last executing test programs: 6m9.958882619s ago: executing program 2 (id=360): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0xfffe, @multicast, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) 6m9.732227399s ago: executing program 2 (id=362): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000010000000020000000100000000000000140000000700"], 0x30}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x622141, 0x11) 6m9.644843223s ago: executing program 2 (id=363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6m9.451314829s ago: executing program 2 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000002580), 0xc8d, 0x2001) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000080000040"]) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000240)) 6m9.335017239s ago: executing program 2 (id=366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x4000040, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x9, 0x4) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x5) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000200)={{0x7, 0xe339, 0x1, 0x6}, 'syz0\x00', 0x14}) ioctl$UI_DEV_CREATE(r2, 0x5501) (fail_nth: 3) 6m9.150558007s ago: executing program 2 (id=367): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = fsopen(0x0, 0x0) close(r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 6m8.78645343s ago: executing program 32 (id=367): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = fsopen(0x0, 0x0) close(r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 35.751645128s ago: executing program 0 (id=1798): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) 34.698640074s ago: executing program 0 (id=1803): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="1324", 0x2}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = socket(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x40, 0x2, 0x4, 0x20, 0x4224, {r3, r4/1000+10000}, {0x5, 0x0, 0x4, 0xa, 0x8d, 0x2, "97e2fb83"}, 0x6a9, 0x4, {}, 0x448}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000006c0)=@multiplanar_userptr={0xfff, 0x1, 0x4, 0x100000, 0x5b, {}, {0x2, 0x1, 0x0, 0x7f, 0x8, 0xe, "ca96d0cc"}, 0x5, 0x2, {&(0x7f00000002c0)=[{0x8, 0x7, {&(0x7f0000000140)}, 0xf27f}, {0x0, 0x0, {&(0x7f00000001c0)}, 0x3}]}, 0x1}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r9, 0x2285, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) (async) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r10, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x2}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0xa8) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r12, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r12, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0)={r12, 0x8}, &(0x7f0000000400)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 34.55649678s ago: executing program 4 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 34.461114182s ago: executing program 4 (id=1805): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000007880)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) writev(r2, &(0x7f0000000080), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r8], 0x3c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r9, 0x9, &(0x7f0000000000)=0x8000000000000001, &(0x7f00000000c0)=0x7ff) 31.884829539s ago: executing program 0 (id=1818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0) rmdir(0x0) socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r2, &(0x7f0000000240)="2d2effb164e851c32c26bb0bf3e4d2bbfda4d30a3a7e52cd887baa4985a014bda6d6332eee98913867a6198d2f6c8f7a73d6775d66c1e6936acdaef4999af8d89fa219a6f5d864880d361dee3e2854808c147708a1c3", 0x56, 0x6004480d, 0x0, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r5 = socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000180)='exfat\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) open(0x0, 0x82840, 0xc6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0xc00, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4b, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 31.866386944s ago: executing program 4 (id=1819): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000001600)=""/117, 0x75}, {&(0x7f0000002c40)=""/4086, 0xff6}, {&(0x7f00000018c0)=""/147, 0x93}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10000}], 0x5, 0x40008022, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 29.74688646s ago: executing program 4 (id=1821): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r6, {0x5, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x12) r9 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r9, 0x2dbe, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 27.733281389s ago: executing program 0 (id=1831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080001000000000000000001907800000000ffffffff2a00907800000000"], 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x7, 0x3ff, 0x5, 0x100, 0x0, 0x0, 0x9}, 0x9c) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000100), 0x10) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000894}, 0x44011) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x5, 0x8800) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="e5446209ded12049cbde6a4b84f876db0e852d1f3cf3766fe53b7486ed1ffe58c453faf95f5f8e028fe8cc584bc076d263209a42d8184e067f502b6d2b2ac8329f8445750dfadf2b675b899ca1fe3c4d3e39411303065f6f18e8523616120a19613f70d9ef3eed1eca32f6b825cae5ea1a22ef8a944a6de8b8f9edb1482b67450203b5b4cc819195a1184e0bd830", @ANYRESDEC=0x0, @ANYBLOB=',nolazytime,\x00'], 0x1, 0x0, 0x0) 27.732704741s ago: executing program 1 (id=1832): r0 = socket(0x40000000015, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000d80), &(0x7f0000000200)=0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r3, 0x4, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 26.068736218s ago: executing program 4 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e03fc7fdd5c980128854d"], 0xffdd) 25.529465996s ago: executing program 4 (id=1837): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) 24.978947712s ago: executing program 5 (id=1839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1406, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc044) (async) syz_usb_connect(0x0, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202"], 0x0) 24.189632112s ago: executing program 1 (id=1841): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x47, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r5, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000180)=0x8, 0x4) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[], 0xc) 23.869975116s ago: executing program 5 (id=1843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000500)={{r0}, 0x7, &(0x7f00000003c0)=[0xa2000, 0x2, 0x101, 0x1, 0x3ff, 0xff, 0x7], 0x80, 0x7}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0x9, 0x1, 0x0, {0x1, 0x1, 0x1, 0x201, 0x6dc6, 0x7659, 0x170a, 0x7, 0xe000, 0x4000, 0xcd35, 0xee01, 0xffffffffffffffff, 0x100a, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000002380)=@newtfilter={0x1618, 0x2c, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xfff2}, {0x4, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x1588, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x194, 0x3, [@m_sample={0xc8, 0x1e, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x83}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffff81}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x2, 0x10000000, 0x100, 0x400}}]}, {0x6c, 0x6, "20a4901f29794be460b5f8ee79a37f24c89160545cffe634984edc3d8524ed25117b879bf13045153b06835ee3a3a56dcdbeef6a9e93c3262e19e71e662b7139f6a30f411ef55c88b40669ef52153c6c35c9103ea2acd5637ddf47310836380c1030fff5668b3bc5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xc8, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x9f, 0x6, "5371dece6868648b3a088fcbe9014e34a4d82866483c6807c219665d303474f4041f819be8a681fcfc10bc2fb38062c8b8bba9d9a163d0e9fda8268edb5cbb9329437ff0c1eaab793d5a3e7490fb32099bc41ea10020a8288b1937f1c4f6edf02788698abbc66ffc002ac658510ff12977ade86c7bf8c5987b53c1a269680b5a19dd73f1c8f9db20881c6d4dfadc4fe18c6bd1d485d0fc2f90a804"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffffffff, 0x1, 0x1ff, 0xffffff31, 0x7, 0x7, 0x4, 0x7, 0x2, 0xfffffffe, 0x7, 0x5, 0x8000, 0xff, 0x7b4, 0x9, 0xfc7, 0x6, 0x1, 0xfffffffa, 0x5, 0x7d3c, 0x0, 0x0, 0x7, 0x3, 0xffffffb4, 0xe, 0x3, 0x1, 0x8, 0x0, 0x10, 0x0, 0x5, 0x2, 0x800, 0x4, 0x8, 0x7, 0x5, 0x5, 0x1, 0x7, 0x3a51, 0x8, 0x39df, 0xe, 0xfff, 0x2, 0xffff, 0x4, 0x40, 0x8069, 0x0, 0x8a, 0x2e, 0x9, 0xfffffffc, 0x5, 0x2, 0xffffffff, 0x80000001, 0x1, 0x100, 0x5, 0x8, 0x40, 0x6, 0x2, 0x7, 0x2, 0x0, 0x3, 0x1, 0x6, 0x19ccc053, 0x0, 0x4, 0x1, 0x9, 0x3, 0x4f, 0x80000000, 0x8, 0xe4b8, 0x4, 0x2, 0x3, 0x0, 0x9d70, 0x6, 0x4, 0x6, 0x2, 0x5, 0x0, 0x4, 0x7f, 0x5, 0xffffffeb, 0x7, 0x9e2, 0x401, 0x16, 0xff, 0x1, 0xffff4d83, 0x80000000, 0x9, 0x400, 0x1, 0x1, 0x0, 0xeb, 0x9, 0xc, 0x6, 0x7, 0x2, 0x401, 0x200, 0xffff, 0x1, 0x6, 0xba9, 0x1, 0x0, 0x523, 0x5, 0xeec0, 0xffffffff, 0x7, 0x6, 0x75, 0x849, 0x401, 0x7ff, 0x200, 0x3ee, 0x9, 0x4, 0x8001, 0x2, 0x6, 0xffffffff, 0x3, 0x1, 0x5f, 0x0, 0x8001, 0x6, 0x10001, 0x1, 0x200, 0x1, 0xbd, 0x0, 0xd, 0x1, 0x8000, 0x7, 0x2, 0x2, 0x3, 0x200, 0x101, 0x5, 0x4, 0x2, 0x6, 0xaba, 0x5, 0x10000, 0x1, 0xfffffffb, 0x1, 0xa, 0x6, 0x8, 0x6, 0x8, 0x4, 0x6, 0x6d51, 0x1, 0x4, 0x100, 0x3d89, 0x5d, 0x1, 0x0, 0x1, 0x3, 0x4, 0x1ff, 0x1, 0xa, 0x6, 0x897, 0x200, 0x94, 0x43a, 0x8fb, 0x585d10fd, 0x8000, 0xd, 0x2d1b, 0x8001, 0x728, 0x80000001, 0x3ff, 0x7, 0x8, 0x1, 0xfe4, 0x1, 0x242, 0x5, 0x3, 0x8, 0x5d3, 0x8, 0x6, 0x1, 0x0, 0x80000001, 0x8, 0x6, 0x1, 0x0, 0xf, 0x9, 0x2, 0x16, 0x6, 0x200, 0x95, 0x6b, 0x5, 0xaf07, 0x3, 0x3, 0x8, 0x4, 0x4, 0xffff, 0xd4, 0x2, 0x8, 0xf14, 0x0, 0x6, 0x7ff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4c8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x366f}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0xfc4, 0x3, [@m_skbmod={0x844, 0x20, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xa0, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ac7, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x48000, 0x20000000, 0x7, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xfffffffa, 0x0, 0x5, 0x80}}]}, {0x38, 0x6, "e14e3fdf6bd04494351e22cb57eec44368f060dbd37ac649de0a694484baebb5890cb6683be3ade856b7c9028f3b67caab787db9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x1e4, 0x15, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x8, 0x3, 0x7d, 0x8001}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x401, 0x7, 0x6, 0x9, 0x8}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x401}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x512b, 0x2, 0x4, 0xa54, 0x4}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x0, 0x7, 0x9, 0xfffffffc}, 0x1}}]}, {0xfd, 0x6, "0cbc87bc259ad4f569dd4aef80fe6ebe487abcf3ae29c81310ec2bef52eaa87aa4aaeb9db42c17f72ac382de72c7908be3d081ee05f5c86bf9054b9ccd7469eb2a2a7a4f832f3daa87e5c25ad7ec9690ae259dcd8f55133e78dea183be706a253c694eedd0d7aae5e8b5799ee506aff0fd08eb780eae866d15f35fb717add3e1e6614ca99e6d44ae7609624e02c8a43683c853f9342b4dc0229057b00b2d7dde88bc5f542378e6b60100d242fff3f1ef086590250639ce771047fe1441874fb2d7530f5da201a0576eb397eaa956b59373bfad1b1cbb1b2868af986890f199ea21eb6ccb0ae4a656b5c7df1e139b8847e7666aa98fd0b74524"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x58, 0x13, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xe, 0x8, 0x20000000, 0x8, 0x954f}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x160, 0x12, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x4, 0x4, 0x7}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x1, 0xf, 0x6}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xef, 0xffffffffffffffff, 0x62c, 0x5a1d}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x101, 0x4, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x10000000, 0x8, 0x7}, 0x6d}}]}, {0xa8, 0x6, "fe9bbe9b9ac8fffd7069a70edc400e45ad94a4a525e721cd4b804d2de3849e691d631a2fc5611a7df2b65171984ae8dacc8951043a9a59838ee275df3dbfc1cd3829b2daa399645bfb34bff6341da6b8a5fceecf25af5c74b6367b237d47c2bc98da8a08be52e0cd7515626294162dd3552c1f155879dc63706b980a2a74e69a5d6b547ee99b571869f1450ca5dab8413847da518259a64f26de42fd9c871b965858acc3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x6c, 0xb, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x8, 0x20000000, 0x4, 0x7}, 0x2}}]}, {0x9, 0x6, "e29ff7cf07"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x124, 0x12, 0x0, 0x0, {{0xa}, {0x4}, {0xf5, 0x6, "187a4e6082a69b5aacbfb03a6d08ffe46b032ebc8784a8f704ae2e13f28e039e004f81c5e8b327338cabac9e3d734611487d6360fd4253d011cbf2affbf11a64d581f8ef78d413be4186aaec5367e6b889bd98fb67543cfbdba2b36b4f36dcb983249c995371db2eb907de113a7ec13e58e969f81182a4d81e88ff89641926cb6a217407509629291992f2eb403261b979d42c720003ac5a313dd25704c2f852a18fcaad3d2f255b4f0dabe70c7dce4526a6fb85c33647043176c77093552b6626eaa4680a5cdbb73c1ac29f9617a4ea90b670acd6c932f9f001da29b93a35a7fe2d6938a53355ad4a56f1bac8d4858488"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7}}}}, @m_bpf={0x94, 0x19, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0x6, 0x6, '.\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xcc, 0x80}]}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x401, 0xffff, 0x0, 0xff, 0x3}}]}, {0x18, 0x6, "e517ec8c2e12c5a3273a04d07516d10d28e301a7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x11c, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xb39c, 0x8, 0x4, 0xfffff4c7}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fffffff, 0xffffffffffffffff, 0x5, 0x7}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x0, 0x4}, 0x52}}]}, {0x9a, 0x6, "b3a39765305ecba72e30263a0f97290e2c18f7d88682b4ad5d6188ea0b76ba38328fffdf6105c7ce7c2c99bcdbf5bc0e98e5768887e34f3961947ea8efcd40ccf6bcb54932c7a2b72d1afa53de5712d7516792d3a3081ada3df139d74c349fa69ce3b6a515bc876032cf42b208fe12d07624b8df53d7d3e0df011909f5ccb7e7d63d7eaa12332288690ec4343c77fadae261d184d22e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xff000000, 0xff, 0xffffffff]}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0xe0}]}}, @TCA_RATE={0x6, 0x5, {0x3d, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x106}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1618}, 0x1, 0x0, 0x0, 0x4004}, 0x4000001) chmod(&(0x7f0000000040)='./file0\x00', 0x2c) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000600)={0x3, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x4}}, {{0xa, 0x4e21, 0x2, @private2, 0x8000}}}, 0x108) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b, 0x0, @val=@iter={&(0x7f0000000080)=@cgroup={0x3, 0xffffffffffffffff, 0xf}, 0xfffffffffffffe68}}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) read$FUSE(0xffffffffffffffff, &(0x7f0000005140)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000017000500fe", 0x2d}, {&(0x7f0000000f40)="0137e2a0f6b1317e967020328e8c76da20b23f2fb8aa7aa58c7329481cf2f8c656e1dc04fe4436a2043a692cf1c142c9f31a2917c4ca0c26daa275734d9cbfecabb58cc1187a3735d584bb8dddf8edfd3dab83e3b681c5bb701f6c03f90d895542191a97021cdfbd5c92bff0e9d726506df3a693f5872deec33b55d0ae48cfa5be4012409918350168125326a990621f1acbb3e53b7a6c242a12fa7b5402c47817996a218b6bd44efb4c94", 0xab}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 23.381620654s ago: executing program 1 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) 22.626917265s ago: executing program 0 (id=1849): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$amidi(&(0x7f0000000240), 0x3e0, 0x123c80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 22.590450679s ago: executing program 1 (id=1850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xb8, 0x1d, 0xc6, 0x10, 0x110a, 0x1250, 0x3c49, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0xd0, 0x7, [{{0x9, 0x4, 0x84, 0x2, 0x0, 0x4a, 0xf8, 0x19}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x2, 0x9}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 22.517862662s ago: executing program 5 (id=1851): r0 = socket(0x40000000015, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000d80), &(0x7f0000000200)=0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r3, 0x4, 0x0) fcntl$setstatus(r3, 0x4, 0x42400) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 19.718076801s ago: executing program 0 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (fail_nth: 5) 19.360460807s ago: executing program 1 (id=1857): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002080)={0x19, 0x3, {0xc25f, @struct={0x5, 0x3}, 0x0, 0x4, 0x8b, 0x7, 0x8, 0xf, 0x10, @usage=0xb0, 0x120000, 0x8, [0x6, 0xf44d, 0xfffffffffffffff0, 0x4, 0x3dd79625, 0x1]}, {0x5, @struct={0x2}, 0x0, 0x10000, 0x1, 0xce9d, 0x6, 0x401, 0x98, @struct={0xe90, 0xd5}, 0x0, 0x42a, [0x7f, 0x9, 0x10, 0x86a7, 0x855a]}, {0xffffffff00000001, @usage=0x1, 0x0, 0xffffffff, 0xf1db, 0x3, 0x80000000, 0x8001, 0x478, @usage=0xec15, 0x1000, 0x4, [0x7f, 0x6, 0xfffffffffffffffb, 0x1, 0x0, 0x5d45]}, {0x2, 0x8, 0x7f}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002480)={r4, 0x1, 0xa8, 0x1}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f00000028c0)={0xe, {0x6, 0x6, 0x3, 0xd7, "a599225d372116a12078eea2915f997fd09d94d79e250471835c70928f4f9e7496f71e22266b74aa000aa3f29e37deb4380b158b1ae7585e3fe72641ddcaa18516b6e737d1e486bf2404bbaaf23e4508f16b79660bb0e9944065e00ad7179d9a67e317451a9addb6aad16bf9978c82f8124ddc8b43a1b47c7215d01dd26dcaf74d19ef2dcc8aae191a8d3f20ae05e1a61a8785032361d179d6e0a72fab40d498530e6a8c23e681f1414c746d7f136bbffc51e6b9203d797a6be22e4108159b37a7adfe8e06e2cfb90cb08b2aa66c74b59dc828b7a58b07"}}, 0xe3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) clock_gettime(0x0, &(0x7f0000003d80)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f00000029c0)=@pppol2tpin6, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/29, 0x1d}, {&(0x7f0000003a80)=""/4, 0x4}, {&(0x7f0000003ac0)}, {&(0x7f0000003b00)=""/174, 0xae}, {&(0x7f0000003bc0)=""/235, 0xeb}], 0x6}, 0x3ff}], 0x1, 0x12000, &(0x7f0000003dc0)={r7, r8+60000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000003e00)=0x100) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000003e40)={@hyper}) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r9 = add_key$user(&(0x7f0000003e80), &(0x7f0000003ec0)={'syz', 0x0}, &(0x7f0000003f00)="4d26dccb50f9f56226139569811eadb3d41e53", 0x13, 0xfffffffffffffffa) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003f40)='memory.stat\x00', 0x0, 0x0) write$P9_RLINK(r10, &(0x7f0000003f80)={0x7, 0x47, 0x2}, 0x7) (async) ioctl$DRM_IOCTL_ADD_MAP(r10, 0xc0286415, &(0x7f0000003fc0)={&(0x7f0000fff000/0x1000)=nil, 0x1b7dd3d1, 0x2, 0x6}) (async) syz_clone(0x14000400, &(0x7f0000004000)="2e62a50cac2feeb0958e6e842156ee42ffaf114cc43e4261959e6b03181fa5340b427c1a2115dcb397ba7f1d594dcec7164dd673eda7659ff86161aed0baba5c89feb4da642102627d8352ae4703b3c3e356d47d7386819636ebd4a27daeb6516d5915a0cf4c9ec13963871c3bf41934f3d94daea4f984dfb52c69c48fed81493a00dd2b1eb857c6bd8aceb22739f9288c8023b62c676179a888a8557a0b4f547d6178bd696acb05eac3f53838cb51df7816d6cd3015ea9f78a1b4f10b901022ca747fe2f382bef9f6c2607fb560dcabf223977396710ad11c9975882c2be76060adf5afa1a1ac57a1870a25b8b1cbe3b6797a37", 0xf4, &(0x7f0000004100), &(0x7f0000004140), &(0x7f0000004180)="f61cdc") (async, rerun: 64) r11 = dup2(r10, r10) (rerun: 64) syz_mount_image$fuse(&(0x7f00000041c0), &(0x7f0000004200)='./file0\x00', 0x800, &(0x7f0000004240)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}], [{@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@euid_lt={'euid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, ':\x98,}^{.