last executing test programs: 2m33.916197896s ago: executing program 4 (id=3262): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@int=0x2, 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711114"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000000660000000000000018000000000000000000000000000000950000000000000027030000000000009500000000000000f0186f30f7ad79132cbded000f32627056dc1288d4799d216738278d82cd6ee633d2e478c2f4f7ddcd86b139ef1e07c95131c7fe760ce6ab20f31577ade981744059d2362ff754068b63e08d9bea5ccd2645d0cd6234de446b9b93d1eed805b9948a0776320b959be61c74"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) brk(0x75555ede6001) (async, rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) (rerun: 64) r8 = dup(r7) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) listen(r9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) write$tun(r8, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1c) (async) io_setup(0x1, &(0x7f00000004c0)) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r10, 0x89ea, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x0, @sliced={0x9af, [0x7, 0x5, 0x802, 0x0, 0x10, 0x0, 0x7978, 0x10, 0x401, 0x8001, 0x4, 0xc3, 0x86f, 0x7, 0x36, 0x1, 0x2, 0x3, 0x9d6, 0x3, 0x358, 0x62, 0x8, 0x80, 0x200, 0x0, 0xc866, 0x3, 0x7, 0x82, 0x8, 0x8, 0x2, 0x1, 0x4, 0x103, 0xb7e, 0x5, 0x9, 0x1, 0x6, 0x0, 0x2, 0x3, 0x24e, 0x2, 0x9, 0x1ff], 0x5}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x1, 0x2, 0x30314142, 0x6, 0x2, 0x9, 0x0, 0x10e8, 0x1, 0x2, 0x0, 0x2}}) 2m30.044395666s ago: executing program 4 (id=3276): syz_emit_ethernet(0xa4, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x6e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be26df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2}}}}}}, 0x0) 2m29.342164194s ago: executing program 4 (id=3278): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x1abc40, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x0) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e69fb1c51b19392d516b12ec8030697212e9ace1ce81ae2c", 0xad, r5) creat(&(0x7f0000000380)='./file0\x00', 0x89) syz_open_dev$vim2m(&(0x7f0000001c00), 0x10, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x9, 0xb7, 0x1, 0xf5, 0x1}) 2m28.764177209s ago: executing program 4 (id=3280): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = socket$kcm(0x2, 0x200000000000006, 0x106) setsockopt$sock_int(r1, 0x1, 0xb, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x100, 0x2, 0x32e, 0x9d, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071127c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000097000040"]) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004f00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r6) 2m26.16829953s ago: executing program 4 (id=3285): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/107, 0x6b}], 0x1, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/129, 0x81}], 0x1, 0x0) 2m25.88028503s ago: executing program 4 (id=3287): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000031401002cbd7000fcdbdf250900020073797a00000000000800410073697700140033006c6f7f7a7a5070ea1ea199a511b737cf36"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001b00)={0x0}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xffffffff, 0x44400) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@my=0x1}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) socket(0x1d, 0x800, 0x10001) r2 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) syz_io_uring_setup(0x713d, &(0x7f0000000300)={0x0, 0x4ebe, 0x2000, 0x3, 0x2a0, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m10.540714541s ago: executing program 32 (id=3287): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000031401002cbd7000fcdbdf250900020073797a00000000000800410073697700140033006c6f7f7a7a5070ea1ea199a511b737cf36"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000001b00)={0x0}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xffffffff, 0x44400) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@my=0x1}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) socket(0x1d, 0x800, 0x10001) r2 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) syz_io_uring_setup(0x713d, &(0x7f0000000300)={0x0, 0x4ebe, 0x2000, 0x3, 0x2a0, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 18.337985601s ago: executing program 3 (id=3676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x81, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0x7fff, 0x6, 0x10000, 0x604023a, [0x1, 0x101], [0x8dc, 0x2], 0x2}}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000001400178004000500040004"], 0x60}}, 0x0) 12.481064151s ago: executing program 3 (id=3696): socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/85, 0x55, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000880)=@generic, &(0x7f0000000900)=0x80, 0x80800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000280)='maps\x00') r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r3, 0x12) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0xe2, 0xfe, &(0x7f0000000340)="6b287113957500bb216e6c30f3a8af0ced33c851e247aad092a7bbe96b405a7290337f5d7e7af4d020801b31980b857112b4f5742e8ebfdc2a6dd5bae5609a288c392b2526419b0e751f5b4676ad646693ad6bc94ba5e3b8cc49fd5872acbd800c7523bed563734ed6858dff75715da260defa5f99e689f7767692d06cafa787c41e2a26238778274ee8fc6623523e9e3413e9809f48e41ad699ad0a044df3a01f01e59c925ad6a17e3cdf15ba3e69d2c7e4878826a8e4978fb1fac5f42f2e33114451a699b6cbb747b005e4dc704d73aaf7d4daf9933fd8345763a0cafb3121a0ab", &(0x7f0000000440)=""/254, 0xfff, 0x0, 0x82, 0xc3, &(0x7f00000005c0)="0c8eb58c9021a0fe12b53f9a6a1e7a04a5af4d4137dc3de87b24458b8b109d81aceda33605480ac18f40d2582591a152ac65488e58d863beebd0c30efc7462beef52c079feaca7744f8649101568e80984eb3b240bf3199ebef0e48ead5126feba3db699b8922c34d40ff462b0be010f3dc8092774090f96e41e982c18a0392ddc6f", &(0x7f0000000680)="7fcf2b70f0f9e89ba984d429ea0043ba9c6b6790fc1241f646ae371ded7607b8592d81c4a39ad6dc879ba780d0d538fce4c11334dec01f3c3286501906df0b2f891b2673f542ff624f2a2afcee060d3baac48da1a3016f7f58fa0464c1763254e2a6380e2ad4926d2ce19a12c770295f91ab904872b4c8c18a1d63a21bd407ad8d615e944134707b4aa63577cbc90110be3e95d9e0e2b9d30ec2342af08e4eecc44cfba0a7a253a46e15db4e22424e90afb01f8516cd9d1720c3648b5a251053ba5390", 0x2, 0x0, 0x5}, 0x50) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, [{}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x8000) 12.442404798s ago: executing program 5 (id=3698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c00168048000880440001"], 0x70}}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="6b676d4c016ee6292d9e766dc24ff3d619a9f00155c4c2ce100962c7c7c3020501f3b083c25d7629187b637d60a2f74f834541b7df8bd50c8e02db8133701a91ff05c01d0058a4a25db32618a3d99ffec1afcc4b", 0x54, r6) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) socket$nl_generic(0x10, 0x3, 0x10) 12.441413768s ago: executing program 1 (id=3699): mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 12.283953945s ago: executing program 3 (id=3701): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) socket(0x8, 0x6, 0x3) r2 = gettid() prlimit64(r2, 0x1, &(0x7f0000000140)={0x1, 0x7}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16, 0x0, 0x0, 0x31}]}, 0x10) sendmmsg$inet6(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="00f13c3c4e9b12ee08f606e0349d7dd29c20af0e2c89278852d9868ccd4d3fc168926d96e0559af54cb260ed75", 0x2d}], 0x1}}], 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x641, 0x0) fdatasync(r8) 10.682760221s ago: executing program 1 (id=3703): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = socket$kcm(0x2, 0x200000000000006, 0x106) setsockopt$sock_int(r1, 0x1, 0xb, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x100, 0x2, 0x32e, 0x9d, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071127c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000097000040"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004f00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r6) 10.292188169s ago: executing program 0 (id=3705): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000380)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$tmpfs(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30, 0x30, 0x2d, 0x36, 0x2d, 0x35]}}}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x65, 0x39, 0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x33, 0x25, 0x38, 0x65, 0x34, 0x57, 0x33, 0x25, 0x38]}}], [{@obj_user={'obj_user', 0x3d, 'upperdir'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8, 0xfdfd}) accept4(r1, 0x0, &(0x7f0000000180), 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000340)={{}, "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"}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4, 0x0, 0x6, 0xcd1c}, {0x1, 0x4, 0x2, 0x1ff}]}, 0x10) unlink(&(0x7f00000001c0)='./file0\x00') 9.296101147s ago: executing program 5 (id=3706): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79040000000000000000010000001400090000000000000000000000ffff0300000006000a004e210000050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x201, 0xa1, 0x20, 0xac, 0x40, 0x4b8, 0x202, 0x6f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x8, 0x80, 0xfa, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0x3, 0x9a, 0x1, 0x40}}]}}]}}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 9.25638943s ago: executing program 2 (id=3707): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x30, 0x10100, 0x400000}, &(0x7f0000000100), &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000700)={0x38, r3, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x0) socket(0x10, 0x3, 0x0) 8.079051759s ago: executing program 0 (id=3708): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x4003, 0x3, 0x0, 0x3}, 'syz0\x00', 0x52}) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 8.078434398s ago: executing program 2 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) r3 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001900)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001940)={'ip6gre0\x00', 0x0, 0x0, 0x80, 0xc0, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7800, 0x7, 0xfffffff8, 0x6}}) sendmmsg$inet(r3, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="72eeaf7e38c9e8be3ce6d97d28c6ab0fb05c3b25440de5085023af16b7d1e551a10acedd56b03e046b1d58d391b777bf41d1a3c0f5784422e1b061f49ab5bc73d31f05680527e9a79ee665069d", 0x4d}, {&(0x7f00000001c0)="0ef92030a4073eab960a055cc4e20638dd5496a020c07458052d5c46285d880a1fb12a5e5037a71275bf13025cc0b617fd2f4a263978e207b681a1f0fa41ff7433f9d0b4fa99bffdefc4d1eb", 0x4c}, {&(0x7f0000000240)="8896e852956ef7ab2ca948d5efde9aa41019e5a09e1e3944642748dc72bee3058f761031b7203eb314b5e9ebcddc74a99159ac0a3e557d33a70ef49aec180c0610a33c24efb6a299c578f1297f0e60e08636f0787adac9d187e27239dbd7f595b419e8c02d710a59e7bafa823b8755093b46053db0c18f652e522e2d5a774839496f75ffd8880256eb91ece74bd7eb45ba24c6b1067a00eeb399dec86cb75af82d90f4635aaafc8b2eee3aaf9611fae3dfc8e2cd74de", 0xb6}, {&(0x7f0000000300)="475af3d30254ffb35ea2f32a11b6fef51e40343fea0fbe4fe85ed2bd7408ce90e917447218787c126947d2b44b6a82c4e824b33cfd20e391f934f981bb5d124db614357f7d0531ddc323983f959cb998d0ddc1de353418d45c33f39f01784298488d591100b4f57606222d0e02b0d63b346f25552c3b8bc4b7daffe011fa17a18f84beaf8ac69838bb6332c553f0f89c8632a11db5266a9557b3bcf303a4081822179e19ced9c9dec828cabb26959d90be0f0863a60fcb8bfd0a4f2350b9da5403de88a3fde04ed1", 0xc8}], 0x4}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="088e2aef53f58234501f9933daf2d4b2ad1a0338d41067c04179946276f61a8406737f23658994e30b52af172d97f100fe05fa12aa67c74855cd7760063dc76e6baf21d71b99ad64b00f9ac83838f7be4f19cd56eb11d0605f5ab73c296eb30d39ae41ebd5298f38bee40c08c82c8f8d64754a184df1ba94b7b0ff9dfea9a505b1331c1bd3803e523fd7e3533c47d4484fa2d53a85c03c6df529f2d4136076d148c5a4d3816e89be142730817e45a9c24bfa48728116e35388f401003859f301cd233075b8f0893acb328b182d5e13ede861571dbd", 0xd5}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f0000001540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x30}}, {{&(0x7f0000001580)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001800)=[{&(0x7f00000015c0)="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", 0xfa}, {&(0x7f00000016c0)="9b12a61cdf7c2f13d08f93a9992da9719ba8c37f991974c794cc345a693228961eccfefec3f21b6c8c68973e72ffdf4a8b5492eddd95e35fe2f6ba9e43206364b37c6038d58f98951c2f1db057c60bd34ae7dd9b0acdb08bb00384c029e7fb727467b7bca37b8e0998549b2022db626d93c5d5f1e4481662dbde0c26efa7c5a7d730dc7d8f11d2d4bb4260b8c12bae615a27b1", 0x93}, {&(0x7f0000001780)="32755222ce9ce16ace91f2b20fa13ed9eed8894d0b852a30d07f4dde48e124bc85a0dcfbca44c8f3e4de71b30fe077e05e45cbc0448b52b3f484d3f8ab8f9c686fc4c34ab26961be71126e2d5f62", 0x4e}], 0x3}}, {{&(0x7f0000001840)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001880)="f0", 0x1}], 0x1, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xff7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x72ab}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @noop, @end]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x89, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}]}, @generic={0x83, 0x5, "fbae56"}, @timestamp_addr={0x44, 0x14, 0x44, 0x1, 0x3, [{@multicast1, 0x1}, {@private=0xa010100, 0x7fff}]}, @generic={0x83, 0x3, 'X'}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@end, @cipso={0x86, 0x11, 0x1, [{0x6, 0xb, "c79d46efdcc11906b4"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0x9, [{@multicast2, 0x4}, {@remote, 0x7fff}, {@broadcast, 0xb}]}, @rr={0x7, 0x1f, 0xad, [@empty, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @remote, @multicast2, @remote]}, @rr={0x7, 0x17, 0xe2, [@remote, @private=0xa010101, @local, @multicast2, @broadcast]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x4f, [@dev={0xac, 0x14, 0x14, 0x21}]}]}}}], 0x198}}], 0x4, 0x20044000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x3, 0xbf, 0x4, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0xffffffffffffffbd, 0x0, 0x6, 0x9, 0x9}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xff, 0xb19}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)) 8.077907278s ago: executing program 1 (id=3710): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$llc(r3, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) syz_open_dev$radio(0x0, 0x2, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40502) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r6 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r6, 0x4, 0x8000000000000080, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c01000027000100001b6f4a6a5c5a72721e0101000000000000000000000000ac14140d0000000000000000000000000000000000000000020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000bb0012006d6f72757331323830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007803000000010000ae1aa9830a2450db2610b50f293fdded0a20782252142d16f3e40f6c9f62f41861999ceab913edc8b6d62cd384608e4d0aee191de80882acefef4e6f69d3415ec6e3586d5a977932017f77a545c38bbc53d5df7a86a986b4c45f1f8245045a7ddfe4684e"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r7, r7, 0x2) syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10000) 7.897091751s ago: executing program 2 (id=3711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x632}}, './file0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='f2fs_iostat_latency\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.788179484s ago: executing program 1 (id=3712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000640)=""/212, 0xd4}], 0x2, 0x6, 0x0) 6.787786938s ago: executing program 0 (id=3713): mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 5.146343235s ago: executing program 1 (id=3714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, 0x0, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0xe01, 0x70bd2b, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008054}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000010400", @ANYRES32=r4, @ANYBLOB="ae1e0200b8070000"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 5.137842918s ago: executing program 2 (id=3715): openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) 3.904182415s ago: executing program 0 (id=3716): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x780, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1000000, {0x3, 0x6fb4}, {}, {}, {0x0, 0x0, 0x400}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xecfe, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_rr_get_interval(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) capset(&(0x7f0000000000)={0x20080522}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="054be4df207874403200040000038a180400"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 3.534418643s ago: executing program 5 (id=3717): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e9ff48478f32ff06"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x780, 0x2000, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1000000, {0x3, 0x6fb4}, {}, {}, {0x0, 0x0, 0x400}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xecfe, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}) r2 = socket$packet(0x11, 0x2, 0x300) keyctl$reject(0x14, 0x0, 0xfffffffffffffffe, 0x8000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_rr_get_interval(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102376, 0x18fe8) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) capset(&(0x7f0000000000)={0x20080522}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="054be4df207874403200040000038a180400"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r7, 0xc0585604, 0x0) listen(0xffffffffffffffff, 0x3) 1.777249756s ago: executing program 5 (id=3718): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ptype\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/103, 0x67}], 0x1, 0x40fb, 0x20007) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x35}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @generic={0x3, 0x4, 0x9, 0xff, 0x4}, @call={0x85, 0x0, 0x0, 