdown+0x251/0xbc0 [ 111.139927][ T6956] ? __pfx_move_vma+0x10/0x10 [ 111.139946][ T6956] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 111.139972][ T6956] ? cap_mmap_addr+0xb0/0x100 [ 111.139992][ T6956] ? bpf_lsm_mmap_addr+0x9/0x20 [ 111.140011][ T6956] ? security_mmap_addr+0x71/0x270 [ 111.140034][ T6956] mremap_to+0x6d6/0x7a0 [ 111.140054][ T6956] ? __pfx_mremap_to+0x10/0x10 [ 111.140074][ T6956] ? check_prep_vma+0x724/0xb00 [ 111.140096][ T6956] __se_sys_mremap+0xca4/0xf10 [ 111.140121][ T6956] ? __pfx___se_sys_mremap+0x10/0x10 [ 111.140142][ T6956] ? fput+0xa0/0xd0 [ 111.140160][ T6956] ? ksys_write+0x22a/0x250 [ 111.140187][ T6956] ? __ia32_sys_mremap+0x20/0xc0 [ 111.140209][ T6956] __do_fast_syscall_32+0xb6/0x2b0 [ 111.140235][ T6956] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 111.140258][ T6956] do_fast_syscall_32+0x34/0x80 [ 111.140281][ T6956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.140302][ T6956] RIP: 0023:0xf70ae539 [ 111.140317][ T6956] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 111.140333][ T6956] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 111.140351][ T6956] RAX: ffffffffffffffda RBX: 000000008007b000 RCX: 0000000000002000 [ 111.140364][ T6956] RDX: 0000000000001000 RSI: 0000000000000003 RDI: 0000000080239000 [ 111.140380][ T6956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.140390][ T6956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.140400][ T6956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.140417][ T6956] [ 111.160212][ T6660] usb 5-1: USB disconnect, device number 13 [ 111.430223][ T844] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 111.573803][ T6982] FAULT_INJECTION: forcing a failure. [ 111.573803][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 111.586592][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.2.330 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 111.586617][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.586628][ T6982] Call Trace: [ 111.586635][ T6982] [ 111.586642][ T6982] dump_stack_lvl+0x189/0x250 [ 111.586668][ T6982] ? __pfx____ratelimit+0x10/0x10 [ 111.586692][ T6982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.586713][ T6982] ? __pfx__printk+0x10/0x10 [ 111.586737][ T6982] ? idr_alloc_u32+0x1b7/0x2d0 [ 111.586761][ T6982] ? __pfx___might_resched+0x10/0x10 [ 111.586797][ T6982] ? lock_acquire+0x5f/0x360 [ 111.586823][ T6982] should_fail_ex+0x414/0x560 [ 111.586847][ T6982] should_failslab+0xa8/0x100 [ 111.586873][ T6982] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.586895][ T6982] ? __kernfs_new_node+0xd7/0x7e0 [ 111.586912][ T6982] ? lock_acquire+0x5f/0x360 [ 111.586936][ T6982] __kernfs_new_node+0xd7/0x7e0 [ 111.586955][ T6982] ? lock_acquire+0x5f/0x360 [ 111.586979][ T6982] ? __pfx___kernfs_new_node+0x10/0x10 [ 111.586997][ T6982] ? rcu_is_watching+0x15/0xb0 [ 111.587015][ T6982] ? kernfs_root+0x1c/0x230 [ 111.587034][ T6982] ? rcu_is_watching+0x15/0xb0 [ 111.587049][ T6982] ? kernfs_root+0x1c/0x230 [ 111.587067][ T6982] ? lock_release+0x4b/0x3e0 [ 111.587088][ T6982] ? kernfs_root+0x1c/0x230 [ 111.587103][ T6982] ? kernfs_root+0x1c/0x230 [ 111.587121][ T6982] kernfs_new_node+0x102/0x210 [ 111.587140][ T6982] __kernfs_create_file+0x4b/0x2e0 [ 111.587167][ T6982] sysfs_add_file_mode_ns+0x238/0x300 [ 111.587197][ T6982] internal_create_group+0x66d/0x1110 [ 111.587222][ T6982] ? rcu_is_watching+0x15/0xb0 [ 111.587239][ T6982] ? __pfx_internal_create_group+0x10/0x10 [ 111.587267][ T6982] ? lock_release+0x4b/0x3e0 [ 111.587293][ T6982] ? down_write+0x162/0x1f0 [ 111.587313][ T6982] sysfs_create_groups+0x59/0x120 [ 111.587342][ T6982] device_add_attrs+0xe0/0x5a0 [ 111.587363][ T6982] ? __pfx_device_add_attrs+0x10/0x10 [ 111.587383][ T6982] ? device_add_class_symlinks+0x21f/0x240 [ 111.587403][ T6982] device_add+0x496/0xb50 [ 111.587418][ T6982] ? device_initialize+0x24b/0x440 [ 111.587435][ T6982] netdev_register_kobject+0x178/0x310 [ 111.587457][ T6982] register_netdevice+0x126c/0x1ae0 [ 111.587483][ T6982] ? __pfx_register_netdevice+0x10/0x10 [ 111.587501][ T6982] ? trace_kmalloc+0x1f/0xd0 [ 111.587523][ T6982] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 111.587547][ T6982] ? tun_net_initialize+0x18d/0x450 [ 111.587566][ T6982] ? __pfx_tun_net_initialize+0x10/0x10 [ 111.587585][ T6982] ? alloc_netdev_mqs+0xd9b/0x11b0 [ 111.587607][ T6982] tun_set_iff+0x844/0xef0 [ 111.587628][ T6982] __tun_chr_ioctl+0x788/0x1df0 [ 111.587646][ T6982] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 111.587666][ T6982] ? __fget_files+0x3a0/0x420 [ 111.587683][ T6982] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 111.587707][ T6982] __ia32_compat_sys_ioctl+0x540/0x840 [ 111.587731][ T6982] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 111.587753][ T6982] ? __fget_files+0x3a0/0x420 [ 111.587769][ T6982] ? fput+0xa0/0xd0 [ 111.587786][ T6982] ? ksys_write+0x22a/0x250 [ 111.587809][ T6982] ? __pfx_ksys_write+0x10/0x10 [ 111.587835][ T6982] __do_fast_syscall_32+0xb6/0x2b0 [ 111.587863][ T6982] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 111.587887][ T6982] do_fast_syscall_32+0x34/0x80 [ 111.587911][ T6982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.587932][ T6982] RIP: 0023:0xf709e539 [ 111.587948][ T6982] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 111.587963][ T6982] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 111.587983][ T6982] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 111.587996][ T6982] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.588007][ T6982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.588018][ T6982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.588028][ T6982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.588044][ T6982] [ 111.597598][ T844] usb 4-1: Using ep0 maxpacket: 16 [ 112.082160][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 112.099222][ T6996] tipc: Started in network mode [ 112.124451][ T6996] tipc: Node identity 0628a8211106, cluster identity 4711 [ 112.151016][ T844] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.173285][ T844] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.190551][ T844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.198300][ T844] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 112.199137][ T6996] tipc: Enabled bearer , priority 0 [ 112.207469][ T844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.230402][ T844] usb 4-1: config 0 descriptor?? [ 112.235724][ T7004] syzkaller0: entered promiscuous mode [ 112.250821][ T7004] syzkaller0: entered allmulticast mode [ 112.326594][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 112.436180][ T6660] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 112.495311][ T6996] tipc: Resetting bearer [ 112.496677][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 112.523240][ T43] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.531670][ T43] usb 3-1: config 0 has no interface number 0 [ 112.538140][ T43] usb 3-1: config 0 interface 184 has no altsetting 0 [ 112.551031][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.560653][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.569622][ T43] usb 3-1: Product: syz [ 112.573922][ T43] usb 3-1: Manufacturer: syz [ 112.579285][ T43] usb 3-1: SerialNumber: syz [ 112.588041][ T43] usb 3-1: config 0 descriptor?? [ 112.598203][ T43] smsc75xx v1.0.0 [ 112.601966][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 112.613187][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 112.629532][ T6660] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.666856][ T6660] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.676798][ T6990] tipc: Resetting bearer [ 112.694339][ T6990] tipc: Disabling bearer [ 112.706587][ T6660] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 112.715815][ T6660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.726142][ T6660] usb 5-1: Product: syz [ 112.726502][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.730346][ T6660] usb 5-1: Manufacturer: syz [ 112.768467][ T6660] usb 5-1: SerialNumber: syz [ 112.784856][ T6660] usb 5-1: config 0 descriptor?? [ 112.916613][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 112.923435][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.931770][ T10] usb 1-1: config 0 has no interface number 0 [ 112.939184][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 112.951126][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.340'. [ 112.973126][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.990290][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.003055][ T10] usb 1-1: Product: syz [ 113.014541][ T10] usb 1-1: Manufacturer: syz [ 113.034342][ T10] usb 1-1: SerialNumber: syz [ 113.087689][ T10] usb 1-1: config 0 descriptor?? [ 113.107963][ T10] smsc75xx v1.0.0 [ 113.111829][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 113.123605][ T5861] usb 5-1: USB disconnect, device number 14 [ 113.141360][ T7016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 113.147894][ T7016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.157687][ T7016] vhci_hcd vhci_hcd.0: Device attached [ 113.158045][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 113.219148][ T7021] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 113.271746][ T7021] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 113.340416][ T7023] FAULT_INJECTION: forcing a failure. [ 113.340416][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 113.396356][ T43] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 113.406965][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.1.343 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 113.406984][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.406991][ T7023] Call Trace: [ 113.406996][ T7023] [ 113.407000][ T7023] dump_stack_lvl+0x189/0x250 [ 113.407017][ T7023] ? __pfx____ratelimit+0x10/0x10 [ 113.407031][ T7023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.407042][ T7023] ? __pfx__printk+0x10/0x10 [ 113.407057][ T7023] ? __pfx___might_resched+0x10/0x10 [ 113.407066][ T7023] ? lock_acquire+0x5f/0x360 [ 113.407080][ T7023] should_fail_ex+0x414/0x560 [ 113.407102][ T7023] should_failslab+0xa8/0x100 [ 113.407117][ T7023] __kmalloc_noprof+0xcb/0x4f0 [ 113.407130][ T7023] ? kfree+0x4d/0x440 [ 113.407141][ T7023] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.407152][ T7023] tomoyo_realpath_from_path+0xe3/0x5d0 [ 113.407162][ T7023] ? tomoyo_domain+0xd9/0x130 [ 113.407173][ T7023] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 113.407186][ T7023] tomoyo_path_number_perm+0x1e8/0x5a0 [ 113.407199][ T7023] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.407212][ T7023] ? kstrtouint+0x6e/0xe0 [ 113.407226][ T7023] ? get_pid_task+0x20/0x1f0 [ 113.407238][ T7023] ? rcu_is_watching+0x15/0xb0 [ 113.407253][ T7023] ? lock_release+0x4b/0x3e0 [ 113.407267][ T7023] ? __fget_files+0x3a0/0x420 [ 113.407275][ T7023] ? __fget_files+0x2a/0x420 [ 113.407284][ T7023] security_file_ioctl_compat+0xcb/0x2d0 [ 113.407298][ T7023] __ia32_compat_sys_ioctl+0x128/0x840 [ 113.407311][ T7023] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 113.407322][ T7023] ? __fget_files+0x3a0/0x420 [ 113.407331][ T7023] ? fput+0xa0/0xd0 [ 113.407341][ T7023] ? ksys_write+0x22a/0x250 [ 113.407354][ T7023] ? __pfx_ksys_write+0x10/0x10 [ 113.407368][ T7023] __do_fast_syscall_32+0xb6/0x2b0 [ 113.407383][ T7023] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 113.407399][ T7023] do_fast_syscall_32+0x34/0x80 [ 113.407422][ T7023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.407444][ T7023] RIP: 0023:0xf7ff2539 [ 113.407455][ T7023] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 113.407469][ T7023] RSP: 002b:00000000f551655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 113.407489][ T7023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005420 [ 113.407502][ T7023] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.407514][ T7023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.407525][ T7023] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 113.407536][ T7023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.407553][ T7023] [ 113.415181][ T7023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.706207][ T6660] usb 1-1: USB disconnect, device number 8 [ 113.929009][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 113.969544][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 114.746118][ C1] net_ratelimit: 9 callbacks suppressed [ 114.746138][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 115.796102][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.827029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.866156][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 118.357045][ T844] usbhid 4-1:0.0: can't add hid device: -32 [ 118.363045][ T844] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 118.916125][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 119.946146][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.986110][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.026106][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.066108][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 124.106108][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.146191][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.186114][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.226116][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.266107][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.306135][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 130.346106][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.386108][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.426117][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.466265][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.506105][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.546105][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 136.586105][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.976026][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 218.982652][ C0] rcu: 0-...!: (1 GPs behind) idle=e8dc/1/0x4000000000000000 softirq=24839/24840 fqs=0 [ 218.992350][ C0] rcu: (t=10500 jiffies g=13973 q=225 ncpus=2) [ 218.998569][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g13973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 219.009739][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 219.019683][ C0] rcu: RCU grace-period kthread stack dump: [ 219.025554][ C0] task:rcu_preempt state:R running task stack:26760 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 219.039016][ C0] Call Trace: [ 219.042283][ C0] [ 219.045207][ C0] __schedule+0x1798/0x4cc0 [ 219.049706][ C0] ? __pfx___schedule+0x10/0x10 [ 219.054533][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.060402][ C0] ? schedule+0x91/0x360 [ 219.064622][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.069366][ C0] ? lock_release+0x4b/0x3e0 [ 