%,{'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}, 0x0, 0x0, &(0x7f00000043c0)="735fbdea6e4186537b104c6d8911d0f3882f4cbd95200528b43773e07d3bc66bc99aaa5332a4a58b4c922c96c7a111eaf4b18e6352d275764a1017aece3dc8d8ecfdcaf049d664525ef35ac0fc993206d2cf6afd311e30cfef692a41d3a8b85a599ac9d5bf840191b82155163b84c9ade71a59091408f43a0b8f375a2cd98bda4a8a3c9e5e6278c3df6892388f684c95879f3c668173600597fe71e820cc2bc0f6f9c8e13027e050e06b29dc05b3e98e5589860a0152ed20f797de0c7775447d6163090f2948f17a528233416bceb1fff3299ba61c21712e8b") (async) r12 = add_key$keyring(&(0x7f0000004540), &(0x7f0000004580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000044c0), &(0x7f0000004500)={'syz', 0x3}, 0x0, 0x0, r12) r13 = socket(0x1d, 0x4, 0x4) (async) keyctl$invalidate(0x15, r9) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000045c0)={0x0, 0x6, 0xe}, &(0x7f0000004600)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r13, 0x84, 0xf, &(0x7f0000004640)={r14, @in={{0x2, 0x4e20, @local}}, 0x0, 0x9, 0x5, 0x91b5, 0x3ec}, &(0x7f0000004700)=0x98) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x9) (async, rerun: 64) r15 = syz_open_procfs(r3, &(0x7f0000004740)='oom_score_adj\x00') (rerun: 64) setsockopt$MRT6_TABLE(r15, 0x29, 0xcf, &(0x7f0000004780)=0xffffffff, 0x4) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r15, 0x3b72, &(0x7f00000047c0)={0x7e, 0x6, 0x0, 0x401, "4f562ba3358dcad28dcf2dcd4dad4442493b81c9f2a7814f6f7a036465501489413392ca0ebcf5f7dbcc877d1f789b1cd4cccd536383e6a9080013ed5d6f754d432159b13e2ce616c6f0cfd51789e6d65bf40b2548c89d56553a4b7e199c167bf2deebf4b99f"}) 19.190975695s ago: executing program 1 (id=1858): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x44) 18.724228045s ago: executing program 5 (id=1859): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x5, 0x5, [0x1, 0x0, 0x9, 0x1, 0x0]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x5}, &(0x7f00000001c0)=0x8) fstat(r1, &(0x7f0000000d00)) 18.654918769s ago: executing program 5 (id=1860): fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x2c9ab000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (fail_nth: 5) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000a) 18.206985608s ago: executing program 5 (id=1861): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x2}, 0x802}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (fail_nth: 5) 16.866242091s ago: executing program 3 (id=1862): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040)=0xd, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x7fffffff, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x9, 0x1000000b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0xc95, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000400)={r6}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c0000000c00038008000200fd7f0000180001801400020076657468305f746f5f626f6e64000000"], 0x38}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x80000004}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 16.758702041s ago: executing program 3 (id=1863): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x13, r2, 0x0, 0x1, 0x0, 0xa, 0x3575eb, 0x3ed6d6}) 16.654535506s ago: executing program 3 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (fail_nth: 5) 16.376757686s ago: executing program 3 (id=1865): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x18}}, 0x0) 16.332369011s ago: executing program 3 (id=1866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103fc0, 0x0) setsockopt(r0, 0x86, 0x8, &(0x7f0000000280)="1a000000020000", 0xafe3bfad5e711240) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xbfffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xb4, "608e08ac8d3fb5fb769a20c3444a321888f39c0619ee3320a3ab100096374770adb3914445f868e6e1e1be2fa1a183b6f387d08a2effbe712062a9852f9210366c3f7b288d47b2810e14a2daba6d0ac0e6b4c8fceef4449490a36f20ba96e3393eaad5a9a0e24baa9f1b6301047d1e7705b38f5d1fb6e8116cf16375334419898ce01d37bcf53b708a96150d0bdcec70d4dfd31de0696b4e23703e50e13681f7c35fc0e2078c64e149f1e0f470f170a22db5dc19"}, &(0x7f0000000180)=0xbc) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x11ffffa, 0x10100, 0x3, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0xafef, 0x0, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fc00000000000000ffffffff0000000108000740000000002c00068014000500fe8000000000000000000000000000311400040020010000000000000000000000000001"], 0xc0}}, 0x0) readv(r7, &(0x7f0000000880)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1) 15.433499038s ago: executing program 3 (id=1867): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140005800800020000000000080001"], 0x3c}}, 0x0) (fail_nth: 5) 4.514890793s ago: executing program 33 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (fail_nth: 5) 4.010941416s ago: executing program 34 (id=1858): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x44) 3.008209482s ago: executing program 35 (id=1861): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x2}, 0x802}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (fail_nth: 5) 0s ago: executing program 36 (id=1867): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140005800800020000000000080001"], 0x3c}}, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): of the config [ 470.716301][ T5833] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 470.808532][T11496] syzkaller0: entered promiscuous mode [ 470.815478][T11496] syzkaller0: entered allmulticast mode [ 470.849059][ T5833] usb 2-1: config 0 has no interface number 0 [ 470.877385][ T5833] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.899980][ T5833] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 470.968209][ T5833] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 470.971061][T11499] gretap0: entered promiscuous mode [ 470.987893][T11499] macsec1: entered promiscuous mode [ 471.002026][T11499] gretap0: left promiscuous mode [ 471.029117][ T5833] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 471.077496][ T5833] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 471.102103][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.116900][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.132171][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.161569][ T5833] usb 2-1: Product: syz [ 471.177464][ T5833] usb 2-1: Manufacturer: syz [ 471.196557][ T5833] usb 2-1: SerialNumber: syz [ 471.247017][ T5833] usb 2-1: config 0 descriptor?? [ 471.471613][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.480573][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.496712][ T5833] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 471.525131][ T5833] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 471.569809][ T5833] usb 2-1: USB disconnect, device number 75 [ 471.647598][ T5833] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 471.671769][ T5833] cypress_m8 2-1:0.74: device disconnected [ 471.679208][ T5889] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 471.780044][ T5885] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 471.829359][ T5889] usb 1-1: device descriptor read/64, error -71 [ 471.974628][T11511] tipc: Started in network mode [ 471.982333][T11511] tipc: Node identity ac1414aa, cluster identity 4711 [ 471.992629][T11511] tipc: Enabled bearer , priority 10 [ 472.025683][ T5885] usb 4-1: no configurations [ 472.043730][ T5885] usb 4-1: can't read configurations, error -22 [ 472.079392][ T5889] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 472.219310][ T5885] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 472.259762][ T5889] usb 1-1: device descriptor read/64, error -71 [ 472.410019][ T5889] usb usb1-port1: attempt power cycle [ 472.424674][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 472.440285][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 472.451549][T11515] team0: Port device team_slave_1 removed [ 472.565922][ T5885] usb 4-1: no configurations [ 472.589296][ T5885] usb 4-1: can't read configurations, error -22 [ 472.622212][ T5885] usb usb4-port1: attempt power cycle [ 472.779204][ T5889] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 472.800416][ T5889] usb 1-1: device descriptor read/8, error -71 [ 472.960685][ T5884] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 473.019114][ T5885] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 473.059193][ T5889] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 473.097618][ T5885] usb 4-1: no configurations [ 473.102577][ T5889] usb 1-1: device descriptor read/8, error -71 [ 473.109619][ T3079] tipc: Node number set to 2886997162 [ 473.119398][ T5885] usb 4-1: can't read configurations, error -22 [ 473.230337][ T5889] usb usb1-port1: unable to enumerate USB device [ 473.349120][ T5885] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 473.417422][ T5885] usb 4-1: no configurations [ 473.424955][ T5885] usb 4-1: can't read configurations, error -22 [ 473.481938][ T5885] usb usb4-port1: unable to enumerate USB device [ 473.515543][ T5884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.657281][ T5884] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 473.719192][ T5884] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.728344][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.831727][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.841639][ T5884] usb 2-1: invalid MIDI out EP 0 [ 474.004289][ T5884] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 474.060360][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.070362][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.094439][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.104726][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.143281][T11535] FAULT_INJECTION: forcing a failure. [ 474.143281][T11535] name failslab, interval 1, probability 0, space 0, times 0 [ 474.161644][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.214598][T11535] CPU: 1 UID: 0 PID: 11535 Comm: syz.5.1671 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 474.214630][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 474.214641][T11535] Call Trace: [ 474.214648][T11535] [ 474.214655][T11535] dump_stack_lvl+0x189/0x250 [ 474.214683][T11535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.214704][T11535] ? __pfx__printk+0x10/0x10 [ 474.214724][T11535] ? ref_tracker_alloc+0x318/0x460 [ 474.214742][T11535] should_fail_ex+0x414/0x560 [ 474.214760][T11535] should_failslab+0xa8/0x100 [ 474.214780][T11535] kmem_cache_alloc_noprof+0x73/0x3c0 [ 474.214798][T11535] ? skb_clone+0x212/0x3a0 [ 474.214829][T11535] skb_clone+0x212/0x3a0 [ 474.214852][T11535] __netlink_deliver_tap+0x404/0x850 [ 474.214877][T11535] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.214894][T11535] netlink_deliver_tap+0x19c/0x1b0 [ 474.214911][T11535] netlink_unicast+0x72f/0x8d0 [ 474.214933][T11535] netlink_sendmsg+0x805/0xb30 [ 474.214956][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.214975][T11535] ? aa_sock_msg_perm+0x94/0x160 [ 474.214993][T11535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.215009][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.215026][T11535] __sock_sendmsg+0x219/0x270 [ 474.215043][T11535] ____sys_sendmsg+0x505/0x830 [ 474.215068][T11535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.215094][T11535] ? import_iovec+0x74/0xa0 [ 474.215116][T11535] ___sys_sendmsg+0x21f/0x2a0 [ 474.215137][T11535] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.215182][T11535] ? __fget_files+0x2a/0x420 [ 474.215200][T11535] ? __fget_files+0x3a0/0x420 [ 474.215226][T11535] __x64_sys_sendmsg+0x19b/0x260 [ 474.215248][T11535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.215279][T11535] ? do_syscall_64+0xba/0x210 [ 474.215301][T11535] do_syscall_64+0xf6/0x210 [ 474.215319][T11535] ? clear_bhb_loop+0x45/0xa0 [ 474.215337][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.215352][T11535] RIP: 0033:0x7f8eba78e969 [ 474.215364][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.215377][T11535] RSP: 002b:00007f8ebb676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.215392][T11535] RAX: ffffffffffffffda RBX: 00007f8eba9b5fa0 RCX: 00007f8eba78e969 [ 474.215403][T11535] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 474.215413][T11535] RBP: 00007f8ebb676090 R08: 0000000000000000 R09: 0000000000000000 [ 474.215422][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.215431][T11535] R13: 0000000000000000 R14: 00007f8eba9b5fa0 R15: 00007f8ebaadfa28 [ 474.215452][T11535] [ 474.216586][T11535] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 475.076681][ T5891] usb 2-1: USB disconnect, device number 76 [ 475.464752][T11550] IPv6: Can't replace route, no match found [ 476.145195][T11558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.153410][T11558] batadv_slave_1: entered promiscuous mode [ 476.161930][T11558] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1676'. [ 476.576099][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 477.566777][ T5889] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 477.567032][ T5885] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 477.750165][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 477.772894][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1855, setting to 1024 [ 477.784611][ T5885] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 477.805573][ T5889] usb 2-1: config 3 has an invalid interface number: 155 but max is 0 [ 477.814416][ T5891] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 477.817912][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.826181][ T5889] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 477.830566][ T5833] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 477.888925][ T5889] usb 2-1: config 3 has no interface number 0 [ 477.895628][ T5889] usb 2-1: config 3 interface 155 has no altsetting 0 [ 477.917063][ T5885] usb 4-1: config 0 descriptor?? [ 477.941832][T11574] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 477.942071][ T5889] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 477.954316][ T5885] usbhid 4-1:0.0: can't add hid device: -22 [ 477.977514][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 477.989260][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.061185][ T5833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.074203][ T5889] usb 2-1: Product: syz [ 478.078446][ T5889] usb 2-1: Manufacturer: syz [ 478.087346][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 478.092361][ T5833] usb 6-1: config 0 has no interfaces? [ 478.101053][ T5889] usb 2-1: SerialNumber: syz [ 478.123221][ T30] audit: type=1326 audit(1746781508.930:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae778e969 code=0x7ffc0000 [ 478.146179][ T5891] usb 1-1: can't read configurations, error -61 [ 478.157821][ T5833] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 478.180561][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.189449][ T5885] usb 4-1: USB disconnect, device number 85 [ 478.196093][ T30] audit: type=1326 audit(1746781508.960:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1ae778e969 code=0x7ffc0000 [ 478.203144][ T5833] usb 6-1: Product: syz [ 478.218374][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.237619][ T5833] usb 6-1: Manufacturer: syz [ 478.242867][ T5833] usb 6-1: SerialNumber: syz [ 478.308542][ T5833] usb 6-1: config 0 descriptor?? [ 478.319278][ T5891] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 478.349618][ T30] audit: type=1326 audit(1746781508.960:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae778e969 code=0x7ffc0000 [ 478.375441][ T30] audit: type=1326 audit(1746781508.960:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae778e969 code=0x7ffc0000 [ 478.397833][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.437543][T11592] syzkaller0: entered allmulticast mode [ 478.487092][T11592] syzkaller0 (unregistering): left allmulticast mode [ 478.508961][ T5889] usb 2-1: USB disconnect, device number 77 [ 478.568424][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 478.579661][ T5891] usb 1-1: can't read configurations, error -61 [ 478.599487][ T5891] usb usb1-port1: attempt power cycle [ 478.604963][ T30] audit: type=1326 audit(1746781508.960:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1ae778e969 code=0x7ffc0000 [ 478.613599][T11582] program syz.5.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.024717][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.050738][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.139116][ T5891] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 479.591448][T11597] pim6reg1: entered promiscuous mode [ 479.596885][T11597] pim6reg1: entered allmulticast mode [ 479.684080][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 479.699112][ T5891] usb 1-1: can't read configurations, error -61 [ 480.019167][ T5891] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 480.063682][ T5891] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 480.071846][ T5891] usb 1-1: can't read configurations, error -61 [ 480.089688][ T5891] usb usb1-port1: unable to enumerate USB device [ 480.109343][ T5828] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 480.376789][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.437784][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.493965][ T5828] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.784958][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 481.084960][ T5828] usb 4-1: SerialNumber: syz [ 481.279822][ T5833] usb 6-1: USB disconnect, device number 63 [ 481.353262][T11613] FAULT_INJECTION: forcing a failure. [ 481.353262][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 481.599371][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.5.1693 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 481.599395][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 481.599404][T11613] Call Trace: [ 481.599411][T11613] [ 481.599418][T11613] dump_stack_lvl+0x189/0x250 [ 481.599446][T11613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.599476][T11613] ? __pfx__printk+0x10/0x10 [ 481.599496][T11613] ? ref_tracker_alloc+0x318/0x460 [ 481.599532][T11613] should_fail_ex+0x414/0x560 [ 481.599550][T11613] should_failslab+0xa8/0x100 [ 481.599571][T11613] kmem_cache_alloc_noprof+0x73/0x3c0 [ 481.599589][T11613] ? skb_clone+0x212/0x3a0 [ 481.599611][T11613] skb_clone+0x212/0x3a0 [ 481.599634][T11613] __netlink_deliver_tap+0x404/0x850 [ 481.599659][T11613] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.599677][T11613] netlink_deliver_tap+0x19c/0x1b0 [ 481.599693][T11613] netlink_unicast+0x72f/0x8d0 [ 481.599715][T11613] netlink_sendmsg+0x805/0xb30 [ 481.599738][T11613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.599757][T11613] ? aa_sock_msg_perm+0x94/0x160 [ 481.599774][T11613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.599790][T11613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.599807][T11613] __sock_sendmsg+0x219/0x270 [ 481.599824][T11613] ____sys_sendmsg+0x505/0x830 [ 481.599847][T11613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.599872][T11613] ? import_iovec+0x74/0xa0 [ 481.599894][T11613] ___sys_sendmsg+0x21f/0x2a0 [ 481.599915][T11613] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.599960][T11613] ? __fget_files+0x2a/0x420 [ 481.599978][T11613] ? __fget_files+0x3a0/0x420 [ 481.600004][T11613] __x64_sys_sendmsg+0x19b/0x260 [ 481.600025][T11613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.600063][T11613] ? do_syscall_64+0xba/0x210 [ 481.600084][T11613] do_syscall_64+0xf6/0x210 [ 481.600103][T11613] ? clear_bhb_loop+0x45/0xa0 [ 481.600121][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.600136][T11613] RIP: 0033:0x7f8eba78e969 [ 481.600149][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.600161][T11613] RSP: 002b:00007f8ebb676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.600177][T11613] RAX: ffffffffffffffda RBX: 00007f8eba9b5fa0 RCX: 00007f8eba78e969 [ 481.600189][T11613] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 481.600198][T11613] RBP: 00007f8ebb676090 R08: 0000000000000000 R09: 0000000000000000 [ 481.600207][T11613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.600216][T11613] R13: 0000000000000000 R14: 00007f8eba9b5fa0 R15: 00007f8ebaadfa28 [ 481.600242][T11613] [ 481.600489][T11613] tipc: Enabling of bearer rejected, failed to enable media [ 482.091692][T11617] FAULT_INJECTION: forcing a failure. [ 482.091692][T11617] name failslab, interval 1, probability 0, space 0, times 0 [ 482.104833][T11617] CPU: 1 UID: 0 PID: 11617 Comm: syz.4.1694 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 482.104872][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 482.104886][T11617] Call Trace: [ 482.104896][T11617] [ 482.104906][T11617] dump_stack_lvl+0x189/0x250 [ 482.104945][T11617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.104974][T11617] ? __pfx__printk+0x10/0x10 [ 482.105002][T11617] ? ref_tracker_alloc+0x318/0x460 [ 482.105028][T11617] should_fail_ex+0x414/0x560 [ 482.105055][T11617] should_failslab+0xa8/0x100 [ 482.105084][T11617] kmem_cache_alloc_noprof+0x73/0x3c0 [ 482.105108][T11617] ? skb_clone+0x212/0x3a0 [ 482.105141][T11617] skb_clone+0x212/0x3a0 [ 482.105173][T11617] __netlink_deliver_tap+0x404/0x850 [ 482.105219][T11617] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.105244][T11617] netlink_deliver_tap+0x19c/0x1b0 [ 482.105267][T11617] netlink_unicast+0x72f/0x8d0 [ 482.105298][T11617] netlink_sendmsg+0x805/0xb30 [ 482.105332][T11617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.105360][T11617] ? aa_sock_msg_perm+0x94/0x160 [ 482.105384][T11617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.105406][T11617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.105430][T11617] __sock_sendmsg+0x219/0x270 [ 482.105454][T11617] ____sys_sendmsg+0x505/0x830 [ 482.105487][T11617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.105524][T11617] ? import_iovec+0x74/0xa0 [ 482.105556][T11617] ___sys_sendmsg+0x21f/0x2a0 [ 482.105589][T11617] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.105656][T11617] ? __fget_files+0x2a/0x420 [ 482.105682][T11617] ? __fget_files+0x3a0/0x420 [ 482.105719][T11617] __x64_sys_sendmsg+0x19b/0x260 [ 482.105750][T11617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.105794][T11617] ? do_syscall_64+0xba/0x210 [ 482.105824][T11617] do_syscall_64+0xf6/0x210 [ 482.105850][T11617] ? clear_bhb_loop+0x45/0xa0 [ 482.105875][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.105896][T11617] RIP: 0033:0x7f1ae778e969 [ 482.105913][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.105931][T11617] RSP: 002b:00007f1ae85ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.105953][T11617] RAX: ffffffffffffffda RBX: 00007f1ae79b5fa0 RCX: 00007f1ae778e969 [ 482.105968][T11617] RDX: 0000000004048000 RSI: 0000200000000040 RDI: 0000000000000003 [ 482.105982][T11617] RBP: 00007f1ae85ed090 R08: 0000000000000000 R09: 0000000000000000 [ 482.105995][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.106007][T11617] R13: 0000000000000000 R14: 00007f1ae79b5fa0 R15: 00007f1ae7adfa28 [ 482.106040][T11617] [ 482.106189][T11617] bridge_slave_0: default FDB implementation only supports local addresses [ 482.558624][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 482.586030][T11624] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 482.665958][T11621] cgroup: fork rejected by pids controller in /syz0 [ 483.191906][ T30] audit: type=1326 audit(1746781514.010:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.5.1703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eba78e969 code=0x0 [ 483.213785][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.256908][T12082] @: renamed from vlan0 (while UP) [ 484.075900][T12181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 484.082622][T12181] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 484.140733][T12181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.226883][T12181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 484.306898][T12181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.329446][T12181] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 484.442623][ T5828] usb 4-1: 0:2 : does not exist [ 484.492350][T12181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 484.500173][T12181] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 