0x21}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6100) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000008280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x206f) syz_fuse_handle_req(r7, &(0x7f00000021c0)="b104dec8bf8eed2f8d9be5692aa6709c4947213f8f222670778400e96fd8e8501aa3012fdd429b5060f270bad86a34a976b61f3f83a7d1a1dd12b5518036da53d43c21a4882b3885b35d0f6c40debd2a4dd209d006fce080781e2cc2cff167775d2985dfe1c4e8162b2142451b2f17c35e76b385f55322c0f77ac925e9ac53d7555e9c2d1149926593690ec8986f8deb7966b18478aff7e762675474c14b22fe5172e4451e57af25cc36c77452d74b07a524030a41ff66cfc4226a90f401b33c26e2db5a5c08b3e08c3455308abd49a00de1b1c0ffb32a4a56fb42cb78715cc754926c17a1161558cdbe70a2ee25f94ab6266c83f028f90ad8b8bb759eead2b8114f43498ee69e225f073c6a755783e7e1e41ad984b1b76f1b40e680d450748299f88e8ec3867b1d51f5aa15fcdacda76bf320c65bbb4c73c75af9e26e060a90fdac8162dd4c2c866ae481f82d4dca00fb38704209967d4c8f6e72bb7313ee1f359cac9f7fffa37ee26560a02f5e59d5f26bc81de2cabdbe06055dd47546b8f592b5513eb4af0dac7559f547e2a8f5e55a70a91802efbde60ce5bc6a7aca1f9109070041497aa0bbcab4ac2ac6c255ba82981311a899246519001b8b75d84f203d5ba9a7a34c9fe78ad88ca8d6a9bf17beff2fb454723ad1e5b04d4c169f0e0b3f1102ec97fc0b40184a7604f132d5c1b10b3fdf432fc2978ae39a7e44dc9fbfef3065a6590536529f7b074c1f4e5f12920fcca20bccd3cdb8bd488105f9a6e05fc96a8d6fbb1222ffce0a8550f9d2622f6bc27741d28063baf65c404993254bb9a67302a51f0fbb7e221d2cdce3801334e46d6b8f3ad96ef364dfdc6f4b527b04d9002fd0f6c50ae775d89c62e4b0376656db3bc2a56f1a03e24ecf7917af7478f49aa65f7d1a1db177c0363faaef2eacb2f5d5e68650ebbf2baa767dbdfbc9217b1532433b7470431b51fd4938f46d6413d8073d2afa19d9f6777c1c2e39b2e40778f4d690af50865c4536ba8d9cad96f0e09efbc50c966153fe76542a8114755b2c40fee6d8cd3af379e5bba38b8771f1967a9c8ee36ea86dbf37501331263396515d37f3558ecd5158ec568fe344e3f23ba6a6c0d5fa74090bfc4ed28a85f46e6929abbfad5f020deed33e4e99b4c1118a69419905681d419a83f6adc126f49b83648d572a4e212b994b6642dedc712629642b9e2ae7733997bc16ae9c9163772efb512e5d38752fcf5533f332345f1fb385e08866e14acdf5acecd7664930f4e59fc23dc2c110adf74baa47bf1b6799baf661acf1e278ab592e3c493aedda2d15d321120cbacf4123d8c348bef70292bd1ec8c08704dfb6d7c51037572a0910b35707e1a9dc7e3997a6db75032c1dac255abf934fb556e430ba7d73822e63e82f954d087181f0579be11e490fdb851e732f2fbbcde4b2f75ef3b0db34958f7232e0f43d4aad22559785faa5ceb3bf47a8f9f65c596f8ee8ddcdc5a5b0209f8c9adef345a75fd301b2e1a50de948852323bd9ce5919310505904734d5ad9c6c4fe21654cda1eb393468bb5cc6f7332337bc69350eeb532bcaadd270501cd0cd7cc836961f1c9637b86b60a75c12fa12f1a3ac825fc15f6beb1d44fdad492fdc9ad2241f2aa66b0555346a6bf3996b5f36b277243a17db86ded40decf9279c1db9c5f167167700496d73612bd5c6ed14899a50dfa80ff1faf1d932415c3c2d003c18d158dcb6e79b7523aaac06fbd81e54c75fc77fcacbfcd0910bd8aea7c20b85385d8d9b1002d161a70646ca22fe158bd151b9ef331ac9bcd199f1a1331579a50b66aa42c100004f4a82ca54899a96779700aef5723a499d1b3b43357b2bb373c7e8aa5acdfcbd41f985a61534611802a95a3ffdc09b3d277060c26225ea4b26422a474b2cc87893515a7fed4cbcb5c3f9ab049ba828c72cb969fe6f2a3098390b2b9e8dfbc078aa9006c0b49e4bf477e72433e5c66d36e77d48994fbb69e0a59c5f97685fe23e491f023e98e96a38833eebb465bc7a74bd949f367e52d323858f97e9c92c3a851b85382bdab04a0ea40c7fe4159dbaa9c52ede5af4ebfe60044ebd36a33f62fef055186574a22e18488a2157c6f163c6f643f11100aa0b266840fb3bf380c5ab718b3577da55215daaeb531c9bb2aab874557b99e5a7d5df72bdf282859c372d07490615d1116c315b91977f2a80cc7d8ca05e083cf52a95cbe8151b3ccd55d3c3fac29b85f755fe092fb12da5b03c4fc8e9c0bdd90b62f4016789e1581cd604eb496501c02a87d17e193dd715964c3e57de6f1dc94633dfd3c34d7faf7ddd723f8c53c6d99b2eab17c860f12586da5e4586ea61c2be9715a2571b8ea9e306785501ce273dd80d9c2c8f5aa8b09954e7ce9043d7dc3545aa1a9993a95650f5aeed68e1662da1760adffec4a6d51c47f532ee059848bb7db6c6daa29ef0abc5630525c62a6def0ef003a0d10cf8029b4e1c3552b5ae947ec8fa6c994c0e2206c8fb60bfe4ba7c0931d8df653553cf07948f8f783eaf6662db139c5279939c0c183bd5714160d2cc5f69d39daa92778738f6398a6241fe21985a3cfa6436122c4191274c54f415037f6d2bbf84d608ba3674dfd361334802db2656ad4c4db891adf6cf309ad0c710eed56321692472e682e6853b1644d5a43cece4b380a825969b78ea98b3a763dcbb76d47232f1e9b77a9d7adf9942054ea262f072cbbf22342c57cb3cff9633c6a9cefc97094f35202df8c5c4305d281323de46d6a5c57911f8492910312498eb1993c59e2f518f182258576750905e49af160b9d5292a584f29539beca3684bff59dfb0e98655de2ace05dcf15e5c7cfa49c5348395cea30e46d1e63ebaf18dcf1f7d6210f0878a6b45d9aa72e478d9f8eb170b93e518e541329c7bb52eee96516e7937068074e35c1370a30663d5f32c0ae270a40ea0576778e1e9eff0470166a227b94b16599d9228592485d0eff3b6bc05867b3059ba43bc1aa57adc65495adc68963390ee86105f362692642a69693acc7f5a6f55b9fedcbec9b0c37a116ffce7463ee116493233bc6e2d5b8c20998a39bffbef057bd7b755006559097f357c2142e187bfb720d06287915faf927d80148ddff26154a1b776dd7846ad4f9914d1c2dfc3c11a769d6b846e9776868ceece1453d9d3f0157beac1e40fbbf09617786fcc2d97cf3da797fab8188cd9a525ca979b87b6bd647aebe750cfdf363ec33e70bf8d2b1d20f84b0f64020f4b2f79b8b8f876ffe27841d4ef0c4dfcd986f7d86179e5a998386f13f5ff40e6c903be18a327113dcb14af70d349e553c5f36617f340253855382bcd0c44d93833900d6cbc792d36c52d4833586f2c90831144b358dbb821d3023bb39d8f714293fb94a18f2f6d51b009cdb74b3c9f90f0600674a72881e8c849617465eecfa5939612cc8e899f03da6344a782be6eabc4166c46310c5b7ba8e325b58c1499d937319ae6f606bc10d9968dc36b359ed1be7fd3b22b1f2620ca82090a2741c6a0f01e68600acc621d2ad20547f6bee4d5413efa35f14371754a99ec28e4550464a517c61ea42bbe51d995b95b66f31b55f77594ee3b2c8ed9b99cf0d72eec225112742331a9cd161e4ba2b3894e22ad90c0e56bd39aad10688207fdb84af8123297cbe7b0ad8ba33ef9c18c0bff98678be523e26f01297cef689a198c6131a6624e0eb99b9b880fc8469b09120cc6356608520e6f7cac00b7a10b07f2a63ce805886f294f463ef49e62069eb668cc7d07940175cca710a451adc37a70beaf1292bcfa437719b5c9d850412a4b645635d10c36bdcb17a4e23c9603bd682d52ad6262801cf2c1626615be64feca2f6879e333139a311a87f5432139cdb356cf5f083af94c520c9a75df1ea641d2baeabbd710ed05ae9eebe2ac4f5e8e7374514a046fcb77b930e148ed4d02efed8d3d5f8399213908002ceb7671a9f741ecc6a2aed2778a22cd2d8ee27a7012cd4f759a72eb2646e5106c8e3095e80d37f8e698341caeb380267481017dfdf2be9c59b403c8af43577cda22727ba05886c3182541300bee7a0a88e03953e38501dc3110dda1124d2a5a28b42ce93fe619760ed68195810ac667f3ace22fe3dff7fff439c18b80478ac82ce88cd7d21a93b6a8b3470a521918f3b94d70665d344dbaa403d886231136b83eed1e117b0f378f3d8f68611aa2794444dba86ade3615d759e33173a63375ce79833a18f9189b59a1ab0ddfc8b5296187d8a54deef019f0f5605068416ef47b8e833e29801ba6c18a904f6d22b993373defbc0f94051131e3fd0f1bdb11a9c68c5cf0d172b77c01261696b534082f0ebc3dc40cff6d63768a98612ea529b542f34e5865847a390f16158a90538650b1728ab9029a3004f6dcbcd97316e4a5c398eacb9b6a25d614a0be591a8ecde8823b2bfb0834fbbf7ade6d1cb7c5f929a799629ad644bab4edfe822351c443f6f77047ffce9cc9353b239f96660154a574785b2eea2d9b2aef1226d08d7331f4166c6ae14d63de1a2c1e34996bedc21b426fa8b50a7fe9967f610651e740bfadbfc70734ba1b8e1bfec5a497ba70891f2645fc7cb471d0dd52c05e6ca09cf67ab3c217e641b6b08068d7a8400f54945d3a06d98669c75fafc803871d4aabb887a94467d37f53cb7ffdf65b9d852beed0381a7a85c0ccfd3264df46608f37ced30b2da11b55cf3ce7e57b0a4aaa4f6522b704005efedab3c332d692d25a7bf83650b7d36cffa6573524cbed26789501253b941eda17910ea45641e12ba5ead015870b8637cd8b57b2147324577b5397ce146eb19da5ff75e7861d8d3f9342e7c757367bdd0be9120a2987706d4997a9546386a1dde8dcd4c11cd358bc451a817b19f57ad82bddec3883a415ef7fd0caaecf38dfe582a6eaa132515f64a45968cca322a9fc989080c5c78f3ea864346a19d673f4f073a034042ad4463a19c536f112d2282c609368cfd18b81eaece827bfa69c4eeeb95b4a66291b1fb392286d871687763fe49d151a53cbdb0e405ce270c69763784f8e8b5bbd8c5ebdb727a5331513c3e463f7e2d58c4710ba06c3ac9c4d8f67b9146d6b96889189e9125f79c6aa90a94d4deff3a3b99326fb13c86f74c5d3f6fdec1a4c18bfb41a5b48312939622a512e6f1da33f885350fc06b79396a1e3fc58aa840759d92a09d98b8383a68b5232be9c1362eb721e7ebbe5bdf72abba58ee062852221203e1200c1d0e75bc7ee3fa47818e0ca9ed8adcbd329c0451404c1154351b400d941fd2f7d4db84deafb34e71a7d6665809f6d17299d820f6506bd804153446ec44ab2906ca72b628a1e73c38d3cd66f28ca6aad3b6e6aaa6a6e011259fbbd58e1f85b0f5d1edd3d2b117d9c52977576845db48aa05444aff7bf3d81bfcd33947c5a1dc24eff0aa138cdcc1d93ddaa89206124192d4147cb781290775534d43495eab3b057fd3e605e6476a870c5eed36d30d1983da7bcb3cd84171215ad9ebca640b071a7cc5019b82da77551b89a4a0e1a51a08637026253dcaf11fb6c50071eceb3e033d48b9fc343fe5227e66becd5e375b329f1a63baa8bb030984fd795c204f1d936def447e18e118e87b9bb46ec0e648a96c2f523efe6c9563686bd360b7f0353b6a33e47509b3b8ea19b04c873fd997983151bcdbb9b98d9e69065ec820ddf01591164da45e1e4c869535d6df635b8fc2816fc8fe82cfb5c9f61fef2438086b0c8bdea849fe4472def453441fcf7e7dbdf28ccac760af700433d39a7c7e4c158e30821e7d2a1bbd5124093fa24ba0281f7b919e0152cbe3fbdc8e2d55d669b3dde6332599ea03ef00bbd03a6bf17d5a0997fbce5fcad532f03ba2c17ef8ce363c1aa2ed33b44c3fbb02ac7f288814ff1ce893c16b11ba5f704dc1357d66dd708c82b6b187616c11308dd42dc4f2f89baa4e071d82e2bfc13bf927cf47d5ecc8813a3b851cb54d9fe1f8cf39028e80005a1a652ba1bd88bfea8d3d17afb0769adbcc0fb584d41143873d9c6468a5c7b0a0b493ae02b4df3e513a8f4ddf37dd725fd07bba71fee5a35ed487cd80a00c9c4bf513b207fd4c2464e8b757eac093679cd1072c37d27d17375802c9ccaf14b5ad98802ff8861fa8a7fa4460d83fa2765289875b6a8aaf1117ea9a2b94735fcebf6661886ee8f21fd2956ae5845d74b6f29221ca3fe88f04b7c94380a9fc814d7ac480e9dc79fb398ecc916e59e1b2633bf76bce7f67a49a6c77930b175a31784b8055a269278c682c9e3bf444ca5449df0d82a75e37d3939d5ae6533b9fa8605490ff6e32a078e1647dc12d7c703e0e0b7e240cf3da5d46dd9ad66ea244ef70a2fd05685d5e266eeabbe489ad1d859a7d1f2bf0ae7c24dddb6431ee0944ca7efe5bf224f35fd5210a5c4e1e4153e3cafde96e9fe232a9f1acc7f94cac169310016a4426532d01ff285c5de3edcfbd900a3b3991dae916249ff09d2628c1194cc3cc23362a9477e07fa32b6371bce4501fe18d0539ac4ef9b25836cba0a1c73aa7a446530524084d7a2e39524c7263756fc5b405e67d3578a5186c3a58dfdd3738625b204d0f9e58fac7a867c8b2678dc9496cdae810ecda3de210a12dd85f6065b8b2233f1ee7a8de30120f89637fcfa8dd9ed2cc74e4ed8c25cdee3ff4f273b570ab83fa1a1bcf701b783c29a543864687c69958468f799d44b83d1ef9ca4795f74c83d7d90d5d82806c5557608b2b8b55ea392ca98de171973b0d01c20c927300e0870268cb952b9c99bf44d6c55701a50d79966f6115aeee7a030149ef8e090506f182a203d5fad497312288ef144a3cff50eb90bce3f7f79550626dc017ba7f56eb4f53a900b1dd183ce6af5bf508d371b80a3be80f2e1c078419397d8504b38f8fba08ea903441a616037e14171b235eb851fac7672201ebca02591ebf6a8387bc0322a19a516c70570aec376a083f8e82f2ca16d5a10d816516dd78052659695560f7c994c47242e8d0c04ea1f9fd042cadee3fff83686bb672e9322f261a560dbbbe94b772e71b423ba4abf505d73aeb6c891ed398b3ac2238aae2be4ad771931353800e462ea3121ed15cf63ef1c5cbfb7c7369c5159b73bf88d8c6bbd0f84360a901ba7fad8b7fd7660bebaff5a83ecee5fc68e011efd55efd3719e7f113402a0f40d583700bf6833f47eb0c3d01facbdfe8d170d1333986020982115fa55caf020fa79fdc71327df8084d26d660055774317474f3bb2181a12e5a410b087517ef5cf25b6c2a58e7fd047b7e735371b2640a97683d8e422c968e25815f49a1e553e9ffc37fe5c989cff918eaa41552a51957319aee9299181428fb263b65b9277aba8678cc7103220b2d97e6a35e9301aff18bed0b4de39aa80af64640401950b62baa1dcccab828e65e91f4da204c8af13739cfef21641208ebe45750f777eb0ad219ab412b64d49028bc07b7a259b3f02dbdf056dfd0ea7e41c2aef124f4dad32541a9e72514e72f5881945aa3b4c855868de03d8bcb64d9d9b15c5b89a248eaa57c84685e197a92838da1be9a6b96b988ee2a4bbd2ae04d76ddd258b0e9c3c92d6b51dd368aaa013d84d7fb98c1f63cf3714edae982f47a9a8b4e076d726e23095d110ea30ff846f8200f5e849ed488f50bd0d57f3b92c78b1d707564d613b64a056bff7eb0db0bbad86280a02532a237d1e758d0583759d7a398318f54b64e2a190eb32b7948740931dea7f37fe50f79d8a280508a4c9f80325b763318abec4025cd83115161becf1619a508a204282d4dbc0986dd014795b9257c86237f2c8b88a630362c504972f423e5e3fa41f1e073172ca632424c954f05610d13418d84f230334fa0a139204bbfb31dc2d31ac2a8aa059da80e195e7e9bfa586f736d0d0964fb8fb77010ceef988736f62b67be4e20208a86c46d50de552341adbf16c7cf0cdd5dcbfc4d43a5dfa814ac563732f280ed50e61372d7e965c04ef97af7e7631eda4ac0e8f0664a80f6362c586a8bf96f00e3f1fd3f60e021129eae9e255e888bdccbf26adaa2974a727030a5fc97bae69f28f4c2d49dcc2817dd5f374259d7ae688b4e503f970e89f836d6c8e7c29f0cc9d4ad2a66de5a3cd72d0b6f41f1d544ccd94877510b0eb5aee7f57cb673a8635bd54de7efd440756346fdf5fe17e0cda1c310acfa60706d3adf2b4cc66e267748d95e307944992f899f0b74fc88694f883fd84d6fd48bf253f40eb3430971fd8e26da58ac2f768c0fdc6e890ec4e07574bdc68e5cbb4358bc36d350aaa6dcf8866fa1b05bf52640900f12010d81598f4b955f26fd195886077d059decc4b825dcae484a3e0ff2a6f49cff8f8b78dcd9a60238156c046c340985174f0175c7a0aa95bf9ac2b1b2960a988f070dd71061cd1a5e9480bd129ebb8e2558270388d43907bc4fe1b884e00b5c43f9d367f9981d29c305f05975c7c0d9c39c2ab398a297eb7fc8eabae505e77aa4f9d244e3adbfc9ccf41296dda8b175f184645dd2aab3f86c00026e7b842a74fbbbb6bbdfa7d20ca049a2c846c1259889903dc00f399dfa0a7a74adf8b1fc9f857966df7cd992b211d239bb23411309841aeed53ae9a0128c67dda22ff2357cafeb0378c6f50edf888917c2491b94a1e086b65c70f9fc41cf0e2415d0cfdeefa60fec234d1d2ea2bffb3340190c249a5113e1809886358dd7abcc4c1ec9831ace8322df04eb658d4f717a79bfa5b4c7700a422422e2775e004163da90669c78f8745c0aeac3206215d069a25a49ccf0c3f6b55c0740ec43eebbf55f1235e0594d3c1ff610563204f4098397882cf4b7b27b3cc5e8d6e9033d45dde9bf4606ca44bb739dd272fd58d4702f253bdb4c13d31f85dbb3e481a1b70c6502b7f047501426e2fcd9bf76b66346b299b8fdf45b2ae85371927ec0d6cf74e76ef05e9e74dfcbfa057e77c4dc4a3a117337f0e8c3687d4c05dc36ae3fdc88a093e7fa6e2e78d60cb419f7b2e889dd72dc67deea2ae9566eabdc22ca4cc7786d6847ac6282a7deae971a12bd0ceeb96ea4830baf0a2c7c6e029a85f68ce3394fdc7fa2ab200f4dac4ac020b60dcb4770484e72cd91de018c94dc83024fd5fba0e105cf7223408ecf32a997903ddc6cfcb7335c9d7fd9931b38f36122d22261c59fe2ea58ef01c1780edb42d64b6adbd55dd519b2e5f73a00c81bfd047a4f3209763e7cc9f4373df419af9ee91118a94a4a2dc8cb1e1956314b3e8d18bcf39731d1cb4673db1ae0e6a63d710ee04647c97791737e6cb83b3a6bc112b732f644ff4789b45a3854fe504d09bf9893dccfde5d26b13862010a8f92a81663449534f4f6892f6b9dcd4ab22fa38bf07b23ff1f8e3ca9706fa2ed23ef6eddf02ef89c3bee508243d5e6a0023e53be2f7a966a30a4296d44ec22d5aebdd0a81cc777636757567fab3483934bdadc3d48186f1ce4631d92bc3f4afe12d7347033326598f9a04a73ef6d8cd17a5399eb528ac8fdcde9fcaa6152b9f6db302c95e95f3c0072cd87023c438fc5c658562213d2cd55b1ee9c1784aa02e342108500d0ade72727e417683471692a0905b3817a53fbb9bbc92bf33449fe896226fc16fce9528c83eaa0ba41c39265511c1e5eef2e8d6d498c2b984747c1c03cfde729c4edac3b96dbbd71dccba8c8214ac20317bb3c89ec87748e6c1cb381c44913e2c2d5d9aaa99d933d7b8d2d84986205a56f37c4b46a30d1d5334ead53167614253db77788f1d77e7409849695d9fd9ed5846375ab25e4ec54dd7ece3a11a4bd1484feff7dc930f2c7e214b82ceb1d359584670198e6af484f3303a1cf9928118a6d24910fb0dc6d8bb1250557a22cdef768cd1fe875517f24aed8b3eb8d4676642819f3365605966f3d0931689df552e9a2c818aaa4f5d9261c68bfedc860ee4cbef70c0d222181474783e7bf3e12414b0e9bf5677f6656d4fa0272f5cee598b5c1504f9caac188ae1684c8bdcc0bbe9c44c9465f33b7474e3a2b66adae548d3131019042fd3c767487490939df0830cd652fc971996bf56067d3f5b9904d37d67d66ed46001b043e72a35aa79b63e80cf3db7f23f4d7666e5b84d35edfc6ff1e5262def696258755a05e2f93f953e7130583ff3100935afce0b1bfc0f1ab1046087ab874e2afa9369d227d1e771b6455b851becddaffe22b39f31f47bf932398da199bf68f6fceb3ed004e63ff3cb401f59113b08ded75ddeb6402293700fadf1651594bc6d5d3c30a8578c629d0f4a5dece8433da8f62db4b6feed0266e9d6fa12a2b8ff20b65846a9ffc0bc8a49e36551e13f0604fc44d7682720a966292748d7434ef07b9da464286e3fd4968c0eb409a4e1d86a76bfa00d08ba3fde8a197fb70d9c91cbac97391b9e12d05f4869113fe5742319943fb1e8a3c5b5a6419017b4c56f155a0c429d1c10e0ebf43ceb22a7910a90f2c0e4888612cccde877ad4e64668031ea591b821edfa246aee25de4cdfc02882b1bdce9d622e5c81d07dac00a1cf861cbe0527b88989d11bc3ae27f1350494fc673e154340b431679afe372b920c686b7e3d6da85777a7b9b53892d09eddf637613501f28a5364da0361f1b97d2a15980c618f5281f9ec26c5e68f328c0c8f30b32ab141c8cf9a7ad6f589a4ce4c5d64dd4744e0038cc9ed5c0411c6a2b3022f4a4aa8881c6f8523da2f0b5af62dc4ccddcb75727bda24376559fb419d5caa3086ee891f06626143cfcce90543c094131d0699033239299950d24460042b7ebef5e0d5ec41a7b99df4313588200b8973b2d09b8f06496a7d9bbf27ad60a3d657bc85ce3c54b6cce4580990027a05cb6a97da24cd412ee8c88d23bfae3c959bba55e3cbd3888b9888e82f56efdd22cd64f9263517a6abfd64c2add2dbda2358f2021e6d0bbe432a2e539a2b8eee8b04bff095a0b8adf84f954f97f212aab5f14fc1dc88f28ba6576ea8d38b05bf95642bbeb6d550121e5cc8c1267775b8be2aa8e2f952311242fb87371bef09eaf0ff3ed9f9c7e3bee736a5ef2caddb639c174d570881380f4b3c5d10f4de3b62a94271edfe37b8d6706ec1e7ec249c6ea6bbb242abb6d974a501353244705caae923701459e90e97cc9c324875abb78987ab1385e841f8e2025f8826c0837e9b941d7a248a4b75d84d706e2c2a9643ac107bc93800571e0100dfdd00103cabd24fbb8031f2d85510420025a5335a3a50878c62d681daf558e52cd17a251f3077f5b25673d98575c4a5919d0f894355371f5456a8f444cf4401f6617dd4192f32cb7909c63bf03e09bd026ded05c494af978a30ce392e11e56ac6d700148e387aadc496d189fe66eca011459477106ad5d81825e98d54477e7ea03d367d3729354ecae8ae1ab1ebcaf35ebf355f1d240e8ffd566cff3d1897e04ed1a416583fd7cc07858ac4b0d8bfa6f4f185b3c57d0968e0a3b6fff0b20c4b5a6233d9a591b6743eb823c1fe38d360cbd71bb1870c692a29e6aac59bb1de22476337c21a79f3d6fc786acad85585bbffbb8c488726219db367c4dd0257d56d714a8d27758c7160ed4984bd72d2f8253845370b61da088c80327ebb11d", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x40, {0x6, 0x5, 0x8, 0x20000000007e6d, 0x1, 0x5, {0x5, 0x3a54, 0x7, 0xb, 0x7, 0x81, 0x1, 0x55, 0x4, 0x6000, 0x1, r8, r9, 0x101, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) getgroups(0x0, &(0x7f0000000ac0)) sendmsg$unix(r0, &(0x7f0000000c80)={&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000100)="d17d2727b69c80cb7fba21cd92dd5e13b943dc9995de2b5eec4ac3211a7000b15d08", 0x22}, {&(0x7f0000000180)="46cd2609694b19f2a587fd110ff89a3e96d194454637e715861d15433a766d1e19705995bba6fd05d5db0a3ffa489872747fa2cf90260d4b9c98d44c6f", 0x3d}, {&(0x7f0000000680)="dddcd211259990ba99da2dd7d54f0e333c9cd47f8ef134dafa8b4513889ac004273f42a5c3844b691947de6ebcb3aed39851b1d23534a9cd920273432a2d171b3588f2f33a7db24df01e9f0df4a91b9892828e117a6c88a806e1a7390d439c7712b019dfbd4630826dc24280f950328a1c895bd3f0f66ce07176a2c78df60f90297c449d2fc78b138f1313372f12164b8e4fd9", 0x93}, {&(0x7f0000000740)="d7b6abd3021248d64edc3eb4eec71f70bc0de51b17745efe4ea7d1859a7644554b57581b0f06201b8e1c1f4e78d0fda8331db5adde6ddba485f541a4b16ac41afc8868381ca5266271dc0563d0fa318fd1c88f5d3961e76a06ea4bea805ba02debafb311b0baa7f81c1c79d41431db5fb0514c4d24457f089d33fd7cd5937baaa22fb0f78bad2d1151cc2393898e7c00ec2922f5827e6103b53ff03ec1622c08ab8679f2e6aa2978e4ca70531f86551f12c1d86815c59a0171470eb101ed61f19f03918419e09217615165336e9a592218295cddc90a", 0xd6}, {&(0x7f0000000840)="e876665df5d8e7be17da68429ee6c4623131eaaf9a9b0cbaa22dd481992b949200c005f82fe6834f16c5ddd8466ffbe9044f538800e232255c3ac6d5e62f268fd5a4ee503ce6a8c5d2ba195cf167952e6eac7327a1898931cc3a71160a595a0842da54", 0x63}], 0x5, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r3, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r9}}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}], 0x138}, 0x40c0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01030000000000000000170000007a85aac1864bacdc1c01fdd4290721b141225623013bb43c8f7eda39"], 0x14}}, 0x44094) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0xb) r14 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x254f42) getdents64(0xffffffffffffffff, &(0x7f0000005080)=""/33, 0x21) ioctl$USBDEVFS_CONTROL(r14, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x0, 0x0, 0x4, 0xfffffffc, 0x0}) 1.56434614s ago: executing program 3 (id=3719): syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x8002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.542423994s ago: executing program 0 (id=3720): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) (fail_nth: 2) 1.494456995s ago: executing program 1 (id=3721): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xd}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xcf9, 0x8204, 0xeb2, 0x0, 0x80, 0x3, 0x284}}], 0x48, 0x4008000}], 0x1, 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029200030102b0000904000000010100000a2401080000020102132406000006000005000000000004000000000924030000000000000924050000f8431cfd09240300030300040704240404"], 0x0) 984.874473ms ago: executing program 2 (id=3722): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40c4}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae09, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1c, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @generic={0x5, 0x6, 0x3, 0xf914, 0x9}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x5, 0x16}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1], 0x0, 0x10, 0x355e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000600)='kvm_halt_poll_ns\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn(0x22, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, 0x0, 0x0) pread64(r6, &(0x7f00000013c0)=""/208, 0xd0, 0x800) read$hiddev(r6, &(0x7f0000001200)=""/246, 0xf6) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r7, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 905.607539ms ago: executing program 5 (id=3723): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x1) 360.00898ms ago: executing program 3 (id=3724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000640)=""/212, 0xd4}], 0x2, 0x6, 0x0) 62.906837ms ago: executing program 2 (id=3725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x632}}, './file0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='f2fs_iostat_latency\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 222.124µs ago: executing program 5 (id=3726): mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 0s ago: executing program 0 (id=3727): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79040000000000000000010000001400090000000000000000000000ffff0300000006000a004e210000050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x201, 0xa1, 0x20, 0xac, 0x40, 0x4b8, 0x202, 0x6f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x8, 0x80, 0xfa, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0x3, 0x9a, 0x1, 0x40}}]}}]}}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 9a878e969 code=0x7ffc0000 [ 689.483036][ T5822] Bluetooth: hci0: command tx timeout [ 689.725799][T14722] overlayfs: failed to clone lowerpath [ 691.548676][ T5822] Bluetooth: hci0: command tx timeout [ 692.332153][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.342789][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.343363][T14743] ptrace attach of "./syz-executor exec"[14744] was attempted by "./syz-executor exec"[14743] [ 692.363449][ T1154] bond0 (unregistering): Released all slaves [ 692.556009][ T1154] tipc: Left network mode [ 692.651333][T14655] chnl_net:caif_netlink_parms(): no params data found [ 692.928600][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3217'. [ 694.815340][ T1154] hsr_slave_0: left promiscuous mode [ 694.832305][ T1154] hsr_slave_1: left promiscuous mode [ 694.843313][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.788120][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.676043][T14783] ptrace attach of "./syz-executor exec"[14786] was attempted by "./syz-executor exec"[14783] [ 698.368316][T14655] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.375798][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.393473][T14655] bridge_slave_0: entered allmulticast mode [ 698.409036][T14655] bridge_slave_0: entered promiscuous mode [ 698.425981][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.433583][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.450075][T14802] FAULT_INJECTION: forcing a failure. [ 698.450075][T14802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.465478][T14655] bridge_slave_1: entered allmulticast mode [ 698.482222][T14802] CPU: 0 UID: 0 PID: 14802 Comm: syz.1.3229 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 698.482252][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 698.482265][T14802] Call Trace: [ 698.482272][T14802] [ 698.482281][T14802] dump_stack_lvl+0x189/0x250 [ 698.482311][T14802] ? __lock_acquire+0xaac/0xd20 [ 698.482341][T14802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.482367][T14802] ? __pfx__printk+0x10/0x10 [ 698.482399][T14802] ? __might_fault+0xb0/0x130 [ 698.482440][T14802] should_fail_ex+0x414/0x560 [ 698.482476][T14802] _copy_from_user+0x2d/0xb0 [ 698.482503][T14802] kvm_vm_ioctl+0x722/0xc60 [ 698.482528][T14802] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 698.482585][T14802] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 698.482606][T14802] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 698.482640][T14802] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 698.482658][T14802] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 698.482678][T14802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 698.482714][T14802] ? __lock_acquire+0xaac/0xd20 [ 698.482760][T14802] ? __asan_memset+0x22/0x50 [ 698.482784][T14802] ? smack_file_ioctl+0x302/0x340 [ 698.482817][T14802] ? __pfx_smack_file_ioctl+0x10/0x10 [ 698.482858][T14802] ? __fget_files+0x3a0/0x420 [ 698.482886][T14802] ? __fget_files+0x2a/0x420 [ 698.482919][T14802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 698.482942][T14802] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 698.482964][T14802] __se_sys_ioctl+0xf9/0x170 [ 698.482991][T14802] do_syscall_64+0xf6/0x210 [ 698.483012][T14802] ? clear_bhb_loop+0x45/0xa0 [ 698.483037][T14802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.483057][T14802] RIP: 0033:0x7f7963f8e969 [ 698.483075][T14802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.483092][T14802] RSP: 002b:00007f7964e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.483113][T14802] RAX: ffffffffffffffda RBX: 00007f79641b5fa0 RCX: 00007f7963f8e969 [ 698.483128][T14802] RDX: 0000200000000580 RSI: 000000004020ae46 RDI: 0000000000000004 [ 698.483149][T14802] RBP: 00007f7964e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 698.483162][T14802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.483174][T14802] R13: 0000000000000000 R14: 00007f79641b5fa0 R15: 00007ffed3818328 [ 698.483211][T14802] [ 698.729535][T14655] bridge_slave_1: entered promiscuous mode [ 698.736750][T14791] lo speed is unknown, defaulting to 1000 [ 698.899867][T14655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.916005][T14655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.052678][T14655] team0: Port device team_slave_0 added [ 699.101881][T14655] team0: Port device team_slave_1 added [ 699.233533][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3230'. [ 699.304870][T14655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.324294][T14655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.411496][T14655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.429698][T14655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.442178][T14655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.471259][T14655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.613149][T14655] hsr_slave_0: entered promiscuous mode [ 699.633701][T14655] hsr_slave_1: entered promiscuous mode [ 699.643651][T14655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.657929][T14655] Cannot create hsr debugfs directory [ 701.015466][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 701.015484][ T30] audit: type=1326 audit(1745734428.406:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 701.113656][ T30] audit: type=1326 audit(1745734428.406:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 701.197881][ T30] audit: type=1326 audit(1745734428.406:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 701.301333][ T30] audit: type=1326 audit(1745734428.406:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 701.426069][ T30] audit: type=1326 audit(1745734428.406:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 701.714630][ T30] audit: type=1326 audit(1745734428.406:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 702.364499][ T30] audit: type=1326 audit(1745734428.406:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9a8785927 code=0x7ffc0000 [ 702.386260][ T30] audit: type=1326 audit(1745734428.406:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9a872ab39 code=0x7ffc0000 [ 702.607949][ T30] audit: type=1326 audit(1745734428.406:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 702.729325][ T30] audit: type=1326 audit(1745734428.406:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff9a878e969 code=0x7ffc0000 [ 703.981858][T14655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 704.013697][T14655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.054338][T14655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 704.076005][T14655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 704.208988][T14869] FAULT_INJECTION: forcing a failure. [ 704.208988][T14869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.222397][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.1.3248 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 704.222428][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 704.222440][T14869] Call Trace: [ 704.222449][T14869] [ 704.222457][T14869] dump_stack_lvl+0x189/0x250 [ 704.222488][T14869] ? __lock_acquire+0xaac/0xd20 [ 704.222517][T14869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.222545][T14869] ? __pfx__printk+0x10/0x10 [ 704.222576][T14869] ? __might_fault+0xb0/0x130 [ 704.222618][T14869] should_fail_ex+0x414/0x560 [ 704.222664][T14869] _copy_from_user+0x2d/0xb0 [ 704.222691][T14869] ucma_write+0x158/0x2e0 [ 704.222717][T14869] ? __pfx_ucma_write+0x10/0x10 [ 704.222737][T14869] ? security_file_permission+0x75/0x290 [ 704.222760][T14869] ? rw_verify_area+0x258/0x650 [ 704.222786][T14869] ? __pfx_ucma_write+0x10/0x10 [ 704.222809][T14869] vfs_write+0x27b/0xa90 [ 704.222844][T14869] ? __pfx_vfs_write+0x10/0x10 [ 704.222872][T14869] ? __fget_files+0x2a/0x420 [ 704.222906][T14869] ? __fget_files+0x2a/0x420 [ 704.222934][T14869] ? __fget_files+0x3a0/0x420 [ 704.222962][T14869] ? __fget_files+0x2a/0x420 [ 704.223001][T14869] ksys_write+0x145/0x250 [ 704.223031][T14869] ? __pfx_ksys_write+0x10/0x10 [ 704.223061][T14869] ? do_syscall_64+0xba/0x210 [ 704.223087][T14869] do_syscall_64+0xf6/0x210 [ 704.223108][T14869] ? clear_bhb_loop+0x45/0xa0 [ 704.223133][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.223153][T14869] RIP: 0033:0x7f7963f8e969 [ 704.223171][T14869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.223189][T14869] RSP: 002b:00007f7964dfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.223210][T14869] RAX: ffffffffffffffda RBX: 00007f79641b6080 RCX: 00007f7963f8e969 [ 704.223225][T14869] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000006 [ 704.223238][T14869] RBP: 00007f7964dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 704.223251][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.223262][T14869] R13: 0000000000000000 R14: 00007f79641b6080 R15: 00007ffed3818328 [ 704.223294][T14869] [ 704.521331][T14655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.543311][T14655] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.565530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.572726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.646729][T14655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.663361][T14655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.685741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.692994][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.733849][T14655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.009667][T14655] veth0_vlan: entered promiscuous mode [ 706.154125][T14655] veth1_vlan: entered promiscuous mode [ 706.231158][T14898] : entered promiscuous mode [ 706.279856][T14905] usb usb8: usbfs: process 14905 (syz.3.3259) did not claim interface 0 before use [ 706.337723][T14907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 706.363028][T14655] veth0_macvtap: entered promiscuous mode [ 706.374820][T14655] veth1_macvtap: entered promiscuous mode [ 706.405868][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.431344][T14912] sctp: [Deprecated]: syz.4.3262 (pid 14912) Use of int in max_burst socket option deprecated. [ 706.431344][T14912] Use struct sctp_assoc_value instead [ 706.460471][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.472229][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.509597][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.521926][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.534962][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.552807][T14655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.738277][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.775823][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.785902][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.804521][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.814897][T14655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.825389][T14655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.840059][T14655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.858515][ T3079] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 706.875366][T14655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.892099][T14655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.901621][T14655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.912180][T14655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.040333][ T3079] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.087448][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.096624][ T3079] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.097386][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.134002][ T3079] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.710133][ T3079] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 707.739620][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.747647][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.755436][ T3079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.767189][ T3079] usb 5-1: config 0 descriptor?? [ 708.364372][T13325] Bluetooth: hci5: command 0x0406 tx timeout [ 708.837608][T14954] program syz.1.3271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.019850][ T5822] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 709.030679][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u9:2 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 709.030711][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 709.030725][ T5822] Workqueue: hci5 hci_rx_work [ 709.030753][ T5822] Call Trace: [ 709.030765][ T5822] [ 709.030776][ T5822] dump_stack_lvl+0x189/0x250 [ 709.030814][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.030843][ T5822] ? __pfx__printk+0x10/0x10 [ 709.030880][ T5822] ? __rcu_read_unlock+0x84/0xe0 [ 709.030901][ T5822] ? kernfs_path_from_node+0x2b/0x260 [ 709.030923][ T5822] ? kernfs_path_from_node+0x216/0x260 [ 709.030949][ T5822] sysfs_create_dir_ns+0x259/0x280 [ 709.030985][ T5822] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 709.031019][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 709.031048][ T5822] kobject_add_internal+0x59f/0xb40 [ 709.031083][ T5822] kobject_add+0x155/0x220 [ 709.031113][ T5822] ? __pfx_kobject_add+0x10/0x10 [ 709.031137][ T5822] ? _raw_spin_unlock+0x3f/0x50 [ 709.031172][ T5822] ? get_device_parent+0x366/0x3a0 [ 709.031200][ T5822] device_add+0x408/0xb50 [ 709.031228][ T5822] hci_conn_add_sysfs+0xd5/0x1e0 [ 709.031252][ T5822] le_conn_complete_evt+0xc3a/0x1220 [ 709.031306][ T5822] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 709.031338][ T5822] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 709.031358][ T5822] ? __asan_memcpy+0x40/0x70 [ 709.031385][ T5822] ? __pfx___mutex_lock+0x10/0x10 [ 709.031406][ T5822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 709.031426][ T5822] ? skb_pull_data+0xfb/0x200 [ 709.031458][ T5822] hci_le_conn_complete_evt+0x187/0x450 [ 709.031497][ T5822] hci_event_packet+0x7a2/0x1270 [ 709.031529][ T5822] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 709.031559][ T5822] ? __pfx_hci_event_packet+0x10/0x10 [ 709.031585][ T5822] ? kcov_remote_start+0x4d3/0x7f0 [ 709.031608][ T5822] ? lockdep_hardirqs_on+0x20/0x150 [ 709.031644][ T5822] ? hci_send_to_monitor+0xd7/0x4f0 [ 709.031680][ T5822] hci_rx_work+0x46a/0xe80 [ 709.031714][ T5822] ? process_scheduled_works+0x9ec/0x17a0 [ 709.031749][ T5822] process_scheduled_works+0xadb/0x17a0 [ 709.031817][ T5822] ? __pfx_process_scheduled_works+0x10/0x10 [ 709.031871][ T5822] worker_thread+0x8a0/0xda0 [ 709.031935][ T5822] kthread+0x70e/0x8a0 [ 709.031962][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 709.031992][ T5822] ? __pfx_kthread+0x10/0x10 [ 709.032016][ T5822] ? __pfx_kthread+0x10/0x10 [ 709.032037][ T5822] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.032067][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.032100][ T5822] ? __pfx_kthread+0x10/0x10 [ 709.032121][ T5822] ret_from_fork+0x4b/0x80 [ 709.032139][ T5822] ? __pfx_kthread+0x10/0x10 [ 709.032160][ T5822] ret_from_fork_asm+0x1a/0x30 [ 709.032230][ T5822] [ 709.032736][ T5822] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 709.333886][ T5822] Bluetooth: hci5: failed to register connection device [ 709.549715][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 709.549735][ T30] audit: type=1326 audit(1745734436.955:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 709.754417][ T3079] usbhid 5-1:0.0: can't add hid device: -71 [ 709.760905][ T3079] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 709.777152][ T3079] usb 5-1: USB disconnect, device number 24 [ 710.089018][ T30] audit: type=1326 audit(1745734436.985:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.114992][ T30] audit: type=1326 audit(1745734436.985:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.188269][ T30] audit: type=1326 audit(1745734436.985:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.220011][ T30] audit: type=1326 audit(1745734436.985:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.292965][ T30] audit: type=1326 audit(1745734436.985:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.316792][ T30] audit: type=1326 audit(1745734436.985:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.515639][ T30] audit: type=1326 audit(1745734436.995:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 710.878435][ T30] audit: type=1326 audit(1745734436.995:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14947 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 711.546744][T14980] input: syz0 as /devices/virtual/input/input21 [ 711.648834][T13325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.664014][T13325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.672709][T13325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.692212][T13325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.706612][T13325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.963856][T14983] lo speed is unknown, defaulting to 1000 [ 712.209095][T14928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 713.207258][T14928] usb 2-1: config 0 has no interfaces? [ 713.213509][T14928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 713.226592][T14928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.250462][T14928] usb 2-1: config 0 descriptor?? [ 713.342274][T14983] chnl_net:caif_netlink_parms(): no params data found [ 713.800157][T13325] Bluetooth: hci2: command tx timeout [ 713.900678][T15007] program syz.1.3282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.980166][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 714.054649][T14983] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.082120][T14983] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.109930][T14983] bridge_slave_0: entered allmulticast mode [ 714.117898][T14983] bridge_slave_0: entered promiscuous mode [ 714.127214][T14983] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.142644][T14983] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.188985][T14983] bridge_slave_1: entered allmulticast mode [ 714.231714][T14983] bridge_slave_1: entered promiscuous mode [ 714.676772][T14983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.703796][T14983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.799937][T14983] team0: Port device team_slave_0 added [ 714.826558][T14983] team0: Port device team_slave_1 added [ 715.347116][T14983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.363888][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.399986][T14983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.426652][T14983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.434231][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.461498][T14983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.673408][T14983] hsr_slave_0: entered promiscuous mode [ 715.680311][T14983] hsr_slave_1: entered promiscuous mode [ 715.686883][T14983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.704402][T14983] Cannot create hsr debugfs directory [ 715.863227][ T3079] usb 2-1: USB disconnect, device number 14 [ 715.870300][T13325] Bluetooth: hci2: command tx timeout [ 717.903040][T15041] netlink: 'syz.1.3292': attribute type 23 has an invalid length. [ 717.950647][T13325] Bluetooth: hci2: command tx timeout [ 718.179996][ T5936] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 718.516199][T14983] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.581380][T14983] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.612560][ T5936] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 718.620779][ T5936] usb 2-1: config 0 has no interface number 0 [ 718.627178][ T5936] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 718.639232][ T5936] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 718.650353][ T5936] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 718.661435][ T5936] usb 2-1: config 0 interface 85 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 718.673113][ T5936] usb 2-1: config 0 interface 85 has no altsetting 0 [ 718.690780][ T5936] usb 2-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=74.b0 [ 718.700204][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.708336][ T5936] usb 2-1: Product: syz [ 718.730102][ T5936] usb 2-1: Manufacturer: 㑧郍∞ꉔ왴Eፌ᫼ᄞ፽ㄓꐞᦋ⸋걓冲繞㇙焖蚾鐿䍍੗葉꫞殫贼䈭榚Ž㱳ꪔ濵󟵺 [ 718.745339][ T5936] usb 2-1: SerialNumber: syz [ 718.825666][ T5936] usb 2-1: config 0 descriptor?? [ 718.921973][T14983] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.160106][ T978] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 719.256852][T14983] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.333948][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 719.344637][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 719.354809][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 719.364688][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 719.377256][ T978] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 719.386641][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.397845][ T978] usb 4-1: Product: syz [ 719.406044][ T978] usb 4-1: Manufacturer: syz [ 719.411587][ T978] usb 4-1: SerialNumber: syz [ 719.420552][ T978] usb 4-1: config 0 descriptor?? [ 719.428444][ T978] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 719.476707][T14983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 719.488532][T14983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 719.501508][T14983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.513882][T14983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.570275][ T5875] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 719.632203][T14983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.639498][ T978] scsi host1: usb-storage 4-1:0.0 [ 719.659662][ T978] usb 4-1: USB disconnect, device number 18 [ 719.663521][T14983] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.679060][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.686219][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.700418][ T5875] usb 3-1: device descriptor read/64, error -71 [ 719.733905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.741106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.963272][ T5875] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 720.014951][T14983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.030465][T13325] Bluetooth: hci2: command tx timeout [ 720.082402][T14983] veth0_vlan: entered promiscuous mode [ 720.097086][T14983] veth1_vlan: entered promiscuous mode [ 720.120296][ T5875] usb 3-1: device descriptor read/64, error -71 [ 720.134816][T14983] veth0_macvtap: entered promiscuous mode [ 720.228303][ T5936] usb 2-1: USB disconnect, device number 15 [ 720.278916][ T5875] usb usb3-port1: attempt power cycle [ 720.318234][T14983] veth1_macvtap: entered promiscuous mode [ 720.350983][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.365577][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.376436][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.389315][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.410654][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.442658][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.473378][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.498248][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.606412][T14983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.622614][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.700336][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 720.708242][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.724657][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.751497][ T5875] usb 3-1: device descriptor read/8, error -71 [ 720.823931][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.882453][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.974474][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.010171][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.051218][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.089611][T14983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.142614][ T5875] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 721.159560][T14983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.251803][ T5875] usb 3-1: device descriptor read/8, error -71 [ 721.302097][T14983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.317967][T14983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.380146][T14983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.433327][ T5875] usb usb3-port1: unable to enumerate USB device [ 721.818086][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.840041][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.958605][T15073] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 721.978431][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.004386][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.404388][T15089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3270'. [ 723.413507][T15089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3270'. [ 724.352481][T15091] XFS (nbd2): no-recovery mounts must be read-only. [ 725.531817][T15107] netlink: 'syz.0.3306': attribute type 23 has an invalid length. [ 726.347144][T14928] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 726.506331][T14928] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 726.517802][T14928] usb 1-1: config 0 has no interface number 0 [ 726.527168][T14928] usb 1-1: config 0 interface 85 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 726.539809][T14928] usb 1-1: config 0 interface 85 altsetting 2 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 726.555825][T14928] usb 1-1: config 0 interface 85 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 726.578302][T14928] usb 1-1: config 0 interface 85 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 726.581767][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 726.596774][T14928] usb 1-1: config 0 interface 85 has no altsetting 0 [ 726.616851][T14928] usb 1-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=74.b0 [ 726.640608][T14928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.648955][T14928] usb 1-1: Product: syz [ 726.657848][T14928] usb 1-1: Manufacturer: 㑧郍∞ꉔ왴Eፌ᫼ᄞ፽ㄓꐞᦋ⸋걓冲繞㇙焖蚾鐿䍍੗葉꫞殫贼䈭榚Ž㱳ꪔ濵󟵺 [ 726.683804][T14928] usb 1-1: SerialNumber: syz [ 726.699601][T14928] usb 1-1: config 0 descriptor?? [ 726.763169][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 726.795747][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 726.839397][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 726.860328][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 727.074526][ T5892] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 727.083918][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.094468][ T5892] usb 3-1: Product: syz [ 727.099888][ T5892] usb 3-1: Manufacturer: syz [ 727.107008][ T5892] usb 3-1: SerialNumber: syz [ 727.127943][ T5892] usb 3-1: config 0 descriptor?? [ 727.140171][ T5892] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 727.346656][ T5892] scsi host1: usb-storage 3-1:0.0 [ 727.388252][ T5892] usb 3-1: USB disconnect, device number 11 [ 728.447536][T14928] usb 1-1: USB disconnect, device number 23 [ 728.906811][T15143] XFS (nbd2): no-recovery mounts must be read-only. [ 729.149487][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3316'. [ 729.241335][T15148] overlayfs: missing 'lowerdir' [ 729.260799][T15148] 8021q: VLANs not supported on vcan0 [ 729.272615][T15147] FAULT_INJECTION: forcing a failure. [ 729.272615][T15147] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 729.285935][T15147] CPU: 0 UID: 0 PID: 15147 Comm: syz.1.3317 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 729.285956][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 729.285965][T15147] Call Trace: [ 729.285971][T15147] [ 729.285977][T15147] dump_stack_lvl+0x189/0x250 [ 729.286004][T15147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.286023][T15147] ? __pfx__printk+0x10/0x10 [ 729.286047][T15147] ? fs_reclaim_acquire+0x7d/0x100 [ 729.286069][T15147] should_fail_ex+0x414/0x560 [ 729.286095][T15147] prepare_alloc_pages+0x213/0x610 [ 729.286116][T15147] __alloc_frozen_pages_noprof+0x123/0x370 [ 729.286135][T15147] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 729.286163][T15147] alloc_pages_bulk_noprof+0x560/0x710 [ 729.286180][T15147] ? rcu_is_watching+0x15/0xb0 [ 729.286201][T15147] ? trace_kmalloc+0x1f/0xd0 [ 729.286220][T15147] ? __kmalloc_noprof+0x29b/0x4f0 [ 729.286239][T15147] ? copy_splice_read+0x143/0x9b0 [ 729.286262][T15147] copy_splice_read+0x173/0x9b0 [ 729.286291][T15147] ? __pfx_copy_splice_read+0x10/0x10 [ 729.286309][T15147] ? look_up_lock_class+0x74/0x170 [ 729.286324][T15147] ? register_lock_class+0x51/0x320 [ 729.286345][T15147] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 729.286370][T15147] ? alloc_pipe_info+0x374/0x4d0 [ 729.286391][T15147] ? __pfx_copy_splice_read+0x10/0x10 [ 729.286409][T15147] splice_direct_to_actor+0x4a6/0xcc0 [ 729.286444][T15147] ? __pfx_direct_splice_actor+0x10/0x10 [ 729.286464][T15147] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 729.286492][T15147] do_splice_direct+0x181/0x270 [ 729.286514][T15147] ? __pfx_do_splice_direct+0x10/0x10 [ 729.286535][T15147] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 729.286558][T15147] ? bpf_lsm_file_permission+0x9/0x20 [ 729.286575][T15147] ? security_file_permission+0x75/0x290 [ 729.286592][T15147] ? rw_verify_area+0x258/0x650 [ 729.286613][T15147] do_sendfile+0x4da/0x7d0 [ 729.286627][T15147] ? __pfx_vfs_write+0x10/0x10 [ 729.286652][T15147] ? __pfx_do_sendfile+0x10/0x10 [ 729.286666][T15147] ? __fget_files+0x3a0/0x420 [ 729.286695][T15147] __se_sys_sendfile64+0x13e/0x190 [ 729.286717][T15147] ? rcu_is_watching+0x15/0xb0 [ 729.286738][T15147] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 729.286768][T15147] ? do_syscall_64+0xba/0x210 [ 729.286786][T15147] do_syscall_64+0xf6/0x210 [ 729.286801][T15147] ? clear_bhb_loop+0x45/0xa0 [ 729.286819][T15147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.286833][T15147] RIP: 0033:0x7f7963f8e969 [ 729.286846][T15147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.286859][T15147] RSP: 002b:00007f7964e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 729.286875][T15147] RAX: ffffffffffffffda RBX: 00007f79641b5fa0 RCX: 00007f7963f8e969 [ 729.286886][T15147] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 729.286894][T15147] RBP: 00007f7964e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 729.286903][T15147] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 729.286912][T15147] R13: 0000000000000000 R14: 00007f79641b5fa0 R15: 00007ffed3818328 [ 729.286933][T15147] [ 729.852245][T15153] FAULT_INJECTION: forcing a failure. [ 729.852245][T15153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.911118][ T978] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 729.916431][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.2.3321 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 729.916465][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 729.916479][T15153] Call Trace: [ 729.916488][T15153] [ 729.916505][T15153] dump_stack_lvl+0x189/0x250 [ 729.916539][T15153] ? __lock_acquire+0xaac/0xd20 [ 729.916570][T15153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.916598][T15153] ? __pfx__printk+0x10/0x10 [ 729.916630][T15153] ? __might_fault+0xb0/0x130 [ 729.916675][T15153] should_fail_ex+0x414/0x560 [ 729.916714][T15153] _copy_from_user+0x2d/0xb0 [ 729.916743][T15153] ___sys_sendmsg+0x158/0x2a0 [ 729.916771][T15153] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.916834][T15153] ? __fget_files+0x2a/0x420 [ 729.916865][T15153] ? __fget_files+0x3a0/0x420 [ 729.916908][T15153] __x64_sys_sendmsg+0x19b/0x260 [ 729.916936][T15153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.916980][T15153] ? do_syscall_64+0xba/0x210 [ 729.917007][T15153] do_syscall_64+0xf6/0x210 [ 729.917030][T15153] ? clear_bhb_loop+0x45/0xa0 [ 729.917056][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.917076][T15153] RIP: 0033:0x7fe54058e969 [ 729.917096][T15153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.917114][T15153] RSP: 002b:00007fe541433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.917137][T15153] RAX: ffffffffffffffda RBX: 00007fe5407b5fa0 RCX: 00007fe54058e969 [ 729.917153][T15153] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 729.917168][T15153] RBP: 00007fe541433090 R08: 0000000000000000 R09: 0000000000000000 [ 729.917181][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.917193][T15153] R13: 0000000000000000 R14: 00007fe5407b5fa0 R15: 00007ffdd6345858 [ 729.917225][T15153] [ 730.271609][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 730.278811][ T978] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 730.304895][ T978] usb 2-1: config 0 has no interface number 0 [ 730.448602][ T978] usb 2-1: New USB device found, idVendor=0664, idProduct=0306, bcdDevice=eb.63 [ 730.471152][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.497914][ T978] usb 2-1: config 0 descriptor?? [ 730.825546][ T5936] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 730.865594][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 731.012843][T15175] netlink: 'syz.2.3327': attribute type 23 has an invalid length. [ 731.511661][ T5875] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 731.791695][ T5875] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 731.840000][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 731.851031][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 731.866980][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 731.898833][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.913727][ T5875] usb 3-1: config 0 has no interface number 0 [ 731.921226][ T5936] usb 4-1: config 0 has no interfaces? [ 731.926947][ T5936] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 731.928414][ T5875] usb 3-1: config 0 interface 85 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 731.958189][ T5875] usb 3-1: config 0 interface 85 altsetting 2 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 731.969676][ T5875] usb 3-1: config 0 interface 85 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 731.981244][ T5875] usb 3-1: config 0 interface 85 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 731.993271][ T5875] usb 3-1: config 0 interface 85 has no altsetting 0 [ 732.000306][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.014010][ T5875] usb 3-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=74.b0 [ 732.022238][ T5936] usb 4-1: config 0 descriptor?? [ 732.035053][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.043407][ T5875] usb 3-1: Product: syz [ 732.047796][ T5875] usb 3-1: Manufacturer: 㑧郍∞ꉔ왴Eፌ᫼ᄞ፽ㄓꐞᦋ⸋걓冲繞㇙焖蚾鐿䍍੗葉꫞殫贼䈭榚Ž㱳ꪔ濵󟵺 [ 732.065352][ T5875] usb 3-1: SerialNumber: syz [ 732.080803][ T5875] usb 3-1: config 0 descriptor?? [ 732.149979][T15182] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 732.162797][T15182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3329'. [ 732.976210][ T978] usb 2-1: string descriptor 0 read error: -71 [ 732.999670][ T978] usb 2-1: USB disconnect, device number 16 [ 733.066446][T15170] chnl_net:caif_netlink_parms(): no params data found [ 734.001655][ T5832] Bluetooth: hci4: command tx timeout [ 734.029941][ T5875] usb 3-1: USB disconnect, device number 12 [ 734.272354][ T978] usb 4-1: USB disconnect, device number 19 [ 734.300925][T15199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 734.329205][T15170] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.338172][T15170] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.346723][T15170] bridge_slave_0: entered allmulticast mode [ 734.356731][T15170] bridge_slave_0: entered promiscuous mode [ 734.387946][T15170] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.409822][T15170] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.426104][T15170] bridge_slave_1: entered allmulticast mode [ 734.438265][T15170] bridge_slave_1: entered promiscuous mode [ 734.619742][T15170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.654494][T15170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.821436][T15226] FAULT_INJECTION: forcing a failure. [ 734.821436][T15226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.834826][T15170] team0: Port device team_slave_0 added [ 734.899665][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 734.911343][T15226] CPU: 1 UID: 0 PID: 15226 Comm: syz.2.3340 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 734.911378][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 734.911392][T15226] Call Trace: [ 734.911402][T15226] [ 734.911412][T15226] dump_stack_lvl+0x189/0x250 [ 734.911443][T15226] ? __lock_acquire+0xaac/0xd20 [ 734.911471][T15226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.911499][T15226] ? __pfx__printk+0x10/0x10 [ 734.911532][T15226] ? __might_fault+0xb0/0x130 [ 734.911577][T15226] should_fail_ex+0x414/0x560 [ 734.911624][T15226] _copy_from_user+0x2d/0xb0 [ 734.911652][T15226] ___sys_recvmsg+0x12e/0x510 [ 734.911685][T15226] ? __pfx____sys_recvmsg+0x10/0x10 [ 734.911736][T15226] ? __fget_files+0x3a0/0x420 [ 734.911781][T15226] __x64_sys_recvmsg+0x198/0x260 [ 734.911809][T15226] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 734.911852][T15226] ? do_syscall_64+0xba/0x210 [ 734.911879][T15226] do_syscall_64+0xf6/0x210 [ 734.911901][T15226] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 734.911922][T15226] ? clear_bhb_loop+0x45/0xa0 [ 734.911949][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.911969][T15226] RIP: 0033:0x7fe54058e969 [ 734.911989][T15226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.912008][T15226] RSP: 002b:00007fe541433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 734.912030][T15226] RAX: ffffffffffffffda RBX: 00007fe5407b5fa0 RCX: 00007fe54058e969 [ 734.912046][T15226] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 734.912060][T15226] RBP: 00007fe541433090 R08: 0000000000000000 R09: 0000000000000000 [ 734.912073][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.912086][T15226] R13: 0000000000000000 R14: 00007fe5407b5fa0 R15: 00007ffdd6345858 [ 734.912119][T15226] [ 734.941066][T15170] team0: Port device team_slave_1 added [ 734.948292][T15227] XFS (nbd1): no-recovery mounts must be read-only. [ 735.501231][T15170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.521107][T15170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.571948][T15170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.601837][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 735.612291][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 735.624237][ T10] usb 1-1: config 0 has no interface number 0 [ 735.638077][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 735.648995][T15170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.670286][T15170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.709292][T15170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.732761][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 735.756989][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.791721][ T10] usb 1-1: Product: syz [ 735.809168][ T10] usb 1-1: Manufacturer: syz [ 735.822797][ T10] usb 1-1: SerialNumber: syz [ 736.049867][ T5832] Bluetooth: hci4: command tx timeout [ 736.139774][T15237] netlink: 'syz.1.3343': attribute type 23 has an invalid length. [ 736.562087][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 