last executing test programs: 15.783369776s ago: executing program 3 (id=1121): socket$phonet(0x23, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xab49}, {0xb1, 0x0, 0x0, 0xde0c}, {0x6}]}, 0x10) (fail_nth: 2) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xfdef) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) 13.623836779s ago: executing program 3 (id=1126): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) gettid() getrusage(0xffffffffffffffff, &(0x7f00000002c0)) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) socket$nl_route(0x10, 0x3, 0x0) 9.901051799s ago: executing program 3 (id=1133): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x100000200000000}, 0x18) 8.21484568s ago: executing program 1 (id=1140): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000003420010000000000000000000400f979ca3658fe4dc3eb6eea0480"], 0x14}], 0x1}, 0x14) syz_emit_ethernet(0x63, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x2d, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfc"}}}}}, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000000c0)={0x5, {{0xa, 0x4e23, 0x4, @mcast2, 0x8}}}, 0x88) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x80) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3e0, 0x3, 0x200, 0x168, 0xa, 0x148, 0x98, 0x10, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'team_slave_1\x00', 'pimreg0\x00', {}, {}, 0x6, 0x0, 0x4d}, 0x0, 0x70, 0x98, 0x0, {0x20000000}}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x260) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) listen(r5, 0xfff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000540)=[@in={0x2, 0x0, @multicast1}], 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002d00010000000000bb0e00e304000080040019"], 0x18}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000580)={0x9, {{0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {{0xa, 0x4e20, 0x8, @remote, 0x6}}}, 0x108) 7.84532189s ago: executing program 2 (id=1142): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYRES64], 0x0, 0x2a, 0x0, 0x0, 0x4, 0x10000, @value}, 0x28) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.302232462s ago: executing program 2 (id=1144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 7.108821722s ago: executing program 1 (id=1146): setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.675905052s ago: executing program 2 (id=1147): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x4, 0x8) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 5.532781748s ago: executing program 1 (id=1149): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x840, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000940)=0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x1c8, &(0x7f00000005c0)=0x100, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) capset(&(0x7f0000000540)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000580)={0x8, 0x8, 0x2, 0x0, 0x7, 0xa2a}) syz_open_dev$media(&(0x7f0000000300), 0x6, 0x286881) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r11, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ac0000000906010200000000000000000200000714000880100007800c0018400000000000000003840008800c000780060004404e2100000c000780060005404e2400000c00078008000840000000000c00078008000a40000000051c0007801800148014000240200100000000000000000000000000000c00078006001a002d0000000c0007800500030001000000100007800900130073397a31000000000c00078006001d4000040000"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000500)={0x2, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000003c0)=""/160, 0xa0}], &(0x7f00000004c0)=[0x2, 0x5, 0x1]}, 0x20) 5.532417455s ago: executing program 0 (id=1150): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25NOUID(r3, 0x89e3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0xbb9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x9c7, 0x0, 0x7fffffff}, 0x0, 0x0) 5.382055581s ago: executing program 4 (id=1151): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x1f, 0x4, {0x1, @pix_mp={0x401, 0x3, 0x39555659, 0x3, 0x1, [{0xd, 0xfc}, {0x5, 0x4}, {0x5f, 0x9}, {0x6, 0x4}, {0x3, 0x7ff}, {0xfa, 0x7}, {0xaf, 0x8000}, {0x80000000, 0x2}], 0x6, 0x7, 0x7, 0x1, 0x2}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000005880)={0x1, 0xfffffff1, 0x1, {0x1, @win={{0xffffffff, 0x2, 0x4d8}, 0x3, 0x473f, 0x0, 0x1, 0x0, 0x4}}, 0xffffffff}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, 0xee01}}, './file0\x00'}) setreuid(r2, r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0xc895) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c000000071408002bbd7000ffdbdf250900020073797a31000000000500540000000000050054000100000008000100010000000900020073797a300000dbd6b966dc3dd0ebabe164e36b000005005400010000000500697ce75400000000000900020073797a3000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r8, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x101}, 0x6e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r10, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r11, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0xff, 0x9, 0x7, 0x0, 0x0, 0x6}, 0xc) 5.316097655s ago: executing program 3 (id=1152): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800030006"], 0x3c}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000180)={0x3f, 0xe, 0xda, "f405000000000002006c515a95a49625cb7817b19c9d49aec21791c081ffee2d564efd089be7c0575b5fd8c23496655b4d367f9ff1986cfc7d290995200b9f"}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.254234034s ago: executing program 2 (id=1153): r0 = socket$inet6(0xa, 0xa, 0xfffffffc) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) tgkill(r4, r4, 0x2f) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[], 0x78) splice(r1, 0x0, r5, 0x0, 0x39000, 0x0) 4.791798657s ago: executing program 4 (id=1154): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0xc846) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socket(0x2, 0x80805, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r7 = getpid() open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) 4.435481212s ago: executing program 3 (id=1155): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x1e010080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 4.323913241s ago: executing program 1 (id=1156): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800030006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 2) 4.314642381s ago: executing program 0 (id=1157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 3.258477262s ago: executing program 4 (id=1158): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) flock(r0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@generic={0x9, 0x4, 0x2, 0x4ee, 0x800}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.25801608s ago: executing program 1 (id=1159): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sched_setscheduler(0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (fail_nth: 2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.205558606s ago: executing program 2 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') write$binfmt_aout(r7, 0x0, 0xfffffffffffffe78) sendmmsg$unix(r5, &(0x7f000000a680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="892e0418299a6e48d153ab9112565fe839fdcf18fe6a56162ece222e3ee178758991a75216381528e43743a0295b860647bddb3237f371545d1d32283c750e68cbf92dbe5b83207c7c4e18bc1c7a566b71aac23a751c9b6647444de7f546c243600406de231a1db64b96fc99ec965b5e807cd27d2fbfd8b72a9ca360bf0b00418f93e992ee16cae2248160cf5baa4d3c1f2a28c1579ddad553dba197c0c924ca367d29a4e04d046bf3d31588ba4e657e1a1797432eee01ed100efc16b9de6c813b253f0f6d8b4502770710fa60c0ccc466306fc3ef18e1a50bf7", 0xda}], 0x1, &(0x7f0000000800)=[@rights={{0x24, 0x1, 0x1, [r5, r7, 0xffffffffffffffff, r3, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x34, 0x1, 0x1, [r4, r4, r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r1]}}, @rights={{0x18, 0x1, 0x1, [r5, r7]}}], 0x118, 0x80}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f00000009c0)="f24f803dbdac4bfcc28259e3b62870e0c00f12687decb716f4e0123a0aaa88ba1a0ec992519849d3d8bdc02403bf985daa3f4fbcef43feeaa42634b07254c2272f3aaa9fce6d21be0ce3fac028565f2ee9dfd1", 0x53}, {&(0x7f0000000a40)="92b51b58c64e92b85d0d5163c4d3eaa38381eca66065f99a03109a884aa9cfaf38598155d2ecd075867662227951eed6a4b730e4a39fe6e2949ac7f321abb1ccbf07818dbcbb9105176422e9e42339a9ab2614d64133331efe2141498ef63afaabcd604dd1717508e77a2044175a725011695f47e36743c657d5fd19c286a8c66e601dff3b1bf14c3da56d4342657a2393ed6c6dca38d81a6cf053bdc7", 0x9d}, {&(0x7f0000000b00)="bce536610b6e4786a3eb8ac75cab96a306dda96c49f27724bbb3d9453b7a7ed112b3a51bbacf02b770bb1ba439d3ff71b55f5a127cfe400bd0dc08a60a0991b7c59cc590e0dc63cf0c54cf4645a0bf763d621482039dfbfc6e05ead97aedc6b5c9c7d958b0cee1d67c7d8ae617dc3f85412a96e2b74a53aa62115d6d09e811ed6c01df52bc087a6dd33700b5c4033f2b641850814a222ea9a1875b53d48b39d2cd235278a86a6683cc5e720b912690a48c389941b02bab60894cabe3283b90576cc0b571211b2b4793bff5b120316c109ac7713801", 0xd5}, {&(0x7f0000000dc0)="762fa0992e54433a2dc0caa16f438b0f585862af0cd0ff0a0d9678491b22c29d3a24261d7425f2360f337ff447bec0d6320905fe9ec70c8db5394f6d0bf1b24942c2a5fb26d8841b3876ac1b2866a82cc0c2147cb6e4164c71154c84c431fdc1f8b7c96d2cee90709c69e2e1519eaff507a7bfef2576a5ffa0c62f287f28614d76c4297c94b5e394377244cb5ed6e65a4f60546b17389a11b18c4a333b66f752b73d8d9c4e94c8f79b360ba91cc2f4dc647c1f26ff5b805bc045bea076c0c713cb7e774f72b3463d16093e8431bd76f0d1d1c106f3a3f85a91d9074d38d0c0c6b1b53d437752c4225aa7", 0xea}, {&(0x7f0000000ec0)="42e3086ddab06fb712df13d8596716d61ab62f572e47405aefe1a4691b1d4425d2e83e60d95119ea1c2be7f25da46e4055251fa91f4c845abd9dbe128f243505ad27da015c0e0a40adcf9e5c230ac1287adcbff7745293f5d9c2b75b168721de81f99ac46307bd559828958498bd90826c2c0001bddbd7035faa84ad8f1588a0b67e3b6666fa0bd3a712235e09d7ad", 0x8f}, {&(0x7f0000000f80)="1ce65a6586dac14b61e5d6283b96c6af0439018c85272b58e971e1df8ebdd6fba10e29a68fe59509acc557a804023e1e680dd2e2c7704d067d56f64887a75dcdc4b96c232930901346f786d69f7cd98fd4679ac4bdf0312a849f2a8b42222db9e5f6bcab3cf4b959c2216a32b81c1aa63d443c9b5520b7d8064df08a47a9e3ec4619cb47ba58c8ff4b14b8ab231e51888a6658e30b43991b45bdba9c6766537b8ac5bb2c26a524eef80b44d64dd9a7d8f17d1b2addabeb62", 0xb8}, {&(0x7f0000001040)="d1d460b00db126ac403646d0043c5f11952bdd53c2707eed2573c561e95c7fcc4e8895966b70c964fc351299d356564f392cd30e7b8558646de8a80269b81a26d931aa6353b85f8d836e30c6dd2157ddfd1e6bda00eb25ec59034ee64f019b3444332c490ff2c7dffdb25dab47915f1efc08f46602bb6422a65d74fbe17bc212db6d3600ff171fd6400eb500bda3e739d79a265752d46b785c489fd590b30c27ae55c8dd27069891175973", 0xab}, {&(0x7f0000001100)="f7e4f5ea18088809454a27c2758ecb0b4f6b9e6d1f136c5e7ad1d8eae9e8ae733c5999a70a9dc051c239f24715d923c090d35921e4e6645308dea855bf8ad6324efc3ece24dc444d5b87c120c99e7e7fd213910e1e996d8aa7bb5fa2306f0ebcd187", 0x62}, {&(0x7f0000000500)="44b97b8bd71cf74925e3dd95c6286c4693821a9ec62d7f", 0x17}, {&(0x7f0000000640)="53789c10745a", 0x6}], 0xa, &(0x7f0000001280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='{\x00'], 0x78, 0x4000800}}, {{&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001380)="46504e689c4b287f0837ee45a766d460a38870979731dd2d9c8e331698a6e9d53e4b18598a01ba18847ffb3521eef43a5c2fafb8419710", 0x37}, {&(0x7f00000013c0)="4603f3ed8cd1d5ab7364224cc4d5149c60fe943036bdd9c58285ee2ad9043c734e54705adfbd4078e0b635336abddceafbc15e07d76ed9c011f769bd0e3da167c228a7595549eca7964c4fa3a23b2ca32e414b94f627e7d6fe5bca4e4ec03eb42a260e37af0a510528385064bbb7e08832b90fd99d61d6140da36f790e60af543e99ffbe496528dcd8864109ec88ff2ad10e10a168d6b54acdb3a2a5203152ec215942", 0xa3}, {&(0x7f0000001480)="37c907cdcc14c6ab134299cb0519e0744b630de9a779cc7879e36e7e0f05b3cd7b660b6bfbdd9351c43430c78b1b9dd6c7e20226ce2e3dd1953cda8003361cd62971d05abab199027fd50e37eb9856909fa21a8003b44b9d08368a5a923cd2451460c46e2dcd1478c99715e3bc4b8e3101923b1253e0123a0139fb393be6f9b6c881d527e1cb924bd9f4e156da4e38e80881f5d1e5203987f478b11b01", 0x9d}, {&(0x7f0000001540)="e5098ec6ef405938eb8749eb1d3f4e615664ad0d78cfd227db35a0ca9e4bd689c5aebd6aff6e8505b4", 0x29}], 0x4, &(0x7f00000015c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r0, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, 0xffffffffffffffff]}}], 0x98, 0x24010800}}, {{&(0x7f0000001680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001700)="4cfee3e36691b5794a7a55311b84502ebf5e98c42458043b8c2c95acba7be6fe8fb1f38a80970a98ce561e6dba843babe13ef746976a1415dbf7dcaece3ac434d8d9361658fb10a2e9312b73ef7b602797", 0x51}, {&(0x7f0000001780)="a16ea1c54dcc1edf217e02c0858e2a9293eb48cd1e052cdab95c4a8691d8e7e3fcf427a5fbfdf471d16041e54a5e453bd39a79ef59a070c3dfb626e1e0711006b60a58d081e4e9dea5d0f38a1dc0d1af970df92b23166bdb49eaa4e76cb98f9e6abdf4a789f88482ece7ab60f8ac3b8e222669ef47e1080a30ac44952e51988377", 0x81}, {&(0x7f0000001840)="8c7db228b2ad6e59753b41fa83bc95f11123dd8b5de18295105ad6c9faded37762fa39988a4edbb9dea2e2cf85c44002a3131967a4ddb5d6cdeb51ec10ae27d75ada83f5aa5b07db49a678cd865e99625b7a0fe60ce7ec79391f8c45b48d9989a7488e315e9fb702bee3d086d01b905ba7a10131bb58c032ab86efe8c23c91053362dd615ec31d0cc9a7a5e3ff7db30d8941fc6696d43d1269ea3b2c45444142", 0xa0}, {&(0x7f0000001900)="7e506924d71e9d8ffb12f678735a63e3447a40cdc56921bb3ae70c74a46d2d6652142172d0e98adf9aafedeeb9f746e1e8dd9345f58f1dd06c189d0ac550c8c3480ec4c02e74111c9b15e77454e3b6a55869977b4aaf3711836bd609cb9bc383608003fee015b05481db86639c2fca7c18b5f2389926354f17", 0x79}, {&(0x7f0000001a40)="b0bbd047645c9412321dae411b1fc8e1bed2ba283b37e0dd6809fc2de9cc386b0fc335e4b1baa1492a44b8b21bbfecc22e4195e7ec9e5aa7a0cb985fa8f90934cf3dd8ab0fed655a6ac39639a6ee0205e1c48f30feb859a2f3f91b16c825f94499617aafe26ef3aa0d318e6a557977", 0x6f}, {&(0x7f0000001ac0)="8993f8e5aef2dd6b616bc93c03b940391eedb7e17cd3ccc35d75bcc450dd109909be33028b15051516e42765260c536b3711b27f3f74a59f9f381336f8ae5ed598a056ce74480aa7600c810950b33b8616250267e053ca83b9b06457606a29ca7ca27ca4584a52075bf518903d8d6f51d82776b9ab7cc5a8f572e51ee4c6626b", 0x80}, {&(0x7f0000001b40)="17a7e5de5226b60a8b3356e58119a822e8a87c5559f7e4e7253f9293c626ac904f017c7fecad4cacd9146f6bb6563d1422e341d614458b50103528b3f1cb40155dfe36777cdd3b29a74f8c4eabf3be999a0cb41ddc0c93e2658ffa45f21a6309f070fb", 0x63}], 0x7, &(0x7f0000001d40)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, r1, r4]}}], 0x58, 0x4}}, {{&(0x7f0000001dc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f00000041c0)="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", 0x1000}, {&(0x7f0000001e40)="7b69d2dece2caf55fa99bde27a01065693ed5d36a269f8d7", 0x18}, {&(0x7f0000001e80)="6cc5b1f45569eac240c41f77fa08605646037e2a13f83f326c945eff6650d80c45e01c9e8bfc301b2d68abfad8d5b52d2e760736dfe7531e9f0e86b0bd61685de0d90a5873370d04abf0e9e54e31181f", 0x50}, {&(0x7f0000001f00)="be6ec24dcc9da16b304e364ba1059c952e275e361d533bb7b5e2a3c0e9953b4e30d00554b4912fe28df1d45a44db5b30fc25035f7d1c6fa654099c39ab5fb1176bbdc45d1e2b84b00b9f0a948cb1b3a60b60b93d82535967f7a9de402e7c2df69c56e8af8cc9000576cd5f7dbadc19543137a1c96fe3892c9ee7bd1aca07cfda1eaa41e7488f30576ea5c5d627588f7f6846b6a1", 0x94}], 0x4, &(0x7f00000052c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98, 0x809}}, {{&(0x7f00000086c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008880)=[{&(0x7f0000008740)="3a67474fe01dbc84c9eea0e5a7e4de36057e04de70ea5c8fc763cc06b126ce21642ec67881fa04cf9d7e2031510f001dee6b51432462141ffcdeda2661a053b19c21c3e0807d250b4b5cdb94af116b3c8dce7849cd3db57c0c1d615e89e42de5b64697b6d16a8181417547f6010c21cfa6e26d7f8ffece02f7f7d4c7fbf3d141954a4d22ed2f4d0d71c0561fd9e556d1128a256445fb79a396fc26f955cc80f958aabda0773d36208b73f652213ec5ec5a9cebc13dccb1b7bc19e6697e12a21eb0", 0xc1}, {&(0x7f0000008840)="527351349f90d2ecfc1a06a694dacc69ba835edb6a2ec9f1118b6e54e603f8b543e39ba1926991", 0x27}], 0x2, &(0x7f0000008980)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r5]}}], 0xa0, 0x90}}, {{0x0, 0x0, &(0x7f0000008fc0)=[{&(0x7f0000008a40)="6748442f178eb53391ae9e42ac20d98226640d04f227e5a228b82f1c4ec32fb797da795b169469dd4c4a3c3da19ed7dafcc4ce9d1bf60e05f5e1c3a70e5951a5f277d268d4aa62cd5394acb873d6468a4910c8a6451c6f95d61ce731f74328c4d722ecfaa0fe8a987721ca676e032bcc3477791337cbf78109cbe1d45e9731c167dfe2af4524aca27b311d8c4cde05d2bccd5768b61c6d4d0248eabbd5ae9fa3826294f2207b81310071b0439fa27d23dcced588e3324fa8bde3c8", 0xbb}, {&(0x7f0000008c00)="c3f5c355db0951dbf225f4c6f7ae11833f281c41505f8828affd1bd032ad0c41fb7b98151b79a01c44e9d198227cfeb1ad5ffe299d8950f8cfeb777588f0b0659822d11a6c4d71d5469bee7af9faea0f058a3bf64713310e8689fb8ca26f83416a27a413935b1163e73cc2029e85ee614e541cdcd5f3fead", 0x78}, {&(0x7f0000008c80)="a216bc37f948957a740104bda76905571620899368f53d662f43842090c44837d1a64fd62387e8b29c841adae5ac4282d237eed88c1ef42d92a64bd60a2c548989ac39bb54072382775a15b5ca3588be0209066767a0e5ea458831a4e755ca42c5053b5ff878bfe910e419d99b9cb8531279080ee5bc22735a39fe2f3134f939aca0097a1417a860f4fdf4b863da0ca3540e68a7ad76cfadcabec7c25da438c3de76ea8f96e353969246111e6db75eb2bde4a5e568747df2ceb0cd0c30370eb53600c07b1daf0b4a2a7e08752baf018d562c9c85dfb1", 0xd6}, {&(0x7f0000008d80)="9caac17699bb839c6f8ecec2e82277876073e55403f51b55e8474a3bf9ffc5f8a864441fa0d04ed3c4c363d515abb4f1b0c1a587c57d34996ec50ec3149197476495d4129fe3f12f3288abaf245d85ab5f5a12d5c455f7d514526fb0a5ad4dc0a07642c088d5fab1ee85b20744b5cea6edbcdf40e7799ec5c64dd7932f04e75015760bc4cf2b6981a91860b80c935dbdad5ddc06b5a85fef7e7812a683c2d0b2b72a36483072d53b44714c36a994456055d9fcbac9ac1a04130f0ca5e04c20da0835c0afe5e4d784286cffd96edeaf907903ec6eff20", 0xd6}, {&(0x7f0000008e80)="c2c99569a020edfafd2d8bbbbaa69c78ba53840cf6e087c1d1498d61387f66799f62f9408cda20b2623bc5d36de55503041548d475c1dfe0ee85b39c8d827a4b80120eea0463c8e7e89c95521fc54e03f58845b69114e0714880890871687150c374113513d4517b00b9", 0x6a}, {&(0x7f0000008b00)="f2bc891e2aa6e5e5ab0394d56b1aad8d5eea2a1d97b1395f53cdbf9069985fbfe299459894d9d74ac0e01bb2da2afd4ad79937dde6015c6092a39aeb69", 0x3d}, {&(0x7f0000008f00)="1cb482fe471f28aa78e955d31d74c92641890b3d8056f572c3a041ceeea14fec7a063e549c998f355e54cc920fe28ab2450c291cfd6a2ad626ecab2be4290e5335c73dce6413c962c37befbefff638a3e7e08b90d4a0be592338c21eeb413842e56f1ccabb415452b00507d398ca440ecc20a5869f10a780501a85f1027d869ae4206ff3b37aa2a181d7156bc515d176c2f3bdaab28b18824080a6a24b2aeb5f6cf864db17f6618096aad9055653f305dcaaf4e85efdc3a960c5ae7e79b7", 0xbe}], 0x7, 0x0, 0x0, 0x40000}}, {{&(0x7f0000009040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a100)=[{&(0x7f00000090c0)="fedc12e9bc48ae554b04d6312acd79", 0xf}, {&(0x7f0000009100)="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", 0x1000}], 0x2, &(0x7f000000a180)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0, 0x4}}, {{0x0, 0x0, &(0x7f000000a600)=[{&(0x7f000000a280)="c60bdbf8f42b9d60f34664df29fe27055272e258093a4f61fcfaf9e579720a808b906495eb95e41ad0edf6fbcc28be25444b5f3e6d181094decbc87c355acc655f70e52194a97ab7e227941f48cb3a1e82a8bca3ce9674bda5e383d0e06287b4a310416d0d3b47ff0e74bed90e718b1eba3e6d13d88ff4", 