484.544334][ T5828] usb 4-1: unit 5: unexpected type 0x0c [ 484.558850][T12181] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 484.597709][ T5828] usb 4-1: USB disconnect, device number 86 [ 484.621376][T12181] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 484.790774][T12199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.815468][T12199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.893000][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 485.049343][ T10] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 485.296407][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 485.304242][ T10] usb 6-1: can't read configurations, error -61 [ 485.439299][ T10] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 485.707176][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 485.715153][ T10] usb 6-1: can't read configurations, error -61 [ 485.726560][ T10] usb usb6-port1: attempt power cycle [ 486.089630][ T10] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 486.121724][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 486.130078][ T10] usb 6-1: can't read configurations, error -61 [ 486.136760][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 486.210165][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 486.269291][ T10] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 486.296740][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 486.305162][ T10] usb 6-1: can't read configurations, error -61 [ 486.311577][ T5828] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 486.339320][ T10] usb usb6-port1: unable to enumerate USB device [ 486.369394][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 486.388558][T12225] FAULT_INJECTION: forcing a failure. [ 486.388558][T12225] name failslab, interval 1, probability 0, space 0, times 0 [ 486.469540][T12225] CPU: 1 UID: 0 PID: 12225 Comm: syz.1.1713 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 486.469573][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 486.469584][T12225] Call Trace: [ 486.469590][T12225] [ 486.469598][T12225] dump_stack_lvl+0x189/0x250 [ 486.469626][T12225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.469647][T12225] ? __pfx__printk+0x10/0x10 [ 486.469667][T12225] ? ref_tracker_alloc+0x318/0x460 [ 486.469692][T12225] should_fail_ex+0x414/0x560 [ 486.469710][T12225] should_failslab+0xa8/0x100 [ 486.469731][T12225] kmem_cache_alloc_noprof+0x73/0x3c0 [ 486.469748][T12225] ? skb_clone+0x212/0x3a0 [ 486.469771][T12225] skb_clone+0x212/0x3a0 [ 486.469794][T12225] __netlink_deliver_tap+0x404/0x850 [ 486.469819][T12225] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.469836][T12225] netlink_deliver_tap+0x19c/0x1b0 [ 486.469853][T12225] netlink_unicast+0x72f/0x8d0 [ 486.469875][T12225] netlink_sendmsg+0x805/0xb30 [ 486.469902][T12225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.469922][T12225] ? aa_sock_msg_perm+0x94/0x160 [ 486.469939][T12225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.469955][T12225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.469972][T12225] __sock_sendmsg+0x219/0x270 [ 486.469988][T12225] ____sys_sendmsg+0x505/0x830 [ 486.470011][T12225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.470037][T12225] ? import_iovec+0x74/0xa0 [ 486.470060][T12225] ___sys_sendmsg+0x21f/0x2a0 [ 486.470080][T12225] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.470125][T12225] ? __fget_files+0x2a/0x420 [ 486.470145][T12225] ? __fget_files+0x3a0/0x420 [ 486.470172][T12225] __x64_sys_sendmsg+0x19b/0x260 [ 486.470194][T12225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.470225][T12225] ? do_syscall_64+0xba/0x210 [ 486.470246][T12225] do_syscall_64+0xf6/0x210 [ 486.470265][T12225] ? clear_bhb_loop+0x45/0xa0 [ 486.470282][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.470296][T12225] RIP: 0033:0x7f05bf38e969 [ 486.470316][T12225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.470328][T12225] RSP: 002b:00007f05c02b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.470344][T12225] RAX: ffffffffffffffda RBX: 00007f05bf5b5fa0 RCX: 00007f05bf38e969 [ 486.470355][T12225] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 486.470364][T12225] RBP: 00007f05c02b1090 R08: 0000000000000000 R09: 0000000000000000 [ 486.470374][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.470383][T12225] R13: 0000000000000000 R14: 00007f05bf5b5fa0 R15: 00007f05bf6dfa28 [ 486.470405][T12225] [ 486.479258][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 486.544504][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 486.695770][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.769180][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 487.207152][T12234] FAULT_INJECTION: forcing a failure. [ 487.207152][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 487.229326][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.1.1716 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 487.229357][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 487.229371][T12234] Call Trace: [ 487.229380][T12234] [ 487.229389][T12234] dump_stack_lvl+0x189/0x250 [ 487.229427][T12234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.229460][T12234] ? __pfx__printk+0x10/0x10 [ 487.229488][T12234] ? ref_tracker_alloc+0x318/0x460 [ 487.229513][T12234] should_fail_ex+0x414/0x560 [ 487.229538][T12234] should_failslab+0xa8/0x100 [ 487.229566][T12234] kmem_cache_alloc_noprof+0x73/0x3c0 [ 487.229590][T12234] ? skb_clone+0x212/0x3a0 [ 487.229623][T12234] skb_clone+0x212/0x3a0 [ 487.229654][T12234] __netlink_deliver_tap+0x404/0x850 [ 487.229691][T12234] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.229714][T12234] netlink_deliver_tap+0x19c/0x1b0 [ 487.229738][T12234] netlink_unicast+0x72f/0x8d0 [ 487.229769][T12234] netlink_sendmsg+0x805/0xb30 [ 487.229802][T12234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.229829][T12234] ? aa_sock_msg_perm+0x94/0x160 [ 487.229852][T12234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.229875][T12234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.229904][T12234] __sock_sendmsg+0x219/0x270 [ 487.229928][T12234] ____sys_sendmsg+0x505/0x830 [ 487.229960][T12234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.229997][T12234] ? import_iovec+0x74/0xa0 [ 487.230028][T12234] ___sys_sendmsg+0x21f/0x2a0 [ 487.230057][T12234] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.230123][T12234] ? __fget_files+0x2a/0x420 [ 487.230149][T12234] ? __fget_files+0x3a0/0x420 [ 487.230186][T12234] __x64_sys_sendmsg+0x19b/0x260 [ 487.230216][T12234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.230261][T12234] ? do_syscall_64+0xba/0x210 [ 487.230290][T12234] do_syscall_64+0xf6/0x210 [ 487.230316][T12234] ? clear_bhb_loop+0x45/0xa0 [ 487.230341][T12234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.230361][T12234] RIP: 0033:0x7f05bf38e969 [ 487.230379][T12234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.230396][T12234] RSP: 002b:00007f05c02b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.230418][T12234] RAX: ffffffffffffffda RBX: 00007f05bf5b5fa0 RCX: 00007f05bf38e969 [ 487.230434][T12234] RDX: 0000000000004000 RSI: 0000200000000400 RDI: 0000000000000005 [ 487.230447][T12234] RBP: 00007f05c02b1090 R08: 0000000000000000 R09: 0000000000000000 [ 487.230459][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.230472][T12234] R13: 0000000000000000 R14: 00007f05bf5b5fa0 R15: 00007f05bf6dfa28 [ 487.230503][T12234] [ 488.057048][ T3079] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 488.148251][T12239] vivid-002: disconnect [ 488.209985][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 488.238605][ T3079] usb 4-1: config 0 has no interfaces? [ 488.248806][ T3079] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 488.258549][ T3079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.268030][ T3079] usb 4-1: Product: syz [ 488.272531][ T3079] usb 4-1: Manufacturer: syz [ 488.277237][ T3079] usb 4-1: SerialNumber: syz [ 488.280579][T12241] FAULT_INJECTION: forcing a failure. [ 488.280579][T12241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.290550][ T3079] usb 4-1: config 0 descriptor?? [ 488.300157][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 488.400414][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.4.1718 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 488.400444][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 488.400453][T12241] Call Trace: [ 488.400459][T12241] [ 488.400470][T12241] dump_stack_lvl+0x189/0x250 [ 488.400497][T12241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.400518][T12241] ? __pfx__printk+0x10/0x10 [ 488.400540][T12241] should_fail_ex+0x414/0x560 [ 488.400558][T12241] _copy_to_user+0x31/0xb0 [ 488.400580][T12241] simple_read_from_buffer+0xe1/0x170 [ 488.400601][T12241] proc_fail_nth_read+0x1df/0x250 [ 488.400623][T12241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.400645][T12241] ? rw_verify_area+0x258/0x650 [ 488.400660][T12241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.400681][T12241] vfs_read+0x1fd/0x980 [ 488.400700][T12241] ? __pfx___mutex_lock+0x10/0x10 [ 488.400718][T12241] ? __pfx_vfs_read+0x10/0x10 [ 488.400736][T12241] ? __fget_files+0x2a/0x420 [ 488.400758][T12241] ? __fget_files+0x3a0/0x420 [ 488.400775][T12241] ? __fget_files+0x2a/0x420 [ 488.400799][T12241] ksys_read+0x145/0x250 [ 488.400817][T12241] ? __pfx_ksys_read+0x10/0x10 [ 488.400835][T12241] ? do_syscall_64+0xba/0x210 [ 488.400856][T12241] do_syscall_64+0xf6/0x210 [ 488.400873][T12241] ? clear_bhb_loop+0x45/0xa0 [ 488.400890][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.400904][T12241] RIP: 0033:0x7f1ae778d37c [ 488.400916][T12241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 488.400929][T12241] RSP: 002b:00007f1ae85ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.400952][T12241] RAX: ffffffffffffffda RBX: 00007f1ae79b5fa0 RCX: 00007f1ae778d37c [ 488.400967][T12241] RDX: 000000000000000f RSI: 00007f1ae85ed0a0 RDI: 0000000000000005 [ 488.400987][T12241] RBP: 00007f1ae85ed090 R08: 0000000000000000 R09: 0000000000000000 [ 488.400999][T12241] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 488.401011][T12241] R13: 0000000000000000 R14: 00007f1ae79b5fa0 R15: 00007f1ae7adfa28 [ 488.401038][T12241] [ 488.649280][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 488.849471][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 488.859538][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 489.025165][ T5828] usb 1-1: unable to read config index 0 descriptor/all [ 489.055221][ T5828] usb 1-1: can't read configurations, error -71 [ 489.162628][T12238] vivid-002: reconnect [ 489.485205][T12260] tipc: Enabling of bearer rejected, already enabled [ 489.493789][T12262] FAULT_INJECTION: forcing a failure. [ 489.493789][T12262] name failslab, interval 1, probability 0, space 0, times 0 [ 489.529244][T12262] CPU: 1 UID: 0 PID: 12262 Comm: syz.1.1725 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 489.529271][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 489.529283][T12262] Call Trace: [ 489.529291][T12262] [ 489.529300][T12262] dump_stack_lvl+0x189/0x250 [ 489.529337][T12262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.529363][T12262] ? __pfx__printk+0x10/0x10 [ 489.529390][T12262] ? ref_tracker_alloc+0x318/0x460 [ 489.529413][T12262] should_fail_ex+0x414/0x560 [ 489.529437][T12262] should_failslab+0xa8/0x100 [ 489.529466][T12262] kmem_cache_alloc_noprof+0x73/0x3c0 [ 489.529490][T12262] ? skb_clone+0x212/0x3a0 [ 489.529522][T12262] skb_clone+0x212/0x3a0 [ 489.529572][T12262] __netlink_deliver_tap+0x404/0x850 [ 489.529608][T12262] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.529632][T12262] netlink_deliver_tap+0x19c/0x1b0 [ 489.529656][T12262] netlink_unicast+0x72f/0x8d0 [ 489.529697][T12262] netlink_sendmsg+0x805/0xb30 [ 489.529730][T12262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.529756][T12262] ? aa_sock_msg_perm+0x94/0x160 [ 489.529780][T12262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.529803][T12262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.529826][T12262] __sock_sendmsg+0x219/0x270 [ 489.529850][T12262] ____sys_sendmsg+0x505/0x830 [ 489.529887][T12262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.529923][T12262] ? import_iovec+0x74/0xa0 [ 489.529955][T12262] ___sys_sendmsg+0x21f/0x2a0 [ 489.529983][T12262] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.530048][T12262] ? __fget_files+0x2a/0x420 [ 489.530072][T12262] ? __fget_files+0x3a0/0x420 [ 489.530109][T12262] __x64_sys_sendmsg+0x19b/0x260 [ 489.530138][T12262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.530183][T12262] ? do_syscall_64+0xba/0x210 [ 489.530212][T12262] do_syscall_64+0xf6/0x210 [ 489.530238][T12262] ? clear_bhb_loop+0x45/0xa0 [ 489.530263][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.530283][T12262] RIP: 0033:0x7f05bf38e969 [ 489.530301][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.530319][T12262] RSP: 002b:00007f05c02b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.530335][T12262] RAX: ffffffffffffffda RBX: 00007f05bf5b5fa0 RCX: 00007f05bf38e969 [ 489.530346][T12262] RDX: 0000000020048040 RSI: 0000200000000280 RDI: 0000000000000003 [ 489.530356][T12262] RBP: 00007f05c02b1090 R08: 0000000000000000 R09: 0000000000000000 [ 489.530365][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.530373][T12262] R13: 0000000000000000 R14: 00007f05bf5b5fa0 R15: 00007f05bf6dfa28 [ 489.530395][T12262] [ 489.537105][T12262] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 489.699656][ T5828] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 489.872144][T12262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 489.992486][ T5828] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 490.015232][ T5828] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 490.039739][ T5828] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 490.048848][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.071999][T12254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.093070][ T5828] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.129457][ T3079] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 490.146849][T12270] FAULT_INJECTION: forcing a failure. [ 490.146849][T12270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.161449][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.4.1727 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 490.161476][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 490.161490][T12270] Call Trace: [ 490.161498][T12270] [ 490.161507][T12270] dump_stack_lvl+0x189/0x250 [ 490.161538][T12270] ? __lock_acquire+0xaac/0xd20 [ 490.161568][T12270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.161595][T12270] ? __pfx__printk+0x10/0x10 [ 490.161615][T12270] ? __might_fault+0xb0/0x130 [ 490.161649][T12270] should_fail_ex+0x414/0x560 [ 490.161671][T12270] _copy_from_user+0x2d/0xb0 [ 490.161699][T12270] ___sys_sendmsg+0x158/0x2a0 [ 490.161728][T12270] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.161789][T12270] ? __might_fault+0xb0/0x130 [ 490.161822][T12270] __sys_sendmmsg+0x227/0x430 [ 490.161861][T12270] ? __pfx___sys_sendmmsg+0x10/0x10 [ 490.161895][T12270] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.161936][T12270] ? ksys_write+0x1f0/0x250 [ 490.161957][T12270] ? rcu_is_watching+0x15/0xb0 [ 490.161995][T12270] __x64_sys_sendmmsg+0xa0/0xc0 [ 490.162023][T12270] do_syscall_64+0xf6/0x210 [ 490.162047][T12270] ? clear_bhb_loop+0x45/0xa0 [ 490.162070][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.162090][T12270] RIP: 0033:0x7f1ae778e969 [ 490.162108][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.162125][T12270] RSP: 002b:00007f1ae85ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.162145][T12270] RAX: ffffffffffffffda RBX: 00007f1ae79b5fa0 RCX: 00007f1ae778e969 [ 490.162160][T12270] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 490.162173][T12270] RBP: 00007f1ae85ed090 R08: 0000000000000000 R09: 0000000000000000 [ 490.162186][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.162198][T12270] R13: 0000000000000000 R14: 00007f1ae79b5fa0 R15: 00007f1ae7adfa28 [ 490.162227][T12270] [ 490.471907][ T3079] usb 6-1: config 0 has no interfaces? [ 490.493868][ T3079] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 490.573903][ T3079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.697050][ T3079] usb 6-1: Product: syz [ 490.749796][ T3079] usb 6-1: Manufacturer: syz [ 490.763962][ T5828] usb 1-1: USB disconnect, device number 92 [ 490.817131][ T3079] usb 6-1: SerialNumber: syz [ 490.889410][ T5891] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 490.938353][ T3079] usb 6-1: config 0 descriptor?? [ 490.948985][T12279] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 490.963151][T12279] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 491.145934][ T5891] usb 2-1: config 0 has no interfaces? [ 491.171579][T12281] FAULT_INJECTION: forcing a failure. [ 491.171579][T12281] name failslab, interval 1, probability 0, space 0, times 0 [ 491.216678][ T5828] usb 4-1: USB disconnect, device number 87 [ 491.271081][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 491.289253][T12281] CPU: 0 UID: 0 PID: 12281 Comm: syz.4.1731 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 491.289281][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 491.289293][T12281] Call Trace: [ 491.289301][T12281] [ 491.289310][T12281] dump_stack_lvl+0x189/0x250 [ 491.289343][T12281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.289370][T12281] ? __pfx__printk+0x10/0x10 [ 491.289394][T12281] ? __pfx___might_resched+0x10/0x10 [ 491.289409][T12281] ? fs_reclaim_acquire+0x7d/0x100 [ 491.289441][T12281] should_fail_ex+0x414/0x560 [ 491.289464][T12281] should_failslab+0xa8/0x100 [ 491.289494][T12281] kmem_cache_alloc_noprof+0x73/0x3c0 [ 491.289531][T12281] ? _sctp_make_chunk+0x14e/0x430 [ 491.289579][T12281] _sctp_make_chunk+0x14e/0x430 [ 491.289611][T12281] sctp_make_datafrag_empty+0x122/0x230 [ 491.289640][T12281] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 491.289664][T12281] ? __kasan_kmalloc+0x93/0xb0 [ 491.289690][T12281] ? sctp_auth_send_cid+0x69/0x250 [ 491.289721][T12281] sctp_datamsg_from_user+0x726/0xef0 [ 491.289760][T12281] ? __genradix_ptr+0x1e1/0x220 [ 491.289790][T12281] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 491.289844][T12281] ? __lock_acquire+0xaac/0xd20 [ 491.289885][T12281] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 491.289917][T12281] ? __local_bh_enable_ip+0x12d/0x1c0 [ 491.289948][T12281] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 491.289983][T12281] ? sctp_sendmsg_check_sflags+0x18d/0x2e0 [ 491.290020][T12281] sctp_sendmsg+0x1941/0x2810 [ 491.290064][T12281] ? __pfx_sctp_sendmsg+0x10/0x10 [ 491.290098][T12281] ? aa_sk_perm+0x81e/0x950 [ 491.290123][T12281] ? __pfx_aa_sk_perm+0x10/0x10 [ 491.290146][T12281] ? sock_rps_record_flow+0x19/0x400 [ 491.290178][T12281] ? inet_sendmsg+0x2f4/0x370 [ 491.290205][T12281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.290232][T12281] __sock_sendmsg+0x19c/0x270 [ 491.290264][T12281] ____sys_sendmsg+0x52d/0x830 [ 491.290298][T12281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.290333][T12281] ? import_iovec+0x74/0xa0 [ 491.290381][T12281] ___sys_sendmsg+0x21f/0x2a0 [ 491.290411][T12281] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.290476][T12281] ? __fget_files+0x2a/0x420 [ 491.290502][T12281] ? __fget_files+0x3a0/0x420 [ 491.290548][T12281] __sys_sendmmsg+0x227/0x430 [ 491.290579][T12281] ? __pfx___sys_sendmmsg+0x10/0x10 [ 491.290617][T12281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 491.290661][T12281] ? ksys_write+0x1f0/0x250 [ 491.290683][T12281] ? rcu_is_watching+0x15/0xb0 [ 491.290724][T12281] __x64_sys_sendmmsg+0xa0/0xc0 [ 491.290753][T12281] do_syscall_64+0xf6/0x210 [ 491.290780][T12281] ? clear_bhb_loop+0x45/0xa0 [ 491.290804][T12281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.290824][T12281] RIP: 0033:0x7f1ae778e969 [ 491.290843][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.290861][T12281] RSP: 002b:00007f1ae85ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 491.290884][T12281] RAX: ffffffffffffffda RBX: 00007f1ae79b5fa0 RCX: 00007f1ae778e969 [ 491.290899][T12281] RDX: 0000000000000001 RSI: 0000200000003980 RDI: 0000000000000003 [ 491.290909][T12281] RBP: 00007f1ae85ed090 R08: 0000000000000000 R09: 0000000000000000 [ 491.290919][T12281] R10: 0000000000084004 R11: 0000000000000246 R12: 0000000000000001 [ 491.290928][T12281] R13: 0000000000000000 R14: 00007f1ae79b5fa0 R15: 00007f1ae7adfa28 [ 491.290950][T12281] [ 491.635457][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.643578][ T5891] usb 2-1: Product: syz [ 491.647775][ T5891] usb 2-1: Manufacturer: syz [ 491.652770][ T5891] usb 2-1: SerialNumber: syz [ 491.695946][ T5891] usb 2-1: config 0 descriptor?? [ 492.058324][T12288] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1733'. [ 492.730515][T12303] tipc: Started in network mode [ 492.735448][T12303] tipc: Node identity ac1414aa, cluster identity 4711 [ 492.743869][T12303] tipc: Enabled bearer , priority 10 [ 493.860599][ T10] tipc: Node number set to 2886997162 [ 494.483489][ T3079] usb 6-1: USB disconnect, device number 68 [ 494.782075][ T3079] usb 2-1: USB disconnect, device number 78 [ 494.971583][T12317] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1742'. [ 494.986000][T12317] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 495.016703][T12317] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.027177][T12319] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1741'. [ 495.083526][T12322] FAULT_INJECTION: forcing a failure. [ 495.083526][T12322] name failslab, interval 1, probability 0, space 0, times 0 [ 495.101510][T12322] CPU: 0 UID: 0 PID: 12322 Comm: syz.1.1743 