736.804117][ T5872] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 736.828433][ T5872] usb 2-1: config 0 has no interface number 0 [ 736.845545][ T5872] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 736.877337][ T5872] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 736.909053][ T5872] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 736.930525][ T5872] usb 2-1: config 0 interface 85 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 736.956713][ T10] usb 1-1: config 0 descriptor?? [ 736.974480][ T10] smsc75xx v1.0.0 [ 737.030356][ T5872] usb 2-1: config 0 interface 85 has no altsetting 0 [ 737.045913][T15170] hsr_slave_0: entered promiscuous mode [ 737.064751][T15170] hsr_slave_1: entered promiscuous mode [ 737.071176][T15170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.082378][ T5872] usb 2-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=74.b0 [ 737.098768][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.122836][T15170] Cannot create hsr debugfs directory [ 737.130689][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.144548][ T5872] usb 2-1: Product: syz [ 737.155234][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.172006][ T5872] usb 2-1: Manufacturer: syz [ 737.182164][ T5872] usb 2-1: SerialNumber: syz [ 737.210276][ T5872] usb 2-1: config 0 descriptor?? [ 737.446252][ T5936] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 737.659953][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 737.678256][ T5936] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 737.681406][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 737.699074][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.719257][ T5936] usb 4-1: config 0 descriptor?? [ 737.875909][T15170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.889573][T15170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 737.910063][T15170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 737.912774][T15250] input: syz0 as /devices/virtual/input/input25 [ 737.935151][T15170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 738.112145][ T5832] Bluetooth: hci4: command tx timeout [ 738.297144][T15170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.414653][T15256] hub 9-0:1.0: USB hub found [ 738.422784][T15256] hub 9-0:1.0: 1 port detected [ 738.469102][T15256] Invalid source name [ 738.473321][T15256] UBIFS error (pid: 15256): cannot open "./file0", error -22 [ 738.919762][T15170] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.945414][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.952624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.977431][ T5872] usb 2-1: USB disconnect, device number 17 [ 739.038568][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.045837][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.139271][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 739.160142][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 739.190688][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 739.206606][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 739.237712][ T10] usb 1-1: USB disconnect, device number 24 [ 739.469974][T13909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 739.648382][T13909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.697282][T15170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.718976][T13909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.759968][T13909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.810944][T13909] usb 2-1: Product: syz [ 739.841167][T13909] usb 2-1: Manufacturer: syz [ 739.859205][T13909] usb 2-1: SerialNumber: syz [ 740.212348][ T5832] Bluetooth: hci4: command tx timeout [ 740.328415][ T5936] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 740.337093][ T5936] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 740.352840][ T5936] [drm:udl_init] *ERROR* Selecting channel failed [ 740.407746][ T5936] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 740.429168][T15170] veth0_vlan: entered promiscuous mode [ 740.431465][ T5936] [drm] Initialized udl on minor 2 [ 740.448566][ T5936] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 740.482654][T15170] veth1_vlan: entered promiscuous mode [ 740.600918][T15170] veth0_macvtap: entered promiscuous mode [ 740.621329][T15288] Bluetooth: MGMT ver 1.23 [ 740.651876][T15290] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3356'. [ 740.704998][ T5936] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 740.714902][T15257] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 740.731175][T15170] veth1_macvtap: entered promiscuous mode [ 740.836753][ T5936] usb 4-1: USB disconnect, device number 20 [ 740.847281][T15257] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 741.135482][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.215910][T13909] cdc_ncm 2-1:1.0: bind() failure [ 741.301114][T13909] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 741.320997][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.351578][T13909] cdc_ncm 2-1:1.1: bind() failure [ 741.358418][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.412953][T13909] usb 2-1: USB disconnect, device number 18 [ 741.426904][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.436898][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.447535][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.457458][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.468258][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.479880][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.490547][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.503107][T15170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.517447][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.528288][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.538205][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.550842][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.569898][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.591662][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.625155][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.652497][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.662349][T15170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.682518][T15170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.733673][T15299] Driver unsupported XDP return value 0 on prog (id 775) dev N/A, expect packet loss! [ 741.745633][T15170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.857874][T15170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.874618][T15170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.886878][T15170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.908538][T15170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.377712][ T8053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.845981][ T8053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.048278][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.056463][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.436796][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 743.773473][ T978] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 744.932936][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 746.945016][ T978] usb 4-1: too many configurations: 11, using maximum allowed: 8 [ 746.979817][T15337] 9pnet_fd: Insufficient options for proto=fd [ 747.119575][ T978] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 747.143749][ T978] usb 4-1: can't read configurations, error -71 [ 747.297453][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.362170][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'. [ 748.726977][T15358] Invalid ELF header magic: != ELF [ 748.812836][T15358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3374'. [ 748.822251][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 749.694802][T15371] FAULT_INJECTION: forcing a failure. [ 749.694802][T15371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.761896][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.0.3378 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 749.761927][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 749.761940][T15371] Call Trace: [ 749.761948][T15371] [ 749.761957][T15371] dump_stack_lvl+0x189/0x250 [ 749.761985][T15371] ? __lock_acquire+0xaac/0xd20 [ 749.762025][T15371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.762052][T15371] ? __pfx__printk+0x10/0x10 [ 749.762082][T15371] ? __might_fault+0xb0/0x130 [ 749.762122][T15371] should_fail_ex+0x414/0x560 [ 749.762158][T15371] _copy_from_user+0x2d/0xb0 [ 749.762185][T15371] __sys_bpf+0x1ed/0x860 [ 749.762210][T15371] ? __pfx___sys_bpf+0x10/0x10 [ 749.762245][T15371] ? ksys_write+0x1f0/0x250 [ 749.762270][T15371] ? rcu_is_watching+0x15/0xb0 [ 749.762313][T15371] __x64_sys_bpf+0x7c/0x90 [ 749.762334][T15371] do_syscall_64+0xf6/0x210 [ 749.762355][T15371] ? clear_bhb_loop+0x45/0xa0 [ 749.762380][T15371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.762399][T15371] RIP: 0033:0x7f627ed8e969 [ 749.762417][T15371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.762434][T15371] RSP: 002b:00007f627fcc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.762455][T15371] RAX: ffffffffffffffda RBX: 00007f627efb5fa0 RCX: 00007f627ed8e969 [ 749.762469][T15371] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000012 [ 749.762482][T15371] RBP: 00007f627fcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 749.762494][T15371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.762505][T15371] R13: 0000000000000000 R14: 00007f627efb5fa0 R15: 00007fff04643c18 [ 749.762535][T15371] [ 750.452686][T15377] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3380'. [ 750.488821][T15376] 9pnet_fd: Insufficient options for proto=fd [ 750.814056][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3384'. [ 751.681165][T15396] netlink: 'syz.2.3386': attribute type 27 has an invalid length. [ 751.729009][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.736543][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.809629][T15396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.821406][T15396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.879224][T15396] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.888234][T15396] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.897184][T15396] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.906088][T15396] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.132260][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 753.343586][T15414] FAULT_INJECTION: forcing a failure. [ 753.343586][T15414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.384224][T15414] CPU: 1 UID: 0 PID: 15414 Comm: syz.0.3388 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 753.384257][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 753.384269][T15414] Call Trace: [ 753.384277][T15414] [ 753.384285][T15414] dump_stack_lvl+0x189/0x250 [ 753.384320][T15414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.384347][T15414] ? __pfx__printk+0x10/0x10 [ 753.384379][T15414] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.384418][T15414] should_fail_ex+0x414/0x560 [ 753.384454][T15414] _copy_to_user+0x31/0xb0 [ 753.384481][T15414] __htab_map_lookup_and_delete_batch+0xfe5/0x13a0 [ 753.384543][T15414] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 753.384575][T15414] ? __pfx_htab_lru_percpu_map_lookup_batch+0x10/0x10 [ 753.384598][T15414] bpf_map_do_batch+0x25b/0x5f0 [ 753.384623][T15414] ? security_bpf+0x7e/0x300 [ 753.384648][T15414] __sys_bpf+0x70c/0x860 [ 753.384672][T15414] ? __pfx___sys_bpf+0x10/0x10 [ 753.384716][T15414] ? ksys_write+0x1f0/0x250 [ 753.384740][T15414] ? rcu_is_watching+0x15/0xb0 [ 753.384778][T15414] __x64_sys_bpf+0x7c/0x90 [ 753.384800][T15414] do_syscall_64+0xf6/0x210 [ 753.384820][T15414] ? clear_bhb_loop+0x45/0xa0 [ 753.384845][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.384865][T15414] RIP: 0033:0x7f627ed8e969 [ 753.384882][T15414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.384898][T15414] RSP: 002b:00007f627fcc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.384919][T15414] RAX: ffffffffffffffda RBX: 00007f627efb5fa0 RCX: 00007f627ed8e969 [ 753.384934][T15414] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 0000000000000018 [ 753.384947][T15414] RBP: 00007f627fcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 753.384959][T15414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.384971][T15414] R13: 0000000000000000 R14: 00007f627efb5fa0 R15: 00007fff04643c18 [ 753.385001][T15414] [ 754.764402][T15431] 9pnet_fd: Insufficient options for proto=fd [ 756.218216][ T978] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 756.666394][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 756.708108][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 757.168991][ T978] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 757.224440][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.234618][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 757.257059][ T978] usb 4-1: config 0 descriptor?? [ 757.268259][ T978] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 757.295182][ T5875] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 757.305062][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 757.313180][ T5875] usb 6-1: Product: syz [ 757.319822][ T5875] usb 6-1: Manufacturer: syz [ 757.324674][ T5875] usb 6-1: SerialNumber: syz [ 757.333182][ T5875] usb 6-1: config 0 descriptor?? [ 757.357826][ T5875] as10x_usb: device has been detected [ 757.365384][ T5875] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 757.399290][ T5875] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 757.460522][T15454] overlayfs: missing 'lowerdir' [ 758.062693][ T978] gspca_nw80x: reg_w err -110 [ 758.067651][ T978] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 758.123755][ T5875] as10x_usb: error during firmware upload part1 [ 758.173766][ T5875] Registered device Abilis Systems DVB-Titan [ 758.181925][ T5875] usb 6-1: USB disconnect, device number 2 [ 758.227549][ T5875] Unregistered device Abilis Systems DVB-Titan [ 758.229915][ T5875] as10x_usb: device has been disconnected [ 758.685820][T13909] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 758.854588][T13909] usb 1-1: Using ep0 maxpacket: 16 [ 758.924339][T13909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 759.003392][T13909] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 759.044968][T13909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.066567][T13909] usb 1-1: Product: syz [ 759.087447][T13909] usb 1-1: Manufacturer: syz [ 759.101746][T13909] usb 1-1: SerialNumber: syz [ 759.289999][T15476] 9pnet_fd: Insufficient options for proto=fd [ 759.335551][T13909] usb 1-1: config 0 descriptor?? [ 759.392480][T13909] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 759.403686][T13909] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 759.486351][ T10] usb 4-1: USB disconnect, device number 23 [ 759.741293][ T30] audit: type=1326 audit(1745734487.130:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 759.789704][ T30] audit: type=1326 audit(1745734487.170:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 759.815180][ T30] audit: type=1326 audit(1745734487.170:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 759.902102][ T30] audit: type=1326 audit(1745734487.170:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 760.053181][T13909] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 760.057025][ T30] audit: type=1326 audit(1745734487.170:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 760.304187][ T30] audit: type=1326 audit(1745734487.180:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 760.451373][ T30] audit: type=1326 audit(1745734487.180:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 760.557332][T15494] ntfs3(nullb0): Primary boot signature is not NTFS. [ 760.569635][T15494] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 760.796753][T13909] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 761.034842][ T30] audit: type=1326 audit(1745734487.180:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 761.057440][T13909] em28xx 1-1:0.0: board has no eeprom [ 761.134843][ T30] audit: type=1326 audit(1745734487.180:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 761.194306][ T30] audit: type=1326 audit(1745734487.210:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15485 comm="syz.5.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f02f7b8e969 code=0x7ffc0000 [ 761.226842][T13909] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 761.395454][T13909] em28xx 1-1:0.0: dvb set to bulk mode. [ 761.468726][ T5936] em28xx 1-1:0.0: Binding DVB extension [ 761.668541][T13909] usb 1-1: USB disconnect, device number 25 [ 761.676713][T13909] em28xx 1-1:0.0: Disconnecting em28xx [ 761.688443][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3414'. [ 762.415253][ T5936] em28xx 1-1:0.0: Registering input extension [ 762.450502][T13909] em28xx 1-1:0.0: Closing input extension [ 762.486383][T13909] em28xx 1-1:0.0: Freeing device [ 762.803638][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 762.836026][T15523] FAULT_INJECTION: forcing a failure. [ 762.836026][T15523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.849427][T15523] CPU: 0 UID: 0 PID: 15523 Comm: syz.0.3419 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 762.849447][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 762.849457][T15523] Call Trace: [ 762.849463][T15523] [ 762.849469][T15523] dump_stack_lvl+0x189/0x250 [ 762.849491][T15523] ? __lock_acquire+0xaac/0xd20 [ 762.849512][T15523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.849531][T15523] ? __pfx__printk+0x10/0x10 [ 762.849554][T15523] ? __might_fault+0xb0/0x130 [ 762.849585][T15523] should_fail_ex+0x414/0x560 [ 762.849612][T15523] _copy_from_user+0x2d/0xb0 [ 762.849639][T15523] kstrtouint_from_user+0xc4/0x170 [ 762.849656][T15523] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 762.849684][T15523] proc_fail_nth_write+0x88/0x240 [ 762.849699][T15523] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 762.849718][T15523] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 762.849734][T15523] vfs_write+0x27b/0xa90 [ 762.849760][T15523] ? __pfx_vfs_write+0x10/0x10 [ 762.849780][T15523] ? __fget_files+0x2a/0x420 [ 762.849806][T15523] ? __fget_files+0x3a0/0x420 [ 762.849826][T15523] ? __fget_files+0x2a/0x420 [ 762.849855][T15523] ksys_write+0x145/0x250 [ 762.849873][T15523] ? rcu_is_watching+0x15/0xb0 [ 762.849896][T15523] ? __pfx_ksys_write+0x10/0x10 [ 762.849918][T15523] ? do_syscall_64+0xba/0x210 [ 762.849936][T15523] do_syscall_64+0xf6/0x210 [ 762.849951][T15523] ? clear_bhb_loop+0x45/0xa0 [ 762.849970][T15523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.849984][T15523] RIP: 0033:0x7f627ed8d41f [ 762.849997][T15523] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 762.850009][T15523] RSP: 002b:00007f627fca4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 762.850024][T15523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f627ed8d41f [ 762.850034][T15523] RDX: 0000000000000001 RSI: 00007f627fca40a0 RDI: 0000000000000006 [ 762.850043][T15523] RBP: 00007f627fca4090 R08: 0000000000000000 R09: 0000000000000000 [ 762.850051][T15523] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 762.850060][T15523] R13: 0000000000000000 R14: 00007f627efb6080 R15: 00007fff04643c18 [ 762.850082][T15523] [ 763.207718][T15531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.213844][T15533] ntfs3(nullb0): Primary boot signature is not NTFS. [ 763.228296][T15533] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 