0x77}, {&(0x7f000000a300)="b316735a0c52fe3962689755f81ee85e944bea22d570bbf8764357beb77a2db9c4d83b17e3d22b2c12eec6f6b73cdb5f4b5d5360821d0389d99ce42df0392a4a0e5e82871735c21df7c3cce5903814eaa3827659ce297d5df9a34efe4daa8613300bb5b6423497d676616b611e6075cbdf751785b3350e52c2fbfe2ad0e21384bd6f340d25d289f7698103e11062887bc1679caa92e8c72d6a14d9db6617ff9327a2c6626c758b48976ab7ddea59c807e60f541609e2471a779d6ef9642e", 0xbe}, {&(0x7f000000a3c0)="546f69ba1ebf2da0f9de67da04daf1958773280fee848be9bca53d09e2cfc3fa003ab80d8b8acf23f24dc2b8b1b7d8722c4f9dbcbe26c5af8d81ca4531f52874835d4a7f4153876cd160be11906284a9b6e7e1143ffee07e431a3bd6a4c666eaaeb1ba6cf2c407f356728a268c1400c0a64f3ae8b8b7c7120d9f5974f2dcc0d30bd862de9ad39d4865d85455003c3e104c18caf5b168", 0x96}, {&(0x7f000000a480)="36d85cec95af7aec2a63daedac84eb29b106077888d7406af6b319098997f624d51797b3b40d6874cbec0c4747ba76c78f177e2eab4a5a2fe081e5e61f7f28a94109dacff49804daa4c233bc38916df5d9270ac3dcb65bd0fc55dc09d79fb6146da3ad764a0708d98b3754226102bae5d21b09a6c7dbbf407e", 0x79}, {&(0x7f000000a500)="d885c219557cbaad4c0dd12c2644a0d5fa5f83dee8439efc2833a323fe62be60fe6d272c2c9c24b5abb1bdeb9f5a1d484f8a5b9a2266e5161feb2340ab1c6fc38db3c5dae97053ef5c2a01df11b44673afe40213ed94f3b8cb5b863379ebd8ef9a81aac2ede748cb7097d0a108d7ee8bc9f9351f48e65882669b99e17d638198d941b120f5cd30f8bef05484a6241df3eaca9c88cf2ef7454a2afb640effd496e522c742e7698034324cb07c82da8545369b", 0xb2}, {&(0x7f000000a5c0)="8c537213ff6bbcd54e0a0fd020575bf57f50a878baa8dcb7f7b7", 0x1a}], 0x6, 0x0, 0x0, 0xc0}}], 0x9, 0x64044010) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) r8 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) fsmount(r8, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) 2.907801227s ago: executing program 0 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x12090}], 0x1, 0x0, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth0_macvtap\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = fcntl$getown(r1, 0x9) syz_open_procfs(r3, &(0x7f0000000140)='attr/prev\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="85100000040000ffffffff000000000b0095000000f400000018000000000000000000000000000000951500000000000085100000fcffffb5637dd5e0d1d682d469ce7db7d033be267a11a85883e5"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) 2.607651029s ago: executing program 3 (id=1162): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x100000200000000}, 0x18) 2.556303234s ago: executing program 4 (id=1163): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x4, 0x8) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 1.852692783s ago: executing program 0 (id=1164): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (fail_nth: 2) 1.629812536s ago: executing program 0 (id=1165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 1.629007062s ago: executing program 4 (id=1166): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000600)={0x800006da, 0x0, 0xfffffff9, 0x6, 0x1f, "1012a2c2e0d997451f6388080d00"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = syz_io_uring_setup(0x39, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/raw6\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r6], 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) 1.543865318s ago: executing program 2 (id=1167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) (fail_nth: 2) 567.62705ms ago: executing program 0 (id=1168): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 438.343694ms ago: executing program 4 (id=1169): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={'\x00', 0x7f2, 0x28, 0x9, 0x1, 0x2000000c1ac, r1}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 0s ago: executing program 1 (id=1170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) gettid() ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') kernel console output (not intermixed with test programs): g ep0 maxpacket: 8 [ 310.609945][ T6467] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 310.633124][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.650690][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 310.676585][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.766811][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.800582][ T6467] usb 4-1: Using ep0 maxpacket: 16 [ 310.823024][ T5936] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 310.833830][ T6467] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.845423][ T6467] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.856707][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.875777][ T5936] usb 5-1: Product: syz [ 310.891209][ T5936] usb 5-1: Manufacturer: syz [ 310.896739][ T6467] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 310.908362][ T6467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.917571][ T5936] usb 5-1: SerialNumber: syz [ 310.956201][ T6467] usb 4-1: Product: syz [ 310.976196][ T5936] usb 5-1: config 0 descriptor?? [ 311.152597][ T6467] usb 4-1: Manufacturer: syz [ 311.167791][ T5936] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 311.182272][ T6467] usb 4-1: SerialNumber: syz [ 311.193635][ T6467] usb 4-1: config 0 descriptor?? [ 312.066739][ T6467] usb_8dev 4-1:0.0 can0: sending command message failed [ 312.105788][ T6467] usb_8dev 4-1:0.0 can0: can't get firmware version [ 312.322385][ T6467] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 312.352283][ T8557] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 312.358874][ T8557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 312.366810][ T8557] vhci_hcd vhci_hcd.0: Device attached [ 312.414890][ T6467] usb 4-1: USB disconnect, device number 21 [ 312.480032][ T8574] vhci_hcd: connection closed [ 312.480069][ T5936] imon:send_packet: packet tx failed (-71) [ 312.492824][ T971] vhci_hcd: stop threads [ 312.514258][ T971] vhci_hcd: release socket [ 312.541155][ T971] vhci_hcd: disconnect device [ 312.567575][ T5936] imon 5-1:0.0: panel buttons/knobs setup failed [ 312.819565][ T5936] rc_core: IR keymap rc-imon-pad not found [ 312.899996][ T5936] Registered IR keymap rc-empty [ 312.915678][ T5936] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 312.969645][ T5936] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 313.012331][ T5936] imon:send_packet: packet tx failed (-71) [ 313.052367][ T5936] imon 5-1:0.0: remote input dev register failed [ 313.061772][ T5936] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 313.110264][ T5936] imon 5-1:0.0: unable to initialize intf0, err 0 [ 313.132495][ T5936] imon:imon_probe: failed to initialize context! [ 313.154305][ T5936] imon 5-1:0.0: unable to register, err -19 [ 313.197774][ T5936] usb 5-1: USB disconnect, device number 23 [ 315.983087][ T6467] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 316.558719][ T8612] batadv1: entered promiscuous mode [ 316.572933][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 317.072957][ T6467] usb 4-1: unable to get BOS descriptor or descriptor too short [ 317.102132][ T6467] usb 4-1: not running at top speed; connect to a high speed hub [ 317.126727][ T6467] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 317.144195][ T6467] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 317.201534][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.227611][ T6467] usb 4-1: config 253 has no interface number 0 [ 317.260841][ T6467] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.328485][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.338276][ T6467] usb 4-1: string descriptor 0 read error: -71 [ 317.345413][ T6467] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 317.455084][ T6467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.767266][ T6467] usb 4-1: can't set config #253, error -71 [ 318.155465][ T6467] usb 4-1: USB disconnect, device number 22 [ 318.589616][ T5913] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 318.750897][ T5913] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 318.760418][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.771930][ T5913] usb 5-1: config 0 descriptor?? [ 319.810456][ T6467] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 320.167961][ T8663] netlink: 'syz.0.795': attribute type 8 has an invalid length. [ 320.274192][ T6467] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.348116][ T6467] usb 4-1: not running at top speed; connect to a high speed hub [ 320.349367][ T5913] pegasus 5-1:0.0: can't reset MAC [ 320.366382][ T6467] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 320.395550][ T6467] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 320.409687][ T5913] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 320.417691][ T6467] usb 4-1: config 253 has no interface number 0 [ 320.439410][ T6467] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.479591][ T5913] usb 5-1: USB disconnect, device number 24 [ 320.506810][ T6467] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 320.538858][ T6467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.553403][ T6467] usb 4-1: Product: syz [ 320.557712][ T6467] usb 4-1: Manufacturer: syz [ 320.568280][ T6467] usb 4-1: SerialNumber: syz [ 320.974809][ T8675] batadv1: entered promiscuous mode [ 320.986572][ T8675] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.839477][ T8655] delete_channel: no stack [ 321.859132][ T8677] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 321.949796][ T6467] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 321.957700][ T6467] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 321.979672][ T6467] usb 4-1: USB disconnect, device number 23 [ 322.062620][ T8679] bond1: entered promiscuous mode [ 322.144002][ T8679] bond1: entered allmulticast mode [ 322.285188][ T8679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.403985][ T8677] team0: Port device ip6gretap1 added [ 322.510557][ T30] audit: type=1804 audit(1749300790.323:157): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.801" name="/newroot/157/bus" dev="tmpfs" ino=828 res=1 errno=0 [ 322.605966][ T8689] 9pnet_fd: Insufficient options for proto=fd [ 322.825947][ T8696] netlink: 'syz.0.805': attribute type 8 has an invalid length. [ 322.836341][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 323.129565][ T5936] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 323.307757][ T8704] syzkaller0: create flow: hash 1801520466 index 1 [ 323.335390][ T971] syzkaller0: tun_net_xmit 76 [ 323.341343][ T971] syzkaller0: tun_net_xmit 48 [ 323.359937][ T6474] syzkaller0: tun_net_xmit 76 [ 323.379609][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 323.398123][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 323.413254][ T5936] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 323.436917][ T5936] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 323.447923][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.457793][ T5936] usb 4-1: Product: syz [ 323.463438][ T5936] usb 4-1: Manufacturer: syz [ 323.469062][ T5936] usb 4-1: SerialNumber: syz [ 323.485789][ T5936] usb 4-1: config 0 descriptor?? [ 323.503979][ T5936] hub 4-1:0.0: bad descriptor, ignoring hub [ 323.511247][ T5936] hub 4-1:0.0: probe with driver hub failed with error -5 [ 323.527117][ T5936] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 323.583511][ T5936] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 323.625437][ T8700] syzkaller0: delete flow: hash 1801520466 index 1 [ 323.782809][ T5936] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 323.811894][ T8711] FAULT_INJECTION: forcing a failure. [ 323.811894][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.855146][ T8711] CPU: 0 UID: 0 PID: 8711 Comm: syz.1.810 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 323.855166][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.855173][ T8711] Call Trace: [ 323.855179][ T8711] [ 323.855184][ T8711] dump_stack_lvl+0x189/0x250 [ 323.855206][ T8711] ? __pfx____ratelimit+0x10/0x10 [ 323.855224][ T8711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.855252][ T8711] ? __pfx__printk+0x10/0x10 [ 323.855263][ T8711] ? __might_fault+0xb0/0x130 [ 323.855285][ T8711] should_fail_ex+0x414/0x560 [ 323.855304][ T8711] _copy_to_iter+0x1db/0x16f0 [ 323.855328][ T8711] ? __pfx__copy_to_iter+0x10/0x10 [ 323.855345][ T8711] ? __lock_acquire+0xab9/0xd20 [ 323.855361][ T8711] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 323.855384][ T8711] __skb_datagram_iter+0xf8/0x990 [ 323.855402][ T8711] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 323.855419][ T8711] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 323.855438][ T8711] skb_copy_datagram_iter+0xc5/0x230 [ 323.855457][ T8711] tipc_recvmsg+0x7a1/0x13c0 [ 323.855487][ T8711] ? __pfx_tipc_recvmsg+0x10/0x10 [ 323.855508][ T8711] ? __lock_acquire+0xab9/0xd20 [ 323.855528][ T8711] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 323.855541][ T8711] ? security_socket_recvmsg+0x7e/0x2e0 [ 323.855555][ T8711] ? __pfx_tipc_recvmsg+0x10/0x10 [ 323.855571][ T8711] sock_recvmsg+0x22c/0x270 [ 323.855585][ T8711] ____sys_recvmsg+0x1c9/0x460 [ 323.855606][ T8711] ? __pfx_____sys_recvmsg+0x10/0x10 [ 323.855630][ T8711] ? import_iovec+0x74/0xa0 [ 323.855645][ T8711] ___sys_recvmsg+0x1b5/0x510 [ 323.855663][ T8711] ? __pfx____sys_recvmsg+0x10/0x10 [ 323.855695][ T8711] ? __fget_files+0x3a0/0x420 [ 323.855722][ T8711] do_recvmmsg+0x307/0x770 [ 323.855743][ T8711] ? __pfx_do_recvmmsg+0x10/0x10 [ 323.855766][ T8711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.855789][ T8711] __x64_sys_recvmmsg+0x190/0x240 [ 323.855806][ T8711] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 323.855820][ T8711] ? rcu_is_watching+0x15/0xb0 [ 323.855839][ T8711] ? do_syscall_64+0xbe/0x3b0 [ 323.855853][ T8711] do_syscall_64+0xfa/0x3b0 [ 323.855862][ T8711] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.855878][ T8711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.855889][ T8711] ? clear_bhb_loop+0x60/0xb0 [ 323.855903][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.855914][ T8711] RIP: 0033:0x7f015df8e929 [ 323.855925][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.855934][ T8711] RSP: 002b:00007f015ed86038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.855948][ T8711] RAX: ffffffffffffffda RBX: 00007f015e1b6160 RCX: 00007f015df8e929 [ 323.855956][ T8711] RDX: 0000000000000001 RSI: 00002000000043c0 RDI: 0000000000000003 [ 323.855964][ T8711] RBP: 00007f015ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 323.855971][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.855977][ T8711] R13: 0000000000000000 R14: 00007f015e1b6160 R15: 00007ffec7147c78 [ 323.855996][ T8711] [ 324.187078][ T5936] usb 4-1: USB disconnect, device number 24 [ 324.954203][ T8727] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 324.954203][ T8727] program syz.1.813 not setting count and/or reply_len properly [ 325.020998][ T8727] fuse: Bad value for 'fd' [ 326.851673][ T6472] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 327.057619][ T6472] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.075148][ T6472] usb 5-1: not running at top speed; connect to a high speed hub [ 327.100644][ T6472] usb 5-1: config 253 has an invalid interface number: 140 but max is 0 [ 327.127135][ T6472] usb 5-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 327.140764][ T8731] 9pnet_fd: p9_fd_create_tcp (8731): problem connecting socket to 127.0.0.1 [ 327.152397][ T6472] usb 5-1: config 253 has no interface number 0 [ 327.158911][ T6472] usb 5-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.195238][ T6472] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 327.205616][ T6472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.214624][ T6472] usb 5-1: Product: syz [ 327.218955][ T6472] usb 5-1: Manufacturer: syz [ 327.224145][ T6472] usb 5-1: SerialNumber: syz [ 327.458244][ T8734] delete_channel: no stack [ 327.501159][ T6472] usbtest 5-1:253.140: couldn't get endpoints, -22 [ 327.513472][ T6472] usbtest 5-1:253.140: probe with driver usbtest failed with error -22 [ 327.567630][ T6472] usb 5-1: USB disconnect, device number 25 [ 327.607296][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 329.783405][ T8756] tipc: Enabling of bearer rejected, failed to enable media [ 331.189000][ T8779] netlink: 'syz.2.825': attribute type 8 has an invalid length. [ 331.219014][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 331.545556][ T8784] batadv2: entered promiscuous mode [ 331.552071][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 334.299956][ T5936] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 334.528791][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 334.633562][ T5936] usb 4-1: not running at top speed; connect to a high speed hub [ 334.671400][ T5936] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 334.691464][ T5936] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 334.777579][ T5936] usb 4-1: config 253 has no interface number 0 [ 334.809908][ T5936] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.839104][ T8805] FAULT_INJECTION: forcing a failure. [ 334.839104][ T8805] name failslab, interval 1, probability 0, space 0, times 0 [ 334.855342][ T5936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 334.871410][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.881970][ T8805] CPU: 0 UID: 0 PID: 8805 Comm: syz.1.835 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 334.881989][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.881996][ T8805] Call Trace: [ 334.882002][ T8805] [ 334.882008][ T8805] dump_stack_lvl+0x189/0x250 [ 334.882031][ T8805] ? __pfx____ratelimit+0x10/0x10 [ 334.882050][ T8805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.882066][ T8805] ? __pfx__printk+0x10/0x10 [ 334.882081][ T8805] ? __pfx___might_resched+0x10/0x10 [ 334.882096][ T8805] ? fs_reclaim_acquire+0x7d/0x100 [ 334.882116][ T8805] should_fail_ex+0x414/0x560 [ 334.882136][ T8805] should_failslab+0xa8/0x100 [ 334.882153][ T8805] kmem_cache_alloc_noprof+0x73/0x3c0 [ 334.882166][ T8805] ? security_inode_alloc+0x39/0x330 [ 334.882182][ T8805] security_inode_alloc+0x39/0x330 [ 334.882195][ T8805] inode_init_always_gfp+0x9ed/0xdc0 [ 334.882214][ T8805] ? __pfx_sock_alloc_inode+0x10/0x10 [ 334.882232][ T8805] alloc_inode+0x82/0x1b0 [ 334.882247][ T8805] do_accept+0x111/0x680 [ 334.882262][ T8805] ? __pfx_do_accept+0x10/0x10 [ 334.882288][ T8805] __sys_accept4+0x11c/0x1c0 [ 334.882302][ T8805] ? __pfx___sys_accept4+0x10/0x10 [ 334.882314][ T8805] ? __pfx_ksys_write+0x10/0x10 [ 334.882326][ T8805] ? rcu_is_watching+0x15/0xb0 [ 334.882347][ T8805] __x64_sys_accept4+0x9a/0xb0 [ 334.882361][ T8805] do_syscall_64+0xfa/0x3b0 [ 334.882371][ T8805] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.882387][ T8805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.882398][ T8805] ? clear_bhb_loop+0x60/0xb0 [ 334.882412][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.882423][ T8805] RIP: 0033:0x7f015df8e929 [ 334.882442][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.882451][ T8805] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 334.882466][ T8805] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 334.882474][ T8805] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 334.882481][ T8805] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 334.882488][ T8805] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 334.882495][ T8805] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 334.882518][ T8805] [ 335.179063][ T5936] usb 4-1: Product: syz [ 335.190103][ T5936] usb 4-1: Manufacturer: syz [ 335.194827][ T5936] usb 4-1: SerialNumber: syz [ 335.276302][ T8807] xt_bpf: check failed: parse error [ 335.287501][ T8807] sctp: [Deprecated]: syz.1.836 (pid 8807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.287501][ T8807] Use struct sctp_sack_info instead [ 335.640491][ T8798] delete_channel: no stack [ 335.712395][ T5936] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 335.719035][ T5936] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 335.747834][ T8810] lo: entered allmulticast mode [ 335.792454][ T5936] usb 4-1: USB disconnect, device number 25 [ 335.811614][ T8809] lo: left allmulticast mode [ 336.114799][ T8815] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 336.114799][ T8815] program syz.1.839 not setting count and/or reply_len properly [ 336.206748][ T8815] fuse: Bad value for 'fd' [ 336.839591][ T8821] IPVS: length: 135 != 159768 [ 336.872063][ T8817] wg1 speed is unknown, defaulting to 1000 [ 337.195246][ T8826] bond0: entered promiscuous mode [ 337.201029][ T8826] bond_slave_0: entered promiscuous mode [ 337.206943][ T8826] bond_slave_1: entered promiscuous mode [ 338.785890][ T8833] lo: entered allmulticast mode [ 338.847991][ T8833] FAULT_INJECTION: forcing a failure. [ 338.847991][ T8833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.959467][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.1.844 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 338.959500][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.959511][ T8833] Call Trace: [ 338.959519][ T8833] [ 338.959528][ T8833] dump_stack_lvl+0x189/0x250 [ 338.959561][ T8833] ? __pfx____ratelimit+0x10/0x10 [ 338.959591][ T8833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.959619][ T8833] ? __pfx__printk+0x10/0x10 [ 338.959640][ T8833] ? __might_fault+0xb0/0x130 [ 338.959679][ T8833] should_fail_ex+0x414/0x560 [ 338.959711][ T8833] _copy_from_user+0x2d/0xb0 [ 338.959734][ T8833] kstrtouint_from_user+0xc4/0x170 [ 338.959765][ T8833] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 338.959814][ T8833] proc_fail_nth_write+0x88/0x240 [ 338.959842][ T8833] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 338.959877][ T8833] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 338.959907][ T8833] vfs_write+0x27b/0xa90 [ 338.959942][ T8833] ? __pfx_vfs_write+0x10/0x10 [ 338.959968][ T8833] ? __fget_files+0x2a/0x420 [ 338.959999][ T8833] ? __fget_files+0x3a0/0x420 [ 338.960024][ T8833] ? __fget_files+0x2a/0x420 [ 338.960060][ T8833] ksys_write+0x145/0x250 [ 338.960086][ T8833] ? __pfx_ksys_write+0x10/0x10 [ 338.960106][ T8833] ? rcu_is_watching+0x15/0xb0 [ 338.960141][ T8833] ? do_syscall_64+0xbe/0x3b0 [ 338.960165][ T8833] do_syscall_64+0xfa/0x3b0 [ 338.960182][ T8833] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.960209][ T8833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.960229][ T8833] ? clear_bhb_loop+0x60/0xb0 [ 338.960252][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.960270][ T8833] RIP: 0033:0x7f015df8d3df [ 338.960296][ T8833] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 338.960314][ T8833] RSP: 002b:00007f015edc8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 338.960336][ T8833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f015df8d3df [ 338.960349][ T8833] RDX: 0000000000000001 RSI: 00007f015edc80a0 RDI: 0000000000000006 [ 338.960361][ T8833] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 338.960372][ T8833] R10: 000000000000002d R11: 0000000000000293 R12: 0000000000000001 [ 338.960384][ T8833] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 338.960418][ T8833] [ 339.202176][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.009718][ T8833] lo: left allmulticast mode [ 340.792543][ T8855] FAULT_INJECTION: forcing a failure. [ 340.792543][ T8855] name failslab, interval 1, probability 0, space 0, times 0 [ 340.873336][ T8855] CPU: 0 UID: 0 PID: 8855 Comm: syz.1.850 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 340.873356][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.873363][ T8855] Call Trace: [ 340.873368][ T8855] [ 340.873373][ T8855] dump_stack_lvl+0x189/0x250 [ 340.873406][ T8855] ? __pfx____ratelimit+0x10/0x10 [ 340.873425][ T8855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.873441][ T8855] ? __pfx__printk+0x10/0x10 [ 340.873456][ T8855] ? __pfx___might_resched+0x10/0x10 [ 340.873471][ T8855] ? fs_reclaim_acquire+0x7d/0x100 [ 340.873490][ T8855] should_fail_ex+0x414/0x560 [ 340.873515][ T8855] ? xt_alloc_table_info+0x3b/0xa0 [ 340.873530][ T8855] should_failslab+0xa8/0x100 [ 340.873547][ T8855] __kvmalloc_node_noprof+0x161/0x5f0 [ 340.873563][ T8855] ? xt_alloc_table_info+0x3b/0xa0 [ 340.873582][ T8855] xt_alloc_table_info+0x3b/0xa0 [ 340.873598][ T8855] do_ipt_set_ctl+0x881/0xcd0 [ 340.873618][ T8855] ? rcu_is_watching+0x15/0xb0 [ 340.873634][ T8855] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 340.873660][ T8855] ? __pfx___mutex_lock+0x10/0x10 [ 340.873672][ T8855] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.873695][ T8855] nf_setsockopt+0x26f/0x290 [ 340.873712][ T8855] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 340.873726][ T8855] do_sock_setsockopt+0x25a/0x3e0 [ 340.873742][ T8855] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 340.873760][ T8855] ? __fget_files+0x2a/0x420 [ 340.873781][ T8855] __x64_sys_setsockopt+0x18b/0x220 [ 340.873799][ T8855] do_syscall_64+0xfa/0x3b0 [ 340.873809][ T8855] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.873825][ T8855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.873836][ T8855] ? clear_bhb_loop+0x60/0xb0 [ 340.873850][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.873862][ T8855] RIP: 0033:0x7f015df8e929 [ 340.873874][ T8855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.873883][ T8855] RSP: 002b:00007f015eda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.873897][ T8855] RAX: ffffffffffffffda RBX: 00007f015e1b6080 RCX: 00007f015df8e929 [ 340.873905][ T8855] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000006 [ 340.873913][ T8855] RBP: 00007f015eda7090 R08: 0000000000000248 R09: 0000000000000000 [ 340.873920][ T8855] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 340.873927][ T8855] R13: 0000000000000000 R14: 00007f015e1b6080 R15: 00007ffec7147c78 [ 340.873945][ T8855] [ 342.340008][ T30] audit: type=1804 audit(1749300810.193:158): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.858" name="/newroot/181/bus" dev="tmpfs" ino=959 res=1 errno=0 [ 343.084744][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 343.123875][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'. [ 344.070420][ T5936] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 344.138711][ T8900] team0 (unregistering): Port device team_slave_0 removed [ 344.150855][ T8900] team0 (unregistering): Port device team_slave_1 removed [ 344.181656][ T8900] team0 (unregistering): Port device ip6gretap1 removed [ 344.262896][ T5936] usb 2-1: config 252 has an invalid interface number: 27 but max is 0 [ 344.284941][ T5936] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 344.334051][ T5936] usb 2-1: config 252 has no interface number 0 [ 344.367281][ T5936] usb 2-1: config 252 interface 27 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 344.609278][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 344.618382][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 345.152325][ T5936] usb 2-1: config 252 interface 27 has no altsetting 0 [ 345.162453][ T5936] usb 2-1: New USB device found, idVendor=b8aa, idProduct=a343, bcdDevice=ab.da [ 345.173084][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.181671][ T5936] usb 2-1: Product: syz [ 345.186207][ T5936] usb 2-1: Manufacturer: syz [ 345.191239][ T5936] usb 2-1: SerialNumber: syz [ 345.277998][ T5936] rndis_host 2-1:252.27: More than one union descriptor, skipping ... [ 345.309706][ T5936] usb 2-1: bad CDC descriptors [ 345.320554][ T8924] FAULT_INJECTION: forcing a failure. [ 345.320554][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 345.369778][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.4.873 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 345.369809][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.369821][ T8924] Call Trace: [ 345.369829][ T8924] [ 345.369837][ T8924] dump_stack_lvl+0x189/0x250 [ 345.369872][ T8924] ? __pfx____ratelimit+0x10/0x10 [ 345.369900][ T8924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.369926][ T8924] ? __pfx__printk+0x10/0x10 [ 345.369952][ T8924] ? __pfx___might_resched+0x10/0x10 [ 345.369985][ T8924] should_fail_ex+0x414/0x560 [ 345.370025][ T8924] should_failslab+0xa8/0x100 [ 345.370051][ T8924] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 345.370075][ T8924] ? __alloc_skb+0x112/0x2d0 [ 345.370102][ T8924] __alloc_skb+0x112/0x2d0 [ 345.370129][ T8924] netlink_sendmsg+0x5c6/0xb30 [ 345.370164][ T8924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.370197][ T8924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.370220][ T8924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.370245][ T8924] __sock_sendmsg+0x21c/0x270 [ 345.370275][ T8924] ____sys_sendmsg+0x505/0x830 [ 345.370307][ T8924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.370343][ T8924] ? import_iovec+0x74/0xa0 [ 345.370367][ T8924] ___sys_sendmsg+0x21f/0x2a0 [ 345.370393][ T8924] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.370422][ T8924] ? rcu_read_lock_any_held+0xb3/0x120 [ 345.370467][ T8924] ? sb_end_write+0xe9/0x1c0 [ 345.370507][ T8924] ? __pfx_vfs_write+0x10/0x10 [ 345.370538][ T8924] __x64_sys_sendmsg+0x19b/0x260 [ 345.370562][ T8924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.370589][ T8924] ? __pfx_ksys_write+0x10/0x10 [ 345.370604][ T8924] ? rcu_is_watching+0x15/0xb0 [ 345.370628][ T8924] ? do_syscall_64+0xbe/0x3b0 [ 345.370646][ T8924] do_syscall_64+0xfa/0x3b0 [ 345.370658][ T8924] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.370678][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.370693][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 345.370710][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.370724][ T8924] RIP: 0033:0x7fbb6ab8e929 [ 345.370739][ T8924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.370751][ T8924] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.370769][ T8924] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 345.370780][ T8924] RDX: 000000002004c8d4 RSI: 0000200000006040 RDI: 0000000000000004 [ 345.370789][ T8924] RBP: 00007fbb6ba7d090 R08: 0000000000000000 R09: 0000000000000000 [ 345.370798][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.370807][ T8924] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 345.370831][ T8924] [ 345.822502][ T8931] FAULT_INJECTION: forcing a failure. [ 345.822502][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 345.835406][ T8931] CPU: 1 UID: 0 PID: 8931 Comm: syz.3.876 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 345.835432][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.835444][ T8931] Call Trace: [ 345.835453][ T8931] [ 345.835461][ T8931] dump_stack_lvl+0x189/0x250 [ 345.835495][ T8931] ? __pfx____ratelimit+0x10/0x10 [ 345.835523][ T8931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.835550][ T8931] ? __pfx__printk+0x10/0x10 [ 345.835576][ T8931] ? __pfx___might_resched+0x10/0x10 [ 345.835602][ T8931] ? fs_reclaim_acquire+0x7d/0x100 [ 345.835636][ T8931] should_fail_ex+0x414/0x560 [ 345.835668][ T8931] should_failslab+0xa8/0x100 [ 345.835695][ T8931] kmem_cache_alloc_noprof+0x73/0x3c0 [ 345.835718][ T8931] ? security_inode_alloc+0x39/0x330 [ 345.835744][ T8931] security_inode_alloc+0x39/0x330 [ 345.835766][ T8931] inode_init_always_gfp+0x9ed/0xdc0 [ 345.835799][ T8931] ? __pfx_sock_alloc_inode+0x10/0x10 [ 345.835827][ T8931] alloc_inode+0x82/0x1b0 [ 345.835853][ T8931] do_accept+0x111/0x680 [ 345.835881][ T8931] ? __pfx_do_accept+0x10/0x10 [ 345.835928][ T8931] __sys_accept4+0x11c/0x1c0 [ 345.835953][ T8931] ? __pfx___sys_accept4+0x10/0x10 [ 345.835982][ T8931] ? __pfx_ksys_write+0x10/0x10 [ 345.836016][ T8931] __x64_sys_accept+0x7d/0x90 [ 345.836038][ T8931] do_syscall_64+0xfa/0x3b0 [ 345.836055][ T8931] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.836082][ T8931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.836101][ T8931] ? clear_bhb_loop+0x60/0xb0 [ 345.836122][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.836138][ T8931] RIP: 0033:0x7fe07898e929 [ 345.836157][ T8931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.836171][ T8931] RSP: 002b:00007fe07984b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 345.836193][ T8931] RAX: ffffffffffffffda RBX: 00007fe078bb6080 RCX: 00007fe07898e929 [ 345.836206][ T8931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 345.836216][ T8931] RBP: 00007fe07984b090 R08: 0000000000000000 R09: 0000000000000000 [ 345.836227][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.836238][ T8931] R13: 0000000000000001 R14: 00007fe078bb6080 R15: 00007ffc4e338168 [ 345.836270][ T8931] [ 346.151584][ T6451] usb 2-1: USB disconnect, device number 32 [ 346.934664][ T30] audit: type=1804 audit(1749300814.743:159): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.878" name="/newroot/168/bus" dev="tmpfs" ino=886 res=1 errno=0 [ 347.999208][ T8956] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 347.999208][ T8956] program syz.3.884 not setting count and/or reply_len properly [ 348.652622][ T8961] netlink: 'syz.2.886': attribute type 3 has an invalid length. [ 348.817075][ T8969] loop9: detected capacity change from 0 to 7 [ 348.880130][ T8969] Dev loop9: unable to read RDB block 7 [ 348.896333][ T8969] loop9: AHDI p1 [ 348.906450][ T8969] loop9: partition table partially beyond EOD, truncated [ 348.941906][ T8974] FAULT_INJECTION: forcing a failure. [ 348.941906][ T8974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.956513][ T8974] CPU: 0 UID: 0 PID: 8974 Comm: syz.4.891 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 348.956541][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.956551][ T8974] Call Trace: [ 348.956560][ T8974] [ 348.956568][ T8974] dump_stack_lvl+0x189/0x250 [ 348.956600][ T8974] ? __pfx____ratelimit+0x10/0x10 [ 348.956629][ T8974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.956655][ T8974] ? __pfx__printk+0x10/0x10 [ 348.956674][ T8974] ? __might_fault+0xb0/0x130 [ 348.956710][ T8974] should_fail_ex+0x414/0x560 [ 348.956740][ T8974] _copy_from_user+0x2d/0xb0 [ 348.956761][ T8974] memdup_user+0x5e/0xd0 [ 348.956778][ T8974] strndup_user+0x68/0xd0 [ 348.956796][ T8974] __se_sys_mount+0x9c/0x410 [ 348.956823][ T8974] ? ksys_write+0x22a/0x250 [ 348.956846][ T8974] ? __pfx___se_sys_mount+0x10/0x10 [ 348.956867][ T8974] ? rcu_is_watching+0x15/0xb0 [ 348.956897][ T8974] ? do_syscall_64+0xbe/0x3b0 [ 348.956914][ T8974] ? __x64_sys_mount+0x20/0xc0 [ 348.956951][ T8974] do_syscall_64+0xfa/0x3b0 [ 348.956967][ T8974] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.956994][ T8974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.957011][ T8974] ? clear_bhb_loop+0x60/0xb0 [ 348.957035][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.957052][ T8974] RIP: 0033:0x7fbb6ab8e929 [ 348.957069][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.957084][ T8974] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.957105][ T8974] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 348.957117][ T8974] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 348.957129][ T8974] RBP: 00007fbb6ba7d090 R08: 00002000000002c0 R09: 0000000000000000 [ 348.957141][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.957152][ T8974] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 348.957183][ T8974] [ 349.934251][ T8981] delete_channel: no stack [ 352.289684][ T9010] xt_hashlimit: size too large, truncated to 1048576 [ 352.696673][ T9014] batadv3: entered promiscuous mode [ 352.715571][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 353.458123][ T9001] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 353.464697][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 353.472967][ T9001] vhci_hcd vhci_hcd.0: Device attached [ 353.576847][ T9015] vhci_hcd: connection closed [ 353.589560][ T2963] vhci_hcd: stop threads [ 353.622042][ T2963] vhci_hcd: release socket [ 353.631946][ T2963] vhci_hcd: disconnect device [ 354.008763][ T30] audit: type=1326 audit(1749300821.873:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9028 comm="syz.2.907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f756278e929 code=0x0 [ 354.058653][ T30] audit: type=1326 audit(1749300821.903:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9030 comm="syz.0.908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ddc78e929 code=0x0 [ 354.091294][ T9033] FAULT_INJECTION: forcing a failure. [ 354.091294][ T9033] name failslab, interval 1, probability 0, space 0, times 0 [ 354.091358][ T9032] netlink: 52 bytes leftover after parsing attributes in process `syz.0.908'. [ 354.155296][ T9033] CPU: 1 UID: 0 PID: 9033 Comm: syz.2.907 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 354.155325][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.155336][ T9033] Call Trace: [ 354.155344][ T9033] [ 354.155352][ T9033] dump_stack_lvl+0x189/0x250 [ 354.155385][ T9033] ? __pfx____ratelimit+0x10/0x10 [ 354.155413][ T9033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.155436][ T9033] ? __pfx__printk+0x10/0x10 [ 354.155461][ T9033] ? __pfx___might_resched+0x10/0x10 [ 354.155489][ T9033] should_fail_ex+0x414/0x560 [ 354.155519][ T9033] should_failslab+0xa8/0x100 [ 354.155545][ T9033] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 354.155569][ T9033] ? __alloc_skb+0x112/0x2d0 [ 354.155595][ T9033] __alloc_skb+0x112/0x2d0 [ 354.155621][ T9033] netlink_sendmsg+0x5c6/0xb30 [ 354.155657][ T9033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.155690][ T9033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.155713][ T9033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.155735][ T9033] __sock_sendmsg+0x21c/0x270 [ 354.155767][ T9033] ____sys_sendmsg+0x505/0x830 [ 354.155799][ T9033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.155833][ T9033] ? import_iovec+0x74/0xa0 [ 354.155857][ T9033] ___sys_sendmsg+0x21f/0x2a0 [ 354.155883][ T9033] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.155954][ T9033] ? __fget_files+0x2a/0x420 [ 354.155978][ T9033] ? __fget_files+0x3a0/0x420 [ 354.156013][ T9033] __x64_sys_sendmsg+0x19b/0x260 [ 354.156041][ T9033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.156075][ T9033] ? __pfx_ksys_write+0x10/0x10 [ 354.156104][ T9033] ? do_syscall_64+0xbe/0x3b0 [ 354.156127][ T9033] do_syscall_64+0xfa/0x3b0 [ 354.156143][ T9033] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.156169][ T9033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.156187][ T9033] ? clear_bhb_loop+0x60/0xb0 [ 354.156209][ T9033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.156228][ T9033] RIP: 0033:0x7f756278e929 [ 354.156246][ T9033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.156261][ T9033] RSP: 002b:00007f756365e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.156283][ T9033] RAX: ffffffffffffffda RBX: 00007f75629b6080 RCX: 00007f756278e929 [ 354.156297][ T9033] RDX: 0000000000044000 RSI: 0000200000000000 RDI: 0000000000000003 [ 354.156309][ T9033] RBP: 00007f756365e090 R08: 0000000000000000 R09: 0000000000000000 [ 354.156321][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.156333][ T9033] R13: 0000000000000001 R14: 00007f75629b6080 R15: 00007ffce776e8c8 [ 354.156364][ T9033] [ 355.587693][ T9051] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 355.896182][ T9061] syz_tun: entered allmulticast mode [ 355.944118][ T9060] syz_tun: left allmulticast mode [ 356.618130][ T9077] netlink: 996 bytes leftover after parsing attributes in process `syz.3.923'. [ 357.020713][ T9086] FAULT_INJECTION: forcing a failure. [ 357.020713][ T9086] name failslab, interval 1, probability 0, space 0, times 0 [ 357.169631][ T9086] CPU: 1 UID: 0 PID: 9086 Comm: syz.3.927 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 357.169664][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.169676][ T9086] Call Trace: [ 357.169685][ T9086] [ 357.169694][ T9086] dump_stack_lvl+0x189/0x250 [ 357.169727][ T9086] ? __pfx____ratelimit+0x10/0x10 [ 357.169756][ T9086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.169784][ T9086] ? __pfx__printk+0x10/0x10 [ 357.169810][ T9086] ? __pfx___might_resched+0x10/0x10 [ 357.169842][ T9086] should_fail_ex+0x414/0x560 [ 357.169873][ T9086] should_failslab+0xa8/0x100 [ 357.169900][ T9086] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 357.169925][ T9086] ? __alloc_skb+0x112/0x2d0 [ 357.169952][ T9086] __alloc_skb+0x112/0x2d0 [ 357.169979][ T9086] netlink_sendmsg+0x5c6/0xb30 [ 357.170019][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.170052][ T9086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.170076][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.170109][ T9086] __sock_sendmsg+0x21c/0x270 [ 357.170142][ T9086] ____sys_sendmsg+0x505/0x830 [ 357.170172][ T9086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.170207][ T9086] ? import_iovec+0x74/0xa0 [ 357.170232][ T9086] ___sys_sendmsg+0x21f/0x2a0 [ 357.170264][ T9086] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.170337][ T9086] ? __fget_files+0x2a/0x420 [ 357.170362][ T9086] ? __fget_files+0x3a0/0x420 [ 357.170400][ T9086] __x64_sys_sendmsg+0x19b/0x260 [ 357.170426][ T9086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.170494][ T9086] ? __pfx_ksys_write+0x10/0x10 [ 357.170514][ T9086] ? rcu_is_watching+0x15/0xb0 [ 357.170556][ T9086] ? do_syscall_64+0xbe/0x3b0 [ 357.170602][ T9086] do_syscall_64+0xfa/0x3b0 [ 357.170618][ T9086] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.170644][ T9086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.170663][ T9086] ? clear_bhb_loop+0x60/0xb0 [ 357.170687][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.170705][ T9086] RIP: 0033:0x7fe07898e929 [ 357.170724][ T9086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.170766][ T9086] RSP: 002b:00007fe07986c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.170790][ T9086] RAX: ffffffffffffffda RBX: 00007fe078bb5fa0 RCX: 00007fe07898e929 [ 357.170804][ T9086] RDX: 0000000004048000 RSI: 0000200000000100 RDI: 0000000000000003 [ 357.170816][ T9086] RBP: 00007fe07986c090 R08: 0000000000000000 R09: 0000000000000000 [ 357.170828][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.170908][ T9086] R13: 0000000000000000 R14: 00007fe078bb5fa0 R15: 00007ffc4e338168 [ 357.170962][ T9086] [ 358.380848][ T6451] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 358.452962][ T9097] FAULT_INJECTION: forcing a failure. [ 358.452962][ T9097] name failslab, interval 1, probability 0, space 0, times 0 [ 358.495709][ T9097] CPU: 0 UID: 0 PID: 9097 Comm: syz.3.930 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 358.495738][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.495749][ T9097] Call Trace: [ 358.495757][ T9097] [ 358.495765][ T9097] dump_stack_lvl+0x189/0x250 [ 358.495798][ T9097] ? __pfx____ratelimit+0x10/0x10 [ 358.495825][ T9097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.495852][ T9097] ? __pfx__printk+0x10/0x10 [ 358.495878][ T9097] ? __pfx___might_resched+0x10/0x10 [ 358.495911][ T9097] should_fail_ex+0x414/0x560 [ 358.495941][ T9097] should_failslab+0xa8/0x100 [ 358.495968][ T9097] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 358.495992][ T9097] ? __alloc_skb+0x112/0x2d0 [ 358.496028][ T9097] __alloc_skb+0x112/0x2d0 [ 358.496052][ T9097] netlink_sendmsg+0x5c6/0xb30 [ 358.496084][ T9097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.496116][ T9097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.496136][ T9097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.496159][ T9097] __sock_sendmsg+0x21c/0x270 [ 358.496188][ T9097] ____sys_sendmsg+0x505/0x830 [ 358.496218][ T9097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.496249][ T9097] ? import_iovec+0x74/0xa0 [ 358.496273][ T9097] ___sys_sendmsg+0x21f/0x2a0 [ 358.496299][ T9097] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.496364][ T9097] ? __fget_files+0x2a/0x420 [ 358.496388][ T9097] ? __fget_files+0x3a0/0x420 [ 358.496424][ T9097] __x64_sys_sendmsg+0x19b/0x260 [ 358.496451][ T9097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.496486][ T9097] ? __pfx_ksys_write+0x10/0x10 [ 358.496511][ T9097] ? rcu_is_watching+0x15/0xb0 [ 358.496543][ T9097] ? do_syscall_64+0xbe/0x3b0 [ 358.496566][ T9097] do_syscall_64+0xfa/0x3b0 [ 358.496582][ T9097] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.496609][ T9097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.496626][ T9097] ? clear_bhb_loop+0x60/0xb0 [ 358.496650][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.496666][ T9097] RIP: 0033:0x7fe07898e929 [ 358.496682][ T9097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.496698][ T9097] RSP: 002b:00007fe07986c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.496718][ T9097] RAX: ffffffffffffffda RBX: 00007fe078bb5fa0 RCX: 00007fe07898e929 [ 358.496731][ T9097] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 358.496741][ T9097] RBP: 00007fe07986c090 R08: 0000000000000000 R09: 0000000000000000 [ 358.496752][ T9097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.496763][ T9097] R13: 0000000000000000 R14: 00007fe078bb5fa0 R15: 00007ffc4e338168 [ 358.496792][ T9097] [ 358.889085][ T9102] syz_tun: entered allmulticast mode [ 358.899050][ T9101] syz_tun: left allmulticast mode [ 358.923253][ T6451] usb 2-1: unable to get BOS descriptor or descriptor too short [ 358.939021][ T6451] usb 2-1: not running at top speed; connect to a high speed hub [ 358.949633][ T6451] usb 2-1: config 253 has an invalid interface number: 140 but max is 0 [ 358.958772][ T6451] usb 2-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 358.969990][ T6451] usb 2-1: config 253 has no interface number 0 [ 358.976607][ T6451] usb 2-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.015423][ T6451] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 359.024899][ T6451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.035181][ T6451] usb 2-1: Product: syz [ 359.039827][ T6451] usb 2-1: Manufacturer: syz [ 359.044538][ T6451] usb 2-1: SerialNumber: syz [ 359.706612][ T9111] batadv1: entered promiscuous mode [ 359.726154][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 360.375758][ T9089] delete_channel: no stack [ 360.430314][ T6451] usbtest 2-1:253.140: couldn't get endpoints, -22 [ 360.437155][ T6451] usbtest 2-1:253.140: probe with driver usbtest failed with error -22 [ 360.612203][ T6451] usb 2-1: USB disconnect, device number 33 [ 362.229883][ T9139] FAULT_INJECTION: forcing a failure. [ 362.229883][ T9139] name failslab, interval 1, probability 0, space 0, times 0 [ 362.310410][ T9139] CPU: 1 UID: 0 PID: 9139 Comm: syz.2.946 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 362.310441][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.310452][ T9139] Call Trace: [ 362.310459][ T9139] [ 362.310467][ T9139] dump_stack_lvl+0x189/0x250 [ 362.310500][ T9139] ? __pfx____ratelimit+0x10/0x10 [ 362.310528][ T9139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.310554][ T9139] ? __pfx__printk+0x10/0x10 [ 362.310579][ T9139] ? __pfx___might_resched+0x10/0x10 [ 362.310611][ T9139] should_fail_ex+0x414/0x560 [ 362.310641][ T9139] should_failslab+0xa8/0x100 [ 362.310667][ T9139] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 362.310691][ T9139] ? __alloc_skb+0x112/0x2d0 [ 362.310727][ T9139] __alloc_skb+0x112/0x2d0 [ 362.310752][ T9139] netlink_sendmsg+0x5c6/0xb30 [ 362.310785][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.310810][ T9139] ? rcu_is_watching+0x15/0xb0 [ 362.310853][ T9139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.310875][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.310898][ T9139] __sock_sendmsg+0x21c/0x270 [ 362.310930][ T9139] ____sys_sendmsg+0x505/0x830 [ 362.310957][ T9139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.310989][ T9139] ? import_iovec+0x74/0xa0 [ 362.311013][ T9139] ___sys_sendmsg+0x21f/0x2a0 [ 362.311039][ T9139] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.311103][ T9139] ? __fget_files+0x2a/0x420 [ 362.311127][ T9139] ? __fget_files+0x3a0/0x420 [ 362.311165][ T9139] __x64_sys_sendmsg+0x19b/0x260 [ 362.311194][ T9139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.311232][ T9139] ? rcu_is_watching+0x15/0xb0 [ 362.311263][ T9139] ? do_syscall_64+0xbe/0x3b0 [ 362.311286][ T9139] do_syscall_64+0xfa/0x3b0 [ 362.311304][ T9139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.311321][ T9139] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 362.311338][ T9139] ? clear_bhb_loop+0x60/0xb0 [ 362.311361][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.311379][ T9139] RIP: 0033:0x7f756278e929 [ 362.311396][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.311412][ T9139] RSP: 002b:00007f756367f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.311435][ T9139] RAX: ffffffffffffffda RBX: 00007f75629b5fa0 RCX: 00007f756278e929 [ 362.311448][ T9139] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 362.311460][ T9139] RBP: 00007f756367f090 R08: 0000000000000000 R09: 0000000000000000 [ 362.311472][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.311482][ T9139] R13: 0000000000000000 R14: 00007f75629b5fa0 R15: 00007ffce776e8c8 [ 362.311513][ T9139] [ 362.626877][ T9150] netlink: 260 bytes leftover after parsing attributes in process `syz.3.944'. [ 362.830907][ T9148] netlink: 'syz.0.947': attribute type 8 has an invalid length. [ 363.871546][ T9156] FAULT_INJECTION: forcing a failure. [ 363.871546][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 363.885670][ T9156] CPU: 1 UID: 0 PID: 9156 Comm: syz.1.949 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 363.885699][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.885712][ T9156] Call Trace: [ 363.885721][ T9156] [ 363.885729][ T9156] dump_stack_lvl+0x189/0x250 [ 363.885763][ T9156] ? __pfx____ratelimit+0x10/0x10 [ 363.885792][ T9156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.885821][ T9156] ? __pfx__printk+0x10/0x10 [ 363.885848][ T9156] ? __pfx___might_resched+0x10/0x10 [ 363.885874][ T9156] ? fs_reclaim_acquire+0x7d/0x100 [ 363.885909][ T9156] should_fail_ex+0x414/0x560 [ 363.885940][ T9156] should_failslab+0xa8/0x100 [ 363.885967][ T9156] __kmalloc_noprof+0xcb/0x4f0 [ 363.885991][ T9156] ? bpf_test_init+0xc2/0x170 [ 363.886027][ T9156] bpf_test_init+0xc2/0x170 [ 363.886054][ T9156] bpf_prog_test_run_xdp+0x37c/0x1000 [ 363.886095][ T9156] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 363.886125][ T9156] ? __fget_files+0x2a/0x420 [ 363.886158][ T9156] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 363.886181][ T9156] bpf_prog_test_run+0x2c7/0x340 [ 363.886212][ T9156] __sys_bpf+0x4a4/0x860 [ 363.886239][ T9156] ? __pfx___sys_bpf+0x10/0x10 [ 363.886280][ T9156] ? ksys_write+0x22a/0x250 [ 363.886307][ T9156] ? __pfx_ksys_write+0x10/0x10 [ 363.886326][ T9156] ? rcu_is_watching+0x15/0xb0 [ 363.886363][ T9156] __x64_sys_bpf+0x7c/0x90 [ 363.886386][ T9156] do_syscall_64+0xfa/0x3b0 [ 363.886404][ T9156] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.886431][ T9156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.886449][ T9156] ? clear_bhb_loop+0x60/0xb0 [ 363.886473][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.886491][ T9156] RIP: 0033:0x7f015df8e929 [ 363.886507][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.886523][ T9156] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.886545][ T9156] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 363.886559][ T9156] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 363.886571][ T9156] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 363.886582][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.886593][ T9156] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 363.886626][ T9156] [ 364.324460][ T9163] FAULT_INJECTION: forcing a failure. [ 364.324460][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.339933][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.3.953 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 364.339969][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.339980][ T9163] Call Trace: [ 364.339988][ T9163] [ 364.339996][ T9163] dump_stack_lvl+0x189/0x250 [ 364.340028][ T9163] ? __pfx____ratelimit+0x10/0x10 [ 364.340056][ T9163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.340080][ T9163] ? __pfx__printk+0x10/0x10 [ 364.340098][ T9163] ? __might_fault+0xb0/0x130 [ 364.340133][ T9163] should_fail_ex+0x414/0x560 [ 364.340160][ T9163] _copy_from_user+0x2d/0xb0 [ 364.340181][ T9163] memdup_user+0x5e/0xd0 [ 364.340200][ T9163] strndup_user+0x68/0xd0 [ 364.340217][ T9163] __se_sys_fsconfig+0x4ce/0x8d0 [ 364.340241][ T9163] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 364.340257][ T9163] ? ksys_write+0x22a/0x250 [ 364.340280][ T9163] ? __pfx_ksys_write+0x10/0x10 [ 364.340300][ T9163] ? rcu_is_watching+0x15/0xb0 [ 364.340334][ T9163] ? do_syscall_64+0xbe/0x3b0 [ 364.340350][ T9163] ? __x64_sys_fsconfig+0x20/0xc0 [ 364.340371][ T9163] do_syscall_64+0xfa/0x3b0 [ 364.340387][ T9163] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.340413][ T9163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.340433][ T9163] ? clear_bhb_loop+0x60/0xb0 [ 364.340456][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.340474][ T9163] RIP: 0033:0x7fe07898e929 [ 364.340492][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.340507][ T9163] RSP: 002b:00007fe07986c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 364.340529][ T9163] RAX: ffffffffffffffda RBX: 00007fe078bb5fa0 RCX: 00007fe07898e929 [ 364.340542][ T9163] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000000000000004 [ 364.340554][ T9163] RBP: 00007fe07986c090 R08: 0000000000000000 R09: 0000000000000000 [ 364.340566][ T9163] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 364.340577][ T9163] R13: 0000000000000000 R14: 00007fe078bb5fa0 R15: 00007ffc4e338168 [ 364.340607][ T9163] [ 364.394447][ T9160] ipvlan2: entered promiscuous mode [ 364.750540][ T9160] bridge0: port 3(ipvlan2) entered blocking state [ 364.759934][ T9160] bridge0: port 3(ipvlan2) entered disabled state [ 364.960063][ T9160] ipvlan2: entered allmulticast mode [ 365.193320][ T9160] ipvlan2: left allmulticast mode [ 366.290677][ T6467] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 366.482338][ T6467] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.504943][ T6467] usb 5-1: not running at top speed; connect to a high speed hub [ 366.564058][ T6467] usb 5-1: config 253 has an invalid interface number: 140 but max is 0 [ 366.574046][ T6467] usb 5-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 366.602822][ T6467] usb 5-1: config 253 has no interface number 0 [ 366.625608][ T6467] usb 5-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.161993][ T6467] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 367.179824][ T6467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.511595][ T6467] usb 5-1: Product: syz [ 367.592010][ T6467] usb 5-1: Manufacturer: syz [ 367.734051][ T6467] usb 5-1: SerialNumber: syz [ 367.846552][ T6467] usbtest 5-1:253.140: couldn't get endpoints, -22 [ 367.857552][ T6467] usbtest 5-1:253.140: probe with driver usbtest failed with error -22 [ 367.897177][ T6467] usb 5-1: USB disconnect, device number 27 [ 368.131711][ T9204] FAULT_INJECTION: forcing a failure. [ 368.131711][ T9204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.184815][ T9204] CPU: 0 UID: 0 PID: 9204 Comm: syz.4.965 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 368.184844][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.184856][ T9204] Call Trace: [ 368.184864][ T9204] [ 368.184873][ T9204] dump_stack_lvl+0x189/0x250 [ 368.184905][ T9204] ? __pfx____ratelimit+0x10/0x10 [ 368.184933][ T9204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.184960][ T9204] ? __pfx__printk+0x10/0x10 [ 368.184992][ T9204] ? __pfx___mutex_lock+0x10/0x10 [ 368.185019][ T9204] should_fail_ex+0x414/0x560 [ 368.185050][ T9204] _copy_to_user+0x31/0xb0 [ 368.185071][ T9204] xsk_getsockopt+0x7a8/0x870 [ 368.185104][ T9204] ? __pfx_xsk_getsockopt+0x10/0x10 [ 368.185137][ T9204] ? __lock_acquire+0xab9/0xd20 [ 368.185174][ T9204] ? __might_fault+0xb0/0x130 [ 368.185222][ T9204] do_sock_getsockopt+0x360/0x650 [ 368.185248][ T9204] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 368.185270][ T9204] ? __pfx_do_syscall_64+0x10/0x10 [ 368.185287][ T9204] ? __fget_files+0x3a0/0x420 [ 368.185309][ T9204] ? __fget_files+0x2a/0x420 [ 368.185342][ T9204] __x64_sys_getsockopt+0x1a5/0x250 [ 368.185364][ T9204] ? __pfx_do_syscall_64+0x10/0x10 [ 368.185383][ T9204] ? __pfx_do_syscall_64+0x10/0x10 [ 368.185405][ T9204] do_syscall_64+0xfa/0x3b0 [ 368.185421][ T9204] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.185447][ T9204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.185466][ T9204] ? clear_bhb_loop+0x60/0xb0 [ 368.185489][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.185513][ T9204] RIP: 0033:0x7fbb6ab8e929 [ 368.185532][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.185548][ T9204] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 368.185571][ T9204] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 368.185584][ T9204] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000005 [ 368.185596][ T9204] RBP: 00007fbb6ba7d090 R08: 00002000000002c0 R09: 0000000000000000 [ 368.185608][ T9204] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 368.185620][ T9204] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 368.185650][ T9204] [ 368.449499][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 369.142592][ T9218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.174180][ T9218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.302760][ T9226] FAULT_INJECTION: forcing a failure. [ 369.302760][ T9226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.553194][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.4.973 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 369.553224][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.553235][ T9226] Call Trace: [ 369.553242][ T9226] [ 369.553248][ T9226] dump_stack_lvl+0x189/0x250 [ 369.553270][ T9226] ? __pfx____ratelimit+0x10/0x10 [ 369.553288][ T9226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.553304][ T9226] ? __pfx__printk+0x10/0x10 [ 369.553315][ T9226] ? __might_fault+0xb0/0x130 [ 369.553336][ T9226] should_fail_ex+0x414/0x560 [ 369.553354][ T9226] _copy_from_user+0x2d/0xb0 [ 369.553368][ T9226] do_tcp_setsockopt+0x42f/0x1f10 [ 369.553384][ T9226] ? sb_end_write+0xe9/0x1c0 [ 369.553401][ T9226] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 369.553413][ T9226] ? vfs_write+0x8d8/0xa90 [ 369.553431][ T9226] ? __pfx_vfs_write+0x10/0x10 [ 369.553445][ T9226] ? sock_common_setsockopt+0x36/0xc0 [ 369.553455][ T9226] ? tcp_setsockopt+0x3d/0xe0 [ 369.553468][ T9226] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 369.553480][ T9226] do_sock_setsockopt+0x25a/0x3e0 [ 369.553502][ T9226] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 369.553518][ T9226] ? ksys_write+0x1e1/0x250 [ 369.553536][ T9226] __x64_sys_setsockopt+0x18b/0x220 [ 369.553554][ T9226] do_syscall_64+0xfa/0x3b0 [ 369.553565][ T9226] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.553581][ T9226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.553592][ T9226] ? clear_bhb_loop+0x60/0xb0 [ 369.553606][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.553620][ T9226] RIP: 0033:0x7fbb6ab8e929 [ 369.553632][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.553642][ T9226] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.553656][ T9226] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 369.553664][ T9226] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 369.553671][ T9226] RBP: 00007fbb6ba7d090 R08: 0000000000000010 R09: 0000000000000000 [ 369.553678][ T9226] R10: 0000200000004fc0 R11: 0000000000000246 R12: 0000000000000001 [ 369.553685][ T9226] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 369.553703][ T9226] [ 370.129638][ T6474] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 370.216055][ T6451] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 370.392214][ T6451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 370.402149][ T6474] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.596913][ T6474] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.629389][ T9247] sctp: [Deprecated]: syz.1.977 (pid 9247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.629389][ T9247] Use struct sctp_sack_info instead [ 371.029926][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 371.042953][ T6451] usb 4-1: not running at top speed; connect to a high speed hub [ 371.047962][ T6474] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.072035][ T6474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.096554][ T6451] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 371.141241][ T6451] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 371.270082][ T6451] usb 4-1: config 253 has no interface number 0 [ 371.303346][ T6451] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.318996][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 371.427820][ T6474] usb 3-1: usb_control_msg returned -32 [ 371.434091][ T6474] usbtmc 3-1:16.0: can't read capabilities [ 371.472899][ T6451] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 371.491343][ T6451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.498290][ T6451] usb 4-1: Product: syz [ 373.324815][ T6451] usb 4-1: Manufacturer: syz [ 373.330613][ T6451] usb 4-1: SerialNumber: syz [ 373.398101][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 373.405829][ T6451] usb 4-1: can't set config #253, error -32 [ 373.447471][ T5913] usb 4-1: USB disconnect, device number 26 [ 373.723408][ T9275] tmpfs: Bad value for 'mpol' [ 374.160315][ T9273] FAULT_INJECTION: forcing a failure. [ 374.160315][ T9273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.201473][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.4.986 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 374.201508][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.201520][ T9273] Call Trace: [ 374.201528][ T9273] [ 374.201536][ T9273] dump_stack_lvl+0x189/0x250 [ 374.201570][ T9273] ? __pfx____ratelimit+0x10/0x10 [ 374.201599][ T9273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.201625][ T9273] ? __pfx__printk+0x10/0x10 [ 374.201646][ T9273] ? __might_fault+0xb0/0x130 [ 374.201683][ T9273] should_fail_ex+0x414/0x560 [ 374.201714][ T9273] _copy_from_user+0x2d/0xb0 [ 374.201735][ T9273] do_sock_getsockopt+0x1cd/0x650 [ 374.201765][ T9273] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 374.201788][ T9273] ? __pfx_do_syscall_64+0x10/0x10 [ 374.201806][ T9273] ? __fget_files+0x3a0/0x420 [ 374.201831][ T9273] ? __fget_files+0x2a/0x420 [ 374.201988][ T9273] __x64_sys_getsockopt+0x1a5/0x250 [ 374.202025][ T9273] ? __pfx_do_syscall_64+0x10/0x10 [ 374.202046][ T9273] ? __pfx_do_syscall_64+0x10/0x10 [ 374.202069][ T9273] do_syscall_64+0xfa/0x3b0 [ 374.202085][ T9273] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.202112][ T9273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.202131][ T9273] ? clear_bhb_loop+0x60/0xb0 [ 374.202154][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.202172][ T9273] RIP: 0033:0x7fbb6ab8e929 [ 374.202190][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.202206][ T9273] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 374.202228][ T9273] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 374.202241][ T9273] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 374.202252][ T9273] RBP: 00007fbb6ba7d090 R08: 0000200000000300 R09: 0000000000000000 [ 374.202264][ T9273] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.202275][ T9273] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 374.202310][ T9273] [ 374.624010][ T5913] usb 3-1: USB disconnect, device number 21 [ 374.891597][ T6451] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 375.292148][ T9285] program syz.2.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.320877][ T6451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.330869][ T6451] usb 4-1: not running at top speed; connect to a high speed hub [ 375.427670][ T6451] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 375.470490][ T6451] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 375.528891][ T6451] usb 4-1: config 253 has no interface number 0 [ 375.539547][ T6451] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.600649][ T6451] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 375.610432][ T6451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.620188][ T6451] usb 4-1: Product: syz [ 375.624731][ T6451] usb 4-1: Manufacturer: syz [ 375.629889][ T6451] usb 4-1: SerialNumber: syz [ 376.492283][ T9298] delete_channel: no stack [ 376.661366][ T9274] delete_channel: no stack [ 376.690721][ T6451] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 376.708381][ T9307] Invalid ELF header type: 3 != 1 [ 376.717717][ T6451] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 376.738728][ T6451] usb 4-1: USB disconnect, device number 27 [ 377.567148][ T9319] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 377.567148][ T9319] program syz.4.1003 not setting count and/or reply_len properly [ 377.726669][ T9328] bridge0: entered allmulticast mode [ 377.775342][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 377.798754][ T9332] bridge_slave_1: left allmulticast mode [ 377.816036][ T9332] bridge_slave_1: left promiscuous mode [ 377.837965][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.894770][ T9332] bridge_slave_0: left allmulticast mode [ 377.905756][ T9332] bridge_slave_0: left promiscuous mode [ 377.923405][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.359532][ T6451] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 378.649073][ T9348] delete_channel: no stack [ 378.664170][ T6451] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.686712][ T6451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.715558][ T6451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.732832][ T6451] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.754279][ T6451] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.779866][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.803735][ T6451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.828152][ T6451] usb 4-1: config 0 descriptor?? [ 379.301815][ T6451] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 379.361397][ T6451] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 379.457158][ T9361] FAULT_INJECTION: forcing a failure. [ 379.457158][ T9361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.489768][ T9361] CPU: 1 UID: 0 PID: 9361 Comm: syz.1.1018 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 379.489797][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.489808][ T9361] Call Trace: [ 379.489816][ T9361] [ 379.489823][ T9361] dump_stack_lvl+0x189/0x250 [ 379.489854][ T9361] ? __pfx____ratelimit+0x10/0x10 [ 379.489882][ T9361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.489908][ T9361] ? __pfx__printk+0x10/0x10 [ 379.489926][ T9361] ? __might_fault+0xb0/0x130 [ 379.489962][ T9361] should_fail_ex+0x414/0x560 [ 379.489990][ T9361] _copy_from_user+0x2d/0xb0 [ 379.490010][ T9361] ___sys_sendmsg+0x158/0x2a0 [ 379.490038][ T9361] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.490104][ T9361] ? __fget_files+0x2a/0x420 [ 379.490127][ T9361] ? __fget_files+0x3a0/0x420 [ 379.490163][ T9361] __x64_sys_sendmsg+0x19b/0x260 [ 379.490190][ T9361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.490224][ T9361] ? __pfx_ksys_write+0x10/0x10 [ 379.490243][ T9361] ? rcu_is_watching+0x15/0xb0 [ 379.490284][ T9361] ? do_syscall_64+0xbe/0x3b0 [ 379.490306][ T9361] do_syscall_64+0xfa/0x3b0 [ 379.490323][ T9361] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.490349][ T9361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.490366][ T9361] ? clear_bhb_loop+0x60/0xb0 [ 379.490389][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.490407][ T9361] RIP: 0033:0x7f015df8e929 [ 379.490425][ T9361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.490441][ T9361] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.490462][ T9361] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 379.490476][ T9361] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 379.490495][ T9361] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 379.490506][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.490517][ T9361] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 379.490548][ T9361] [ 380.840334][ T6451] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 382.243561][ T9392] batadv3: entered promiscuous mode [ 382.267719][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 382.529707][ T6472] usb 4-1: USB disconnect, device number 28 [ 382.920019][ T9391] kAFS: unparsable volume name [ 383.186264][ T9398] FAULT_INJECTION: forcing a failure. [ 383.186264][ T9398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.790324][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.1.1031 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 383.790356][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.790367][ T9398] Call Trace: [ 383.790376][ T9398] [ 383.790383][ T9398] dump_stack_lvl+0x189/0x250 [ 383.790415][ T9398] ? __pfx____ratelimit+0x10/0x10 [ 383.790443][ T9398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.790469][ T9398] ? __pfx__printk+0x10/0x10 [ 383.790500][ T9398] ? __might_fault+0xb0/0x130 [ 383.790535][ T9398] should_fail_ex+0x414/0x560 [ 383.790562][ T9398] _copy_from_user+0x2d/0xb0 [ 383.790582][ T9398] get_nodes+0x29c/0x390 [ 383.790612][ T9398] ? __pfx_get_nodes+0x10/0x10 [ 383.790652][ T9398] __se_sys_migrate_pages+0xc6/0x660 [ 383.790677][ T9398] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 383.790697][ T9398] ? rcu_is_watching+0x15/0xb0 [ 383.790729][ T9398] ? do_syscall_64+0xbe/0x3b0 [ 383.790751][ T9398] do_syscall_64+0xfa/0x3b0 [ 383.790767][ T9398] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.790794][ T9398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.790812][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 383.790837][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.790855][ T9398] RIP: 0033:0x7f015df8e929 [ 383.790873][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.790890][ T9398] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 383.790912][ T9398] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 383.790926][ T9398] RDX: 0000200000000040 RSI: 0000000000000009 RDI: 0000000000000000 [ 383.790938][ T9398] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 383.790949][ T9398] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 383.790961][ T9398] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 383.790993][ T9398] [ 384.473999][ T6472] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 384.870883][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 385.021761][ T6472] usb 3-1: unable to get BOS descriptor or descriptor too short [ 385.740611][ T6472] usb 3-1: not running at top speed; connect to a high speed hub [ 385.783750][ T6472] usb 3-1: config 253 has an invalid interface number: 140 but max is 0 [ 385.813045][ T6472] usb 3-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 385.851679][ T9418] FAULT_INJECTION: forcing a failure. [ 385.851679][ T9418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.879642][ T6472] usb 3-1: config 253 has no interface number 0 [ 385.900864][ T6472] usb 3-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.915011][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.3.1036 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 385.915037][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.915047][ T9418] Call Trace: [ 385.915054][ T9418] [ 385.915062][ T9418] dump_stack_lvl+0x189/0x250 [ 385.915092][ T9418] ? __pfx____ratelimit+0x10/0x10 [ 385.915119][ T9418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.915143][ T9418] ? __pfx__printk+0x10/0x10 [ 385.915162][ T9418] ? __might_fault+0xb0/0x130 [ 385.915198][ T9418] should_fail_ex+0x414/0x560 [ 385.915227][ T9418] _copy_from_user+0x2d/0xb0 [ 385.915248][ T9418] memdup_user+0x5e/0xd0 [ 385.915266][ T9418] strndup_user+0x68/0xd0 [ 385.915284][ T9418] __se_sys_fsconfig+0x4ce/0x8d0 [ 385.915311][ T9418] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 385.915326][ T9418] ? ksys_write+0x22a/0x250 [ 385.915346][ T9418] ? __pfx_ksys_write+0x10/0x10 [ 385.915361][ T9418] ? rcu_is_watching+0x15/0xb0 [ 385.915387][ T9418] ? do_syscall_64+0xbe/0x3b0 [ 385.915401][ T9418] ? __x64_sys_fsconfig+0x20/0xc0 [ 385.915418][ T9418] do_syscall_64+0xfa/0x3b0 [ 385.915430][ T9418] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.915451][ T9418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.915465][ T9418] ? clear_bhb_loop+0x60/0xb0 [ 385.915483][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.915503][ T9418] RIP: 0033:0x7fe07898e929 [ 385.915517][ T9418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.915530][ T9418] RSP: 002b:00007fe07986c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 385.915547][ T9418] RAX: ffffffffffffffda RBX: 00007fe078bb5fa0 RCX: 00007fe07898e929 [ 385.915558][ T9418] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000006 [ 385.915568][ T9418] RBP: 00007fe07986c090 R08: 0000000000000000 R09: 0000000000000000 [ 385.915577][ T9418] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 385.915585][ T9418] R13: 0000000000000000 R14: 00007fe078bb5fa0 R15: 00007ffc4e338168 [ 385.915610][ T9418] [ 386.222292][ T6472] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 386.232962][ T6472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.246366][ T6472] usb 3-1: Product: syz [ 386.251891][ T6472] usb 3-1: Manufacturer: syz [ 386.256891][ T6472] usb 3-1: SerialNumber: syz [ 386.287995][ T6472] usb 3-1: can't set config #253, error -71 [ 386.306412][ T6472] usb 3-1: USB disconnect, device number 22 [ 386.320720][ T9424] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1039'. [ 386.395920][ T9428] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 386.404637][ T9428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1039'. [ 386.613294][ T9433] ======================================================= [ 386.613294][ T9433] WARNING: The mand mount option has been deprecated and [ 386.613294][ T9433] and is ignored by this kernel. Remove the mand [ 386.613294][ T9433] option from the mount to silence this warning. [ 386.613294][ T9433] ======================================================= [ 386.629297][ T9428] team0: Port device geneve0 added [ 386.664820][ T9433] cgroup: noprefix used incorrectly [ 386.763883][ T9438] FAULT_INJECTION: forcing a failure. [ 386.763883][ T9438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.793459][ T9438] CPU: 1 UID: 0 PID: 9438 Comm: syz.1.1043 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 386.793490][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.793501][ T9438] Call Trace: [ 386.793509][ T9438] [ 386.793518][ T9438] dump_stack_lvl+0x189/0x250 [ 386.793551][ T9438] ? __pfx____ratelimit+0x10/0x10 [ 386.793580][ T9438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.793608][ T9438] ? __pfx__printk+0x10/0x10 [ 386.793653][ T9438] should_fail_ex+0x414/0x560 [ 386.793684][ T9438] _copy_from_user+0x2d/0xb0 [ 386.793707][ T9438] __copy_msghdr+0x3c5/0x5b0 [ 386.793736][ T9438] ___sys_sendmsg+0x1a5/0x2a0 [ 386.793764][ T9438] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.793831][ T9438] ? __fget_files+0x2a/0x420 [ 386.793856][ T9438] ? __fget_files+0x3a0/0x420 [ 386.793891][ T9438] __x64_sys_sendmsg+0x19b/0x260 [ 386.793918][ T9438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.793953][ T9438] ? __pfx_ksys_write+0x10/0x10 [ 386.793972][ T9438] ? rcu_is_watching+0x15/0xb0 [ 386.794004][ T9438] ? do_syscall_64+0xbe/0x3b0 [ 386.794028][ T9438] do_syscall_64+0xfa/0x3b0 [ 386.794043][ T9438] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.794071][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.794089][ T9438] ? clear_bhb_loop+0x60/0xb0 [ 386.794110][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.794128][ T9438] RIP: 0033:0x7f015df8e929 [ 386.794147][ T9438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.794164][ T9438] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.794186][ T9438] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 386.794200][ T9438] RDX: 0000000004044001 RSI: 0000200000000480 RDI: 0000000000000003 [ 386.794212][ T9438] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 386.794224][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.794235][ T9438] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 386.794268][ T9438] [ 387.072645][ T9439] geneve2: entered allmulticast mode [ 387.548369][ T9449] batadv2: entered promiscuous mode [ 387.558993][ T9449] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 389.786604][ T9] IPVS: starting estimator thread 0... [ 390.262993][ T9464] block nbd1: shutting down sockets [ 390.381225][ T9462] IPVS: using max 25 ests per chain, 60000 per kthread [ 392.108388][ T9487] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 392.108388][ T9487] program syz.3.1054 not setting count and/or reply_len properly [ 392.150370][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 392.901085][ T6474] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 392.913614][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.079859][ T6474] usb 5-1: Using ep0 maxpacket: 16 [ 393.384767][ T6474] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.397034][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 393.399498][ T6474] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.445430][ T9] usb 3-1: config 253 has an invalid interface number: 140 but max is 0 [ 393.475287][ T9] usb 3-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 393.501751][ T6474] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 393.533834][ T6474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.542459][ T9] usb 3-1: config 253 has no interface number 0 [ 393.542549][ T9] usb 3-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.546582][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 393.609489][ T6474] usb 5-1: Product: syz [ 393.613730][ T6474] usb 5-1: Manufacturer: syz [ 393.613887][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.618426][ T6474] usb 5-1: SerialNumber: syz [ 393.659690][ T6474] usb 5-1: config 0 descriptor?? [ 393.690700][ T9] usb 3-1: Product: syz [ 393.695190][ T9] usb 3-1: Manufacturer: syz [ 393.710805][ T9] usb 3-1: SerialNumber: syz [ 393.963386][ T9473] delete_channel: no stack [ 393.987321][ T9] usbtest 3-1:253.140: couldn't get endpoints, -22 [ 394.015236][ T9] usbtest 3-1:253.140: probe with driver usbtest failed with error -22 [ 394.070147][ T6474] usb_8dev 5-1:0.0 can0: sending command message failed [ 394.082643][ T6474] usb_8dev 5-1:0.0 can0: can't get firmware version [ 394.114886][ T9] usb 3-1: USB disconnect, device number 23 [ 394.240525][ T6474] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 394.259383][ T6474] usb 5-1: USB disconnect, device number 28 [ 394.307775][ T9500] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 394.307775][ T9500] program syz.3.1059 not setting count and/or reply_len properly [ 394.604311][ T9503] FAULT_INJECTION: forcing a failure. [ 394.604311][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 394.617103][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.1.1060 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 394.617121][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.617129][ T9503] Call Trace: [ 394.617134][ T9503] [ 394.617139][ T9503] dump_stack_lvl+0x189/0x250 [ 394.617160][ T9503] ? __pfx____ratelimit+0x10/0x10 [ 394.617178][ T9503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.617194][ T9503] ? __pfx__printk+0x10/0x10 [ 394.617203][ T9503] ? __lock_acquire+0xab9/0xd20 [ 394.617227][ T9503] should_fail_ex+0x414/0x560 [ 394.617245][ T9503] should_failslab+0xa8/0x100 [ 394.617262][ T9503] kmem_cache_alloc_noprof+0x73/0x3c0 [ 394.617275][ T9503] ? xfrm_state_alloc+0x24/0x2f0 [ 394.617295][ T9503] xfrm_state_alloc+0x24/0x2f0 [ 394.617312][ T9503] xfrm_state_find+0x380d/0x5450 [ 394.617357][ T9503] ? validate_chain+0x897/0x2140 [ 394.617380][ T9503] ? xfrm_state_find+0x229/0x5450 [ 394.617395][ T9503] ? __pfx_xfrm_state_find+0x10/0x10 [ 394.617417][ T9503] xfrm_resolve_and_create_bundle+0x768/0x2f90 [ 394.617447][ T9503] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 394.617464][ T9503] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 394.617481][ T9503] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 394.617505][ T9503] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 394.617562][ T9503] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 394.617637][ T9503] ? xfrm_expand_policies+0x41f/0x6a0 [ 394.617663][ T9503] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 394.617689][ T9503] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 394.617707][ T9503] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 394.617722][ T9503] ? ip6_dst_check+0xe2/0x7e0 [ 394.617737][ T9503] ? __pfx_ip6_dst_check+0x10/0x10 [ 394.617750][ T9503] ? sk_dst_check+0x25/0x480 [ 394.617761][ T9503] ? dst_release+0x79/0x1b0 [ 394.617778][ T9503] xfrm_lookup_route+0x3c/0x1c0 [ 394.617795][ T9503] ip6_sk_dst_lookup_flow+0x790/0x980 [ 394.617809][ T9503] ? up_write+0x1c4/0x420 [ 394.617821][ T9503] ? udpv6_sendmsg+0x178a/0x2710 [ 394.617838][ T9503] udpv6_sendmsg+0x18e7/0x2710 [ 394.617860][ T9503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 394.617879][ T9503] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 394.617900][ T9503] ? smack_socket_sendmsg+0x1a7/0x520 [ 394.617930][ T9503] ? __lock_acquire+0xab9/0xd20 [ 394.617950][ T9503] ? inet_send_prepare+0x5c/0x270 [ 394.617964][ T9503] ? inet6_sendmsg+0xe4/0x120 [ 394.617977][ T9503] __sock_sendmsg+0xe5/0x270 [ 394.617997][ T9503] ____sys_sendmsg+0x52d/0x830 [ 394.618016][ T9503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.618037][ T9503] ? import_iovec+0x74/0xa0 [ 394.618052][ T9503] ___sys_sendmsg+0x21f/0x2a0 [ 394.618069][ T9503] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.618109][ T9503] ? __fget_files+0x2a/0x420 [ 394.618125][ T9503] ? __fget_files+0x3a0/0x420 [ 394.618148][ T9503] __sys_sendmmsg+0x227/0x430 [ 394.618167][ T9503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 394.618184][ T9503] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 394.618223][ T9503] ? ksys_write+0x22a/0x250 [ 394.618246][ T9503] ? __pfx_ksys_write+0x10/0x10 [ 394.618268][ T9503] __x64_sys_sendmmsg+0xa0/0xc0 [ 394.618385][ T9503] do_syscall_64+0xfa/0x3b0 [ 394.618402][ T9503] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.618420][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.618432][ T9503] ? clear_bhb_loop+0x60/0xb0 [ 394.618449][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.618461][ T9503] RIP: 0033:0x7f015df8e929 [ 394.618475][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.618485][ T9503] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 394.618505][ T9503] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 394.618518][ T9503] RDX: 0000000000000020 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 394.618532][ T9503] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 394.618545][ T9503] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 394.618555][ T9503] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 394.618585][ T9503] [ 395.221068][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 395.230750][ T9506] bridge_slave_1: left allmulticast mode [ 395.236877][ T9506] bridge_slave_1: left promiscuous mode [ 395.244173][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.341080][ T9506] bridge_slave_0: left allmulticast mode [ 395.380958][ T9506] bridge_slave_0: left promiscuous mode [ 395.404153][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.938206][ T9520] FAULT_INJECTION: forcing a failure. [ 396.938206][ T9520] name failslab, interval 1, probability 0, space 0, times 0 [ 397.000795][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.4.1066 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 397.000826][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.000838][ T9520] Call Trace: [ 397.000846][ T9520] [ 397.000854][ T9520] dump_stack_lvl+0x189/0x250 [ 397.000889][ T9520] ? __pfx____ratelimit+0x10/0x10 [ 397.000918][ T9520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.000946][ T9520] ? __pfx__printk+0x10/0x10 [ 397.000973][ T9520] ? __pfx___might_resched+0x10/0x10 [ 397.001008][ T9520] should_fail_ex+0x414/0x560 [ 397.001040][ T9520] should_failslab+0xa8/0x100 [ 397.001077][ T9520] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 397.001103][ T9520] ? __alloc_skb+0x112/0x2d0 [ 397.001130][ T9520] __alloc_skb+0x112/0x2d0 [ 397.001157][ T9520] netlink_sendmsg+0x5c6/0xb30 [ 397.001192][ T9520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.001226][ T9520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.001249][ T9520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.001273][ T9520] __sock_sendmsg+0x21c/0x270 [ 397.001319][ T9520] ____sys_sendmsg+0x505/0x830 [ 397.001360][ T9520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.001396][ T9520] ? import_iovec+0x74/0xa0 [ 397.001421][ T9520] ___sys_sendmsg+0x21f/0x2a0 [ 397.001449][ T9520] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.001522][ T9520] ? __fget_files+0x2a/0x420 [ 397.001547][ T9520] ? __fget_files+0x3a0/0x420 [ 397.001585][ T9520] __x64_sys_sendmsg+0x19b/0x260 [ 397.001612][ T9520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.001649][ T9520] ? __pfx_ksys_write+0x10/0x10 [ 397.001669][ T9520] ? rcu_is_watching+0x15/0xb0 [ 397.001704][ T9520] ? do_syscall_64+0xbe/0x3b0 [ 397.001727][ T9520] do_syscall_64+0xfa/0x3b0 [ 397.001743][ T9520] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.001770][ T9520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.001789][ T9520] ? clear_bhb_loop+0x60/0xb0 [ 397.001813][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.001831][ T9520] RIP: 0033:0x7fbb6ab8e929 [ 397.001849][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.001865][ T9520] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.001887][ T9520] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 397.001900][ T9520] RDX: 0000000020000004 RSI: 00002000000029c0 RDI: 0000000000000003 [ 397.001913][ T9520] RBP: 00007fbb6ba7d090 R08: 0000000000000000 R09: 0000000000000000 [ 397.001924][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.001936][ T9520] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 397.001969][ T9520] [ 397.298069][ T9506] bridge0 (unregistering): left allmulticast mode [ 397.870311][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1070'. [ 397.880942][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1070'. [ 398.045782][ T6474] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 398.464034][ T6474] usb 3-1: config 84 has an invalid interface number: 212 but max is 0 [ 398.577699][ T6474] usb 3-1: config 84 has no interface number 0 [ 398.710927][ T5841] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 398.727046][ T6474] usb 3-1: New USB device found, idVendor=04b8, idProduct=0601, bcdDevice= 1.00 [ 398.800954][ T6474] usb 3-1: New USB device strings: Mfr=1, Product=255, SerialNumber=3 [ 398.819295][ T6474] usb 3-1: Product: syz [ 398.831549][ T6474] usb 3-1: Manufacturer: syz [ 398.846471][ T6474] usb 3-1: SerialNumber: syz [ 398.878498][ T6474] usb-storage 3-1:84.212: USB Mass Storage device detected [ 398.922953][ T6474] usb-storage 3-1:84.212: Quirks match for vid 04b8 pid 0601: 8 [ 398.946866][ T6474] usb-storage 3-1:84.212: This device (04b8,0601,0100 S ba P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.15.0-syzkaller-13526-g7a912d04415b) [ 398.946866][ T6474] Please send a copy of this message to and [ 398.983143][ T6472] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 398.989296][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 399.040078][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.059485][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.096032][ T5841] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 399.117835][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.143227][ T5841] usb 5-1: Product: syz [ 399.150687][ T9553] openvswitch: netlink: Actions may not be safe on all matching packets [ 399.179607][ T5841] usb 5-1: Manufacturer: syz [ 399.187879][ T5841] usb 5-1: SerialNumber: syz [ 399.247419][ T9553] tmpfs: Unknown parameter 'grpquo' [ 399.254621][ T5841] usb 5-1: config 0 descriptor?? [ 399.525806][ T9553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.031781][ T6472] usb 2-1: unable to get BOS descriptor or descriptor too short [ 400.041200][ T6472] usb 2-1: not running at top speed; connect to a high speed hub [ 400.069831][ T6472] usb 2-1: config 253 has an invalid interface number: 140 but max is 0 [ 400.078446][ T6472] usb 2-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 400.090681][ T6472] usb 2-1: config 253 has no interface number 0 [ 400.097101][ T6472] usb 2-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.100312][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1071'. [ 400.113608][ T6472] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 400.150947][ T5841] usb_8dev 5-1:0.0 can0: sending command message failed [ 400.153445][ T6472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.158203][ T5841] usb_8dev 5-1:0.0 can0: can't get firmware version [ 400.469864][ T6472] usb 2-1: Product: syz [ 400.511478][ T6472] usb 2-1: Manufacturer: syz [ 400.660551][ T6472] usb 2-1: SerialNumber: syz [ 400.872934][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.915982][ T5841] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 400.935912][ T6459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.959485][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.990606][ T9] usb 3-1: USB disconnect, device number 24 [ 401.029026][ T5841] usb 5-1: USB disconnect, device number 29 [ 401.102750][ T9570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1081'. [ 401.270600][ T9567] FAULT_INJECTION: forcing a failure. [ 401.270600][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 401.284164][ T6474] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.315492][ T9538] delete_channel: no stack [ 401.319742][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.3.1079 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 401.319772][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.319782][ T9567] Call Trace: [ 401.319791][ T9567] [ 401.319799][ T9567] dump_stack_lvl+0x189/0x250 [ 401.319829][ T9567] ? __pfx____ratelimit+0x10/0x10 [ 401.319859][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.319883][ T9567] ? __pfx__printk+0x10/0x10 [ 401.319907][ T9567] ? __pfx___might_resched+0x10/0x10 [ 401.319930][ T9567] ? fs_reclaim_acquire+0x7d/0x100 [ 401.319959][ T9567] should_fail_ex+0x414/0x560 [ 401.319986][ T9567] should_failslab+0xa8/0x100 [ 401.320011][ T9567] __kmalloc_noprof+0xcb/0x4f0 [ 401.320032][ T9567] ? security_prepare_creds+0x52/0x390 [ 401.320063][ T9567] security_prepare_creds+0x52/0x390 [ 401.320091][ T9567] prepare_creds+0x497/0x6c0 [ 401.320116][ T9567] __sys_setresgid+0x584/0x8f0 [ 401.320148][ T9567] do_syscall_64+0xfa/0x3b0 [ 401.320164][ T9567] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.320191][ T9567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.320209][ T9567] ? clear_bhb_loop+0x60/0xb0 [ 401.320232][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.320250][ T9567] RIP: 0033:0x7fe07898e929 [ 401.320269][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.320284][ T9567] RSP: 002b:00007fe07986c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 401.320306][ T9567] RAX: ffffffffffffffda RBX: 00007fe078bb5fa0 RCX: 00007fe07898e929 [ 401.320320][ T9567] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee00 [ 401.320332][ T9567] RBP: 00007fe07986c090 R08: 0000000000000000 R09: 0000000000000000 [ 401.320344][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.320354][ T9567] R13: 0000000000000000 R14: 00007fe078bb5fa0 R15: 00007ffc4e338168 [ 401.320387][ T9567] [ 401.647633][ T6472] usbtest 2-1:253.140: couldn't get endpoints, -22 [ 401.678943][ T6472] usbtest 2-1:253.140: probe with driver usbtest failed with error -22 [ 401.791154][ T9582] xt_hashlimit: size too large, truncated to 1048576 [ 401.799911][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.913080][ T6472] usb 2-1: USB disconnect, device number 34 [ 402.029696][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 404.839404][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.088160][ T30] audit: type=1804 audit(1749300873.923:162): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1094" name="/newroot/144/bus" dev="tmpfs" ino=775 res=1 errno=0 [ 406.146652][ T30] audit: type=1326 audit(1749300874.013:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 406.207982][ T30] audit: type=1326 audit(1749300874.063:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 406.250909][ T30] audit: type=1326 audit(1749300874.063:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 