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 495.101533][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 495.101542][T12322] Call Trace: [ 495.101548][T12322] [ 495.101555][T12322] dump_stack_lvl+0x189/0x250 [ 495.101584][T12322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.101606][T12322] ? __pfx__printk+0x10/0x10 [ 495.101626][T12322] ? ref_tracker_alloc+0x318/0x460 [ 495.101645][T12322] should_fail_ex+0x414/0x560 [ 495.101662][T12322] should_failslab+0xa8/0x100 [ 495.101683][T12322] kmem_cache_alloc_noprof+0x73/0x3c0 [ 495.101701][T12322] ? skb_clone+0x212/0x3a0 [ 495.101724][T12322] skb_clone+0x212/0x3a0 [ 495.101746][T12322] __netlink_deliver_tap+0x404/0x850 [ 495.101773][T12322] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.101790][T12322] netlink_deliver_tap+0x19c/0x1b0 [ 495.101806][T12322] netlink_unicast+0x72f/0x8d0 [ 495.101828][T12322] netlink_sendmsg+0x805/0xb30 [ 495.101851][T12322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.101870][T12322] ? aa_sock_msg_perm+0x94/0x160 [ 495.101887][T12322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.101904][T12322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.101921][T12322] __sock_sendmsg+0x219/0x270 [ 495.101937][T12322] ____sys_sendmsg+0x505/0x830 [ 495.101960][T12322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.101986][T12322] ? import_iovec+0x74/0xa0 [ 495.102008][T12322] ___sys_sendmsg+0x21f/0x2a0 [ 495.102029][T12322] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.102074][T12322] ? __fget_files+0x2a/0x420 [ 495.102092][T12322] ? __fget_files+0x3a0/0x420 [ 495.102118][T12322] __x64_sys_sendmsg+0x19b/0x260 [ 495.102139][T12322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.102170][T12322] ? do_syscall_64+0xba/0x210 [ 495.102191][T12322] do_syscall_64+0xf6/0x210 [ 495.102210][T12322] ? clear_bhb_loop+0x45/0xa0 [ 495.102235][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.102250][T12322] RIP: 0033:0x7f05bf38e969 [ 495.102264][T12322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.102277][T12322] RSP: 002b:00007f05c0290038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.102292][T12322] RAX: ffffffffffffffda RBX: 00007f05bf5b6080 RCX: 00007f05bf38e969 [ 495.102303][T12322] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 495.102312][T12322] RBP: 00007f05c0290090 R08: 0000000000000000 R09: 0000000000000000 [ 495.102321][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.102330][T12322] R13: 0000000000000000 R14: 00007f05bf5b6080 R15: 00007f05bf6dfa28 [ 495.102351][T12322] [ 495.601719][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1745'. [ 496.119618][ T3079] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 496.139771][ T5891] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 496.281870][ T3079] usb 2-1: config 0 has no interfaces? [ 496.323278][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 496.350164][ T3079] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 496.385490][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 496.397036][ T3079] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 496.454335][ T5891] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.470971][ T3079] usb 2-1: Product: syz [ 496.475188][ T3079] usb 2-1: Manufacturer: syz [ 496.509089][ T5891] usb 1-1: config 1 interface 0 has no altsetting 0 [ 496.523726][ T3079] usb 2-1: config 0 descriptor?? [ 496.550076][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 496.599737][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.607792][ T5891] usb 1-1: Product: syz [ 496.629166][ T5891] usb 1-1: Manufacturer: syz [ 496.633855][ T5891] usb 1-1: SerialNumber: syz [ 496.809655][ T5885] usb 2-1: USB disconnect, device number 79 [ 496.819127][ T5828] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 496.936043][ T5891] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input31 [ 496.992991][ T5828] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 497.021168][ T5891] usb 1-1: USB disconnect, device number 93 [ 497.023113][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.055913][ T5828] usb 6-1: Product: syz [ 497.066360][ T5828] usb 6-1: Manufacturer: syz [ 497.080656][ T5891] appletouch 1-1:1.0: input: appletouch disconnected [ 497.083062][ T5828] usb 6-1: SerialNumber: syz [ 497.308717][ T5828] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 497.618837][ T5828] usb 6-1: USB disconnect, device number 69 [ 497.814630][ T5828] usblp0: removed [ 498.273802][T12359] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 498.439304][T12361] FAULT_INJECTION: forcing a failure. [ 498.439304][T12361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.574260][T12361] CPU: 0 UID: 0 PID: 12361 Comm: syz.5.1755 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 498.574281][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 498.574291][T12361] Call Trace: [ 498.574297][T12361] [ 498.574304][T12361] dump_stack_lvl+0x189/0x250 [ 498.574332][T12361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.574352][T12361] ? __pfx__printk+0x10/0x10 [ 498.574375][T12361] should_fail_ex+0x414/0x560 [ 498.574394][T12361] _copy_to_user+0x31/0xb0 [ 498.574415][T12361] simple_read_from_buffer+0xe1/0x170 [ 498.574436][T12361] proc_fail_nth_read+0x1df/0x250 [ 498.574458][T12361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.574479][T12361] ? rw_verify_area+0x258/0x650 [ 498.574494][T12361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.574514][T12361] vfs_read+0x1fd/0x980 [ 498.574533][T12361] ? __pfx___mutex_lock+0x10/0x10 [ 498.574551][T12361] ? __pfx_vfs_read+0x10/0x10 [ 498.574567][T12361] ? __fget_files+0x2a/0x420 [ 498.574588][T12361] ? __fget_files+0x3a0/0x420 [ 498.574604][T12361] ? __fget_files+0x2a/0x420 [ 498.574628][T12361] ksys_read+0x145/0x250 [ 498.574642][T12361] ? rcu_is_watching+0x15/0xb0 [ 498.574665][T12361] ? __pfx_ksys_read+0x10/0x10 [ 498.574682][T12361] ? do_syscall_64+0xba/0x210 [ 498.574702][T12361] do_syscall_64+0xf6/0x210 [ 498.574722][T12361] ? clear_bhb_loop+0x45/0xa0 [ 498.574741][T12361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.574755][T12361] RIP: 0033:0x7f8eba78d37c [ 498.574768][T12361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 498.574781][T12361] RSP: 002b:00007f8ebb676030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.574796][T12361] RAX: ffffffffffffffda RBX: 00007f8eba9b5fa0 RCX: 00007f8eba78d37c [ 498.574806][T12361] RDX: 000000000000000f RSI: 00007f8ebb6760a0 RDI: 0000000000000004 [ 498.574815][T12361] RBP: 00007f8ebb676090 R08: 0000000000000000 R09: 0000000000000000 [ 498.574824][T12361] R10: 0000000000030142 R11: 0000000000000246 R12: 0000000000000001 [ 498.574833][T12361] R13: 0000000000000000 R14: 00007f8eba9b5fa0 R15: 00007f8ebaadfa28 [ 498.574856][T12361] [ 499.081906][T12363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.340854][T12370] syz_tun: entered allmulticast mode [ 499.393028][T12370] tipc: Started in network mode [ 499.397947][T12370] tipc: Node identity ac1414aa, cluster identity 4711 [ 499.405767][T12370] tipc: Enabled bearer , priority 10 [ 499.433153][T12373] fuse: Bad value for 'fd' [ 499.473056][T12373] netlink: 'syz.4.1760': attribute type 2 has an invalid length. [ 499.559615][T12370] syz_tun: left allmulticast mode [ 499.859221][ T5884] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 499.876826][T12379] netlink: 'syz.3.1763': attribute type 30 has an invalid length. [ 499.885020][T12379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1763'. [ 500.007977][T12386] FAULT_INJECTION: forcing a failure. [ 500.007977][T12386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.011039][ T5884] usb 2-1: config 0 has no interfaces? [ 500.021933][T12386] CPU: 0 UID: 0 PID: 12386 Comm: syz.3.1765 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 500.021963][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 500.021977][T12386] Call Trace: [ 500.021986][T12386] [ 500.021995][T12386] dump_stack_lvl+0x189/0x250 [ 500.022046][T12386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.022076][T12386] ? __pfx__printk+0x10/0x10 [ 500.022118][T12386] should_fail_ex+0x414/0x560 [ 500.022146][T12386] _copy_to_user+0x31/0xb0 [ 500.022177][T12386] simple_read_from_buffer+0xe1/0x170 [ 500.022207][T12386] proc_fail_nth_read+0x1df/0x250 [ 500.022240][T12386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.022273][T12386] ? rw_verify_area+0x258/0x650 [ 500.022296][T12386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.022344][T12386] vfs_read+0x1fd/0x980 [ 500.022373][T12386] ? __pfx___mutex_lock+0x10/0x10 [ 500.022401][T12386] ? __pfx_vfs_read+0x10/0x10 [ 500.022426][T12386] ? __fget_files+0x2a/0x420 [ 500.022458][T12386] ? __fget_files+0x3a0/0x420 [ 500.022485][T12386] ? __fget_files+0x2a/0x420 [ 500.022521][T12386] ksys_read+0x145/0x250 [ 500.022549][T12386] ? __pfx_ksys_read+0x10/0x10 [ 500.022576][T12386] ? do_syscall_64+0xba/0x210 [ 500.022608][T12386] do_syscall_64+0xf6/0x210 [ 500.022636][T12386] ? clear_bhb_loop+0x45/0xa0 [ 500.022662][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.022683][T12386] RIP: 0033:0x7fed8898d37c [ 500.022703][T12386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 500.022722][T12386] RSP: 002b:00007fed89745030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.022745][T12386] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898d37c [ 500.022762][T12386] RDX: 000000000000000f RSI: 00007fed897450a0 RDI: 0000000000000004 [ 500.022775][T12386] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 500.022789][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.022802][T12386] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 500.022835][T12386] [ 500.258966][ T5884] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 500.263251][T12391] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 500.268602][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 500.292079][ T5884] usb 2-1: Product: syz [ 500.296480][ T5884] usb 2-1: Manufacturer: syz [ 500.315149][ T5884] usb 2-1: config 0 descriptor?? [ 500.343859][T12391] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 500.364010][T12391] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 500.377937][ T30] audit: type=1326 audit(1746781531.190:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.382055][T12391] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 500.400749][ T5884] tipc: Node number set to 2886997162 [ 500.415204][ T30] audit: type=1326 audit(1746781531.220:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.450408][T12393] syzkaller0: entered allmulticast mode [ 500.459980][ T30] audit: type=1326 audit(1746781531.220:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.483588][T12393] syzkaller0 (unregistering): left allmulticast mode [ 500.495041][ T30] audit: type=1326 audit(1746781531.220:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.520817][ T30] audit: type=1326 audit(1746781531.220:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.610993][ T30] audit: type=1326 audit(1746781531.220:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.658506][ T5885] usb 2-1: USB disconnect, device number 80 [ 500.681546][ T30] audit: type=1326 audit(1746781531.220:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.726412][ T30] audit: type=1326 audit(1746781531.220:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.751665][ T30] audit: type=1326 audit(1746781531.220:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.765236][T12397] FAULT_INJECTION: forcing a failure. [ 500.765236][T12397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.844811][ T30] audit: type=1326 audit(1746781531.220:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12392 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fed8898e969 code=0x7ffc0000 [ 500.859972][T12397] CPU: 0 UID: 0 PID: 12397 Comm: syz.4.1769 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 500.860006][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 500.860022][T12397] Call Trace: [ 500.860031][T12397] [ 500.860041][T12397] dump_stack_lvl+0x189/0x250 [ 500.860083][T12397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.860115][T12397] ? __pfx__printk+0x10/0x10 [ 500.860151][T12397] should_fail_ex+0x414/0x560 [ 500.860179][T12397] _copy_to_user+0x31/0xb0 [ 500.860213][T12397] simple_read_from_buffer+0xe1/0x170 [ 500.860247][T12397] proc_fail_nth_read+0x1df/0x250 [ 500.860282][T12397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.860317][T12397] ? rw_verify_area+0x258/0x650 [ 500.860341][T12397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.860372][T12397] vfs_read+0x1fd/0x980 [ 500.860403][T12397] ? __pfx___mutex_lock+0x10/0x10 [ 500.860431][T12397] ? __pfx_vfs_read+0x10/0x10 [ 500.860456][T12397] ? __fget_files+0x2a/0x420 [ 500.860488][T12397] ? __fget_files+0x3a0/0x420 [ 500.860515][T12397] ? __fget_files+0x2a/0x420 [ 500.860552][T12397] ksys_read+0x145/0x250 [ 500.860574][T12397] ? rcu_is_watching+0x15/0xb0 [ 500.860609][T12397] ? __pfx_ksys_read+0x10/0x10 [ 500.860637][T12397] ? do_syscall_64+0xba/0x210 [ 500.860668][T12397] do_syscall_64+0xf6/0x210 [ 500.860696][T12397] ? clear_bhb_loop+0x45/0xa0 [ 500.860723][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.860744][T12397] RIP: 0033:0x7f1ae778d37c [ 500.860763][T12397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 500.860782][T12397] RSP: 002b:00007f1ae85ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.860806][T12397] RAX: ffffffffffffffda RBX: 00007f1ae79b5fa0 RCX: 00007f1ae778d37c [ 500.860833][T12397] RDX: 000000000000000f RSI: 00007f1ae85ed0a0 RDI: 0000000000000004 [ 500.860847][T12397] RBP: 00007f1ae85ed090 R08: 0000000000000000 R09: 0000000000000000 [ 500.860862][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.860874][T12397] R13: 0000000000000000 R14: 00007f1ae79b5fa0 R15: 00007f1ae7adfa28 [ 500.860908][T12397] [ 501.029327][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 501.147655][T12404] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1772'. [ 501.275393][T12407] FAULT_INJECTION: forcing a failure. [ 501.275393][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 501.290339][T12405] use of bytesused == 0 is deprecated and will be removed in the future, [ 501.301844][T12405] use the actual size instead. [ 501.306801][T12407] CPU: 1 UID: 0 PID: 12407 Comm: syz.3.1773 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 501.306829][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 501.306842][T12407] Call Trace: [ 501.306851][T12407] [ 501.306860][T12407] dump_stack_lvl+0x189/0x250 [ 501.306897][T12407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.306925][T12407] ? __pfx__printk+0x10/0x10 [ 501.306952][T12407] ? ref_tracker_alloc+0x318/0x460 [ 501.306977][T12407] should_fail_ex+0x414/0x560 [ 501.307001][T12407] should_failslab+0xa8/0x100 [ 501.307030][T12407] kmem_cache_alloc_noprof+0x73/0x3c0 [ 501.307054][T12407] ? skb_clone+0x212/0x3a0 [ 501.307086][T12407] skb_clone+0x212/0x3a0 [ 501.307118][T12407] __netlink_deliver_tap+0x404/0x850 [ 501.307152][T12407] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.307175][T12407] netlink_deliver_tap+0x19c/0x1b0 [ 501.307198][T12407] netlink_unicast+0x72f/0x8d0 [ 501.307227][T12407] netlink_sendmsg+0x805/0xb30 [ 501.307260][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.307287][T12407] ? aa_sock_msg_perm+0x94/0x160 [ 501.307312][T12407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.307336][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.307360][T12407] __sock_sendmsg+0x219/0x270 [ 501.307384][T12407] ____sys_sendmsg+0x505/0x830 [ 501.307417][T12407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.307454][T12407] ? import_iovec+0x74/0xa0 [ 501.307486][T12407] ___sys_sendmsg+0x21f/0x2a0 [ 501.307515][T12407] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.307581][T12407] ? __fget_files+0x2a/0x420 [ 501.307606][T12407] ? __fget_files+0x3a0/0x420 [ 501.307643][T12407] __x64_sys_sendmsg+0x19b/0x260 [ 501.307683][T12407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.307745][T12407] ? do_syscall_64+0xba/0x210 [ 501.307790][T12407] do_syscall_64+0xf6/0x210 [ 501.307817][T12407] ? clear_bhb_loop+0x45/0xa0 [ 501.307842][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.307863][T12407] RIP: 0033:0x7fed8898e969 [ 501.307882][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.307899][T12407] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.307921][T12407] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 501.307936][T12407] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 501.307949][T12407] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 501.307962][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.307974][T12407] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 501.308006][T12407] [ 501.615226][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623077][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.939125][ T5884] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 502.092207][T12425] bridge1: entered allmulticast mode [ 502.099193][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 502.106322][ T5884] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 502.116914][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.127843][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 502.149484][T12422] syzkaller1: entered promiscuous mode [ 502.155183][ T5884] usb 4-1: config 0 has no interface number 0 [ 502.162943][T12422] syzkaller1: entered allmulticast mode [ 502.175401][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 502.196169][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.225074][ T5884] usb 4-1: Product: syz [ 502.238308][ T5884] usb 4-1: Manufacturer: syz [ 502.253974][ T5884] usb 4-1: SerialNumber: syz [ 502.272324][ T5884] usb 4-1: config 0 descriptor?? [ 502.501087][ T5885] usb 4-1: USB disconnect, device number 88 [ 502.602918][ T5828] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 502.726350][T12443] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 502.734767][ T5891] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 502.761798][T12443] bond1: entered promiscuous mode [ 502.767282][T12443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.777917][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 502.785776][ T5828] usb 6-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 502.796713][ T5828] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 502.808432][ T5828] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 502.812079][T12445] bond1: (slave bridge2): making interface the new active one [ 502.826439][T12445] bridge2: entered promiscuous mode [ 502.827867][ T5828] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 7 [ 502.833513][T12445] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 502.851990][ T5884] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 502.869224][ T5891] usb 2-1: device descriptor read/64, error -71 [ 502.879073][ T5828] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8512, setting to 1024 [ 502.890352][ T5828] usb 6-1: config 1 interface 1 has no altsetting 0 [ 502.899345][ T5828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.908444][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.918570][ T5828] usb 6-1: Product: syz [ 502.922866][ T5828] usb 6-1: Manufacturer: syz [ 502.927474][ T5828] usb 6-1: SerialNumber: syz [ 503.012655][ T5884] usb 1-1: config 0 has no interfaces? [ 503.020565][ T5884] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.029810][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.037836][ T5884] usb 1-1: Product: syz [ 503.042212][ T5884] usb 1-1: Manufacturer: syz [ 503.055299][ T5884] usb 1-1: config 0 descriptor?? [ 503.095928][T12447] FAULT_INJECTION: forcing a failure. [ 503.095928][T12447] name failslab, interval 1, probability 0, space 0, times 0 [ 503.110458][T12447] CPU: 0 UID: 0 PID: 12447 Comm: syz.3.1787 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 503.110480][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 503.110489][T12447] Call Trace: [ 503.110496][T12447] [ 503.110503][T12447] dump_stack_lvl+0x189/0x250 [ 503.110535][T12447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.110557][T12447] ? __pfx__printk+0x10/0x10 [ 503.110577][T12447] ? ref_tracker_alloc+0x318/0x460 [ 503.110595][T12447] should_fail_ex+0x414/0x560 [ 503.110613][T12447] should_failslab+0xa8/0x100 [ 503.110640][T12447] kmem_cache_alloc_noprof+0x73/0x3c0 [ 503.110657][T12447] ? skb_clone+0x212/0x3a0 [ 503.110681][T12447] skb_clone+0x212/0x3a0 [ 503.110704][T12447] __netlink_deliver_tap+0x404/0x850 [ 503.110729][T12447] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.110746][T12447] netlink_deliver_tap+0x19c/0x1b0 [ 503.110763][T12447] netlink_unicast+0x72f/0x8d0 [ 503.110785][T12447] netlink_sendmsg+0x805/0xb30 [ 503.110808][T12447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.110827][T12447] ? aa_sock_msg_perm+0x94/0x160 [ 503.110844][T12447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.110860][T12447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.110879][T12447] __sock_sendmsg+0x219/0x270 [ 503.110895][T12447] ____sys_sendmsg+0x505/0x830 [ 503.110919][T12447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.110945][T12447] ? import_iovec+0x74/0xa0 [ 503.110967][T12447] ___sys_sendmsg+0x21f/0x2a0 [ 503.110988][T12447] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.111033][T12447] ? __fget_files+0x2a/0x420 [ 503.111051][T12447] ? __fget_files+0x3a0/0x420 [ 503.111077][T12447] __x64_sys_sendmsg+0x19b/0x260 [ 503.111099][T12447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.111130][T12447] ? do_syscall_64+0xba/0x210 [ 503.111152][T12447] do_syscall_64+0xf6/0x210 [ 503.111170][T12447] ? clear_bhb_loop+0x45/0xa0 [ 503.111188][T12447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.111202][T12447] RIP: 0033:0x7fed8898e969 [ 503.111216][T12447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.111229][T12447] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.111244][T12447] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 503.111255][T12447] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 503.111264][T12447] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 503.111274][T12447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.111282][T12447] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 503.111304][T12447] [ 503.119605][ T5891] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 503.180693][ T5828] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 503.339331][ T5891] usb 2-1: device descriptor read/64, error -71 [ 503.349286][ T5828] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 503.357431][ T5884] usb 1-1: USB disconnect, device number 94 [ 503.461067][ T5828] usb 6-1: USB disconnect, device number 70 [ 503.474269][T12451] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.530461][ T5891] usb usb2-port1: attempt power cycle [ 503.570871][T12451] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 503.577052][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.869114][ T5891] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 503.890980][ T5891] usb 2-1: device descriptor read/8, error -71 [ 504.129350][ T5891] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 504.170572][ T5891] usb 2-1: device descriptor read/8, error -71 [ 504.312326][ T5891] usb usb2-port1: unable to enumerate USB device [ 504.759186][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 504.787405][T12473] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1794'. [ 504.980517][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 505.008239][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.019290][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.099093][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 505.108196][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.174130][ T10] usb 6-1: config 0 descriptor?? [ 505.330393][T12476] IPv6: Can't replace route, no match found [ 505.909169][ T5891] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 506.061490][ T5891] usb 2-1: config 0 has no interfaces? [ 506.068708][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.078233][ T5884] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 506.087621][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.096131][ T5891] usb 2-1: Product: syz [ 506.109350][ T5891] usb 2-1: Manufacturer: syz [ 506.130831][ T5891] usb 2-1: config 0 descriptor?? [ 506.229187][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 506.241876][ T5884] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 506.250492][ T5884] usb 4-1: config 4 has no interface number 0 [ 506.256727][ T5884] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 506.267606][ T5884] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 506.277857][ T5884] usb 4-1: config 4 interface 15 has no altsetting 0 [ 506.288074][ T5884] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 506.301260][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.309807][ T5884] usb 4-1: Product: syz [ 506.314143][ T5884] usb 4-1: Manufacturer: syz [ 506.318875][ T5884] usb 4-1: SerialNumber: syz [ 506.328601][T12489] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 506.336274][T12489] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 506.392869][ T52] usb 2-1: USB disconnect, device number 85 [ 506.577329][ T5884] ax88179_178a 4-1:4.15: probe with driver ax88179_178a failed with error -71 [ 506.612924][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.630698][ T5884] usb 4-1: USB disconnect, device number 89 [ 506.666692][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.301845][ T10] usb 6-1: USB disconnect, device number 71 [ 507.369938][T12525] FAULT_INJECTION: forcing a failure. [ 507.369938][T12525] name failslab, interval 1, probability 0, space 0, times 0 [ 507.402251][T12525] CPU: 1 UID: 0 PID: 12525 Comm: syz.3.1807 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 507.402323][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 507.402335][T12525] Call Trace: [ 507.402345][T12525] [ 507.402354][T12525] dump_stack_lvl+0x189/0x250 [ 507.402392][T12525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.402421][T12525] ? __pfx__printk+0x10/0x10 [ 507.402447][T12525] ? ref_tracker_alloc+0x318/0x460 [ 507.402471][T12525] should_fail_ex+0x414/0x560 [ 507.402495][T12525] should_failslab+0xa8/0x100 [ 507.402523][T12525] kmem_cache_alloc_noprof+0x73/0x3c0 [ 507.402546][T12525] ? skb_clone+0x212/0x3a0 [ 507.402577][T12525] skb_clone+0x212/0x3a0 [ 507.402608][T12525] __netlink_deliver_tap+0x404/0x850 [ 507.402642][T12525] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.402666][T12525] netlink_deliver_tap+0x19c/0x1b0 [ 507.402688][T12525] netlink_unicast+0x72f/0x8d0 [ 507.402718][T12525] netlink_sendmsg+0x805/0xb30 [ 507.402749][T12525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.402775][T12525] ? aa_sock_msg_perm+0x94/0x160 [ 507.402798][T12525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.402821][T12525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.402844][T12525] __sock_sendmsg+0x219/0x270 [ 507.402865][T12525] ____sys_sendmsg+0x505/0x830 [ 507.402897][T12525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.402931][T12525] ? import_iovec+0x74/0xa0 [ 507.402961][T12525] ___sys_sendmsg+0x21f/0x2a0 [ 507.402989][T12525] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.403051][T12525] ? __fget_files+0x2a/0x420 [ 507.403075][T12525] ? __fget_files+0x3a0/0x420 [ 507.403111][T12525] __x64_sys_sendmsg+0x19b/0x260 [ 507.403139][T12525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.403182][T12525] ? do_syscall_64+0xba/0x210 [ 507.403211][T12525] do_syscall_64+0xf6/0x210 [ 507.403235][T12525] ? clear_bhb_loop+0x45/0xa0 [ 507.403259][T12525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.403278][T12525] RIP: 0033:0x7fed8898e969 [ 507.403303][T12525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.403320][T12525] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.403342][T12525] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 507.403357][T12525] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 507.403370][T12525] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 507.403382][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.403394][T12525] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 507.403424][T12525] [ 508.149149][ T5884] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 508.284783][T12540] FAULT_INJECTION: forcing a failure. [ 508.284783][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 508.334824][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 508.342874][ T5884] usb 6-1: can't read configurations, error -61 [ 508.419101][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.3.1812 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 508.419131][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 508.419143][T12540] Call Trace: [ 508.419153][T12540] [ 508.419162][T12540] dump_stack_lvl+0x189/0x250 [ 508.419193][T12540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.419213][T12540] ? __pfx__printk+0x10/0x10 [ 508.419237][T12540] ? __pfx___might_resched+0x10/0x10 [ 508.419250][T12540] ? fs_reclaim_acquire+0x7d/0x100 [ 508.419274][T12540] should_fail_ex+0x414/0x560 [ 508.419292][T12540] should_failslab+0xa8/0x100 [ 508.419315][T12540] __kmalloc_noprof+0xcb/0x4f0 [ 508.419333][T12540] ? tomoyo_encode+0x28b/0x550 [ 508.419353][T12540] tomoyo_encode+0x28b/0x550 [ 508.419381][T12540] tomoyo_realpath_from_path+0x58d/0x5d0 [ 508.419416][T12540] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 508.419448][T12540] tomoyo_path_number_perm+0x1e8/0x5a0 [ 508.419480][T12540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.419505][T12540] ? sb_end_write+0xe9/0x1c0 [ 508.419525][T12540] ? vfs_write+0x8d8/0xa90 [ 508.419565][T12540] ? ksys_write+0x1e1/0x250 [ 508.419579][T12540] ? rcu_is_watching+0x15/0xb0 [ 508.419604][T12540] security_file_ioctl+0xcb/0x2d0 [ 508.419627][T12540] __se_sys_ioctl+0x47/0x170 [ 508.419645][T12540] do_syscall_64+0xf6/0x210 [ 508.419664][T12540] ? clear_bhb_loop+0x45/0xa0 [ 508.419681][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.419694][T12540] RIP: 0033:0x7fed8898e969 [ 508.419707][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.419718][T12540] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.419733][T12540] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 508.419743][T12540] RDX: 0000000000000000 RSI: 0000000000005414 RDI: 0000000000000003 [ 508.419752][T12540] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 508.419760][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.419769][T12540] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 508.419790][T12540] [ 508.419879][T12540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.489416][ T5884] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 508.994937][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 509.118340][ T5884] usb 6-1: can't read configurations, error -61 [ 509.147817][ T5884] usb usb6-port1: attempt power cycle [ 509.147825][T12550] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 509.201217][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 509.201238][ T30] audit: type=1800 audit(1746781540.010:624): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1816" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 509.540522][ T5884] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 509.565272][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 509.574345][ T5884] usb 6-1: can't read configurations, error -61 [ 509.731453][ T3079] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 509.739185][ T5891] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 509.749818][ T5884] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 509.833508][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 509.843011][ T5884] usb 6-1: can't read configurations, error -61 [ 509.872334][ T5884] usb usb6-port1: unable to enumerate USB device [ 509.939299][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 509.946658][ T5891] usb 4-1: config 1 has an invalid interface number: 242 but max is 0 [ 509.955313][ T5891] usb 4-1: config 1 has no interface number 0 [ 509.961897][ T5891] usb 4-1: config 1 interface 242 has no altsetting 0 [ 509.969098][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 509.972493][ T5891] usb 4-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 509.987075][ T3079] usb 2-1: unable to get BOS descriptor or descriptor too short [ 509.996823][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.005882][ T3079] usb 2-1: not running at top speed; connect to a high speed hub [ 510.013944][ T5891] usb 4-1: Product: syz [ 510.110809][ T5891] usb 4-1: Manufacturer: syz [ 510.115953][ T5891] usb 4-1: SerialNumber: syz [ 510.131708][ T3079] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 510.140055][ T3079] usb 2-1: config 0 has no interface number 0 [ 510.171484][ T3079] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 510.216223][ T3079] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 510.267404][ T3079] usb 2-1: config 0 interface 88 has no altsetting 0 [ 510.292972][ T3079] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 510.304819][ T3079] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 510.582579][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 510.616040][ T3079] usb 2-1: Product: syz [ 510.623289][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.639120][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.648234][ T3079] usb 2-1: Manufacturer: ὞簬䅤sꆬ⤣걂雦ꦩꆲ෾⮭Ɪ庅ë›î›‹á¨„ᰴ釶Ä매áê³à¢ší•¨êŸ—脸㡵ì¸î˜‰ê´á¶“à»Žè°’î‘´ì¸æ¯œä¥ïµ˜ï¤é µè£ç¹ì¸å…šã…ᕌ踊è¹ã›…漕혢壘沛雛ੋå½àºšèŒ”ꅱɸἓ [ 510.673025][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 510.702196][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.719576][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.751693][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.757326][ T3079] usb 2-1: config 0 descriptor?? [ 510.793763][ T10] usb 1-1: config 0 descriptor?? [ 510.833928][ T5891] aqc111 4-1:1.242: probe with driver aqc111 failed with error -22 [ 510.875226][ T5891] usb 4-1: USB disconnect, device number 90 [ 511.003668][T12552] ptrace attach of ""[12562] was attempted by "./syz-executor exec"[12552] [ 511.046849][ T3079] input: ὞簬䅤sꆬ⤣걂雦ꦩꆲ෾⮭Ɪ庅ë›î›‹á¨„ᰴ釶Ä매áê³à¢ší•¨êŸ—脸㡵ì¸î˜‰ê´á¶“à»Žè°’î‘´ì¸æ¯œä as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input32 [ 511.124474][ T3079] usb 2-1: USB disconnect, device number 86 [ 511.974661][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 512.128816][T12577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.138150][T12577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.162373][T12580] FAULT_INJECTION: forcing a failure. [ 512.162373][T12580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.242107][T12580] CPU: 1 UID: 0 PID: 12580 Comm: syz.3.1824 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 512.242152][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 512.242164][T12580] Call Trace: [ 512.242173][T12580] [ 512.242182][T12580] dump_stack_lvl+0x189/0x250 [ 512.242229][T12580] ? __lock_acquire+0xaac/0xd20 [ 512.242259][T12580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.242287][T12580] ? __pfx__printk+0x10/0x10 [ 512.242307][T12580] ? __might_fault+0xb0/0x130 [ 512.242344][T12580] should_fail_ex+0x414/0x560 [ 512.242368][T12580] _copy_from_user+0x2d/0xb0 [ 512.242412][T12580] kstrtouint_from_user+0xc4/0x170 [ 512.242435][T12580] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 512.242472][T12580] proc_fail_nth_write+0x88/0x240 [ 512.242498][T12580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 512.242529][T12580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 512.242556][T12580] vfs_write+0x27b/0xa90 [ 512.242585][T12580] ? __pfx_vfs_write+0x10/0x10 [ 512.242607][T12580] ? __fget_files+0x2a/0x420 [ 512.242635][T12580] ? __fget_files+0x3a0/0x420 [ 512.242657][T12580] ? __fget_files+0x2a/0x420 [ 512.242688][T12580] ksys_write+0x145/0x250 [ 512.242707][T12580] ? __fget_files+0x2a/0x420 [ 512.242757][T12580] ? __pfx_ksys_write+0x10/0x10 [ 512.242788][T12580] ? do_syscall_64+0xba/0x210 [ 512.242817][T12580] do_syscall_64+0xf6/0x210 [ 512.242843][T12580] ? clear_bhb_loop+0x45/0xa0 [ 512.242867][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.242887][T12580] RIP: 0033:0x7fed8898d41f [ 512.242905][T12580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 512.242923][T12580] RSP: 002b:00007fed89745030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 512.242945][T12580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed8898d41f [ 512.242960][T12580] RDX: 0000000000000001 RSI: 00007fed897450a0 RDI: 0000000000000005 [ 512.242973][T12580] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 512.242986][T12580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 512.242998][T12580] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 512.243036][T12580] [ 512.756826][T12584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1826'. [ 512.894207][T12588] veth1_macvtap: left promiscuous mode [ 513.055408][T12588] macsec0: entered allmulticast mode [ 513.059941][T12592] syz.3.1827 (12592): /proc/12585/oom_adj is deprecated, please use /proc/12585/oom_score_adj instead. [ 513.560284][ T10] usb 1-1: USB disconnect, device number 95 [ 513.831839][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 513.990048][T12608] fuse: Bad value for 'user_id' [ 513.994941][T12608] fuse: Bad value for 'user_id' [ 514.396496][T12607] IPv6: Can't replace route, no match found [ 514.734432][ T5833] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 514.910779][ T5833] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 514.927513][ T5833] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.983840][ T5833] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.012822][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.072367][ T5833] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.098251][ T5833] usb 2-1: invalid MIDI out EP 0 [ 515.149226][ T3079] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 515.286290][ T5848] cgroup: fork rejected by pids controller in /syz4 [ 515.312188][ T3079] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 515.312322][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.346350][ T5833] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 515.368365][ T3079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.422704][ T3079] usb 6-1: config 0 descriptor?? [ 515.452766][ T3079] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 515.467948][ T3079] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 515.534611][ T7883] syz_tun (unregistering): left allmulticast mode [ 515.542641][ T7883] syz_tun (unregistering): left promiscuous mode [ 515.552034][ T7883] bridge0: port 3(syz_tun) entered disabled state [ 515.655578][T12611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.659727][T12618] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1836'. [ 515.679641][T12611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.707073][ T5833] usb 5-1: USB disconnect, device number 20 [ 515.708698][ T3079] usb 6-1: USB disconnect, device number 76 [ 515.852176][T12622] FAULT_INJECTION: forcing a failure. [ 515.852176][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.858005][ T2984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.868810][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.5.1838 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 515.868843][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 515.868859][T12622] Call Trace: [ 515.868868][T12622] [ 515.868878][T12622] dump_stack_lvl+0x189/0x250 [ 515.868920][T12622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.868952][T12622] ? __pfx__printk+0x10/0x10 [ 515.868992][T12622] should_fail_ex+0x414/0x560 [ 515.869020][T12622] _copy_to_user+0x31/0xb0 [ 515.869053][T12622] simple_read_from_buffer+0xe1/0x170 [ 515.869085][T12622] proc_fail_nth_read+0x1df/0x250 [ 515.869120][T12622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.869153][T12622] ? rw_verify_area+0x258/0x650 [ 515.869177][T12622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.869208][T12622] vfs_read+0x1fd/0x980 [ 515.869238][T12622] ? __pfx___mutex_lock+0x10/0x10 [ 515.869266][T12622] ? __pfx_vfs_read+0x10/0x10 [ 515.869293][T12622] ? __fget_files+0x2a/0x420 [ 515.869325][T12622] ? __fget_files+0x3a0/0x420 [ 515.869351][T12622] ? __fget_files+0x2a/0x420 [ 515.869389][T12622] ksys_read+0x145/0x250 [ 515.869415][T12622] ? __pfx_ksys_read+0x10/0x10 [ 515.869443][T12622] ? do_syscall_64+0xba/0x210 [ 515.869475][T12622] do_syscall_64+0xf6/0x210 [ 515.869502][T12622] ? clear_bhb_loop+0x45/0xa0 [ 515.869530][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.869550][T12622] RIP: 0033:0x7f8eba78d37c [ 515.869571][T12622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 515.869590][T12622] RSP: 002b:00007f8ebb676030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.869613][T12622] RAX: ffffffffffffffda RBX: 00007f8eba9b5fa0 RCX: 00007f8eba78d37c [ 515.869630][T12622] RDX: 000000000000000f RSI: 00007f8ebb6760a0 RDI: 0000000000000004 [ 515.869644][T12622] RBP: 00007f8ebb676090 R08: 0000000000000000 R09: 0000000000000000 [ 515.869659][T12622] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 515.869673][T12622] R13: 0000000000000000 R14: 00007f8eba9b5fa0 R15: 00007f8ebaadfa28 [ 515.869707][T12622] [ 516.088169][ T2984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.177486][ T2984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.189871][ T2984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.276552][ T2984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.294548][ T2984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.361245][ T2984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.372212][ T2984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.519077][ T3079] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 516.585704][T12627] FAULT_INJECTION: forcing a failure. [ 516.585704][T12627] name failslab, interval 1, probability 0, space 0, times 0 [ 516.638200][T12627] CPU: 1 UID: 0 PID: 12627 Comm: syz.3.1840 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 516.638231][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 516.638245][T12627] Call Trace: [ 516.638254][T12627] [ 516.638264][T12627] dump_stack_lvl+0x189/0x250 [ 516.638301][T12627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.638331][T12627] ? __pfx__printk+0x10/0x10 [ 516.638358][T12627] ? ref_tracker_alloc+0x318/0x460 [ 516.638384][T12627] should_fail_ex+0x414/0x560 [ 516.638410][T12627] should_failslab+0xa8/0x100 [ 516.638438][T12627] kmem_cache_alloc_noprof+0x73/0x3c0 [ 516.638462][T12627] ? skb_clone+0x212/0x3a0 [ 516.638495][T12627] skb_clone+0x212/0x3a0 [ 516.638526][T12627] __netlink_deliver_tap+0x404/0x850 [ 516.638563][T12627] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.638586][T12627] netlink_deliver_tap+0x19c/0x1b0 [ 516.638609][T12627] netlink_unicast+0x72f/0x8d0 [ 516.638649][T12627] netlink_sendmsg+0x805/0xb30 [ 516.638681][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.638708][T12627] ? aa_sock_msg_perm+0x94/0x160 [ 516.638732][T12627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.638755][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.638778][T12627] __sock_sendmsg+0x219/0x270 [ 516.638802][T12627] ____sys_sendmsg+0x505/0x830 [ 516.638835][T12627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.638872][T12627] ? import_iovec+0x74/0xa0 [ 516.638904][T12627] ___sys_sendmsg+0x21f/0x2a0 [ 