763.475352][T15531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.270636][T15546] netlink: 'syz.1.3427': attribute type 23 has an invalid length. [ 765.535403][ T5875] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 765.665745][T15565] ntfs3(nullb0): Primary boot signature is not NTFS. [ 765.695363][T15565] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 765.715083][ T5875] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 765.738776][ T5875] usb 2-1: config 0 has no interface number 0 [ 765.744950][ T5875] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 765.795839][ T5875] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 765.820497][ T5875] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 765.853288][ T5875] usb 2-1: config 0 interface 85 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 765.874500][ T5875] usb 2-1: config 0 interface 85 has no altsetting 0 [ 765.900912][ T5875] usb 2-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=74.b0 [ 766.145392][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.153455][ T5875] usb 2-1: Product: syz [ 766.164780][ T5875] usb 2-1: Manufacturer: syz [ 766.169571][ T5875] usb 2-1: SerialNumber: syz [ 766.212990][ T5875] usb 2-1: config 0 descriptor?? [ 766.503162][ T5875] usb 2-1: USB disconnect, device number 19 [ 767.126463][T15584] FAULT_INJECTION: forcing a failure. [ 767.126463][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 767.155649][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.2.3439 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 767.155681][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 767.155694][T15584] Call Trace: [ 767.155702][T15584] [ 767.155710][T15584] dump_stack_lvl+0x189/0x250 [ 767.155747][T15584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.155774][T15584] ? __pfx__printk+0x10/0x10 [ 767.155811][T15584] ? __pfx___might_resched+0x10/0x10 [ 767.155840][T15584] ? fs_reclaim_acquire+0x7d/0x100 [ 767.155867][T15584] should_fail_ex+0x414/0x560 [ 767.155903][T15584] should_failslab+0xa8/0x100 [ 767.155936][T15584] __kmalloc_noprof+0xcb/0x4f0 [ 767.155964][T15584] ? kfree+0x4d/0x440 [ 767.155987][T15584] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 767.156019][T15584] tomoyo_realpath_from_path+0xe3/0x5d0 [ 767.156046][T15584] ? tomoyo_domain+0xda/0x130 [ 767.156077][T15584] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 767.156103][T15584] tomoyo_path_number_perm+0x1e8/0x5a0 [ 767.156127][T15584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 767.156166][T15584] ? __lock_acquire+0xaac/0xd20 [ 767.156212][T15584] ? __fget_files+0x2a/0x420 [ 767.156248][T15584] ? __fget_files+0x3a0/0x420 [ 767.156276][T15584] ? __fget_files+0x2a/0x420 [ 767.156310][T15584] security_file_ioctl+0xcb/0x2d0 [ 767.156335][T15584] __se_sys_ioctl+0x47/0x170 [ 767.156363][T15584] do_syscall_64+0xf6/0x210 [ 767.156387][T15584] ? clear_bhb_loop+0x45/0xa0 [ 767.156412][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.156432][T15584] RIP: 0033:0x7fe54058e969 [ 767.156458][T15584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.156481][T15584] RSP: 002b:00007fe541433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.156506][T15584] RAX: ffffffffffffffda RBX: 00007fe5407b5fa0 RCX: 00007fe54058e969 [ 767.156520][T15584] RDX: 0000200000000f00 RSI: 0000000000008946 RDI: 0000000000000004 [ 767.156533][T15584] RBP: 00007fe541433090 R08: 0000000000000000 R09: 0000000000000000 [ 767.156546][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.156557][T15584] R13: 0000000000000000 R14: 00007fe5407b5fa0 R15: 00007ffdd6345858 [ 767.156591][T15584] [ 767.156636][T15584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 767.763107][T15604] XFS (nbd3): no-recovery mounts must be read-only. [ 768.701188][T14928] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 768.719274][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 769.065826][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 769.071046][T14928] usb 1-1: Using ep0 maxpacket: 16 [ 769.245392][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 769.289285][T14928] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 769.315844][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.326073][T14928] usb 1-1: config 0 has no interface number 0 [ 769.332956][T14928] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 769.345349][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.356275][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.385694][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.446379][T14928] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 769.466827][T14928] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 769.484488][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.494123][T14928] usb 1-1: Product: syz [ 769.531100][T14928] usb 1-1: SerialNumber: syz [ 769.536503][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.728791][T14928] usb 1-1: config 0 descriptor?? [ 769.901946][ T5875] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 769.969949][T14928] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input27 [ 770.005669][ T10] usb 3-1: usb_control_msg returned -32 [ 770.011416][ T10] usbtmc 3-1:16.0: can't read capabilities [ 770.187263][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.196977][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.204173][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.211701][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.218913][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.226129][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.234464][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.241743][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.249007][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.256176][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 770.267094][ T10] usb 1-1: USB disconnect, device number 26 [ 770.273067][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 770.351052][ T5875] usb 2-1: config 0 has an invalid interface number: 100 but max is 0 [ 770.361412][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.373186][ T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 770.384368][ T5875] usb 2-1: config 0 has no interface number 0 [ 771.164077][ T5875] usb 2-1: too many endpoints for config 0 interface 100 altsetting 101: 118, using maximum allowed: 30 [ 771.175364][ T5875] usb 2-1: config 0 interface 100 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 118 [ 771.436008][ T5875] usb 2-1: config 0 interface 100 has no altsetting 0 [ 771.460648][ T5875] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 771.553849][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 771.562237][ T5875] usb 2-1: Product: syz [ 771.566468][ T5875] usb 2-1: Manufacturer: syz [ 771.571104][ T5875] usb 2-1: SerialNumber: syz [ 771.582283][ T5875] usb 2-1: config 0 descriptor?? [ 772.123157][T13909] usb 3-1: USB disconnect, device number 13 [ 773.226230][ T5875] usb 2-1: USB disconnect, device number 20 [ 774.067910][T15652] XFS (nbd3): no-recovery mounts must be read-only. [ 774.698846][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 776.940090][T15666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3461'. [ 777.163149][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 777.163168][ T30] audit: type=1326 audit(1745734504.548:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 777.211467][ T30] audit: type=1326 audit(1745734504.588:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 777.233709][ T30] audit: type=1326 audit(1745734504.588:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 777.263553][ T30] audit: type=1326 audit(1745734504.588:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 777.306484][ T30] audit: type=1326 audit(1745734504.588:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 777.367823][T15679] netlink: 'syz.1.3464': attribute type 23 has an invalid length. [ 777.666888][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 777.838685][ T5936] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 777.997710][ T5936] usb 2-1: config 0 has no interface number 0 [ 778.001218][ T5870] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 778.012036][ T5936] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 778.023890][ T5936] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 778.035028][ T5936] usb 2-1: config 0 interface 85 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 778.048245][ T5936] usb 2-1: config 0 interface 85 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 778.063025][ T5936] usb 2-1: config 0 interface 85 has no altsetting 0 [ 778.071755][ T30] audit: type=1326 audit(1745734504.618:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 778.102790][ T30] audit: type=1326 audit(1745734504.648:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 778.128876][ T5936] usb 2-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=74.b0 [ 778.142574][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.151109][ T5936] usb 2-1: Product: syz [ 778.155446][ T5936] usb 2-1: Manufacturer: syz [ 778.178324][ T5936] usb 2-1: SerialNumber: syz [ 778.213139][ T30] audit: type=1326 audit(1745734504.648:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 778.315801][ T5936] usb 2-1: config 0 descriptor?? [ 778.441912][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 778.462165][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 778.463559][ T30] audit: type=1326 audit(1745734504.648:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15675 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 778.486735][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 778.524118][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 778.642707][T15685] ntfs3(nullb0): Primary boot signature is not NTFS. [ 778.654446][T15685] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 778.663962][ T5870] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 778.700683][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.806797][ T5870] usb 1-1: Product: syz [ 778.997634][ T5870] usb 1-1: Manufacturer: syz [ 779.002376][ T5870] usb 1-1: SerialNumber: syz [ 779.010292][ T5870] usb 1-1: config 0 descriptor?? [ 779.018647][ T5870] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 780.048060][T13325] Bluetooth: hci1: command 0x0406 tx timeout [ 780.198824][ T5936] usb 2-1: USB disconnect, device number 21 [ 780.213025][ T5870] scsi host1: usb-storage 1-1:0.0 [ 780.256666][ T5870] usb 1-1: USB disconnect, device number 27 [ 781.355034][T15704] XFS (nbd3): no-recovery mounts must be read-only. [ 782.500252][T15711] 9pnet_fd: Insufficient options for proto=fd [ 783.327709][T15726] siw: device registration error -23 [ 783.555868][ T30] audit: type=1326 audit(1745734510.927:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15718 comm="syz.3.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597d98e969 code=0x7ffc0000 [ 783.579655][T15727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3478'. [ 783.589387][ T30] audit: type=1326 audit(1745734510.927:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15718 comm="syz.3.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f597d98e969 code=0x7ffc0000 [ 783.589441][ T30] audit: type=1326 audit(1745734510.927:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15718 comm="syz.3.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597d98e969 code=0x7ffc0000 [ 783.589485][ T30] audit: type=1326 audit(1745734510.927:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15718 comm="syz.3.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f597d98e969 code=0x7ffc0000 [ 783.589528][ T30] audit: type=1326 audit(1745734510.927:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15718 comm="syz.3.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597d98e969 code=0x7ffc0000 [ 784.118833][ T5870] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 784.529217][ T5870] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 784.547684][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.559943][ T5870] usb 1-1: config 0 descriptor?? [ 784.568783][ T5870] cp210x 1-1:0.0: cp210x converter detected [ 784.991351][T15737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.715307][ T5870] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 785.848499][T15737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.019373][ T5870] usb 1-1: cp210x converter now attached to ttyUSB0 [ 786.900059][ T5870] usb 1-1: USB disconnect, device number 28 [ 786.925096][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 786.948536][T15766] 9pnet_fd: Insufficient options for proto=fd [ 786.973434][ T5870] cp210x 1-1:0.0: device disconnected [ 787.047569][T15768] siw: device registration error -23 [ 788.663365][ T30] audit: type=1326 audit(1745734516.016:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15774 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f7b8e969 code=0x7fc00000 [ 788.889706][T15797] ntfs3(nullb0): Primary boot signature is not NTFS. [ 788.896907][T15797] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 789.138492][T15795] team_slave_0: entered promiscuous mode [ 789.144539][T15795] team_slave_1: entered promiscuous mode [ 789.300440][T15795] team_slave_0: left promiscuous mode [ 789.305989][T15795] team_slave_1: left promiscuous mode [ 789.549270][ T5875] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 790.142397][T15792] delete_channel: no stack [ 790.211049][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 790.232895][ T5875] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 790.259677][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 790.281547][ T5875] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.327195][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 790.357478][T15808] 9pnet_fd: Insufficient options for proto=fd [ 790.365824][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 790.424025][ T5875] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 790.438649][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 790.468463][ T5875] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.489811][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 790.493293][T15814] siw: device registration error -23 [ 790.501172][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 790.519358][ T5875] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 790.527631][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 790.552248][ T5875] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 790.574466][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 790.618231][ T5875] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 790.715314][ T5875] usb 6-1: string descriptor 0 read error: -22 [ 790.730792][ T5875] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 790.772242][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.797919][ T5875] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 792.228448][ T5875] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 792.286060][T14928] usb 6-1: USB disconnect, device number 3 [ 793.170992][T15848] delete_channel: no stack [ 793.186654][ T5875] usb 1-1: config 0 has an invalid interface number: 100 but max is 0 [ 793.203040][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.232616][ T5875] usb 1-1: config 0 has no interface number 0 [ 793.253429][ T5875] usb 1-1: too many endpoints for config 0 interface 100 altsetting 101: 118, using maximum allowed: 30 [ 793.287479][ T5875] usb 1-1: config 0 interface 100 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 118 [ 793.325471][ T5875] usb 1-1: config 0 interface 100 has no altsetting 0 [ 793.346493][ T5875] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 793.366197][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 793.376674][ T5875] usb 1-1: Product: syz [ 793.441379][ T5875] usb 1-1: Manufacturer: syz [ 793.446045][ T5875] usb 1-1: SerialNumber: syz [ 793.473639][T15858] 9pnet_fd: Insufficient options for proto=fd [ 793.565289][T15860] siw: device registration error -23 [ 793.655088][ T5875] usb 1-1: config 0 descriptor?? [ 794.514114][T15870] afs: Unknown parameter 'A' [ 794.775025][ T5875] usb 1-1: USB disconnect, device number 29 [ 795.350850][T15883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3523'. [ 797.433767][T15898] 9pnet_fd: Insufficient options for proto=fd [ 797.493240][T15901] siw: device registration error -23 [ 797.506139][ T30] audit: type=1326 audit(1745734524.895:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15902 comm="syz.1.3530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7963f8e969 code=0x0 [ 798.122914][ T5936] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 798.132690][T15924] FAULT_INJECTION: forcing a failure. [ 798.132690][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.194738][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz.0.3537 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 798.194769][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 798.194782][T15924] Call Trace: [ 798.194790][T15924] [ 798.194798][T15924] dump_stack_lvl+0x189/0x250 [ 798.194833][T15924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.194861][T15924] ? __pfx__printk+0x10/0x10 [ 798.194904][T15924] should_fail_ex+0x414/0x560 [ 798.194941][T15924] _copy_to_user+0x31/0xb0 [ 798.194970][T15924] simple_read_from_buffer+0xe1/0x170 [ 798.195005][T15924] proc_fail_nth_read+0x1df/0x250 [ 798.195030][T15924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.195053][T15924] ? rw_verify_area+0x258/0x650 [ 798.195079][T15924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.195101][T15924] vfs_read+0x1fd/0x980 [ 798.195136][T15924] ? __pfx_vfs_read+0x10/0x10 [ 798.195164][T15924] ? do_sys_openat2+0x154/0x1c0 [ 798.195183][T15924] ? kmem_cache_free+0x192/0x3f0 [ 798.195215][T15924] ? fsnotify_file_area_perm+0x166/0x1f0 [ 798.195259][T15924] ksys_read+0x145/0x250 [ 798.195284][T15924] ? rcu_is_watching+0x15/0xb0 [ 798.195314][T15924] ? __pfx_ksys_read+0x10/0x10 [ 798.195344][T15924] ? do_syscall_64+0xba/0x210 [ 798.195370][T15924] do_syscall_64+0xf6/0x210 [ 798.195391][T15924] ? clear_bhb_loop+0x45/0xa0 [ 798.195417][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.195437][T15924] RIP: 0033:0x7f627ed8d37c [ 798.195455][T15924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 798.195472][T15924] RSP: 002b:00007f627fcc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 798.195494][T15924] RAX: ffffffffffffffda RBX: 00007f627efb5fa0 RCX: 00007f627ed8d37c [ 798.195509][T15924] RDX: 000000000000000f RSI: 00007f627fcc50a0 RDI: 0000000000000004 [ 798.195522][T15924] RBP: 00007f627fcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 798.195535][T15924] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000001 [ 798.195558][T15924] R13: 0000000000000000 R14: 00007f627efb5fa0 R15: 00007fff04643c18 [ 798.195590][T15924] [ 798.736321][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 798.826041][ T5936] usb 3-1: not running at top speed; connect to a high speed hub [ 798.960154][ T5936] usb 3-1: config 8 has an invalid interface number: 225 but max is 0 [ 799.092538][ T5936] usb 3-1: config 8 has no interface number 0 [ 799.136734][ T5936] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84 [ 799.189470][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.236051][ T5936] usb 3-1: Product: syz [ 799.279595][ T5936] usb 3-1: Manufacturer: syz [ 799.325151][ T5936] usb 3-1: SerialNumber: syz [ 799.357598][T15931] netlink: 'syz.0.3539': attribute type 30 has an invalid length. [ 799.573556][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 