406.288554][ T30] audit: type=1326 audit(1749300874.063:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 406.358068][ T30] audit: type=1326 audit(1749300874.063:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 406.476444][ T30] audit: type=1326 audit(1749300874.063:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 407.059384][ T30] audit: type=1326 audit(1749300874.063:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 407.205587][ T30] audit: type=1326 audit(1749300874.063:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 407.225377][ T9633] delete_channel: no stack [ 407.249647][ T6474] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 407.258654][ T30] audit: type=1326 audit(1749300874.063:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07898e929 code=0x7ffc0000 [ 407.430407][ T6474] usb 2-1: device descriptor read/64, error -71 [ 407.669674][ T6474] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 407.923571][ T6474] usb 2-1: device descriptor read/64, error -71 [ 408.090737][ T6474] usb usb2-port1: attempt power cycle [ 408.459898][ T6474] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 408.490460][ T6474] usb 2-1: device descriptor read/8, error -71 [ 408.779714][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 408.890943][ T9673] fuse: Unknown parameter 'v0x0000000000000003' [ 408.929970][ T6474] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 408.972914][ T9] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 408.980694][ T6474] usb 2-1: device descriptor read/8, error -71 [ 409.001688][ T9] usb 3-1: config 5 has no interface number 0 [ 409.024989][ T9] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 409.063845][ T9] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 409.076001][ T9] usb 3-1: config 5 interface 123 has no altsetting 0 [ 409.088290][ T9] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 409.098332][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.113132][ T9] usb 3-1: Product: syz [ 409.117525][ T9] usb 3-1: Manufacturer: syz [ 409.123563][ T9] usb 3-1: SerialNumber: syz [ 409.242141][ T6474] usb usb2-port1: unable to enumerate USB device [ 411.913770][ T9693] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 411.913770][ T9693] program syz.4.1117 not setting count and/or reply_len properly [ 412.063872][ T9] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 412.093662][ T6451] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 412.413767][ T9] usb 3-1: USB disconnect, device number 25 [ 412.679419][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.746438][ T6451] usb 2-1: unable to get BOS descriptor or descriptor too short [ 413.017732][ T9705] overlayfs: failed to clone lowerpath [ 413.836675][ T9707] FAULT_INJECTION: forcing a failure. [ 413.836675][ T9707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.850601][ T9707] CPU: 1 UID: 0 PID: 9707 Comm: syz.3.1121 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 413.850629][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.850639][ T9707] Call Trace: [ 413.850647][ T9707] [ 413.850656][ T9707] dump_stack_lvl+0x189/0x250 [ 413.850689][ T9707] ? __pfx____ratelimit+0x10/0x10 [ 413.850718][ T9707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.850746][ T9707] ? __pfx__printk+0x10/0x10 [ 413.850766][ T9707] ? __might_fault+0xb0/0x130 [ 413.850801][ T9707] should_fail_ex+0x414/0x560 [ 413.850833][ T9707] _copy_from_user+0x2d/0xb0 [ 413.850854][ T9707] copy_bpf_fprog_from_user+0x15c/0x2b0 [ 413.850885][ T9707] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 413.850923][ T9707] sk_setsockopt+0x1783/0x2d30 [ 413.850956][ T9707] ? __pfx_sk_setsockopt+0x10/0x10 [ 413.850977][ T9707] ? vfs_write+0x8d8/0xa90 [ 413.851017][ T9707] ? __lock_acquire+0xab9/0xd20 [ 413.851055][ T9707] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 413.851082][ T9707] do_sock_setsockopt+0x201/0x3e0 [ 413.851109][ T9707] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 413.851147][ T9707] ? __fget_files+0x2a/0x420 [ 413.851183][ T9707] __x64_sys_setsockopt+0x18b/0x220 [ 413.851212][ T9707] do_syscall_64+0xfa/0x3b0 [ 413.851231][ T9707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.851249][ T9707] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 413.851267][ T9707] ? clear_bhb_loop+0x60/0xb0 [ 413.851290][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.851308][ T9707] RIP: 0033:0x7fe07898e929 [ 413.851326][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.851343][ T9707] RSP: 002b:00007fe07982a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.851362][ T9707] RAX: ffffffffffffffda RBX: 00007fe078bb6160 RCX: 00007fe07898e929 [ 413.851376][ T9707] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000008 [ 413.851387][ T9707] RBP: 00007fe07982a090 R08: 0000000000000010 R09: 0000000000000000 [ 413.851400][ T9707] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 413.851411][ T9707] R13: 0000000000000000 R14: 00007fe078bb6160 R15: 00007ffc4e338168 [ 413.851443][ T9707] [ 414.193161][ T9707] overlayfs: overlapping lowerdir path [ 414.312176][ T6451] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 414.356357][ T6451] usb 2-1: can't read configurations, error -71 [ 414.994526][ T9718] batadv4: entered promiscuous mode [ 415.001438][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 416.178150][ T9720] batadv2: entered promiscuous mode [ 416.185714][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 416.699617][ T6474] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 417.039363][ T6474] usb 5-1: Using ep0 maxpacket: 8 [ 417.054052][ T6474] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 417.227735][ T6474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.246665][ T6474] usb 5-1: Product: syz [ 418.007970][ T6474] usb 5-1: Manufacturer: syz [ 418.016321][ T6474] usb 5-1: SerialNumber: syz [ 418.025821][ T6474] usb 5-1: config 0 descriptor?? [ 418.175361][ T9734] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 418.250091][ T6474] usb 5-1: can't set config #0, error -71 [ 418.312877][ T6474] usb 5-1: USB disconnect, device number 30 [ 418.443628][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 418.443652][ T30] audit: type=1326 audit(1749300886.303:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9736 comm="syz.1.1130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f015df8e929 code=0x0 [ 418.552695][ T9744] FAULT_INJECTION: forcing a failure. [ 418.552695][ T9744] name failslab, interval 1, probability 0, space 0, times 0 [ 418.566482][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.4.1132 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 418.566509][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.566519][ T9744] Call Trace: [ 418.566526][ T9744] [ 418.566534][ T9744] dump_stack_lvl+0x189/0x250 [ 418.566565][ T9744] ? __pfx____ratelimit+0x10/0x10 [ 418.566591][ T9744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.566617][ T9744] ? __pfx__printk+0x10/0x10 [ 418.566640][ T9744] ? __pfx___might_resched+0x10/0x10 [ 418.566668][ T9744] ? fs_reclaim_acquire+0x7d/0x100 [ 418.566702][ T9744] should_fail_ex+0x414/0x560 [ 418.566733][ T9744] should_failslab+0xa8/0x100 [ 418.566761][ T9744] __kmalloc_noprof+0xcb/0x4f0 [ 418.566783][ T9744] ? tomoyo_encode+0x28b/0x550 [ 418.566816][ T9744] tomoyo_encode+0x28b/0x550 [ 418.566851][ T9744] tomoyo_realpath_from_path+0x58d/0x5d0 [ 418.566893][ T9744] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 418.566918][ T9744] tomoyo_path_number_perm+0x1e8/0x5a0 [ 418.566947][ T9744] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.567005][ T9744] ? __lock_acquire+0xab9/0xd20 [ 418.567055][ T9744] ? __fget_files+0x2a/0x420 [ 418.567086][ T9744] ? __fget_files+0x2a/0x420 [ 418.567109][ T9744] ? __fget_files+0x3a0/0x420 [ 418.567133][ T9744] ? __fget_files+0x2a/0x420 [ 418.567164][ T9744] security_file_ioctl+0xcb/0x2d0 [ 418.567194][ T9744] __se_sys_ioctl+0x47/0x170 [ 418.567218][ T9744] do_syscall_64+0xfa/0x3b0 [ 418.567237][ T9744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.567255][ T9744] ? asm_sysvec_call_function_single+0x1a/0x20 [ 418.567275][ T9744] ? clear_bhb_loop+0x60/0xb0 [ 418.567299][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.567318][ T9744] RIP: 0033:0x7fbb6ab8e929 [ 418.567338][ T9744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.567354][ T9744] RSP: 002b:00007fbb6ba5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.567375][ T9744] RAX: ffffffffffffffda RBX: 00007fbb6adb6080 RCX: 00007fbb6ab8e929 [ 418.567389][ T9744] RDX: 0000200000000540 RSI: 00000000c05064a7 RDI: 0000000000000007 [ 418.567401][ T9744] RBP: 00007fbb6ba5c090 R08: 0000000000000000 R09: 0000000000000000 [ 418.567413][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.567424][ T9744] R13: 0000000000000000 R14: 00007fbb6adb6080 R15: 00007fff11f5f278 [ 418.567458][ T9744] [ 418.568183][ T9744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 418.676635][ T9743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.649628][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 419.711913][ T9759] FAULT_INJECTION: forcing a failure. [ 419.711913][ T9759] name failslab, interval 1, probability 0, space 0, times 0 [ 419.731434][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.4.1136 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 419.731463][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.731479][ T9759] Call Trace: [ 419.731488][ T9759] [ 419.731497][ T9759] dump_stack_lvl+0x189/0x250 [ 419.731530][ T9759] ? __pfx____ratelimit+0x10/0x10 [ 419.731560][ T9759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.731586][ T9759] ? __pfx__printk+0x10/0x10 [ 419.731612][ T9759] ? __pfx___might_resched+0x10/0x10 [ 419.731645][ T9759] should_fail_ex+0x414/0x560 [ 419.731676][ T9759] should_failslab+0xa8/0x100 [ 419.731703][ T9759] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 419.731728][ T9759] ? __alloc_skb+0x112/0x2d0 [ 419.731755][ T9759] __alloc_skb+0x112/0x2d0 [ 419.731781][ T9759] netlink_sendmsg+0x5c6/0xb30 [ 419.731843][ T9759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.731877][ T9759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.731900][ T9759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.731925][ T9759] __sock_sendmsg+0x21c/0x270 [ 419.731967][ T9759] ____sys_sendmsg+0x505/0x830 [ 419.731999][ T9759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.732035][ T9759] ? import_iovec+0x74/0xa0 [ 419.732060][ T9759] ___sys_sendmsg+0x21f/0x2a0 [ 419.732087][ T9759] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.732156][ T9759] ? __fget_files+0x2a/0x420 [ 419.732180][ T9759] ? __fget_files+0x3a0/0x420 [ 419.732216][ T9759] __x64_sys_sendmsg+0x19b/0x260 [ 419.732243][ T9759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.732276][ T9759] ? __pfx_ksys_write+0x10/0x10 [ 419.732296][ T9759] ? rcu_is_watching+0x15/0xb0 [ 419.732328][ T9759] ? do_syscall_64+0xbe/0x3b0 [ 419.732349][ T9759] do_syscall_64+0xfa/0x3b0 [ 419.732364][ T9759] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.732388][ T9759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.732404][ T9759] ? clear_bhb_loop+0x60/0xb0 [ 419.732426][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.732443][ T9759] RIP: 0033:0x7fbb6ab8e929 [ 419.732462][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.732478][ T9759] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.732499][ T9759] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 419.732512][ T9759] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000005 [ 419.732523][ T9759] RBP: 00007fbb6ba7d090 R08: 0000000000000000 R09: 0000000000000000 [ 419.732535][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.732546][ T9759] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 419.732578][ T9759] [ 419.761221][ T9761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'. [ 420.224926][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 420.242748][ T9764] batadv1: entered promiscuous mode [ 420.250265][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 420.276062][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 420.310639][ T9] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 420.329215][ T9] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 420.349744][ T9] usb 4-1: config 253 has no interface number 0 [ 420.366446][ T9] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.411555][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 420.435980][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.436010][ T9] usb 4-1: Product: syz [ 420.436025][ T9] usb 4-1: Manufacturer: syz [ 420.436040][ T9] usb 4-1: SerialNumber: syz [ 420.880075][ T9741] delete_channel: no stack [ 420.907338][ T9] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 420.941163][ T9] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 420.993365][ T9] usb 4-1: USB disconnect, device number 30 [ 421.248823][ T9779] FAULT_INJECTION: forcing a failure. [ 421.248823][ T9779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.262160][ T9779] CPU: 0 UID: 0 PID: 9779 Comm: syz.4.1145 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 421.262177][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.262184][ T9779] Call Trace: [ 421.262189][ T9779] [ 421.262193][ T9779] dump_stack_lvl+0x189/0x250 [ 421.262215][ T9779] ? __pfx____ratelimit+0x10/0x10 [ 421.262233][ T9779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.262249][ T9779] ? __pfx__printk+0x10/0x10 [ 421.262261][ T9779] ? __might_fault+0xb0/0x130 [ 421.262283][ T9779] should_fail_ex+0x414/0x560 [ 421.262301][ T9779] _copy_from_user+0x2d/0xb0 [ 421.262313][ T9779] memdup_user+0x5e/0xd0 [ 421.262324][ T9779] proc_pid_attr_write+0x4ff/0x630 [ 421.262339][ T9779] ? proc_pid_attr_write+0xc3/0x630 [ 421.262358][ T9779] vfs_writev+0x4b6/0x960 [ 421.262376][ T9779] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 421.262393][ T9779] ? __pfx_vfs_writev+0x10/0x10 [ 421.262420][ T9779] ? __fget_files+0x2a/0x420 [ 421.262438][ T9779] ? __fget_files+0x3a0/0x420 [ 421.262452][ T9779] ? __fget_files+0x2a/0x420 [ 421.262477][ T9779] do_writev+0x14d/0x2d0 [ 421.262495][ T9779] ? __pfx_do_writev+0x10/0x10 [ 421.262510][ T9779] ? rcu_is_watching+0x15/0xb0 [ 421.262531][ T9779] ? do_syscall_64+0xbe/0x3b0 [ 421.262545][ T9779] do_syscall_64+0xfa/0x3b0 [ 421.262555][ T9779] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.262571][ T9779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.262582][ T9779] ? clear_bhb_loop+0x60/0xb0 [ 421.262597][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.262607][ T9779] RIP: 0033:0x7fbb6ab8e929 [ 421.262619][ T9779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.262629][ T9779] RSP: 002b:00007fbb6ba7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 421.262643][ T9779] RAX: ffffffffffffffda RBX: 00007fbb6adb5fa0 RCX: 00007fbb6ab8e929 [ 421.262651][ T9779] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000008 [ 421.262659][ T9779] RBP: 00007fbb6ba7d090 R08: 0000000000000000 R09: 0000000000000000 [ 421.262666][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.262672][ T9779] R13: 0000000000000000 R14: 00007fbb6adb5fa0 R15: 00007fff11f5f278 [ 421.262691][ T9779] [ 423.347687][ T9803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.540040][ T9809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 423.540040][ T9809] program syz.4.1154 not setting count and/or reply_len properly [ 423.707857][ T9805] bond1: (slave veth3): Enslaving as an active interface with a down link [ 424.626402][ T9816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.638110][ T9816] FAULT_INJECTION: forcing a failure. [ 424.638110][ T9816] name failslab, interval 1, probability 0, space 0, times 0 [ 424.651676][ T9816] CPU: 1 UID: 0 PID: 9816 Comm: syz.1.1156 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 424.651705][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.651717][ T9816] Call Trace: [ 424.651725][ T9816] [ 424.651734][ T9816] dump_stack_lvl+0x189/0x250 [ 424.651786][ T9816] ? __pfx____ratelimit+0x10/0x10 [ 424.651816][ T9816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.651843][ T9816] ? __pfx__printk+0x10/0x10 [ 424.651870][ T9816] ? __pfx___might_resched+0x10/0x10 [ 424.651903][ T9816] should_fail_ex+0x414/0x560 [ 424.651935][ T9816] should_failslab+0xa8/0x100 [ 424.651963][ T9816] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 424.651989][ T9816] ? __alloc_skb+0x112/0x2d0 [ 424.652015][ T9816] __alloc_skb+0x112/0x2d0 [ 424.652043][ T9816] netlink_sendmsg+0x5c6/0xb30 [ 424.652079][ T9816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.652112][ T9816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.652146][ T9816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.652169][ T9816] __sock_sendmsg+0x21c/0x270 [ 424.652202][ T9816] ____sys_sendmsg+0x505/0x830 [ 424.652234][ T9816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.652270][ T9816] ? import_iovec+0x74/0xa0 [ 424.652296][ T9816] ___sys_sendmsg+0x21f/0x2a0 [ 424.652323][ T9816] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.652391][ T9816] ? __fget_files+0x2a/0x420 [ 424.652416][ T9816] ? __fget_files+0x3a0/0x420 [ 424.652454][ T9816] __x64_sys_sendmsg+0x19b/0x260 [ 424.652480][ T9816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.652515][ T9816] ? __pfx_ksys_write+0x10/0x10 [ 424.652536][ T9816] ? rcu_is_watching+0x15/0xb0 [ 424.652569][ T9816] ? do_syscall_64+0xbe/0x3b0 [ 424.652593][ T9816] do_syscall_64+0xfa/0x3b0 [ 424.652610][ T9816] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.652637][ T9816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.652656][ T9816] ? clear_bhb_loop+0x60/0xb0 [ 424.652680][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.652699][ T9816] RIP: 0033:0x7f015df8e929 [ 424.652717][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.652733][ T9816] RSP: 002b:00007f015edc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.652756][ T9816] RAX: ffffffffffffffda RBX: 00007f015e1b5fa0 RCX: 00007f015df8e929 [ 424.652770][ T9816] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.652782][ T9816] RBP: 00007f015edc8090 R08: 0000000000000000 R09: 0000000000000000 [ 424.652795][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.652806][ T9816] R13: 0000000000000000 R14: 00007f015e1b5fa0 R15: 00007ffec7147c78 [ 424.652839][ T9816] [ 425.212250][ T9827] FAULT_INJECTION: forcing a failure. [ 425.212250][ T9827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.285818][ T9818] batadv3: entered promiscuous mode [ 425.293347][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 425.379401][ T9827] CPU: 0 UID: 