516.638933][T12627] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.639000][T12627] ? __fget_files+0x2a/0x420 [ 516.639026][T12627] ? __fget_files+0x3a0/0x420 [ 516.639063][T12627] __x64_sys_sendmsg+0x19b/0x260 [ 516.639092][T12627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.639137][T12627] ? do_syscall_64+0xba/0x210 [ 516.639167][T12627] do_syscall_64+0xf6/0x210 [ 516.639192][T12627] ? clear_bhb_loop+0x45/0xa0 [ 516.639217][T12627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.639237][T12627] RIP: 0033:0x7fed8898e969 [ 516.639256][T12627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.639272][T12627] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.639294][T12627] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 516.639309][T12627] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 516.639321][T12627] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 516.639334][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.639346][T12627] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 516.639376][T12627] [ 516.993704][ T3079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.004825][ T3079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.023676][ T3079] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.036824][ T3079] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.046012][ T3079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.054659][ T2984] bridge_slave_1: left allmulticast mode [ 517.060409][ T2984] bridge_slave_1: left promiscuous mode [ 517.066187][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.076279][ T3079] usb 6-1: config 0 descriptor?? [ 517.104883][ T5828] usb 2-1: USB disconnect, device number 87 [ 517.128152][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.137205][ T2984] bridge_slave_0: left allmulticast mode [ 517.143313][ T2984] bridge_slave_0: left promiscuous mode [ 517.149257][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.159331][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.172180][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.183934][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.206205][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.299800][ T3079] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 517.327097][ T3079] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 517.356805][ T3079] usb 6-1: USB disconnect, device number 77 [ 517.601422][T12639] fido_id[12639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 518.072750][ T2984] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 518.084317][ T2984] bridge2 (unregistering): left promiscuous mode [ 518.351547][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.361458][ T2984] bond_slave_0: left promiscuous mode [ 518.370366][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.382073][ T2984] bond_slave_1: left promiscuous mode [ 518.390888][ T2984] bond0 (unregistering): (slave team0): Releasing backup interface [ 518.399746][ T2984] team0: left promiscuous mode [ 518.404563][ T2984] team_slave_0: left promiscuous mode [ 518.413337][ T2984] bond0 (unregistering): Released all slaves [ 518.554856][ T2984] bond1 (unregistering): Released all slaves [ 518.767622][ T2984] tipc: Disabling bearer [ 518.789815][ T30] audit: type=1326 audit(1746781549.600:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 518.826071][ T2984] tipc: Left network mode [ 518.953902][ T30] audit: type=1326 audit(1746781549.600:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.029108][ T30] audit: type=1326 audit(1746781549.630:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.149190][ T5833] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 519.229234][ T30] audit: type=1326 audit(1746781549.630:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.253640][ T55] Bluetooth: hci3: command tx timeout [ 519.316378][ T30] audit: type=1326 audit(1746781549.630:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.379202][ T5891] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 519.398805][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 519.421016][ T30] audit: type=1326 audit(1746781549.630:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.444174][ T30] audit: type=1326 audit(1746781549.630:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.467024][ T30] audit: type=1326 audit(1746781549.650:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3a2578e969 code=0x7ffc0000 [ 519.491557][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 519.500637][ T5833] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 519.510025][ T5833] usb 2-1: config 0 has no interface number 0 [ 519.516711][ T5833] usb 2-1: config 0 interface 132 has no altsetting 0 [ 519.531191][ T5833] usb 2-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice=3c.49 [ 519.540532][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.548515][ T5833] usb 2-1: Product: syz [ 519.678531][ T5891] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.701482][ T5891] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.723513][ T5891] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.733844][ T5833] usb 2-1: Manufacturer: syz [ 519.733867][ T5833] usb 2-1: SerialNumber: syz [ 519.742000][ T5833] usb 2-1: config 0 descriptor?? [ 519.780956][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.857927][ T5891] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.897290][ T5891] usb 6-1: invalid MIDI out EP 0 [ 520.201356][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.278973][ T5891] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 520.280628][T12632] chnl_net:caif_netlink_parms(): no params data found [ 520.673742][ T2984] hsr_slave_0: left promiscuous mode [ 520.696086][ T2984] hsr_slave_1: left promiscuous mode [ 520.981106][ T2984] veth1_macvtap: left promiscuous mode [ 520.991186][ T2984] veth0_macvtap: left promiscuous mode [ 521.004942][ T2984] veth1_vlan: left promiscuous mode [ 521.011657][ T2984] veth0_vlan: left promiscuous mode [ 521.339819][ T55] Bluetooth: hci3: command tx timeout [ 521.593461][T12703] FAULT_INJECTION: forcing a failure. [ 521.593461][T12703] name failslab, interval 1, probability 0, space 0, times 0 [ 521.617656][T12703] CPU: 1 UID: 0 PID: 12703 Comm: syz.0.1856 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 521.617687][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 521.617701][T12703] Call Trace: [ 521.617709][T12703] [ 521.617719][T12703] dump_stack_lvl+0x189/0x250 [ 521.617758][T12703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.617788][T12703] ? __pfx__printk+0x10/0x10 [ 521.617816][T12703] ? ref_tracker_alloc+0x318/0x460 [ 521.617842][T12703] should_fail_ex+0x414/0x560 [ 521.617867][T12703] should_failslab+0xa8/0x100 [ 521.617897][T12703] kmem_cache_alloc_noprof+0x73/0x3c0 [ 521.617921][T12703] ? skb_clone+0x212/0x3a0 [ 521.617955][T12703] skb_clone+0x212/0x3a0 [ 521.617988][T12703] __netlink_deliver_tap+0x404/0x850 [ 521.618024][T12703] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.618047][T12703] netlink_deliver_tap+0x19c/0x1b0 [ 521.618071][T12703] netlink_unicast+0x72f/0x8d0 [ 521.618103][T12703] netlink_sendmsg+0x805/0xb30 [ 521.618137][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.618164][T12703] ? aa_sock_msg_perm+0x94/0x160 [ 521.618189][T12703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.618221][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.618247][T12703] __sock_sendmsg+0x219/0x270 [ 521.618271][T12703] ____sys_sendmsg+0x505/0x830 [ 521.618303][T12703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.618340][T12703] ? import_iovec+0x74/0xa0 [ 521.618372][T12703] ___sys_sendmsg+0x21f/0x2a0 [ 521.618401][T12703] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.618467][T12703] ? __fget_files+0x2a/0x420 [ 521.618494][T12703] ? __fget_files+0x3a0/0x420 [ 521.618531][T12703] __x64_sys_sendmsg+0x19b/0x260 [ 521.618561][T12703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.618607][T12703] ? do_syscall_64+0xba/0x210 [ 521.618638][T12703] do_syscall_64+0xf6/0x210 [ 521.618664][T12703] ? clear_bhb_loop+0x45/0xa0 [ 521.618690][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.618710][T12703] RIP: 0033:0x7f3a2578e969 [ 521.618730][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.618749][T12703] RSP: 002b:00007f3a265f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.618771][T12703] RAX: ffffffffffffffda RBX: 00007f3a259b5fa0 RCX: 00007f3a2578e969 [ 521.618787][T12703] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 521.618800][T12703] RBP: 00007f3a265f1090 R08: 0000000000000000 R09: 0000000000000000 [ 521.618813][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.618825][T12703] R13: 0000000000000000 R14: 00007f3a259b5fa0 R15: 00007f3a25adfa28 [ 521.618857][T12703] [ 521.912287][ T5833] mxuport 2-1:0.132: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 521.922256][ T5833] mxuport 2-1:0.132: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 521.931439][ T5833] mxuport 2-1:0.132: probe with driver mxuport failed with error -71 [ 521.955799][ T5833] usb 2-1: USB disconnect, device number 88 [ 521.999157][ T5891] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 522.120358][T12712] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1858'. [ 522.129991][ T5891] usb 4-1: device descriptor read/64, error -71 [ 522.379186][ T5891] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 522.519505][ T5891] usb 4-1: device descriptor read/64, error -71 [ 522.528033][ T10] usb 6-1: USB disconnect, device number 78 [ 522.629556][ T5891] usb usb4-port1: attempt power cycle [ 522.664006][T12716] FAULT_INJECTION: forcing a failure. [ 522.664006][T12716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 522.678583][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.5.1860 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 522.678612][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 522.678627][T12716] Call Trace: [ 522.678634][T12716] [ 522.678641][T12716] dump_stack_lvl+0x189/0x250 [ 522.678669][T12716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.678691][T12716] ? __pfx__printk+0x10/0x10 [ 522.678707][T12716] ? fs_reclaim_acquire+0x7d/0x100 [ 522.678736][T12716] should_fail_ex+0x414/0x560 [ 522.678764][T12716] prepare_alloc_pages+0x213/0x610 [ 522.678803][T12716] __alloc_frozen_pages_noprof+0x123/0x370 [ 522.678839][T12716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 522.678882][T12716] ? filemap_get_entry+0xad/0x2f0 [ 522.678909][T12716] alloc_pages_mpol+0x232/0x4a0 [ 522.678932][T12716] alloc_pages_noprof+0xa9/0x190 [ 522.678953][T12716] folio_alloc_noprof+0x1e/0x30 [ 522.678972][T12716] filemap_alloc_folio_noprof+0xdf/0x470 [ 522.679011][T12716] ? __lock_acquire+0xaac/0xd20 [ 522.679039][T12716] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 522.679075][T12716] ? __filemap_get_folio+0x9a6/0xaf0 [ 522.679104][T12716] do_read_cache_folio+0x2de/0x590 [ 522.679127][T12716] ? __pfx_blkdev_read_folio+0x10/0x10 [ 522.679163][T12716] freader_get_folio+0x3c4/0x7f0 [ 522.679201][T12716] freader_fetch+0xa3/0x5d0 [ 522.679235][T12716] __build_id_parse+0x133/0x7d0 [ 522.679262][T12716] ? __pfx___build_id_parse+0x10/0x10 [ 522.679290][T12716] ? find_vma+0xe7/0x160 [ 522.679315][T12716] ? __pfx_find_vma+0x10/0x10 [ 522.679352][T12716] ? query_matching_vma+0x1b2/0x1d0 [ 522.679383][T12716] procfs_procmap_ioctl+0x7f0/0xce0 [ 522.679414][T12716] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 522.679461][T12716] ? __fget_files+0x3a0/0x420 [ 522.679486][T12716] ? __fget_files+0x2a/0x420 [ 522.679515][T12716] ? bpf_lsm_file_ioctl+0x9/0x20 [ 522.679540][T12716] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 522.679564][T12716] __se_sys_ioctl+0xf9/0x170 [ 522.679588][T12716] do_syscall_64+0xf6/0x210 [ 522.679614][T12716] ? clear_bhb_loop+0x45/0xa0 [ 522.679640][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.679659][T12716] RIP: 0033:0x7f8eba78e969 [ 522.679678][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.679695][T12716] RSP: 002b:00007f8ebb676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.679716][T12716] RAX: ffffffffffffffda RBX: 00007f8eba9b5fa0 RCX: 00007f8eba78e969 [ 522.679730][T12716] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000008 [ 522.679744][T12716] RBP: 00007f8ebb676090 R08: 0000000000000000 R09: 0000000000000000 [ 522.679757][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.679769][T12716] R13: 0000000000000000 R14: 00007f8eba9b5fa0 R15: 00007f8ebaadfa28 [ 522.679802][T12716] [ 523.239182][ T5891] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 523.260383][ T5891] usb 4-1: device descriptor read/8, error -71 [ 523.410882][ T55] Bluetooth: hci3: command tx timeout [ 523.499288][ T5891] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 523.521319][ T5891] usb 4-1: device descriptor read/8, error -71 [ 523.631194][ T5891] usb usb4-port1: unable to enumerate USB device [ 524.437075][T12724] TCP: TCP_TX_DELAY enabled [ 524.588504][T12728] FAULT_INJECTION: forcing a failure. [ 524.588504][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 524.604778][T12728] CPU: 0 UID: 0 PID: 12728 Comm: syz.3.1864 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 524.604801][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 524.604811][T12728] Call Trace: [ 524.604817][T12728] [ 524.604824][T12728] dump_stack_lvl+0x189/0x250 [ 524.604852][T12728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.604882][T12728] ? __pfx__printk+0x10/0x10 [ 524.604908][T12728] ? ref_tracker_alloc+0x318/0x460 [ 524.604933][T12728] should_fail_ex+0x414/0x560 [ 524.604957][T12728] should_failslab+0xa8/0x100 [ 524.604984][T12728] kmem_cache_alloc_noprof+0x73/0x3c0 [ 524.605006][T12728] ? skb_clone+0x212/0x3a0 [ 524.605029][T12728] skb_clone+0x212/0x3a0 [ 524.605057][T12728] __netlink_deliver_tap+0x404/0x850 [ 524.605082][T12728] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.605099][T12728] netlink_deliver_tap+0x19c/0x1b0 [ 524.605119][T12728] netlink_unicast+0x72f/0x8d0 [ 524.605150][T12728] netlink_sendmsg+0x805/0xb30 [ 524.605183][T12728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.605208][T12728] ? aa_sock_msg_perm+0x94/0x160 [ 524.605230][T12728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.605251][T12728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.605267][T12728] __sock_sendmsg+0x219/0x270 [ 524.605283][T12728] ____sys_sendmsg+0x505/0x830 [ 524.605307][T12728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.605332][T12728] ? import_iovec+0x74/0xa0 [ 524.605354][T12728] ___sys_sendmsg+0x21f/0x2a0 [ 524.605383][T12728] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.605446][T12728] ? __fget_files+0x2a/0x420 [ 524.605470][T12728] ? __fget_files+0x3a0/0x420 [ 524.605501][T12728] __x64_sys_sendmsg+0x19b/0x260 [ 524.605527][T12728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.605557][T12728] ? do_syscall_64+0xba/0x210 [ 524.605597][T12728] do_syscall_64+0xf6/0x210 [ 524.605622][T12728] ? clear_bhb_loop+0x45/0xa0 [ 524.605648][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.605669][T12728] RIP: 0033:0x7fed8898e969 [ 524.605688][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.605705][T12728] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.605726][T12728] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 524.605740][T12728] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 524.605755][T12728] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 524.605767][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.605780][T12728] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 524.605813][T12728] [ 524.870158][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.500138][ T55] Bluetooth: hci3: command tx timeout [ 525.867489][T12738] FAULT_INJECTION: forcing a failure. [ 525.867489][T12738] name failslab, interval 1, probability 0, space 0, times 0 [ 525.886040][T12738] CPU: 1 UID: 0 PID: 12738 Comm: syz.3.1867 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 525.886072][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 525.886086][T12738] Call Trace: [ 525.886095][T12738] [ 525.886105][T12738] dump_stack_lvl+0x189/0x250 [ 525.886143][T12738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.886172][T12738] ? __pfx__printk+0x10/0x10 [ 525.886200][T12738] ? ref_tracker_alloc+0x318/0x460 [ 525.886225][T12738] should_fail_ex+0x414/0x560 [ 525.886250][T12738] should_failslab+0xa8/0x100 [ 525.886279][T12738] kmem_cache_alloc_noprof+0x73/0x3c0 [ 525.886303][T12738] ? skb_clone+0x212/0x3a0 [ 525.886335][T12738] skb_clone+0x212/0x3a0 [ 525.886367][T12738] __netlink_deliver_tap+0x404/0x850 [ 525.886403][T12738] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.886427][T12738] netlink_deliver_tap+0x19c/0x1b0 [ 525.886450][T12738] netlink_unicast+0x72f/0x8d0 [ 525.886482][T12738] netlink_sendmsg+0x805/0xb30 [ 525.886513][T12738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.886539][T12738] ? aa_sock_msg_perm+0x94/0x160 [ 525.886563][T12738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.886585][T12738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.886608][T12738] __sock_sendmsg+0x219/0x270 [ 525.886629][T12738] ____sys_sendmsg+0x505/0x830 [ 525.886653][T12738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.886679][T12738] ? import_iovec+0x74/0xa0 [ 525.886701][T12738] ___sys_sendmsg+0x21f/0x2a0 [ 525.886724][T12738] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.886789][T12738] ? __fget_files+0x2a/0x420 [ 525.886815][T12738] ? __fget_files+0x3a0/0x420 [ 525.886851][T12738] __x64_sys_sendmsg+0x19b/0x260 [ 525.886884][T12738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.886916][T12738] ? do_syscall_64+0xba/0x210 [ 525.886937][T12738] do_syscall_64+0xf6/0x210 [ 525.886956][T12738] ? clear_bhb_loop+0x45/0xa0 [ 525.886975][T12738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.886993][T12738] RIP: 0033:0x7fed8898e969 [ 525.887013][T12738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.887030][T12738] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.887053][T12738] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 525.887068][T12738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 525.887079][T12738] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 525.887091][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.887103][T12738] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 525.887134][T12738] [ 537.021798][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.031754][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.042274][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.052671][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.063538][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 537.556420][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 537.566376][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 537.577974][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.587983][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.598346][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.543506][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 538.552943][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 538.562851][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 538.572126][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 538.582272][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 539.101450][ T55] Bluetooth: hci5: command tx timeout [ 539.649325][ T55] Bluetooth: hci6: command tx timeout [ 540.609150][ T55] Bluetooth: hci7: command tx timeout [ 541.170938][ T55] Bluetooth: hci5: command tx timeout [ 541.604029][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 541.614267][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 541.622666][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.632727][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.642004][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 541.729352][ T55] Bluetooth: hci6: command tx timeout [ 542.699203][ T55] Bluetooth: hci7: command tx timeout [ 543.249334][ T55] Bluetooth: hci5: command tx timeout [ 543.729274][ T55] Bluetooth: hci8: command tx timeout [ 543.819197][ T55] Bluetooth: hci6: command tx timeout [ 544.769360][ T55] Bluetooth: hci7: command tx timeout [ 545.329369][ T55] Bluetooth: hci5: command tx timeout [ 545.809152][ T55] Bluetooth: hci8: command tx timeout [ 545.889281][ T55] Bluetooth: hci6: command tx timeout [ 546.849158][ T55] Bluetooth: hci7: command tx timeout [ 547.889223][ T55] Bluetooth: hci8: command tx timeout [ 549.969311][ T55] Bluetooth: hci8: command tx timeout [ 562.934973][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.941465][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.633167][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 576.641531][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 576.651492][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 576.660822][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 576.670649][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 578.690127][ T5831] Bluetooth: hci9: command tx timeout [ 580.769108][ T5831] Bluetooth: hci9: command tx timeout [ 582.859210][ T5831] Bluetooth: hci9: command tx timeout [ 584.929112][ T5831] Bluetooth: hci9: command tx timeout [ 597.150239][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 597.161813][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 597.176529][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 597.189954][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 597.205157][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 598.133110][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 598.143367][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 598.153331][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 598.165602][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 