799.603792][ T5936] usbhid 3-1:8.225: couldn't find an input interrupt endpoint [ 799.654156][ T5936] usb 3-1: USB disconnect, device number 14 [ 799.794523][T15938] 9pnet_fd: Insufficient options for proto=fd [ 800.748089][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 801.033238][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.298606][ T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 801.316875][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 801.343565][ T10] usb 2-1: Manufacturer: syz [ 801.371809][ T10] usb 2-1: config 0 descriptor?? [ 801.447749][T15946] ntfs3(nullb0): Primary boot signature is not NTFS. [ 801.455147][T15946] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 802.011822][ T10] rc_core: IR keymap rc-hauppauge not found [ 802.081460][ T10] Registered IR keymap rc-empty [ 802.208595][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 802.369272][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 802.463664][T15957] FAULT_INJECTION: forcing a failure. [ 802.463664][T15957] name failslab, interval 1, probability 0, space 0, times 0 [ 802.479794][T15957] CPU: 1 UID: 0 PID: 15957 Comm: syz.5.3549 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 802.479824][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 802.479837][T15957] Call Trace: [ 802.479845][T15957] [ 802.479854][T15957] dump_stack_lvl+0x189/0x250 [ 802.479890][T15957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.479918][T15957] ? __pfx__printk+0x10/0x10 [ 802.479956][T15957] ? __pfx___might_resched+0x10/0x10 [ 802.479984][T15957] ? fs_reclaim_acquire+0x7d/0x100 [ 802.480011][T15957] should_fail_ex+0x414/0x560 [ 802.480047][T15957] should_failslab+0xa8/0x100 [ 802.480080][T15957] __kmalloc_noprof+0xcb/0x4f0 [ 802.480107][T15957] ? kfree+0x4d/0x440 [ 802.480130][T15957] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 802.480171][T15957] tomoyo_realpath_from_path+0xe3/0x5d0 [ 802.480198][T15957] ? tomoyo_domain+0xda/0x130 [ 802.480230][T15957] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 802.480251][T15957] tomoyo_path_number_perm+0x1e8/0x5a0 [ 802.480274][T15957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 802.480343][T15957] ? __pfx_current_check_access_path+0x10/0x10 [ 802.480372][T15957] ? d_alloc+0x144/0x190 [ 802.480396][T15957] ? lookup_one_qstr_excl_raw+0x126/0x280 [ 802.480422][T15957] tomoyo_path_mkdir+0xa8/0xe0 [ 802.480449][T15957] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 802.480480][T15957] ? __pfx_filename_create+0x10/0x10 [ 802.480511][T15957] security_path_mkdir+0x171/0x380 [ 802.480542][T15957] do_mkdirat+0x1bd/0x590 [ 802.480570][T15957] ? __pfx_do_mkdirat+0x10/0x10 [ 802.480598][T15957] ? getname_flags+0x1e5/0x540 [ 802.480622][T15957] __x64_sys_mkdirat+0x87/0xa0 [ 802.480650][T15957] do_syscall_64+0xf6/0x210 [ 802.480671][T15957] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.480691][T15957] ? clear_bhb_loop+0x45/0xa0 [ 802.480716][T15957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.480735][T15957] RIP: 0033:0x7f02f7b8e969 [ 802.480753][T15957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.480770][T15957] RSP: 002b:00007f02f8920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 802.480797][T15957] RAX: ffffffffffffffda RBX: 00007f02f7db5fa0 RCX: 00007f02f7b8e969 [ 802.480812][T15957] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 802.480826][T15957] RBP: 00007f02f8920090 R08: 0000000000000000 R09: 0000000000000000 [ 802.480838][T15957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.480850][T15957] R13: 0000000000000000 R14: 00007f02f7db5fa0 R15: 00007ffe70904208 [ 802.480883][T15957] [ 802.480960][T15957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 802.809307][ T5892] usb 2-1: USB disconnect, device number 22 [ 804.461775][T15967] 9pnet_fd: Insufficient options for proto=fd [ 805.640093][T13325] Bluetooth: hci3: command 0x0406 tx timeout [ 806.313360][T15978] ntfs3(nullb0): Primary boot signature is not NTFS. [ 806.322143][T15978] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 806.569279][T15979] siw: device registration error -23 [ 806.838727][T15983] Invalid ELF header magic: != ELF [ 806.906129][T15983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3557'. [ 806.926784][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 807.901305][T15995] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 808.110326][T13909] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 808.367264][T13909] usb 3-1: device descriptor read/64, error -71 [ 808.685510][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.430551][T13909] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 810.530695][T13909] usb 3-1: device descriptor read/64, error -71 [ 811.424540][T16021] 9pnet_fd: Insufficient options for proto=fd [ 811.632491][T13909] usb usb3-port1: attempt power cycle [ 812.733186][T16032] ntfs3(nullb0): Primary boot signature is not NTFS. [ 812.740055][T16032] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 812.901554][T16035] Invalid ELF header magic: != ELF [ 813.064066][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3572'. [ 813.073383][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'. [ 814.884665][T16053] 9pnet_fd: Insufficient options for proto=fd [ 816.445497][ T6150] Bluetooth: hci6: Frame reassembly failed (-84) [ 816.567466][T16074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 816.815803][T16082] usb usb8: usbfs: process 16082 (syz.2.3587) did not claim interface 0 before use [ 818.442556][T13325] Bluetooth: hci6: command 0x1003 tx timeout [ 818.444155][ T5832] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 818.883228][T16095] 9pnet_fd: Insufficient options for proto=fd [ 819.001772][T16098] overlayfs: failed to resolve './bus': -2 [ 819.011179][ T30] audit: type=1326 audit(1745734546.383:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16097 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 819.151637][ T30] audit: type=1326 audit(1745734546.383:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16097 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 819.198396][ T30] audit: type=1326 audit(1745734546.383:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16097 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 819.557562][ T30] audit: type=1326 audit(1745734546.383:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16097 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x7ffc0000 [ 820.003271][T16109] usb usb8: usbfs: process 16109 (syz.2.3598) did not claim interface 0 before use [ 821.181637][T16120] FAULT_INJECTION: forcing a failure. [ 821.181637][T16120] name failslab, interval 1, probability 0, space 0, times 0 [ 821.195173][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.2.3600 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 821.195203][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 821.195216][T16120] Call Trace: [ 821.195224][T16120] [ 821.195232][T16120] dump_stack_lvl+0x189/0x250 [ 821.195267][T16120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.195294][T16120] ? __pfx__printk+0x10/0x10 [ 821.195331][T16120] ? __pfx___might_resched+0x10/0x10 [ 821.195365][T16120] should_fail_ex+0x414/0x560 [ 821.195401][T16120] should_failslab+0xa8/0x100 [ 821.195440][T16120] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 821.195471][T16120] ? __alloc_skb+0x112/0x2d0 [ 821.195504][T16120] __alloc_skb+0x112/0x2d0 [ 821.195527][T16120] netlink_sendmsg+0x5c6/0xb30 [ 821.195576][T16120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.195617][T16120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.195649][T16120] __sock_sendmsg+0x219/0x270 [ 821.195680][T16120] ____sys_sendmsg+0x505/0x830 [ 821.195707][T16120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.195740][T16120] ? import_iovec+0x74/0xa0 [ 821.195769][T16120] ___sys_sendmsg+0x21f/0x2a0 [ 821.195790][T16120] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.195838][T16120] ? __fget_files+0x2a/0x420 [ 821.195862][T16120] ? __fget_files+0x3a0/0x420 [ 821.195894][T16120] __x64_sys_sendmsg+0x19b/0x260 [ 821.195920][T16120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.195952][T16120] ? do_syscall_64+0xba/0x210 [ 821.195971][T16120] do_syscall_64+0xf6/0x210 [ 821.195988][T16120] ? asm_sysvec_call_function_single+0x1a/0x20 [ 821.196004][T16120] ? clear_bhb_loop+0x45/0xa0 [ 821.196023][T16120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.196038][T16120] RIP: 0033:0x7fe54058e969 [ 821.196053][T16120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.196067][T16120] RSP: 002b:00007fe541412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.196084][T16120] RAX: ffffffffffffffda RBX: 00007fe5407b6080 RCX: 00007fe54058e969 [ 821.196096][T16120] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 821.196106][T16120] RBP: 00007fe541412090 R08: 0000000000000000 R09: 0000000000000000 [ 821.196116][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.196125][T16120] R13: 0000000000000000 R14: 00007fe5407b6080 R15: 00007ffdd6345858 [ 821.196154][T16120] [ 821.755798][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 822.952960][T16140] 9pnet_fd: Insufficient options for proto=fd [ 823.043954][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3607'. [ 823.203604][T16148] usb usb8: usbfs: process 16148 (syz.3.3610) did not claim interface 0 before use [ 824.830519][T16144] team0: Port device team_slave_0 removed [ 824.991761][T16169] FAULT_INJECTION: forcing a failure. [ 824.991761][T16169] name failslab, interval 1, probability 0, space 0, times 0 [ 825.046531][T16169] CPU: 1 UID: 0 PID: 16169 Comm: syz.1.3616 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 825.046572][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 825.046587][T16169] Call Trace: [ 825.046595][T16169] [ 825.046605][T16169] dump_stack_lvl+0x189/0x250 [ 825.046641][T16169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.046669][T16169] ? __pfx__printk+0x10/0x10 [ 825.046704][T16169] ? __pfx___might_resched+0x10/0x10 [ 825.046732][T16169] ? fs_reclaim_acquire+0x7d/0x100 [ 825.046759][T16169] should_fail_ex+0x414/0x560 [ 825.046797][T16169] should_failslab+0xa8/0x100 [ 825.046831][T16169] __kmalloc_noprof+0xcb/0x4f0 [ 825.046859][T16169] ? kfree+0x4d/0x440 [ 825.046883][T16169] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 825.046915][T16169] tomoyo_realpath_from_path+0xe3/0x5d0 [ 825.046944][T16169] ? tomoyo_domain+0xda/0x130 [ 825.046976][T16169] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 825.046998][T16169] tomoyo_path_number_perm+0x1e8/0x5a0 [ 825.047023][T16169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 825.047063][T16169] ? __lock_acquire+0xaac/0xd20 [ 825.047110][T16169] ? __fget_files+0x2a/0x420 [ 825.047145][T16169] ? __fget_files+0x3a0/0x420 [ 825.047175][T16169] ? __fget_files+0x2a/0x420 [ 825.047210][T16169] security_file_ioctl+0xcb/0x2d0 [ 825.047235][T16169] __se_sys_ioctl+0x47/0x170 [ 825.047263][T16169] do_syscall_64+0xf6/0x210 [ 825.047286][T16169] ? clear_bhb_loop+0x45/0xa0 [ 825.047311][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.047332][T16169] RIP: 0033:0x7f7963f8e969 [ 825.047351][T16169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.047368][T16169] RSP: 002b:00007f7964e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.047389][T16169] RAX: ffffffffffffffda RBX: 00007f79641b5fa0 RCX: 00007f7963f8e969 [ 825.047403][T16169] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 825.047415][T16169] RBP: 00007f7964e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 825.047428][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.047440][T16169] R13: 0000000000000000 R14: 00007f79641b5fa0 R15: 00007ffed3818328 [ 825.047473][T16169] [ 825.047482][T16169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 826.459204][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3619'. [ 826.506079][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3619'. [ 826.588626][T16185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 826.934717][T16195] 9pnet_fd: Insufficient options for proto=fd [ 827.209850][ T30] audit: type=1326 audit(1745734554.592:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16197 comm="syz.2.3624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe54058e969 code=0x0 [ 827.241103][T16200] usb usb8: usbfs: process 16200 (syz.0.3623) did not claim interface 0 before use [ 828.016150][T16211] delete_channel: no stack [ 828.232835][ T5872] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 828.342727][T14928] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 828.617606][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 828.657051][ T5872] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 828.815492][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.869445][ T5872] usb 3-1: config 0 descriptor?? [ 828.962561][T14928] usb 6-1: device descriptor read/64, error -71 [ 829.165499][T16209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.202796][T14928] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 829.241113][T16209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.582523][T14928] usb 6-1: device descriptor read/64, error -71 [ 829.702938][T14928] usb usb6-port1: attempt power cycle [ 829.884707][T16239] 9pnet_fd: Insufficient options for proto=fd [ 829.963016][ T5872] ath6kl: Failed to submit usb control message: -110 [ 829.972211][ T5872] ath6kl: unable to send the bmi data to the device: -110 [ 829.984946][ T5872] ath6kl: Unable to send get target info: -110 [ 830.003223][ T5872] ath6kl: Failed to init ath6kl core: -110 [ 830.015176][ T5872] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 830.221360][T14928] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 830.244260][T14928] usb 6-1: device descriptor read/8, error -71 [ 830.422747][ T5872] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 830.493883][T14928] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 830.579518][T14928] usb 6-1: device descriptor read/8, error -71 [ 831.104679][T16156] usb 3-1: USB disconnect, device number 18 [ 831.166467][T14928] usb usb6-port1: unable to enumerate USB device [ 831.262881][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 831.293870][T13325] Bluetooth: hci0: command 0x0406 tx timeout [ 831.315355][ T5872] usb 4-1: not running at top speed; connect to a high speed hub [ 831.369162][ T5872] usb 4-1: config 8 has an invalid interface number: 225 but max is 0 [ 831.411978][ T5872] usb 4-1: config 8 has no interface number 0 [ 831.810654][ T5872] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84 [ 831.820180][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.829253][ T5872] usb 4-1: Product: syz [ 831.833596][ T5872] usb 4-1: Manufacturer: syz [ 831.838916][ T5872] usb 4-1: SerialNumber: syz [ 831.943229][ T30] audit: type=1326 audit(1745734559.311:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16250 comm="syz.1.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7963f8e969 code=0x7ffc0000 [ 832.107205][ T30] audit: type=1326 audit(1745734559.311:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16250 comm="syz.1.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7963f8e969 code=0x7ffc0000 [ 832.147725][ T5872] usbhid 4-1:8.225: couldn't find an input interrupt endpoint [ 832.189972][ T5872] usb 4-1: USB disconnect, device number 24 [ 832.569187][T16276] 9pnet_fd: Insufficient options for proto=fd [ 832.830166][T16280] input: syz0 as /devices/virtual/input/input31 [ 836.314231][ T30] audit: type=1326 audit(1745734563.701:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16322 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7963f8e969 code=0x7ffc0000 [ 836.375697][ T30] audit: type=1326 audit(1745734563.721:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16322 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7963f8e969 code=0x7ffc0000 [ 836.416610][ T30] audit: type=1326 audit(1745734563.721:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16322 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f7963f8e969 code=0x7ffc0000 [ 836.456200][ T30] audit: type=1326 audit(1745734563.721:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16322 comm="syz.1.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7963f8e969 code=0x7ffc0000 [ 836.610517][T16328] 9pnet_fd: Insufficient options for proto=fd [ 836.689879][T13325] Bluetooth: hci2: command 0x0406 tx timeout [ 837.367923][T16332] openvswitch: netlink: IP tunnel dst address not specified [ 837.663153][T16340] Invalid ELF header magic: != ELF [ 837.846543][T16340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3666'. [ 837.856001][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3666'. [ 841.960262][T16366] 9pnet_fd: Insufficient options for proto=fd [ 842.550349][T16373] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3674'. [ 842.565569][T16373] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 842.573708][T16373] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 842.584252][T16373] netlink: 'syz.0.3674': attribute type 2 has an invalid length. [ 842.687871][T16377] fuse: Bad value for 'fd' [ 842.724131][ T5875] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 842.734198][T16373] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 842.742006][T16373] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 842.937655][T16382] syz.2.3677 (16382): /proc/16374/oom_adj is deprecated, please use /proc/16374/oom_score_adj instead. [ 843.605390][ T5875] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 843.613603][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.651381][ T5875] usb 4-1: config 0 has no interface number 0 [ 843.663475][ T5875] usb 4-1: too many endpoints for config 0 interface 105 altsetting 109: 48, using maximum allowed: 30 [ 843.677775][ T5875] usb 4-1: config 0 interface 105 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 843.733322][ T5875] usb 4-1: config 0 interface 105 has no altsetting 0 [ 843.772813][ T5875] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.784246][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.808554][T16385] delete_channel: no stack [ 843.826205][ T5875] usb 4-1: Product: syz [ 843.853397][ T5875] usb 4-1: Manufacturer: syz [ 843.867266][ T5875] usb 4-1: SerialNumber: syz [ 843.912103][ T5875] usb 4-1: config 0 descriptor?? [ 844.125971][T15257] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 844.386297][T15257] usb 1-1: unable to get BOS descriptor or descriptor too short [ 844.439076][T15257] usb 1-1: not running at top speed; connect to a high speed hub [ 844.448529][ T5875] usb 4-1: USB disconnect, device number 25 [ 844.507588][T15257] usb 1-1: config 8 has an invalid interface number: 225 but max is 0 [ 844.538868][T15257] usb 1-1: config 8 has no interface number 0 [ 844.545237][T16402] usb usb8: usbfs: process 16402 (syz.5.3684) did not claim interface 0 before use [ 844.609570][T15257] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84 [ 844.619161][T15257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.858525][T15257] usb 1-1: Product: syz [ 844.862802][T15257] usb 1-1: Manufacturer: syz [ 844.867747][T15257] usb 1-1: SerialNumber: syz [ 845.672972][T15257] usbhid 1-1:8.225: couldn't find an input interrupt endpoint [ 846.453115][T15257] usb 1-1: USB disconnect, device number 30 [ 846.602911][T16433] netlink: 'syz.1.3691': attribute type 1 has an invalid length. [ 846.621553][T16433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3691'. [ 847.003920][T16438] Invalid ELF header magic: != ELF [ 847.304776][T16436] bridge_slave_0: left allmulticast mode [ 847.310595][T16436] bridge_slave_0: left