0 PID: 9827 Comm: syz.1.1159 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 425.379432][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.379444][ T9827] Call Trace: [ 425.379452][ T9827] [ 425.379462][ T9827] dump_stack_lvl+0x189/0x250 [ 425.379502][ T9827] ? __pfx____ratelimit+0x10/0x10 [ 425.379533][ T9827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.379560][ T9827] ? __pfx__printk+0x10/0x10 [ 425.379596][ T9827] should_fail_ex+0x414/0x560 [ 425.379627][ T9827] strncpy_from_user+0x36/0x290 [ 425.379657][ T9827] getname_flags+0xf3/0x540 [ 425.379691][ T9827] do_sys_openat2+0xbc/0x1c0 [ 425.379714][ T9827] ? __pfx_do_sys_openat2+0x10/0x10 [ 425.379734][ T9827] ? ksys_write+0x22a/0x250 [ 425.379760][ T9827] ? __pfx_ksys_write+0x10/0x10 [ 425.379790][ T9827] __x64_sys_creat+0x8f/0xc0 [ 425.379814][ T9827] do_syscall_64+0xfa/0x3b0 [ 425.379832][ T9827] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.379859][ T9827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.379877][ T9827] ? clear_bhb_loop+0x60/0xb0 [ 425.379901][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.379920][ T9827] RIP: 0033:0x7f015df8e929 [ 425.379938][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.379954][ T9827] RSP: 002b:00007f015ed42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 425.379977][ T9827] RAX: ffffffffffffffda RBX: 00007f015e1b6080 RCX: 00007f015df8e929 [ 425.379990][ T9827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 425.380003][ T9827] RBP: 00007f015ed42090 R08: 0000000000000000 R09: 0000000000000000 [ 425.380015][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.380026][ T9827] R13: 0000000000000001 R14: 00007f015e1b6080 R15: 00007ffec7147c78 [ 425.380060][ T9827] [ 426.430167][ T6451] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 426.657076][ T6451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.865061][ T6451] usb 4-1: not running at top speed; connect to a high speed hub [ 426.905455][ T6451] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 426.987246][ T6451] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 427.256039][ T6451] usb 4-1: config 253 has no interface number 0 [ 427.385238][ T6451] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.399379][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.428281][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 427.527763][ T9854] FAULT_INJECTION: forcing a failure. [ 427.527763][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 427.653390][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.2.1167 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 427.653421][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.653433][ T9854] Call Trace: [ 427.653441][ T9854] [ 427.653449][ T9854] dump_stack_lvl+0x189/0x250 [ 427.653482][ T9854] ? __pfx____ratelimit+0x10/0x10 [ 427.653510][ T9854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.653536][ T9854] ? __pfx__printk+0x10/0x10 [ 427.653563][ T9854] ? __pfx___might_resched+0x10/0x10 [ 427.653588][ T9854] ? fs_reclaim_acquire+0x7d/0x100 [ 427.653619][ T9854] should_fail_ex+0x414/0x560 [ 427.653649][ T9854] ? xt_alloc_table_info+0x3b/0xa0 [ 427.653673][ T9854] should_failslab+0xa8/0x100 [ 427.653699][ T9854] __kvmalloc_node_noprof+0x161/0x5f0 [ 427.653722][ T9854] ? xt_alloc_table_info+0x3b/0xa0 [ 427.653754][ T9854] xt_alloc_table_info+0x3b/0xa0 [ 427.653780][ T9854] do_ipt_set_ctl+0x881/0xcd0 [ 427.653812][ T9854] ? rcu_is_watching+0x15/0xb0 [ 427.653838][ T9854] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 427.653890][ T9854] ? __pfx___mutex_lock+0x10/0x10 [ 427.653910][ T9854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 427.653947][ T9854] nf_setsockopt+0x26f/0x290 [ 427.653975][ T9854] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 427.653997][ T9854] do_sock_setsockopt+0x25a/0x3e0 [ 427.654023][ T9854] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 427.654050][ T9854] ? __fget_files+0x2a/0x420 [ 427.654086][ T9854] __x64_sys_setsockopt+0x18b/0x220 [ 427.654116][ T9854] do_syscall_64+0xfa/0x3b0 [ 427.654132][ T9854] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.654162][ T9854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.654180][ T9854] ? clear_bhb_loop+0x60/0xb0 [ 427.654202][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.654219][ T9854] RIP: 0033:0x7f756278e929 [ 427.654237][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.654253][ T9854] RSP: 002b:00007f756365e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 427.654276][ T9854] RAX: ffffffffffffffda RBX: 00007f75629b6080 RCX: 00007f756278e929 [ 427.654289][ T9854] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 427.654301][ T9854] RBP: 00007f756365e090 R08: 0000000000000350 R09: 0000000000000000 [ 427.654313][ T9854] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 427.654324][ T9854] R13: 0000000000000000 R14: 00007f75629b6080 R15: 00007ffce776e8c8 [ 427.654352][ T9854] [ 427.654959][ T6451] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 427.958328][ T6451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.968266][ T6451] usb 4-1: Product: syz [ 427.972566][ T6451] usb 4-1: Manufacturer: syz [ 427.977247][ T6451] usb 4-1: SerialNumber: syz [ 533.009097][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 533.016112][ C0] rcu: 1-...!: (1 GPs behind) idle=ac24/1/0x4000000000000000 softirq=41237/41238 fqs=2 [ 533.026827][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2997/1:b..l [ 533.034781][ C0] rcu: (detected by 0, t=10505 jiffies, g=35997, q=1656 ncpus=2) [ 533.042612][ C0] Sending NMI from CPU 0 to CPUs 1: [ 533.042642][ C1] NMI backtrace for cpu 1 [ 533.042656][ C1] CPU: 1 UID: 0 PID: 9855 Comm: syz.0.1168 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 533.042676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.042685][ C1] RIP: 0010:lock_release+0xaf/0x3e0 [ 533.042710][ C1] Code: 0a 00 00 00 0f 85 1e 02 00 00 49 81 3e 40 63 5d 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 48 c7 c7 52 15 98 8d e8 d4 ad c0 09 65 ff 05 cd aa fb 10 c7 44 [ 533.042730][ C1] RSP: 0018:ffffc90000a08c08 EFLAGS: 00000002 [ 533.042745][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 82480a3499935700 [ 533.042756][ C1] RDX: 0000000000010000 RSI: ffffffff8be1afa0 RDI: ffffffff8be1af60 [ 533.042767][ C1] RBP: 0000000000000001 R08: ffff888028bb815f R09: 1ffff1100517702b [ 533.042778][ C1] R10: dffffc0000000000 R11: ffffed100517702c R12: ffff888028bb8360 [ 533.042790][ C1] R13: ffffffff897e8248 R14: ffffffff8e13f060 R15: ffff888055641e00 [ 533.042802][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 533.042815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.042826][ C1] CR2: 0000001b305129c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 533.042841][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 533.042851][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 533.042861][ C1] Call Trace: [ 533.042869][ C1] [ 533.042879][ C1] ? advance_sched+0x9f8/0xc90 [ 533.042902][ C1] advance_sched+0xb23/0xc90 [ 533.042928][ C1] ? __pfx_advance_sched+0x10/0x10 [ 533.042946][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 533.042976][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 533.042996][ C1] ? read_tsc+0x9/0x20 [ 533.043017][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 533.043050][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 533.043074][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 533.043096][ C1] [ 533.043102][ C1] [ 533.043108][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.043125][ C1] RIP: 0010:page_table_check_clear+0xf8/0x700 [ 533.043146][ C1] Code: b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 3d 04 00 00 41 0f b6 6c 24 03 c1 e5 18 bf 00 00 00 f5 89 ee e8 78 a3 93 ff <81> fd 00 00 00 f5 0f 84 5a 04 00 00 48 b8 00 00 00 00 00 fc ff df [ 533.043159][ C1] RSP: 0018:ffffc9000cbb7590 EFLAGS: 00000293 [ 533.043173][ C1] RAX: ffffffff822cab98 RBX: 1ffffd40002fd1d1 RCX: 0000000000000000 [ 533.043184][ C1] RDX: ffff888055641e00 RSI: 0000000000000000 RDI: 00000000f5000000 [ 533.043195][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822cc52a [ 533.043206][ C1] R10: dffffc0000000000 R11: fffff940002fd1d1 R12: ffffea00017e8eb0 [ 533.043217][ C1] R13: ffffea00017e8e80 R14: 0000000000000001 R15: ffffea00017e8e88 [ 533.043231][ C1] ? pfn_valid+0xba/0x490 [ 533.043249][ C1] ? page_table_check_clear+0xf8/0x700 [ 533.043272][ C1] ? vm_normal_page+0xb7/0x230 [ 533.043294][ C1] unmap_page_range+0x3249/0x41c0 [ 533.043336][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 533.043362][ C1] ? unmap_vmas+0x144/0x580 [ 533.043384][ C1] unmap_vmas+0x399/0x580 [ 533.043409][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 533.043441][ C1] exit_mmap+0x248/0xb50 [ 533.043459][ C1] ? uprobe_clear_state+0x20f/0x290 [ 533.043480][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 533.043497][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 533.043517][ C1] ? __pfx_exit_aio+0x10/0x10 [ 533.043540][ C1] ? uprobe_clear_state+0x274/0x290 [ 533.043557][ C1] ? mm_update_next_owner+0xa7/0x870 [ 533.043576][ C1] __mmput+0x118/0x420 [ 533.043597][ C1] exit_mm+0x1da/0x2c0 [ 533.043614][ C1] ? __pfx_exit_mm+0x10/0x10 [ 533.043632][ C1] ? rcu_is_watching+0x15/0xb0 [ 533.043654][ C1] do_exit+0x640/0x22e0 [ 533.043673][ C1] ? preempt_schedule_common+0x83/0xd0 [ 533.043693][ C1] ? preempt_schedule+0xae/0xc0 [ 533.043712][ C1] ? __pfx_do_exit+0x10/0x10 [ 533.043739][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 533.043760][ C1] do_group_exit+0x21c/0x2d0 [ 533.043780][ C1] __x64_sys_exit_group+0x3f/0x40 [ 533.043796][ C1] x64_sys_call+0x21ba/0x21c0 [ 533.043810][ C1] do_syscall_64+0xfa/0x3b0 [ 533.043824][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.043844][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.043858][ C1] ? clear_bhb_loop+0x60/0xb0 [ 533.043875][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.043889][ C1] RIP: 0033:0x7f6ddc78e929 [ 533.043903][ C1] Code: Unable to access opcode bytes at 0x7f6ddc78e8ff. [ 533.043910][ C1] RSP: 002b:00007ffd9ee401c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 533.043926][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ddc78e929 [ 533.043936][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.043945][ C1] RBP: 00007ffd9ee4022c R08: 000000039ee402bf R09: 00000000000927c0 [ 533.043956][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000011f [ 533.043965][ C1] R13: 00000000000927c0 R14: 00000000000685bf R15: 00007ffd9ee40280 [ 533.043982][ C1] [ 533.044636][ C0] task:kworker/u8:9 state:R running task stack:20168 pid:2997 tgid:2997 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 533.554878][ C0] Workqueue: bat_events batadv_nc_worker [ 533.560574][ C0] Call Trace: [ 533.563896][ C0] [ 533.566865][ C0] __schedule+0x16a2/0x4cb0 [ 533.571429][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 533.576761][ C0] ? __pfx___schedule+0x10/0x10 [ 533.581653][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 533.586885][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 533.592204][ C0] preempt_schedule_irq+0xb5/0x150 [ 533.597350][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 533.603114][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 533.609052][ C0] irqentry_exit+0x6f/0x90 [ 533.613501][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.619510][ C0] RIP: 0010:rcu_is_watching+0x9/0xb0 [ 533.624831][ C0] Code: 48 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <65> ff 05 d0 8a f2 10 e8 7b cc b7 09 89 c3 83 f8 08 73 65 49 bf 00 [ 533.644479][ C0] RSP: 0018:ffffc9000b227a00 EFLAGS: 00000202 [ 533.650578][ C0] RAX: ffffffff8b2c9223 RBX: 0000000000000001 RCX: 0000000000000000 [ 533.658572][ C0] RDX: ffff88802fa73c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 533.666576][ C0] RBP: ffff88807b851898 R08: 0000000000000000 R09: ffffffff8b2c91f2 [ 533.674568][ C0] R10: dffffc0000000000 R11: ffffffff8b2c9120 R12: dffffc0000000000 [ 533.682565][ C0] R13: ffffffff8b2c91f2 R14: ffff888057ad8d80 R15: 0000000000000313 [ 533.690582][ C0] ? batadv_nc_worker+0xd2/0x610 [ 533.695640][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 533.701038][ C0] ? batadv_nc_worker+0xd2/0x610 [ 533.706002][ C0] ? batadv_nc_worker+0x103/0x610 [ 533.711063][ C0] batadv_nc_worker+0x10c/0x610 [ 533.715947][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 533.721699][ C0] process_scheduled_works+0xade/0x17b0 [ 533.727306][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.733337][ C0] worker_thread+0x8a0/0xda0 [ 533.738079][ C0] kthread+0x70e/0x8a0 [ 533.742180][ C0] ? __pfx_worker_thread+0x10/0x10 [ 533.747332][ C0] ? __pfx_kthread+0x10/0x10 [ 533.751949][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.757175][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.762415][ C0] ? __pfx_kthread+0x10/0x10 [ 533.767038][ C0] ret_from_fork+0x3f9/0x770 [ 533.771694][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 533.776858][ C0] ? __switch_to_asm+0x39/0x70 [ 533.781650][ C0] ? __switch_to_asm+0x33/0x70 [ 533.786436][ C0] ? __pfx_kthread+0x10/0x10 [ 533.791065][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.795871][ C0] [ 533.798913][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g35997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 533.810124][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 533.820128][ C0] rcu: RCU grace-period kthread stack dump: [ 533.826047][ C0] task:rcu_preempt state:R running task stack:26824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 533.839593][ C0] Call Trace: [ 533.842912][ C0] [ 533.845883][ C0] __schedule+0x16a2/0x4cb0 [ 533.850453][ C0] ? schedule+0x165/0x360 [ 533.854827][ C0] ? __pfx___schedule+0x10/0x10 [ 533.859746][ C0] ? schedule+0x91/0x360 [ 533.864048][ C0] schedule+0x165/0x360 [ 533.868256][ C0] schedule_timeout+0x12b/0x270 [ 533.873171][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 533.878615][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 533.884553][ C0] ? __pfx_process_timeout+0x10/0x10 [ 533.889890][ C0] ? prepare_to_swait_event+0x341/0x380 [ 533.895470][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 533.900398][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 533.906590][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 533.911899][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 533.917130][ C0] ? finish_swait+0xcd/0x1f0 [ 533.921751][ C0] rcu_gp_kthread+0x99/0x390 [ 533.926373][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 533.931603][ C0] ? __kthread_parkme+0x7b/0x200 [ 533.936573][ C0] ? __kthread_parkme+0x1a1/0x200 [ 533.941636][ C0] kthread+0x70e/0x8a0 [ 533.945767][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 533.951020][ C0] ? __pfx_kthread+0x10/0x10 [ 533.955650][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.960886][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.966113][ C0] ? __pfx_kthread+0x10/0x10 [ 533.970740][ C0] ret_from_fork+0x3f9/0x770 [ 533.975385][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 533.980557][ C0] ? __switch_to_asm+0x39/0x70 [ 533.985362][ C0] ? __switch_to_asm+0x33/0x70 [ 533.990147][ C0] ? __pfx_kthread+0x10/0x10 [ 533.994788][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.999616][ C0] [ 534.002657][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 534.009007][ C0] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 534.020844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.030925][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 534.037640][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 534.057275][ C0] RSP: 0018:ffffc900045cf580 EFLAGS: 00000293 [ 534.063377][ C0] RAX: ffffffff81b4d6f0 RBX: ffff8880b863c9c0 RCX: ffff8880350b9e00 [ 534.071395][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 534.079414][ C0] RBP: ffffc900045cf6e0 R08: ffffffff8f9fe8f7 R09: 1ffffffff1f3fd1e [ 534.087443][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fd1f R12: 1ffff110170e825d [ 534.095477][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 534.103490][ C0] FS: 0000555572ba0500(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 534.112479][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.119117][ C0] CR2: 00007fbb6ba5cd58 CR3: 0000000075d20000 CR4: 00000000003526f0 [ 534.127145][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.135150][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 534.143170][ C0] Call Trace: [ 534.146566][ C0] [ 534.149540][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 534.155913][ C0] ? ldt_dup_context+0x336/0x3e0 [ 534.160889][ C0] ? rcu_is_watching+0x15/0xb0 [ 534.165693][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 534.170914][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 534.176056][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 534.181208][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 534.186784][ C0] ? up_write+0x1c4/0x420 [ 534.191157][ C0] dup_mmap+0x15a0/0x1ac0 [ 534.195542][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 534.200257][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 534.206198][ C0] ? mm_init+0xca7/0xf00 [ 534.210485][ C0] copy_mm+0x13c/0x4b0 [ 534.214577][ C0] copy_process+0x1706/0x3c00 [ 534.219304][ C0] ? copy_process+0x97f/0x3c00 [ 534.224106][ C0] ? __pfx_copy_process+0x10/0x10 [ 534.229194][ C0] ? __handle_mm_fault+0x1144/0x5620 [ 534.234533][ C0] kernel_clone+0x224/0x7f0 [ 534.239076][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 534.244250][ C0] __x64_sys_clone+0x18b/0x1e0 [ 534.249045][ C0] ? count_memcg_event_mm+0x21/0x260 [ 534.254356][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 534.259684][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 534.265003][ C0] ? do_syscall_64+0xbe/0x3b0 [ 534.269795][ C0] do_syscall_64+0xfa/0x3b0 [ 534.274319][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.279546][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.285632][ C0] ? clear_bhb_loop+0x60/0xb0 [ 534.290347][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.296287][ C0] RIP: 0033:0x7f015df85193 [ 534.300742][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 534.320393][ C0] RSP: 002b:00007ffec7147ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 534.328849][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f015df85193 [ 534.336851][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 534.344849][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 534.352842][ C0] R10: 0000555572ba07d0 R11: 0000000000000246 R12: 0000000000000000 [ 534.360840][ C0] R13: 00000000000927c0 R14: 0000000000067fe3 R15: 00007ffec7148090 [ 534.368946][ C0]