219.073937][ C0] schedule+0x165/0x360 [ 219.078071][ C0] schedule_timeout+0x12b/0x270 [ 219.082898][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 219.088244][ C0] ? __pfx_process_timeout+0x10/0x10 [ 219.093502][ C0] ? prepare_to_swait_event+0x341/0x380 [ 219.099025][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 219.103854][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 219.108771][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 219.114037][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 219.119212][ C0] ? finish_swait+0xcd/0x1f0 [ 219.123796][ C0] rcu_gp_kthread+0x99/0x390 [ 219.128373][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 219.133550][ C0] ? __kthread_parkme+0x7b/0x200 [ 219.138471][ C0] ? __kthread_parkme+0x1a1/0x200 [ 219.143470][ C0] kthread+0x70e/0x8a0 [ 219.147530][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 219.152706][ C0] ? __pfx_kthread+0x10/0x10 [ 219.157274][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 219.162448][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.167624][ C0] ? __pfx_kthread+0x10/0x10 [ 219.172189][ C0] ret_from_fork+0x3f9/0x770 [ 219.176755][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 219.181846][ C0] ? __switch_to_asm+0x39/0x70 [ 219.186588][ C0] ? __switch_to_asm+0x33/0x70 [ 219.191334][ C0] ? __pfx_kthread+0x10/0x10 [ 219.195903][ C0] ret_from_fork_asm+0x1a/0x30 [ 219.200649][ C0] [ 219.203657][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 219.209960][ C0] Sending NMI from CPU 0 to CPUs 1: [ 219.215163][ C1] NMI backtrace for cpu 1 [ 219.215188][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 219.215224][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.215241][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 219.215267][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 219.215282][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00000246 [ 219.215296][ C1] RAX: ffffffff8172213d RBX: 0000000000000003 RCX: ffff88801d2c5a00 [ 219.215308][ C1] RDX: 0000000000000100 RSI: ffffffff8be334e0 RDI: ffffffff8172210b [ 219.215320][ C1] RBP: ffffc90000a08890 R08: ffffffff8fa38137 R09: 1ffffffff1f47026 [ 219.215333][ C1] R10: dffffc0000000000 R11: fffffbfff1f47027 R12: dffffc0000000000 [ 219.215345][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff920001410fc [ 219.215356][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 219.215370][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.215381][ C1] CR2: 0000000080000000 CR3: 00000000331c6000 CR4: 00000000003526f0 [ 219.215396][ C1] Call Trace: [ 219.215404][ C1] [ 219.215410][ C1] kvm_wait+0x232/0x290 [ 219.215431][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 219.215452][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 219.215476][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 219.215503][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 219.215531][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 219.215552][ C1] do_raw_spin_lock+0x21f/0x290 [ 219.215572][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.215591][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 219.215614][ C1] ? rcu_is_watching+0x15/0xb0 [ 219.215633][ C1] __xfrm_state_delete+0xba/0xca0 [ 219.215657][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.215676][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.215697][ C1] xfrm_timer_handler+0x18f/0xa00 [ 219.215723][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 219.215745][ C1] ? rcu_is_watching+0x15/0xb0 [ 219.215761][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.215781][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 219.215803][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 219.215826][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 219.215848][ C1] __hrtimer_run_queues+0x529/0xc60 [ 219.215871][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 219.215886][ C1] ? read_tsc+0x9/0x20 [ 219.215908][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 219.215927][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 219.215945][ C1] handle_softirqs+0x283/0x870 [ 219.215962][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 219.215980][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 219.216000][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 219.216021][ C1] __irq_exit_rcu+0xca/0x1f0 [ 219.216036][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 219.216061][ C1] irq_exit_rcu+0x9/0x30 [ 219.216075][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 219.216096][ C1] [ 219.216101][ C1] [ 219.216107][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.216126][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 219.216147][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 219.216160][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 219.216174][ C1] RAX: 5184a5a3f31c2f00 RBX: ffffffff81968308 RCX: 5184a5a3f31c2f00 [ 219.216186][ C1] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 