promiscuous mode [ 847.316607][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.367949][T16436] bridge_slave_1: left allmulticast mode [ 847.373662][T16436] bridge_slave_1: left promiscuous mode [ 847.394995][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.435597][T16436] bond0: (slave bond_slave_0): Releasing backup interface [ 847.489176][T16436] bond0: (slave bond_slave_1): Releasing backup interface [ 847.521376][T16436] team0: Port device team_slave_1 removed [ 847.530744][T16436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.540286][T16436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.549394][T16436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.557517][T16436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.611053][T16441] team_slave_0: entered promiscuous mode [ 847.616888][T16441] team_slave_1: entered promiscuous mode [ 847.632837][T16441] team_slave_0: left promiscuous mode [ 847.638440][T16441] team_slave_1: left promiscuous mode [ 847.713853][T16440] delete_channel: no stack [ 847.902973][T16454] usb usb8: usbfs: process 16454 (syz.3.3696) did not claim interface 0 before use [ 848.193743][T16469] loop6: detected capacity change from 0 to 63 [ 851.085658][T16491] tmpfs: Bad value for 'mpol' [ 851.385306][ T5823] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 852.308677][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 852.407651][T16510] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3710'. [ 852.846752][ T5823] usb 6-1: not running at top speed; connect to a high speed hub [ 853.369300][ T5823] usb 6-1: config 8 has an invalid interface number: 225 but max is 0 [ 853.398140][ T5823] usb 6-1: config 8 has no interface number 0 [ 853.464657][ T5823] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84 [ 853.641137][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.130660][ T5823] usb 6-1: Product: syz [ 855.134908][ T5823] usb 6-1: Manufacturer: syz [ 855.169627][ T5823] usb 6-1: SerialNumber: syz [ 855.374664][ T5823] usb 6-1: can't set config #8, error -71 [ 856.842190][ T5823] usb 6-1: USB disconnect, device number 8 [ 857.096150][T16538] program syz.5.3717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.809339][T16542] program syz.0.3716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.062433][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 858.072778][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:5 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 858.072809][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 858.072824][ T5832] Workqueue: hci2 hci_rx_work [ 858.072853][ T5832] Call Trace: [ 858.072862][ T5832] [ 858.072873][ T5832] dump_stack_lvl+0x189/0x250 [ 858.072905][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.072926][ T5832] ? __pfx__printk+0x10/0x10 [ 858.072951][ T5832] ? __rcu_read_unlock+0x84/0xe0 [ 858.072967][ T5832] ? kernfs_path_from_node+0x2b/0x260 [ 858.072983][ T5832] ? kernfs_path_from_node+0x216/0x260 [ 858.073000][ T5832] sysfs_create_dir_ns+0x259/0x280 [ 858.073025][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 858.073050][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 858.073069][ T5832] kobject_add_internal+0x59f/0xb40 [ 858.073094][ T5832] kobject_add+0x155/0x220 [ 858.073114][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 858.073131][ T5832] ? _raw_spin_unlock+0x3f/0x50 [ 858.073155][ T5832] ? get_device_parent+0x366/0x3a0 [ 858.073176][ T5832] device_add+0x408/0xb50 [ 858.073195][ T5832] hci_conn_add_sysfs+0xd5/0x1e0 [ 858.073213][ T5832] le_conn_complete_evt+0xc3a/0x1220 [ 858.073245][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 858.073266][ T5832] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 858.073280][ T5832] ? __asan_memcpy+0x40/0x70 [ 858.073300][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 858.073315][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 858.073328][ T5832] ? skb_pull_data+0xfb/0x200 [ 858.073352][ T5832] hci_le_conn_complete_evt+0x187/0x450 [ 858.073378][ T5832] hci_event_packet+0x7a2/0x1270 [ 858.073401][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 858.073421][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 858.073446][ T5832] ? hci_send_to_monitor+0xd7/0x4f0 [ 858.073470][ T5832] hci_rx_work+0x46a/0xe80 [ 858.073494][ T5832] ? process_scheduled_works+0x9ec/0x17a0 [ 858.073518][ T5832] process_scheduled_works+0xadb/0x17a0 [ 858.073562][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 858.073597][ T5832] worker_thread+0x8a0/0xda0 [ 858.073657][ T5832] kthread+0x70e/0x8a0 [ 858.073676][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 858.073698][ T5832] ? __pfx_kthread+0x10/0x10 [ 858.073714][ T5832] ? __pfx_kthread+0x10/0x10 [ 858.073729][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 858.073750][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.073774][ T5832] ? __pfx_kthread+0x10/0x10 [ 858.073789][ T5832] ret_from_fork+0x4b/0x80 [ 858.073802][ T5832] ? __pfx_kthread+0x10/0x10 [ 858.073817][ T5832] ret_from_fork_asm+0x1a/0x30 [ 858.073853][ T5832] [ 858.374289][ T5832] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 858.388570][ T5832] Bluetooth: hci2: failed to register connection device [ 859.347959][T16558] FAULT_INJECTION: forcing a failure. [ 859.347959][T16558] name failslab, interval 1, probability 0, space 0, times 0 [ 859.370317][T16558] CPU: 1 UID: 0 PID: 16558 Comm: syz.0.3720 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 859.370353][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 859.370368][T16558] Call Trace: [ 859.370377][T16558] [ 859.370387][T16558] dump_stack_lvl+0x189/0x250 [ 859.370426][T16558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.370456][T16558] ? __pfx__printk+0x10/0x10 [ 859.370493][T16558] ? __pfx___might_resched+0x10/0x10 [ 859.370525][T16558] ? fs_reclaim_acquire+0x7d/0x100 [ 859.370555][T16558] should_fail_ex+0x414/0x560 [ 859.370595][T16558] should_failslab+0xa8/0x100 [ 859.370630][T16558] __kmalloc_noprof+0xcb/0x4f0 [ 859.370662][T16558] ? tomoyo_encode+0x28b/0x550 [ 859.370695][T16558] tomoyo_encode+0x28b/0x550 [ 859.370730][T16558] tomoyo_realpath_from_path+0x58d/0x5d0 [ 859.370760][T16558] ? tomoyo_domain+0xda/0x130 [ 859.370795][T16558] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 859.370823][T16558] tomoyo_path_number_perm+0x1e8/0x5a0 [ 859.370850][T16558] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 859.370894][T16558] ? __lock_acquire+0xaac/0xd20 [ 859.370946][T16558] ? __fget_files+0x2a/0x420 [ 859.370986][T16558] ? __fget_files+0x3a0/0x420 [ 859.371017][T16558] ? __fget_files+0x2a/0x420 [ 859.371055][T16558] security_file_ioctl+0xcb/0x2d0 [ 859.371083][T16558] __se_sys_ioctl+0x47/0x170 [ 859.371113][T16558] do_syscall_64+0xf6/0x210 [ 859.371139][T16558] ? clear_bhb_loop+0x45/0xa0 [ 859.371168][T16558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.371190][T16558] RIP: 0033:0x7f627ed8e969 [ 859.371210][T16558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.371229][T16558] RSP: 002b:00007f627fcc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.371261][T16558] RAX: ffffffffffffffda RBX: 00007f627efb5fa0 RCX: 00007f627ed8e969 [ 859.371277][T16558] RDX: 0000200000000000 RSI: 0000000000008b0f RDI: 0000000000000004 [ 859.371292][T16558] RBP: 00007f627fcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 859.371306][T16558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.371320][T16558] R13: 0000000000000000 R14: 00007f627efb5fa0 R15: 00007fff04643c18 [ 859.371357][T16558] [ 859.920888][T16558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 859.957657][ T5823] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 860.266239][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 861.212728][ T31] INFO: task syz.4.3287:15019 blocked for more than 143 seconds. [ 861.246355][ T31] Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 [ 861.257943][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.756114][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.764976][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 861.773961][ T31] task:syz.4.3287 state:D stack:23784 pid:15019 tgid:15018 ppid:14432 task_flags:0x400140 flags:0x00004006 [ 861.786189][ T31] Call Trace: [ 861.789636][ T31] [ 861.792627][ T31] __schedule+0x168f/0x4c70 [ 861.799184][ T31] ? validate_chain+0x897/0x2140 [ 861.804380][ T5823] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 861.813542][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.821595][ T5823] usb 2-1: Product: syz [ 861.825780][ T5823] usb 2-1: Manufacturer: syz [ 861.830454][ T5823] usb 2-1: SerialNumber: syz [ 861.862991][ T31] ? schedule+0x165/0x360 [ 861.872084][ T31] ? __pfx___schedule+0x10/0x10 [ 861.877195][ T31] ? schedule+0x91/0x360 [ 861.881511][ T31] schedule+0x165/0x360 [ 861.885714][ T31] schedule_timeout+0x9a/0x270 [ 861.890902][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 861.896395][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 861.901647][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 862.073782][ T5823] usb 2-1: 0:2 : does not exist [ 862.094184][ T31] ? wait_for_completion+0x267/0x5d0 [ 862.100320][ T31] wait_for_completion+0x2bf/0x5d0 [ 862.105540][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 862.109134][T15257] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 862.111419][ T31] ? up_write+0x1c4/0x420 [ 862.123887][ T31] ? remove_client_context+0xc0/0x1e0 [ 862.129546][ T31] disable_device+0x1c6/0x320 [ 862.134260][ T31] ? __pfx_disable_device+0x10/0x10 [ 862.139614][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 862.143556][ T5823] usb 2-1: USB disconnect, device number 23 [ 862.145196][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 862.159264][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 862.165061][ T31] nldev_dellink+0x2d1/0x320 [ 862.308032][T15257] usb 1-1: unable to get BOS descriptor or descriptor too short [ 862.323181][T15257] usb 1-1: not running at top speed; connect to a high speed hub [ 862.338493][T15257] usb 1-1: config 8 has an invalid interface number: 225 but max is 0 [ 862.392401][T15257] usb 1-1: config 8 has no interface number 0 [ 862.407305][T15257] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84 [ 862.422248][T15257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.431055][T15257] usb 1-1: Product: syz [ 862.435452][T15257] usb 1-1: Manufacturer: syz [ 862.444055][T15257] usb 1-1: SerialNumber: syz [ 862.486437][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 862.491966][ T31] ? rcu_is_watching+0x15/0xb0 [ 862.501940][ T31] ? cap_capable+0x11f/0x460 [ 862.509021][ T31] ? safesetid_security_capable+0xa9/0x1a0 [ 862.515079][ T31] ? bpf_lsm_capable+0x9/0x20 [ 862.523698][ T31] ? security_capable+0x7e/0x2e0 [ 862.531810][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 862.540866][ T31] rdma_nl_rcv+0x6bf/0x9a0 [ 862.545992][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 862.553979][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 862.564353][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 862.572870][ T31] netlink_unicast+0x758/0x8d0 [ 862.582430][ T31] netlink_sendmsg+0x805/0xb30 [ 862.587407][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.592953][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 862.598526][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.603966][ T31] __sock_sendmsg+0x219/0x270 [ 862.608943][ T31] ____sys_sendmsg+0x505/0x830 [ 862.613776][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.619352][ T31] ? import_iovec+0x74/0xa0 [ 862.623912][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 862.628722][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.634135][ T31] ? __fget_files+0x2a/0x420 [ 862.646408][ T31] ? __fget_files+0x3a0/0x420 [ 862.651183][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 862.656163][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.666550][ T31] ? do_syscall_64+0xba/0x210 [ 862.671323][ T31] do_syscall_64+0xf6/0x210 [ 862.675861][ T31] ? clear_bhb_loop+0x45/0xa0 [ 862.683825][T15257] usbhid 1-1:8.225: couldn't find an input interrupt endpoint [ 862.684844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.704490][T15257] usb 1-1: USB disconnect, device number 31 [ 862.708316][ T31] RIP: 0033:0x7ff9a878e969 [ 862.715107][ T31] RSP: 002b:00007ff9a65f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.723748][ T31] RAX: ffffffffffffffda RBX: 00007ff9a89b5fa0 RCX: 00007ff9a878e969 [ 862.731963][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 862.740118][ T31] RBP: 00007ff9a8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 862.748175][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.756180][ T31] R13: 0000000000000000 R14: 00007ff9a89b5fa0 R15: 00007ffccde72818 [ 862.764265][ T31] [ 862.768891][ T31] [ 862.768891][ T31] Showing all locks held in the system: [ 862.866137][ T31] 4 locks held by kworker/u8:1/13: [ 862.872508][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 862.883807][ T31] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 862.896528][ T31] #2: ffffffff8f2d49d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 862.906041][ T31] #3: ffff88807984c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 862.917750][ T31] 1 lock held by khungtaskd/31: [ 862.922644][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 862.932848][ T31] 2 locks held by getty/5573: [ 862.937891][ T31] #0: ffff8880348a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 862.947928][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 862.958237][ T31] 5 locks held by kworker/u8:9/6150: [ 862.963586][ T31] #0: ffff8880b89399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 862.974763][ T31] #1: ffffc9000b6cfc60 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 862.988538][ T31] #2: ffffffff99a9ec88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 862.999092][ T31] #3: ffffffff99a3e748 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 863.009514][ T31] #4: ffff8880b89399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 863.019518][ T31] 2 locks held by syz.4.3287/15019: [ 863.024721][ T31] #0: ffffffff99b8cd38 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x316/0x9a0 [ 863.034816][ T31] #1: ffff88807984c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 863.046450][ T31] 1 lock held by syz-executor/15170: [ 863.051770][ T31] #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 863.062793][ T31] [ 863.071831][ T31] ============================================= [ 863.071831][ T31] [ 863.087744][ T31] NMI backtrace for cpu 0 [ 863.087767][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 863.087792][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.087804][ T31] Call Trace: [ 863.087812][ T31] [ 863.087821][ T31] dump_stack_lvl+0x189/0x250 [ 863.087851][ T31] ? __wake_up_klogd+0xd9/0x110 [ 863.087877][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.087902][ T31] ? __pfx__printk+0x10/0x10 [ 863.087946][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 863.087977][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 863.088000][ T31] ? _printk+0xcf/0x120 [ 863.088034][ T31] ? __pfx__printk+0x10/0x10 [ 863.088065][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 863.088099][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 863.088135][ T31] watchdog+0xfee/0x1030 [ 863.088161][ T31] ? watchdog+0x1de/0x1030 [ 863.088190][ T31] kthread+0x70e/0x8a0 [ 863.088215][ T31] ? __pfx_watchdog+0x10/0x10 [ 863.088235][ T31] ? __pfx_kthread+0x10/0x10 [ 863.088256][ T31] ? __pfx_kthread+0x10/0x10 [ 863.088276][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.088305][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.088336][ T31] ? __pfx_kthread+0x10/0x10 [ 863.088355][ T31] ret_from_fork+0x4b/0x80 [ 863.088372][ T31] ? __pfx_kthread+0x10/0x10 [ 863.088392][ T31] ret_from_fork_asm+0x1a/0x30 [ 863.088436][ T31] [ 863.088443][ T31] Sending NMI from CPU 0 to CPUs 1: [ 863.236767][ C1] NMI backtrace for cpu 1 [ 863.236789][ C1] CPU: 1 UID: 0 PID: 8053 Comm: kworker/u8:12 Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 863.236810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.236822][ C1] Workqueue: bat_events batadv_nc_worker [ 863.236859][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 863.236883][ C1] Code: 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 d0 71 92 65 8b 0d f8 0d b2 10 81 e1 00 01 ff 00 [ 863.236899][ C1] RSP: 0018:ffffc9001c1a7ab8 EFLAGS: 00000246 [ 863.236913][ C1] RAX: ffffffff8b1c8b13 RBX: 0000000000000001 RCX: ffff8880553c0000 [ 863.236926][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 863.236936][ C1] RBP: ffff888079f30b20 R08: 0000000000000000 R09: 0000000000000000 [ 863.236947][ C1] R10: 0000000000000000 R11: ffffffff8b1c8ae2 R12: dffffc0000000000 [ 863.236959][ C1] R13: ffffffff8b1c8ae2 R14: ffff8880114c8d80 R15: 0000000000000164 [ 863.236972][ C1] FS: 0000000000000000(0000) GS:ffff888126203000(0000) knlGS:0000000000000000 [ 863.236986][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.236998][ C1] CR2: 0000001b3211cff8 CR3: 00000000327a2000 CR4: 00000000003526f0 [ 863.237012][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 863.237022][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 863.237033][ C1] Call Trace: [ 863.237039][ C1] [ 863.237046][ C1] batadv_nc_worker+0x103/0x610 [ 863.237075][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 863.237103][ C1] process_scheduled_works+0xadb/0x17a0 [ 863.237144][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 863.237178][ C1] worker_thread+0x8a0/0xda0 [ 863.237205][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 863.237236][ C1] ? __kthread_parkme+0x7b/0x200 [ 863.237268][ C1] kthread+0x70e/0x8a0 [ 863.237287][ C1] ? __pfx_worker_thread+0x10/0x10 [ 863.237312][ C1] ? __pfx_kthread+0x10/0x10 [ 863.237330][ C1] ? __pfx_kthread+0x10/0x10 [ 863.237353][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.237376][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.237403][ C1] ? __pfx_kthread+0x10/0x10 [ 863.237419][ C1] ret_from_fork+0x4b/0x80 [ 863.237436][ C1] ? __pfx_kthread+0x10/0x10 [ 863.237452][ C1] ret_from_fork_asm+0x1a/0x30 [ 863.237489][ C1] [ 863.237821][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 863.482927][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00337-gd22aad29de2a #0 PREEMPT(full) [ 863.494777][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.504848][ T31] Call Trace: [ 863.508143][ T31] [ 863.511084][ T31] dump_stack_lvl+0x99/0x250 [ 863.515694][ T31] ? __asan_memcpy+0x40/0x70 [ 863.520296][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.525527][ T31] ? __pfx__printk+0x10/0x10 [ 863.530148][ T31] panic+0x2db/0x790 [ 863.534060][ T31] ? __pfx_panic+0x10/0x10 [ 863.538489][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 863.543883][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 863.549270][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 863.555466][ T31] watchdog+0x102d/0x1030 [ 863.559816][ T31] ? watchdog+0x1de/0x1030 [ 863.564245][ T31] kthread+0x70e/0x8a0 [ 863.568336][ T31] ? __pfx_watchdog+0x10/0x10 [ 863.573111][ T31] ? __pfx_kthread+0x10/0x10 [ 863.577733][ T31] ? __pfx_kthread+0x10/0x10 [ 863.582330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.587549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.592766][ T31] ? __pfx_kthread+0x10/0x10 [ 863.597454][ T31] ret_from_fork+0x4b/0x80 [ 863.601881][ T31] ? __pfx_kthread+0x10/0x10 [ 863.606479][ T31] ret_from_fork_asm+0x1a/0x30 [ 863.611268][ T31] [ 863.614593][ T31] Kernel Offset: disabled [ 863.618948][ T31] Rebooting in 86400 seconds..