598.173668][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 598.555487][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 598.565125][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 598.573789][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 598.584187][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 598.592181][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 599.249279][ T55] Bluetooth: hci10: command tx timeout [ 600.219361][ T55] Bluetooth: hci11: command tx timeout [ 600.609345][ T55] Bluetooth: hci12: command tx timeout [ 601.329255][ T55] Bluetooth: hci10: command tx timeout [ 601.586488][ T5831] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 601.595782][ T5831] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 601.604613][ T5831] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 601.615044][ T5831] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 601.625158][ T5831] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 602.289410][ T5831] Bluetooth: hci11: command tx timeout [ 602.689152][ T5831] Bluetooth: hci12: command tx timeout [ 603.419233][ T5831] Bluetooth: hci10: command tx timeout [ 603.649143][ T5831] Bluetooth: hci13: command tx timeout [ 604.369211][ T5831] Bluetooth: hci11: command tx timeout [ 604.779228][ T5831] Bluetooth: hci12: command tx timeout [ 605.489291][ T5831] Bluetooth: hci10: command tx timeout [ 605.729098][ T5831] Bluetooth: hci13: command tx timeout [ 606.453064][ T5831] Bluetooth: hci11: command tx timeout [ 606.849225][ T5831] Bluetooth: hci12: command tx timeout [ 607.809238][ T5831] Bluetooth: hci13: command tx timeout [ 609.889265][ T5831] Bluetooth: hci13: command tx timeout [ 624.384590][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.391142][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.103729][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 637.118099][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 637.126703][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 637.137865][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 637.145942][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 639.259369][ T55] Bluetooth: hci14: command tx timeout [ 641.329065][ T5831] Bluetooth: hci14: command tx timeout [ 641.809188][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 643.409252][ T55] Bluetooth: hci14: command tx timeout [ 645.489108][ T55] Bluetooth: hci14: command tx timeout [ 657.133226][ T5831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 657.143153][ T5831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 657.151684][ T5831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 657.162038][ T5831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 657.175792][ T5831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 658.753297][ T5831] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 658.762951][ T5831] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 658.771539][ T5831] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 658.790246][T12629] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 658.802007][T12787] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 658.810132][T12629] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 658.819941][T12629] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 658.828582][T12787] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 658.837044][T12787] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 658.846193][T12629] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 659.249138][ T5831] Bluetooth: hci15: command tx timeout [ 660.929117][T12788] Bluetooth: hci17: command tx timeout [ 660.936150][T12788] Bluetooth: hci16: command tx timeout [ 661.330894][T12793] Bluetooth: hci15: command tx timeout [ 662.205735][ T55] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 662.219294][ T55] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 662.228654][ T55] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 662.244418][ T55] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 662.253571][ T55] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 662.289465][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 662.295746][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 662.302080][T12793] Bluetooth: hci7: command 0x0406 tx timeout [ 663.009091][T12787] Bluetooth: hci17: command tx timeout [ 663.014929][ T5831] Bluetooth: hci16: command tx timeout [ 663.409151][ T5831] Bluetooth: hci15: command tx timeout [ 664.289448][ T5831] Bluetooth: hci18: command tx timeout [ 665.089091][ T5831] Bluetooth: hci16: command tx timeout [ 665.089182][T12787] Bluetooth: hci17: command tx timeout [ 665.493553][ T5831] Bluetooth: hci15: command tx timeout [ 666.369645][ T5831] Bluetooth: hci18: command tx timeout [ 667.169422][ T5831] Bluetooth: hci16: command tx timeout [ 667.169456][T12629] Bluetooth: hci17: command tx timeout [ 667.419301][T12787] Bluetooth: hci8: command 0x0406 tx timeout [ 668.449497][T12787] Bluetooth: hci18: command tx timeout [ 670.449806][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 670.457594][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 670.466375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.475383][ T31] task:kworker/u8:2 state:D stack:22168 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 670.487716][ T31] Workqueue: events_unbound linkwatch_event [ 670.495139][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 670.498463][ T31] [ 670.509786][ T31] __schedule+0x16e2/0x4cd0 [ 670.514366][ T31] ? schedule+0x165/0x360 [ 670.518706][ T31] ? __pfx___schedule+0x10/0x10 [ 670.539324][T12787] Bluetooth: hci18: command tx timeout [ 670.549099][ T31] ? schedule+0x91/0x360 [ 670.553406][ T31] schedule+0x165/0x360 [ 670.557595][ T31] schedule_preempt_disabled+0x13/0x30 [ 670.588011][ T31] __mutex_lock+0x724/0xe80 [ 670.592760][ T31] ? __mutex_lock+0x51b/0xe80 [ 670.597674][ T31] ? linkwatch_event+0xe/0x60 [ 670.602441][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 670.607523][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.613124][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 670.618901][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 670.625274][ T31] linkwatch_event+0xe/0x60 [ 670.634560][ T31] process_scheduled_works+0xadb/0x17a0 [ 670.641638][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.647699][ T31] worker_thread+0x8a0/0xda0 [ 670.656386][ T31] kthread+0x70e/0x8a0 [ 670.660856][ T31] ? __pfx_worker_thread+0x10/0x10 [ 670.666017][ T31] ? __pfx_kthread+0x10/0x10 [ 670.674610][ T31] ? __pfx_kthread+0x10/0x10 [ 670.680308][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.685627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.697059][ T31] ? __pfx_kthread+0x10/0x10 [ 670.701937][ T31] ret_from_fork+0x4b/0x80 [ 670.706409][ T31] ? __pfx_kthread+0x10/0x10 [ 670.713428][ T31] ret_from_fork_asm+0x1a/0x30 [ 670.718232][ T31] [ 670.721380][ T31] INFO: task kworker/u8:7:1159 blocked for more than 143 seconds. [ 670.731161][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 670.738833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.747662][ T31] task:kworker/u8:7 state:D stack:19736 pid:1159 tgid:1159 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 670.759903][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 670.766205][ T31] Call Trace: [ 670.769543][ T31] [ 670.772507][ T31] __schedule+0x16e2/0x4cd0 [ 670.777055][ T31] ? __lock_acquire+0xaac/0xd20 [ 670.782082][ T31] ? schedule+0x165/0x360 [ 670.786466][ T31] ? __pfx___schedule+0x10/0x10 [ 670.791505][ T31] ? schedule+0x91/0x360 [ 670.795814][ T31] schedule+0x165/0x360 [ 670.800785][ T31] schedule_preempt_disabled+0x13/0x30 [ 670.806309][ T31] __mutex_lock+0x724/0xe80 [ 670.810948][ T31] ? __mutex_lock+0x51b/0xe80 [ 670.815687][ T31] ? addrconf_verify_work+0x19/0x30 [ 670.821854][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 670.826965][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 670.832777][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.838029][ T31] addrconf_verify_work+0x19/0x30 [ 670.843177][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 670.849281][ T31] process_scheduled_works+0xadb/0x17a0 [ 670.854925][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.861088][ T31] worker_thread+0x8a0/0xda0 [ 670.865719][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 670.872231][ T31] ? __kthread_parkme+0x7b/0x200 [ 670.877242][ T31] kthread+0x70e/0x8a0 [ 670.882134][ T31] ? __pfx_worker_thread+0x10/0x10 [ 670.887281][ T31] ? __pfx_kthread+0x10/0x10 [ 670.894580][ T31] ? __pfx_kthread+0x10/0x10 [ 670.900349][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.905593][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.911983][ T31] ? __pfx_kthread+0x10/0x10 [ 670.916627][ T31] ret_from_fork+0x4b/0x80 [ 670.921109][ T31] ? __pfx_kthread+0x10/0x10 [ 670.925726][ T31] ret_from_fork_asm+0x1a/0x30 [ 670.930827][ T31] [ 670.933971][ T31] INFO: task dhcpcd:5495 blocked for more than 143 seconds. [ 670.941395][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 670.949363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.958087][ T31] task:dhcpcd state:D stack:21656 pid:5495 tgid:5495 ppid:5494 task_flags:0x400140 flags:0x00000002 [ 670.970509][ T31] Call Trace: [ 670.973819][ T31] [ 670.976782][ T31] __schedule+0x16e2/0x4cd0 [ 670.981458][ T31] ? schedule+0x165/0x360 [ 670.986054][ T31] ? __pfx___schedule+0x10/0x10 [ 670.991227][ T31] ? schedule+0x91/0x360 [ 670.995507][ T31] schedule+0x165/0x360 [ 671.000084][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.005575][ T31] __mutex_lock+0x724/0xe80 [ 671.010577][ T31] ? __mutex_lock+0x51b/0xe80 [ 671.015308][ T31] ? devinet_ioctl+0x323/0x1b50 [ 671.020751][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.025838][ T31] ? bpf_lsm_capable+0x9/0x20 [ 671.030963][ T31] ? security_capable+0x7e/0x2e0 [ 671.035964][ T31] devinet_ioctl+0x323/0x1b50 [ 671.041121][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 671.046284][ T31] ? get_user_ifreq+0x12c/0x180 [ 671.051475][ T31] inet_ioctl+0x3c0/0x4c0 [ 671.055864][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 671.061165][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 671.066874][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 671.073372][ T31] sock_do_ioctl+0xd9/0x300 [ 671.077963][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 671.083467][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.088371][ T31] sock_ioctl+0x576/0x790 [ 671.092870][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 671.097959][ T31] ? fd_install+0x97/0x540 [ 671.102526][ T31] ? fd_install+0x97/0x540 [ 671.106999][ T31] ? fd_install+0x30d/0x540 [ 671.111778][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 671.116788][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 671.121745][ T31] __se_sys_ioctl+0xf9/0x170 [ 671.126518][ T31] do_syscall_64+0xf6/0x210 [ 671.131127][ T31] ? clear_bhb_loop+0x45/0xa0 [ 671.135983][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.142030][ T31] RIP: 0033:0x7f00b48a1378 [ 671.146484][ T31] RSP: 002b:00007ffc819cb1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.155169][ T31] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 00007f00b48a1378 [ 671.163235][ T31] RDX: 00007ffc819db3e0 RSI: 0000000000008914 RDI: 000000000000001d [ 671.171452][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 671.179622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc819eb580 [ 671.187773][ T31] R13: 00007f00b47a16c8 R14: 0000000000000028 R15: 0000000000008914 [ 671.195846][ T31] [ 671.199117][ T31] INFO: task syz-executor:12632 blocked for more than 144 seconds. [ 671.207045][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 671.219989][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.228710][ T31] task:syz-executor state:D stack:23000 pid:12632 tgid:12632 ppid:1 task_flags:0x400140 flags:0x00004004 [ 671.241121][ T31] Call Trace: [ 671.244439][ T31] [ 671.247391][ T31] __schedule+0x16e2/0x4cd0 [ 671.252030][ T31] ? schedule+0x165/0x360 [ 671.256567][ T31] ? __pfx___schedule+0x10/0x10 [ 671.261594][ T31] ? schedule+0x91/0x360 [ 671.266045][ T31] schedule+0x165/0x360 [ 671.270300][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.275942][ T31] __mutex_lock+0x724/0xe80 [ 671.280543][ T31] ? __mutex_lock+0x51b/0xe80 [ 671.285422][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 671.290299][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.295415][ T31] ? ns_capable+0x8a/0xf0 [ 671.300070][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 671.306068][ T31] rtnl_newlink+0x8db/0x1c70 [ 671.310795][ T31] ? __kernel_text_address+0xd/0x40 [ 671.316159][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.321289][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.326187][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.331310][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.336252][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.341427][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 671.346692][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 671.352081][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 671.357495][ T31] ? aa_get_newest_label+0xf7/0x5d0 [ 671.362815][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.367718][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.372996][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 671.377973][ T31] ? kasan_save_track+0x4f/0x80 [ 671.383157][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 671.388317][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.393847][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.398752][ T31] netlink_rcv_skb+0x219/0x490 [ 671.403772][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.409323][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.414658][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.419964][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.425190][ T31] netlink_unicast+0x758/0x8d0 [ 671.430060][ T31] netlink_sendmsg+0x805/0xb30 [ 671.434874][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.440242][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 671.445217][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.450787][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.456116][ T31] __sock_sendmsg+0x219/0x270 [ 671.461227][ T31] __sys_sendto+0x3bd/0x520 [ 671.465770][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 671.471188][ T31] ? task_mm_cid_work+0x21f/0x760 [ 671.476249][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 671.481898][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.486726][ T31] __x64_sys_sendto+0xde/0x100 [ 671.491548][ T31] do_syscall_64+0xf6/0x210 [ 671.496099][ T31] ? clear_bhb_loop+0x45/0xa0 [ 671.500894][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.506841][ T31] RIP: 0033:0x7f06159907fc [ 671.511356][ T31] RSP: 002b:00007f0615cdf6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 671.519832][ T31] RAX: ffffffffffffffda RBX: 00007f06166e4620 RCX: 00007f06159907fc [ 671.527825][ T31] RDX: 000000000000003c RSI: 00007f06166e4670 RDI: 0000000000000003 [ 671.535901][ T31] RBP: 0000000000000000 R08: 00007f0615cdf704 R09: 000000000000000c [ 671.543997][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 671.552031][ T31] R13: 0000000000000000 R14: 00007f06166e4670 R15: 0000000000000000 [ 671.560094][ T31] [ 671.563157][ T31] INFO: task syz.0.1856:12703 blocked for more than 144 seconds. [ 671.571899][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 671.579839][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.588537][ T31] task:syz.0.1856 state:D stack:25960 pid:12703 tgid:12702 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 671.601065][ T31] Call Trace: [ 671.604384][ T31] [ 671.607323][ T31] __schedule+0x16e2/0x4cd0 [ 671.612108][ T31] ? schedule+0x165/0x360 [ 671.616476][ T31] ? __pfx___schedule+0x10/0x10 [ 671.621684][ T31] ? schedule+0x91/0x360 [ 671.625983][ T31] schedule+0x165/0x360 [ 671.630537][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.636040][ T31] __mutex_lock+0x724/0xe80 [ 671.640921][ T31] ? __mutex_lock+0x51b/0xe80 [ 671.645638][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 671.650891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.655966][ T31] ? ns_capable+0x8a/0xf0 [ 671.660740][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 671.666595][ T31] rtnl_newlink+0x8db/0x1c70 [ 671.671651][ T31] ? finish_task_switch+0x18b/0x950 [ 671.676988][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.682132][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.687531][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.692368][ T31] ? trace_sched_exit_tp+0x38/0x120 [ 671.697801][ T31] ? __schedule+0x1700/0x4cd0 [ 671.702614][ T31] ? preempt_schedule_irq+0xb5/0x150 [ 671.708019][ T31] ? __pfx___schedule+0x10/0x10 [ 671.713091][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.718140][ T31] ? do_raw_spin_lock+0x121/0x290 [ 671.723496][ T31] ? aa_get_newest_label+0xf7/0x5d0 [ 671.728738][ T31] ? __lock_acquire+0xaac/0xd20 [ 671.738355][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.743459][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 671.748557][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 671.753745][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.759413][ T31] netlink_rcv_skb+0x219/0x490 [ 671.764230][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.769082][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.774721][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.780102][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.785446][ T31] netlink_unicast+0x758/0x8d0 [ 671.790307][ T31] netlink_sendmsg+0x805/0xb30 [ 671.795307][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.800757][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 671.805726][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.811111][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.816452][ T31] __sock_sendmsg+0x219/0x270 [ 671.821232][ T31] ____sys_sendmsg+0x505/0x830 [ 671.826055][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.831641][ T31] ? import_iovec+0x74/0xa0 [ 671.836204][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 671.841298][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.846590][ T31] ? __fget_files+0x2a/0x420 [ 671.851568][ T31] ? __fget_files+0x3a0/0x420 [ 671.856313][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 671.861339][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.867021][ T31] ? do_syscall_64+0xba/0x210 [ 671.871790][ T31] do_syscall_64+0xf6/0x210 [ 671.876456][ T31] ? clear_bhb_loop+0x45/0xa0 [ 671.881223][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.887140][ T31] RIP: 0033:0x7f3a2578e969 [ 671.891912][ T31] RSP: 002b:00007f3a265f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.900444][ T31] RAX: ffffffffffffffda RBX: 00007f3a259b5fa0 RCX: 00007f3a2578e969 [ 671.908573][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 671.916664][ T31] RBP: 00007f3a265f1090 R08: 0000000000000000 R09: 0000000000000000 [ 671.924837][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.932903][ T31] R13: 0000000000000000 R14: 00007f3a259b5fa0 R15: 00007f3a25adfa28 [ 671.941103][ T31] [ 671.944189][ T31] INFO: task syz.1.1858:12711 blocked for more than 144 seconds. [ 671.951998][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 671.959881][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.968578][ T31] task:syz.1.1858 state:D stack:27048 pid:12711 tgid:12710 ppid:5846 task_flags:0x400040 flags:0x00000004 [ 671.981326][ T31] Call Trace: [ 671.984646][ T31] [ 671.987612][ T31] __schedule+0x16e2/0x4cd0 [ 671.992463][ T31] ? stack_trace_save+0x9c/0xe0 [ 671.997352][ T31] ? schedule+0x165/0x360 [ 672.002071][ T31] ? __pfx___schedule+0x10/0x10 [ 672.006974][ T31] ? schedule+0x91/0x360 [ 672.011306][ T31] schedule+0x165/0x360 [ 672.015664][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.021411][ T31] __mutex_lock+0x724/0xe80 [ 672.025969][ T31] ? __mutex_lock+0x51b/0xe80 [ 672.030701][ T31] ? rtnl_dumpit+0x92/0x200 [ 672.035384][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.040709][ T31] ? __build_skb_around+0x257/0x3e0 [ 672.046035][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 672.051815][ T31] rtnl_dumpit+0x92/0x200 [ 672.056187][ T31] netlink_dump+0x64e/0xe70 [ 672.061072][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 672.066152][ T31] ? netlink_lookup+0x30/0x200 [ 672.070993][ T31] ? netlink_lookup+0x30/0x200 [ 672.075790][ T31] ? netlink_lookup+0x30/0x200 [ 672.080761][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 672.085998][ T31] rtnetlink_rcv_msg+0x9eb/0xb70 [ 672.091167][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 672.096572][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 672.101974][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.107466][ T31] ? __pfx_rtnl_dumpit+0x10/0x10 [ 672.112817][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 672.118232][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 672.124036][ T31] ? __copy_skb_header+0xa7/0x550 [ 672.129344][ T31] netlink_rcv_skb+0x219/0x490 [ 672.134158][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.140043][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.145387][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.150677][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.156074][ T31] netlink_unicast+0x758/0x8d0 [ 672.160933][ T31] netlink_sendmsg+0x805/0xb30 [ 672.165891][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.171252][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 672.176346][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.181710][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.187056][ T31] __sock_sendmsg+0x219/0x270 [ 672.191967][ T31] ____sys_sendmsg+0x505/0x830 [ 672.196788][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.202191][ T31] ? import_iovec+0x74/0xa0 [ 672.206902][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 672.211652][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.216942][ T31] ? __fget_files+0x2a/0x420 [ 672.221660][ T31] ? __fget_files+0x3a0/0x420 [ 672.226397][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 672.231406][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.236939][ T31] ? do_syscall_64+0xba/0x210 [ 672.241801][ T31] do_syscall_64+0xf6/0x210 [ 672.246349][ T31] ? clear_bhb_loop+0x45/0xa0 [ 672.251290][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.257219][ T31] RIP: 0033:0x7f05bf38e969 [ 672.261938][ T31] RSP: 002b:00007f05c02b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.271582][ T31] RAX: ffffffffffffffda RBX: 00007f05bf5b5fa0 RCX: 00007f05bf38e969 [ 672.279730][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 672.287912][ T31] RBP: 00007f05bf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 672.296010][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.304033][ T31] R13: 0000000000000000 R14: 00007f05bf5b5fa0 R15: 00007f05bf6dfa28 [ 672.312091][ T31] [ 672.315146][ T31] INFO: task syz.5.1861:12719 blocked for more than 145 seconds. [ 672.322934][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 672.330634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.339377][ T31] task:syz.5.1861 state:D stack:28952 pid:12719 tgid:12718 ppid:7146 task_flags:0x400140 flags:0x00000004 [ 672.351381][ T31] Call Trace: [ 672.354775][ T31] [ 672.357738][ T31] __schedule+0x16e2/0x4cd0 [ 672.362666][ T31] ? schedule+0x165/0x360 [ 672.367037][ T31] ? __pfx___schedule+0x10/0x10 [ 672.372860][ T31] ? schedule+0x91/0x360 [ 672.377160][ T31] schedule+0x165/0x360 [ 672.381419][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.387072][ T31] __mutex_lock+0x724/0xe80 [ 672.391662][ T31] ? __mutex_lock+0x51b/0xe80 [ 672.396403][ T31] ? do_ip_setsockopt+0xeee/0x2d00 [ 672.401777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.406890][ T31] do_ip_setsockopt+0xeee/0x2d00 [ 672.411918][ T31] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 672.417491][ T31] ? aa_sk_perm+0x81e/0x950 [ 672.422122][ T31] ? file_init_path+0x3b/0x590 [ 672.427037][ T31] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.431983][ T31] ip_setsockopt+0x66/0x110 [ 672.436530][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 672.442657][ T31] do_sock_setsockopt+0x257/0x3e0 [ 672.447856][ T31] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 672.453568][ T31] ? __fget_files+0x2a/0x420 [ 672.458454][ T31] ? __fget_files+0x3a0/0x420 [ 672.463192][ T31] ? __fget_files+0x2a/0x420 [ 672.467978][ T31] __x64_sys_setsockopt+0x18b/0x220 [ 672.473285][ T31] do_syscall_64+0xf6/0x210 [ 672.477972][ T31] ? clear_bhb_loop+0x45/0xa0 [ 672.482743][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.488666][ T31] RIP: 0033:0x7f8eba78e969 [ 672.493161][ T31] RSP: 002b:00007f8ebb676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.501884][ T31] RAX: ffffffffffffffda RBX: 00007f8eba9b5fa0 RCX: 00007f8eba78e969 [ 672.510177][ T31] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 672.518190][ T31] RBP: 00007f8eba810ab1 R08: 000000000000000c R09: 0000000000000000 [ 672.526251][ T31] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 672.534447][ T31] R13: 0000000000000000 R14: 00007f8eba9b5fa0 R15: 00007f8ebaadfa28 [ 672.542510][ T31] [ 672.545573][ T31] INFO: task syz.5.1861:12720 blocked for more than 145 seconds. [ 672.553391][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 672.561076][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.569983][ T31] task:syz.5.1861 state:D stack:28952 pid:12720 tgid:12718 ppid:7146 task_flags:0x400140 flags:0x00000004 [ 672.582176][ T31] Call Trace: [ 672.585482][ T31] [ 672.588427][ T31] __schedule+0x16e2/0x4cd0 [ 672.593016][ T31] ? schedule+0x165/0x360 [ 672.597552][ T31] ? __pfx___schedule+0x10/0x10 [ 672.602505][ T31] ? schedule+0x91/0x360 [ 672.606790][ T31] schedule+0x165/0x360 [ 672.611529][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.617033][ T31] __mutex_lock+0x724/0xe80 [ 672.621962][ T31] ? __mutex_lock+0x51b/0xe80 [ 672.626713][ T31] ? do_ip_setsockopt+0xeee/0x2d00 [ 672.632100][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.637180][ T31] do_ip_setsockopt+0xeee/0x2d00 [ 672.642506][ T31] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 672.647923][ T31] ? aa_sk_perm+0x81e/0x950 [ 672.652492][ T31] ? file_init_path+0x3b/0x590 [ 672.657423][ T31] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.662383][ T31] ip_setsockopt+0x66/0x110 [ 672.666921][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 672.673076][ T31] do_sock_setsockopt+0x257/0x3e0 [ 672.678162][ T31] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 672.683777][ T31] ? __fget_files+0x2a/0x420 [ 672.688407][ T31] ? __fget_files+0x3a0/0x420 [ 672.693235][ T31] ? __fget_files+0x2a/0x420 [ 672.698026][ T31] __x64_sys_setsockopt+0x18b/0x220 [ 672.703337][ T31] do_syscall_64+0xf6/0x210 [ 672.707884][ T31] ? clear_bhb_loop+0x45/0xa0 [ 672.712635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.718573][ T31] RIP: 0033:0x7f8eba78e969 [ 672.723065][ T31] RSP: 002b:00007f8ebb655038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.731573][ T31] RAX: ffffffffffffffda RBX: 00007f8eba9b6080 RCX: 00007f8eba78e969 [ 672.739624][ T31] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 672.747630][ T31] RBP: 00007f8eba810ab1 R08: 000000000000000c R09: 0000000000000000 [ 672.755679][ T31] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 672.763700][ T31] R13: 0000000000000000 R14: 00007f8eba9b6080 R15: 00007f8ebaadfa28 [ 672.776408][ T31] [ 672.779519][ T31] INFO: task syz.5.1861:12721 blocked for more than 145 seconds. [ 672.787270][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 672.794953][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.803695][ T31] task:syz.5.1861 state:D stack:28952 pid:12721 tgid:12718 ppid:7146 task_flags:0x400040 flags:0x00000004 [ 672.815722][ T31] Call Trace: [ 672.819074][ T31] [ 672.822040][ T31] __schedule+0x16e2/0x4cd0 [ 672.826582][ T31] ? __lock_acquire+0xaac/0xd20 [ 672.831505][ T31] ? schedule+0x165/0x360 [ 672.835877][ T31] ? __pfx___schedule+0x10/0x10 [ 672.840813][ T31] ? schedule+0x91/0x360 [ 672.845093][ T31] schedule+0x165/0x360 [ 672.849310][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.854800][ T31] __mutex_lock+0x724/0xe80 [ 672.859383][ T31] ? __mutex_lock+0x51b/0xe80 [ 672.864100][ T31] ? do_ip_setsockopt+0xeee/0x2d00 [ 672.869276][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.874350][ T31] ? __handle_mm_fault+0x3b22/0x5380 [ 672.879717][ T31] do_ip_setsockopt+0xeee/0x2d00 [ 672.884703][ T31] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 672.890170][ T31] ? __count_memcg_events+0x19f/0x370 [ 672.895589][ T31] ? aa_sk_perm+0x81e/0x950 [ 672.900186][ T31] ? __pfx_aa_sk_perm+0x10/0x10 [ 672.905071][ T31] ip_setsockopt+0x66/0x110 [ 672.909658][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 672.915579][ T31] do_sock_setsockopt+0x257/0x3e0 [ 672.920693][ T31] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 672.926280][ T31] ? __fget_files+0x2a/0x420 [ 672.931185][ T31] ? __fget_files+0x3a0/0x420 [ 672.935923][ T31] ? __fget_files+0x2a/0x420 [ 672.940599][ T31] __x64_sys_setsockopt+0x18b/0x220 [ 672.945848][ T31] do_syscall_64+0xf6/0x210 [ 672.950559][ T31] ? clear_bhb_loop+0x45/0xa0 [ 672.955275][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.961244][ T31] RIP: 0033:0x7f8eba78e969 [ 672.965707][ T31] RSP: 002b:00007f8ebb634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 672.974187][ T31] RAX: ffffffffffffffda RBX: 00007f8eba9b6160 RCX: 00007f8eba78e969 [ 672.982268][ T31] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004 [ 672.990335][ T31] RBP: 00007f8eba810ab1 R08: 000000000000001c R09: 0000000000000000 [ 672.998340][ T31] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 673.006373][ T31] R13: 0000000000000001 R14: 00007f8eba9b6160 R15: 00007f8ebaadfa28 [ 673.014919][ T31] [ 673.018051][ T31] INFO: task syz.3.1867:12738 blocked for more than 145 seconds. [ 673.025850][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 673.033552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.042296][ T31] task:syz.3.1867 state:D stack:25960 pid:12738 tgid:12737 ppid:5847 task_flags:0x400140 flags:0x00004004 [ 673.054279][ T31] Call Trace: [ 673.057562][ T31] [ 673.060558][ T31] __schedule+0x16e2/0x4cd0 [ 673.065115][ T31] ? schedule+0x165/0x360 [ 673.069511][ T31] ? __pfx___schedule+0x10/0x10 [ 673.074405][ T31] ? schedule+0x91/0x360 [ 673.078677][ T31] schedule+0x165/0x360 [ 673.082914][ T31] schedule_preempt_disabled+0x13/0x30 [ 673.088406][ T31] __mutex_lock+0x724/0xe80 [ 673.092982][ T31] ? __mutex_lock+0x51b/0xe80 [ 673.097707][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 673.102941][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 673.108032][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 673.113034][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 673.118203][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.123790][ T31] netlink_rcv_skb+0x219/0x490 [ 673.128588][ T31] ? rcu_is_watching+0x15/0xb0 [ 673.133439][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.138961][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.144303][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.149633][ T31] netlink_unicast+0x758/0x8d0 [ 673.154429][ T31] netlink_sendmsg+0x805/0xb30 [ 673.159304][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.164634][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 673.169754][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.175085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.180470][ T31] __sock_sendmsg+0x219/0x270 [ 673.185190][ T31] ____sys_sendmsg+0x505/0x830 [ 673.190259][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.195592][ T31] ? import_iovec+0x74/0xa0 [ 673.200189][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 673.204908][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.210264][ T31] ? __fget_files+0x2a/0x420 [ 673.214901][ T31] ? __fget_files+0x3a0/0x420 [ 673.219675][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 673.224650][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.230262][ T31] ? do_syscall_64+0xba/0x210 [ 673.235003][ T31] do_syscall_64+0xf6/0x210 [ 673.239578][ T31] ? clear_bhb_loop+0x45/0xa0 [ 673.244298][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.250617][ T31] RIP: 0033:0x7fed8898e969 [ 673.255089][ T31] RSP: 002b:00007fed89745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.263576][ T31] RAX: ffffffffffffffda RBX: 00007fed88bb5fa0 RCX: 00007fed8898e969 [ 673.271649][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 673.280311][ T31] RBP: 00007fed89745090 R08: 0000000000000000 R09: 0000000000000000 [ 673.288333][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.296455][ T31] R13: 0000000000000000 R14: 00007fed88bb5fa0 R15: 00007fed88cdfa28 [ 673.304507][ T31] [ 673.307529][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 673.316745][ T31] [ 673.316745][ T31] Showing all locks held in the system: [ 673.324532][ T31] 1 lock held by khungtaskd/31: [ 673.329479][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 673.339415][ T31] 3 locks held by kworker/u8:2/36: [ 673.344538][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 673.356297][ T31] #1: ffffc90000ad7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 673.367364][ T31] #2: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 673.376437][ T31] 3 locks held by kworker/u8:7/1159: [ 673.381787][ T31] #0: ffff88802fbf4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 673.393475][ T31] #1: ffffc90003f0fc60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 673.407282][ T31] #2: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 673.416932][ T31] 5 locks held by kworker/u8:8/2984: [ 673.422297][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 673.433335][ T31] #1: ffffc9000b917c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 673.444004][ T31] #2: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 673.453524][ T31] #3: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 673.463620][ T31] #4: ffff88805eb94d30 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 673.473835][ T31] 3 locks held by kworker/1:2/3079: [ 673.479112][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 673.490202][ T31] #1: ffffc9000bc37c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 673.501291][ T31] #2: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 673.511750][ T31] 1 lock held by dhcpcd/5495: [ 673.516451][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 673.525990][ T31] 2 locks held by getty/5590: [ 673.530870][ T31] #0: ffff8880325b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 673.540861][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 673.552163][ T31] 2 locks held by syz-executor/12632: [ 673.557585][ T31] #0: ffffffff8f7f09b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 673.567190][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 673.576371][ T31] 2 locks held by syz.0.1856/12703: [ 673.581622][ T31] #0: ffffffff8f80b558 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 673.591208][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 673.600523][ T31] 2 locks held by syz.1.1858/12711: [ 673.605758][ T31] #0: ffff8880262356d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 673.616132][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 673.625018][ T31] 1 lock held by syz.5.1861/12719: [ 673.630206][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 673.639806][ T31] 1 lock held by syz.5.1861/12720: [ 673.644939][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 673.654961][ T31] 1 lock held by syz.5.1861/12721: [ 673.660186][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 673.671725][ T31] 1 lock held by syz.3.1867/12738: [ 673.676871][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 673.687694][ T31] 2 locks held by syz-executor/12742: [ 673.694916][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.705244][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.715923][ T31] 2 locks held by syz-executor/12746: [ 673.721386][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.730988][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.741556][ T31] 2 locks held by syz-executor/12749: [ 673.746949][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.756444][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.768263][ T31] 2 locks held by syz-executor/12752: [ 673.775378][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.785334][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.796191][ T31] 2 locks held by syz-executor/12756: [ 673.801621][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.816377][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.826963][ T31] 2 locks held by syz-executor/12762: [ 673.832441][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.841939][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.852483][ T31] 2 locks held by syz-executor/12765: [ 673.857852][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.867348][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.880871][ T31] 2 locks held by syz-executor/12769: [ 673.886266][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.897232][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.908179][ T31] 2 locks held by syz-executor/12772: [ 673.913829][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.924058][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.934625][ T31] 2 locks held by syz-executor/12776: [ 673.940248][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.949794][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.960384][ T31] 2 locks held by syz-executor/12782: [ 673.965775][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 673.975290][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 673.986480][ T31] 2 locks held by syz-executor/12789: [ 673.994418][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 674.004821][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 674.015533][ T31] 2 locks held by syz-executor/12791: [ 674.021052][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 674.032919][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 674.044184][ T31] 2 locks held by syz-executor/12797: [ 674.050781][ T31] #0: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 674.060466][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 674.071060][ T31] [ 674.073413][ T31] ============================================= [ 674.073413][ T31] [ 674.081977][ T31] NMI backtrace for cpu 0 [ 674.081994][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 674.082028][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 674.082047][ T31] Call Trace: [ 674.082058][ T31] [ 674.082067][ T31] dump_stack_lvl+0x189/0x250 [ 674.082098][ T31] ? __wake_up_klogd+0xd9/0x110 [ 674.082124][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.082154][ T31] ? __pfx__printk+0x10/0x10 [ 674.082187][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 674.082224][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 674.082265][ T31] ? _printk+0xcf/0x120 [ 674.082289][ T31] ? __pfx__printk+0x10/0x10 [ 674.082311][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.082335][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.082370][ T31] watchdog+0xfee/0x1030 [ 674.082398][ T31] ? watchdog+0x1de/0x1030 [ 674.082431][ T31] kthread+0x70e/0x8a0 [ 674.082458][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.082481][ T31] ? __pfx_kthread+0x10/0x10 [ 674.082505][ T31] ? __pfx_kthread+0x10/0x10 [ 674.082526][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.082548][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.082571][ T31] ? __pfx_kthread+0x10/0x10 [ 674.082592][ T31] ret_from_fork+0x4b/0x80 [ 674.082613][ T31] ? __pfx_kthread+0x10/0x10 [ 674.082636][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.082669][ T31] [ 674.082684][ T31] Sending NMI from CPU 0 to CPUs 1: [ 674.229606][ C1] NMI backtrace for cpu 1 [ 674.229629][ C1] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 674.229650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 674.229662][ C1] Workqueue: bat_events batadv_nc_worker [ 674.229685][ C1] RIP: 0010:batadv_nc_worker+0x179/0x610 [ 674.229704][ C1] Code: 05 4b c0 44 04 01 48 c7 c7 40 e4 92 8c be 4b 03 00 00 48 c7 c2 80 e4 92 8c e8 b3 43 7a f6 48 89 e8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 ef e8 fd bf fd f6 48 8b 6d 00 48 85 ed 0f 94 c0 48 81 [ 674.229719][ C1] RSP: 0018:ffffc90001597ac0 EFLAGS: 00000246 [ 674.229733][ C1] RAX: 1ffff1100beaf333 RBX: 0000000000000001 RCX: ffff88801bfd1e00 [ 674.229746][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1d240 RDI: ffffffff8bc1d200 [ 674.229759][ C1] RBP: ffff88805f579998 R08: 0000000000000000 R09: 0000000000000000 [ 674.229770][ C1] R10: 0000000000000000 R11: ffffffff8b240432 R12: dffffc0000000000 [ 674.229781][ C1] R13: ffffffff8b240432 R14: ffff88805f560d80 R15: 0000000000000333 [ 674.229793][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 674.229807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.229818][ C1] CR2: 0000558f73d79000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 674.229833][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 674.229843][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 674.229853][ C1] Call Trace: [ 674.229860][ C1] [ 674.229870][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 674.229899][ C1] process_scheduled_works+0xadb/0x17a0 [ 674.229938][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.229972][ C1] worker_thread+0x8a0/0xda0 [ 674.230000][ C1] kthread+0x70e/0x8a0 [ 674.230026][ C1] ? __pfx_worker_thread+0x10/0x10 [ 674.230041][ C1] ? __pfx_kthread+0x10/0x10 [ 674.230060][ C1] ? __pfx_kthread+0x10/0x10 [ 674.230077][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.230095][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.230114][ C1] ? __pfx_kthread+0x10/0x10 [ 674.230131][ C1] ret_from_fork+0x4b/0x80 [ 674.230147][ C1] ? __pfx_kthread+0x10/0x10 [ 674.230165][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.230189][ C1] [ 674.230630][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 674.457872][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 674.469679][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 674.479739][ T31] Call Trace: [ 674.483019][ T31] [ 674.485952][ T31] dump_stack_lvl+0x99/0x250 [ 674.490559][ T31] ? __asan_memcpy+0x40/0x70 [ 674.495155][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.500362][ T31] ? __pfx__printk+0x10/0x10 [ 674.504961][ T31] panic+0x2db/0x790 [ 674.508907][ T31] ? __pfx_panic+0x10/0x10 [ 674.513334][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 674.519149][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 674.524524][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 674.530691][ T31] watchdog+0x102d/0x1030 [ 674.535031][ T31] ? watchdog+0x1de/0x1030 [ 674.539460][ T31] kthread+0x70e/0x8a0 [ 674.543539][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.548219][ T31] ? __pfx_kthread+0x10/0x10 [ 674.552813][ T31] ? __pfx_kthread+0x10/0x10 [ 674.557408][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.562607][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.567809][ T31] ? __pfx_kthread+0x10/0x10 [ 674.572402][ T31] ret_from_fork+0x4b/0x80 [ 674.576825][ T31] ? __pfx_kthread+0x10/0x10 [ 674.581424][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.586209][ T31] [ 674.589537][ T31] Kernel Offset: disabled [ 674.593877][ T31] Rebooting in 86400 seconds..