219.216197][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 219.216209][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38130 [ 219.216222][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 219.216234][ C1] ? do_idle+0x1e8/0x510 [ 219.216249][ C1] ? do_idle+0x1e8/0x510 [ 219.216264][ C1] default_idle+0x13/0x20 [ 219.216278][ C1] default_idle_call+0x74/0xb0 [ 219.216293][ C1] do_idle+0x1e8/0x510 [ 219.216309][ C1] ? __pfx_do_idle+0x10/0x10 [ 219.216329][ C1] cpu_startup_entry+0x44/0x60 [ 219.216344][ C1] start_secondary+0x101/0x110 [ 219.216367][ C1] common_startup_64+0x13e/0x147 [ 219.216393][ C1] [ 219.217150][ C0] CPU: 0 UID: 0 PID: 7029 Comm: syz.4.346 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 219.217171][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.217180][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3c/0x70 [ 219.217203][ C0] Code: 8b 15 98 a5 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 83 fa 02 75 21 <48> 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39 [ 219.217217][ C0] RSP: 0000:ffffc9000ffa70d8 EFLAGS: 00000246 [ 219.217232][ C0] RAX: ffffffff8a2193e2 RBX: 0000000035000000 RCX: ffff888026b75a00 [ 219.217245][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000035000000 [ 219.217256][ C0] RBP: ffffc9000ffa7230 R08: 0000000000000000 R09: 0000000000000000 [ 219.217267][ C0] R10: dffffc0000000000 R11: fffff52001ff4e0c R12: dffffc0000000000 [ 219.217280][ C0] R13: ffff888079090000 R14: 0000000000000000 R15: ffffc9000ffa76a0 [ 219.217293][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0063) knlGS:00000000f549eb40 [ 219.217308][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 219.217320][ C0] CR2: 0000000057a144c0 CR3: 0000000030f0a000 CR4: 00000000003526f0 [ 219.217335][ C0] Call Trace: [ 219.217341][ C0] [ 219.217347][ C0] xfrm_alloc_spi+0x4b2/0xf30 [ 219.217366][ C0] ? xfrm_alloc_spi+0x2a0/0xf30 [ 219.217389][ C0] ? __pfx_xfrm_alloc_spi+0x10/0x10 [ 219.217406][ C0] ? xfrm_find_acq+0x87/0xa0 [ 219.217426][ C0] xfrm_alloc_userspi+0x70b/0xc90 [ 219.217451][ C0] ? xfrm_get_translator+0x1b/0x240 [ 219.217470][ C0] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 219.217492][ C0] ? __nla_parse+0x40/0x60 [ 219.217517][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 219.217538][ C0] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 219.217569][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 219.217588][ C0] ? kasan_save_track+0x4f/0x80 [ 219.217610][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.217627][ C0] ? trace_contention_end+0x39/0x120 [ 219.217644][ C0] ? __mutex_lock+0x335/0x1350 [ 219.217669][ C0] netlink_rcv_skb+0x208/0x470 [ 219.217694][ C0] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 219.217714][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.217741][ C0] ? lock_release+0x4b/0x3e0 [ 219.217763][ C0] ? net_generic+0x1e/0x240 [ 219.217781][ C0] ? net_generic+0x1e/0x240 [ 219.217805][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.217828][ C0] xfrm_netlink_rcv+0x79/0x90 [ 219.217846][ C0] netlink_unicast+0x82c/0x9e0 [ 219.217870][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 219.217892][ C0] ? netlink_sendmsg+0x642/0xb30 [ 219.217915][ C0] ? skb_put+0x11b/0x210 [ 219.217931][ C0] netlink_sendmsg+0x805/0xb30 [ 219.217959][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.217983][ C0] ? __import_iovec+0x5d4/0x7f0 [ 219.218001][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 219.218016][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.218035][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.218059][ C0] __sock_sendmsg+0x219/0x270 [ 219.218082][ C0] ____sys_sendmsg+0x505/0x830 [ 219.218101][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.218120][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 219.218146][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 219.218164][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.218183][ C0] ? futex_wait+0x285/0x360 [ 219.218214][ C0] ? __fget_files+0x2a/0x420 [ 219.218228][ C0] ? __fget_files+0x3a0/0x420 [ 219.218246][ C0] __sys_sendmsg+0x164/0x220 [ 219.218263][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.218282][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.218302][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 219.218328][ C0] ? irqentry_exit_to_user_mode+0xd6/0x120 [ 219.218352][ C0] do_fast_syscall_32+0x34/0x80 [ 219.218376][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.218396][ C0] RIP: 0023:0xf70ae539 [ 219.218418][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.218433][ C0] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 219.218449][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080014800 [ 219.218461][ C0] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.218471][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.218482][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.218492][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.218507][ C0]